Function at 0x1000b870
Capabilities:
Find taskbar

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1000dc6b
push eax
mov dword fs:[0], esp
sub esp, 0x46c
push ebx
push ebp
push esi
push edi
push str.GET_QQ_NUMBER
call fcn.10003300
mov eax, dword [0x10066170]
xor ebp, ebp
add esp, 4
cmp eax, ebp
jne 0x1000b8ac
call fcn.10003640
push ebp
push str.Shell_TrayWnd
mov dword [esp + 0x28], ebp
call dword [sym.imp.USER32.dll_FindWindowA]
push eax
call sub.MFC42.DLL_CWnd::FromHandle
cmp eax, ebp
jne 0x1000b8d0
push str.No_find_Shell_TrayWnd_window
jmp 0x1000bf42
mov eax, dword [eax + 0x20]
mov edi, dword [sym.imp.USER32.dll_FindWindowExA]
push ebp
push str.TrayNotifyWnd
push ebp
push eax
call edi
mov esi, eax
cmp esi, ebp
jne 0x1000b8f3
push str.No_find_TrayNotifyWnd_window
jmp 0x1000bf42
push ebp
push str.SysPager
push ebp
push esi
call edi
cmp eax, ebp
jne 0x1000b910
push str.No_find_Syspager_window
call fcn.10003300
add esp, 4
mov eax, esi
push ebp
push str.ToolbarWindow32
push ebp
push eax
call edi
mov ebx, eax
cmp ebx, ebp
mov dword [esp + 0x30], ebx
je 0x1000bf3d
mov ecx, 0xf
xor eax, eax
lea edi, [esp + 0x3d]
mov byte [esp + 0x3c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea ecx, [esp + 0x24]
mov dword [esp + 0x24], ebp
push ecx
push ebx
stosb byte es:[edi], al
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edx, dword [esp + 0x24]
push edx
push ebp
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x2c], ebp
jne 0x1000b979
push str.OpenProcess_Faild
call fcn.10003300
add esp, 4
xor eax, eax
jmp 0x1000bfb0
push 4
push 0x1000
push 0x1000
push 0
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
test eax, eax
mov dword [esp + 0x18], eax
jne 0x1000b9aa
push str.VirtualAllocEx_Faild
call fcn.10003300
add esp, 4
xor eax, eax
jmp 0x1000bfb0
mov ecx, 0xff
xor eax, eax
lea edi, [esp + 0x7d]
mov byte [esp + 0x7c], 0
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [esp + 0x28], 0
mov esi, 0xc
mov dword [esp + 0x1c], 0x12
stosb byte es:[edi], al
call fcn.1000c6b0
test eax, eax
je 0x1000b9ea
mov esi, 0x10
mov dword [esp + 0x1c], 0x18
push 0
push 0
push 0x418
push ebx
call dword [sym.imp.USER32.dll_SendMessageA]
test eax, eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x10], 0
jle 0x1000bf1e
mov eax, dword [esp + 0x18]
mov ebp, dword [sym.imp.MSVCRT.dll_strrchr]
mov ebx, dword [sym.imp.MSVCRT.dll_strncpy]
add esi, eax
mov dword [esp + 0x38], esi
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
push ecx
push edx
push 0x417
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov edx, dword [esp + 0x38]
mov edi, dword [esp + 0x2c]
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
push 0
lea ecx, [esp + 0x2c]
push 4
push ecx
push edx
push edi
call esi
mov eax, dword [esp + 0x28]
cmp eax, 0xffffffff
je 0x1000ba85
push 0
lea ecx, [esp + 0x80]
push 0x400
push ecx
push eax
push edi
call esi
mov eax, dword [esp + 0x7c]
lea edx, [esp + 0x20]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov ecx, dword [esp + 0x20]
mov eax, dword [0x10066150]
cmp ecx, eax
jne 0x1000bf05
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString
mov edx, dword [esp + 0x1c]
lea ecx, [esp + 0x14]
mov dword [esp + 0x484], 0
lea eax, [esp + edx*2 + 0x284]
push eax
call sub.MFC42.DLL_CString::operator
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x3c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea edi, [esp + 0x3c]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
test ecx, ecx
jle 0x1000bb06
cmp byte [esp + eax + 0x3c], 0xd
je 0x1000bbad
inc eax
cmp eax, ecx
jl 0x1000baf6
mov esi, dword [sym.imp.MSVCRT.dll_strncmp]
push 3
lea ecx, [esp + 0x40]
push 0x1001157c
push ecx
call esi
add esp, 0xc
test eax, eax
jne 0x1000be45
lea edi, [esp + 0x3f]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0x10065d78], 1
mov edx, ecx
mov esi, edi
mov edi, 0x10065f40
push 0x28
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x10065f40
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call ebp
mov esi, eax
add esp, 8
test esi, esi
jne 0x1000bb79
push 0x3c
push 0x10065f40
call ebp
mov esi, eax
add esp, 8
test esi, esi
je 0x1000bdf0
mov eax, esi
sub eax, 0x10065f40
push eax
push 0x10065f40
push 0x10065d80
call ebx
inc esi
or ecx, 0xffffffff
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
add ecx, 0xfffffffe
push ecx
push esi
push 0x10065dc0
call ebx
add esp, 0x18
jmp 0x1000bef1
mov edi, dword [sym.imp.MSVCRT.dll_strncmp]
mov esi, 4
push esi
lea ecx, [esp + 0x40]
push str.QQ:
push ecx
mov byte [esp + eax + 0x48], 0
call edi
add esp, 0xc
test eax, eax
jne 0x1000bc7f
lea edi, [esp + 0x40]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0x10065d78], 3
mov edx, ecx
mov esi, edi
mov edi, 0x10065f40
push 0x28
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x10065f40
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call ebp
push 0x29
push 0x10065f40
mov esi, eax
call ebp
add esp, 0x10
mov edi, eax
test esi, esi
je 0x1000bc26
test edi, edi
je 0x1000bc26
cmp edi, esi
ja 0x1000bc57
push 0x3c
push 0x10065f40
call ebp
push 0x3e
push 0x10065f40
mov esi, eax
call ebp
add esp, 0x10
mov edi, eax
test esi, esi
je 0x1000bdf0
test edi, edi
je 0x1000bdf0
cmp edi, esi
jbe 0x1000bdf0
mov eax, esi
sub eax, 0x10065f40
push eax
push 0x10065f40
push 0x10065d80
call ebx
inc esi
sub edi, esi
push edi
push esi
push 0x10065dc0
call ebx
add esp, 0x18
jmp 0x1000bef1
push 5
lea ecx, [esp + 0x40]
push str.QQi:
push ecx
call edi
add esp, 0xc
test eax, eax
jne 0x1000bd3e
lea edi, [esp + 0x41]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0x10065d78], esi
mov edx, ecx
mov esi, edi
mov edi, 0x10065f40
push 0x28
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x10065f40
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call ebp
push 0x29
push 0x10065f40
mov esi, eax
call ebp
add esp, 0x10
mov edi, eax
test esi, esi
je 0x1000bce5
test edi, edi
je 0x1000bce5
cmp edi, esi
ja 0x1000bd16
push 0x3c
push 0x10065f40
call ebp
push 0x3e
push 0x10065f40
mov esi, eax
call ebp
add esp, 0x10
mov edi, eax
test esi, esi
je 0x1000bdf0
test edi, edi
je 0x1000bdf0
cmp edi, esi
jbe 0x1000bdf0
mov eax, esi
sub eax, 0x10065f40
push eax
push 0x10065f40
push 0x10065d80
call ebx
inc esi
sub edi, esi
push edi
push esi
push 0x10065dc0
call ebx
add esp, 0x18
jmp 0x1000bef1
push esi
lea ecx, [esp + 0x40]
push str.TM:
push ecx
call edi
add esp, 0xc
test eax, eax
jne 0x1000bef1
lea edi, [esp + 0x40]
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [0x10065d78], esi
mov edx, ecx
mov esi, edi
mov edi, 0x10065f40
push 0x28
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push 0x10065f40
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call ebp
push 0x29
push 0x10065f40
mov esi, eax
call ebp
add esp, 0x10
mov edi, eax
test esi, esi
je 0x1000bda3
test edi, edi
je 0x1000bda3
cmp edi, esi
ja 0x1000bdc8
push 0x3c
push 0x10065f40
call ebp
push 0x3e
push 0x10065f40
mov esi, eax
call ebp
add esp, 0x10
mov edi, eax
test esi, esi
je 0x1000bdf0
test edi, edi
je 0x1000bdf0
cmp edi, esi
jbe 0x1000bdf0
mov eax, esi
sub eax, 0x10065f40
push eax
push 0x10065f40
push 0x10065d80
call ebx
inc esi
sub edi, esi
push edi
push esi
push 0x10065dc0
call ebx
add esp, 0x18
jmp 0x1000bef1
push str.Account_Info_error
call fcn.10003300
mov edi, 0x10065f40
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x10065dc0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x10065f40
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x10065d80
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
jmp 0x1000beec
push 3
lea ecx, [esp + 0x40]
push 0x1001154c
push ecx
call esi
add esp, 0xc
test eax, eax
jne 0x1000be66
mov dword [0x10065d78], 1
jmp 0x1000be85
push 3
lea eax, [esp + 0x40]
push 0x10011548
push eax
call esi
add esp, 0xc
test eax, eax
jne 0x1000bef1
mov dword [0x10065d78], 2
lea edi, [esp + 0x3f]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x10065f40
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x10065f40
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x10065dc0
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x10065f40
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x10065d80
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x14]
mov dword [esp + 0x484], 0xffffffff
call fcn.1000d976
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x34]
inc eax
cmp eax, ecx
mov dword [esp + 0x10], eax
jl 0x1000ba24
mov ebp, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
push 0x8000
push 0x1000
push eax
push ebp
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1000bf4a
push str.No_find_ToolbarWindow32_window
call fcn.10003300
add esp, 4
push 0x10065f40
call fcn.100032e0
push 0x10065d80
call fcn.100032e0
push 0x10065dc0
call fcn.100032e0
mov edi, 0x10065dc0
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x1000bf9e
mov edi, 0x10065f40
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x1000bf9e
mov ecx, dword [0x10066150]
mov eax, 1
mov dword [0x10065d7c], ecx
jmp 0x1000bfb0
push 0x10011518
call fcn.10003300
add esp, 4
call fcn.1000bfd0
mov ecx, dword [esp + 0x47c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x478
ret