Function at 0x100060640
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xd0
mov qword [rsp + 0xc0], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
mov rax, qword [0x100165138]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov rbx, rcx
mov qword [rsp + 0x38], rcx
xor ebp, ebp
mov dword [rsp + 0x40], ebp
and qword [rsp + 0x50], rbp
and qword [rsp + 0x68], rbp
xor r12d, r12d
mov qword [rsp + 0x70], r12
xor r13d, r13d
mov qword [rsp + 0x40], r13
or qword [rsp + 0x48], 0xffffffffffffffff
and qword [rsp + 0x58], rbp
and qword [r11 - 0x70], rbp
and qword [r11 - 0x68], rbp
and qword [r11 - 0x60], rbp
and dword [r11 - 0x58], ebp
and qword [rsp + 0x60], r13
xor r15d, r15d
mov qword [rsp + 0x30], r15
lea rdi, [0x1001653b8]
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x1000606ff
test byte [rcx + 0x1c], 1
je 0x1000606ff
cmp byte [rcx + 0x19], 4
jb 0x1000606ff
lea edx, [rbp + 0x68]
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
call fcn.1000efbfc
mov r14, rax
test rax, rax
jne 0x100060716
mov ebx, 0x8007000e
jmp 0x100060e26
mov rax, qword [rax]
mov rdx, qword [rbx + 0x1c0]
mov rcx, r14
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rdx, r14
lea rcx, [rsp + 0x60]
call fcn.10013d364
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100060767
test byte [rcx + 0x1c], 1
je 0x100060767
cmp byte [rcx + 0x19], 4
jb 0x100060767
mov edx, 0x69
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
mov rcx, qword [0x1001653b8]
xor esi, esi
cmp dword [rbx + 0x14c], esi
jbe 0x1000608e4
xor edi, edi
test r15, r15
je 0x100060794
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
xor r15d, r15d
mov qword [rsp + 0x30], r15
mov rcx, qword [0x1001653b8]
mov rdx, qword [rbx + 0x108]
test byte [rdi + rdx + 0x4c], 1
jne 0x1000608bd
mov rcx, qword [rdi + rdx + 0x88]
test rcx, rcx
jne 0x1000607d5
lea rcx, [rsi + rsi*2]
shl rcx, 6
lea rcx, [rcx + rdx + 0x3c]
xor r9d, r9d
lea r8, [rsp + 0x30]
mov edx, dword [rdi + rdx + 0x4c]
call fcn.10009cbc4
mov ebx, eax
jmp 0x1000607e4
xor r8d, r8d
lea rdx, [rsp + 0x30]
call fcn.10009bac4
mov ebx, eax
test ebx, ebx
js 0x1000608d3
mov r15, qword [rsp + 0x30]
mov rax, qword [0x1001653b8]
lea rcx, [0x1001653b8]
cmp rax, rcx
je 0x100060862
test byte [rax + 0x1c], 1
je 0x100060870
cmp byte [rax + 0x19], 4
jb 0x100060869
lea rcx, [rsi + rsi*2]
shl rcx, 6
mov rbx, qword [rsp + 0x38]
mov rax, qword [rbx + 0x108]
lea rdx, [rcx + rax + 0x50]
lea rcx, [rsp + 0x80]
call fcn.100044104
or ebp, 1
mov rcx, qword [rax]
mov edx, 0x6a
mov qword [rsp + 0x20], rcx
mov r9, r15
lea r8, [0x100003c88]
mov rcx, qword [0x1001653b8]
mov rcx, qword [rcx + 0x10]
call fcn.10001df74
jmp 0x100060875
mov rbx, qword [rsp + 0x38]
jmp 0x100060875
mov rbx, qword [rsp + 0x38]
jmp 0x100060875
mov rbx, qword [rsp + 0x38]
test bpl, 1
je 0x10006088c
and ebp, 0xfffffffe
mov rcx, qword [rsp + 0x80]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbx + 0x108]
movdqu xmm0, xmmword [rdi + rax + 0x50]
movdqu xmmword [rsp + 0xb0], xmm0
mov rax, qword [r14]
lea r8, [rsp + 0xb0]
mov rdx, r15
mov rcx, r14
call qword [rax + 0x10]
mov rcx, qword [0x1001653b8]
inc esi
add rdi, 0xc0
cmp esi, dword [rbx + 0x14c]
jae 0x1000608dd
jmp 0x100060777
mov r15, qword [rsp + 0x30]
jmp 0x100060df6
lea rdi, [0x1001653b8]
cmp rcx, rdi
je 0x10006090a
test byte [rcx + 0x1c], 1
je 0x10006090a
cmp byte [rcx + 0x19], 4
jb 0x10006090a
mov edx, 0x6b
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
lea rsi, [rbx + 0xd0]
lea r9, [rsp + 0x50]
xor r8d, r8d
mov rdx, rsi
mov rcx, qword [rbx + 0xc8]
call fcn.100120d1c
mov ebx, eax
mov rbp, qword [rsp + 0x50]
test eax, eax
js 0x100060d95
and qword [rsp + 0x78], 0
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x68]
mov rcx, rbp
call fcn.100134868
lea r12, [0x100002df0]
test eax, eax
jns 0x1000609a6
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100060b1f
test byte [rcx + 0x1c], 1
je 0x100060af9
cmp byte [rcx + 0x19], 3
jb 0x100060af9
mov edx, 0x6c
mov dword [rsp + 0x20], eax
mov r9, rbp
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
jmp 0x100060af9
xor edi, edi
lea rcx, [0x100003c98]
mov rcx, qword [rdi + rcx]
test rcx, rcx
jne 0x1000609c1
xor ebx, ebx
mov qword [rsp + 0x50], rbx
jmp 0x1000609d8
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
mov qword [rsp + 0x50], rax
test rax, rax
je 0x100060d8a
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x88]
call fcn.100062e50
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
add rdi, 8
cmp rdi, 0x10
jb 0x1000609a8
mov rcx, qword [0x1001653b8]
lea rdi, [0x1001653b8]
cmp rcx, rdi
je 0x100060a2d
test byte [rcx + 0x1c], 1
je 0x100060a2d
cmp byte [rcx + 0x19], 4
jb 0x100060a2d
mov edx, 0xa
mov r8, r12
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
and qword [rsp + 0x30], 0
mov rbx, qword [rsp + 0x68]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.100072810
test eax, eax
jns 0x100060a67
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_RaiseException]
lea r8, [rsp + 0x88]
lea rdx, [rsp + 0x30]
lea rcx, [rsp + 0x60]
call fcn.10013d3c4
test eax, eax
jns 0x100060abd
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100060ae7
test byte [rcx + 0x1c], 1
je 0x100060ac4
cmp byte [rcx + 0x19], 3
jb 0x100060ac4
mov edx, 0xb
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x30]
mov r8, r12
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
jmp 0x100060ac4
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100060ae7
test byte [rcx + 0x1c], 1
je 0x100060ae7
cmp byte [rcx + 0x19], 4
jb 0x100060ae7
mov edx, 0xc
mov r8, r12
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
nop
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100060b1f
test byte [rcx + 0x1c], 1
je 0x100060b1f
cmp byte [rcx + 0x19], 4
jb 0x100060b1f
mov edx, 0x6d
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
lea rax, [rsp + 0x70]
mov qword [rsp + 0x20], rax
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
mov rdi, qword [rsp + 0x38]
mov rcx, qword [rdi + 0xc8]
call fcn.100120aac
mov ebx, eax
test eax, eax
js 0x100060d7e
xor r9d, r9d
lea r8, [rsp + 0x48]
lea rdx, [rsp + 0x40]
mov r12, qword [rsp + 0x70]
mov rcx, r12
call fcn.10010bd44
mov ebx, eax
test eax, eax
jns 0x100060bc6
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100060bb7
test byte [rcx + 0x1c], 1
je 0x100060bb7
cmp byte [rcx + 0x19], 2
jb 0x100060bb7
mov edx, 0x6e
mov dword [rsp + 0x20], ebx
mov r9, r12
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov r13, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
jmp 0x100060d9a
mov r13, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x48]
jmp 0x100060d9a
mov r13, qword [rsp + 0x40]
test r13, r13
je 0x100060d6d
mov rsi, qword [rsp + 0x48]
and qword [rsp + 0x78], 0
lea r8, [rsp + 0x78]
lea rdx, [rsp + 0x58]
mov rcx, r13
call fcn.100134868
mov ebx, eax
test eax, eax
js 0x100060d9a
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100060c2f
test byte [rcx + 0x1c], 1
je 0x100060c2f
cmp byte [rcx + 0x19], 4
jb 0x100060c2f
mov edx, 0xd
lea r8, [0x100002df0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
mov rbx, qword [rsp + 0x58]
test rbx, rbx
jne 0x100060c51
lea r8, [0x100007ce8]
mov edx, 0x8d
lea rcx, [0x100014d70]
call fcn.10009a050
and qword [rsp + 0x38], 0
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
mov r8d, eax
mov rdx, rbx
lea rcx, [rsp + 0x38]
call fcn.100072810
test eax, eax
jns 0x100060c86
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 1]
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_RaiseException]
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x60]
call fcn.10013d938
test eax, eax
jns 0x100060cdf
mov rcx, qword [0x1001653b8]
lea rdx, [0x1001653b8]
cmp rcx, rdx
je 0x100060d14
test byte [rcx + 0x1c], 1
je 0x100060ce6
cmp byte [rcx + 0x19], 3
jb 0x100060ce6
mov edx, 0xe
mov dword [rsp + 0x20], eax
mov r9, qword [rsp + 0x38]
lea r8, [0x100002df0]
mov rcx, qword [rcx + 0x10]
call fcn.10001ddb0
mov rcx, qword [0x1001653b8]
jmp 0x100060ce6
mov rcx, qword [0x1001653b8]
lea rax, [0x1001653b8]
cmp rcx, rax
je 0x100060d14
test byte [rcx + 0x1c], 1
je 0x100060d14
cmp byte [rcx + 0x19], 4
jb 0x100060d14
mov edx, 0xf
lea r8, [0x100002df0]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
nop
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, rbx
call qword [sym.imp.ole32.dll_CoTaskMemFree]
and qword [rsp + 0x58], 0
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
and qword [rsp + 0x40], 0
xor r9d, r9d
lea r8, [rsp + 0x40]
mov rdx, rsi
mov rcx, r12
call fcn.10010bf68
mov ebx, eax
test eax, eax
js 0x100060d66
mov r13, qword [rsp + 0x40]
test r13, r13
jne 0x100060bd9
jmp 0x100060d72
mov r13, qword [rsp + 0x40]
jmp 0x100060d9a
mov rsi, qword [rsp + 0x48]
mov qword [rdi + 0x178], r14
xor r14d, r14d
jmp 0x100060d9a
mov r12, qword [rsp + 0x70]
mov rsi, qword [rsp + 0x48]
jmp 0x100060d9a
mov ecx, 0x8007000e
call fcn.1000196c8
int3
mov rsi, qword [rsp + 0x48]
test rbp, rbp
je 0x100060da8
mov rcx, rbp
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x100060dbb
mov rcx, rax
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r12, r12
je 0x100060dc9
mov rcx, r12
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r13, r13
je 0x100060dd7
mov rcx, r13
call qword [sym.imp.ole32.dll_CoTaskMemFree]
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x100060de7
call qword [sym.imp.ole32.dll_CoTaskMemFree]
cmp rsi, 0xffffffffffffffff
je 0x100060df6
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindClose]
test r15, r15
je 0x100060e04
mov rcx, r15
call qword [sym.imp.ole32.dll_CoTaskMemFree]
test r14, r14
je 0x100060e1f
mov rax, qword [r14]
mov edx, 1
mov rcx, r14
call qword [rax]
lea rdi, [0x1001653b8]
jmp 0x100060e26
lea rdi, [0x1001653b8]
mov rcx, qword [0x1001653b8]
cmp rcx, rdi
je 0x100060e54
test byte [rcx + 0x1c], 1
je 0x100060e54
cmp byte [rcx + 0x19], 4
jb 0x100060e54
mov edx, 0x70
lea r8, [0x100003c88]
mov rcx, qword [rcx + 0x10]
call fcn.10001c854
nop
lea rcx, [rsp + 0x88]
call fcn.1000433c4
mov eax, ebx
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.10014e600
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret