Function at 0x1400a6660
Capabilities:
Find taskbar

Disassembly:
push rbp
push rsi
push rdi
push r12
push r15
sub rsp, 0x50
mov rax, qword gs:[0x58]
mov rdi, rcx
mov r10d, dword [0x14022faf0]
mov r12, r9
mov ecx, InitCommonControls
mov r15, r8
mov ebp, edx
mov rsi, r8
mov r10, qword [rax + r10*8]
mov eax, dword [rcx + r10]
cmp dword [0x14022f474], eax
jg 0x1400a6b81
cmp ebp, dword [0x14022f470]
mov qword [rsp + 0x80], rbx
jne 0x1400a6774
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rbx, rax
call fcn.14008f2f0
mov qword [rax + 0x18], rbx
call fcn.14008f2f0
xor r9d, r9d
lea r8, str.Progman
xor edx, edx
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rbx, rax
call fcn.14008f2f0
mov qword [rax + 0x20], rbx
call fcn.14008f2f0
xor r9d, r9d
lea r8, str.Shell_TrayWnd
xor edx, edx
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rbx, rax
call fcn.14008f2f0
mov qword [rax + 0x28], rbx
call fcn.14008f2f0
mov rbx, qword [rax + 0x28]
call fcn.14008f2f0
test rbx, rbx
je 0x1400a6748
mov rcx, qword [rax + 0x28]
lea r8, str.TrayNotifyWnd
xor r9d, r9d
xor edx, edx
call qword [sym.imp.USER32.dll_FindWindowExW]
mov rbx, rax
call fcn.14008f2f0
mov qword [rax + 0x30], rbx
call fcn.14008f2f0
cmp byte [rax + 0x52], 0
jne 0x1400a676d
lea rdx, [rdi + 0x12f0]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [rdi + 0x12e8], 1
xor eax, eax
jmp 0x1400a6b6d
xor ebx, ebx
mov dword [rsp + 0x88], ebx
cmp ebp, 0x232
ja 0x1400a695e
je 0x1400a6953
cmp ebp, 0x214
ja 0x1400a68fd
je 0x1400a68d1
mov eax, ebp
sub eax, 0x16
je 0x1400a68a3
sub eax, 0x8a
je 0x1400a67c3
sub eax, 0x60
je 0x1400a67ce
cmp eax, 0x100
jne 0x1400a6aa1
mov dword [rdi + 0x388], ebx
jmp 0x1400a6aa1
cmp r15, 0x1b
jne 0x1400a67ee
mov rax, qword [rdi]
mov r8b, 1
xor edx, edx
mov rcx, rdi
call qword [rax + 0x28]
mov dword [rdi + 0x394], ebx
mov dword [rdi + 0x388], ebx
call fcn.14008f2f0
cmp byte [rax + 0x109], bl
je 0x1400a6a7b
lea rax, [r15 - 0x41]
cmp rax, 0x19
jbe 0x1400a6817
lea rax, [r15 - 0x30]
cmp rax, 9
ja 0x1400a6a7b
mov rcx, rdi
call fcn.14002a5e0
cmp rax, qword [rdi + 0x1260]
je 0x1400a6a7b
mov rcx, qword [rdi + 0x1280]
xor edx, edx
call fcn.140041840
mov rcx, qword [rdi + 0x1280]
mov r8b, 1
movzx edx, r8b
mov rax, qword [rcx]
call qword [rax + 0x28]
mov rcx, qword [rdi + 0x1280]
call fcn.140026de0
mov rcx, rax
call fcn.1400cad10
mov rcx, qword [rdi + 0x1280]
call fcn.1400cb010
mov rcx, qword [rdi + 0x1280]
lea rax, [r15 - 0x41]
add r15, 0x20
cmp rax, 0x19
cmova r15, rsi
call fcn.140026de0
mov rcx, rax
mov r9, r12
mov r8, r15
mov edx, 0x102
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400a6a7b
call fcn.14008f2f0
mov ecx, dword [rdi + 0x16f4]
mov dword [rax + 0x60], ecx
call fcn.14008f2f0
mov ecx, dword [rdi + 0x16f8]
mov dword [rax + 0x64], ecx
call fcn.14008f2f0
mov rcx, rax
call fcn.1400c9570
jmp 0x1400a6a7b
mov rax, qword [rdi]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9, r12
mov rcx, rdi
mov r8, r15
mov edx, 0x214
call qword [rax + 0x140]
mov rbx, rax
jmp 0x1400a6a7b
mov eax, ebp
sub eax, 0x216
je 0x1400a6927
sub eax, 2
je 0x1400a6aa1
cmp eax, 0x19
jne 0x1400a6aa1
mov dword [rdi + 0x394], 1
jmp 0x1400a6aa1
mov rax, qword [rdi]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9, r12
mov rcx, rdi
mov r8, r15
mov edx, 0x216
call qword [rax + pe_nt_image_headers64]
mov rbx, rax
jmp 0x1400a6a7b
mov dword [rdi + 0x394], ebx
jmp 0x1400a6aa1
cmp ebp, 0x467
ja 0x1400a6a8a
je 0x1400a6a1a
mov eax, ebp
sub eax, 0x312
je 0x1400a69e9
sub eax, 0x152
je 0x1400a69b5
sub eax, 1
je 0x1400a699d
cmp eax, 1
jne 0x1400a6aa1
mov edx, eax
mov rcx, rdi
call fcn.1400ce330
jmp 0x1400a6a7b
mov rcx, rdi
mov dword [rsp + 0x88], 1
call fcn.1400a29d0
jmp 0x1400a6a7b
mov rax, qword [rdi]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9, r12
mov rcx, rdi
mov dword [rsp + 0x88], 1
mov r8, r15
mov edx, 0x464
call qword [rax + 0x128]
jmp 0x1400a6a7b
mov rax, qword [rdi]
lea rcx, [rsp + 0x88]
mov qword [rsp + 0x20], rcx
mov r9, r12
mov rcx, rdi
mov dword [rsp + 0x88], 1
mov r8, r15
mov edx, 0x312
call qword [rax + 0x130]
jmp 0x1400a6a7b
mov rcx, qword [rdi + 0x1250]
mov rax, qword [rcx]
call qword [rax + 0x2b8]
test eax, eax
jle 0x1400a6a7b
mov qword [rsp + 0x90], r14
mov rsi, rbx
mov r14d, eax
nop dword [rax]
mov rcx, qword [rdi + 0x1250]
mov rdx, rsi
mov rax, qword [rcx]
call qword [rax + 0x2a0]
test rax, rax
je 0x1400a6a6a
lea rcx, [rax + 0x5a8]
mov r8b, 1
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x38]
inc rsi
sub r14, 1
jne 0x1400a6a40
mov r14, qword [rsp + 0x90]
cmp dword [rsp + 0x88], 0
je 0x1400a6aa1
jmp 0x1400a6b6a
mov eax, ebp
sub eax, 0x7e9
je 0x1400a6b58
sub eax, 1
je 0x1400a6ad1
cmp eax, 1
je 0x1400a6ab6
mov r9, r12
mov r8, r15
mov edx, ebp
mov rcx, rdi
call fcn.140040ce0
jmp 0x1400a6b6d
call fcn.14008f2f0
cmp byte [rax + 0x4b], bl
jne 0x1400a6b62
call fcn.14008f2f0
cmp byte [rax + 0x4c], bl
jmp 0x1400a6b60
call fcn.14008f2f0
cmp byte [rax + 0x49], bl
je 0x1400a6b6a
mov rax, qword [rdi + 0x1270]
cmp qword [rax + 0x10], rbx
jne 0x1400a6b6a
cmp qword [rdi + 0x1278], rbx
jne 0x1400a6b6a
mov rcx, rdi
call fcn.140026de0
mov rcx, rax
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1400a6b6a
mov rcx, rdi
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x38], rbx
call fcn.140026de0
mov rcx, rax
lea rdx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_GetWindowRect]
lea rcx, [rsp + 0x30]
mov qword [rsp + 0x30], rbx
call qword [sym.imp.USER32.dll_GetCursorPos]
mov rdx, qword [rsp + 0x30]
lea rcx, [rsp + 0x38]
call qword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x1400a6b6a
mov rcx, rdi
call fcn.1400a0810
jmp 0x1400a6b6a
call fcn.14008f2f0
cmp byte [rax + 0x4a], bl
je 0x1400a6b6a
mov rcx, rdi
call fcn.1400a2d80
mov rax, rbx
mov rbx, qword [rsp + 0x80]
add rsp, 0x50
pop r15
pop r12
pop rdi
pop rsi
pop rbp
ret
lea rcx, [0x14022f474]
call fcn.14017bc80
cmp dword [0x14022f474], 0xffffffff
jne 0x1400a66a3
lea rcx, str.TaskbarCreated
call qword [sym.imp.USER32.dll_RegisterWindowMessageW]
lea rcx, [0x14022f474]
mov dword [0x14022f470], eax
call fcn.14017bc20
jmp 0x1400a66a3