Function at 0x18f88b71b4
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x57]
sub rsp, 0xf0
mov r15, r9
mov rdi, r8
mov rsi, rdx
mov r14, rcx
mov ecx, 0x11
xor edx, edx
call qword [sym.imp.OLEAUT32.dll_SafeArrayCopyData]
mov rbx, rax
xor r12d, r12d
test rax, rax
jne 0x18f88b74e7
mov rbx, qword [rbp + 0x7f]
mov rdi, qword [rbx + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], r12
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, eax
mov ecx, 0x1aed
mov dword [rsp + 0x20], 0x1aa11aed
mov dword [rsp + 0x24], 0x1a8c1a82
mov dword [rsp + 0x28], 0x1acd1a89
mov dword [rsp + 0x2c], 0x1a9e1a8c
mov dword [rsp + 0x30], 0x1a881a9e
mov dword [rbp - 0x7d], 0x1a8f1a80
mov dword [rbp - 0x79], 0x1a941a81
mov dword [rbp - 0x75], 0x1acd1ad7
mov dword [rbp - 0x71], 0x1a9f1aac
mov dword [rbp - 0x6d], 0x1a8c1a9f
mov dword [rbp - 0x69], 0x1aae1a94
mov dword [rbp - 0x65], 0x1a881a9f
mov dword [rbp - 0x61], 0x1a991a8c
mov dword [rbp - 0x5d], 0x1acd1a88
mov dword [rbp - 0x59], 0x1ad31ac0
mov dword [rbp - 0x55], 0x1ac81acd
mov dword [rbp - 0x51], 0x1a981a81
mov dword [rbp - 0x4d], 0x1aed1ae7
mov eax, ecx
xor ax, word [0x18f88dde16]
mov word [rbp - 0x49], ax
mov eax, ecx
xor ax, word [0x18f88dde18]
mov word [rbp - 0x47], ax
mov eax, ecx
xor ax, word [0x18f88dde1a]
mov word [rbp - 0x45], ax
mov eax, ecx
xor ax, word [0x18f88dde1c]
mov word [rbp - 0x43], ax
mov eax, ecx
xor ax, word [0x18f88dde1e]
mov word [rbp - 0x41], ax
mov eax, ecx
xor ax, word [str.Load_assembly:_ArrayLock_____08X_n]
mov word [rbp - 0x3f], ax
mov eax, ecx
xor ax, word [0x18f88dde22]
mov word [rbp - 0x3d], ax
mov eax, ecx
xor ax, word [0x18f88dde24]
mov word [rbp - 0x3b], ax
mov eax, ecx
xor ax, word [0x18f88dde26]
mov word [rbp - 0x39], ax
mov eax, ecx
xor ax, word [0x18f88dde28]
mov word [rbp - 0x37], ax
mov eax, ecx
xor ax, word [0x18f88dde2a]
mov word [rbp - 0x35], ax
mov eax, ecx
xor ax, word [0x18f88dde2c]
mov word [rbp - 0x33], ax
mov eax, ecx
xor ax, word [0x18f88dde2e]
mov word [rbp - 0x31], ax
mov eax, ecx
xor ax, word [0x18f88dde30]
mov word [rbp - 0x2f], ax
mov eax, ecx
xor ax, word [0x18f88dde32]
mov word [rbp - 0x2d], ax
mov eax, ecx
xor ax, word [0x18f88dde34]
mov word [rbp - 0x2b], ax
mov eax, ecx
xor ax, word [0x18f88dde36]
mov word [rbp - 0x29], ax
mov eax, ecx
xor ax, word [0x18f88dde38]
mov word [rbp - 0x27], ax
mov eax, ecx
xor ax, word [0x18f88dde3a]
mov word [rbp - 0x25], ax
mov eax, ecx
xor ax, word [0x18f88dde3c]
mov word [rbp - 0x23], ax
mov eax, ecx
xor ax, word [0x18f88dde3e]
mov word [rbp - 0x21], ax
mov eax, ecx
xor ax, word [0x18f88dde40]
mov word [rbp - 0x1f], ax
mov eax, ecx
xor ax, word [0x18f88dde42]
mov word [rbp - 0x1d], ax
mov eax, ecx
xor ax, word [0x18f88dde44]
mov word [rbp - 0x1b], ax
mov eax, ecx
xor ax, word [0x18f88dde46]
mov word [rbp - 0x19], ax
mov eax, ecx
xor ax, word [0x18f88dde48]
mov word [rbp - 0x17], ax
mov eax, ecx
xor ax, word [0x18f88dde4a]
mov word [rbp - 0x15], ax
mov eax, ecx
xor ax, word [0x18f88dde4c]
mov word [rbp - 0x13], ax
mov eax, ecx
xor ax, word [0x18f88dde4e]
mov word [rbp - 0x11], ax
mov eax, ecx
xor ax, word [0x18f88dde50]
mov word [rbp - 0xf], ax
mov eax, ecx
xor ax, word [0x18f88dde52]
mov word [rbp - 0xd], ax
mov eax, ecx
xor ax, word [0x18f88dde54]
mov word [rbp - 0xb], ax
mov eax, ecx
xor ax, word [0x18f88dde56]
mov word [rbp - 9], ax
mov eax, ecx
xor ax, word [0x18f88dde58]
mov word [rbp - 7], ax
xor eax, eax
mov word [rbp - 5], ax
mov eax, r12d
xor word [rsp + rax*2 + 0x22], cx
inc rax
cmp rax, 0x45
jae 0x18f88b747c
movzx ecx, word [rsp + 0x20]
jmp 0x18f88b7467
mov word [rbp - 5], r12w
lea rdx, [rsp + 0x22]
lea rcx, [rbp + 0x17]
call fcn.18f88bba18
nop
lea r8, [rbp - 1]
mov rdx, rax
mov ecx, dword [rbx]
call rdi
nop
lea rcx, [rbp + 0x17]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x18f88b74e0
mov rdx, qword [rbp + 0xf]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b74db
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b7b2b
call fcn.18f88bd1e0
xor eax, eax
jmp 0x18f88b7b04
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SafeArrayUnlock]
mov r10d, eax
test eax, eax
jns 0x18f88b781a
mov rdi, qword [rbp + 0x7f]
mov rsi, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], r12
mov r9d, 0x3351
mov dword [rsp + 0x20], 0x331d3351
mov dword [rsp + 0x24], 0x3332333d
mov dword [rsp + 0x28], 0x33753330
lea edx, [r9 + 0x24]
mov dword [rsp + 0x2c], 0x33243337
mov dword [rsp + 0x30], 0x333c332b
mov dword [rbp - 0x7d], 0x33393337
mov dword [rbp - 0x79], 0x33243330
mov dword [rbp - 0x75], 0x337f3364
lea r8d, [r9 + 0x2e]
mov dword [rbp - 0x71], 0x33133321
mov dword [rbp - 0x6d], 0x33023310
mov dword [rbp - 0x69], 0x3329331d
mov dword [rbp - 0x65], 0x33043309
mov dword [rbp - 0x61], 0x33493303
mov dword [rbp - 0x5d], 0x33553347
mov dword [rbp - 0x59], 0x3348334c
mov dword [rbp - 0x55], 0x3357335e
mov dword [rbp - 0x51], 0x337b3328
lea ecx, [rdx + 6]
lea eax, [rdx - 3]
mov word [rbp - 0x4d], ax
lea eax, [rdx - 2]
xor ax, word [0x18f88dde64]
mov word [rbp - 0x4b], ax
lea eax, [rdx - 1]
xor ax, word [0x18f88dde66]
mov word [rbp - 0x49], ax
xor dx, word [str.Load_assembly:_Load_____08X_n]
mov word [rbp - 0x47], dx
lea eax, [rcx - 5]
xor ax, word [0x18f88dde6a]
mov word [rbp - 0x45], ax
lea eax, [rcx - 4]
xor ax, word [0x18f88dde6c]
mov word [rbp - 0x43], ax
lea eax, [rcx - 3]
xor ax, word [0x18f88dde6e]
mov word [rbp - 0x41], ax
lea eax, [rcx - 2]
xor ax, word [0x18f88dde70]
mov word [rbp - 0x3f], ax
lea eax, [rcx - 1]
xor ax, word [0x18f88dde72]
mov word [rbp - 0x3d], ax
xor cx, word [0x18f88dde74]
mov word [rbp - 0x3b], cx
lea eax, [r9 + 0x2b]
xor ax, word [0x18f88dde76]
mov word [rbp - 0x39], ax
lea eax, [r9 + 0x2c]
xor ax, word [0x18f88dde78]
mov word [rbp - 0x37], ax
lea eax, [r9 + 0x2d]
xor ax, word [0x18f88dde7a]
mov word [rbp - 0x35], ax
xor r8w, word [0x18f88dde7c]
mov word [rbp - 0x33], r8w
lea eax, [r9 + 0x2f]
xor ax, word [0x18f88dde7e]
mov word [rbp - 0x31], ax
lea eax, [r9 + 0x30]
xor ax, word [0x18f88dde80]
mov word [rbp - 0x2f], ax
lea eax, [r9 + 0x31]
xor ax, word [0x18f88dde82]
mov word [rbp - 0x2d], ax
lea eax, [r9 + 0x32]
xor ax, word [0x18f88dde84]
mov word [rbp - 0x2b], ax
lea eax, [r9 + 0x33]
xor ax, word [0x18f88dde86]
mov word [rbp - 0x29], ax
lea eax, [r9 + 0x34]
xor ax, word [0x18f88dde88]
mov word [rbp - 0x27], ax
lea eax, [r9 + 0x35]
xor ax, word [0x18f88dde8a]
mov word [rbp - 0x25], ax
lea eax, [r9 + 0x36]
xor ax, word [0x18f88dde8c]
mov word [rbp - 0x23], ax
lea eax, [r9 + 0x37]
xor ax, word [0x18f88dde8e]
mov word [rbp - 0x21], ax
lea eax, [r9 + 0x38]
xor ax, word [0x18f88dde90]
mov word [rbp - 0x1f], ax
lea eax, [r9 + 0x39]
xor ax, word [0x18f88dde92]
mov word [rbp - 0x1d], ax
lea eax, [r9 + 0x3a]
xor ax, word [0x18f88dde94]
mov word [rbp - 0x1b], ax
lea eax, [r9 + 0x3b]
xor ax, word [0x18f88dde96]
mov word [rbp - 0x19], ax
lea eax, [r9 + 0x3c]
xor ax, word [0x18f88dde98]
mov word [rbp - 0x17], ax
lea eax, [r9 + 0x3d]
xor ax, word [0x18f88dde9a]
mov word [rbp - 0x15], ax
lea eax, [r9 + 0x3e]
xor ax, word [0x18f88dde9c]
mov word [rbp - 0x13], ax
lea eax, [r9 + 0x3f]
xor ax, word [0x18f88dde9e]
mov word [rbp - 0x11], ax
lea eax, [r9 + 0x40]
xor ax, word [0x18f88ddea0]
mov word [rbp - 0xf], ax
lea eax, [r9 + 0x41]
xor ax, word [0x18f88ddea2]
mov word [rbp - 0xd], ax
lea eax, [r9 + 0x42]
xor ax, word [0x18f88ddea4]
mov word [rbp - 0xb], ax
xor eax, eax
mov word [rbp - 9], ax
mov rax, r12
add r9w, ax
xor word [rsp + rax*2 + 0x22], r9w
inc rax
cmp rax, 0x43
jae 0x18f88b77a5
movzx r9d, word [rsp + 0x20]
jmp 0x18f88b778a
mov word [rbp - 9], r12w
mov r8d, r10d
lea rdx, [rsp + 0x22]
lea rcx, [rbp + 0x17]
call fcn.18f88bba18
nop
lea r8, [rbp - 1]
mov rdx, rax
mov ecx, dword [rdi]
call rsi
nop
lea rcx, [rbp + 0x17]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x18f88b780c
mov rdx, qword [rbp + 0xf]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b7807
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b7b31
call fcn.18f88bd1e0
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
jmp 0x18f88b74e0
mov rcx, qword [rbx + 0x10]
test rdi, rdi
je 0x18f88b7851
test rcx, rcx
je 0x18f88b7841
mov r8, rdi
test rsi, rsi
je 0x18f88b783a
mov rdx, rsi
call fcn.18f88beb50
jmp 0x18f88b7851
xor edx, edx
call fcn.18f88bf200
call fcn.18f88c34d4
mov dword [rax], 0x16
call fcn.18f88c3368
mov rax, qword [r14]
mov r8, r15
mov rdx, rbx
mov rcx, r14
call qword [rax + 0x168]
mov r8d, eax
test eax, eax
jns 0x18f88b7aed
mov rdi, qword [rbp + 0x7f]
mov rsi, qword [rdi + 0x20]
xorps xmm0, xmm0
movdqu xmmword [rbp - 1], xmm0
mov qword [rbp + 0xf], r12
mov ecx, 0xfd87
mov dword [rsp + 0x20], 0xfdcbfd87
mov dword [rsp + 0x24], 0xfde6fde8
mov dword [rsp + 0x28], 0xfda7fde3
mov dword [rsp + 0x2c], 0xfdf4fde6
mov dword [rsp + 0x30], 0xfde2fdf4
mov dword [rbp - 0x7d], 0xfde5fdea
mov dword [rbp - 0x79], 0xfdfefdeb
mov dword [rbp - 0x75], 0xfda7fdbd
mov dword [rbp - 0x71], 0xfde8fdcb
mov dword [rbp - 0x6d], 0xfde3fde6
mov dword [rbp - 0x69], 0xfdaafda7
mov dword [rbp - 0x65], 0xfda7fdb9
mov dword [rbp - 0x61], 0xfdb7fda2
mov dword [rbp - 0x5d], 0xfddffdbf
mov dword [rbp - 0x59], 0xfd87fd8d
mov eax, ecx
xor ax, word [0x18f88ddea2]
mov word [rbp - 0x55], ax
mov eax, ecx
xor ax, word [0x18f88ddea4]
mov word [rbp - 0x53], ax
mov eax, ecx
xor ax, word [0x18f88ddea6]
mov word [rbp - 0x51], ax
mov eax, ecx
xor ax, word [str.Empty_parameter]
mov word [rbp - 0x4f], ax
mov eax, ecx
xor ax, word [0x18f88ddeaa]
mov word [rbp - 0x4d], ax
mov eax, ecx
xor ax, word [0x18f88ddeac]
mov word [rbp - 0x4b], ax
mov eax, ecx
xor ax, word [0x18f88ddeae]
mov word [rbp - 0x49], ax
mov eax, ecx
xor ax, word [0x18f88ddeb0]
mov word [rbp - 0x47], ax
mov eax, ecx
xor ax, word [0x18f88ddeb2]
mov word [rbp - 0x45], ax
mov eax, ecx
xor ax, word [0x18f88ddeb4]
mov word [rbp - 0x43], ax
mov eax, ecx
xor ax, word [0x18f88ddeb6]
mov word [rbp - 0x41], ax
mov eax, ecx
xor ax, word [0x18f88ddeb8]
mov word [rbp - 0x3f], ax
mov eax, ecx
xor ax, word [0x18f88ddeba]
mov word [rbp - 0x3d], ax
mov eax, ecx
xor ax, word [0x18f88ddebc]
mov word [rbp - 0x3b], ax
mov eax, ecx
xor ax, word [0x18f88ddebe]
mov word [rbp - 0x39], ax
mov eax, ecx
xor ax, word [0x18f88ddec0]
mov word [rbp - 0x37], ax
mov eax, ecx
xor ax, word [0x18f88ddec2]
mov word [rbp - 0x35], ax
mov eax, ecx
xor ax, word [0x18f88ddec4]
mov word [rbp - 0x33], ax
mov eax, ecx
xor ax, word [0x18f88ddec6]
mov word [rbp - 0x31], ax
mov eax, ecx
xor ax, word [str.No_.NET_n]
mov word [rbp - 0x2f], ax
mov eax, ecx
xor ax, word [0x18f88ddeca]
mov word [rbp - 0x2d], ax
mov eax, ecx
xor ax, word [0x18f88ddecc]
mov word [rbp - 0x2b], ax
mov eax, ecx
xor ax, word [0x18f88ddece]
mov word [rbp - 0x29], ax
mov eax, ecx
xor ax, word [0x18f88dded0]
mov word [rbp - 0x27], ax
mov eax, ecx
xor ax, word [0x18f88dded2]
mov word [rbp - 0x25], ax
mov eax, ecx
xor ax, word [0x18f88dded4]
mov word [rbp - 0x23], ax
mov eax, ecx
xor ax, word [0x18f88dded6]
mov word [rbp - 0x21], ax
mov eax, ecx
xor ax, word [0x18f88dded8]
mov word [rbp - 0x1f], ax
xor eax, eax
mov word [rbp - 0x1d], ax
mov rax, r12
xor word [rsp + rax*2 + 0x22], cx
inc rax
cmp rax, 0x39
jae 0x18f88b7a7f
movzx ecx, word [rsp + 0x20]
jmp 0x18f88b7a6a
mov word [rbp - 0x1d], r12w
lea rdx, [rsp + 0x22]
lea rcx, [rbp + 0x17]
call fcn.18f88bba18
nop
lea r8, [rbp - 1]
mov rdx, rax
mov ecx, dword [rdi]
call rsi
nop
lea rcx, [rbp + 0x17]
call fcn.18f88baf4c
nop
mov rcx, qword [rbp - 1]
test rcx, rcx
je 0x18f88b7adf
mov rdx, qword [rbp + 0xf]
sub rdx, rcx
mov rax, rcx
cmp rdx, 0x1000
jb 0x18f88b7ada
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18f88b7b25
call fcn.18f88bd1e0
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SafeArrayAccessData]
jmp 0x18f88b780c
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SafeArrayAccessData]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SafeArrayGetDim]
mov eax, 1
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3
call fcn.18f88c3388
int3