Function at 0x423ef0
Capabilities:
Enumerate gui resources
Find taskbar

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x94
mov eax, dword [0x551764]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, edx
mov esi, ecx
push edi
push 8
push esi
mov dword [ebp - 0x90], edi
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, esi
call fcn.00429c80
push 0x40
lea edx, [ebp - 0x88]
mov ecx, edi
call fcn.00429da0
add esp, 4
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0
push str.Shell_TrayWnd
mov byte [ebp - 0x89], 0
call dword [sym.imp.USER32.dll_FindWindowW]
test eax, eax
je 0x423f5f
push 0x576b30
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
lea eax, [ebp - 0x89]
push eax
push 0x429be0
call dword [sym.imp.USER32.dll_EnumWindows]
mov al, byte [ebp - 0x89]
mov ebx, dword [sym.imp.USER32.dll_SetWindowPos]
mov byte [0x576adf], al
test al, al
je 0x423fb1
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
test al, 8
jne 0x423fb1
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push esi
call ebx
push 0x13
push 0
push 0
push 0
push 0
push 0
push esi
call ebx
mov eax, dword [edi + 0x1ac]
cmp eax, 0x80000000
je 0x423fd9
mov ecx, dword [edi + 0x1b0]
cmp ecx, 0x80000000
je 0x423fd9
push 0x15
push 0
push 0
push ecx
push eax
push 0
push esi
call ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x404
push esi
mov dword [edi + 0x10c], esi
call ebx
push 0x3f9
push esi
mov dword [edi + 0x134], eax
call ebx
push 0x3fd
push esi
mov dword [edi + 0x120], eax
call ebx
push 0x40b
push esi
mov dword [edi + 0x124], eax
call ebx
push 0x428
push esi
mov dword [edi + 0x138], eax
call ebx
push 0x34
mov dword [edi + 0x13c], eax
call fcn.004c7170
mov edi, eax
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x94], edi
movups xmmword [edi + 8], xmm0
push 0x404
push esi
mov dword [edi], 0
mov dword [edi + 4], 0
mov dword [edi + 0x18], 0
mov dword [edi + 0x20], 0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x24], 0
mov dword [edi + 0x28], 0x64
mov dword [edi + 0x2c], 0x64
mov dword [edi + 0x30], 0
call ebx
test eax, eax
je 0x424098
push 0x55
push eax
mov ecx, edi
call fcn.004264d0
push 0x3fc
push esi
call ebx
test eax, eax
je 0x4240ae
push 0x41
push eax
mov ecx, edi
call fcn.004264d0
push 0x3fd
push esi
call ebx
test eax, eax
je 0x4240c4
push 0x41
push eax
mov ecx, edi
call fcn.004264d0
push 0x416
push esi
call ebx
test eax, eax
je 0x4240da
push 0x50
push eax
mov ecx, edi
call fcn.004264d0
push 0x3f9
push esi
call ebx
test eax, eax
je 0x4240f0
push 0x50
push eax
mov ecx, edi
call fcn.004264d0
push 0x40b
push esi
call ebx
test eax, eax
je 0x424106
push 0x41
push eax
mov ecx, edi
call fcn.004264d0
push 0x428
push esi
call ebx
test eax, eax
je 0x42411c
push 0x50
push eax
mov ecx, edi
call fcn.004264d0
mov eax, dword [ebp - 0x90]
xor edx, edx
push ecx
mov dword [eax + 0x98], edi
mov edi, eax
mov ecx, dword [edi + 0x134]
call fcn.00429ee0
add esp, 4
push 0
push 0
push 0x31
push dword [edi + 0x134]
call dword [sym.imp.USER32.dll_SendMessageW]
lea ecx, [ebp - 0x68]
push ecx
push 0x5c
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
lea eax, [ebp - 0x68]
mov dword [ebp - 0x58], 0x2bc
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
push 0x40b
push esi
mov dword [edi + 0xfc], eax
call ebx
push 0x64
mov edx, eax
mov ecx, esi
call fcn.0042a610
add esp, 4
push 0xcd
push 0x40b
push esi
call ebx
xor edx, edx
mov ecx, eax
call fcn.0042a6a0
add esp, 4
push 0x428
push esi
call ebx
push 0x64
mov edx, eax
mov ecx, esi
call fcn.0042a610
add esp, 4
push 0xca
push 0x428
push esi
call ebx
xor edx, edx
mov ecx, eax
call fcn.0042a6a0
mov eax, dword [edi + 0x234]
add esp, 4
mov ecx, dword [edi + 0x10c]
mov dword [edi + 0x20c], 0x432150
mov dword [edi + 0x210], edi
push eax
push 0
push 0x1401
push ecx
mov dword [edi + 0x214], 0
mov dword [edi + 0x218], 0x3e8
mov dword [edi + 0x24c], ecx
mov dword [edi + 0x234], 0
call dword [sym.imp.USER32.dll_PostMessageW]
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004c715a
mov esp, ebp
pop ebp
ret