Function at 0x40ee48
Capabilities:
Find taskbar

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x1c8
mov ebx, dword [ecx]
mov esi, dword [ecx + 4]
call fcn.0040d6c0
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x16c], 0
lea eax, [ebp - 0x120]
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.004015f4
cmp dword [ebp - 0x108], 0x1a
jbe 0x40ef7b
mov dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x110]
test eax, eax
je 0x40f1a3
lea ebx, [ebp - 0x190]
mov dword [esp + 4], ebx
mov dword [esp], eax
call fcn.0040300c
mov dword [ebp - 0x134], ebx
mov ebx, dword [ebp - 0x134]
mov dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x108]
cmp eax, 2
je 0x40eef5
inc dword [ebp - 0x19c]
test eax, eax
je 0x40ef50
lea esi, [ebp - 0x104]
jmp 0x40ef32
mov edi, dword [eax*4 + 0x414740]
mov dword [esp + 4], ebx
mov eax, dword [ebx]
mov dword [esp], eax
call fcn.0040300c
test eax, eax
je 0x40ef40
lea eax, [ebp - 0x120]
mov dword [esp + 4], eax
mov dword [esp], ebx
call edi
add esi, 4
mov eax, dword [esi - 4]
test eax, eax
je 0x40ef50
sub eax, 2
cmp eax, 0x1b
jbe 0x40ef00
xor edi, edi
jmp 0x40ef07
mov dword [esp], 8
call fcn.004013e4
mov ebx, dword [ebx + 0x24]
test ebx, ebx
je 0x40ef6d
xor eax, eax
mov edx, dword [ebp - 0x3c]
test edx, edx
sete al
test dword [ebp - 0x19c], eax
je 0x40eee0
xor eax, eax
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [ebp - 0x108]
jmp dword [eax*4 + 0x4146d4]
mov dword [ebp - 0x194], 0
mov dword [esp], str.kernel32.dll
call sub.KERNEL32.dll_GetModuleHandleA
push ebx
mov dword [esp + 4], str.SetConsoleDisplayMode
mov dword [esp], eax
call sub.KERNEL32.dll_GetProcAddress
push esi
push esi
mov ebx, eax
test eax, eax
je 0x40ef6d
mov esi, dword [ebp - 0x194]
mov dword [esp], 0xfffffff5
call sub.KERNEL32.dll_GetStdHandle
push ecx
lea edx, [ebp - 0x194]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], eax
call ebx
sub esp, 0xc
jmp 0x40ef6d
lea eax, [ebp - 0x120]
mov dword [esp + 4], eax
lea eax, [ebp - 0x190]
mov dword [esp], eax
call fcn.00403e94
jmp 0x40ef6d
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call fcn.004024b0
jmp 0x40ef6d
lea ebx, [ebp - 0x190]
mov dword [esp], ebx
call fcn.004034e4
lea edx, [ebp - 0x120]
mov dword [esp + 4], edx
mov dword [esp], ebx
call fcn.004035f8
mov ebx, dword [ebx + 0x24]
test ebx, ebx
jne 0x40f01d
jmp 0x40ef6d
mov dword [esp + 4], 0x4146a0
mov dword [esp], str.Shell_TrayWnd
call sub.USER32.dll_FindWindowA
push esi
push esi
test eax, eax
je 0x40ef6d
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x193
mov dword [esp + 4], 0x111
mov dword [esp], eax
call sub.USER32.dll_PostMessageA
sub esp, 0x10
jmp 0x40ef6d
mov dword [esp + 4], 0x4146a0
mov dword [esp], str.Shell_TrayWnd
call sub.USER32.dll_FindWindowA
push ebx
push ebx
test eax, eax
je 0x40ef6d
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x195
mov dword [esp + 4], 0x111
mov dword [esp], eax
call sub.USER32.dll_PostMessageA
sub esp, 0x10
jmp 0x40ef6d
mov dword [esp + 4], 0x4146a0
mov dword [esp], str.Shell_TrayWnd
call sub.USER32.dll_FindWindowA
push ecx
push ecx
test eax, eax
je 0x40ef6d
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x194
mov dword [esp + 4], 0x111
mov dword [esp], eax
call sub.USER32.dll_PostMessageA
sub esp, 0x10
jmp 0x40ef6d
mov dword [esp + 4], 0x4146a0
mov dword [esp], str.Shell_TrayWnd
call sub.USER32.dll_FindWindowA
push edx
push edx
test eax, eax
je 0x40ef6d
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x19f
mov dword [esp + 4], 0x111
mov dword [esp], eax
call sub.USER32.dll_PostMessageA
sub esp, 0x10
jmp 0x40ef6d
mov dword [esp + 4], 0x4146a0
mov dword [esp], str.Shell_TrayWnd
call sub.USER32.dll_FindWindowA
push edi
push edi
test eax, eax
je 0x40ef6d
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x1a0
mov dword [esp + 4], 0x111
mov dword [esp], eax
call sub.USER32.dll_PostMessageA
sub esp, 0x10
jmp 0x40ef6d
call fcn.00403ef4
jmp 0x40ef6d
lea esi, [ebp - 0x190]
mov dword [esp], esi
call fcn.004034e4
call fcn.00403004
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x120]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenA
push edx
mov ebx, eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x1a4], 0
cmp byte [eax + ebx - 1], 0x2a
jne 0x40f1f9
dec ebx
mov byte [eax + ebx], 0
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x120]
cmp byte [eax], 0x2a
jne 0x40f20d
inc eax
mov dword [ebp - 0x120], eax
dec ebx
or dword [ebp - 0x1a4], 2
lea edx, [ebp - 0x158]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x1a4]
test eax, eax
je 0x40f34b
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [esi]
je 0x40f322
mov eax, dword [esi + 0x1c]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrlenA
push edi
cmp eax, ebx
jl 0x40f322
cmp dword [ebp - 0x1a4], 1
je 0x40f2e0
cmp dword [ebp - 0x1a4], 2
je 0x40f394
mov edi, eax
sub edi, ebx
js 0x40f322
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a0], esi
jmp 0x40f28a
dec edi
cmp edi, 0xffffffff
je 0x40f383
mov esi, dword [ebp - 0x120]
mov edx, dword [ebp - 0x1a0]
mov eax, dword [edx + 0x1c]
add eax, edi
mov dword [ebp - 0x19c], eax
call sub.KERNEL32.dll_GetThreadLocale
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov edx, dword [ebp - 0x19c]
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.KERNEL32.dll_CompareStringA
sub esp, 0x18
cmp eax, 2
jne 0x40f280
mov dword [ebp - 0x1a8], 1
jmp 0x40f280
mov edi, dword [ebp - 0x120]
mov edx, dword [esi + 0x1c]
mov dword [ebp - 0x1b4], edx
call sub.KERNEL32.dll_GetThreadLocale
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], ebx
mov edx, dword [ebp - 0x1b4]
mov dword [esp + 8], edx
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.KERNEL32.dll_CompareStringA
sub esp, 0x18
cmp eax, 2
je 0x40f366
mov esi, dword [esi + 0x24]
test esi, esi
jne 0x40f219
cmp dword [ebp - 0x134], 0
jne 0x40eed0
mov dword [esp], 8
call fcn.004013e4
mov eax, dword [ebp - 0x120]
mov dword [esp + 4], eax
mov eax, dword [esi + 0x1c]
mov dword [esp], eax
call sub.KERNEL32.dll_lstrcmpiA
push ecx
push ecx
test eax, eax
jne 0x40f322
mov edx, dword [ebp - 0x1ac]
mov dword [edx + 0x24], esi
mov eax, dword [esi + 0x24]
mov dword [esi + 0x24], 0
mov dword [ebp - 0x1ac], esi
mov esi, eax
jmp 0x40f325
mov esi, dword [ebp - 0x1a0]
cmp dword [ebp - 0x1a8], 0
jne 0x40f366
jmp 0x40f322
mov ecx, dword [ebp - 0x120]
mov dword [esp + 4], ecx
sub eax, ebx
add eax, dword [esi + 0x1c]
jmp 0x40f358