Function at 0x42f890
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x290
mov eax, dword [0x533a94]
xor eax, ebp
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x290], ecx
mov dword [ebp - 0x40], 0
push 0
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x42f8ce
mov eax, dword [ebp - 0x40]
jmp 0x42fc9e
push 0
push str.TrayNotifyWnd
push 0
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x42f8f2
mov eax, dword [ebp - 0x40]
jmp 0x42fc9e
push 0
push str.SysPager
push 0
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x10], 0
jne 0x42f92d
push 0
push 0x5014e8
push 0
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x2c], eax
jmp 0x42f943
push 0
push str.ToolbarWindow32
push 0
mov eax, dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_FindWindowExW]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x42f951
mov eax, dword [ebp - 0x40]
jmp 0x42fc9e
mov dword [ebp - 0x28], 0
lea ecx, [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x14]
push edx
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
push eax
push 0
push 0x38
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x42f988
mov eax, dword [ebp - 0x40]
jmp 0x42fc9e
xor ecx, ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x18], ecx
xor edx, edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0x400
push 4
push 0x1000
mov eax, dword [ebp - 8]
push eax
push 0
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x42f9d7
jmp 0x42fc1f
push 0
push 0
push 0x418
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jne 0x42f9f8
jmp 0x42fc1f
mov dword [ebp - 0x50], 0
jmp 0x42fa0a
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x50]
cmp ecx, dword [ebp - 0x4c]
jge 0x42fc17
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0x50]
push eax
push 0x417
mov ecx, dword [ebp - 0x2c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x42fa36
jmp 0x42fc17
xor edx, edx
mov dword [ebp - 0x28c], edx
mov dword [ebp - 0x288], edx
mov dword [ebp - 0x284], edx
mov dword [ebp - 0x280], edx
mov dword [ebp - 0x27c], edx
xor eax, eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
push 0
push 0x14
lea ecx, [ebp - 0x28c]
push ecx
mov edx, dword [ebp - 4]
push edx
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x42fa8c
jmp 0x42fc17
push 0
push 0x18
lea ecx, [ebp - 0x6c]
push ecx
mov edx, dword [ebp - 0x280]
push edx
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x42faae
jmp 0x42fc17
mov ecx, dword [ebp - 4]
add ecx, 0x14
mov dword [ebp - 0x54], ecx
jne 0x42fabe
jmp 0x42fc17
push 0x208
push 0
lea edx, [ebp - 0x278]
push edx
call fcn.004c1bc0
add esp, 0xc
cmp dword [ebp - 0x6c], 0
jne 0x42fadf
jmp 0x42fc17
push 0x104
lea eax, [ebp - 0x278]
push eax
mov ecx, dword [ebp - 0x6c]
push ecx
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
jne 0x42fafe
jmp 0x42fc17
push 0x501528
lea edx, [ebp - 0x278]
push edx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x42fb2f
push 0x501554
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x42fb2f
jmp 0x42fa01
mov ecx, dword [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x50]
push edx
push 0x41d
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
test eax, eax
jne 0x42fb4f
jmp 0x42fa01
push str.Q360PayInsureTrayWnd
lea ecx, [ebp - 0x278]
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x42fbb3
push 0
push 0x10
lea edx, [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x42fb84
jmp 0x42fc17
lea edx, [ebp - 0x24]
push edx
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
jne 0x42fb98
jmp 0x42fc17
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x40], 1
jmp 0x42fc17
push 0x5015a4
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x42fc12
push 0
push 0x10
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x54]
push edx
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
jne 0x42fbe5
jmp 0x42fc17
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.USER32.dll_ClientToScreen]
test eax, eax
jne 0x42fbf9
jmp 0x42fc17
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x40], 1
jmp 0x42fa01
xor edx, edx
jne 0x42f9b2
cmp dword [ebp - 4], 0
je 0x42fc51
push 0x4000
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 4]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
mov eax, dword [ebp - 4]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
cmp dword [ebp - 0xc], 0
je 0x42fc61
mov edx, dword [ebp - 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x42fc7f
lea ecx, [ebp - 0x24]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_CopyRect]
jmp 0x42fc9b
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x42fc9b
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_CopyRect]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x70]
xor ecx, ebp
call fcn.004c1753
mov esp, ebp
pop ebp
ret 4