Function at 0x48cb30
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x20
mov edx, dword [0x5baf70]
push ebx
mov edx, dword [eax + edx*4]
mov eax, dword [0x5baae4]
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp eax, dword [edx + 8]
jg 0x48d00c
mov esi, dword [ebp + 8]
cmp esi, dword [0x5baae0]
jne 0x48cc1d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call fcn.0047a9c0
push 0
push str.Progman
push 0
mov dword [eax + 0xc], esi
call fcn.0047a9c0
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.0047a9c0
push 0
push str.Shell_TrayWnd
push 0
mov dword [eax + 0x10], esi
call fcn.0047a9c0
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.0047a9c0
mov dword [eax + 0x14], esi
call fcn.0047a9c0
mov esi, dword [eax + 0x14]
call fcn.0047a9c0
test esi, esi
je 0x48cbea
push 0
push str.TrayNotifyWnd
push 0
push dword [eax + 0x14]
call ebx
mov esi, eax
call fcn.0047a9c0
mov dword [eax + 0x18], esi
jmp 0x48cbf1
mov dword [eax + 0x18], 0
call fcn.0047a9c0
cmp byte [eax + 0x36], 0
jne 0x48cc12
lea eax, [edi + 0x1161]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [edi + 0x1160], 1
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
cmp esi, 0x231
ja 0x48cdf0
je 0x48cdd3
cmp esi, 0x200
ja 0x48cd87
je 0x48cd6a
mov eax, esi
sub eax, 0x16
je 0x48cd39
sub eax, 0x8a
je 0x48cd6a
sub eax, 0x60
jne 0x48cede
cmp ebx, 0x1b
jne 0x48cc95
mov eax, dword [edi]
mov ecx, edi
push 1
push 0
call dword [eax + 0x14]
mov dword [edi + 0x28c], 0
mov dword [edi + 0x280], 0
call fcn.0047a9c0
cmp byte [eax + 0xd1], 0
je 0x48ced1
cmp ebx, 0x41
jb 0x48ccb1
cmp ebx, 0x5a
jbe 0x48ccbd
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x48ced1
mov ecx, edi
call fcn.00426c70
cmp eax, dword [edi + 0x1110]
je 0x48ced1
mov ecx, dword [edi + 0x1124]
push 0
call fcn.0043a7a0
mov ecx, dword [edi + 0x1124]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1124]
call fcn.004237c0
push eax
call fcn.004a4ac0
mov ecx, dword [edi + 0x1124]
add esp, 4
call fcn.004a4cc0
push dword [ebp + 0x10]
mov ecx, ebx
lea eax, [ebx - 0x41]
cmp eax, 0x19
lea ebx, [ecx + 0x20]
cmova ebx, ecx
mov ecx, dword [edi + 0x1124]
push ebx
push 0x102
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48ced1
call fcn.0047a9c0
lea ecx, [eax + 0x44]
mov eax, dword [edi + 0x1544]
mov dword [ecx], eax
call fcn.0047a9c0
lea ecx, [eax + 0x48]
mov eax, dword [edi + 0x1548]
mov dword [ecx], eax
call fcn.0047a9c0
mov ecx, eax
call fcn.004a3870
jmp 0x48ced1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x280], 0
call fcn.00439bf0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x214
je 0x48cdb6
sub eax, 2
jne 0x48cede
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x216
mov ecx, edi
call dword [eax + 0x9c]
mov dword [ebp - 8], eax
jmp 0x48ced1
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x214
mov ecx, edi
call dword [eax + 0xa0]
mov dword [ebp - 8], eax
jmp 0x48ced1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 1
call fcn.00439bf0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x464
ja 0x48ce66
je 0x48ce48
cmp esi, 0x232
je 0x48ce2b
cmp esi, 0x312
jne 0x48cede
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push esi
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x98]
jmp 0x48ced1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 0
call fcn.00439bf0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x464
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x94]
jmp 0x48ced1
cmp esi, 0x7e9
ja 0x48cf2e
je 0x48cf0c
mov eax, esi
sub eax, 0x465
je 0x48cefc
sub eax, 1
je 0x48cef1
sub eax, 1
jne 0x48cede
mov ecx, dword [edi + 0x1108]
mov eax, dword [ecx]
call dword [eax + 0x15c]
xor ebx, ebx
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x48cece
mov esi, eax
mov ecx, dword [edi + 0x1108]
push ebx
mov edx, dword [ecx]
call dword [edx + 0x150]
test eax, eax
je 0x48cec6
lea ecx, [eax + 0x424]
mov eax, dword [ecx]
push 1
push 0
call dword [eax + 0x1c]
inc ebx
cmp ebx, esi
jl 0x48cea4
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
cmp dword [ebp - 4], 0
jne 0x48d000
mov ecx, dword [ebp + 0x10]
push ecx
push ebx
push esi
mov ecx, edi
call fcn.00439bf0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 1
mov ecx, edi
call fcn.004a6500
jmp 0x48ced1
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.0048aa00
jmp 0x48ced1
call fcn.0047a9c0
cmp byte [eax + 0x2e], 0
je 0x48d000
mov ecx, edi
call fcn.0048ad10
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x7ea
je 0x48cf69
sub eax, 1
jne 0x48cede
call fcn.0047a9c0
cmp byte [eax + 0x2f], 0
jne 0x48cf56
call fcn.0047a9c0
cmp byte [eax + 0x30], 0
je 0x48d000
mov ecx, edi
call fcn.0048ad10
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.0047a9c0
cmp byte [eax + 0x2d], 0
je 0x48d000
mov eax, dword [edi + 0x111c]
cmp dword [eax + 8], 0
jne 0x48d000
cmp dword [edi + 0x1120], 0
jne 0x48d000
mov ecx, edi
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x48d000
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], 0
push eax
mov ecx, edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], 0
push eax
mov dword [ebp - 0x10], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0xc]
lea eax, [ebp - 0x20]
push dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x48d000
mov ecx, edi
call fcn.00489710
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x5baae4
call fcn.00533284
add esp, 4
cmp dword [0x5baae4], 0xffffffff
jne 0x48cb5e
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0x5baae4
mov dword [0x5baae0], eax
call fcn.0053323a
add esp, 4
jmp 0x48cb5e