Function at 0x48d600
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x20
mov edx, dword [0x5bcfd0]
push ebx
mov edx, dword [eax + edx*4]
mov eax, dword [0x5bcb44]
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp eax, dword [edx + 8]
jg 0x48dadc
mov esi, dword [ebp + 8]
cmp esi, dword [0x5bcb40]
jne 0x48d6ed
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call fcn.0047aee0
push 0
push str.Progman
push 0
mov dword [eax + 0xc], esi
call fcn.0047aee0
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.0047aee0
push 0
push str.Shell_TrayWnd
push 0
mov dword [eax + 0x10], esi
call fcn.0047aee0
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.0047aee0
mov dword [eax + 0x14], esi
call fcn.0047aee0
mov esi, dword [eax + 0x14]
call fcn.0047aee0
test esi, esi
je 0x48d6ba
push 0
push str.TrayNotifyWnd
push 0
push dword [eax + 0x14]
call ebx
mov esi, eax
call fcn.0047aee0
mov dword [eax + 0x18], esi
jmp 0x48d6c1
mov dword [eax + 0x18], 0
call fcn.0047aee0
cmp byte [eax + 0x37], 0
jne 0x48d6e2
lea eax, [edi + 0x115d]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [edi + 0x115c], 1
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
cmp esi, 0x231
ja 0x48d8c0
je 0x48d8a3
cmp esi, 0x200
ja 0x48d857
je 0x48d83a
mov eax, esi
sub eax, 0x16
je 0x48d809
sub eax, 0x8a
je 0x48d83a
sub eax, 0x60
jne 0x48d9ae
cmp ebx, 0x1b
jne 0x48d765
mov eax, dword [edi]
mov ecx, edi
push 1
push 0
call dword [eax + 0x14]
mov dword [edi + 0x290], 0
mov dword [edi + 0x284], 0
call fcn.0047aee0
cmp byte [eax + 0xdd], 0
je 0x48d9a1
cmp ebx, 0x41
jb 0x48d781
cmp ebx, 0x5a
jbe 0x48d78d
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x48d9a1
mov ecx, edi
call fcn.00426d30
cmp eax, dword [edi + 0x1100]
je 0x48d9a1
mov ecx, dword [edi + 0x1120]
push 0
call fcn.0043a870
mov ecx, dword [edi + 0x1120]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1120]
call fcn.004237c0
push eax
call fcn.004a64f0
mov ecx, dword [edi + 0x1120]
add esp, 4
call fcn.004a66f0
push dword [ebp + 0x10]
mov ecx, ebx
lea eax, [ebx - 0x41]
cmp eax, 0x19
lea ebx, [ecx + 0x20]
cmova ebx, ecx
mov ecx, dword [edi + 0x1120]
push ebx
push 0x102
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48d9a1
call fcn.0047aee0
lea ecx, [eax + 0x48]
mov eax, dword [edi + 0x1540]
mov dword [ecx], eax
call fcn.0047aee0
lea ecx, [eax + 0x4c]
mov eax, dword [edi + 0x1544]
mov dword [ecx], eax
call fcn.0047aee0
mov ecx, eax
call fcn.004a5150
jmp 0x48d9a1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x284], 0
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x214
je 0x48d886
sub eax, 2
jne 0x48d9ae
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x216
mov ecx, edi
call dword [eax + 0x9c]
mov dword [ebp - 8], eax
jmp 0x48d9a1
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x214
mov ecx, edi
call dword [eax + 0xa0]
mov dword [ebp - 8], eax
jmp 0x48d9a1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x290], 1
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x464
ja 0x48d936
je 0x48d918
cmp esi, 0x232
je 0x48d8fb
cmp esi, 0x312
jne 0x48d9ae
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push esi
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x98]
jmp 0x48d9a1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x290], 0
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x464
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x94]
jmp 0x48d9a1
cmp esi, 0x7e9
ja 0x48d9fe
je 0x48d9dc
mov eax, esi
sub eax, 0x465
je 0x48d9cc
sub eax, 1
je 0x48d9c1
sub eax, 1
jne 0x48d9ae
mov ecx, dword [edi + 0x10f8]
mov eax, dword [ecx]
call dword [eax + 0x15c]
xor ebx, ebx
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x48d99e
mov esi, eax
mov ecx, dword [edi + 0x10f8]
push ebx
mov edx, dword [ecx]
call dword [edx + pe_nt_image_headers32]
test eax, eax
je 0x48d996
lea ecx, [eax + 0x424]
mov eax, dword [ecx]
push 1
push 0
call dword [eax + 0x1c]
inc ebx
cmp ebx, esi
jl 0x48d974
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
cmp dword [ebp - 4], 0
jne 0x48dad0
mov ecx, dword [ebp + 0x10]
push ecx
push ebx
push esi
mov ecx, edi
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 1
mov ecx, edi
call fcn.004a7f50
jmp 0x48d9a1
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.0048b420
jmp 0x48d9a1
call fcn.0047aee0
cmp byte [eax + 0x2e], 0
je 0x48dad0
mov ecx, edi
call fcn.0048b730
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x7ea
je 0x48da39
sub eax, 1
jne 0x48d9ae
call fcn.0047aee0
cmp byte [eax + 0x2f], 0
jne 0x48da26
call fcn.0047aee0
cmp byte [eax + 0x30], 0
je 0x48dad0
mov ecx, edi
call fcn.0048b730
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.0047aee0
cmp byte [eax + 0x2d], 0
je 0x48dad0
mov eax, dword [edi + 0x1118]
cmp dword [eax + 8], 0
jne 0x48dad0
cmp dword [edi + 0x111c], 0
jne 0x48dad0
mov ecx, edi
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x48dad0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], 0
push eax
mov ecx, edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], 0
push eax
mov dword [ebp - 0x10], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0xc]
lea eax, [ebp - 0x20]
push dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x48dad0
mov ecx, edi
call fcn.0048a120
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x5bcb44
call fcn.00534d04
add esp, 4
cmp dword [0x5bcb44], 0xffffffff
jne 0x48d62e
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0x5bcb44
mov dword [0x5bcb40], eax
call fcn.00534cba
add esp, 4
jmp 0x48d62e