Function at 0x140069644
Capabilities:
Accept command line arguments
Get file attributes

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f8]
sub rsp, 0x2f8
mov rax, qword [0x14015a038]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov r15, r9
mov r12, r8
mov rdi, rdx
mov qword [rbp - 0x48], rdx
mov r14, rcx
mov r13, qword [rbp + 0x268]
mov qword [rbp + 0x40], r13
xor esi, esi
mov byte [rsp + 0x30], sil
mov qword [rsp + 0x68], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x80], xmm0
mov qword [rbp - 0x70], rsi
lea ecx, [rsi + 0x18]
call fcn.14009b4d4
mov qword [rbp - 0x80], rax
mov qword [rbp - 0x78], rax
lea rbx, [rax + 0x18]
mov qword [rbp - 0x70], rbx
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov qword [rbp - 0x78], rbx
lea rcx, [rbp + 0xc0]
call fcn.14006887c
nop
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GetFileAttributesW]
lea ebx, [rsi + 1]
and eax, ebx
test al, al
je 0x1400696ed
mov byte [rbp - 0x64], bl
jmp 0x14006971e
mov rdx, r14
lea rcx, [rbp + 0x10]
call fcn.14006b758
nop
mov rcx, rax
call fcn.140032ec0
mov bl, al
lea rcx, [rbp + 0x10]
call fcn.140012640
movzx eax, sil
test bl, bl
mov ebx, 1
cmove eax, ebx
mov dword [rbp - 0x64], eax
mov qword [rbp + 0x60], rsi
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], si
mov qword [rsp + 0x38], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x40], xmm0
mov ecx, gethostbyname
call fcn.14009b4d4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp - 0x40], rax
lea rcx, [rbp - 0x40]
call fcn.140067cb4
mov rcx, rdi
call fcn.14002ca00
xor edi, edi
test eax, eax
setne sil
lea rcx, [0x14011c4c8]
lea rbx, str.Excel.Sheet.12
test eax, eax
cmove rbx, rcx
mov qword [rbp + 0xa0], rdi
mov qword [rbp + 0xb0], rdi
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], di
mov qword [rbp - 0x58], rdi
lea rdx, [rbp + 0x30]
lea rcx, str.Excel.Application
call qword [sym.imp.ole32.dll_CLSIDFromProgID]
test eax, eax
js 0x140069820
lea rax, [rsp + 0x38]
mov qword [rsp + 0x20], rax
lea r9, [0x140138ec0]
xor edx, edx
lea r8d, [rdi + 4]
lea rcx, [rbp + 0x30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
js 0x140069820
mov dl, sil
lea rcx, [rsp + 0x38]
call fcn.140067708
test al, al
jne 0x140069820
lea rdx, str.Quit
lea rcx, [rsp + 0x38]
call fcn.14002a040
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14006982b
mov qword [rsp + 0x38], rdi
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
cmp qword [rsp + 0x38], rdi
jne 0x140069a5d
lea rdx, [rbp + 0x30]
mov rcx, rbx
call qword [sym.imp.ole32.dll_CLSIDFromProgID]
mov ebx, eax
test eax, eax
js 0x140069860
lea rax, [rbp - 0x58]
mov qword [rsp + 0x20], rax
lea r9, [0x140138ec0]
xor edx, edx
lea r8d, [rdx + 4]
lea rcx, [rbp + 0x30]
call qword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
test ebx, ebx
js 0x140069944
lea rdx, str.Activate
lea rcx, [rbp - 0x58]
call fcn.14002a040
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x58]
call fcn.14005c5b0
test eax, eax
jne 0x140069894
mov ebx, 0x80004005
jmp 0x140069944
lea rdx, [rbp - 0x58]
lea rcx, [rbp + 0x10]
call fcn.14005ea20
mov rdi, rax
lea rax, [rbp + 0xa0]
cmp rax, rdi
je 0x140069939
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x1400698fa
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400698f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad28
call fcn.14009b510
xor eax, eax
mov qword [rbp + 0xb0], rax
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], ax
lea r8d, [rax + 0x20]
mov rdx, rdi
lea rcx, [rbp + 0xa0]
call fcn.14009de10
xor eax, eax
mov qword [rdi + 0x10], rax
mov qword [rdi + 0x18], 7
mov word [rdi], ax
lea rcx, [rbp + 0x10]
call fcn.140012640
xor edi, edi
cmp qword [rsp + 0x38], rdi
jne 0x140069a5d
cmp ebx, 0x800401f3
je 0x140069998
cmp ebx, 0x80040154
je 0x140069998
mov r8d, ebx
lea rdx, str.LockXLS_was_unable_to_launch_Excel_application._Error_code:_0x_X
lea rcx, [rbp + 0xe0]
call fcn.14001e0a0
lea rcx, [rbp + 0xe0]
call fcn.1400acf68
mov r8, rax
lea rdx, [rbp + 0xe0]
mov rcx, r13
call fcn.1400123a0
jmp 0x140069a56
mov edx, 1
lea rcx, [rbp + 0xe0]
call fcn.140007500
nop
lea rcx, [rbp + 0xf0]
test sil, sil
lea rdx, str.This_file_requires_Microsoft_Excel_2007_or_higher_to_be_installed_on_your_PC._n
jne 0x1400699c4
lea rdx, str.This_file_requires_Microsoft_Excel_to_be_installed_on_your_PC._n
call fcn.14000bfc0
lea rdx, str.Possible_reasons_of_this_error:_n_n
lea rcx, [rbp + 0xf0]
call fcn.14000bfc0
mov rcx, rax
lea rdx, str.______you_doesnt_have_Microsoft_Excel_installed_n
call fcn.14000bfc0
mov rcx, rax
lea rdx, str.______your_user_account_doesnt_have_enough_rights_to_run_Excel_application_n
call fcn.14000bfc0
mov rcx, rax
lea rdx, str.______Excel_is_not_registered_as_COM_Server_on_your_PC
call fcn.14000bfc0
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0xe0]
call fcn.140007340
mov rdx, rax
mov rcx, r13
call fcn.140010540
lea rcx, [rbp + 0x10]
call fcn.140012640
nop
lea rcx, [rbp + 0x178]
call fcn.140007410
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x178], rax
lea rcx, [rbp + 0x178]
call fcn.14006eaa0
nop
xor esi, esi
jmp 0x14006ac02
mov dword [rbp - 0x68], edi
mov qword [rbp + 0x10], rdi
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], di
xor r9d, r9d
lea r8, [rbp + 0x10]
lea rdx, str.Version
lea rcx, [rsp + 0x38]
call fcn.1400296b0
test al, al
je 0x140069ab5
cmp qword [rbp + 0x20], rdi
je 0x140069ab5
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rcx, qword [rbp + 0x10]
lea r8, [rbp - 0x68]
lea rdx, [0x140135de0]
call fcn.1400383e0
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140069af5
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069af0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad2e
call fcn.14009b510
mov dl, sil
lea rcx, [rsp + 0x38]
call fcn.140067708
xor esi, esi
test al, al
jne 0x140069b2b
lea rcx, str.The_file_you_are_using_cant_be_opened_in_this_version_of_Microsoft_Excel._nPlease__make_sure_that_your_default_version_of_Excel_application_is_Excel_2007_or_higher_and_try_again.
call fcn.1400acf68
mov r8, rax
lea rdx, str.The_file_you_are_using_cant_be_opened_in_this_version_of_Microsoft_Excel._nPlease__make_sure_that_your_default_version_of_Excel_application_is_Excel_2007_or_higher_and_try_again.
mov rcx, r13
call fcn.1400123a0
jmp 0x14006ac02
mov byte [rsp + 0x32], 1
lea rdx, [rsp + 0x38]
lea rcx, [rsp + 0x70]
call fcn.1400583f0
nop
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x70]
call fcn.140058990
nop
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
lea rdi, str.LockXLSRuntime.Connect
mov rcx, rdi
call fcn.1400acf68
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0x10]
call fcn.1400123a0
nop
lea r8, [rbp + 0x10]
lea rdx, [rbp + 0x30]
lea rcx, [rbp - 0x50]
call fcn.140059600
mov rbx, qword [rax]
lea rcx, [rbp + 0x30]
call fcn.140059850
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140069be0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069bdb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad34
call fcn.14009b510
test rbx, rbx
mov ebx, 1
je 0x140069d57
mov byte [rsp + 0x30], bl
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
mov rcx, rdi
call fcn.1400acf68
mov r8, rax
mov rdx, rdi
lea rcx, [rbp + 0x10]
call fcn.1400123a0
nop
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x50]
call fcn.140059600
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x140069c71
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069c6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad3a
call fcn.14009b510
mov qword [rbp + 0x20], rsi
mov edi, 7
mov qword [rbp + 0x28], rdi
mov word [rbp + 0x10], si
cmp qword [rsp + 0x78], rsi
je 0x140069d4b
lea rdx, [rbp + 0x30]
lea rcx, [rsp + 0x78]
call fcn.1400598c0
mov rdx, qword [rax]
mov qword [rax], rsi
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], rdx
test rcx, rcx
je 0x140069cb6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x140069cc5
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
cmp qword [rsp + 0x68], rsi
je 0x140069d46
lea rdx, str.IsWorkbookProtected
lea rcx, [rsp + 0x68]
call fcn.14002a040
lea r8, [rsp + 0x31]
mov rdx, rbx
lea rcx, [rbp - 0x80]
call fcn.14002aae0
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rdx, qword [rbp + 0xc0]
lea rcx, [rbp + 0x30]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rbp - 0x80]
call fcn.14002b520
nop
lea rcx, [rbp + 0x30]
call fcn.14002bc80
lea r8, [rbp - 0x80]
lea rdx, str.PrepareWorkbook
lea rcx, [rsp + 0x68]
call fcn.140029fa0
lea rcx, [rsp + 0x38]
call fcn.140066f40
jmp 0x140069d4b
mov byte [rsp + 0x30], sil
lea rcx, [rsp + 0x78]
call fcn.140059850
jmp 0x140069d5c
mov edi, 7
xor edx, edx
lea rcx, [rsp + 0x70]
call fcn.140058b00
mov qword [rbp - 0x60], rsi
xor r9d, r9d
lea r8, [rbp - 0x60]
lea rdx, str.Workbooks
lea rcx, [rsp + 0x38]
call fcn.1400298c0
test al, al
je 0x14006abcd
cmp byte [rsp + 0x30], sil
je 0x140069da0
mov r14b, bl
mov qword [rsp + 0x78], rsi
jmp 0x14006a39a
mov r8d, dword [rbp - 0x68]
mov rdx, r14
lea rcx, [rbp + 0x10]
call fcn.140067d58
mov rbx, rax
lea rax, [rbp + 0x60]
cmp rax, rbx
je 0x140069e25
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x140069dfc
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140069df7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad40
call fcn.14009b510
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], rdi
mov word [rbp + 0x60], si
mov r8d, 0x20
mov rdx, rbx
lea rcx, [rbp + 0x60]
call fcn.14009de10
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rdi
mov word [rbx], si
lea rcx, [rbp + 0x10]
call fcn.140012640
cmp qword [rbp + 0x70], rsi
jne 0x140069e57
lea rcx, str.Loader_Add_In_can_not_be_extracted_from_the_executable.
call fcn.1400acf68
mov r8, rax
lea rdx, str.Loader_Add_In_can_not_be_extracted_from_the_executable.
mov rcx, r13
call fcn.1400123a0
jmp 0x14006abcd
movzx edi, sil
lea rcx, [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rsi
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.14009b4d4
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x50], rbx
lea rdx, [0x14011c730]
lea rcx, [rbp + 0x30]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call fcn.14002b520
nop
lea rcx, [rbp + 0x30]
call fcn.14002bc80
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x80]
lea r8, [rsp + 0x48]
lea rdx, [0x14011bad0]
lea rcx, [rsp + 0x38]
call fcn.140029b40
test al, al
je 0x140069f14
mov eax, reloc.WS2_32.dll_inet_addr
cmp ax, word [rbp + 0x80]
jne 0x140069f14
lea rcx, [rbp + 0x80]
call fcn.140066aa4
mov ecx, 1
cmp al, cl
cmove edi, ecx
movabs r14, 0x2aaaaaaaaaaaaaab
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x140069fae
mov rsi, qword [rsp + 0x50]
cmp rbx, rsi
je 0x140069f4d
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
add rbx, 0x18
cmp rbx, rsi
jne 0x140069f36
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
sub rcx, rbx
mov rax, r14
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x140069f96
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad46
mov rcx, rbx
call fcn.14009b510
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
xor esi, esi
mov qword [rsp + 0x58], rsi
lea rcx, [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
mov ebx, 1
mov r14b, bl
test dil, dil
jne 0x14006a38c
lea rdx, [rbp + 0x60]
cmp qword [rbp + 0x78], 8
cmovae rdx, qword [rbp + 0x60]
lea rcx, [rsp + 0x40]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rbp - 0x80]
call fcn.14002b520
nop
lea rcx, [rsp + 0x40]
call fcn.14002bc80
mov qword [rbp + 0x30], rsi
mov edi, ebx
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
xor r9d, r9d
lea r8, [rbp + 0x10]
lea rdx, str.Path
lea rcx, [rsp + 0x38]
call fcn.1400296b0
lea rcx, [0x14011c760]
call fcn.1400acf68
mov r8, rax
lea rdx, [0x14011c760]
lea rcx, [rbp + 0x10]
call fcn.14000b610
mov dword [rsp + 0x60], esi
lea rcx, [rbp + 0x10]
cmp qword [rbp + 0x28], 8
cmovae rcx, qword [rbp + 0x10]
lea rdx, [rsp + 0x60]
call qword [sym.imp.KERNEL32.dll_GetBinaryTypeW]
test eax, eax
je 0x14006a076
cmp dword [rsp + 0x60], 6
cmove edi, esi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x30]
lea r8, [rbp - 0x80]
lea rdx, str.Open
lea rcx, [rbp - 0x60]
call fcn.140029ea0
test al, al
je 0x14006a32d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rsi
mov ecx, 0x48
call fcn.14009b4d4
mov rbx, rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea rcx, [rax + 0x48]
mov qword [rsp + 0x58], rcx
mov esi, 3
lea r13d, [rsi - 2]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantClear]
add rbx, 0x18
sub rsi, r13
jne 0x14006a0d2
mov qword [rsp + 0x50], rbx
lea rdx, [0x14011c778]
lea rcx, [rsp + 0x40]
call fcn.14002bd60
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0x30
mov rdx, rax
call fcn.14002b520
nop
lea rcx, [rsp + 0x40]
call fcn.14002bc80
test dil, dil
cmovne r15, r12
mov rdx, r15
lea rcx, [rsp + 0x40]
call fcn.14002bd60
nop
mov rcx, qword [rsp + 0x48]
add rcx, 0x18
mov rdx, rax
call fcn.14002b520
nop
lea rcx, [rsp + 0x40]
call fcn.14002bc80
lea rdx, [rbp + 0xc0]
cmp qword [rbp + 0xd8], 8
cmovae rdx, qword [rbp + 0xc0]
lea rcx, [rsp + 0x40]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call fcn.14002b520
nop
lea rcx, [rsp + 0x40]
call fcn.14002bc80
lea rcx, [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
mov ebx, esi
mov r13, qword [rbp + 0x40]
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x80]
lea r8, [rsp + 0x48]
lea rdx, [0x14011bad0]
lea rcx, [rsp + 0x38]
call fcn.140029b40
test al, al
jne 0x14006a28e
mov r14b, sil
lea rcx, str.Macro_can_not_be_executed._Please_make
call fcn.1400acf68
mov r8, rax
lea rdx, str.Macro_can_not_be_executed._Please_make
mov rcx, r13
call fcn.1400123a0
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x50], rsi
mov qword [rbp + 0x58], 7
mov word [rbp + 0x40], si
lea rcx, [rbp + 0x40]
call fcn.14002a290
lea rcx, [0x14013624c]
call fcn.1400acf68
mov r8, rax
lea rdx, [0x14013624c]
mov rcx, r13
call fcn.14000b610
lea rdx, [rbp + 0x40]
cmp qword [rbp + 0x58], 8
cmovae rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x50]
mov rcx, r13
call fcn.14000b610
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov rdx, qword [rbp + 0x58]
cmp rdx, 8
jb 0x14006a282
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a27d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad4c
call fcn.14009b510
inc ebx
cmp ebx, 0xa
jge 0x14006a29b
jmp 0x14006a196
lea rcx, [rsp + 0x38]
call fcn.140066b24
mov r14b, al
lea rcx, [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
mov rbx, qword [rsp + 0x48]
test rbx, rbx
je 0x14006a32d
mov rdi, qword [rsp + 0x50]
cmp rbx, rdi
je 0x14006a2d4
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
add rbx, 0x18
cmp rbx, rdi
jne 0x14006a2bd
mov rbx, qword [rsp + 0x48]
mov rcx, qword [rsp + 0x58]
sub rcx, rbx
movabs rax, 0x2aaaaaaaaaaaaaab
imul rcx
sar rdx, 2
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rdx, [rdx + rdx*2]
shl rdx, 3
mov rax, rbx
cmp rdx, 0x1000
jb 0x14006a324
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad52
mov rcx, rbx
call fcn.14009b510
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14006a36d
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a368
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad58
call fcn.14009b510
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], 7
mov word [rbp + 0x10], si
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14006a38c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [rsp + 0x78], rsi
test r14b, r14b
je 0x14006abcd
xor r9d, r9d
lea r8, [rsp + 0x78]
lea rdx, str.HWND
lea rcx, [rsp + 0x38]
call fcn.1400292b0
test al, al
jne 0x14006a4e4
mov qword [rbp + 0x40], rsi
mov qword [rbp + 0x48], rsi
mov edi, gethostbyname
mov ecx, edi
call fcn.14009b4d4
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rax + 0x10], rax
mov word [rax + 0x18], 0x101
mov qword [rbp + 0x40], rax
lea rcx, [rbp + 0x40]
call fcn.140067cb4
mov r8, qword [rbp + 0x40]
cmp qword [rbp + 0x48], rsi
je 0x14006a4a6
mov rax, qword [r8]
cmp r8, rax
je 0x14006a4a6
mov r9, qword [rbp - 0x40]
mov r11, qword [r9 + 8]
mov rdx, r9
cmp byte [r11 + 0x19], sil
jne 0x14006a437
mov r10, qword [rax + 0x20]
mov rcx, r11
cmp qword [rcx + 0x20], r10
jae 0x14006a42b
mov rcx, qword [rcx + 0x10]
jmp 0x14006a431
mov rdx, rcx
mov rcx, qword [rcx]
cmp byte [rcx + 0x19], sil
je 0x14006a41f
cmp byte [rdx + 0x19], sil
jne 0x14006a447
mov rcx, qword [rdx + 0x20]
cmp qword [rax + 0x20], rcx
jae 0x14006a44a
mov rdx, r9
cmp r9, rdx
je 0x14006a49d
mov rcx, qword [rax + 0x10]
cmp byte [rcx + 0x19], sil
je 0x14006a477
mov rcx, qword [rax + 8]
jmp 0x14006a46c
cmp rax, qword [rcx + 0x10]
jne 0x14006a472
mov rax, rcx
mov rcx, qword [rcx + 8]
cmp byte [rcx + 0x19], sil
je 0x14006a45f
mov rax, rcx
jmp 0x14006a492
mov rax, rcx
mov rdx, qword [rcx]
cmp byte [rdx + 0x19], sil
jne 0x14006a492
mov rax, rdx
mov rcx, qword [rdx]
mov rdx, rcx
cmp byte [rcx + 0x19], sil
je 0x14006a483
cmp r8, rax
jne 0x14006a40f
jmp 0x14006a4a6
mov rcx, qword [rax + 0x20]
mov qword [rsp + 0x78], rcx
mov rbx, qword [r8 + 8]
cmp byte [rbx + 0x19], sil
jne 0x14006a4d9
mov r8, qword [rbx + 0x10]
lea rdx, [rbp + 0x40]
lea rcx, [rbp + 0x40]
call fcn.140065fc0
mov rcx, rbx
mov rbx, qword [rbx]
mov rdx, rdi
call fcn.14009b510
cmp byte [rbx + 0x19], sil
je 0x14006a4b0
mov r8, qword [rbp + 0x40]
mov rdx, rdi
mov rcx, r8
call fcn.14009b510
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x14006a4f4
call qword [sym.imp.USER32.dll_SetForegroundWindow]
mov qword [rbp + 0x30], rsi
mov qword [rsp + 0x60], rsi
xor r9d, r9d
lea r8, [rsp + 0x60]
lea rdx, str.Workbooks
lea rcx, [rsp + 0x38]
call fcn.1400298c0
mov edi, esi
lea rcx, [rsp + 0x60]
call fcn.14005bdb0
mov esi, eax
test eax, eax
jle 0x14006a57b
mov r15, qword [rbp - 0x48]
inc edi
lea r8, [rbp + 0x30]
mov edx, edi
lea rcx, [rsp + 0x60]
call fcn.14005bde0
test eax, eax
je 0x14006a577
lea rdx, [rbp + 0x30]
lea rcx, [rbp + 0x10]
call fcn.14005ea70
cmp qword [rax + 0x18], 8
jb 0x14006a559
mov rax, qword [rax]
mov rdx, rax
mov rcx, r15
call fcn.1400ae274
mov ebx, eax
lea rcx, [rbp + 0x10]
call fcn.140012640
test ebx, ebx
je 0x14006a861
cmp edi, esi
jl 0x14006a52c
xor esi, esi
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14006a58e
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14006a59d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test r14b, r14b
je 0x14006abcd
cmp byte [rsp + 0x30], sil
jne 0x14006a670
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rsi
mov ecx, reloc.OLEAUT32.dll_SafeArrayGetElement
call fcn.14009b4d4
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rax
lea rbx, [rax + 0x18]
mov qword [rsp + 0x58], rbx
mov rcx, rax
call qword [sym.imp.OLEAUT32.dll_VariantClear]
mov qword [rsp + 0x50], rbx
lea rdx, [0x14011c828]
lea rcx, [rbp + 0x40]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rsp + 0x48]
call fcn.14002b520
nop
lea rcx, [rbp + 0x40]
call fcn.14002bc80
lea rcx, [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x80]
lea r8, [rsp + 0x48]
lea rdx, [0x14011bad0]
lea rcx, [rsp + 0x38]
call fcn.140029b40
test al, al
je 0x14006a658
lea rdx, [rbp + 0x80]
lea rcx, [rsp + 0x68]
call fcn.14002a0b0
nop
lea rcx, [rbp + 0x80]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rsp + 0x48]
call fcn.14002a970
cmp qword [rsp + 0x68], rsi
je 0x14006a73c
mov qword [rbp + 0x30], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
mov qword [rsp + 0x58], rsi
mov qword [rsp + 0x20], rsi
lea r9, [rbp + 0x30]
lea r8, [rsp + 0x48]
lea rdx, str.Arguments
lea rcx, [rsp + 0x68]
call fcn.140029ea0
test al, al
je 0x14006a722
lea r8, [rsp + 0x31]
mov r14d, 1
mov edx, r14d
lea rcx, [rsp + 0x48]
call fcn.14002aae0
mov dword [rsp + 0x60], esi
call qword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov rcx, rax
lea rdx, [rsp + 0x60]
call qword [sym.imp.SHELL32.dll_CommandLineToArgvW]
test rax, rax
je 0x14006a722
mov edi, r14d
cmp dword [rsp + 0x60], r14d
jle 0x14006a722
lea rbx, [rax + 8]
mov rdx, qword [rbx]
mov rcx, qword [rsp + 0x48]
call fcn.1400603f0
lea r8, [rsp + 0x48]
lea rdx, [0x140138fa0]
lea rcx, [rbp + 0x30]
call fcn.140029fa0
add edi, r14d
lea rbx, [rbx + 8]
cmp edi, dword [rsp + 0x60]
jl 0x14006a6f3
lea rcx, [rsp + 0x48]
call fcn.14002a970
nop
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14006a73c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
cmp qword [r13 + 0x10], rsi
jne 0x14006abcd
mov qword [rbp + 0x10], rsi
mov qword [rbp + 0x20], rsi
mov ebx, 7
mov qword [rbp + 0x28], rbx
mov word [rbp + 0x10], si
lea rcx, str.GoogleDesktop.OfficeAddin
call fcn.1400acf68
mov r8, rax
lea rdx, str.GoogleDesktop.OfficeAddin
lea rcx, [rbp + 0x10]
call fcn.1400123a0
nop
lea r8, [rbp + 0x10]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x50]
call fcn.140059600
nop
mov rdx, qword [rbp + 0x28]
cmp rdx, 8
jb 0x14006a7ce
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006a7c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad5e
call fcn.14009b510
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x28], rbx
mov word [rbp + 0x10], si
cmp qword [rsp + 0x40], rsi
je 0x14006a7ed
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.140059980
mov qword [rsp + 0x60], rsi
lea r8, [rsp + 0x31]
lea rcx, [rbp - 0x80]
cmp byte [rbp - 0x64], sil
je 0x14006a8ca
mov edx, 3
call fcn.14002aae0
mov rdi, qword [rbp - 0x48]
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.14002bd60
nop
mov rcx, qword [rbp - 0x80]
add rcx, 0x30
mov rdx, rax
call fcn.14002b520
nop
lea rcx, [rbp + 0x40]
call fcn.14002bc80
mov rcx, qword [rbp - 0x80]
add rcx, 0x18
mov r14d, 1
mov dl, r14b
call fcn.14005bc30
mov dl, r14b
mov rcx, qword [rbp - 0x80]
call fcn.14005bc30
jmp 0x14006a8ff
xor esi, esi
mov r14b, sil
lea rdx, str.Activate
lea rcx, [rsp + 0x38]
call fcn.14002a040
mov qword [rsp + 0x40], rsi
xor r9d, r9d
lea r8, [rsp + 0x40]
lea rdx, str.ActiveWindow
lea rcx, [rsp + 0x38]
call fcn.1400298c0
test al, al
je 0x14006a8b1
mov r8d, 0xffffefd7
lea rdx, str.WindowState
lea rcx, [rsp + 0x40]
call fcn.1400291f0
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14006a57d
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
jmp 0x14006a57d
mov r14d, 1
mov edx, r14d
call fcn.14002aae0
mov rdi, qword [rbp - 0x48]
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rbp - 0x80]
call fcn.14002b520
nop
lea rcx, [rbp + 0x40]
call fcn.14002bc80
xor edx, edx
lea r8d, [rdx + 0x40]
lea rcx, [rbp - 0x30]
call fcn.14009e4c0
mov qword [rbp + 0x30], rsi
xor r9d, r9d
lea r8, [rbp + 0x30]
lea rdx, str.ActiveWindow
lea rcx, [rsp + 0x38]
call fcn.1400298c0
test al, al
je 0x14006a944
mov r8d, 0xffffefd7
lea rdx, str.WindowState
lea rcx, [rbp + 0x30]
call fcn.1400291f0
lea rdx, str.xl5galry.xls
lea rcx, [rbp - 0x60]
call fcn.140067bd0
lea rax, [rbp - 0x30]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0x60]
lea r8, [rbp - 0x80]
lea rdx, str.Open
lea rcx, [rbp - 0x60]
call fcn.140029ea0
test al, al
je 0x14006aa94
mov rbx, qword [rbp + 0x260]
mov al, byte [rbx + 0x5a4]
test al, al
jne 0x14006a9ab
mov edx, r14d
lea rcx, [rsp + 0x70]
call fcn.140058b00
mov byte [rsp + 0x32], sil
mov al, byte [rbx + 0x5a4]
test al, al
je 0x14006a9cb
lea rcx, [rsp + 0x70]
call fcn.140058ad0
test eax, eax
jne 0x14006a9cb
lea rcx, [rsp + 0x70]
call fcn.1400589d0
mov bl, sil
jmp 0x14006ab9e
mov r8d, r14d
lea rdx, str.EnableEvents
lea rcx, [rsp + 0x38]
call fcn.140029270
lea r8, [rsp + 0x31]
mov rdx, r14
lea rcx, [rbp + 0x80]
call fcn.14005b7b0
nop
lea rdx, str.Auto_Open
lea rcx, [rbp + 0x40]
call fcn.14002bd60
nop
mov rdx, rax
mov rcx, qword [rbp + 0x80]
call fcn.14002b520
nop
lea rcx, [rbp + 0x40]
call fcn.14002bc80
lea rcx, [rsp + 0x48]
call qword [sym.imp.OLEAUT32.dll_VariantClear]
nop
mov qword [rsp + 0x20], rsi
lea r9, [rsp + 0x48]
lea r8, [rbp + 0x80]
lea rdx, [0x14011bad0]
lea rcx, [rsp + 0x38]
call fcn.140029b40
mov r8d, r14d
lea rdx, str.ScreenUpdating
lea rcx, [rsp + 0x38]
call fcn.140029270
cmp byte [rbx + 0x5a8], sil
je 0x14006aa77
mov rdx, rdi
lea rcx, [rsp + 0x70]
call fcn.14006b3b8
nop
lea rcx, [rsp + 0x48]
call qword [sym.imp.OLEAUT32.dll_VariantCopy]
nop
lea rcx, [rbp + 0x80]
call fcn.14002a970
jmp 0x14006ab9a
mov edx, r14d
lea rcx, [rbp + 0xe0]
call fcn.140007500
nop
lea rdx, str.File_
lea rcx, [rbp + 0xf0]
call fcn.14000bfc0
mov rcx, rax
mov rdx, rdi
call fcn.14000bfc0
mov rcx, rax
lea rdx, str._can_not_be_opened._n
call fcn.14000bfc0
mov rcx, rax
lea rdx, str.Error_description:
call fcn.14000bfc0
mov rdx, qword [rbp - 0x20]
test rdx, rdx
je 0x14006ab1b
lea rcx, [rbp + 0x40]
call fcn.14002bd60
nop
mov rdx, qword [rax]
test rdx, rdx
je 0x14006ab00
mov rdx, qword [rdx]
jmp 0x14006ab03
mov rdx, rsi
lea rcx, [rbp + 0xf0]
call fcn.14000bfc0
nop
lea rcx, [rbp + 0x40]
call fcn.14002bc80
jmp 0x14006ab2e
lea rdx, str._not_available_
lea rcx, [rbp + 0xf0]
call fcn.14000bfc0
lea rdx, [rbp + 0x80]
lea rcx, [rbp + 0xe0]
call fcn.140007340
mov rbx, rax
cmp qword [rax + 0x18], 8
jb 0x14006ab4e
mov rbx, qword [rax]
mov rcx, rbx
call fcn.1400acf68
mov r8, rax
mov rdx, rbx
mov rcx, r13
call fcn.1400123a0
nop
lea rcx, [rbp + 0x80]
call fcn.140012640
nop
lea rcx, [rbp + 0x178]
call fcn.140007410
nop
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x178], rax
lea rcx, [rbp + 0x178]
call fcn.14006eaa0
nop
mov bl, byte [rsp + 0x32]
mov rcx, qword [rbp + 0x30]
test rcx, rcx
je 0x14006abae
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rcx, qword [rsp + 0x60]
test rcx, rcx
je 0x14006abbf
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
lea rcx, [rsp + 0x40]
call fcn.140059850
test bl, bl
je 0x14006abdd
mov edx, 1
lea rcx, [rsp + 0x70]
call fcn.140058b00
nop
mov rcx, qword [rbp - 0x60]
test rcx, rcx
je 0x14006abed
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
lea rcx, [rbp - 0x50]
call fcn.140059520
nop
lea rcx, [rsp + 0x70]
call fcn.140058420
nop
mov rcx, qword [rbp - 0x58]
test rcx, rcx
je 0x14006ac12
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x14006ac58
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006ac53
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad64
call fcn.14009b510
mov qword [rbp + 0xb0], rsi
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], si
lea rcx, [rbp - 0x40]
call fcn.1400625d0
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14006ac8c
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
nop
mov rdx, qword [rbp + 0x78]
cmp rdx, 8
jb 0x14006acc8
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x60]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14006acc3
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14006ad22
call fcn.14009b510
mov qword [rbp + 0x70], rsi
mov qword [rbp + 0x78], 7
mov word [rbp + 0x60], si
lea rcx, [rbp + 0xc0]
call fcn.140012640
nop
lea rcx, [rbp - 0x80]
call fcn.14002a970
nop
mov rcx, qword [rsp + 0x68]
test rcx, rcx
je 0x14006acff
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.14009b5b0
add rsp, 0x2f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400ac408
nop
call fcn.1400ac408
int3
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
nop
call fcn.1400ac408
int3