Function at 0x501904
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffbbc
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x43c], edx
mov dword [ebp - 0x440], edx
mov dword [ebp - 0x444], edx
mov dword [ebp - 0x430], edx
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x438], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x501b85
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0x501b94
call sub.user32.dll_FindWindowA
push 0
push 0x501ba4
push 0
push eax
call sub.user32.dll_FindWindowExA
push 0
push 0x501bb4
push 0
push eax
call sub.user32.dll_FindWindowExA
push 0
push 0x501bc0
push 0
push eax
call sub.user32.dll_FindWindowExA
mov edi, eax
test edi, edi
je 0x501b67
lea eax, [ebp - 0xc]
push eax
push edi
call sub.user32.dll_GetWindowThreadProcessId
mov eax, dword [ebp - 0xc]
push eax
push 0
push 0x38
call sub.kernel32.dll_OpenProcess
mov esi, eax
push 4
push 0x3000
push 0x1000
push 0
push esi
call sub.kernel32.dll_VirtualAllocEx
mov ebx, eax
push 0
push 0
push 0x418
push edi
call sub.user32.dll_SendMessageA
dec eax
test eax, eax
jl 0x501b53
inc eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 8], 0
lea eax, [ebp - 0x28]
xor ecx, ecx
mov edx, 0x14
call fcn.004031e0
lea eax, [ebp - 0x10]
push eax
push 0x14
lea eax, [ebp - 0x28]
push eax
push ebx
push esi
call sub.kernel32.dll_WriteProcessMemory
push ebx
mov eax, dword [ebp - 8]
push eax
push 0x417
push edi
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x10]
push eax
push 0x14
lea eax, [ebp - 0x28]
push eax
push ebx
push esi
call sub.kernel32.dll_ReadProcessMemory
cmp dword [ebp - 0x18], 0xffffffff
je 0x501b47
mov eax, ebx
add eax, 0x14
push eax
mov eax, dword [ebp - 0x24]
push eax
push 0x42d
push edi
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x10]
push eax
push 0x401
lea eax, [ebp - 0x429]
push eax
mov eax, ebx
add eax, 0x14
push eax
push esi
call sub.kernel32.dll_ReadProcessMemory
push 0
mov eax, dword [ebp - 0x24]
push eax
push 0x40c
push edi
call sub.user32.dll_SendMessageA
test al, al
je 0x501adb
mov eax, dword [ebp - 4]
push dword [eax]
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x438]
lea edx, [ebp - 0x429]
mov ecx, 0x401
call fcn.00404b34
mov eax, dword [ebp - 0x438]
xor ecx, ecx
mov edx, 0x501bd8
call fcn.00437f10
mov eax, dword [ebp - 0x434]
lea edx, [ebp - 0x430]
call fcn.00409450
push dword [ebp - 0x430]
push 0x501be4
push 0x501bf0
push 0x501be4
push 0x501c00
mov eax, dword [ebp - 4]
mov edx, 6
call fcn.00404c44
jmp 0x501b47
mov eax, dword [ebp - 4]
push dword [eax]
lea eax, [ebp - 0x440]
push eax
lea eax, [ebp - 0x444]
lea edx, [ebp - 0x429]
mov ecx, 0x401
call fcn.00404b34
mov eax, dword [ebp - 0x444]
xor ecx, ecx
mov edx, 0x501bd8
call fcn.00437f10
mov eax, dword [ebp - 0x440]
lea edx, [ebp - 0x43c]
call fcn.00409450
push dword [ebp - 0x43c]
push 0x501be4
push 0x501c0c
push 0x501be4
push 0x501c00
mov eax, dword [ebp - 4]
mov edx, 6
call fcn.00404c44
inc dword [ebp - 8]
dec dword [ebp - 0x14]
jne 0x5019dc
push 0x8000
push 0
push ebx
push esi
call sub.kernel32.dll_VirtualFreeEx
push esi
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x501b8c
lea eax, [ebp - 0x444]
mov edx, 6
call fcn.004048e8
ret