Function at 0x426df0
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov eax, dword [0x4bd514]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push str.Shell_TrayWnd
mov dword [ebp - 0x38], eax
call dword [sym.imp.USER32.dll_FindWindowW]
mov esi, eax
cmp esi, ebx
je 0x426f5d
lea ecx, [ebp - 0x6c]
push ecx
push 5
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], 0x24
call dword [sym.imp.SHELL32.dll_SHAppBarMessage]
test eax, eax
jne 0x426e50
lea edx, [ebp - 0x5c]
push edx
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x60], 3
mov edi, dword [sym.imp.USER32.dll_FindWindowExW]
push ebx
push str.TrayNotifyWnd
push ebx
push esi
call edi
mov esi, eax
cmp esi, ebx
je 0x426f67
push ebx
push str.ToolbarWindow32
push ebx
push esi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call edi
cmp eax, ebx
je 0x426e8b
lea ecx, [ebp - 0x34]
push ecx
push eax
jmp 0x426e90
lea edx, [ebp - 0x34]
push edx
push esi
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [ebp - 0x38]
cmp esi, ebx
je 0x426f2e
push str.shell32
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp eax, ebx
je 0x426f2e
push str.Shell_NotifyIconGetRect
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp eax, ebx
je 0x426f2e
xor ecx, ecx
xor edx, edx
mov word [ebp - 0x14], cx
mov dword [ebp - 0xf], ecx
mov word [ebp - 0xb], cx
mov byte [ebp - 9], cl
lea ecx, [ebp - 0x48]
mov word [ebp - 0x12], dx
push ecx
lea edx, [ebp - 0x24]
push edx
mov dword [ebp - 0x24], 0x1c
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov byte [ebp - 0x10], bl
call eax
test eax, eax
jne 0x426f2e
mov ecx, dword [ebp - 0x60]
cmp ecx, 3
ja case.default.0x426f36
jmp dword [ecx*4 + 0x42703c]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
add eax, edx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp + 0x10], eax
jmp 0x426f31
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
add eax, edx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp + 0xc], eax
jmp 0x426f31
mov ecx, dword [ebp - 0x60]
cmp ecx, 3
ja case.default.0x426f36
jmp dword [ecx*4 + 0x42704c]
mov eax, dword [ebp - 0x28]
mov dword [ebp + 0x10], eax
jmp 0x426f6f
mov edx, dword [ebp - 0x2c]
mov dword [ebp + 0xc], edx
jmp 0x426f6f
mov eax, dword [ebp - 0x34]
mov dword [ebp + 0xc], eax
jmp 0x426f6f
mov edx, dword [ebp - 0x30]
mov dword [ebp + 0x10], edx
jmp 0x426f6f
mov ecx, 3
mov dword [ebp - 0x60], ecx
jmp 0x426f6f
mov ecx, dword [ebp - 0x60]
cmp ecx, 3
ja case.default.0x426f36
jmp dword [ecx*4 + 0x42705c]
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x94]
push edx
push 2
push eax
push ecx
mov dword [ebp - 0x94], 0x28
call dword [sym.imp.USER32.dll_MonitorFromPoint]
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov edx, dword [ebp + 0x10]
test eax, eax
je 0x427026
mov eax, dword [ebp - 0x8c]
cmp edx, eax
jge 0x426fe8
mov edx, eax
mov ecx, dword [ebp + 0xc]
mov eax, dword [ebp - 0x90]
cmp ecx, eax
jge 0x426ff7
mov ecx, eax
mov eax, dword [ebp - 0x84]
sub eax, dword [ebp + 0x18]
cmp edx, eax
jle 0x427006
mov edx, eax
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp + 0x14]
cmp ecx, eax
jg 0x427029
mov eax, ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.0046544a
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0046544a
mov esp, ebp
pop ebp
ret