Function at 0x18003f620
Capabilities:
Find taskbar

Disassembly:
mov rax, rsp
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rax - 0xd8]
sub rsp, 0x1b0
mov qword [rsp + 0x38], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov rax, qword [0x180168908]
xor rax, rsp
mov qword [rbp + 0xa8], rax
mov r14, rcx
xor edx, edx
lea rcx, str.Shell_TrayWnd
call qword [sym.imp.USER32.dll_FindWindowW]
mov r15, rax
test rax, rax
jne 0x18003f835
mov rsi, qword [r14 + 0x48]
test rsi, rsi
jne 0x18003f6b7
lea rdx, [0x180179690]
lea ecx, [rax + 0x70]
call fcn.1800a54d0
mov qword [rsp + 0x30], rax
test rax, rax
je 0x18003f6a8
mov rcx, rax
call fcn.1800703e0
mov rsi, rax
jmp 0x18003f6aa
xor esi, esi
mov qword [r14 + 0x48], rsi
test rsi, rsi
je 0x18003ff01
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18003f7f5
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov r8d, 0x5c
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145main.cpp
lea rcx, [rbp + 0x48]
call fcn.18000a3d0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov r8d, 3
lea rdx, [0x180112978]
lea rcx, [rbp + 0x28]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
mov r9d, 0x1b8
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.18000dda0
mov rbx, rax
lea rdx, str.wait_2s_chech_explorer
mov rcx, rax
call fcn.18000f150
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x40]
call fcn.18000f5c0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x18003f7a9
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f7a4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff34
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18003f7f5
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f7f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff3a
call fcn.1800a4c5c
lea rax, vtable.std::_Func_impl_no_alloc_void____cdecl___unsigned_long_int__unsigned_long_int__void____ptr64___void__unsigned_long_int__unsigned_long_int__void____ptr64_.0
mov qword [rbp + 0x68], rax
lea rax, [0x1800444b0]
mov qword [rbp + 0x70], rax
lea rax, [rbp + 0x68]
mov qword [rbp + 0xa0], rax
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x68]
xor r8d, r8d
mov edx, 0xfeced300
mov rcx, qword [r14 + 0x48]
call fcn.180070400
jmp 0x18003ff01
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18003f973
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov r8d, 0x5c
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145main.cpp
lea rcx, [rbp + 0x48]
call fcn.18000a3d0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov r8d, 3
lea rdx, [0x180112978]
lea rcx, [rbp + 0x28]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
mov r9d, 0x1bd
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.18000dda0
mov rbx, rax
lea rdx, str.find_traywnd
mov rcx, rax
call fcn.18000f150
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x40]
call fcn.18000f5c0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x18003f927
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f922
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff40
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18003f973
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003f96e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff46
call fcn.1800a4c5c
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r12d, eax
xor esi, esi
mov dword [rsp + 0x30], esi
lea rdx, [rsp + 0x30]
mov rcx, r15
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call fcn.18007dd60
mov r8, qword [rax]
lea edx, [rsi + 1]
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18003faed
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], sil
lea r8d, [rsi + 0x5c]
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145main.cpp
lea rcx, [rbp + 0x48]
call fcn.18000a3d0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], sil
lea r8d, [rsi + 3]
lea rdx, [0x180112978]
lea rcx, [rbp + 0x28]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
mov r9d, 0x1c1
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.18000dda0
mov rbx, rax
lea rdx, str.traywnd_process_id:
mov rcx, rax
call fcn.18000f150
mov edx, dword [rsp + 0x30]
mov rcx, rbx
call fcn.18000edd0
lea rdx, str._and_cur_pid:
mov rcx, rbx
call fcn.18000f150
mov edx, r12d
mov rcx, rbx
call fcn.18000edd0
mov rax, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [rax + 0x38]
nop
lea rcx, [rsp + 0x40]
call fcn.18000f5c0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x18003faa1
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fa9c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff4c
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18003faed
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fae8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff52
call fcn.1800a4c5c
cmp r12d, dword [rsp + 0x30]
jne 0x18003fc48
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18003fc36
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov r8d, 0x5c
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145main.cpp
lea rcx, [rbp + 0x48]
call fcn.18000a3d0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov r8d, 3
lea rdx, [0x180112978]
lea rcx, [rbp + 0x28]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
mov r9d, 0x1c3
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x40]
call fcn.18000dda0
mov rbx, rax
lea rdx, str.continue_work
mov rcx, rax
call fcn.18000f150
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x40]
call fcn.18000f5c0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x18003fbea
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fbe5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff58
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x38], xmm0
mov byte [rbp + 0x28], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18003fc36
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fc31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff5e
call fcn.1800a4c5c
mov rcx, r14
call fcn.18003d180
mov eax, 1
jmp 0x18003ff03
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0x78], xmm0
mov word [rbp + 0x68], si
xor r8d, r8d
lea rdx, [0x18010e038]
lea rcx, [rbp + 0x68]
call fcn.180019da0
nop
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0x58], xmm0
mov word [rbp + 0x48], si
mov r8d, 0x12
lea rdx, str.fail_shell_traywnd
lea rcx, [rbp + 0x48]
call fcn.180019da0
nop
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0x38], xmm0
mov word [rbp + 0x28], si
mov r8d, 3
lea rdx, [0x180112c68]
lea rcx, [rbp + 0x28]
call fcn.180019da0
nop
call fcn.180010330
mov rcx, rax
mov dword [rsp + 0x20], 1
lea r9, [rbp + 0x68]
lea r8, [rbp + 0x48]
lea rdx, [rbp + 0x28]
call fcn.180068da0
nop
mov rdx, qword [rbp + 0x40]
cmp rdx, 8
jb 0x18003fd1f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fd1a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff64
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0x38], xmm0
mov word [rbp + 0x28], si
mov rdx, qword [rbp + 0x60]
cmp rdx, 8
jb 0x18003fd70
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fd6b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff6a
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x180113320]
movdqu xmmword [rbp + 0x58], xmm0
mov word [rbp + 0x48], si
mov rdx, qword [rbp + 0x80]
cmp rdx, 8
jb 0x18003fdc4
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fdbf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff70
call fcn.1800a4c5c
call fcn.18007dd60
mov r8, qword [rax]
mov edx, 1
mov rcx, rax
call qword [r8 + 0x10]
cmp al, 1
jne 0x18003ff01
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x78], xmm0
mov byte [rbp + 0x68], 0
mov r8d, 0x5c
lea rdx, str.d:jenkins.jenkinsworkspacelib_commoncomputerz12_grab_versionhookhomepage_1145main.cpp
lea rcx, [rbp + 0x68]
call fcn.18000a3d0
nop
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov r8d, 3
lea rdx, [0x180112978]
lea rcx, [rbp + 0x48]
call fcn.18000a3d0
nop
call fcn.18007dd60
mov rdi, rax
mov r9d, 0x1c9
lea r8, [rbp + 0x68]
lea rdx, [rbp + 0x48]
lea rcx, [rsp + 0x40]
call fcn.18000dda0
mov rbx, rax
lea rdx, str.stop_work
mov rcx, rax
call fcn.18000f150
mov r8, qword [rdi]
mov rdx, rbx
mov rcx, rdi
call qword [r8 + 0x38]
nop
lea rcx, [rsp + 0x40]
call fcn.18000f5c0
nop
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x18003feb6
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003feb1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff76
call fcn.1800a4c5c
movdqa xmm0, xmmword [0x1801106e0]
movdqu xmmword [rbp + 0x58], xmm0
mov byte [rbp + 0x48], 0
mov rdx, qword [rbp + 0x80]
cmp rdx, 0x10
jb 0x18003ff01
inc rdx
mov rcx, qword [rbp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18003fefc
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18003ff2e
call fcn.1800a4c5c
xor eax, eax
mov rcx, qword [rbp + 0xa8]
xor rcx, rsp
call fcn.1800a5130
lea r11, [rsp + 0x1b0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
nop
call fcn.1800d79f8
int3