Function at 0x4f181f
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
mov esi, dword [ebp + 8]
mov ebx, 0x5636d0
cmp dword [0x52a6bc], 0
jne 0x4f183d
xor eax, eax
mov dword [0x536ccc], eax
mov edx, esi
cmp edx, 7
ja case.default.0x4f1848
jmp dword [edx*4 + 0x4f184f]
cmp dword [0x532a54], 0
jne 0x4f1a06
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca4], 0
jne 0x4f1893
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
je 0x4f18a6
mov eax, 1
jmp 0x4f1c41
cmp dword [0x536ccc], 0
je 0x4f1a06
mov eax, 1
jmp 0x4f1c41
cmp dword [0x536ca4], 0
jne 0x4f18cd
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
jne 0x4f18e0
mov eax, 1
jmp 0x4f1c41
cmp dword [0x536ccc], 0
je 0x4f18f3
mov eax, 1
jmp 0x4f1c41
cmp dword [0x536cb0], 0
je 0x4f1a06
mov eax, 1
jmp 0x4f1c41
cmp dword [0x536ca4], 0
jne 0x4f191a
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
jne 0x4f192d
mov eax, 1
jmp 0x4f1c41
mov dword [0x536ccc], 1
jmp 0x4f1a06
cmp dword [0x536ca4], 0
jne 0x4f194c
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
jne 0x4f195f
mov eax, 1
jmp 0x4f1c41
xor edx, edx
mov dword [0x536ccc], edx
jmp 0x4f1a06
cmp dword [0x536ca4], 0
jne 0x4f197c
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
jne 0x4f1998
cmp dword [0x536cb0], 0
jne 0x4f1998
mov eax, 1
jmp 0x4f1c41
cmp dword [0x536ccc], 0
je 0x4f19ab
mov eax, 1
jmp 0x4f1c41
mov esi, 1
jmp 0x4f1a06
cmp dword [0x536ca4], 0
jne 0x4f19c2
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
jne 0x4f19d5
mov eax, 1
jmp 0x4f1c41
mov esi, 2
jmp 0x4f1a06
cmp dword [0x536ca4], 0
jne 0x4f19ec
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca8], 0
jne 0x4f1a06
mov eax, 1
jmp 0x4f1c41
xor eax, eax
jmp 0x4f1c41
mov edi, dword [0x532a74]
test edi, edi
jne 0x4f1a17
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536ca0], 0
jne 0x4f1a5a
cmp dword [0x536cd0], 0
je 0x4f1a30
xor eax, eax
jmp 0x4f1c41
mov dword [0x536cd0], 1
push str.Shell_NotifyIcon
push edi
call sub.KERNEL32.dll_GetProcAddress
mov dword [0x536ca0], eax
cmp dword [0x536ca0], 0
jne 0x4f1a5a
xor eax, eax
jmp 0x4f1c41
cmp dword [0x536cc8], 0
jne 0x4f1a74
push 0
push str.Shell_TrayWnd
call sub.USER32.dll_FindWindowA
mov dword [0x536cc8], eax
test esi, esi
jne 0x4f1a82
mov eax, 1
jmp 0x4f1c41
mov dword [ebx], 0x58
mov edx, dword [0x537420]
mov dword [ebx + 4], edx
mov dword [ebx + 8], 5
mov dword [ebx + 0xc], 7
mov dword [ebx + 0x10], 0x441
xor ecx, ecx
mov dword [ebx + 0x14], ecx
cmp byte [0x558244], 0
je 0x4f1b2e
push 0x53747c
lea eax, [ebx + 0x18]
push eax
call sub.KERNEL32.dll_lstrcpyA
push 0x536d20
lea edx, [ebx + 0x18]
push edx
call sub.KERNEL32.dll_lstrcatA
lea ecx, [ebx + 0x18]
push ecx
call sub.KERNEL32.dll_lstrlenA
mov edi, 0x3c
sub edi, eax
mov dword [0x563774], edi
push edi
push 0x558244
push 0x563728
call sub.KERNEL32.dll_lstrcpynA
mov eax, dword [0x563774]
mov byte [eax + 0x563728], 0
push 0x563728
lea edx, [ebx + 0x18]
push edx
call sub.KERNEL32.dll_lstrcatA
lea ecx, [ebx + 0x18]
push ecx
call sub.KERNEL32.dll_lstrlenA
cmp eax, 0x37
jle 0x4f1b3c
push 0x536d23
lea eax, [ebx + 0x4f]
push eax
call sub.KERNEL32.dll_lstrcpyA
jmp 0x4f1b3c
push 0x53747c
lea edx, [ebx + 0x18]
push edx
call sub.KERNEL32.dll_lstrcpyA
cmp esi, 1
jne 0x4f1b8c
call fcn.004f171a
mov dword [ebx + 0x14], eax
cmp dword [0x536ca8], 0
je 0x4f1b62
push ebx
push 1
call dword [0x536ca0]
mov dword [0x563770], eax
jmp 0x4f1b70
push ebx
push 0
call dword [0x536ca0]
mov dword [0x563770], eax
cmp dword [0x563770], 0
je 0x4f1c2f
mov dword [0x536ca8], 1
jmp 0x4f1c2f
cmp esi, 2
jne 0x4f1bac
push ebx
push 2
call dword [0x536ca0]
mov dword [0x563770], eax
xor ecx, ecx
mov dword [0x536ca8], ecx
jmp 0x4f1c2f
cmp esi, 7
jne 0x4f1bc8
mov dword [ebx + 0xc], 4
push ebx
push 1
call dword [0x536ca0]
mov dword [0x563770], eax
jmp 0x4f1c2f
mov eax, dword [0x52a6bc]
test eax, eax
je 0x4f1bfe
push 0x3c
push dword [eax]
lea edx, [ebx + 0x18]
push edx
call sub.KERNEL32.dll_lstrcpynA
mov byte [ebx + 0x54], 0
lea ecx, [ebx + 0x18]
push ecx
call sub.KERNEL32.dll_lstrlenA
cmp eax, 0x37
jle 0x4f1bfe
push 0x536d28
lea eax, [ebx + 0x4f]
push eax
call sub.KERNEL32.dll_lstrcpyA
cmp esi, 3
jne 0x4f1c13
push 0x11
push dword [0x53741c]
call sub.USER32.dll_LoadIconA
mov dword [ebx + 0x14], eax
cmp dword [ebx + 0x14], 0
jne 0x4f1c21
call fcn.004f171a
mov dword [ebx + 0x14], eax
push ebx
push 1
call dword [0x536ca0]
mov dword [0x563770], eax
mov eax, dword [ebx + 0x14]
test eax, eax
je 0x4f1c3c
push eax
call sub.USER32.dll_DestroyIcon
mov eax, dword [0x563770]
pop edi
pop esi
pop ebx
pop ebp
ret 4