Function at 0x140004740
Capabilities:
Contain obfuscated stackstrings
Terminate process

Disassembly:
jmp 0x140004740
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x3d8
mov rdi, rsp
movabs rcx, 0xf6
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x3f0]
mov qword [rsp + 0x368], 0xfffffffffffffffe
mov rax, qword [0x1402e1aa8]
xor rax, rsp
mov qword [rsp + 0x3c0], rax
lea rcx, [rsp + 0x28]
call fcn.1400013a7
nop
lea rdx, str.Test.txt
lea rcx, [rsp + 0x28]
call fcn.14000114f
lea rdx, [0x14025247c]
lea rcx, [rsp + 0x28]
call fcn.14000140b
test eax, eax
je 0x1400047d3
lea rdx, str.asdasdasdasd
lea rcx, [rsp + 0x28]
call fcn.14000140b
test eax, eax
jne 0x1400047f4
mov dword [rsp + 0x190], 0
lea rcx, [rsp + 0x28]
call fcn.1400013bb
mov eax, dword [rsp + 0x190]
jmp 0x140004ca2
mov byte [rsp + 0xa8], 0x74
mov byte [rsp + 0xa9], 0x73
mov byte [rsp + 0xaa], 0x74
mov byte [rsp + 0xab], VarCyFromDisp
mov byte [rsp + 0xac], reloc.OLEAUT32.dll_VarBstrFromDate
mov byte [rsp + 0xad], VarCyFromDisp
mov byte [rsp + 0xae], 0x76
mov byte [rsp + 0xaf], 0x2e
mov byte [rsp + 0xb0], 0x79
mov byte [rsp + 0xb1], 0x69
mov byte [rsp + 0xb2], 0x76
mov byte [rsp + 0xb3], 0
mov byte [rsp + 0xd4], VarDateFromDisp
mov byte [rsp + 0xd5], 0x4b
mov byte [rsp + 0xd6], VarCyFromDisp
mov byte [rsp + 0xd7], 0x76
mov byte [rsp + 0xd8], 0
lea rax, [rsp + 0x198]
mov qword [rsp + 0x1c8], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x200], rax
lea rdx, [rsp + 0xd4]
mov rcx, qword [rsp + 0x1c8]
call fcn.14000102d
mov qword [rsp + 0x370], rax
mov rax, qword [rsp + 0x370]
mov qword [rsp + 0x378], rax
lea rdx, [rsp + 0xa8]
mov rcx, qword [rsp + 0x200]
call fcn.14000102d
mov qword [rsp + 0x380], rax
mov r8d, 0x3c5
mov rdx, qword [rsp + 0x378]
mov rcx, qword [rsp + 0x380]
call fcn.14000139d
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x14000492f
mov dword [rsp + 0x208], 0
lea rcx, [rsp + 0x28]
call fcn.1400013bb
mov eax, dword [rsp + 0x208]
jmp 0x140004ca2
lea rax, [rsp + 0x220]
mov qword [rsp + 0x250], rax
lea rdx, [rsp + 0x28]
mov rcx, qword [rsp + 0x250]
call fcn.140001037
mov qword [rsp + 0x388], rax
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x388]
lea rcx, [rsp + 0x258]
call fcn.1400011ea
lea rdi, [rsp + 0x358]
mov rsi, rax
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x210]
lea rsi, [rsp + 0x358]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
lea rdi, [rsp + 0x78]
lea rsi, [rsp + 0x210]
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetDim
rep movsb byte [rdi], byte [rsi]
mov byte [rsp + 0xf8], 0x53
mov byte [rsp + 0xf9], 0x79
mov byte [rsp + 0xfa], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0xfb], VarCyFromDisp
mov byte [rsp + 0xfc], reloc.OLEAUT32.dll_VarBstrFromDisp
mov byte [rsp + 0xfd], VarCyFromDisp
mov byte [rsp + 0xfe], 0x33
mov byte [rsp + 0xff], 0x32
mov byte [rsp + 0x100], 0x2e
mov byte [rsp + 0x101], VarBstrFromDate
mov byte [rsp + 0x102], VarCyFromDisp
mov byte [rsp + 0x103], VarCyFromDisp
mov byte [rsp + 0x104], 0
mov byte [rsp + 0x128], 0x73
mov byte [rsp + 0x129], 0x76
mov byte [rsp + 0x12a], 0x77
mov byte [rsp + 0x12b], 0x47
mov byte [rsp + 0x12c], 0x43
mov byte [rsp + 0x12d], 0x79
mov byte [rsp + 0x12e], 0x4b
mov byte [rsp + 0x12f], 0
lea rax, [rsp + 0x268]
mov qword [rsp + 0x298], rax
lea rax, [rsp + 0x2a0]
mov qword [rsp + 0x2d0], rax
lea rdx, [rsp + 0x128]
mov rcx, qword [rsp + 0x298]
call fcn.14000102d
mov qword [rsp + 0x390], rax
mov rax, qword [rsp + 0x390]
mov qword [rsp + 0x398], rax
lea rdx, [rsp + 0xf8]
mov rcx, qword [rsp + 0x2d0]
call fcn.14000102d
mov qword [rsp + 0x3a0], rax
mov r8d, 0x1da
mov rdx, qword [rsp + 0x398]
mov rcx, qword [rsp + 0x3a0]
call fcn.14000139d
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
call fcn.14000100f
test eax, eax
jne 0x140004b16
mov dword [rsp + 0x2d8], 0
lea rcx, [rsp + 0x28]
call fcn.1400013bb
mov eax, dword [rsp + 0x2d8]
jmp 0x140004ca2
mov byte [rsp + 0x148], 0x47
mov byte [rsp + 0x149], VarCyFromDisp
mov byte [rsp + reloc.OLEAUT32.dll_VarUdateFromDate], reloc.OLEAUT32.dll_VarBstrFromDate
mov byte [rsp + reloc.OLEAUT32.dll_GetAltMonthNames], 0x77
mov byte [rsp + 0x14c], VarCyFromDisp
mov byte [rsp + 0x14d], reloc.OLEAUT32.dll_VarCyFromDisp
mov byte [rsp + 0x14e], 0x33
mov byte [rsp + 0x14f], 0x32
mov byte [rsp + 0x150], 0x2e
mov byte [rsp + 0x151], VarCyFromDisp
mov byte [rsp + 0x152], VarBstrFromDate
mov byte [rsp + 0x153], 0x75
mov byte [rsp + 0x154], 0
mov byte [rsp + 0x174], 0x77
mov byte [rsp + 0x175], 0x79
mov byte [rsp + 0x176], 0x7a
mov byte [rsp + 0x177], VarBstrFromDate
mov byte [rsp + 0x178], 0x79
mov byte [rsp + 0x179], 0
lea rax, [rsp + 0x2e0]
mov qword [rsp + 0x310], rax
lea rax, [rsp + 0x318]
mov qword [rsp + 0x348], rax
lea rdx, [rsp + 0x174]
mov rcx, qword [rsp + 0x310]
call fcn.14000102d
mov qword [rsp + 0x3a8], rax
mov rax, qword [rsp + 0x3a8]
mov qword [rsp + 0x3b0], rax
lea rdx, [rsp + 0x148]
mov rcx, qword [rsp + 0x348]
call fcn.14000102d
mov qword [rsp + 0x3b8], rax
mov r8d, 0x1e
mov rdx, qword [rsp + 0x3b0]
mov rcx, qword [rsp + 0x3b8]
call fcn.14000139d
mov qword [rsp + 0x68], rax
lea rdx, [rsp + 0x78]
mov rcx, qword [rsp + 0x68]
call fcn.1400011cc
xor ecx, ecx
call main
nop
mov rdx, qword [rsp + 0x3f8]
mov rcx, qword [rsp + 0x3f0]
call fcn.140044f60
test eax, eax
jne 0x140004c86
mov dword [rsp + 0x350], 0
lea rcx, [rsp + 0x28]
call fcn.1400013bb
mov eax, dword [rsp + 0x350]
jmp 0x140004ca2
mov dword [rsp + 0x354], 1
lea rcx, [rsp + 0x28]
call fcn.1400013bb
mov eax, dword [rsp + 0x354]
mov rdi, rax
mov rcx, rsp
lea rdx, reloc.OLEAUT32.dll_VariantClear
call fcn.14014e6c0
mov rax, rdi
mov rcx, qword [rsp + 0x3c0]
xor rcx, rsp
call fcn.14014fec0
add rsp, 0x3d8
pop rdi
pop rsi
ret