Function at 0x18003348d
Capabilities:
Enumerate gui resources
Get graphical window text

Disassembly:
jmp 0x18004f580
push r13
push rbp
push rdi
sub rsp, 0xb50
lea r13, [rsp + 0x30]
lea rbp, [rsp + 0x50]
and rbp, 0xffffffffffffffe0
lea rdi, [rsp + 0x30]
mov ecx, 0x208
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x1800ca3c0]
xor rax, r13
mov qword [rbp + 0xaf8], rax
lea rcx, [0x1800d6111]
call fcn.180033ee7
nop
xor eax, eax
cmp eax, 1
je 0x18004fbfe
mov ecx, 0xfa
call qword [sym.imp.KERNEL32.dll_Sleep]
nop
mov qword [0x1800caab0], 0
xor edx, edx
lea rcx, [0x1800335d7]
call qword [sym.imp.USER32.dll_EnumWindows]
nop
cmp qword [0x1800caab0], 0
jne 0x18004f6f5
lea rax, [rbp + 0x4f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x514]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x534]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x4f4]
movzx r8d, byte [rbp + 0x514]
movzx edx, byte [rbp + 0x534]
lea rcx, [rbp + 0x4d0]
call fcn.180037d90
mov rcx, rax
call fcn.1800338ac
mov rdx, rax
lea rcx, [0x1800caac0]
call fcn.180033087
nop
lea rax, [rbp + 0x584]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x5a4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x5c4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x584]
movzx r8d, byte [rbp + 0x5a4]
movzx edx, byte [rbp + 0x5c4]
lea rcx, [rbp + 0x560]
call fcn.180038a70
mov rcx, rax
call fcn.180033069
mov rdx, rax
lea rcx, [0x1800caae8]
call fcn.180033087
nop
jmp 0x18004f5c8
lea rax, [rbp + 0x10]
mov rdi, rax
xor eax, eax
mov ecx, 0x100
rep stosb byte [rdi], al
mov r8d, 0x100
lea rdx, [rbp + 0x10]
mov rcx, qword [0x1800caab0]
call qword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
jne 0x18004f811
lea rax, [rbp + 0x614]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x634]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x654]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x614]
movzx r8d, byte [rbp + 0x634]
movzx edx, byte [rbp + 0x654]
lea rcx, [rbp + 0x5f0]
call fcn.180038ce0
mov rcx, rax
call fcn.1800338ac
mov rdx, rax
lea rcx, [0x1800caac0]
call fcn.180033087
nop
lea rax, [rbp + 0x6a4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x6c4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x6e4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x6a4]
movzx r8d, byte [rbp + 0x6c4]
movzx edx, byte [rbp + 0x6e4]
lea rcx, [rbp + 0x680]
call fcn.180038e80
mov rcx, rax
call fcn.180033069
mov rdx, rax
lea rcx, [0x1800caae8]
call fcn.180033087
nop
jmp 0x18004f5c8
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x128]
call fcn.1800336bd
nop
mov r8, 0xffffffffffffffff
lea rdx, [0x1800a39cc]
lea rcx, [rbp + 0x128]
call fcn.1800331e0
inc rax
mov qword [rbp + 0xac8], rax
xor r8d, r8d
lea rdx, [0x1800a39cc]
lea rcx, [rbp + 0x128]
call fcn.180033348
mov qword [rbp + 0xad0], rax
mov r9, qword [rbp + 0xac8]
mov r8, qword [rbp + 0xad0]
lea rdx, [rbp + 0x708]
lea rcx, [rbp + 0x128]
call fcn.180033799
mov qword [rbp + 0xad8], rax
mov rdx, qword [rbp + 0xad8]
lea rcx, [rbp + 0x128]
call fcn.1800333f7
lea rcx, [rbp + 0x708]
call fcn.180033294
nop
lea rdx, [rbp + 0x128]
lea rcx, [rbp + 0x168]
call fcn.1800331fe
nop
lea rax, [rbp + 0x748]
mov qword [rbp + 0x778], rax
mov rdx, qword [rbp + 0x778]
lea rcx, [rbp + 0x168]
call fcn.180033f37
mov qword [rbp + 0xac8], rax
mov rax, qword [rbp + 0xac8]
mov qword [rbp + 0xad0], rax
lea rax, [rbp + 0x798]
mov qword [rbp + 0x7c8], rax
mov rdx, qword [rbp + 0x7c8]
lea rcx, [rbp + 0x168]
call fcn.1800331db
mov qword [rbp + 0xad8], rax
mov rax, qword [rbp + 0xad8]
mov qword [rbp + 0xae0], rax
lea rax, [rbp + 0x7e8]
mov qword [rbp + 0x818], rax
mov rdx, qword [rbp + 0x818]
lea rcx, [rbp + 0x168]
call fcn.180033f37
mov qword [rbp + 0xae8], rax
mov rax, qword [rbp + 0xae8]
mov qword [rbp + 0xaf0], rax
mov rax, qword [sym.imp.ucrtbased.dll_tolower]
mov qword [rsp + 0x20], rax
mov r9, qword [rbp + 0xad0]
mov r8, qword [rbp + 0xae0]
mov rdx, qword [rbp + 0xaf0]
lea rcx, [rbp + 0x838]
call fcn.180033014
lea rcx, [rbp + 0x838]
call fcn.180033492
nop
lea rax, [rbp + 0x8d4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x8f4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0x914]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x8d4]
movzx r8d, byte [rbp + 0x8f4]
movzx edx, byte [rbp + 0x914]
lea rcx, [rbp + 0x880]
call fcn.180039020
mov rcx, rax
call fcn.1800337a3
mov rdx, rax
lea rcx, [rbp + 0x168]
call fcn.18003360e
movzx eax, al
test eax, eax
je 0x18004fa34
lea rcx, [rbp + 0x168]
call fcn.180033294
nop
lea rcx, [rbp + 0x128]
call fcn.180033294
nop
jmp 0x18004fbfe
xor r8d, r8d
lea rdx, [0x1800a39d0]
lea rcx, [rbp + 0x128]
call fcn.18003357d
mov qword [rbp + 0x1a8], rax
cmp qword [rbp + 0x1a8], 0xffffffffffffffff
je 0x18004faf7
mov r9, qword [rbp + 0x1a8]
xor r8d, r8d
lea rdx, [rbp + 0x938]
lea rcx, [rbp + 0x128]
call fcn.180033799
mov qword [rbp + 0xac8], rax
mov rdx, qword [rbp + 0xac8]
lea rcx, [0x1800caae8]
call fcn.1800333f7
lea rcx, [rbp + 0x938]
call fcn.180033294
nop
mov rax, qword [rbp + 0x1a8]
add rax, 3
mov r9, 0xffffffffffffffff
mov r8, rax
lea rdx, [rbp + 0x978]
lea rcx, [rbp + 0x128]
call fcn.180033799
mov qword [rbp + 0xac8], rax
mov rdx, qword [rbp + 0xac8]
lea rcx, [0x1800caac0]
call fcn.1800333f7
lea rcx, [rbp + 0x978]
call fcn.180033294
nop
jmp 0x18004fbdf
lea rax, [rbp + 0x9e4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xa04]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xa24]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0x9e4]
movzx r8d, byte [rbp + 0xa04]
movzx edx, byte [rbp + 0xa24]
lea rcx, [rbp + 0x9c0]
call fcn.180039240
mov rcx, rax
call fcn.1800338ac
mov rdx, rax
lea rcx, [0x1800caac0]
call fcn.180033087
nop
lea rax, [rbp + 0xa74]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xa94]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
lea rax, [rbp + 0xab4]
mov rdi, rax
xor eax, eax
mov ecx, 1
rep stosb byte [rdi], al
movzx r9d, byte [rbp + 0xa74]
movzx r8d, byte [rbp + 0xa94]
movzx edx, byte [rbp + 0xab4]
lea rcx, [rbp + 0xa50]
call fcn.1800393e0
mov rcx, rax
call fcn.180033069
mov rdx, rax
lea rcx, [0x1800caae8]
call fcn.180033087
nop
lea rcx, [rbp + 0x168]
call fcn.180033294
nop
lea rcx, [rbp + 0x128]
call fcn.180033294
nop
jmp 0x18004f5c8
lea rcx, [rbp - 0x30]
lea rdx, [0x1800a16f0]
call fcn.180033c58
mov rcx, qword [rbp + 0xaf8]
xor rcx, r13
call fcn.18003372b
lea rsp, [r13 + 0xb20]
pop rdi
pop rbp
pop r13
ret