Function at 0x14003d538
Capabilities:
Accept command line arguments

Disassembly:
mov rax, rsp
push r13
push r14
push r15
sub rsp, 0x9a0
mov qword [rsp + 0x4c0], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov rax, qword [0x140067290]
xor rax, rsp
mov qword [rsp + 0x998], rax
xor ebx, ebx
mov dword [rsp + 0x88], ebx
lea rsi, [0x140071210]
mov qword [rsp + 0x90], rsi
mov al, bl
mov byte [rsp + 0x81], bl
mov byte [rsp + 0x80], bl
mov dword [rsp + 0xa0], ebx
mov byte [0x140071534], bl
call fcn.14003d4b8
mov eax, dword [0x140071488]
cmp dword [0x140056123], eax
je 0x14003d68e
lea r8, str.ZbYa8RpWgjatTYBFRyhJrSb7PCqxf0vK77xNDNVSBpK27_XgzwNaZ
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x790]
call fcn.140038950
nop
cmp qword [rax + 0x18], 0x10
jb 0x14003d5e8
mov rax, qword [rax]
mov qword [rsp + 0x98], rax
lea rdx, [rsp + 0x98]
lea rcx, [rsp + 0x308]
call fcn.140016378
lea rdi, [0x1400575b0]
mov qword [rsp + 0x308], rdi
mov dword [rsp + 0x320], ebx
cmp qword [rsp + 0x7a8], 0x10
jb 0x14003d633
mov rcx, qword [rsp + 0x790]
call fcn.140015e1c
mov qword [rsp + 0x7a8], 0xf
mov qword [rsp + 0x7a0], rbx
mov byte [rsp + 0x790], bl
lea rdx, [rsp + 0x308]
lea rcx, [rsp + 0x4c8]
call fcn.140016464
mov qword [rsp + 0x4c8], rdi
mov eax, dword [rsp + 0x320]
mov dword [rsp + 0x4e0], eax
lea rdx, [0x140064590]
lea rcx, [rsp + 0x4c8]
call fcn.140019a18
nop
cmp qword [0x1400713d0], rbx
je 0x14003d6b9
call fcn.14003b8f8
mov byte [rsp + 0x81], al
mov byte [rsp + 0x80], al
cmp al, 1
jne 0x14003d6b9
mov r13d, 0xa
jmp 0x14003f438
lea r8, [0x1400715c0]
mov edx, 0x451
mov rcx, rsi
call fcn.14003bee8
cmp qword [0x1400715d0], 2
jbe 0x14003d717
cmp qword [0x140071540], rbx
jne 0x14003d717
mov r8, qword [0x140071560]
mov rdx, qword [0x140071568]
lea rcx, [0x1400715c0]
call fcn.14003ceb8
mov byte [rsp + 0x81], al
mov byte [rsp + 0x80], al
cmp al, 1
jne 0x14003d717
mov r13d, 0xa
jmp 0x14003f438
call fcn.14003b768
mov ecx, dword [0x140071538]
call fcn.14003aff8
test al, al
jne 0x14003d82c
lea rcx, [0x1400714e0]
call fcn.140039880
mov esi, select
mov qword [rsp + 0x730], rsi
mov qword [rsp + 0x728], rbx
mov byte [rsp + 0x718], bl
lea r8d, [rsi + 0x28]
lea rdx, str.This_application_can_only_be_started_with_Excel_64_bit.
lea rcx, [rsp + 0x718]
call fcn.140007230
nop
lea rax, [rsp + 0x718]
cmp qword [rsp + 0x730], 0x10
cmovae rax, qword [rsp + 0x718]
mov qword [rsp + 0x140], rax
lea rdx, [rsp + 0x140]
lea rcx, [rsp + 0x348]
call fcn.140016378
lea rdi, [0x1400575b0]
mov qword [rsp + 0x348], rdi
mov dword [rsp + 0x360], ebx
cmp qword [rsp + 0x730], 0x10
jb 0x14003d7d5
mov rcx, qword [rsp + 0x718]
call fcn.140015e1c
mov qword [rsp + 0x730], rsi
mov qword [rsp + 0x728], rbx
mov byte [rsp + 0x718], bl
lea rdx, [rsp + 0x348]
lea rcx, [rsp + 0x610]
call fcn.140016464
mov qword [rsp + 0x610], rdi
mov eax, dword [rsp + 0x360]
mov dword [rsp + 0x628], eax
lea rdx, [0x140064590]
lea rcx, [rsp + 0x610]
call fcn.140019a18
nop
call fcn.14003c5b8
mov dword [rsp + 0xa0], eax
cmp byte [0x14007138c], 1
jne 0x14003d9af
cmp dword [0x140071538], 9
jg 0x14003d9af
mov ecx, dword [0x14007154c]
test ecx, ecx
je 0x14003d86d
xor r9d, r9d
xor r8d, r8d
mov edx, 0x502
call qword [sym.imp.USER32.dll_PostThreadMessageW]
lea r8, str.7j_aA3cIf2
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x970]
call fcn.140038950
nop
mov rdx, rax
lea rcx, [rsp + 0x880]
call fcn.140039260
mov rdi, rax
lea r8, str.kjK5AoN22i7oVWBCHsxHIS7QbsQe9pKBBrcDksbAKOBHNeaZhkpInRE76
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x8d0]
call fcn.140038950
nop
mov rdx, rax
lea rcx, [rsp + 0x808]
call fcn.140039260
mov r12d, 8
cmp qword [rdi + 0x18], r12
jb 0x14003d8d7
mov rdi, qword [rdi]
cmp qword [rax + 0x18], r12
jb 0x14003d8e0
mov rax, qword [rax]
mov r9d, gethostbyname
mov r8, rdi
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp qword [rsp + 0x820], r12
jb 0x14003d90b
mov rcx, qword [rsp + 0x808]
call fcn.140015e1c
mov edi, 7
mov qword [rsp + 0x820], rdi
mov qword [rsp + 0x818], rbx
mov word [rsp + 0x808], bx
cmp qword [rsp + 0x8e8], 0x10
jb 0x14003d940
mov rcx, qword [rsp + 0x8d0]
call fcn.140015e1c
mov qword [rsp + 0x8e8], 0xf
mov qword [rsp + 0x8e0], rbx
mov byte [rsp + 0x8d0], bl
cmp qword [rsp + 0x898], r12
jb 0x14003d972
mov rcx, qword [rsp + 0x880]
call fcn.140015e1c
mov qword [rsp + 0x898], rdi
mov qword [rsp + 0x890], rbx
mov word [rsp + 0x880], bx
cmp qword [rsp + 0x988], 0x10
jb 0x14003d9a2
mov rcx, qword [rsp + 0x970]
call fcn.140015e1c
mov al, 1
mov r13d, 0xa
jmp 0x14003f438
mov r14d, ebx
mov dword [rsp + 0x98], ebx
lea r12, [0x1400714e0]
mov rcx, r12
mov rax, qword [0x1400714e0]
call qword [rax + 0x28]
test rax, rax
je 0x14003da44
lea rdx, [rsp + 0x560]
mov rcx, r12
call fcn.14003a6b0
nop
mov rcx, rax
call fcn.1400435a8
movzx r14d, al
mov dword [rsp + 0x98], r14d
lea rdi, [0x1400580a0]
mov qword [rsp + 0x560], rdi
mov rcx, qword [rsp + 0x568]
test rcx, rcx
je 0x14003da21
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x568], rbx
lea rcx, [rsp + 0x578]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x568]
test rcx, rcx
je 0x14003da4b
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
jmp 0x14003da4b
lea rdi, [0x1400580a0]
mov eax, ntohl
xor r9d, r9d
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [0x1400714e8]
call fcn.140014150
mov dword [0x1400714f0], eax
call fcn.14003c728
mov qword [rsp + 0x780], 7
mov qword [rsp + 0x778], rbx
mov word [rsp + 0x768], bx
lea rdx, [rsp + 0x768]
mov r13d, select
mov ecx, r13d
call fcn.140038bd0
lea rdx, [rsp + 0x768]
lea r15d, [r13 - 7]
cmp qword [rsp + 0x780], r15
cmovae rdx, qword [rsp + 0x768]
lea rcx, [rsp + 0xc0]
call fcn.140008464
mov rdx, rax
mov rcx, r12
call fcn.140039700
lea rax, [rsp + 0x248]
mov qword [rsp + 0x130], rax
lea eax, [r13 - 5]
mov word [rsp + 0x248], ax
mov dword [rsp + 0x250], 0x80020004
lea rdx, [rsp + 0x598]
mov rcx, r12
call fcn.14003a7e0
nop
lea r8, [rsp + 0x248]
lea rdx, [rsp + 0x100]
mov rcx, rax
call fcn.140044580
nop
mov qword [rsp + 0x598], rdi
mov rcx, qword [rsp + 0x5a0]
test rcx, rcx
je 0x14003db4e
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x5a0], rbx
lea rcx, [rsp + 0x5b0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x5a0]
test rcx, rcx
je 0x14003db6f
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
lea rcx, [rsp + 0x100]
mov rax, qword [rsp + 0x100]
call qword [rax + 0x28]
test rax, rax
je 0x14003dd22
xor r9d, r9d
lea eax, [r9 + 0xb]
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [0x1400714e8]
call fcn.140014150
mov dword [0x1400714f0], eax
cmp byte [0x14007138b], bl
jne 0x14003dcb8
lea rdx, [rsp + 0x5e0]
lea rcx, [rsp + 0x100]
call fcn.140044c54
mov rcx, rax
mov eax, 3
mov word [rsp + 0x4e8], ax
mov dword [rsp + 0x4f0], 1
mov rax, qword [rcx]
lea r8, [rsp + 0x4e8]
lea rdx, [rsp + 0x388]
call qword [rax + 0x50]
nop
mov qword [rsp + 0x5e0], rdi
mov rcx, qword [rsp + 0x5e8]
test rcx, rcx
je 0x14003dc23
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x5e8], rbx
lea rcx, [rsp + 0x5f8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x5e8]
test rcx, rcx
je 0x14003dc44
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
lea rcx, [rsp + 0x388]
call fcn.140043660
xor r9d, r9d
lea eax, [r9 + 0xb]
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [0x1400714e8]
call fcn.140014150
mov dword [0x1400714f0], eax
mov qword [rsp + 0x388], rdi
mov rcx, qword [rsp + 0x390]
test rcx, rcx
je 0x14003dc96
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x390], rbx
lea rcx, [rsp + 0x3a0]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x390]
test rcx, rcx
je 0x14003dcb8
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
nop
jmp 0x14003dce9
mov edi, ntohl
cmp byte [0x14007152c], bl
je 0x14003dd22
cmp dword [0x140071538], r13d
jge 0x14003dd22
call fcn.14003cc68
xor r9d, r9d
movzx r8d, di
mov edx, 0x22e
mov rcx, qword [0x1400714e8]
call fcn.140014150
mov dword [0x1400714f0], eax
mov rcx, r12
cmp dword [0x140071538], 0xe
jl 0x14003dd3f
call fcn.14003adf8
mov qword [0x140071510], rax
jmp 0x14003de48
lea rdx, [rsp + 0x138]
call fcn.140039990
mov rdi, rax
lea r8, str.PvUSK2ZJ
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x7e0]
call fcn.140038950
nop
mov rdx, rax
lea rcx, [rsp + 0x7b8]
call fcn.140039260
mov rcx, qword [rdi]
test rcx, rcx
je 0x14003dd88
mov rdx, qword [rcx]
jmp 0x14003dd8b
mov rdx, rbx
cmp qword [rax + 0x18], r15
jb 0x14003dd94
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.USER32.dll_FindWindowW]
mov qword [0x140071510], rax
cmp qword [rsp + 0x7d0], r15
jb 0x14003ddbb
mov rcx, qword [rsp + 0x7b8]
call fcn.140015e1c
mov qword [rsp + 0x7d0], 7
mov qword [rsp + 0x7c8], rbx
mov word [rsp + 0x7b8], bx
cmp qword [rsp + 0x7f8], 0x10
jb 0x14003ddef
mov rcx, qword [rsp + 0x7e0]
call fcn.140015e1c
mov qword [rsp + 0x7f8], r13
mov qword [rsp + 0x7f0], rbx
mov byte [rsp + 0x7e0], bl
mov rdi, qword [rsp + 0x138]
test rdi, rdi
je 0x14003de48
or eax, 0xffffffff
lock xadd dword [rdi + 0x10], eax
dec eax
jne 0x14003de48
test rdi, rdi
je 0x14003de48
cmp qword [rdi], rbx
je 0x14003de32
mov rcx, qword [rdi]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x14003de40
call fcn.140016074
mov rcx, rdi
call fcn.140015e1c
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14003f296
lea rdx, [rsp + 0x84]
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea r13, [0x1400712b0]
mov rdx, r13
cmp qword [0x1400712c8], r15
cmovae rdx, qword [0x1400712b0]
mov ecx, dword [rsp + 0x84]
call fcn.1400358c0
test eax, eax
jne 0x14003e02e
lea rax, [rsp + 0x2f0]
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea r15, reloc.WSOCK32.dll_inet_addr
mov rdx, r15
lea rcx, [rsp + 0x2f0]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003dee1
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x530]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x530]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003df0b
mov ecx, eax
call fcn.1400140c0
mov eax, ntohl
mov word [rsp + 0x3b8], ax
mov word [rsp + 0x3c0], bx
lea r9, [rsp + 0x2f0]
lea r8, [rsp + 0x530]
lea rdx, [rsp + 0x3b8]
lea rcx, [rsp + 0x100]
call fcn.140044a24
xor edx, edx
lea rcx, [rsp + 0x100]
mov rax, qword [rsp + 0x100]
call qword [rax + 0x18]
mov rcx, r12
call fcn.140039880
lea r8, str.gbbqE3svfLcyUkZasTpmQpatcpxfAlTZDlFsF6BMyx3CV5XcfVWs_EU5NC4WMTkr6Gb3
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x858]
call fcn.140038950
nop
cmp qword [rax + 0x18], 0x10
jb 0x14003df88
mov rax, qword [rax]
mov qword [rsp + 0xa8], rax
lea rdx, [rsp + 0xa8]
lea rcx, [rsp + 0x368]
call fcn.140016378
lea rdi, [0x1400575b0]
mov qword [rsp + 0x368], rdi
mov dword [rsp + 0x380], ebx
cmp qword [rsp + 0x870], 0x10
jb 0x14003dfd3
mov rcx, qword [rsp + 0x858]
call fcn.140015e1c
mov qword [rsp + 0x870], 0xf
mov qword [rsp + 0x868], rbx
mov byte [rsp + 0x858], bl
lea rdx, [rsp + 0x368]
lea rcx, [rsp + 0x3f0]
call fcn.140016464
mov qword [rsp + 0x3f0], rdi
mov eax, dword [rsp + 0x380]
mov dword [rsp + 0x408], eax
lea rdx, [0x140064590]
lea rcx, [rsp + 0x3f0]
call fcn.140019a18
nop
lea rcx, [rsp + 0x100]
call fcn.1400448f4
lea rax, [rsp + 0x2d8]
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea r15, reloc.WSOCK32.dll_inet_addr
mov rdx, r15
lea rcx, [rsp + 0x2d8]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003e07d
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x490]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x490]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003e0a7
mov ecx, eax
call fcn.1400140c0
mov eax, ntohl
mov word [rsp + 0x430], ax
mov word [rsp + 0x438], bx
lea r9, [rsp + 0x2d8]
lea r8, [rsp + 0x490]
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x100]
call fcn.140044a24
xor edx, edx
lea rcx, [rsp + 0x100]
mov rax, qword [rsp + 0x100]
call qword [rax + 0x18]
lea r8, str.gbbqE3svfLcyUk3
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x948]
call fcn.140038950
nop
mov rdx, rax
lea rcx, [rsp + 0x8a8]
call fcn.140039260
nop
cmp qword [rax + 0x18], 8
jb 0x14003e12d
mov rax, qword [rax]
mov rdx, rax
lea rcx, [rsp + 0x150]
call fcn.140008464
mov rdx, rax
mov rcx, r12
call fcn.140039700
nop
cmp qword [rsp + 0x8c0], 8
jb 0x14003e161
mov rcx, qword [rsp + 0x8a8]
call fcn.140015e1c
mov qword [rsp + 0x8c0], 7
mov qword [rsp + 0x8b8], rbx
mov word [rsp + 0x8a8], bx
cmp qword [rsp + 0x960], 0x10
jb 0x14003e195
mov rcx, qword [rsp + 0x948]
call fcn.140015e1c
mov r9, qword [0x140071560]
test r9, r9
jne 0x14003e1ad
mov r9, qword [0x140071568]
test r9, r9
je 0x14003e1c4
mov r8d, 1
lea edx, [r8 + 0x7f]
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov r8d, eax
mov r9d, r14d
mov edx, 0x487
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
lea eax, [r9 + 0xb]
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [0x1400714e8]
call fcn.140014150
mov dword [0x1400714f0], eax
mov rcx, r12
call fcn.1400396c0
movsxd r8, eax
xor r9d, r9d
mov edx, 0x49d
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x140071540]
test r8, r8
je 0x14003e245
xor r9d, r9d
mov edx, 0x49a
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x708], 0xf
mov qword [rsp + 0x700], rbx
mov byte [rsp + 0x6f0], bl
mov r8, qword [0x140071248]
test r8, r8
je 0x14003e2ae
lea rdx, [0x140071238]
cmp qword [0x140071250], 8
cmovae rdx, qword [0x140071238]
add r8, r8
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x140071248]
mov r8, rax
mov edx, 0x488
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdx, [rsp + 0x6f0]
mov ecx, 0x413
call fcn.14003bd98
test al, al
je 0x14003e327
lea rdx, [rsp + 0x6f0]
cmp qword [rsp + 0x708], 0x10
cmovae rdx, qword [rsp + 0x6f0]
mov r8, qword [rsp + 0x700]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [rsp + 0x700]
mov r8, rax
mov edx, 0x484
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
or r14, 0xffffffffffffffff
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.140007f4c
jmp 0x14003e32b
or r14, 0xffffffffffffffff
lea rdx, [rsp + 0x6f0]
mov ecx, 0x415
call fcn.14003bd98
test al, al
je 0x14003e39e
lea rdx, [rsp + 0x6f0]
cmp qword [rsp + 0x708], 0x10
cmovae rdx, qword [rsp + 0x6f0]
mov r8, qword [rsp + 0x700]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [rsp + 0x700]
mov r8, rax
mov edx, 0x486
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.140007f4c
mov r8, qword [0x140071298]
test r8, r8
je 0x14003e3ec
lea rdx, [0x140071288]
cmp qword [0x1400712a0], 8
cmovae rdx, qword [0x140071288]
add r8, r8
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x140071298]
mov r8, rax
mov edx, 0x48d
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x1400712c0]
test r8, r8
je 0x14003e436
cmp qword [0x1400712c8], 8
cmovae r13, qword [0x1400712b0]
add r8, r8
mov rdx, r13
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x1400712c0]
mov r8, rax
mov edx, 0x48e
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x140071580]
test r8, r8
je 0x14003e492
lea rdx, [0x140071570]
cmp qword [0x140071588], 0x10
cmovae rdx, qword [0x140071570]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x140071580]
mov r8, rax
mov edx, 0x483
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [0x140071570]
call fcn.140007f4c
mov r8, qword [0x1400715a8]
test r8, r8
je 0x14003e4ee
lea rdx, [0x140071598]
cmp qword [0x1400715b0], 0x10
cmovae rdx, qword [0x140071598]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x1400715a8]
mov r8, rax
mov edx, 0x482
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [0x140071598]
call fcn.140007f4c
mov r8, qword [0x140071448]
mov r13d, 8
test r8, r8
je 0x14003e541
lea rdx, [0x140071438]
cmp qword [0x140071450], r13
cmovae rdx, qword [0x140071438]
add r8, r8
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x140071448]
mov r8, rax
mov edx, 0x489
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, qword [0x140071470]
test r8, r8
je 0x14003e58e
lea rdx, [0x140071460]
cmp qword [0x140071478], r13
cmovae rdx, qword [0x140071460]
add r8, r8
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [0x140071470]
mov r8, rax
mov edx, 0x48a
mov rcx, qword [0x140071510]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edi, ebx
mov r12d, 0x485
cmp edi, 0xc8
jge 0x14003e631
lea ecx, [rdi + 0x4b0]
lea rdx, [rsp + 0x6f0]
call fcn.14003bd98
test al, al
je 0x14003e61b
lea rdx, [rsp + 0x6f0]
cmp qword [rsp + 0x708], 0x10
cmovae rdx, qword [rsp + 0x6f0]
mov r8, qword [rsp + 0x700]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [rsp + 0x700]
mov r8, rax
mov edx, r12d
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.140007f4c
inc edi
jmp 0x14003e596
xor r9d, r9d
xor r8d, r8d
mov edx, r12d
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.140007f4c
lea rdx, [rsp + 0x6f0]
mov ecx, 0x453
call fcn.14003bd98
test al, al
je 0x14003e6b6
lea rdx, [rsp + 0x6f0]
cmp qword [rsp + 0x708], 0x10
cmovae rdx, qword [rsp + 0x6f0]
mov r8, qword [rsp + 0x700]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [rsp + 0x700]
mov r8, rax
mov edx, 0x48c
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.140007f4c
mov r8, qword [rsi + 0x3c0]
test r8, r8
je 0x14003e70d
lea rdx, [rsi + 0x3b0]
cmp qword [rdx + 0x18], 0x10
jb 0x14003e6d3
mov rdx, qword [rdx]
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [rsi + 0x3c0]
mov r8, rax
mov edx, 0x48b
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_SendMessageW]
mov r8, r14
xor edx, edx
lea rcx, [rsp + 0x6f0]
call fcn.140007f4c
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rdx, rax
mov r12d, 7
mov qword [rsp + 0x758], r12
mov qword [rsp + 0x750], rbx
mov word [rsp + 0x740], bx
xor eax, eax
mov rcx, r14
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rsp + 0x740]
call fcn.140002d7c
lea rdx, [rsp + 0x740]
cmp qword [rsp + 0x758], r13
cmovae rdx, qword [rsp + 0x740]
mov r8, qword [rsp + 0x750]
add r8, r8
mov ecx, dword [rsp + 0x84]
call fcn.1400357f0
mov r9, qword [rsp + 0x700]
mov r8, rax
mov edx, 0x49b
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp qword [rsp + 0x758], r13
jb 0x14003e7b7
mov rcx, qword [rsp + 0x740]
call fcn.140015e1c
cmp dword [rsi + 0x328], 0xf
jl 0x14003e7c8
cmp byte [rsi + 0x31c], bl
jne 0x14003e82b
lea rcx, [rsi + 0x2d0]
cmp qword [rsi + 0x330], rbx
jne 0x14003e804
call fcn.140039800
cmp byte [rsi + 0x17b], bl
jne 0x14003e82b
mov r9d, r14d
mov eax, ntohl
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [rsi + 0x2d8]
call fcn.140014150
jmp 0x14003e825
call fcn.1400398f0
xor r9d, r9d
lea eax, [r9 + 0xb]
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [rsi + 0x2d8]
call fcn.140014150
mov dword [rsi + 0x2e0], eax
cmp dword [rsi + 0x328], 0xe
jl 0x14003e840
lea rcx, [rsi + 0x2d0]
call fcn.140039640
cmp byte [rsi + 0x17c], bl
je 0x14003e996
cmp dword [rsi + 0x328], 0xc
jge 0x14003e996
mov eax, dword [rsi + 0x320]
cmp eax, 0x34
je 0x14003e86d
cmp eax, 0x32
jne 0x14003e996
lea r8, str.gbbqE3svfLcyUk3by69O6NVthqMdBQpkBAFH5gUBTyQBePD39OgwNYROZJRafEObs6WhYz43LwsxvIz51aQZZoEJVLhQfWWoDt7o7osOXo5ueQsWFSRCKpyQKtyazK1
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x920]
call fcn.140038950
nop
mov rdx, rax
lea rcx, [rsp + 0x8f8]
call fcn.140039260
cmp qword [rax + 0x18], r13
jb 0x14003e8a2
mov rax, qword [rax]
mov r9d, reloc.WSOCK32.dll_recv
lea r8, str.Error
mov rdx, rax
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_MessageBoxW]
cmp qword [rsp + 0x910], r13
jb 0x14003e8d6
mov rcx, qword [rsp + 0x8f8]
call fcn.140015e1c
mov qword [rsp + 0x910], r12
mov qword [rsp + 0x908], rbx
mov word [rsp + 0x8f8], bx
cmp qword [rsp + 0x938], 0x10
jb 0x14003e906
mov rcx, qword [rsp + 0x920]
call fcn.140015e1c
lea rdx, [rsp + 0x630]
lea rcx, [rsi + 0x2d0]
call fcn.14003a7e0
nop
mov rcx, rax
call fcn.140043c00
nop
lea rax, [0x1400580a0]
mov qword [rsp + 0x630], rax
mov rcx, qword [rsp + 0x638]
test rcx, rcx
je 0x14003e94e
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x638], rbx
lea rcx, [rsp + 0x648]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x638]
test rcx, rcx
je 0x14003e96f
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
lea rcx, [rsi + 0x2d0]
call fcn.140039880
mov dword [rsp + 0xb8], ebx
lea rdx, [0x140064630]
lea rcx, [rsp + 0xb8]
call fcn.140019a18
mov r14d, 0xa
lea rax, [0x1400580a0]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xd8], rbx
mov dword [rsp + 0xe0], ebx
lea rcx, [rsp + 0xe8]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea rdx, [0x1400580a0]
mov qword [rsp + 0xd0], rdx
mov r12d, dword [rsp + 0x88]
lea rax, [rsp + 0x158]
mov qword [rsp + 0x150], rax
lea rax, [rsp + 0x1a0]
mov qword [rsp + 0xc0], rax
lea rax, [rsp + 0x2c0]
mov qword [rsp + 0x138], rax
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x140], rax
lea rax, [rsp + 0x2a8]
mov qword [rsp + 0xb0], rax
lea rax, [rsp + 0x200]
mov qword [rsp + 0xa8], rax
lea rax, [rsp + 0x278]
mov qword [rsp + 0x98], rax
lea rax, [rsp + 0x230]
mov qword [rsp + 0x4b0], rax
lea rax, [rsp + 0x290]
mov qword [rsp + 0x4a8], rax
cmp byte [rsi + 0x17c], bl
je 0x14003eac3
lea rdi, [rsi + 0x200]
cmp qword [rdi + 0x18], r13
jb 0x14003ea87
mov rdi, qword [rdi]
mov word [rsp + 0x1e8], r13w
mov rcx, rdi
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov qword [rsp + 0x1f0], rax
test rax, rax
jne 0x14003eab5
test rdi, rdi
je 0x14003eab5
mov ecx, 0x8007000e
call fcn.1400140c0
lea rdi, [rsp + 0x1e8]
or r12d, 1
jmp 0x14003eaf9
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003eaed
mov ecx, eax
call fcn.1400140c0
lea rdi, [rsp + 0x1b8]
or r12d, 2
mov dword [rsp + 0x88], r12d
lea rax, [rsp + 0x260]
mov qword [rsp + 0x660], rax
lea rax, [rsp + 0x170]
mov qword [rsp + 0x4b8], rax
lea rax, [rsp + 0x188]
mov qword [rsp + 0x590], rax
lea rax, [rsp + 0x130]
mov qword [rsp + 0x148], rax
lea rcx, [rsp + 0x158]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x158]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003eb6c
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x1a0]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003eb97
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x2c0]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ebc2
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x1d0]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ebed
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x2a8]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ec18
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x200]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x200]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ec43
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x278]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x278]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ec6e
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x230]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x230]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ec99
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x290]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, rdi
lea rcx, [rsp + 0x290]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ecc4
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x260]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x260]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ecef
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x170]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x170]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ed1a
mov ecx, eax
call fcn.1400140c0
nop
mov eax, 3
mov word [rsp + 0x188], ax
mov dword [rsp + 0x190], eax
lea rdx, [rsi + 0x78]
cmp qword [rdx + 0x18], r13
jb 0x14003ed3b
mov rdx, qword [rdx]
lea rcx, [rsp + 0x130]
call fcn.140008464
mov rdi, rax
lea rdx, [rsp + 0x500]
lea rcx, [rsi + 0x2d0]
call fcn.14003a7e0
nop
lea rcx, [rsp + 0x158]
mov qword [rsp + 0x70], rcx
lea rcx, [rsp + 0x1a0]
mov qword [rsp + 0x68], rcx
lea rcx, [rsp + 0x2c0]
mov qword [rsp + 0x60], rcx
lea rcx, [rsp + 0x1d0]
mov qword [rsp + 0x58], rcx
lea rcx, [rsp + 0x2a8]
mov qword [rsp + 0x50], rcx
lea rcx, [rsp + 0x200]
mov qword [rsp + 0x48], rcx
lea rcx, [rsp + 0x278]
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x230]
mov qword [rsp + 0x38], rcx
lea rcx, [rsp + 0x290]
mov qword [rsp + 0x30], rcx
lea rcx, [rsp + 0x260]
mov qword [rsp + 0x28], rcx
lea rcx, [rsp + 0x170]
mov qword [rsp + 0x20], rcx
lea r9, [rsp + 0x188]
mov r8, rdi
lea rdx, [rsp + 0x668]
mov rcx, rax
call fcn.1400441a0
mov r12, rax
mov rdi, qword [rax + 8]
mov rcx, qword [rsp + 0xd8]
cmp rcx, rdi
je 0x14003ee47
test rdi, rdi
je 0x14003ee34
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + reloc.WSOCK32.dll_htonl]
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14003ee3f
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0xd8], rdi
mov eax, dword [r12 + 0x10]
mov dword [rsp + 0xe0], eax
lea rdx, [r12 + 0x18]
lea rcx, [rsp + 0xe8]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003ee72
mov ecx, eax
call fcn.1400140c0
nop
lea rdi, [0x1400580a0]
mov qword [rsp + 0x668], rdi
mov rcx, qword [rsp + 0x670]
test rcx, rcx
je 0x14003ee9c
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x670], rbx
lea rcx, [rsp + 0x680]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x670]
test rcx, rcx
je 0x14003eebe
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
nop
mov qword [rsp + 0x500], rdi
mov rcx, qword [rsp + 0x508]
test rcx, rcx
je 0x14003eee1
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x508], rbx
lea rcx, [rsp + 0x518]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x508]
test rcx, rcx
je 0x14003ef03
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
nop
mov r12d, dword [rsp + 0x88]
test r12b, 2
je 0x14003ef2c
and r12d, 0xfffffffd
mov dword [rsp + 0x88], r12d
lea rcx, [rsp + 0x1b8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
test r12b, 1
je 0x14003ef4c
and r12d, 0xfffffffe
mov dword [rsp + 0x88], r12d
lea rcx, [rsp + 0x1e8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp dword [rsi + 0x328], 0xf
jl 0x14003ef8d
lea rcx, [rsp + 0xd0]
mov rax, qword [rsp + 0xd0]
call qword [rax + 0x28]
test rax, rax
je 0x14003ef8d
lea rcx, [rsp + 0xd0]
call fcn.1400448f4
lea rcx, [rsi + 0x2d0]
call fcn.140039680
mov qword [rsi + 0x300], rax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x49c
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdi, rax
mov ecx, VarDecRound
call qword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x14003efc7
dec r14d
test r14d, r14d
lea r13d, [rdi + 8]
jg 0x14003e9df
cmp byte [rsi + 0x31c], bl
je 0x14003f06c
cmp dword [rsi + 0x328], 0xf
jl 0x14003f06c
call fcn.14003cc68
cmp byte [rsi + 0x17b], bl
jne 0x14003f028
lea rdi, [rsi + 0x2d0]
or r9d, 0xffffffff
lea eax, [r9 + 0xc]
movzx r8d, ax
mov edx, 0x22e
mov rcx, qword [rdi + 8]
call fcn.140014150
mov dword [rdi + 0x10], eax
lea rcx, [rsp + 0xd0]
call fcn.1400448f4
mov rcx, rdi
call fcn.140039680
jmp 0x14003f044
lea rcx, [rsp + 0xd0]
call fcn.1400448f4
lea rdi, [rsi + 0x2d0]
mov rcx, rdi
call fcn.140039680
mov qword [rsi + 0x300], rax
mov rcx, rax
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov rcx, rdi
cmp qword [rsi + 0x330], rbx
jne 0x14003f067
call fcn.140039800
jmp 0x14003f06c
call fcn.1400398f0
mov ecx, dword [rsi + 0x27c]
mov edx, 0xffffeff7
cmp ecx, edx
je 0x14003f091
cmp ecx, 0xffffefd9
je 0x14003f091
mov eax, ecx
cmp ecx, 2
cmovne eax, edx
mov dword [rsi + 0x27c], eax
mov edx, dword [rsi + 0x27c]
lea rcx, [rsi + 0x2d0]
call fcn.1400397a0
mov rax, qword [rsi + 0x2d0]
xor edx, edx
lea rcx, [rsi + 0x2d0]
call qword [rax + 0x18]
nop
lea r12, [0x1400580a0]
mov qword [rsp + 0xd0], r12
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14003f0e1
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0xd8], rbx
lea rcx, [rsp + 0xe8]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0xd8]
test rcx, rcx
je 0x14003f103
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
nop
mov al, byte [rsp + 0x81]
jmp 0x14003f12b
mov r13d, 0xa
lea edi, [r13 - 2]
test al, al
je 0x14003f1c6
lea rdx, [rsp + 0x448]
lea rcx, [rsi + 0x2d0]
call fcn.14003a7e0
nop
mov rcx, rax
call fcn.140043c00
nop
mov qword [rsp + 0x448], r12
mov rcx, qword [rsp + 0x450]
test rcx, rcx
je 0x14003f17e
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x450], rbx
lea rcx, [rsp + 0x460]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x450]
test rcx, rcx
je 0x14003f19f
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
lea rcx, [rsi + 0x2d0]
call fcn.140039880
mov dword [rsp + 0xc8], ebx
lea rdx, [0x140064630]
lea rcx, [rsp + 0xc8]
call fcn.140019a18
mov ecx, dword [rsi + 0x33c]
test ecx, ecx
je 0x14003f1e1
xor r9d, r9d
xor r8d, r8d
mov edx, 0x501
call qword [sym.imp.USER32.dll_PostThreadMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x48f
mov rcx, qword [rsi + 0x300]
call qword [sym.imp.USER32.dll_PostMessageW]
nop
cmp qword [rsp + 0x708], 0x10
jb 0x14003f212
mov rcx, qword [rsp + 0x6f0]
call fcn.140015e1c
mov qword [rsp + 0x708], 0xf
mov qword [rsp + 0x700], rbx
mov byte [rsp + 0x6f0], bl
mov qword [rsp + 0x100], r12
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x14003f250
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
mov qword [rsp + 0x108], rbx
lea rcx, [rsp + 0x118]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov rcx, qword [rsp + 0x108]
test rcx, rcx
je 0x14003f272
mov rax, qword [rcx]
call qword [rax + reloc.WSOCK32.dll_recv]
nop
cmp qword [rsp + 0x780], rdi
jb 0x14003f28a
mov rcx, qword [rsp + 0x768]
call fcn.140015e1c
nop
mov al, byte [rsp + 0x81]
jmp 0x14003f438
lea rax, [rsp + 0x218]
mov qword [rsp + 0x148], rax
lea rcx, [rsp + 0x218]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
lea r15, reloc.WSOCK32.dll_inet_addr
mov rdx, r15
lea rcx, [rsp + 0x218]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003f2d8
mov ecx, eax
call fcn.1400140c0
nop
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov rdx, r15
lea rcx, [rsp + 0x5c8]
call qword [sym.imp.OLEAUT32.dll_VariantCopyInd]
test eax, eax
jns 0x14003f302
mov ecx, eax
call fcn.1400140c0
mov eax, ntohl
mov word [rsp + 0x478], ax
mov word [rsp + 0x480], bx
lea r9, [rsp + 0x218]
lea r8, [rsp + 0x5c8]
lea rdx, [rsp + 0x478]
lea rcx, [rsp + 0x100]
call fcn.140044a24
xor edx, edx
lea rcx, [rsp + 0x100]
mov rax, qword [rsp + 0x100]
call qword [rax + 0x18]
mov rcx, r12
call fcn.140039880
lea r8, str.ZbYa8RpWgjatTYBFRyhJrSb7PCqxf0vK77xNDNVSBpK27_XgzwNaZ
lea rdx, str.KRglXTx2gH3c24R6o3JfvDqdFO9DgW9GgOnUdF
lea rcx, [rsp + 0x830]
call fcn.140038950
nop
cmp qword [rax + 0x18], 0x10
jb 0x14003f37f
mov rax, qword [rax]
mov qword [rsp + 0xb0], rax
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x328]
call fcn.140016378
lea rdi, [0x1400575b0]
mov qword [rsp + 0x328], rdi
mov dword [rsp + 0x340], ebx
cmp qword [rsp + 0x848], 0x10
jb 0x14003f3ca
mov rcx, qword [rsp + 0x830]
call fcn.140015e1c
mov qword [rsp + 0x848], r13
mov qword [rsp + 0x840], rbx
mov byte [rsp + 0x830], bl
lea rdx, [rsp + 0x328]
lea rcx, [rsp + 0x410]
call fcn.140016464
mov qword [rsp + 0x410], rdi
mov eax, dword [rsp + 0x340]
mov dword [rsp + 0x428], eax
lea rdx, [0x140064590]
lea rcx, [rsp + 0x410]
call fcn.140019a18
nop
mov rsi, qword [rsp + 0x90]
mov al, byte [rsp + 0x80]
mov r13d, 0xa
xor ebx, ebx
mov byte [rsi + 0x324], al
call fcn.14003c468
cmp byte [rsi + 0x324], bl
jne 0x14003f47b
lea rcx, str.User32
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rcx, rax
lea rdx, str.SwitchToThisWindow
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x14003f47b
mov edx, 1
mov rcx, qword [rsi + 0x300]
call rax
call fcn.140017420
mov edi, eax
sub edi, dword [rsp + 0xa0]
xor edx, edx
mov rcx, qword [rsi + 0x340]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14003f4f0
mov ecx, 0x1388
cmp edi, ecx
jae 0x14003f4ad
sub ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x502
mov ecx, dword [rsi + 0x33c]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
mov ecx, r13d
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x502
mov ecx, dword [rsi + 0x33c]
call qword [sym.imp.USER32.dll_PostThreadMessageW]
mov ecx, 0x64
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov al, 1
mov rcx, qword [rsp + 0x998]
xor rcx, rsp
call fcn.140015e40
lea r11, [rsp + 0x9a0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop r13
ret