Function at 0x140069f10
Capabilities:
Move file

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x310]
sub rsp, 0x410
mov qword [rbp + 0xa8], 0xfffffffffffffffe
mov qword [rsp + 0x460], rbx
mov rax, qword [0x1401bee90]
xor rax, rsp
mov qword [rbp + 0x300], rax
mov rbx, rdx
mov r13, rcx
mov qword [rbp + 0x20], rcx
xor r14d, r14d
mov r15d, r14d
mov dword [rsp + 0x68], r14d
mov qword [rbp - 0x30], r14
mov qword [rbp + 0x10], r14
mov qword [rbp - 0x58], r14
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x58]
mov qword [rsp + 0x28], rax
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r9, [rbp + 0x10]
lea r8, [rbp - 0x30]
mov rdx, rbx
call fcn.14000e6c0
test al, al
jne 0x14006a175
lea rcx, [r13 + 0xc8]
lea r8d, [r14 + 7]
lea rdx, [rsp + 0x48]
call fcn.14002a800
nop
mov rcx, qword [rsp + 0x48]
mov edi, 1
mov edx, edi
sub edx, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edx
jge 0x140069ff2
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.1400024e0
mov rcx, qword [rsp + 0x48]
mov rbx, rcx
sub edi, dword [rcx - 8]
mov eax, dword [rcx - 0xc]
or eax, edi
jge 0x14006a010
xor edx, edx
lea rcx, [rsp + 0x48]
call fcn.1400024e0
mov rcx, qword [rsp + 0x48]
mov rdx, rbx
call fcn.1400d1678
test eax, eax
je 0x14006a07c
mov edx, 0x5c
lea rcx, [rsp + 0x48]
call fcn.14001b360
mov edx, 0x2f2f
lea rcx, [rsp + 0x48]
call fcn.14001b360
lea r8, [rsp + 0x48]
lea rdx, str.missing
lea rcx, [rbp + 0x48]
call fcn.14001b6f0
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x58]
call fcn.140010000
nop
mov rdx, qword [rbp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a093
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006a093
mov r8d, 5
lea rdx, str.exist
lea rcx, [rsp + 0x58]
call fcn.140010000
lea r8, [0x1401500ac]
lea rdx, [0x1401501dc]
lea rcx, [rsp + 0x58]
call fcn.14000f0e0
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x70], rax
lea rdx, str.QueryInterfacesForSandBox_
test rdx, 0xffffffffffff0000
jne 0x14006a0f4
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006a0fe
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x70]
call fcn.1400026e0
jmp 0x14006a0fe
lea rcx, [rbp - 0x70]
call fcn.140003550
nop
lea r8, [rsp + 0x58]
lea rdx, [rbp - 0x70]
lea rcx, [rbp + 0x58]
call fcn.14000f540
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.14005c4a0
nop
mov rdx, qword [rbp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a13a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a153
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ae44
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006ae44
lea rcx, [r13 + 0xa0]
mov rdx, qword [rbp - 0x30]
call fcn.14000ec30
test al, al
je 0x14006ae44
mov word [rbp + 0x88], r14w
xor eax, eax
mov qword [rbp + 0x8a], rax
mov qword [rbp + 0x92], rax
mov dword [rbp + 0x9a], eax
mov word [rbp + 0x9e], ax
mov qword [rsp + 0x70], r14
mov rcx, qword [rbp - 0x58]
mov rax, qword [rcx]
lea r8, [rsp + 0x70]
lea rdx, [0x14013abe8]
call qword [rax]
mov edi, eax
lea rcx, [0x1401be9a8]
cmp qword [rsp + 0x70], 0
jne 0x14006a32d
mov rdx, qword [0x1401be9a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x68], rax
lea rdx, str.QueryInterfacesForWinEx
test rdx, 0xffffffffffff0000
jne 0x14006a223
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006a22d
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x68]
call fcn.1400026e0
jmp 0x14006a22d
lea rcx, [rbp - 0x68]
call fcn.140003550
nop
mov edx, edi
lea rcx, [rbp + 0xf0]
call fcn.1400513d0
mov rbx, rax
cmp qword [rax + 0x18], 0x10
jb 0x14006a248
mov rbx, qword [rax]
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x78], rax
test rbx, rbx
je 0x14006a291
test rbx, 0xffffffffffff0000
jne 0x14006a291
movzx ebx, bx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006a29f
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x78]
call fcn.1400026e0
jmp 0x14006a29f
mov rdx, rbx
lea rcx, [rsp + 0x78]
call fcn.140003550
nop
lea r8, [rsp + 0x78]
lea rdx, [rbp - 0x68]
lea rcx, [rbp + 0x78]
call fcn.14000f540
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.14005c4a0
nop
mov rdx, qword [rbp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a2db
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a2f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0x108], 0x10
jb 0x14006a30b
mov rcx, qword [rbp + 0xf0]
call fcn.1400cc890
mov qword [rbp + 0x108], 0xf
mov qword [rbp + 0x100], r14
mov byte [rbp + 0xf0], 0
mov rdx, qword [rbp - 0x68]
jmp 0x14006ae12
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x60], rbx
lea r8, str.CPPInternal
mov edi, 1
test r8, 0xffffffffffff0000
jne 0x14006a381
movzx r12d, r8w
mov ecx, r12d
call fcn.1400019e0
test rax, rax
je 0x14006a3f7
mov r8d, r12d
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.1400026e0
mov rbx, qword [rsp + 0x60]
jmp 0x14006a3f7
mov r13d, dword [rbx - 0x10]
mov r12, r8
sub r12, rbx
sar r12, 1
mov ecx, edi
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, 0xb
or eax, ecx
jge 0x14006a3b8
mov edx, 0xb
lea rcx, [rsp + 0x60]
call fcn.1400024e0
mov rbx, qword [rsp + 0x60]
lea r8, str.CPPInternal
movsxd rdx, dword [rbx - 0xc]
mov r9d, 0x16
mov rcx, rbx
add rdx, rdx
cmp r12, r13
ja 0x14006a3d8
lea r8, [rbx + r12*2]
call fcn.1400cd0d4
jmp 0x14006a3dd
call fcn.1400cd294
cmp dword [rbx - 0xc], 0xb
jl 0x14006ae39
mov dword [rbx - 0x10], 0xb
mov word [rbx + 0x16], r14w
mov r13, qword [rbp + 0x20]
mov r12, qword [rsp + 0x70]
mov edx, dword [rbx - 0x10]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov rdx, rax
test rax, rax
jne 0x14006a416
call fcn.1400025d0
int3
mov rax, qword [r12]
lea r9, [rbp - 0x38]
mov r8d, 2
mov rcx, r12
call qword [rax + 0x38]
mov r12d, eax
test eax, eax
jns 0x14006a53a
lea rcx, [0x1401be9a8]
mov rdx, qword [0x1401be9a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x48], rax
lea rdx, str.QueryInterfacesForWinEx_
test rdx, 0xffffffffffff0000
jne 0x14006a47e
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006a488
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x48]
call fcn.1400026e0
jmp 0x14006a488
lea rcx, [rbp - 0x48]
call fcn.140003550
nop
mov edx, r12d
lea rcx, [rbp + 0xd0]
call fcn.1400513d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006a4a2
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x68]
call fcn.140003450
nop
mov r8, rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp + 0x50]
call fcn.14000f540
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.14005c4a0
nop
mov rdx, qword [rbp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a4e9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a502
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0xe8], 0x10
jb 0x14006a518
mov rcx, qword [rbp + 0xd0]
call fcn.1400cc890
mov qword [rbp + 0xe8], 0xf
mov qword [rbp + 0xe0], r14
mov byte [rbp + 0xd0], 0
mov rdx, qword [rbp - 0x48]
jmp 0x14006adf8
mov ecx, 0x58
call fcn.1400cd068
mov rbx, rax
mov qword [rbp + 0x18], rax
test rax, rax
je 0x14006a5e0
test r13, r13
lea r12, [r13 + 0x80]
jne 0x14006a563
mov r12, r14
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x78], rax
lea rdx, str.JNovaSObject
test rdx, 0xffffffffffff0000
jne 0x14006a5ae
movzx r15d, dx
mov ecx, r15d
call fcn.1400019e0
test rax, rax
je 0x14006a5b8
mov r8d, r15d
mov rdx, rax
lea rcx, [rbp - 0x78]
call fcn.1400026e0
jmp 0x14006a5b8
lea rcx, [rbp - 0x78]
call fcn.140003550
nop
mov r15d, edi
mov dword [rsp + 0x68], edi
mov qword [rsp + 0x20], r12
mov r9, qword [r13 + 0xd0]
mov r8, qword [r13 + 0xb8]
lea rdx, [rbp - 0x78]
mov rcx, rbx
call fcn.140061370
jmp 0x14006a5e3
mov rax, r14
mov qword [r13 + 0xa8], rax
test r15b, 1
je 0x14006a611
and r15d, 0xfffffffe
mov dword [rsp + 0x68], r15d
mov rdx, qword [rbp - 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a611
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov dword [rbp], 0xfffffffd
mov ecx, 0x18
call fcn.1400cbef8
mov qword [rbp + 0x28], rax
mov rcx, qword [r13 + 0xa8]
mov qword [rax + 8], rcx
mov ecx, 9
mov rax, qword [rbp + 0x28]
mov word [rax], cx
lea rax, [rbp]
mov qword [rbp + 0x30], rax
mov dword [rbp + 0x38], edi
mov dword [rbp + 0x3c], edi
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
mov r9d, 4
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x28], r14
lea rdx, [rbp + 0x28]
mov qword [rsp + 0x20], rdx
mov r8d, 0x400
mov edx, dword [rbp - 0x38]
call qword [rax + 0x40]
mov edi, eax
mov rcx, qword [rbp + 0x28]
call fcn.1400cd9ec
lea rcx, [0x1401be9a8]
test edi, edi
jns 0x14006a794
mov rdx, qword [0x1401be9a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea rdx, str.addCustomeObject_
test rdx, 0xffffffffffff0000
jne 0x14006a6d9
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006a6e3
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x80]
call fcn.1400026e0
jmp 0x14006a6e3
lea rcx, [rbp - 0x80]
call fcn.140003550
nop
mov edx, edi
lea rcx, [rbp + 0xb0]
call fcn.1400513d0
nop
cmp qword [rax + 0x18], 0x10
jb 0x14006a6fc
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rbp + 0x60]
call fcn.140003450
nop
mov r8, rax
lea rdx, [rbp - 0x80]
lea rcx, [rbp + 0x70]
call fcn.14000f540
nop
mov rdx, rax
mov rcx, qword [r13 + 0xb8]
call fcn.14005c4a0
nop
mov rdx, qword [rbp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a743
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a75c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
cmp qword [rbp + 0xc8], 0x10
jb 0x14006a772
mov rcx, qword [rbp + 0xb0]
call fcn.1400cc890
mov qword [rbp + 0xc8], 0xf
mov qword [rbp + 0xc0], r14
mov byte [rbp + 0xb0], 0
mov rdx, qword [rbp - 0x80]
jmp 0x14006adf8
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x50], rbx
mov qword [rbp - 0x28], r14
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x18], r14
lea rax, [rbp - 0x10]
mov qword [rbp + 0xa0], rax
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x10], rax
mov byte [rbp - 8], 0
mov rax, qword [r13 + 0xc0]
cmp dword [rax - 0x10], 0
je 0x14006a94c
mov r8d, dword [0x1401c6d80]
lea r9d, [r8 + 1]
lea ecx, [r8 + 2]
imul ecx, r9d
imul ecx, r8d
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add edx, eax
imul edx, edx, 0xf
sub ecx, edx
cmp ecx, 0xb
jne 0x14006a846
test r8d, r8d
je 0x14006a83c
dec r8d
je 0x14006a833
mov dword [0x1401c6d80], r9d
jmp 0x14006a846
mov dword [0x1401c6d80], r14d
jmp 0x14006a846
mov dword [0x1401c6d80], 2
mov r8d, 6
lea rdx, [rbp + 8]
lea rcx, [r13 + 0xc0]
call fcn.14001b570
nop
lea r15, str.debug:
nop word [rax + rax]
mov rdx, qword [rax]
mov rcx, r14
nop word [rax + rax]
movzx eax, word [rdx + rcx*2]
inc rcx
cmp ax, word [r15 + rcx*2 - 2]
jne 0x14006a89a
cmp rcx, 7
jne 0x14006a880
mov eax, r14d
jmp 0x14006a89f
sbb eax, eax
or eax, 1
test eax, eax
sete bl
mov rdx, qword [rbp + 8]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006a8bc
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test bl, bl
je 0x14006a8e4
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov r8d, 6
lea rdx, [rbp + 8]
lea rcx, [r13 + 0xc0]
call fcn.14001b570
nop
jmp 0x14006a870
mov rdx, qword [r13 + 0xc0]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x50]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14006ab36
cmp dword [rbx + 0x10], 0
jl 0x14006a939
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14006a939
call fcn.140002540
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14006a92b
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x14006ab36
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400023f0
jmp 0x14006ab36
mov eax, dword [0x1401c6d80]
lea ecx, [rax + 1]
imul ecx, eax
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add edx, eax
lea eax, [rdx + rdx*2]
shl eax, 2
sub ecx, eax
cmp ecx, 0xb
jne 0x14006a98f
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r14
xor r9d, r9d
xor r8d, r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_PeekNamedPipe]
lea rcx, [rbp + 0x110]
call fcn.14006af50
nop
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140045e60
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140047a10
lea rdx, [rdi + 0x18]
lea rcx, [rbp - 0x10]
call fcn.140002360
movzx eax, byte [rdi + 0x20]
mov byte [rbp - 8], al
test al, al
jne 0x14006aa63
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x60], rax
lea rdx, str.failed_to_get_js_code
test rdx, 0xffffffffffff0000
jne 0x14006aa1e
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006aa28
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x60]
call fcn.1400026e0
jmp 0x14006aa28
lea rcx, [rbp - 0x60]
call fcn.140003550
nop
lea rdx, [rbp - 0x60]
mov rcx, qword [r13 + 0xb8]
call fcn.14005c4a0
nop
mov rdx, qword [rbp - 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006aa52
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x110]
call fcn.14006b000
jmp 0x14006ade9
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.1400474d0
xor edx, edx
lea rcx, [rbp + 0x110]
call fcn.140045e60
mov rdi, rax
mov rdx, rax
lea rcx, [rbp - 0x28]
call fcn.140047a10
lea rdx, [rdi + 0x18]
lea rcx, [rbp - 0x10]
call fcn.140002360
movzx eax, byte [rdi + 0x20]
mov byte [rbp - 8], al
lea r8, [rbp - 0x10]
lea rdx, str.tryalertfunction_str__tryCPPInternal.invokeAPI__action_:_debugMessage___param_:_message_:___str_____catch_e_catch_e__
lea rcx, [rbp + 0x80]
call fcn.14001b6f0
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14006ab0e
cmp dword [rbx + 0x10], 0
jl 0x14006aaff
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14006aaff
call fcn.140002540
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14006aaf4
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x50], rax
jmp 0x14006ab0e
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x50]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x80]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ab2a
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp + 0x110]
call fcn.14006b000
mov rcx, qword [rsp + 0x50]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rbx, rax
lea rcx, str.JScript
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rcx, qword [rbp - 0x58]
mov r10, qword [rcx]
lea r9, [rbp + 0x88]
mov r8, rax
mov rdx, rbx
call qword [r10 + 0x220]
mov edi, eax
test eax, eax
je 0x14006ade9
lea rcx, [0x1401be9a8]
mov rdx, qword [0x1401be9a8]
call qword [rdx + 0x18]
add rax, 0x18
mov qword [rbp - 0x50], rax
lea rdx, str.exec_script_failed_
test rdx, 0xffffffffffff0000
jne 0x14006abbf
movzx ebx, dx
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006abc9
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x50]
call fcn.1400026e0
jmp 0x14006abc9
lea rcx, [rbp - 0x50]
call fcn.140003550
nop
mov r8d, edi
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x40]
call fcn.140022790
nop
mov rdx, qword [rbp - 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006abf3
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, str.plugins
lea rcx, [rsp + 0x40]
call fcn.140045c30
mov rcx, qword [rbp - 0x20]
sub rcx, qword [rbp - 0x28]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
je 0x14006adbd
lea r13, [0x14015020c]
mov r12, r13
shr r12, 0x10
mov rdi, r14
mov r15, r14
lea rcx, [0x1401be9a8]
mov rax, qword [0x1401be9a8]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rbp - 0x40], rax
test r12, r12
jne 0x14006ac80
movzx ebx, r13w
mov ecx, ebx
call fcn.1400019e0
test rax, rax
je 0x14006ac8d
mov r8d, ebx
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.1400026e0
jmp 0x14006ac8d
mov rdx, r13
lea rcx, [rbp - 0x40]
call fcn.140003550
nop
imul rdi, rdi, 0x38
add rdi, qword [rbp - 0x28]
lea r8, [rbp - 0x40]
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.14000f540
nop
mov rdx, qword [rax]
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.140010000
nop
mov rdx, qword [rbp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006acd1
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rbp - 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ace9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rax, qword [rbp - 0x28]
mov r8d, dword [r15 + rax + 8]
lea rdx, [rsp + 0x40]
lea rcx, [rbp + 0x18]
call fcn.140022790
nop
mov rdx, qword [rax]
lea rcx, [rdx - 0x18]
mov rbx, qword [rsp + 0x40]
add rbx, 0xffffffffffffffe8
cmp rcx, rbx
je 0x14006ad5a
cmp dword [rbx + 0x10], 0
jl 0x14006ad4b
mov rax, qword [rbx]
cmp qword [rcx], rax
jne 0x14006ad4b
call fcn.140002540
mov rdi, rax
lock add dword [rbx + 0x10], 0xffffffff
jg 0x14006ad40
mov rcx, qword [rbx]
mov r8, qword [rcx]
mov rdx, rbx
call qword [rreloc.OLEAUT32.dll_VariantClear + 8]
lea rax, [rdi + 0x18]
mov qword [rsp + 0x40], rax
jmp 0x14006ad5a
mov r8d, dword [rdx - 0x10]
lea rcx, [rsp + 0x40]
call fcn.1400023f0
nop
mov rdx, qword [rbp + 0x18]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ad72
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [0x14015023c]
lea rcx, [rsp + 0x40]
call fcn.140045c30
inc r14d
add r15, 0x38
movsxd rdi, r14d
mov rcx, qword [rbp - 0x20]
sub rcx, qword [rbp - 0x28]
movabs rax, 0x4924924924924925
imul rcx
sar rdx, 4
mov rax, rdx
shr rax, 0x3f
add rdx, rax
cmp rdi, rdx
jb 0x14006ac41
mov r13, qword [rbp + 0x20]
lea rdx, [rsp + 0x40]
mov rcx, qword [r13 + 0xb8]
call fcn.14005c4a0
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ade9
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
lea rcx, [rbp - 0x28]
call fcn.14006aec0
nop
mov rdx, qword [rsp + 0x50]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ae0d
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ae27
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rsp + 0x70]
test rcx, rcx
je 0x14006ae44
mov rax, qword [rcx]
call qword [rax + 0x10]
jmp 0x14006ae44
mov ecx, 0x80070057
call fcn.140001920
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006ae5e
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14006ae6e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x14006ae7e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rbp - 0x30]
test rcx, rcx
je 0x14006ae8d
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rbp + 0x300]
xor rcx, rsp
call fcn.1400cc8b0
mov rbx, qword [rsp + 0x460]
add rsp, 0x410
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret