Function at 0x40fa60
Capabilities:
Find taskbar

Disassembly:
sub esp, 0xb0
push ebx
push ebp
push esi
xor ebp, ebp
push edi
push ebp
push str.Shell_TrayWnd
mov dword [esp + 0x20], ebp
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call sub.MFC42.DLL_CWnd::FromHandle
cmp eax, ebp
jne 0x40fa90
push str.No_find_Shell_TrayWnd_window
jmp 0x40fc67
mov eax, dword [eax + 0x20]
mov edi, dword [sym.imp.USER32.dll_FindWindowExA]
push ebp
push str.TrayNotifyWnd
push ebp
push eax
call edi
mov esi, eax
cmp esi, ebp
jne 0x40fab3
push str.No_find_TrayNotifyWnd_window
jmp 0x40fc67
push ebp
push str.SysPager
push ebp
push esi
call edi
cmp eax, ebp
jne 0x40fad0
push str.No_find_Syspager_window
call fcn.00418650
add esp, 4
mov eax, esi
push ebp
push str.ToolbarWindow32
push ebp
push eax
call edi
mov ebx, eax
cmp ebx, ebp
je 0x40fc62
mov ecx, 0x1f
xor eax, eax
lea edi, [esp + 0x41]
mov byte [esp + 0x40], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebp
push ebp
push 0x418
push ebx
stosb byte es:[edi], al
mov dword [esp + 0x24], ebp
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x24]
mov ebp, eax
push ecx
push ebx
mov dword [esp + 0x30], ebp
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [esp + 0x24]
push edx
push 0
push 0x1f0fff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 4
push 0x1000
mov edi, eax
push 0x80
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, eax
test esi, esi
jne 0x40fb6d
push 0x41ffe0
call fcn.00418650
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0xb0
ret
test ebp, ebp
mov dword [esp + 0x10], 0
jle 0x40fc3d
mov ebp, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
xor eax, eax
push esi
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
push eax
push 0x417
push ebx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x14]
lea edx, [esp + 0x2c]
push ecx
push 0x14
push edx
push esi
push edi
call ebp
mov edx, dword [esp + 0x38]
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x24]
push 4
push ecx
push edx
push edi
call ebp
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [esp + 0xc4]
mov eax, dword [esp + 0x1c]
cmp edx, eax
je 0x40fbf5
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x40fb83
jmp 0x40fc3d
mov eax, dword [esp + 0x30]
push esi
push eax
push 0x42d
push ebx
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x14]
lea edx, [esp + 0x40]
push ecx
push 0x80
push edx
push esi
push edi
call ebp
mov ecx, dword [esp + 0xc8]
lea eax, [esp + 0x40]
push 0x80
push eax
push ecx
call dword [sym.imp.MSVCRT.dll_strncpy]
add esp, 0xc
mov dword [esp + 0x18], 1
push 0x8000
push 0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret
push str.No_find_ToolbarWindow32_window
call fcn.00418650
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret