Function at 0x48c1b0
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x20
mov edx, dword [0x5b8ec0]
push ebx
mov edx, dword [eax + edx*4]
mov eax, dword [0x5b8a34]
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp eax, dword [edx + 8]
jg 0x48c683
mov esi, dword [ebp + 8]
cmp esi, dword [0x5b8a30]
jne 0x48c29d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call fcn.00481830
push 0
push 0x57b610
push 0
mov dword [eax + 8], esi
call fcn.00481830
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
mov eax, dword [eax + 8]
push eax
call ebx
mov esi, eax
call fcn.00481830
push 0
push str.Shell_TrayWnd
push 0
mov dword [eax + 0xc], esi
call fcn.00481830
mov eax, dword [eax + 8]
push eax
call ebx
mov esi, eax
call fcn.00481830
mov dword [eax + 0x10], esi
call fcn.00481830
mov esi, dword [eax + 0x10]
call fcn.00481830
test esi, esi
je 0x48c26a
push 0
push str.TrayNotifyWnd
push 0
push dword [eax + 0x10]
call ebx
mov esi, eax
call fcn.00481830
mov dword [eax + 0x14], esi
jmp 0x48c271
mov dword [eax + 0x14], 0
call fcn.00481830
cmp byte [eax + 0x32], 0
jne 0x48c292
lea eax, [edi + 0x1161]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [edi + 0x1160], 1
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
cmp esi, 0x231
ja 0x48c463
je 0x48c446
cmp esi, 0x200
ja 0x48c3fa
je 0x48c3dd
mov eax, esi
sub eax, 0x16
je 0x48c3ac
sub eax, 0x8a
je 0x48c3dd
sub eax, 0x60
jne 0x48c551
cmp ebx, 0x1b
jne 0x48c31a
mov eax, dword [edi]
mov ecx, edi
push 1
push 0
call dword [eax + 0x14]
mov dword [edi + 0x28c], 0
mov dword [edi + 0x280], 0
jmp 0x48c544
cmp ebx, 0x41
jb 0x48c324
cmp ebx, 0x5a
jbe 0x48c330
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x48c551
mov ecx, edi
call fcn.00426c70
cmp eax, dword [edi + 0x1110]
je 0x48c544
mov ecx, dword [edi + 0x1124]
push 0
call fcn.0043a960
mov ecx, dword [edi + 0x1124]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1124]
call fcn.004237c0
push eax
call fcn.004a3180
mov ecx, dword [edi + 0x1124]
add esp, 4
call fcn.004a3380
push dword [ebp + 0x10]
mov ecx, ebx
lea eax, [ebx - 0x41]
cmp eax, 0x19
lea ebx, [ecx + 0x20]
cmova ebx, ecx
mov ecx, dword [edi + 0x1124]
push ebx
push 0x102
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48c544
call fcn.00481830
lea ecx, [eax + 0x40]
mov eax, dword [edi + 0x1544]
mov dword [ecx], eax
call fcn.00481830
lea ecx, [eax + 0x44]
mov eax, dword [edi + 0x1548]
mov dword [ecx], eax
call fcn.00481830
mov ecx, eax
call fcn.004a1fa0
jmp 0x48c544
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x280], 0
call fcn.00439db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x214
je 0x48c429
sub eax, 2
jne 0x48c551
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x216
mov ecx, edi
call dword [eax + 0x9c]
mov dword [ebp - 8], eax
jmp 0x48c544
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x214
mov ecx, edi
call dword [eax + 0xa0]
mov dword [ebp - 8], eax
jmp 0x48c544
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 1
call fcn.00439db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x464
ja 0x48c4d9
je 0x48c4bb
cmp esi, 0x232
je 0x48c49e
cmp esi, 0x312
jne 0x48c551
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push esi
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x98]
jmp 0x48c544
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 0
call fcn.00439db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x464
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x94]
jmp 0x48c544
cmp esi, 0x7e9
ja 0x48c5a1
je 0x48c57f
mov eax, esi
sub eax, 0x465
je 0x48c56f
sub eax, 1
je 0x48c564
sub eax, 1
jne 0x48c551
mov ecx, dword [edi + 0x1108]
mov eax, dword [ecx]
call dword [eax + 0x15c]
xor ebx, ebx
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x48c541
mov esi, eax
mov ecx, dword [edi + 0x1108]
push ebx
mov edx, dword [ecx]
call dword [edx + 0x150]
test eax, eax
je 0x48c539
lea ecx, [eax + 0x424]
mov eax, dword [ecx]
push 1
push 0
call dword [eax + 0x1c]
inc ebx
cmp ebx, esi
jl 0x48c517
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
cmp dword [ebp - 4], 0
jne 0x48c677
mov ecx, dword [ebp + 0x10]
push ecx
push ebx
push esi
mov ecx, edi
call fcn.00439db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 1
mov ecx, edi
call fcn.004a4bc0
jmp 0x48c544
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.0048a090
jmp 0x48c544
call fcn.00481830
cmp byte [eax + 0x2a], 0
je 0x48c677
mov ecx, edi
call fcn.0048a3a0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x7ea
je 0x48c5dc
sub eax, 1
jne 0x48c551
call fcn.00481830
cmp byte [eax + 0x2b], 0
jne 0x48c5c9
call fcn.00481830
cmp byte [eax + 0x2c], 0
je 0x48c677
mov ecx, edi
call fcn.0048a3a0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.00481830
cmp byte [eax + 0x29], 0
je 0x48c677
mov eax, dword [edi + 0x111c]
cmp dword [eax + 8], 0
jne 0x48c677
cmp dword [edi + 0x1120], 0
jne 0x48c677
mov ecx, edi
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x48c677
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], 0
push eax
mov ecx, edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], 0
push eax
mov dword [ebp - 0x10], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0xc]
lea eax, [ebp - 0x20]
push dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x48c677
mov ecx, edi
call fcn.00488da0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x5b8a34
call fcn.00531854
add esp, 4
cmp dword [0x5b8a34], 0xffffffff
jne 0x48c1de
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0x5b8a34
mov dword [0x5b8a30], eax
call fcn.0053180a
add esp, 4
jmp 0x48c1de