Function at 0x1400678c5
Capabilities:
Get graphical window text

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x20], r9
push r15
xor rax, rax
push rax
sub rsp, 0x28
call fcn.1400f3290
sub rsp, 8
push 0x10ca0001
push qword [0x141ef54f0]
push qword [rsp + 0x70]
push qword [rsp + 0x70]
push qword [rsp + 0x70]
push qword [rsp + 0x70]
push 0
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d7b04
add rsp, 0x40
sub rsp, 8
push 0x1ae
push 0x288
push 0xfffffffffffffffe
push 0xfffffffffffffffe
push 2
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d2424
add rsp, 0x30
movabs rax, 0x1401c3a84
push rax
push 0xffffffffffffffff
push 2
pop rcx
pop rdx
pop r8
call fcn.1400cf3e4
push qword [0x141ef54b0]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
push 0x52
push 0xa0
push SafeArrayPutElement
push reloc.WS2_32.dll_ioctlsocket
push 3
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
movabs rax, 0x1401c10c4
push rax
push 0x172
push 0x13e
push 4
push 0xdc
push 4
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d301c
add rsp, 0x30
sub rsp, 8
push 0x170
push 0x19e
push 6
push 0xdc
push 6
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d37b0
add rsp, 0x30
push 1
push 6
pop rcx
pop rdx
call fcn.1400cc7d8
push 0xfc
push 0xfe
push 0xdc
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 2
push 6
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
sub rsp, 8
push reloc.WS2_32.dll_inet_addr
push 0
push 0x2e
push 0xcc
push 0xac
push 8
push 7
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d01d4
add rsp, 0x40
sub rsp, 8
push reloc.WS2_32.dll_inet_addr
push 0
push 0x1c
push 0xcc
push 0x118
push 8
push 8
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d01d4
add rsp, 0x40
sub rsp, 8
push reloc.WS2_32.dll_inet_addr
push 0
push 0x1c
push 0xcc
push 0xf8
push 8
push 9
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d01d4
add rsp, 0x40
sub rsp, 8
push reloc.WS2_32.dll_inet_addr
push 0
push 0x1c
push 0xcc
push 0x150
push 8
push reloc.WS2_32.dll_ioctlsocket
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d01d4
add rsp, 0x40
movabs rax, 0x1401cbf00
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0xdc
push reloc.WS2_32.dll_select
push recv
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
sub rsp, 8
push 1
push qword [0x141ef5780]
push recvfrom
push 0x58
push 0xe0
push WSACleanup
push 0x58
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 0x7d
pop rcx
call fcn.1400f1e04
mov rax, rax
push rax
push 0x58
pop rcx
pop rdx
call fcn.1400cf2f0
movabs rax, 0x1401c10c4
push rax
push socket
push reloc.WS2_32.dll_select
push gethostbyaddr
push 0xe2
push reloc.WS2_32.dll_inet_addr
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d0466
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x48
push 0xee
push recvfrom
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401c8ed6
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x58
push 0xee
push recvfrom
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d4792
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x68
push 0xee
push SafeArrayGetLBound
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401daba8
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0xa8
push 0xee
push reloc.WS2_32.dll_recv
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d61b0
push rax
push reloc.WS2_32.dll_select
push 0x78
push 0xb8
push 0xee
push reloc.OLEAUT32.dll_SafeArrayGetElemsize
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401ced96
push rax
push reloc.WS2_32.dll_select
push 0x9a
push 0xd8
push 0xee
push reloc.WS2_32.dll_select
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401cd620
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0xe8
push 0xee
push reloc.OLEAUT32.dll_SafeArrayGetLBound
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401c931c
push rax
push reloc.WS2_32.dll_select
push 0x98
push 0xc8
push 0xee
push SafeArrayPutElement
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d18b4
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x88
push 0xee
push SafeArrayPutElement
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401cb44e
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x78
push 0xee
push reloc.WS2_32.dll_socket
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401cee42
push rax
push reloc.WS2_32.dll_select
push 0x56
push 0xc6
push 0x1ac
push SafeArrayPutElement
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d953c
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0xd8
push 0x1ac
push reloc.OLEAUT32.dll_SafeArrayPutElement
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d96d6
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x98
push 0xee
push 0x1a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d0466
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0x48
push 0x1ac
push 0x1b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401c8ed6
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0x5a
push 0x1ac
push 0x1c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d4792
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0x6c
push 0x1ac
push 0x1d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401cb44e
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0x7e
push 0x1ac
push 0x1e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d18b4
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0x90
push 0x1ac
push 0x1f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d96d6
push rax
push reloc.WS2_32.dll_select
push 0x5e
push 0xa2
push 0x1ac
push 0x20
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401daba8
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0xb4
push 0x1ac
push 0x21
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
push 1
push 0x64
movabs rax, 0x1401c1382
push rax
push 0x16b
push 0x5c
push recv
push 0x21e
push 0x57
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ce4dc
add rsp, 0x40
sub rsp, 8
push 1
push qword [0x141ef5928]
push reloc.WS2_32.dll_select
push 0xde
push 0x158
push 0x10c
push 0x56
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 0
push 0
push pe_nt_image_headers64
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push 0x56
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
push qword [0x141ef5838]
push socket
push 0x78
push gethostbyaddr
push 0x1a0
push 0x51
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
push 0x10000000
push SafeArrayPutElement
push 0xa6
push gethostbyaddr
push 0xf4
push 0x50
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d47fc
add rsp, 0x30
movabs rax, 0x1401cf552
push rax
push reloc.WS2_32.dll_select
push 0x52
push 0xf8
push 0xee
push socket
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
push 0x10000000
push SafeArrayPutElement
push 0xb7
push socket
push 0xe2
push 0x4b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d47fc
add rsp, 0x30
movabs rax, 0x1401c794c
push rax
push reloc.WS2_32.dll_select
push 0x56
push 0xea
push 0x1ac
push 0x22
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d1a68
push rax
push reloc.WS2_32.dll_select
push 0x58
push 0xfc
push 0x1ac
push 0x23
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401ce906
push rax
push reloc.WS2_32.dll_select
push 0x52
push 0x108
push 0xee
push 0x24
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d2548
push rax
push reloc.WS2_32.dll_select
push MsiGetActiveDatabase
push SafeArrayPutElement
push 0x1a8
push 0x4c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cf678
add rsp, 0x30
movabs rax, 0x1401cf008
push rax
push reloc.WS2_32.dll_select
push MsiGetActiveDatabase
push SafeArrayPutElement
push 0x1e2
push 0x4d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cf678
add rsp, 0x30
movabs rax, 0x1401ce906
push rax
push reloc.WS2_32.dll_select
push 0x6a
push 0x10e
push 0x1ac
push 0x4f
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
sub rsp, 8
push 0
movabs rax, 0x1401db43e
push rax
push reloc.WS2_32.dll_select
push 0xa8
push 0x8a
push gethostbyaddr
push 0x4e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d549c
add rsp, 0x40
sub rsp, 8
push 1
movabs rax, 0x1401c10c4
push rax
push reloc.OLEAUT32.dll_SafeArrayGetElemsize
push 0x1ee
push 0x17c
push 0x92
push 0x52
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 0x7e
pop rcx
call fcn.1400f1e04
mov rax, rax
push rax
push 0x52
pop rcx
pop rdx
call fcn.1400cf2f0
push qword [0x141ef54a0]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
push SafeArrayPutElement
push SafeArrayPutElement
push 0x154
push 0xee
push 0x5a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
movabs rax, 0x1401d8da2
push rax
push socket
push gethostname
push 0x13c
push 0xe2
push 0x5c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd568
add rsp, 0x30
push 0x10000000
push SafeArrayPutElement
push 0xdc
push 0x13a
push 0x112
push 0x4a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d47fc
add rsp, 0x30
push 0
sub rsp, 8
push 0x4a
pop rcx
sub rsp, 0x20
call fcn.1400cf9d0
add rsp, 0x28
mov r15, rax
mov qword [rsp - 8], r15
fild qword [rsp - 8]
fmul qword [0x1401dd660]
push rax
fistp qword [rsp]
push 0x160
sub rsp, 8
push 0x4a
pop rcx
sub rsp, 0x20
call fcn.1400cc8c0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
call sub.USER32.dll_SendMessageW
push qword [0x141ef5648]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
sub rsp, 8
push qword [0x141ef5648]
pop rcx
sub rsp, 0x20
call fcn.1400e88cc
add rsp, 0x28
mov rax, rax
push rax
push qword [0x141ef5648]
pop rcx
sub rsp, 0x20
call fcn.1400e88f0
add rsp, 0x20
mov rax, rax
push rax
push 0x13a
push 0x1fe
push 0x5b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
movabs rax, 0x1401c4d8a
push rax
push reloc.WS2_32.dll_select
push 0x78
push 0x118
push 0xee
push 0x25
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401cd54a
push rax
push socket
push 0x79
push 0x17a
push reloc.WS2_32.dll_select
push 0x49
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401ccd3c
push rax
push 0xffffffffffffffff
push 2
pop rcx
pop rdx
pop r8
call fcn.1400cf3e4
movabs rax, 0x1401c5096
push rax
push reloc.WS2_32.dll_select
push 0x98
push SafeArrayPutElement
push 0x90
push 0x48
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401c10c4
push rax
push 0x7e
push 0x144
push 2
push 0x134
push 5
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d301c
add rsp, 0x30
push qword [0x141ef5490]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
push reloc.WS2_32.dll_gethostname
push 0xb4
push 0xbe
push 0xda
push 0x27
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
push 1
push 0x27
pop rcx
pop rdx
call fcn.1400cc7d8
movabs rax, 0x1401d0466
push rax
push SafeArrayPutElement
push 0x64
push reloc.WS2_32.dll_select
push 0x13c
push MsiGetActiveDatabase
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401c8ed6
push rax
push SafeArrayPutElement
push 0x64
push MsiGetActiveDatabase
push 0x13c
push 0x28
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401d4792
push rax
push SafeArrayPutElement
push 0x64
push reloc.msi.dll_MsiGetPropertyW
push 0x13c
push MsiGetActiveDatabase
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401cb44e
push rax
push SafeArrayPutElement
push 0x64
push reloc.WS2_32.dll_select
push 0x1a4
push MsiGetActiveDatabase
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
push qword [0x141ef54c0]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
push reloc.WS2_32.dll_gethostbyaddr
push 0x68
push 1
push 1
push reloc.msi.dll_MsiGetActiveDatabase
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
movabs rax, 0x1401d18b4
push rax
push SafeArrayPutElement
push 0x64
push MsiGetActiveDatabase
push 0x1a4
push MsiGetActiveDatabase
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401d96d6
push rax
push SafeArrayPutElement
push 0x64
push reloc.msi.dll_MsiGetPropertyW
push 0x1a4
push 0x2e
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401daba8
push rax
push SafeArrayPutElement
push 0x64
push reloc.WS2_32.dll_select
push reloc.SHELL32.dll_RealDriveType
push gethostbyaddr
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401c9c00
push rax
push SafeArrayPutElement
push 0x64
push MsiGetActiveDatabase
push reloc.SHELL32.dll_RealDriveType
push gethostbyaddr
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401cd620
push rax
push SafeArrayPutElement
push 0x64
push reloc.msi.dll_MsiGetPropertyW
push reloc.SHELL32.dll_RealDriveType
push gethostbyaddr
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401cf552
push rax
push SafeArrayPutElement
push 0x64
push 0x60
push reloc.SHELL32.dll_RealDriveType
push gethostbyaddr
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401c10c4
push rax
push gethostbyaddr
push 0xa6
push reloc.msi.dll_MsiGetPropertyW
push 0x88
push 0x26
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
push 0x7f
pop rcx
call fcn.1400f1e04
mov rax, rax
push rax
push 0x26
pop rcx
pop rdx
call fcn.1400cf2f0
sub rsp, 8
push 0x104
push 0x272
push 0x86
push 6
push reloc.WS2_32.dll_gethostbyaddr
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d37b0
add rsp, 0x30
push 0xfc
push 0xfe
push 0xdc
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 2
push reloc.WS2_32.dll_gethostbyaddr
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
movabs rax, 0x1401c10c4
push rax
push SafeArrayPutElement
push 0xa6
push MsiGetActiveDatabase
push 0x88
push reloc.WS2_32.dll_gethostbyname
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401c6bec
push rax
push reloc.WS2_32.dll_select
push 0x9e
push 8
push 0x90
push gethostname
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401c5c1a
push rax
push SafeArrayPutElement
push 0xcc
push 0x60
push 0x13c
push gethostname
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
movabs rax, 0x1401dbe70
push rax
push reloc.OLEAUT32.dll_SafeArrayGetLBound
push 0x64
push MsiGetPropertyW
push SafeArrayPutElement
push IsNetDrive
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d13fc
push rax
push reloc.OLEAUT32.dll_SafeArrayGetLBound
push 0x6e
push 0x58
push SafeArrayPutElement
push IsNetDrive
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d1970
add rsp, 0x30
movabs rax, 0x1401d3080
push rax
push 0xffffffffffffffff
push 2
pop rcx
pop rdx
pop r8
call fcn.1400cf3e4
movabs rax, 0x1401c10c4
push rax
push 0xd0
push 0x1b8
push reloc.WS2_32.dll_select
push 0xc2
push reloc.SHELL32.dll_IsNetDrive
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d301c
add rsp, 0x30
movabs rax, 0x1401c878a
push rax
push 0x21
push 0x142
push WSACleanup
push 0xcc
push 0x3a
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
push 0x7f
pop rcx
call fcn.1400f1e04
mov rax, rax
push rax
push 0x3a
pop rcx
pop rdx
call fcn.1400cf2f0
push 0x10000000
push SafeArrayPutElement
push 0x5e
push gethostbyaddr
push 0x1ae
push MsiGetPropertyW
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d47fc
add rsp, 0x30
push 0x10000000
push SafeArrayPutElement
push 0xdc
push gethostbyaddr
push 0xcc
push reloc.msi.dll_MsiGetPropertyW
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d47fc
add rsp, 0x30
push 1
push 0x64
movabs rax, 0x1401c1382
push rax
push 0xa2
push 0x5c
push gethostbyaddr
push 0x214
push MsiGetPropertyW
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ce4dc
add rsp, 0x40
push qword [0x141ef5490]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
push reloc.WS2_32.dll_gethostname
push 0xb4
push 0x1e
push 6
push MsiGetPropertyW
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
movabs rax, 0x1401d28ca
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
push 0x142
push 0xa8
push 0xcc
push IsNetDrive
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400ccd78
add rsp, 0x30
push 0x7f
pop rcx
call fcn.1400f1e04
mov rax, rax
push rax
push IsNetDrive
pop rcx
pop rdx
call fcn.1400cf2f0
push 0x10000000
push SafeArrayPutElement
push 0x140
push 0x4e
push 0xcc
push IsNetDrive
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d47fc
add rsp, 0x30
sub rsp, 8
push 1
movabs rax, 0x1401c10c4
push rax
push SafeArrayPutElement
push 0x1be
push 0xea
push 0xbe
push gethostname
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 1
push 0
movabs rax, 0x1401d0f08
push rax
push SafeArrayPutElement
push 0x62
push 0x7c
push gethostname
push 0x3d
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d54cc
add rsp, 0x40
push 0xff
push 0
push 0
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push 0x3d
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
sub rsp, 8
push 0
push 0
push 9
push 0x13f
push 0xc6
push 0xcd
push 0x3c
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d56e8
add rsp, 0x40
sub rsp, 8
push 0
push 0
push 9
push 0x13f
push __WSAFDIsSet
push 0xcd
push 0x3b
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d56e8
add rsp, 0x40
sub rsp, 8
push 1
movabs rax, 0x1401c10c4
push rax
push MsiGetActiveDatabase
push 0x1c0
push 0xfe
push 0xbe
push reloc.WS2_32.dll_gethostname
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
movabs rax, 0x1401d3be0
push rax
push 0xffffffffffffffff
push 2
pop rcx
pop rdx
pop r8
call fcn.1400cf3e4
sub rsp, 8
push 1
movabs rax, 0x1401c1486
push rax
push reloc.OLEAUT32.dll_SafeArrayPutElement
push 0x13a
push 0x26
push 0xa4
push gethostname
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 0x62
push 0
push 0
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push gethostname
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
push qword [0x141ef5488]
pop rcx
call fcn.1400e89ec
mov rax, rax
push rax
push pe_nt_image_headers64
push pe_nt_image_headers64
push 0x7e
push 0xfe
push 0x47
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d0cc8
add rsp, 0x30
sub rsp, 8
push 0
movabs rax, 0x1401ca95e
push rax
push reloc.WS2_32.dll_select
push 0x64
push 0x132
push 0x11a
push 0x55
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d549c
add rsp, 0x40
push 0xff
push 0
push 0
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push 0x55
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
push 1
push 0
push qword [0x141ef55f8]
push reloc.WS2_32.dll_select
push 0x7e
push 0x11c
push 0x116
push 0x59
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400d54cc
add rsp, 0x40
push 0xff
push 0
push 0
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push 0x59
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
sub rsp, 8
push 1
movabs rax, 0x1401cc530
push rax
push reloc.WS2_32.dll_select
push 0xe4
push MsiGetPropertyW
push 0xcc
push 0x53
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 0
push IsNetDrive
push 0
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push 0x53
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
sub rsp, 8
push 1
movabs rax, 0x1401dac76
push rax
push reloc.WS2_32.dll_select
push 0x110
push 0x5a
push 0xb6
push 0x54
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.1400cd590
add rsp, 0x40
push 0
push IsNetDrive
push 0
pop rcx
pop rdx
pop r8
call fcn.1400e5d6c
mov rax, rax
push rax
push 1
push 0x54
pop rcx
pop rdx
pop r8
call fcn.1400cf2a4
call fcn.1400d1714
xor rax, rax
add rsp, 0x30
pop r15
ret