Function at 0x12ec22a0
Capabilities:
Find taskbar

Disassembly:
sub esp, 0x10
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0x1d0], 5
je 0x12ec25e8
call fcn.12f9c6f0
xor ebx, ebx
test eax, eax
je 0x12ec22e5
call fcn.12e30170
test eax, eax
je 0x12ec22e5
cmp dword [esi + 0x1d0], ebx
jne 0x12ec22e5
push 0x20000
call fcn.12e6efd0
add esp, 4
test eax, eax
je 0x12ec25e8
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea eax, [esp + 0x14]
push edi
lea ecx, [esp + 0x1c]
push eax
lea edx, [esp + 0x14]
push ecx
push edx
push ebx
mov dword [esp + 0x20], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x28], ebx
call ebp
push eax
call fcn.12ec0a50
mov edi, eax
mov eax, dword [0x13199068]
add esp, 0x14
cmp eax, ebx
je 0x12ec233b
mov eax, dword [esi + 0x1d8]
push edi
push eax
push str.CTSCDTGlobalMgr::SyncPorcTypeFromGlobalProcTypeCache__1__Identify_08x___Find_d_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
cmp edi, ebx
jne 0x12ec237a
cmp dword [0x131c11f0], ebx
jne 0x12ec25e6
mov dword [0x131c11f0], 1
mov ecx, dword [esi + 0x1d8]
mov edx, dword [esi + 0x1d4]
mov eax, dword [esi + 0x1d0]
push ecx
push edx
push eax
call ebp
push eax
call sym.winahdcore32.dll_SetSCDTProcesIdentifyTypeInCache
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x10
ret
mov eax, dword [esp + 0x18]
mov dword [esi + 0x1d8], eax
mov ecx, dword [0x13199068]
cmp ecx, ebx
je 0x12ec23a4
push edi
push eax
push str.CTSCDTGlobalMgr::SyncPorcTypeFromGlobalProcTypeCache__2__Identify_08x___Find_d_
push str.procidentifytype
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x14
mov ecx, dword [esp + 0x10]
mov eax, dword [esi + 0x1d0]
cmp ecx, eax
je 0x12ec25e6
mov ecx, esi
call fcn.12ec4040
mov eax, dword [esi + 0x1bc]
xor edi, edi
cmp eax, ebx
mov dword [esp + 0x14], ebx
mov ebp, 1
jne 0x12ec23e6
mov eax, dword [esi + 0x1d0]
cmp eax, ebp
je 0x12ec23e6
cmp eax, 4
je 0x12ec23e6
cmp eax, 5
jne 0x12ec23f2
push 0xffffffffffffffff
call fcn.12eba390
add esp, 4
mov edi, eax
cmp dword [0x13199068], ebx
je 0x12ec241b
mov edx, dword [esp + 0x10]
mov eax, dword [esi + 0x1d0]
push edx
push eax
push edi
push str.CTSCDTGlobalMgr::SyncPorcTypeFromGlobalProcTypeCache_1__d____d____d_
push str.SCDTChange
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x18
mov eax, dword [esp + 0x10]
cmp eax, 5
mov dword [esi + 0x1d0], eax
ja case.default.0x12ec242e
jmp dword [eax*4 + 0x12ec25f0]
cmp edi, ebx
mov dword [esi + 0x1b8], ebx
je 0x12ec2454
cmp edi, 3
je 0x12ec2454
push 3
push 0xffffffffffffffff
call fcn.12eba3b0
add esp, 8
mov dword [esp + 0x14], ebp
call fcn.12d91a00
test eax, eax
je case.default.0x12ec242e
push ebx
call fcn.12da43d0
add esp, 4
jmp case.default.0x12ec242e
call fcn.12d91a00
test eax, eax
je 0x12ec2481
push ebp
call fcn.12da43d0
add esp, 4
cmp edi, ebx
mov dword [esi + 0x1b8], ebp
je 0x12ec2490
cmp edi, 3
jne 0x12ec2494
mov dword [esp + 0x14], ebp
push ebp
mov ecx, esi
call fcn.12ec1b00
cmp dword [esi + 0x660], ebx
jne 0x12ec2506
call fcn.12d920a0
test eax, eax
jne 0x12ec2506
call fcn.12eb2c30
mov edi, eax
mov eax, dword [0x13199068]
cmp eax, ebx
je 0x12ec24d2
push edi
push str.CTSCDTGlobalMgr::SyncPorcTypeFromGlobalProcTypeCache_CTMailHookMgr::RegisterNetSecurityProc_1__d_
push str.scdt
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0x10
cmp edi, ebx
je 0x12ec2506
push 0x12ed6c40
mov dword [esi + 0x660], ebp
call fcn.12eb2c50
mov eax, dword [0x13199068]
add esp, 4
cmp eax, ebx
je 0x12ec2506
push str.CTSCDTGlobalMgr::SyncPorcTypeFromGlobalProcTypeCache_CTMailHookMgr::RegisterNetSecurityProc_2
push str.scdt
push 0xffffffffffffffff
call fcn.12dad750
add esp, 0xc
push ebx
push 0x130d38cc
push str.NtDll.dll
call fcn.12db3250
push ebx
push 0x130d38f4
push str.NtDll.dll
call fcn.12db3250
call fcn.12ed4a50
push ebp
call fcn.12ed6e90
add esp, 4
mov ecx, esi
push ebp
call fcn.12ebfb60
mov ecx, 0x131c13e0
call fcn.12ed7e90
mov ecx, 0x131c13e0
call fcn.12ed8230
push 0x20000
call fcn.12e6efd0
add esp, 4
test eax, eax
je 0x12ec2586
call fcn.12d91c00
test eax, eax
jne 0x12ec2586
call fcn.12f9c6f0
test eax, eax
je 0x12ec257c
call fcn.12e30170
test eax, eax
je 0x12ec2586
call fcn.12f2b6e0
call fcn.12f2b890
push ebx
push ebp
call fcn.12ec2770
add esp, 8
call fcn.12ed87c0
cmp dword [0x131c14b8], ebx
je 0x12ec25a6
push ebp
call fcn.12ed7170
add esp, 4
cmp dword [esp + 0x14], ebx
je 0x12ec25e6
call fcn.12d91a00
test eax, eax
je 0x12ec25e6
push ebx
push str.Shell_TrayWnd
call dword [sym.imp.USER32.dll_FindWindowA]
cmp eax, ebx
je 0x12ec25e6
lea ecx, [esp + 0x14]
mov dword [esp + 0x14], ebx
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
cmp dword [esp + 0x14], eax
jne 0x12ec25e6
call fcn.12ecb550
pop edi
pop ebp
pop esi
pop ebx
add esp, 0x10
ret