Function at 0x71ce3380
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push ebx
mov ebx, edx
push esi
mov esi, ecx
push edi
movzx ecx, word [ebx]
cmp ecx, 9
je 0x71ce33a0
cmp ecx, 0xa
je 0x71ce33a0
cmp ecx, 0xb
jne 0x71ce3953
movzx edx, word [ebx + 4]
mov edi, 0xef
lea eax, [edx - 0x2711]
cmp ax, di
jbe 0x71ce3953
cmp dword [0x71d79554], 0
mov eax, 0x2710
jne 0x71ce3536
cmp ecx, 9
jne 0x71ce33f7
push ecx
push 0
push 0xa
mov edx, str.__script_
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
je 0x71ce3953
mov ecx, eax
call fcn.71ce2b70
jmp 0x71ce34fb
cmp ecx, 0xa
jne 0x71ce3443
push ecx
push 1
push 0x2a
mov edx, 0x71d530d8
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
push ecx
push 1
push 0x24
mov edx, 0x71d530a0
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
push ecx
push 1
push 0x14
mov edx, 0x71d530c4
jmp 0x71ce34f1
cmp ecx, 0xb
jne 0x71ce3953
push ecx
mov ecx, esi
push 1
cmp dx, ax
jbe 0x71ce34a4
push 0x31
mov edx, 0x71d52f54
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
push ecx
push 1
push 0x31
mov edx, 0x71d52f88
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
push ecx
push 1
push 0x31
mov edx, 0x71d52fe8
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
mov edx, 0x71d53048
jmp 0x71ce34ec
push 0x3a
mov edx, 0x71d52f18
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
push ecx
push 1
push 0x2b
mov edx, 0x71d52fbc
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
push ecx
push 1
push 0x2b
mov edx, 0x71d5301c
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3503
mov edx, 0x71d53074
push ecx
push 1
push 0x29
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
je 0x71ce3953
movzx ecx, word [ebx]
cmp ecx, 9
je 0x71ce3520
cmp ecx, 0xa
je 0x71ce3520
cmp ecx, 0xb
jne 0x71ce3607
mov edx, 0x71ce2d40
jmp 0x71ce3525
mov edx, 0x71ce2cb0
mov ecx, eax
call fcn.71cc8d80
mov dword [0x71d79554], eax
mov eax, 0x2710
cmp word [ebx], 0xb
jne 0x71ce3607
push ecx
mov ecx, esi
push 1
cmp word [ebx + 4], ax
jbe 0x71ce3599
push 0x34
mov edx, 0x71d52db4
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce35f4
push ecx
push 1
push 0x34
mov edx, 0x71d52de8
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce35f4
push ecx
push 1
push 0x34
mov edx, 0x71d52e50
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce35f4
mov edx, 0x71d52eb8
jmp 0x71ce35e1
push 0x37
mov edx, 0x71d52d7c
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce35f4
push ecx
push 1
push 0x31
mov edx, 0x71d52e1c
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce35f4
push ecx
push 1
push 0x31
mov edx, 0x71d52e84
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce35f4
mov edx, 0x71d52ee8
push ecx
push 1
push 0x2e
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
je 0x71ce362c
mov edx, 0x71ce2dd0
mov ecx, eax
call fcn.71cc8d80
mov dword [0x71d79544], eax
jmp 0x71ce362c
push str.DllGetClassObject
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x71ce3953
push 0
mov edx, str.16d51579_a30b_4c8b_a276_0ff4dc41e755
mov ecx, eax
call fcn.71ce2ee0
add esp, 4
mov edi, dword [ebp + 8]
test edi, edi
je 0x71ce364a
push edi
push str.mshtml.dll
call fcn.71cfcffb
add esp, 8
test eax, eax
jne 0x71ce364a
mov esi, dword [edi + 0x20]
jmp 0x71ce3678
push str.mshtml.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
test esi, esi
je 0x71ce3909
test edi, edi
je 0x71ce3678
movups xmm0, xmmword [str.mshtml.dll]
movups xmmword [edi], xmm0
mov eax, dword [0x71d52960]
mov dword [edi + 0x10], eax
mov dword [edi + 0x20], esi
test esi, esi
je 0x71ce3909
movzx eax, word [ebx]
cmp eax, 0xa
jne 0x71ce375b
push ecx
push 1
push 0x30
mov edx, 0x71d52c18
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce36ec
push ecx
push 1
push 0x30
mov edx, 0x71d52c48
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce36ec
push ecx
push 1
push 0x21
mov edx, 0x71d52c78
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce36ec
push ecx
push 1
push 0x21
mov edx, 0x71d52c9c
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
je 0x71ce36fd
mov edx, 0x71ce2ec0
mov ecx, eax
call fcn.71cc8d80
mov dword [0x71d7954c], eax
push ecx
push 1
push 0x24
mov edx, 0x71d52cc0
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
push ecx
push 1
push 0x24
mov edx, 0x71d52ce4
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
push ecx
push 1
push 0x1c
mov edx, 0x71d52d08
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
mov edx, 0x71d52d24
jmp 0x71ce38e5
cmp eax, 0xb
jne 0x71ce390f
cmp dword [0x71d7954c], 0
mov edi, 0x2710
jne 0x71ce3839
push ecx
mov ecx, esi
push 1
push 0x1f
cmp word [ebx + 4], di
jbe 0x71ce37cf
mov edx, 0x71d52a68
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3828
push ecx
push 1
push 0x1f
mov edx, 0x71d52a88
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3828
push ecx
push 1
push 0x1f
mov edx, 0x71d52ac4
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3828
mov edx, 0x71d52b00
jmp 0x71ce3815
mov edx, 0x71d52a48
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3828
push ecx
push 1
push 0x1c
mov edx, 0x71d52aa8
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3828
push ecx
push 1
push 0x1c
mov edx, 0x71d52ae4
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce3828
mov edx, 0x71d52b1c
push ecx
push 1
push 0x1c
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
je 0x71ce3839
mov edx, 0x71ce2ec0
mov ecx, eax
call fcn.71cc8d80
mov dword [0x71d7954c], eax
cmp dword [0x71d79548], 0
jne 0x71ce3909
push ecx
mov ecx, esi
push 1
push 0x1c
cmp word [ebx + 4], di
jbe 0x71ce389f
mov edx, 0x71d52b54
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
push ecx
push 1
push 0x1c
mov edx, 0x71d52b70
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
push ecx
push 1
push 0x1c
mov edx, 0x71d52ba8
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
mov edx, 0x71d52be0
jmp 0x71ce38e5
mov edx, 0x71d52b38
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
push ecx
push 1
push 0x1c
mov edx, 0x71d52b8c
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
push ecx
push 1
push 0x1c
mov edx, 0x71d52bc4
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
jne 0x71ce38f8
mov edx, 0x71d52bfc
push ecx
push 1
push 0x1c
mov ecx, esi
call fcn.71cee710
add esp, 0xc
test eax, eax
je 0x71ce3909
mov edx, 0x71ce2ea0
mov ecx, eax
call fcn.71cc8d80
mov dword [0x71d79548], eax
cmp word [ebx], 0xb
je 0x71ce393f
push 0x71d7953c
push 0
push str.16d51579_a30b_4c8b_a276_0ff4dc41e755
push 0x71ce31c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x71ce3949
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov eax, 1
pop ebx
pop ebp
ret
mov dword [0x71d79540], 1
pop edi
pop esi
mov eax, 1
pop ebx
pop ebp
ret
pop edi
pop esi
xor eax, eax
pop ebx
pop ebp
ret