Function at 0x48d370
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x20
mov edx, dword [0x5bbfc0]
push ebx
mov edx, dword [eax + edx*4]
mov eax, dword [0x5bbb34]
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp eax, dword [edx + 8]
jg 0x48d84c
mov esi, dword [ebp + 8]
cmp esi, dword [0x5bbb30]
jne 0x48d45d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call fcn.0047aee0
push 0
push str.Progman
push 0
mov dword [eax + 0xc], esi
call fcn.0047aee0
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.0047aee0
push 0
push str.Shell_TrayWnd
push 0
mov dword [eax + 0x10], esi
call fcn.0047aee0
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.0047aee0
mov dword [eax + 0x14], esi
call fcn.0047aee0
mov esi, dword [eax + 0x14]
call fcn.0047aee0
test esi, esi
je 0x48d42a
push 0
push str.TrayNotifyWnd
push 0
push dword [eax + 0x14]
call ebx
mov esi, eax
call fcn.0047aee0
mov dword [eax + 0x18], esi
jmp 0x48d431
mov dword [eax + 0x18], 0
call fcn.0047aee0
cmp byte [eax + 0x37], 0
jne 0x48d452
lea eax, [edi + 0x114d]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [edi + 0x114c], 1
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
cmp esi, 0x231
ja 0x48d630
je 0x48d613
cmp esi, 0x200
ja 0x48d5c7
je 0x48d5aa
mov eax, esi
sub eax, 0x16
je 0x48d579
sub eax, 0x8a
je 0x48d5aa
sub eax, 0x60
jne 0x48d71e
cmp ebx, 0x1b
jne 0x48d4d5
mov eax, dword [edi]
mov ecx, edi
push 1
push 0
call dword [eax + 0x14]
mov dword [edi + 0x28c], 0
mov dword [edi + 0x280], 0
call fcn.0047aee0
cmp byte [eax + 0xdd], 0
je 0x48d711
cmp ebx, 0x41
jb 0x48d4f1
cmp ebx, 0x5a
jbe 0x48d4fd
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x48d711
mov ecx, edi
call fcn.00426d30
cmp eax, dword [edi + 0x10fc]
je 0x48d711
mov ecx, dword [edi + 0x1110]
push 0
call fcn.0043a870
mov ecx, dword [edi + 0x1110]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1110]
call fcn.004237c0
push eax
call fcn.004a5f30
mov ecx, dword [edi + 0x1110]
add esp, 4
call fcn.004a6130
push dword [ebp + 0x10]
mov ecx, ebx
lea eax, [ebx - 0x41]
cmp eax, 0x19
lea ebx, [ecx + 0x20]
cmova ebx, ecx
mov ecx, dword [edi + 0x1110]
push ebx
push 0x102
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48d711
call fcn.0047aee0
lea ecx, [eax + 0x48]
mov eax, dword [edi + 0x1530]
mov dword [ecx], eax
call fcn.0047aee0
lea ecx, [eax + 0x4c]
mov eax, dword [edi + 0x1534]
mov dword [ecx], eax
call fcn.0047aee0
mov ecx, eax
call fcn.004a4b90
jmp 0x48d711
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x280], 0
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x214
je 0x48d5f6
sub eax, 2
jne 0x48d71e
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x216
mov ecx, edi
call dword [eax + 0x9c]
mov dword [ebp - 8], eax
jmp 0x48d711
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x214
mov ecx, edi
call dword [eax + 0xa0]
mov dword [ebp - 8], eax
jmp 0x48d711
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 1
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x464
ja 0x48d6a6
je 0x48d688
cmp esi, 0x232
je 0x48d66b
cmp esi, 0x312
jne 0x48d71e
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push esi
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x98]
jmp 0x48d711
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 0
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x464
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x94]
jmp 0x48d711
cmp esi, 0x7e9
ja 0x48d76e
je 0x48d74c
mov eax, esi
sub eax, 0x465
je 0x48d73c
sub eax, 1
je 0x48d731
sub eax, 1
jne 0x48d71e
mov ecx, dword [edi + 0x10f4]
mov eax, dword [ecx]
call dword [eax + 0x15c]
xor ebx, ebx
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x48d70e
mov esi, eax
mov ecx, dword [edi + 0x10f4]
push ebx
mov edx, dword [ecx]
call dword [edx + pe_nt_image_headers32]
test eax, eax
je 0x48d706
lea ecx, [eax + 0x424]
mov eax, dword [ecx]
push 1
push 0
call dword [eax + 0x1c]
inc ebx
cmp ebx, esi
jl 0x48d6e4
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
cmp dword [ebp - 4], 0
jne 0x48d840
mov ecx, dword [ebp + 0x10]
push ecx
push ebx
push esi
mov ecx, edi
call fcn.00439cc0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 1
mov ecx, edi
call fcn.004a7990
jmp 0x48d711
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.0048b190
jmp 0x48d711
call fcn.0047aee0
cmp byte [eax + 0x2e], 0
je 0x48d840
mov ecx, edi
call fcn.0048b4a0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x7ea
je 0x48d7a9
sub eax, 1
jne 0x48d71e
call fcn.0047aee0
cmp byte [eax + 0x2f], 0
jne 0x48d796
call fcn.0047aee0
cmp byte [eax + 0x30], 0
je 0x48d840
mov ecx, edi
call fcn.0048b4a0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.0047aee0
cmp byte [eax + 0x2d], 0
je 0x48d840
mov eax, dword [edi + 0x1108]
cmp dword [eax + 8], 0
jne 0x48d840
cmp dword [edi + 0x110c], 0
jne 0x48d840
mov ecx, edi
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x48d840
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], 0
push eax
mov ecx, edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.004237c0
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], 0
push eax
mov dword [ebp - 0x10], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0xc]
lea eax, [ebp - 0x20]
push dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x48d840
mov ecx, edi
call fcn.00489ea0
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x5bbb34
call fcn.00534704
add esp, 4
cmp dword [0x5bbb34], 0xffffffff
jne 0x48d39e
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0x5bbb34
mov dword [0x5bbb30], eax
call fcn.005346ba
add esp, 4
jmp 0x48d39e