Function at 0x140047aac
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push rbp
push r15
xor rax, rax
push rax
push rax
push rax
push rax
sub rsp, 0x28
call fcn.1400fa660
push rcx
sub rsp, 0x28
call fcn.1400fa330
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push 0
push 0x10ca0001
mov rcx, qword [0x140845cdc]
push rcx
sub rsp, 0x28
call fcn.1400fa330
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
movabs rcx, 0x14018bdb6
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
mov rcx, qword [0x140845ffc]
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
call fcn.1400fa4d0
push qword [rsp + 0xa0]
push qword [rsp + 0xa0]
push qword [rsp + 0xa0]
push qword [rsp + 0xa0]
push 0x65
push rax
call fcn.1400fa590
mov rdx, rax
pop rax
add qword [rsp + 0x28], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140061b46
add rsp, 0x48
pop rcx
push rax
sub rsp, 0x28
call fcn.140077c64
add rsp, 0x28
pop rax
push qword [0x140845ddc]
push 0x65
pop rcx
pop rdx
call fcn.14007176e
push 0
push 0x37
push 0x2a8
push 0
push 0xbe
push 0x1b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x1b
pop rcx
pop rdx
pop r8
call fcn.140069e35
sub rsp, 8
push 0
push qword [0x140845f3c]
push 0x1e
push 0x1f4
push 0xc
push 0x14
push 0x4f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x4f
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0xc
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x4f
pop rcx
pop rdx
call fcn.1400c39a4
sub rsp, 8
push 3
push 0x280
push 0x2e
push 0x14
push 0x66
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400c2e74
add rsp, 0x30
push 0x66
pop rcx
call fcn.1400c3178
mov rax, rax
push rax
pop rcx
call fcn.1400e4838
and rax, rax
je 0x140047d33
sub rsp, 8
push qword [0x140845ec4]
push 0x66
pop rcx
sub rsp, 0x20
call fcn.1400c344c
add rsp, 0x20
mov rax, rax
push rax
pop rcx
sub rsp, 0x20
call fcn.1400de8b0
add rsp, 0x20
mov rax, rax
push rax
sub rsp, 8
push 0x66
pop rcx
sub rsp, 0x20
call fcn.1400c1e64
add rsp, 0x20
mov rax, rax
push rax
pop rcx
sub rsp, 0x20
call fcn.1400de8dc
add rsp, 0x28
mov rax, rax
push rax
push 0
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400e4bb0
add rsp, 0x30
call fcn.1400e4adc
push 1
push 0x66
pop rcx
pop rdx
call fcn.1400c1198
call fcn.1400c1d44
push 0x12
push 0
push qword [0x140845f3c]
push 0x23
push 0xb4
push 0xa
push 0xa
push 0x30
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0xd
push 0
push qword [0x140845e6c]
push 0x23
push 0xb4
push 0x32
push 0xa
push 0x31
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0x13
push 0
push qword [0x140845f54]
push 0x23
push 0xb4
push 0x5a
push 0xa
push 0x42
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0xf
push 0
push qword [0x140845e34]
push 0x23
push 0xb4
push 0x82
push 0xa
push 0x32
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0x17
push 0
push qword [0x140845fbc]
push 0x23
push 0xb4
push 0xd2
push 0xa
push 0x48
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0x10
push 0
push qword [0x140845d1c]
push 0x23
push 0xb4
push 0xfa
push 0xa
push 0x47
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0xe
push 0
push qword [0x140845c94]
push 0x23
push 0xb4
push 0x1d6
push 0xa
push 0x36
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0x15
push 0
push qword [0x140845ccc]
push 0x23
push 0xb4
push 0x1fe
push 0xa
push 0x37
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037632
add rsp, 0x40
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x1c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x1c
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0x1a
pop rcx
call fcn.1400effc0
mov rax, rax
push rax
push 0x23
push 0x23
push 0xa
push 0x14
push 0x63
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400c1b14
add rsp, 0x30
push rcx
sub rsp, 0x28
call fcn.1400fa330
add rsp, 0x28
pop rcx
push rax
push 0
push rcx
sub rsp, 0x28
call fcn.1400fa330
add rsp, 0x28
pop rcx
push rax
movabs rcx, str.OS:
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
mov rcx, qword [0x140845e74]
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
movabs rcx, str.__build
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
mov rcx, qword [0x140845e9c]
sub rsp, 0x28
call fcn.1400fa380
add rsp, 0x28
call fcn.1400fa4d0
push 0x12
push 0x1d6
push 0x10
push 0x46
push 0x64
push rax
call fcn.1400fa590
mov rdx, rax
pop rax
add qword [rsp + 0x28], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x38
pop rcx
push rax
sub rsp, 0x28
call fcn.140077c64
add rsp, 0x28
pop rax
push 0xb
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x64
pop rcx
pop rdx
call fcn.1400c39a4
push qword [0x140845ec4]
push 2
push 0x64
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, 0x14018e846
push rax
push 0x23
push 0x82
push 0x32
push 0x14
push 0x3b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, 0x140196356
push rax
push 0x23
push 0x82
push 0x32
push 0xa0
push 0x3c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845e54]
push 0x23
push 0x82
push 0x1b8
push 0x212
push 0x3a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0x800
push 0x145
push 0x280
push 0x64
push 0x14
push 0x67
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14007033f
add rsp, 0x30
push 0
push 2
push 0x459
sub rsp, 8
push 0x67
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
mov r15, qword [0x140845c6c]
and r15, r15
jle 0x140048209
push 0x292521
push 2
push 0x67
pop rcx
pop rdx
pop r8
call fcn.1400770ad
jmp 0x140048222
push qword [0x140845ec4]
push 2
push 0x67
pop rcx
pop rdx
pop r8
call fcn.1400770ad
call fcn.1400c1d44
push 1
push 0x1c
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x1d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x1d
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
push 0x23
push 0xd2
push 0xa
push 0x14
push 0x50
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400774c7
add rsp, 0x30
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x50
pop rcx
pop rdx
call fcn.1400c39a4
push 0x1e
pop rcx
call fcn.1400de8b0
mov rax, rax
push rax
push 0
push 0x153
sub rsp, 8
push 0x50
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
mov rcx, qword [0x140846664]
call fcn.1400f114c
mov rcx, qword [0x140846664]
call fcn.1400f1160
or rax, rax
je 0x140048398
mov r15, qword [0x140845c8c]
and r15, r15
jle 0x140048379
movabs rax, 0x14019c7dc
push rax
mov rbp, qword [0x14084666c]
push qword [rbp + 0x10]
pop rcx
pop rdx
call fcn.1400f6fb0
mov r15, rax
and r15, r15
jle 0x140048377
mov rbp, qword [0x14084666c]
push qword [rbp + 0x10]
push 0xffffffffffffffff
push 0x50
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
jmp 0x140048396
mov rbp, qword [0x14084666c]
push qword [rbp + 0x10]
push 0xffffffffffffffff
push 0x50
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
jmp 0x140048319
push 1
push 0x50
pop rcx
pop rdx
call fcn.1400c141c
push 0
push 0x23
push 0x50
push 0xa
push 0xf0
push 0x56
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400774c7
add rsp, 0x30
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x56
pop rcx
pop rdx
call fcn.1400c39a4
push 0x1e
pop rcx
call fcn.1400de8b0
mov rax, rax
push rax
push 0
push 0x153
sub rsp, 8
push 0x56
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
movabs rax, 0x14019e1f0
push rax
push 0xffffffffffffffff
push 0x56
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
movabs rax, 0x14019a2ec
push rax
push 0xffffffffffffffff
push 0x56
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
push 1
push 0x56
pop rcx
pop rdx
call fcn.1400c141c
push 0
push 0x23
push 0x12c
push 0xa
push 0x168
push 0x51
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400774c7
add rsp, 0x30
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x51
pop rcx
pop rdx
call fcn.1400c39a4
push 0x19
pop rcx
call fcn.1400de8b0
mov rax, rax
push rax
push 0
push 0x153
sub rsp, 8
push 0x51
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
mov qword [rsp + 0x68], 0x32
mov qword [rsp + 0x28], 0x16
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, 0x14019be32
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x6d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Excel
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x6e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Access
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x6f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.PowerPoint
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x76
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Outlook
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x75
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.OneNote
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x74
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.OneDrive
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x77
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.OneDrive_for_business
push rax
push 0x9a
push qword [rsp + 0x90]
push 0x14
push 0x72
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Teams
push rax
push 0x78
push qword [rsp + 0x90]
push 0x14
push 0x71
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Skype_for_business
push rax
push 0x98
push qword [rsp + 0x90]
push 0x14
push 0x73
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Publisher
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x70
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Project
push rax
push 0x56
push qword [rsp + 0x90]
push 0x14
push 0x78
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.ProjectPro
push rax
push 0x56
push qword [rsp + 0x90]
push 0x14
push 0x79
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Project
push rax
push 0x64
push qword [rsp + 0x90]
push 0x14
push 0x7a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Visio
push rax
push 0x58
push qword [rsp + 0x90]
push 0x14
push 0x7b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.VisioPro
push rax
push 0x58
push qword [rsp + 0x90]
push 0x14
push 0x7c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Visio
push rax
push 0x58
push qword [rsp + 0x90]
push 0x14
push 0x7d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
push qword [0x140845f84]
push 0xa4
push qword [rsp + 0x90]
push 0x14
push 0x7e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
mov r15, qword [rsp + 0x68]
add r15, qword [rsp + 0x28]
mov qword [rsp + 0x68], r15
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push 0x14
push 0x104
push 0x18b
push 0x14
push 0x69
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x69
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845da4]
push 0x23
push 0xd2
push 0x1a4
push 0x14
push 0x3d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0x51
pop rcx
call fcn.14004b84e
push 0
push 0x51
pop rcx
pop rdx
call fcn.1400c141c
sub rsp, 8
push 0
push qword [0x140845d3c]
push 0x14
push 0x3c
push 0x48
push 0xf0
push 0x6a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x6a
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0x6e
push 0x5e
push 0xf0
pop rcx
pop rdx
pop r8
call fcn.140026f92
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push 0x140
push 0x12c
push 0x32
push 0x168
push 0x52
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x52
pop rcx
pop rdx
pop r8
call fcn.140069e35
call fcn.1400c1d44
push 1
push 0x1d
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x1f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x1f
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845cc4]
push 0x23
push 0x104
push 0xa
push 0x14
push 0x43
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845cf4]
push 0x23
push 0x82
push 0xa
push 0x122
push 0x44
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
push 0x23
push 0x14a
push 0x5a
push 0x14
push 0x55
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400774c7
add rsp, 0x30
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x55
pop rcx
pop rdx
call fcn.1400c39a4
push 0x19
pop rcx
call fcn.1400de8b0
mov rax, rax
push rax
push 0
push 0x153
sub rsp, 8
push 0x55
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
push 0x55
pop rcx
call fcn.14004b84e
push qword [0x140845c44]
push 0xffffffffffffffff
push 0x55
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
push 0
push 0x55
pop rcx
pop rdx
call fcn.1400c141c
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
push 0x16
push 0x14a
push 0x41
push 0x14
push 0x6c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push 0xb4
push 0x1f4
push 0xa0
push 0x14
push 0x53
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x6c
pop rcx
pop rdx
pop r8
call fcn.140069e35
push qword [0x140845ec4]
push 2
push 0x53
pop rcx
pop rdx
pop r8
call fcn.140069e35
call fcn.1400c1d44
push 1
push 0x1f
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x1e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x1e
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0x40000001
push 0x280
movabs rax, str.Office_C2R_Product:
push rax
push 0xf0
push 0x280
push 0xa
push 0x14
push 0x4c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a0ce
add rsp, 0x40
sub rsp, 8
push 0
push 0
push 0xfe
push 0x19
push 1
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.COMCTL32.DLL_ImageList_Create
add rsp, 0x30
mov rax, rax
push rax
push 1
push 0x1003
sub rsp, 8
push 0x4c
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x4c
pop rcx
pop rdx
call fcn.1400c39a4
push 0x800
push 0xf0
push 0x280
push 0xa
push 0x14
push 0x68
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14007033f
add rsp, 0x30
mov r15, qword [0x140845c6c]
and r15, r15
jle 0x140049080
push 0x292521
push 2
push 0x68
pop rcx
pop rdx
pop r8
call fcn.1400770ad
jmp 0x140049099
push qword [0x140845ddc]
push 2
push 0x68
pop rcx
pop rdx
pop r8
call fcn.1400770ad
push 1
push 0x68
pop rcx
pop rdx
call fcn.1400c1198
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845e24]
push 0x23
push 0x82
push 0x104
push 0x14
push 0x3e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845dc4]
push 0x23
push 0x82
push 0x104
push 0xa0
push 0x41
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845d0c]
push 0x23
push 0xdc
push 0x104
push 0x1b8
push 0x40
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845fd4]
push 0x23
push 0xdc
push 0x131
push 0x1b8
push 0x3f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, 0x14019be32
push rax
push 0x19
push 0x82
push 0x172
push 0x14
push 0x7f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Excel
push rax
push 0x19
push 0x82
push 0x190
push 0x14
push pe_nt_image_headers64
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Access
push rax
push 0x19
push 0x82
push 0x1ae
push 0x14
push 0x81
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Outlook
push rax
push 0x19
push 0x82
push 0x1cc
push 0x14
push 0x82
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.OneNote
push rax
push 0x19
push 0x82
push 0x172
push 0xa0
push 0x83
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.PowerPoint
push rax
push 0x19
push 0x82
push 0x190
push 0xa0
push 0x84
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Publisher
push rax
push 0x19
push 0x82
push 0x1ae
push 0xa0
push 0x85
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Skype
push rax
push 0x19
push 0x82
push 0x1cc
push 0xa0
push 0x86
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Project
push rax
push 0x19
push 0x82
push 0x172
push 0x12c
push 0x87
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Visio
push rax
push 0x19
push 0x82
push 0x190
push 0x12c
push 0x88
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
call fcn.1400c1d44
push 1
push 0x1e
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x22
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x22
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0x4000000d
push 0x2b2
movabs rax, str.Licenses
push rax
push 0x1a4
push 0x280
push 0xa
push 0x14
push 0x2b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a0ce
add rsp, 0x40
push 8
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x2b
pop rcx
pop rdx
call fcn.1400c39a4
push 0
push qword [0x140845db4]
push 0xffffffffffffffff
push 0x2b
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400c1d74
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845dc4]
push 0x23
push 0x82
push 0x1b8
push 0x14
push 0x33
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845fb4]
push 0x23
push 0x82
push 0x1b8
push 0xa0
push 0x34
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845dd4]
push 0xaa
push 0x1bd
push 0x140
push 0x35
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
call fcn.1400c1d44
push 1
push 0x22
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x21
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x21
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
push 0x23
push 0x14a
push 0xa
push 0x14
push 0x29
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400774c7
add rsp, 0x30
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x29
pop rcx
pop rdx
call fcn.1400c39a4
push 0x19
pop rcx
call fcn.1400de8b0
mov rax, rax
push rax
push 0
push 0x153
sub rsp, 8
push 0x29
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
push 0x29
pop rcx
call fcn.14004b84e
push 0
push 0x29
pop rcx
pop rdx
call fcn.1400c141c
push 0
push 0x23
push 0x5a
push 0xa
push 0x168
push 0x2a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400774c7
add rsp, 0x30
push 9
pop rcx
call fcn.1400f92c4
mov rax, rax
push rax
push 0x2a
pop rcx
pop rdx
call fcn.1400c39a4
push 0x19
pop rcx
call fcn.1400de8b0
mov rax, rax
push rax
push 0
push 0x153
sub rsp, 8
push 0x2a
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
movabs rax, 0x14019e1f0
push rax
push 0xffffffffffffffff
push 0x2a
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
movabs rax, 0x14019a2ec
push rax
push 0xffffffffffffffff
push 0x2a
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
movabs rax, 0x1401a056e
push rax
push 0xffffffffffffffff
push 0x2a
pop rcx
pop rdx
pop r8
call fcn.1400c14d8
push 1
push 0x2a
pop rcx
pop rdx
call fcn.1400c141c
sub rsp, 8
push 0
push qword [0x140845d3c]
push 0x14
push 0x3c
push 0xa
push 0x208
push 0x6b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x6b
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0x6e
push 0x20
push 0x208
pop rcx
pop rdx
pop r8
call fcn.14004a938
movabs rax, str.xx.x.xxxxx.xxxxx___Windows_10_11
push rax
push 0x16
push 0xd2
push 0x122
push 0x14
push 0x8a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140069091
add rsp, 0x30
movabs rax, str.xx.x.xxxxx.xxxxx___Windows_8_8.1
push rax
push 0x16
push 0xd2
push 0x140
push 0x14
push 0x8b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140069091
add rsp, 0x30
movabs rax, str.xx.x.xxxxx.xxxxx___Windows_7
push rax
push 0x16
push 0xd2
push 0x122
push 0x118
push 0x8c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140069091
add rsp, 0x30
movabs rax, 0x14018b0dc
push rax
push 0x14
push 0x12
push 0x140
push 0x118
push 0x8d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140069091
add rsp, 0x30
sub rsp, 8
push 0
push qword [0x140845d8c]
push 0x16
push 0x64
push 0x140
push 0x12e
push 0x8e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006b157
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x8a
pop rcx
pop rdx
pop r8
call fcn.140069e35
push qword [0x140845ec4]
push 2
push 0x8b
pop rcx
pop rdx
pop r8
call fcn.140069e35
push qword [0x140845ec4]
push 2
push 0x8c
pop rcx
pop rdx
pop r8
call fcn.140069e35
push qword [0x140845ec4]
push 2
push 0x8d
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845d1c]
push 0x23
push 0x14d
push 0x168
push 0x14
push 0x2c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845c5c]
push 0x23
push 0x5a
push 0x168
push 0x16a
push 0x2d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845ecc]
push 0x23
push 0x1b1
push 0x190
push 0x14
push 0x2e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 1
push 0x2e
pop rcx
pop rdx
call fcn.140046009
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
push 0x18
push 0x1b1
push 0x1b8
push 0x14
push 0x4a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
sub rsp, 8
push 1
movabs rax, 0x14018b0dc
push rax
push 0x26
push 0x1b1
push 0x1d1
push 0x14
push 0x4b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x4a
pop rcx
pop rdx
pop r8
call fcn.140069e35
push qword [0x140845ec4]
push 2
push 0x4b
pop rcx
pop rdx
pop r8
call fcn.140069e35
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push 0xe1
push 0x1ae
push 0x3c
push 0x14
push 0x54
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x54
pop rcx
pop rdx
pop r8
call fcn.140069e35
call fcn.1400c1d44
push 1
push 0x21
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x23
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x23
pop rcx
pop rdx
pop r8
call fcn.140069e35
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845fa4]
push 0x12c
push 0xa
push 0x14
push 0x58
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845e94]
push 0x12c
push 0x2d
push 0x14
push 0x59
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845f8c]
push 0x15e
push 0x50
push 0x14
push 0x5b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845f44]
push 0xf0
push 0x73
push 0x14
push 0x5d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845cb4]
push 0x15e
push 0x96
push 0x14
push 0x5c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push 0x18
push 0x96
push 0x73
push 0x140
push 0x61
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006b157
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push 0x18
push 0x32
push 0x73
push 0x1e0
push 0x62
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006b157
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845dfc]
push 0xbe
push 0xb9
push 0x14
push 0x5f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
movabs rax, 0x14018b0dc
push rax
push qword [0x140845c34]
push 0x96
push 0xe1
push 0x14
push 0x5e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003b998
add rsp, 0x40
sub rsp, 8
push 0
push qword [0x140845d04]
push 0x18
push 0x190
push 0x104
push 0x14
push 0x60
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14006a7b8
add rsp, 0x40
push qword [0x140845ec4]
push 2
push 0x60
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 1
push 0x60
pop rcx
pop rdx
call fcn.1400c1198
push 0x14
pop rcx
call fcn.1400f8ad0
mov qword [rsp + 0x30], rax
push 0x19
push 0xffffffffffffffff
movabs rax, str.127.0.0.1
push rax
push qword [rsp + 0x48]
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400f8ca0
push qword [rsp + 0x30]
push 0
push 0x1501
sub rsp, 8
push 0x61
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
push 0xa
pop rcx
call fcn.1400f8ad0
mov qword [rsp + 0x38], rax
push 0x19
push 0xffffffffffffffff
movabs rax, str.2080
push rax
push qword [rsp + 0x50]
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400f8ca0
push qword [rsp + 0x38]
push 0
push 0x1501
sub rsp, 8
push 0x62
pop rcx
sub rsp, 0x20
call fcn.1400c11f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.DLL_SendMessageW
call fcn.1400c1d44
push 1
push 0x23
pop rcx
pop rdx
call fcn.1400c1198
push 0
push 0x208
push 0x2a8
push 0x32
push 0xbe
push 0x20
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140071519
add rsp, 0x30
push qword [0x140845ec4]
push 2
push 0x20
pop rcx
pop rdx
pop r8
call fcn.140069e35
push 0
movabs rax, 0x1401974b0
push rax
movabs rax, str.Go_msfree.su
push rax
push 0x23
push 0x8c
push 0xa
push 0x14
push 0x45
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0
movabs rax, 0x14018b0dc
push rax
movabs rax, str.Donate
push rax
push 0x23
push 0x82
push 0xa
push 0xb4
push 0x46
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.14003a5a3
add rsp, 0x40
push 0x14
pop rcx
call fcn.1400effc0
mov rax, rax
push rax
push 0x1c2
push 0x1c2
push 0x32
push 0x78
push 0x16
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400c1b14
add rsp, 0x30
call fcn.1400c1d44
push 1
push 0x20
pop rcx
pop rdx
call fcn.1400c1198
xor rax, rax
add rsp, 0x48
pop r15
pop rbp
ret