Function at 0x413259
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xb4
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 0x10]
push edi
mov edx, dword [esi]
mov edi, ecx
sub esp, 0x10
mov eax, dword [edi + 0xf4]
mov dword [esp + 0x50], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x5c], edi
mov eax, dword [eax + edx*4]
mov dword [esp + 0x34], 3
movsx ecx, word [eax + 0xa]
mov edx, dword [eax]
mov dword [esp + 0x44], ecx
mov eax, dword [edx]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [edx + 4]
mov dword [ecx + 4], eax
mov eax, dword [edx + 8]
mov dword [ecx + 8], eax
mov eax, dword [edx + 0xc]
mov dword [ecx + 0xc], eax
or al, 0xff
add byte [ebp + 0x1388f], cl
add al, ch
leave
mov bh, bh
dec dword [ecx - 0x7ad3dbbc]
ror byte [edi], 0x84
out dx, eax
pop ebp
push es
invalid
mov eax, dword [edi + 0x14c]
inc dword [esi]
mov ecx, dword [esi]
mov dword [esp + 0x84], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x60], 0
mov dword [esp + 0x68], 0
mov dword [esp + 0x6c], 1
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x50], 0x49dc50
cmp word [eax + 8], 0x47
mov dword [esp + 0x54], 0
mov dword [esp + 0x58], 0
mov dword [esp + 0x5c], 0
mov dword [esp + 0x74], str.TaskbarCreated
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x38], 0
jne 0x47907a
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x18]
push eax
push esi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x28], ecx
push ebx
mov ecx, edi
call fcn.0041c36b
test eax, eax
js 0x413b67
mov ebx, dword [esp + 0x2c]
mov eax, dword [ebx + 0x10]
mov dword [edi + 0xf4], eax
mov eax, dword [ebx + 0x10]
cmp eax, dword [0x4c2110]
jg 0x413ae9
test eax, eax
jle 0x413ae9
shl eax, 4
add eax, dword [0x4c214c]
mov dword [esp + 0x18], eax
mov eax, dword [eax + 4]
mov ecx, dword [eax]
cmp word [ecx + 8], 0
jne 0x413361
cmp dword [ecx], 0x2b
je 0x47908c
mov ecx, 3
cmp dword [ebx + 0x14], 0
mov edx, dword [esp + 0x1c]
mov esi, ecx
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x20], 0
mov dword [esp + 0x30], 0
jg 0x4138c0
mov eax, dword [esp + 0x20]
cmp eax, dword [ebx + 0x18]
jl 0x47950b
cmp eax, dword [ebx + 0x14]
jg 0x47950b
cmp ecx, edx
jne 0x47950b
mov eax, dword [ebx + 0x10]
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], eax
test eax, eax
js 0x4792d3
lea eax, [esp + 0x44]
push eax
mov ecx, 0x4c20f0
call fcn.00402b7a
push dword [esp + 0x44]
lea ecx, [esp + 0x48]
call fcn.0040de6b
cmp dword [ebx + 0x14], 1
jge 0x4136af
add byte [eax], al
mov eax, dword [esp + 0x20]
mov dword [edi + 0x14c], eax
mov eax, dword [edi]
mov dword [esp + 0x88], 0
mov ebx, dword [eax + 4]
add ebx, edi
mov dword [esp + 0x90], 0
cmp byte [ebx + 0xd], 0
mov dword [esp + 0x94], 1
mov byte [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov byte [esp + 0xa0], 0
mov dword [esp + 0xa8], 0
mov dword [esp + 0xb0], 0
mov dword [esp + 0xb4], 1
mov byte [esp + 0xb8], 0
jne 0x47945e
push 0x40
call fcn.0041f4ea
mov esi, eax
add esp, 4
test esi, esi
je 0x413b1e
lea eax, [esp + 0x88]
push eax
mov ecx, esi
mov dword [esi + 8], 0
call fcn.00411720
lea ecx, [esi + 0x20]
lea eax, [esp + 0xa8]
mov byte [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov byte [esi + 0x18], 0
push eax
mov dword [ecx + 8], 0
call fcn.00411720
mov byte [esi + 0x30], 0
mov eax, dword [ebx + 8]
mov dword [esi + 0x38], eax
mov dword [ebx + 8], esi
inc dword [ebx + 4]
mov eax, dword [esp + 0x2c]
mov ecx, dword [edi + 0x160]
mov eax, dword [eax + 0x10]
mov ebx, dword [edi + 0xf4]
lea esi, [edi + 0x160]
inc eax
mov dword [esp + 0x30], ecx
push eax
mov ecx, edi
call fcn.0040e8d0
mov eax, dword [esp + 0x30]
cmp eax, dword [esi]
jb 0x413b25
mov eax, dword [edi]
mov dword [edi + 0xf4], ebx
mov ecx, dword [eax + 4]
mov eax, dword [ecx + edi + 8]
add ecx, edi
cmp byte [ecx + 0xd], 0
jne 0x413b2e
cmp byte [eax + 0x10], 0
mov eax, dword [ebp + 0x18]
je 0x413a7f
pushal
add eax, 0x79800000
or eax, 0x100c600
cmp byte [ecx + 0xd], 0
mov byte [eax], 1
jne 0x47948b
mov ebx, dword [ecx + 8]
mov esi, dword [ebp + 0x14]
cmp esi, ebx
je 0x41354f
cmp dword [esi + 0xc], 4
je 0x479496
mov ecx, esi
call fcn.00412c20
push ebx
mov ecx, esi
call fcn.00411720
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov eax, dword [esi + edi + 8]
add esi, edi
cmp byte [esi + 0xd], 0
jne 0x413b36
cmp byte [eax + 0x18], 0
jne 0x4794b0
cmp byte [esi + 0xd], 0
mov eax, dword [esi + 8]
jne 0x413b3e
cmp byte [eax + 0x30], 0
jne 0x4794c7
mov eax, dword [edi]
mov esi, dword [eax + 4]
jo 0x41358e
add esi, edi
cmp byte [esi + 0xd], 0
jne 0x4794e4
or eax, 0x4e850f00
pop edi
push es
add byte [eax + 0xf000c7e], al
test dword [esi - 0x74fffffb], esp
pop esi
or byte [ebx + 0x44893843], cl
and al, 0x44
cmp byte [esi + 0xc], 0
jne 0x413b46
mov ebx, dword [esi + 8]
mov eax, dword [ebx + 0x38]
mov dword [esp + 0x44], eax
test ebx, ebx
je 0x4135ca
lea ecx, [ebx + 0x20]
call fcn.00412c20
mov ecx, ebx
call fcn.00412c20
push ebx
call fcn.0041f55e
mov eax, dword [esp + 0x48]
add esp, 4
mov dword [esi + 8], eax
mov byte [esi + 0xd], 0
dec dword [esi + 4]
mov eax, dword [edi]
mov ecx, dword [eax + 4]
mov eax, dword [ecx + edi + 8]
add ecx, edi
cmp byte [ecx + 0xd], 0
jne 0x413b4f
mov edx, dword [esp + 0x9c]
mov dword [eax + 0x14], edx
cmp byte [ecx + 0xd], 0
mov eax, dword [ecx + 8]
mov ecx, dword [esp + 0x54]
mov eax, dword [esp + 0x78]
mov ebx, dword [esp + 0x18]
sub eax, ecx
mov dword [esp + 0x34], 1
mov dword [esp + 0x38], ecx
mov dword [esp + 0x3c], eax
lea ecx, [ecx]
mov ecx, dword [ebx + 4]
mov ebx, dword [esp + 0x24]
xor esi, esi
mov eax, dword [ecx + ebx*4]
lea edx, [ecx + ebx*4]
cmp word [eax + 8], si
je 0x4792e0
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28], 1
mov edi, dword [esp + 0x28]
lea ecx, [ecx + eax*4]
xor ebx, ebx
lea edx, [ecx + 4]
push ecx
add al, 0x8b
add cl, byte [edi]
mov bh, 0x40
or byte [esi - 0x7d], ah
clc
inc edi
mov eax, dword [edx]
movzx eax, word [eax + 8]
cmp ax, 0x47
je 0x413af7
cmp ax, 0x48
je 0x413a6f
cmp ax, 0x40
jne 0x413a76
test ebx, ebx
jne 0x413a76
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28], edi
mov edi, dword [esp + 0x4c]
cmp dword [esp + 0x34], eax
jg 0x4793d5
add byte [ebx - 0x74c7dbac], cl
inc esp
and al, 0x3c
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov eax, dword [eax + edx]
cmp byte [eax], 0
jne 0x479309
mov eax, dword [ecx]
mov edx, dword [edx]
mov ebx, dword [eax]
or esi, 0x200
cmp dword [0x4c20f0], 0
mov dword [esp + 0x30], edx
je 0x47933b
cmp byte [0x4c20f9], 0
mov eax, dword [0x4c20f4]
jne 0x413b01
push eax
push ebx
mov dword [esp + 0x24], eax
call fcn.0040d9a0
test al, al
jne 0x479351
and esi, 0xff00
push 0x20
mov dword [esp + 0x48], esi
call fcn.0041f4ea
mov esi, eax
add esp, 4
test esi, esi
je 0x413b10
xor ecx, ecx
mov eax, 8
mov edx, 2
mul edx
seto cl
mov dword [esi + 4], 0
mov dword [esi + 8], 8
neg ecx
or ecx, eax
push ecx
call fcn.0041f4ea
add esp, 4
xor ecx, ecx
mov dword [esi], eax
push 4
mov word [eax], cx
call fcn.0041f4ea
add esp, 4
test eax, eax
je 0x413b09
mov dword [eax], 1
mov dword [esi + 0xc], eax
cmp esi, ebx
je 0x413840
mov ecx, dword [esi + 0xc]
mov eax, dword [ecx]
cmp eax, 1
jg 0x479374
mov edi, dword [ebx + 4]
mov dword [esi + 4], edi
lea eax, [edi + 1]
cmp dword [esi + 8], eax
jb 0x479394
mov eax, dword [esi + 4]
lea eax, [eax*2 + 2]
push eax
push dword [ebx]
push dword [esi]
call fcn.0041ee80
add esp, 0xc
mov eax, dword [esp + 0x44]
push 0x10
mov dword [esi + 0x10], eax
call fcn.0041f4ea
mov edi, eax
add esp, 4
test edi, edi
je 0x413b17
push dword [esp + 0x30]
mov ecx, edi
mov dword [edi + 8], 0
call fcn.00411720
mov ebx, dword [esp + 0x1c]
mov dword [esi + 0x14], edi
mov dword [esi + 0x1c], 0
mov dword [esi + 0x18], 0
push dword [ebx]
push esi
call fcn.0040d8c0
mov edi, dword [esp + 0x4c]
mov dword [ebx], eax
mov ebx, dword [esp + 0x18]
mov ecx, dword [esp + 0x28]
mov eax, dword [esp + 0x34]
inc esp
and al, 0x34
add dword [esp + 0x38], 4
inc ecx
add dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x34], eax
cmp eax, dword [ecx + 0x14]
jle 0x4136d0
jmp 0x4133e5
cmp ecx, edx
jae 0x413a5d
inc dword [esp + 0x20]
lea edx, [eax + esi*4]
xor bl, bl
mov eax, dword [edx]
mov byte [esp + 0x13], bl
cmp word [eax + 8], 0
mov dword [esp + 0x3c], 0
je 0x47909a
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x33
je 0x413900
xor bl, bl
mov byte [esp + 0x13], bl
lea eax, [esp + 0x13]
push eax
lea ecx, [esp + 0x78]
call fcn.0041c3c3
test bl, bl
jne 0x4790ec
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x60]
mov dword [edi + 0xf4], eax
call fcn.00412c20
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x54]
mov dword [esp + 0x70], 1
mov dword [esp + 0x64], 0
call fcn.0041c2d6
push dword [esp + 0x1c]
mov eax, dword [esp + 0x5c]
mov ecx, dword [esp + 0x58]
mov ebx, dword [ebp + 0xc]
push dword [ecx + eax*4 - 4]
lea eax, [esp + 0x1c]
push eax
push ebx
mov ecx, edi
call fcn.0040fe30
test eax, eax
js 0x413b67
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
mov eax, dword [eax + 0x10]
mov dword [edi + 0xf4], eax
mov ecx, dword [ecx + 4]
inc esi
mov eax, dword [ecx + esi*4]
cmp word [eax + 8], 0x41
je 0x413aa9
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
cmp ecx, edx
je 0x413a5d
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx*4]
cmp word [eax + 8], 0x40
jne 0x47926d
lea eax, [ecx + 1]
cmp eax, edx
je 0x47926d
mov ecx, eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov eax, dword [eax + 4]
mov dword [esp + 0x3c], eax
mov eax, dword [eax + esi*4]
cmp word [eax + 8], 0x40
jne 0x4139da
inc esi
mov ebx, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
inc ebx
mov dword [esp + 0x30], ebx
cmp ebx, dword [eax + 0x14]
jge 0x413a5d
mov eax, dword [esp + 0x3c]
jmp 0x4138c0
mov eax, dword [esp + 0x20]
cmp eax, 1
je 0x413a9e
mov ebx, dword [esp + 0x2c]
jmp 0x41338e
dec ebx
js 0x41372d
inc edi
add edx, 4
jmp 0x413701
mov esi, dword [ebp + 0x14]
mov ecx, esi
mov byte [eax], 0
call fcn.00412c20
mov dword [esi + 0xc], 1
mov dword [esi], 0
jmp 0x41354f
cmp byte [ebp + 8], 0
je 0x413a66
jmp 0x479286
inc esi
xor edx, edx
lea ecx, [ecx + esi*4]
nop
mov eax, dword [ecx]
movzx eax, word [eax + 8]
cmp ax, 0x47
je 0x413af0
cmp ax, 0x48
je 0x413adc
cmp ax, 0x40
je 0x413ace
inc esi
add ecx, 4
jmp 0x413ab0
test edx, edx
je 0x413992
inc esi
add ecx, 4
jmp 0x413ab0
dec edx
js 0x413992
inc esi
add ecx, 4
jmp 0x413ab0
xor eax, eax
jmp 0x413348
inc edx
inc esi
add ecx, 4
jmp 0x413ab0
inc ebx
inc edi
add edx, 4
jmp 0x413701
mov eax, dword [eax + 8]
jmp 0x413786
xor eax, eax
jmp 0x413802
xor esi, esi
jmp 0x413805
xor edi, edi
jmp 0x41386d
xor esi, esi
jmp 0x4134b9
mov edi, dword [esp + 0x30]
jmp 0x479477
mov eax, dword [eax + 0x38]
jmp 0x413512
mov eax, dword [eax + 0x38]
jmp 0x413564
mov eax, dword [eax + 0x38]
jmp 0x41357b
mov byte [esi + 0xd], 1
jmp 0x4135d1
mov eax, dword [eax + 0x38]
jmp 0x4135e9
or ebx, 0xffffffff
jmp 0x41366a
mov eax, 0x9dfffa65
nop
scasb al, byte es:[edi]
mov al, byte [edi]
out dx, eax
test dword [eax], 0x40f7ef
jbe 0x478ffb
inc edi
add bh, ch
test dword [eax], 0x478a98
mov ebx, 0xd900478a
add byte [ebx - 0x26ffb876], bh
mov al, byte [edi]
add eax, 0x500478b
mov eax, dword [edi]
out dx, eax
mov al, byte [edi]
lea eax, [edi]
add dl, dh
lea eax, [edi]
jb 0x47908e
inc eax
add byte [edx - 7], dh
inc eax
add byte [edx + 0x7200478d], bh
stc
inc eax
add ah, bl
lea eax, [edi]
dec dword [ebp - 0x71e2ffb9]
inc edi
add byte [ecx - 0x72], cl
inc edi
add byte [ecx - 0x72], cl
inc edi
add byte [ebx], dh
mov es, word [edi]
push dword [esp + 0x34]
mov ecx, edi
push 0x85
call fcn.0044ccb5
or eax, 0xffffffff
jmp 0x4136ff
and al, 0x24
jmp 0x4133bf
add byte [eax], al
call fcn.0044ccb5
jmp 0x413bc0
mov eax, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, edi
push dword [eax]
call fcn.00401d03
mov ecx, dword [ebx + 4]
test eax, eax
mov eax, dword [esp + 0x14]
mov eax, dword [ecx + eax*4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
jne 0x4792b7
push 0x79
call fcn.0044ccb5
jmp 0x413bc0
push 0xbc
call fcn.0044ccb5
jmp 0x413bc0
push 0x6f
call fcn.0044ccb5
jmp 0x413bc0
inc esp
and al, 0x20
push eax
lea eax, [esp + 0x54]
push eax
call 0x45cdfb
test eax, eax
jne 0x47931b
lea ecx, [esp + 0x74]
call fcn.004020fc
mov ecx, dword [esp + 0x20]
test ecx, ecx
jle 0x47931b
mov byte [esp + 0x13], 0
mov esi, ecx
int1
lea eax, [esp + 0x13]
push eax
lea ecx, [esp + 0x78]
call fcn.0041c41c
dec esi
jne 0x47930a
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x2c]
jmp 0x4133e3
mov eax, dword [edx]
mov eax, dword [eax]
cmp eax, 0x24
je 0x47934c
cmp eax, 0x1e
jne 0x479350
mov esi, 0x100
inc ebx
add edx, 4
mov eax, dword [edx]
cmp word [eax + 8], 0
je 0x479339
add ah, byte [esi - 0x7d]
js 0x47935e
add byte [eax - 0x77], dh
pop esp
and al, 0x24
mov dword [esp + 0x24], ebx
jmp 0x413742
loopne 0x479303
stc
dec dword [ebx + 0xc788302]
push es
jne 0x47936e
mov edx, dword [eax]
jmp 0x479370
xor edx, edx
mov eax, dword [ecx]
push 1
or esi, 0x200
push esi
push edx
push dword [eax]
call fcn.0044813c
test dl, bl
je 0x479496
mov ebx, dword [esp + 0x18]
jmp 0x4138ed
push esi
push edx
push ebx
mov ecx, 0x4c20e0
call fcn.0040d7bd
mov ebx, dword [esp + 0x18]
jmp 0x4138ed
add al, 0x8b
inc ebx
or byte [ecx + 0x38b0846], cl
mov dword [esi], eax
mov eax, dword [ebx + 0xc]
mov dword [esi + 0xc], eax
inc dword [eax]
jmp 0x413899
stc
inc edi
xchg eax, edi
add byte [eax], al
add byte [eax], al
add byte [eax], al
add byte [ebp - 0x26], bl
js 0x413bc0
mov ecx, dword [esp + 0x24]
push 1
or esi, 0x200
push esi
lea eax, [esp + 0x68]
add dword [ecx + 0x200ce], eax
add byte [esi - 0x73], dl
inc esp
and al, 0x68
push eax
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx*4]
push dword [eax]
call fcn.0040d742
jmp 0x4138ed
xor al, ch
mov cl, 0x42
stc
invalid
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
mov ecx, edi
movsx eax, word [eax + 0xa]
push eax
push 0x79
call fcn.0044ccb5
jmp 0x413bc0
std
invalid
mov byte [ebx + 0xd], 0
jmp 0x41351b
mov eax, dword [ecx + 8]
mov ebx, dword [eax + 0x38]
jmp 0x413588
add al, 0xe8
mov eax, dword [0x8bfff89e]
inc eax
adc al, 0x89
test byte [esp + ebx*4], ah
add byte [eax], al
add cl, ch
cmpsd dword [esi], dword es:[edi]
mov al, byte [0x4e8dfff9]
add al, 0xe8
mov bl, byte [esi - 0x3f7c0008]
and byte [eax - 0x73], dl
mov word [esp + ebp*4], fs
add byte [eax], al
add al, ch
iretd