Function at 0x140013100
Capabilities:
Find taskbar

Disassembly:
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rbp
push r14
sub rsp, 0x30
mov rax, rdx
xor r14d, r14d
mov rbp, rdx
mov rbx, rcx
sub rax, 1
je 0x140013283
cmp rax, 2
jne 0x1400133c9
mov eax, dword [rcx + 0x220]
cmp eax, 5
jne 0x14001315f
call fcn.140013600
cmp dword [rbx + 0x224], r14d
je 0x14001338d
mov edx, 1
mov rcx, rbx
call fcn.140016550
jmp 0x14001338d
add eax, 0xfffffffe
test eax, 0xfffffffd
je 0x140013176
test byte [0x14007da24], 0x20
je 0x1400133c9
mov edx, dword [rcx + 0x338]
test edx, edx
jle 0x1400133c9
call fcn.140013910
test eax, eax
jne 0x1400131d7
cmp dword [0x14007b818], r14d
jne 0x140013140
cmp dword [rbx + 0x220], 1
mov dword [0x14007b818], 1
jbe 0x140013140
mov rcx, rbx
call fcn.140013440
mov dword [rbx + 0x220], 5
cmp dword [0x14007eed0], r14d
je 0x1400131cb
xor edx, edx
call fcn.140013660
mov dword [0x14007b818], r14d
jmp 0x140013140
sub dword [rbx + 0x338], 1
jne 0x1400133c9
mov rcx, rbx
call fcn.140013440
mov rcx, qword [0x14007b830]
mov edx, 0x102
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x140013220
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x14007b830]
mov edx, 0x102
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x140013202
mov rcx, qword [0x14007b830]
call qword [sym.imp.KERNEL32.dll_ResetEvent]
mov rcx, qword [rbx + 0x480]
or edx, 0xffffffff
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, qword [rbx + 0x480]
test rcx, rcx
je 0x14001324f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [rbx + 0x220], 5
mov qword [rbx + 0x480], r14
jne 0x140013267
mov rcx, rbx
jmp 0x14001313b
cmp dword [0x14007eed0], r14d
je 0x140013140
mov edx, 1
call fcn.140013660
jmp 0x140013140
mov eax, dword [rcx + 0x220]
cmp eax, 5
jne 0x140013298
call fcn.140013600
jmp 0x14001338d
cmp eax, 2
jne 0x1400133c9
mov eax, dword [rcx + 0x334]
test eax, eax
je 0x1400133c9
dec eax
mov dword [rcx + 0x334], eax
cmp dword [0x14007eec8], r14d
je 0x140013320
mov qword [rsp + 0x40], rsi
lea rcx, str.Shell_TrayWnd
xor edx, edx
mov qword [rsp + 0x48], rdi
call qword [sym.imp.USER32.dll_FindWindowW]
xor r8d, r8d
mov rcx, rbx
mov rsi, rax
lea edx, [r8 + 2]
call fcn.140015b40
mov rcx, rsi
call qword [sym.imp.USER32.dll_GetDC]
xor r9d, r9d
mov rcx, rsi
mov r8, rax
mov rdi, rax
lea edx, [r9 + 0xf]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rdi, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x40]
mov rcx, rbx
call fcn.140014e70
test eax, eax
je 0x14001318d
mov eax, dword [0x14007dc4c]
test eax, eax
js 0x1400133c9
cmp eax, 2
jle 0x14001334b
add eax, 0xfffffffa
cmp eax, 2
ja 0x1400133c9
test byte [0x14007da24], 0x20
jne 0x1400133c9
mov rcx, rbx
call fcn.140013440
cmp dword [rbx + 0x224], r14d
je 0x140013372
mov edx, 1
mov rcx, rbx
call fcn.140016550
cmp dword [0x14007eed0], r14d
je 0x14001338d
cmp dword [rbx + 0x220], 5
mov edx, r14d
setne dl
call fcn.140013660
mov rcx, qword [0x14007bc10]
mov edx, 1
mov dword [rsp + 0x28], r14d
mov r8d, edx
mov dword [rsp + 0x20], 0x10
mov dword [rbx + 0x220], edx
lea r9d, [rdx + 0xf]
call qword [sym.imp.USER32.dll_LoadImageW]
mov edx, 1
mov rcx, rbx
mov r8, rax
call fcn.140015b40
mov r9, qword [rbx + 0x2c8]
mov r8d, r14d
test r9, r9
jle 0x14001340e
mov rcx, r14
nop dword [rax + rax]
test rcx, rcx
js 0x14001342e
cmp rcx, r9
jge 0x14001342e
mov rax, qword [rbx + 0x2c0]
mov rdx, qword [rax + rcx*8]
test rdx, rdx
je 0x140013400
cmp qword [rdx + 8], rbp
je 0x140013428
inc r8d
inc rcx
movsxd rax, r8d
cmp rax, r9
jl 0x1400133e0
mov rcx, rbx
mov rbx, qword [rsp + 0x50]
mov rbp, qword [rsp + 0x58]
add rsp, 0x30
pop r14
jmp qword [sym.imp.mfc140u.dll_CDHtmlDialog::DDX_DHtml_ElementText]
mov dword [rdx + 0x14], r14d
jmp 0x14001340e
call qword [sym.imp.mfc140u.dll_AfxRegDeleteKey]
int3