Function at 0x14009e62d
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push r15
mov rax, 8
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x14009e64b
sub rsp, 0x28
call fcn.14012b830
mov dword [section..data], 0x21000c7
mov dword [section..data], 0x21000c8
mov qword [rsp + 0x28], reloc.WS2_32.dll_WSAGetLastError
mov dword [section..data], 0x21000ca
sub rsp, 8
push 0xc80001
movabs rax, str.Param
push rax
push qword [rsp + 0xb0]
mov r9, qword [rsp + 0xb0]
mov r8, qword [rsp + 0xa8]
mov rdx, qword [rsp + 0xa0]
movabs rcx, 0xffffffffffffffff
sub rsp, 0x20
call fcn.140107fb8
add rsp, 0x40
mov qword [0x14021c83c], rax
mov dword [section..data], 0x21000cd
movabs r8, reloc.OLEAUT32.dll_SafeArrayGetDim
movabs rdx, 0x25
mov rcx, qword [0x14021c074]
call fcn.140032474
push rax
push 0
push pe_nt_image_headers64
sub rsp, 8
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.1401078a4
add rsp, 0x28
mov rcx, rax
pop rdx
pop r8
pop r9
call sub.USER32.dll_SendMessageW
mov dword [section..data], 0x21000ce
call fcn.14004ed29
mov dword [section..data], 0x21000d1
push SafeArrayAllocDescriptor
push 0x1ae
movabs r9, 0xe8
movabs r8, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
movabs rdx, 8
movabs rcx, 9
sub rsp, 0x20
call fcn.140102af0
add rsp, 0x30
mov dword [section..data], 0x21000d2
movabs rax, str.Configuration_de_VNC
mov r8, rax
movabs rdx, 0xffffffffffffffff
movabs rcx, 9
call fcn.1400f5580
mov dword [section..data], 0x21000d3
sub rsp, 8
push 1
push 0
movabs rax, str.Emplacement_local_de_VncViewer.exe
mov r8, rax
movabs rdx, 0xffffffffffffffff
movabs rcx, 9
pop r9
sub rsp, 0x20
call fcn.140103820
add rsp, 0x30
mov dword [section..data], 0x21000d4
sub rsp, 8
push 1
push 0
movabs rax, str.Mot_de_passe_des_postes__par_groupe_
mov r8, rax
movabs rdx, 0xffffffffffffffff
movabs rcx, 9
pop r9
sub rsp, 0x20
call fcn.140103820
add rsp, 0x30
mov dword [section..data], 0x21000d5
movabs rax, str.Configuration_de_PAExec_et_acc
mov r8, rax
movabs rdx, 0xffffffffffffffff
movabs rcx, 9
call fcn.1400f5580
mov dword [section..data], 0x21000d6
sub rsp, 8
push 1
push 0
movabs rax, 0x140207662
mov r8, rax
movabs rdx, 0xffffffffffffffff
movabs rcx, 9
pop r9
sub rsp, 0x20
call fcn.140103820
add rsp, 0x30
mov dword [section..data], 0x21000d7
movabs rax, str.Fermer
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x64
movabs r8, 0x1a4
movabs rdx, 0x23e
movabs rcx, 0xa
sub rsp, 0x20
call fcn.1400f67e4
add rsp, 0x30
mov dword [section..data], 0x21000d8
movabs rcx, 9
call fcn.14004aa31
mov dword [section..data], 0x21000db
movabs rax, 0x140207502
push rax
push 0x9c
movabs r9, 0x1a6
movabs r8, 8
movabs rdx, 0xfa
movabs rcx, reloc.WS2_32.dll_inet_addr
sub rsp, 0x20
call fcn.1400faa94
add rsp, 0x30
mov dword [section..data], 0x21000dc
movabs rax, 0x140209e66
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x26
movabs r8, 0x58
movabs rdx, 0x26e
movabs rcx, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
sub rsp, 0x20
call fcn.1400f67e4
add rsp, 0x30
mov dword [section..data], 0x21000dd
sub rsp, 8
push 0x800
movabs rax, 0x140207502
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x15e
movabs r8, 0x58
movabs rdx, 0x104
movabs rcx, reloc.WS2_32.dll_listen
sub rsp, 0x20
call fcn.1400f87d8
add rsp, 0x40
mov dword [section..data], 0x21000de
movabs rax, str.Chemin_dacc
push rax
push gethostbyname
movabs r9, 0x18e
movabs r8, DispGetIDsOfNames
movabs rdx, 0x106
movabs rcx, SafeArrayGetLBound
sub rsp, 0x20
call fcn.1400f5b70
add rsp, 0x30
mov dword [section..data], 0x21000df
movabs rax, str.Enregistrer
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x4e
movabs r8, 0x7e
movabs rdx, 0x246
movabs rcx, reloc.WS2_32.dll_ntohs
sub rsp, 0x20
call fcn.1400f67e4
add rsp, 0x30
mov dword [section..data], 0x21000e2
movabs rax, 0x140207502
push rax
push 0x192
movabs r9, 0x1a6
movabs r8, 8
movabs rdx, 0xfa
movabs rcx, reloc.OLEAUT32.dll_SafeArrayGetDim
sub rsp, 0x20
call fcn.1400faa94
add rsp, 0x30
mov dword [section..data], 0x21000e3
push 0x4000000c
push __WSAFDIsSet
movabs rax, str.Groupes
push rax
push 0x17a
movabs r9, 0xaa
movabs r8, DispGetIDsOfNames
movabs rdx, 0x102
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.1400f7730
add rsp, 0x40
mov dword [section..data], 0x21000e4
movabs rax, 0x14020afce
push rax
push gethostbyname
movabs r9, 0xd2
movabs r8, DispGetIDsOfNames
movabs rdx, 0x1be
movabs rcx, DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f5b70
add rsp, 0x30
mov dword [section..data], 0x21000e5
movabs rax, str.Groupe_:
push rax
push 0xd6
movabs r9, 0xd6
movabs r8, 0x52
movabs rdx, 0x1ba
movabs rcx, reloc.WS2_32.dll_select
sub rsp, 0x20
call fcn.1400faa94
add rsp, 0x30
mov dword [section..data], 0x21000e6
movabs rax, str.Identifiant_Administrateur_local_:
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0xb6
movabs r8, 0x78
movabs rdx, 0x1c2
movabs rcx, DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f5b70
add rsp, 0x30
mov dword [section..data], 0x21000e7
movabs rax, 0x140207502
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x8c
movabs r8, __WSAFDIsSet
movabs rdx, 0x1c2
movabs rcx, reloc.OLEAUT32.dll_SafeArrayPutElement
sub rsp, 0x20
call fcn.1400f87b0
add rsp, 0x30
mov dword [section..data], 0x21000e8
movabs rax, str.Mot_de_passe_Administrateur_local_:
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0xc2
movabs r8, 0xc4
movabs rdx, 0x1c2
movabs rcx, reloc.OLEAUT32.dll_SafeArrayLock
sub rsp, 0x20
call fcn.1400f5b70
add rsp, 0x30
mov dword [section..data], 0x21000e9
movabs rax, 0x140207502
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x8c
movabs r8, 0xe0
movabs rdx, 0x1c2
movabs rcx, reloc.OLEAUT32.dll_SafeArrayGetLBound
sub rsp, 0x20
call fcn.1400f87b0
add rsp, 0x30
mov dword [section..data], 0x21000ea
movabs rax, str.Enregistrer
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x4e
movabs r8, 0x106
movabs rdx, 0x238
movabs rcx, DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f67e4
add rsp, 0x30
mov dword [section..data], 0x21000eb
sub rsp, 8
push reloc.OLEAUT32.dll_SafeArrayGetDim
movabs r9, reloc.OLEAUT32.dll_SafeArrayGetDim
movabs r8, 0xe4
movabs rdx, 0x25e
movabs rcx, reloc.WS2_32.dll_socket
sub rsp, 0x20
call fcn.1400f44a4
add rsp, 0x30
mov dword [section..data], 0x21000f0
movabs rax, 0x14020c8d6
mov r9, rax
movabs r8, 1
movabs rdx, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov rcx, qword [0x14021c83c]
call fcn.140051fe6
mov dword [section..data], 0x21000f1
mov r8, qword [0x14021ccdc]
movabs rdx, reloc.WS2_32.dll_socket
mov rcx, qword [0x14021c83c]
call fcn.14003a4e7
mov dword [section..data], 0x21000f3
movabs r8, 3
movabs rdx, 7
movabs rcx, reloc.WS2_32.dll_socket
call fcn.1400f4b0c
mov dword [section..data], 0x21000f6
movabs rax, 0x140207502
push rax
push 0x192
movabs r9, 0x1a6
movabs r8, 8
movabs rdx, 0xfa
movabs rcx, DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400faa94
add rsp, 0x30
mov dword [section..data], 0x21000f7
push 0x4000000c
push __WSAFDIsSet
movabs rax, str.Groupes
push rax
push 0x17a
movabs r9, 0xaa
movabs r8, DispGetIDsOfNames
movabs rdx, 0x102
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f7730
add rsp, 0x40
mov dword [section..data], 0x21000f8
movabs rax, str.Groupe_:
push rax
push 0x9e
movabs r9, 0xd6
movabs r8, 0x52
movabs rdx, 0x1ba
movabs rcx, reloc.OLEAUT32.dll_DispInvoke
sub rsp, 0x20
call fcn.1400faa94
add rsp, 0x30
mov dword [section..data], 0x21000f9
sub rsp, 8
push reloc.OLEAUT32.dll_SafeArrayGetDim
movabs r9, reloc.OLEAUT32.dll_SafeArrayGetDim
movabs r8, 0xac
movabs rdx, 0x25e
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f44a4
add rsp, 0x30
mov dword [section..data], 0x21000fa
movabs rax, 0x140207502
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x8c
movabs r8, 0xa8
movabs rdx, 0x1c2
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f87b0
add rsp, 0x30
mov dword [section..data], 0x21000fb
movabs rax, str.Mot_de_passe_VNC_:
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, reloc.WS2_32.dll_WSACleanup
movabs r8, 0x88
movabs rdx, 0x1c2
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f5b70
add rsp, 0x30
mov dword [section..data], 0x21000fc
movabs rax, str.Enregistrer
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
movabs r9, 0x4e
movabs r8, 0xce
movabs rdx, 0x238
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f67e4
add rsp, 0x30
mov dword [section..data], 0x21000fd
movabs rax, str.Choix_du_mot_de_passe_Vnc__multi_s
push rax
push gethostbyname
movabs r9, 0xd2
movabs r8, DispGetIDsOfNames
movabs rdx, 0x1be
movabs rcx, DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f5b70
add rsp, 0x30
mov dword [section..data], 0x21000ff
movabs rax, 0x14020c8d6
mov r9, rax
movabs r8, 1
movabs rdx, SafeArrayAllocDescriptor
mov rcx, qword [0x14021c83c]
call fcn.140051fe6
mov dword [section..data], 0x2100100
mov r8, qword [0x14021ccdc]
movabs rdx, SafeArrayAllocDescriptor
mov rcx, qword [0x14021c83c]
call fcn.14003a4e7
mov dword [section..data], 0x2100101
movabs r8, 3
movabs rdx, 7
movabs rcx, SafeArrayAllocDescriptor
call fcn.1400f4b0c
mov dword [section..data], 0x2100105
mov qword [rsp + 0x30], reloc.WS2_32.dll_inet_addr
jmp 0x14009f18c
mov dword [section..data], 0x2100105
mov rax, SafeArrayAllocDescriptor
cmp rax, qword [rsp + 0x30]
jl 0x14009f1c9
mov dword [section..data], 0x2100106
movabs rdx, 1
mov rcx, qword [rsp + 0x30]
call fcn.1400f592c
mov dword [section..data], 0x2100107
inc qword [rsp + 0x30]
jno 0x14009f182
mov dword [section..data], 0x210010a
lea rbp, [0x14021cd8c]
mov rdx, qword [rbp]
movabs rcx, reloc.WS2_32.dll_listen
call fcn.1400f4a88
mov dword [section..data], 0x2100111
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
call fcn.140095465
mov dword [section..data], 0x2100112
movabs rcx, reloc.WS2_32.dll_recvfrom
call fcn.140095465
mov dword [section..data], 0x2100115
push qword [0x14021cc4c]
movabs rcx, 0x140207502
pop rdx
call fcn.14012b640
or rax, rax
jne 0x14009f364
mov dword [section..data], 0x2100116
push 1
push 0
movabs r9, 1
movabs r8, 0xffffffffffffffff
mov rdx, qword [0x14021cc4c]
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.14009387b
add rsp, 0x28
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
pop r8
call fcn.1400f54b4
mov dword [section..data], 0x2100117
movabs r9, 0
movabs r8, reloc.OLEAUT32.dll_DispGetIDsOfNames
mov rdx, qword [0x14021c83c]
movabs rcx, 0x332c
call fcn.140109de0
mov dword [section..data], 0x2100118
push 1
push 0
movabs r9, 1
movabs r8, 0xffffffffffffffff
mov rdx, qword [0x14021cc4c]
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.14009387b
add rsp, 0x28
mov rdx, rax
movabs rcx, reloc.WS2_32.dll_recvfrom
pop r8
call fcn.1400f54b4
mov dword [section..data], 0x2100119
movabs r9, 0
movabs r8, reloc.WS2_32.dll_recvfrom
mov rdx, qword [0x14021c83c]
movabs rcx, 0x332c
call fcn.140109de0
mov dword [section..data], 0x210011a
mov dword [section..data], 0x210011f
mov dword [section..data], 0x2100120
call fcn.140107c70
mov qword [rsp + 0x38], rax
mov dword [section..data], 0x2100121
call fcn.140109e9c
mov qword [rsp + 0x40], rax
mov dword [section..data], 0x2100123
push qword [rsp + 0x38]
mov dword [section..data], 0x2100124
mov r15, 0x332c
cmp r15, qword [rsp]
jne 0x1400a07ce
mov dword [section..data], 0x2100125
sub rsp, 8
sub rsp, 0x20
call fcn.140109eb8
add rsp, 0x28
push rax
mov dword [section..data], 0x2100126
mov r15, reloc.OLEAUT32.dll_VariantTimeToDosDateTime
cmp r15, qword [rsp]
jne 0x14009f4da
mov dword [section..data], 0x2100127
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push 0
movabs rax, 0x140208900
push rax
movabs rax, str.vncviewer.exe
push rax
movabs rax, str.Emplacement_de_VncViewer.exe
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400c551c
add rsp, 0x28
lea rcx, [rsp + 0x60]
pop rdx
sub rsp, 0x20
call fcn.14012b4f0
add rsp, 0x20
mov dword [section..data], 0x2100128
mov rcx, qword [rsp + 0x58]
xor rdx, rdx
sub rsp, 0x20
call fcn.14012b640
add rsp, 0x20
or rax, rax
jne 0x14009f4c1
mov dword [section..data], 0x2100129
mov rdx, qword [rsp + 0x58]
movabs rcx, reloc.WS2_32.dll_listen
sub rsp, 0x20
call fcn.1400f4a88
add rsp, 0x20
mov dword [section..data], 0x210012a
mov dword [section..data], 0x210012c
jmp 0x1400a07b4
mov dword [section..data], 0x210012c
mov r15, reloc.WS2_32.dll_ntohs
cmp r15, qword [rsp]
jne 0x14009f603
mov dword [section..data], 0x210012d
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.WS2_32.dll_listen
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x28
call fcn.14012b700
movabs rcx, 0x140207502
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14012b790
add rsp, 0x20
pop rcx
mov rdx, rax
sub rsp, 0x20
call fcn.14012b640
add rsp, 0x20
or rax, rax
jne 0x14009f5ea
mov dword [section..data], 0x210012e
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.WS2_32.dll_listen
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x28
lea rbp, [0x14021cd8c]
lea rcx, [rbp]
pop rdx
sub rsp, 0x20
call fcn.14012b4f0
add rsp, 0x20
mov dword [section..data], 0x210012f
sub rsp, 0x20
call fcn.1400a22ae
add rsp, 0x20
mov dword [section..data], 0x2100130
mov dword [section..data], 0x2100140
jmp 0x1400a07b4
mov dword [section..data], 0x2100140
mov r15, 0xa
cmp r15, qword [rsp]
jne 0x14009f6d0
mov dword [section..data], 0x2100141
mov rdx, qword [rsp + 0x38]
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140107e5c
add rsp, 0x20
mov dword [section..data], 0x2100142
push 0
push 0
movabs rax, 0x140207502
push rax
push 0xffffffffffff0001
push 0xffffffffffff0001
movabs rax, 0x140207502
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009314f
add rsp, 0x30
mov dword [section..data], 0x2100143
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.14010742c
add rsp, 0x20
mov dword [section..data], 0x2100144
mov rax, 0xffffffffffffffff
add rsp, 0x10
jmp 0x1400a098e
mov dword [section..data], 0x2100146
mov r15, SafeArrayAllocDescriptor
cmp r15, qword [rsp]
jne 0x14009f830
mov dword [section..data], 0x2100147
sub rsp, 0x20
call fcn.140109e9c
add rsp, 0x20
mov r15, rax
cmp r15, 0x10004
jne 0x14009f77c
mov dword [section..data], 0x2100148
mov r8, qword [0x14021c644]
movabs rdx, SafeArrayAllocDescriptor
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.14003a4e7
add rsp, 0x20
mov dword [section..data], 0x2100149
movabs rax, 0x14020c8d6
mov r9, rax
movabs r8, 0
movabs rdx, SafeArrayAllocDescriptor
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140051fe6
add rsp, 0x20
mov dword [section..data], 0x210014a
mov dword [section..data], 0x210014b
sub rsp, 0x20
call fcn.140109e9c
add rsp, 0x20
mov r15, rax
cmp r15, 0x10005
jne 0x14009f817
mov dword [section..data], 0x210014c
mov r8, qword [0x14021ccdc]
movabs rdx, SafeArrayAllocDescriptor
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.14003a4e7
add rsp, 0x20
mov dword [section..data], 0x210014d
movabs rax, 0x14020c8d6
mov r9, rax
movabs r8, 1
movabs rdx, SafeArrayAllocDescriptor
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140051fe6
add rsp, 0x20
mov dword [section..data], 0x210014e
mov dword [section..data], 0x2100151
jmp 0x1400a07b4
mov dword [section..data], 0x2100151
mov r15, reloc.WS2_32.dll_socket
cmp r15, qword [rsp]
jne 0x14009f990
mov dword [section..data], 0x2100152
sub rsp, 0x20
call fcn.140109e9c
add rsp, 0x20
mov r15, rax
cmp r15, 0x10004
jne 0x14009f8dc
mov dword [section..data], 0x2100153
mov r8, qword [0x14021c644]
movabs rdx, reloc.WS2_32.dll_socket
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.14003a4e7
add rsp, 0x20
mov dword [section..data], 0x2100154
movabs rax, 0x14020c8d6
mov r9, rax
movabs r8, 0
movabs rdx, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140051fe6
add rsp, 0x20
mov dword [section..data], 0x2100155
mov dword [section..data], 0x2100156
sub rsp, 0x20
call fcn.140109e9c
add rsp, 0x20
mov r15, rax
cmp r15, 0x10005
jne 0x14009f977
mov dword [section..data], 0x2100157
mov r8, qword [0x14021ccdc]
movabs rdx, reloc.WS2_32.dll_socket
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.14003a4e7
add rsp, 0x20
mov dword [section..data], 0x2100158
movabs rax, 0x14020c8d6
mov r9, rax
movabs r8, 1
movabs rdx, reloc.OLEAUT32.dll_SafeArrayGetLBound
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140051fe6
add rsp, 0x20
mov dword [section..data], 0x2100159
mov dword [section..data], 0x210015c
jmp 0x1400a07b4
mov dword [section..data], 0x210015c
mov r15, SafeArrayAllocDescriptor
cmp r15, qword [rsp]
jne 0x14009ff32
mov dword [section..data], 0x210015d
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f5544
add rsp, 0x20
mov r15, rax
cmp r15, 0xffffffffffffffff
je 0x14009fedf
mov dword [section..data], 0x210015f
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x28
call fcn.14012b700
movabs rcx, 0x140207502
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14012b790
add rsp, 0x20
pop rcx
mov rdx, rax
sub rsp, 0x20
call fcn.14012b640
add rsp, 0x20
or rax, rax
jne 0x14009fe8f
mov dword [section..data], 0x2100161
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400519c8
add rsp, 0x20
mov r15, rax
cmp r15, 1
jne 0x14009fbaa
mov dword [section..data], 0x2100162
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rax, str.pass_vnc
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
push 1
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140060539
add rsp, 0x28
call fcn.14012b700
sub rsp, 8
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400f5544
add rsp, 0x28
push rax
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140083f29
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd588
add rsp, 0x28
pop rax
mov dword [section..data], 0x2100163
sub rsp, 0x20
call fcn.1400985f0
add rsp, 0x20
mov dword [section..data], 0x2100165
jmp 0x14009fe04
mov dword [section..data], 0x2100165
mov dword [section..data], 0x2100167
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.140086ebf
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
sub rsp, 0x20
call fcn.14012b4f0
add rsp, 0x20
mov dword [section..data], 0x2100168
movabs rdx, 0x140207502
lea rcx, [rsp + 0x68]
sub rsp, 0x20
call fcn.14012b3b0
add rsp, 0x20
mov dword [section..data], 0x2100169
mov qword [rsp + 0x40], 1
jmp 0x14009fc4d
mov dword [section..data], 0x2100169
movabs rcx, reloc.OLEAUT32.dll_DispGetIDsOfNames
sub rsp, 0x20
call fcn.1400519c8
add rsp, 0x20
cmp rax, qword [rsp + 0x40]
jl 0x14009fded
mov dword [section..data], 0x210016a
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rax, str.pass_vnc
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, SafeArrayAllocDescriptor
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
push 1
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140060539
add rsp, 0x28
call fcn.14012b700
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x140209102
mov r8, rax
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x98]
pop r9
sub rsp, 0x20
call fcn.140127630
add rsp, 0x28
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1401277b0
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.1400bd588
add rsp, 0x20
pop rax
push rax
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140083f29
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd588
add rsp, 0x28
pop rax
mov dword [section..data], 0x210016b
inc qword [rsp + 0x40]
jno 0x14009fc43
mov dword [section..data], 0x210016c
sub rsp, 0x20
call fcn.1400985f0
add rsp, 0x20
mov dword [section..data], 0x210016d
mov dword [section..data], 0x210016e
push 0
push 0
movabs rax, 0x140207502
push rax
push 0xffffffffffff0001
push 0xffffffffffff0001
movabs rax, str.Mot_de_passe_appliqu
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009314f
add rsp, 0x30
mov dword [section..data], 0x210016f
movabs r8, 0xbb8
mov rdx, qword [rsp + 0x38]
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140107b14
add rsp, 0x20
mov dword [section..data], 0x2100170
jmp 0x14009fec9
mov dword [section..data], 0x2100170
mov dword [section..data], 0x2100171
movabs rax, str.Veuillez_saisir_un_mot_de_passe
push rax
movabs rax, str.Avertissement
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.1400c49b4
add rsp, 0x20
mov dword [section..data], 0x2100172
mov dword [section..data], 0x2100173
jmp 0x14009ff19
mov dword [section..data], 0x2100173
mov dword [section..data], 0x2100174
movabs rax, 0x14020cd36
push rax
movabs rax, str.Avertissement
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.1400c49b4
add rsp, 0x20
mov dword [section..data], 0x2100175
mov dword [section..data], 0x2100177
jmp 0x1400a07b4
mov dword [section..data], 0x2100177
mov r15, socket
cmp r15, qword [rsp]
jne 0x1400a0703
mov dword [section..data], 0x2100178
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.1400f5544
add rsp, 0x20
mov r15, rax
cmp r15, 0xffffffffffffffff
je 0x1400a06b0
mov dword [section..data], 0x210017a
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayPutElement
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x28
call fcn.14012b700
movabs rcx, 0x140207502
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14012b790
add rsp, 0x20
pop rcx
mov rdx, rax
sub rsp, 0x20
call fcn.14012b640
add rsp, 0x20
or rax, rax
jne 0x1400a0076
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayGetLBound
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x28
call fcn.14012b700
movabs rcx, 0x140207502
pop rdx
push rcx
mov rcx, rdx
sub rsp, 0x20
call fcn.14012b790
add rsp, 0x20
pop rcx
mov rdx, rax
sub rsp, 0x20
call fcn.14012b640
add rsp, 0x20
or rax, rax
jne 0x1400a0076
mov rax, 1
jmp 0x1400a0079
xor rax, rax
and rax, rax
je 0x1400a0660
mov dword [section..data], 0x210017c
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.1400519c8
add rsp, 0x20
mov r15, rax
cmp r15, 1
jne 0x1400a021c
mov dword [section..data], 0x210017d
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rax, str.pass_paexec
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayGetLBound
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
push 1
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140060539
add rsp, 0x28
call fcn.14012b700
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayPutElement
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.1400f5544
add rsp, 0x20
push rax
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14004797d
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd588
add rsp, 0x28
pop rax
mov dword [section..data], 0x210017e
sub rsp, 0x20
call fcn.1400985f0
add rsp, 0x20
mov dword [section..data], 0x2100180
jmp 0x1400a04cc
mov dword [section..data], 0x2100180
mov dword [section..data], 0x2100182
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.140086ebf
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
sub rsp, 0x20
call fcn.14012b4f0
add rsp, 0x20
mov dword [section..data], 0x2100183
movabs rdx, 0x140207502
lea rcx, [rsp + 0x68]
sub rsp, 0x20
call fcn.14012b3b0
add rsp, 0x20
mov dword [section..data], 0x2100184
mov qword [rsp + 0x40], 1
jmp 0x1400a02bf
mov dword [section..data], 0x2100184
movabs rcx, reloc.WS2_32.dll_recvfrom
sub rsp, 0x20
call fcn.1400519c8
add rsp, 0x20
cmp rax, qword [rsp + 0x40]
jl 0x1400a04b5
mov dword [section..data], 0x2100185
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rax, str.pass_paexec
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayGetLBound
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
push 1
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140060539
add rsp, 0x28
call fcn.14012b700
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayPutElement
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
movabs rax, 0x140209102
mov r8, rax
mov rdx, qword [rsp + 0x88]
mov rcx, qword [rsp + 0xa8]
pop r9
sub rsp, 0x20
call fcn.140127630
add rsp, 0x28
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.1401277b0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd588
add rsp, 0x28
pop rax
push rax
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 0x10], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14004797d
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400bd588
add rsp, 0x28
pop rax
mov dword [section..data], 0x2100186
inc qword [rsp + 0x40]
jno 0x1400a02b5
mov dword [section..data], 0x2100187
sub rsp, 0x20
call fcn.1400985f0
add rsp, 0x20
mov dword [section..data], 0x2100188
mov dword [section..data], 0x210018b
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayPutElement
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x28
lea rcx, [0x14021cc7c]
pop rdx
sub rsp, 0x20
call fcn.14012b4f0
add rsp, 0x20
mov dword [section..data], 0x210018c
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
movabs rax, str.pass_paexec
push rax
push rcx
sub rsp, 0x20
call fcn.14012b4a0
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14012b4a0
add rsp, 0x28
pop rcx
mov rdx, rax
movabs rcx, reloc.OLEAUT32.dll_SafeArrayGetLBound
sub rsp, 0x20
call fcn.1400f5734
add rsp, 0x20
call fcn.14012b700
push 1
push rax
call fcn.14012b6d0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.140060539
add rsp, 0x28
lea rcx, [0x14021c95c]
pop rdx
sub rsp, 0x20
call fcn.14012b4f0
add rsp, 0x20
mov dword [section..data], 0x210018e
push 0
push 0
movabs rax, 0x140207502
push rax
push 0xffffffffffff0001
push 0xffffffffffff0001
movabs rax, str.Identifiant_et_mot_de_passe_appliqu
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009314f
add rsp, 0x30
mov dword [section..data], 0x210018f
movabs r8, 0xbb8
mov rdx, qword [rsp + 0x38]
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140107b14
add rsp, 0x20
mov dword [section..data], 0x2100190
jmp 0x1400a069a
mov dword [section..data], 0x2100190
mov dword [section..data], 0x2100191
movabs rax, 0x140210d14
push rax
movabs rax, str.Avertissement
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.1400c49b4
add rsp, 0x20
mov dword [section..data], 0x2100192
mov dword [section..data], 0x2100193
jmp 0x1400a06ea
mov dword [section..data], 0x2100193
mov dword [section..data], 0x2100194
movabs rax, 0x14020cd36
push rax
movabs rax, str.Avertissement
mov rcx, rax
pop rdx
sub rsp, 0x20
call fcn.1400c49b4
add rsp, 0x20
mov dword [section..data], 0x2100195
mov dword [section..data], 0x2100197
jmp 0x1400a07b4
mov dword [section..data], 0x2100197
mov r15, 9
cmp r15, qword [rsp]
jne 0x1400a0742
mov dword [section..data], 0x2100198
mov rcx, qword [rsp + 0x50]
sub rsp, 0x20
call fcn.14002ea2d
add rsp, 0x20
mov dword [section..data], 0x210019a
jmp 0x1400a07b4
mov dword [section..data], 0x210019a
mov r15, reloc.OLEAUT32.dll_DispGetIDsOfNames
cmp r15, qword [rsp]
jne 0x1400a0781
mov dword [section..data], 0x210019b
mov rcx, qword [rsp + 0x50]
sub rsp, 0x20
call fcn.140051a30
add rsp, 0x20
mov dword [section..data], 0x210019d
jmp 0x1400a07b4
mov dword [section..data], 0x210019d
mov r15, reloc.WS2_32.dll_recvfrom
cmp r15, qword [rsp]
jne 0x1400a07b4
mov dword [section..data], 0x210019e
mov rcx, qword [rsp + 0x50]
sub rsp, 0x20
call fcn.140035d5b
add rsp, 0x20
mov dword [section..data], 0x21001a0
pop rax
mov dword [section..data], 0x21001a2
jmp 0x1400a0964
mov dword [section..data], 0x21001a2
mov r15, 0x333c
cmp r15, qword [rsp]
jne 0x1400a08a7
mov dword [section..data], 0x21001a3
sub rsp, 8
mov rdx, qword [rsp + 0x38]
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140107e5c
add rsp, 0x28
mov dword [section..data], 0x21001a4
sub rsp, 8
push 0
push 0
movabs rax, 0x140207502
push rax
push 0xffffffffffff0001
push 0xffffffffffff0001
movabs rax, 0x140207502
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009314f
add rsp, 0x38
mov dword [section..data], 0x21001a5
sub rsp, 8
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.14010742c
add rsp, 0x28
mov dword [section..data], 0x21001a6
mov rax, 0xffffffffffffffff
add rsp, 8
jmp 0x1400a098e
mov dword [section..data], 0x21001a8
mov r15, 0x3336
cmp r15, qword [rsp]
jne 0x1400a0964
mov dword [section..data], 0x21001a9
sub rsp, 8
sub rsp, 0x20
call fcn.140109ed4
add rsp, 0x28
mov r15, rax
cmp r15, qword [rsp + 0x30]
jne 0x1400a095a
mov dword [section..data], 0x21001aa
sub rsp, 8
mov rdx, qword [rsp + 0x38]
mov rcx, qword [0x14021c83c]
sub rsp, 0x20
call fcn.140107e5c
add rsp, 0x28
mov dword [section..data], 0x21001ab
sub rsp, 8
push 0
push 0
movabs rax, 0x140207502
push rax
push 0xffffffffffff0001
push 0xffffffffffff0001
movabs rax, 0x140207502
mov rcx, rax
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14009314f
add rsp, 0x38
mov dword [section..data], 0x21001ac
mov dword [section..data], 0x21001ae
add rsp, 8
mov dword [section..data], 0x21001af
jmp 0x14009f36e
push rax
mov rcx, qword [rsp + 0x50]
sub rsp, 0x28
call fcn.14012b910
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.14012b910
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14012b910
add rsp, 0x28
pop rax
add rsp, 0x68
pop r15
pop rbp
ret