Function at 0x48af20
Capabilities:
Find taskbar

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0x2c]
sub esp, 0x20
mov edx, dword [0x5b9fc0]
push ebx
mov edx, dword [eax + edx*4]
mov eax, dword [0x5b9b34]
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp eax, dword [edx + 8]
jg 0x48b3fc
mov esi, dword [ebp + 8]
cmp esi, dword [0x5b9b30]
jne 0x48b00d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, eax
call fcn.00478990
push 0
push str.Progman
push 0
mov dword [eax + 0xc], esi
call fcn.00478990
mov ebx, dword [sym.imp.USER32.dll_FindWindowExW]
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.00478990
push 0
push str.Shell_TrayWnd
push 0
mov dword [eax + 0x10], esi
call fcn.00478990
mov eax, dword [eax + 0xc]
push eax
call ebx
mov esi, eax
call fcn.00478990
mov dword [eax + 0x14], esi
call fcn.00478990
mov esi, dword [eax + 0x14]
call fcn.00478990
test esi, esi
je 0x48afda
push 0
push str.TrayNotifyWnd
push 0
push dword [eax + 0x14]
call ebx
mov esi, eax
call fcn.00478990
mov dword [eax + 0x18], esi
jmp 0x48afe1
mov dword [eax + 0x18], 0
call fcn.00478990
cmp byte [eax + 0x37], 0
jne 0x48b002
lea eax, [edi + 0x114d]
push eax
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
mov byte [edi + 0x114c], 1
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 8], 0
mov dword [ebp - 4], 0
cmp esi, 0x231
ja 0x48b1e0
je 0x48b1c3
cmp esi, 0x200
ja 0x48b177
je 0x48b15a
mov eax, esi
sub eax, 0x16
je 0x48b129
sub eax, 0x8a
je 0x48b15a
sub eax, 0x60
jne 0x48b2ce
cmp ebx, 0x1b
jne 0x48b085
mov eax, dword [edi]
mov ecx, edi
push 1
push 0
call dword [eax + 0x14]
mov dword [edi + 0x28c], 0
mov dword [edi + 0x280], 0
call fcn.00478990
cmp byte [eax + 0xdd], 0
je 0x48b2c1
cmp ebx, 0x41
jb 0x48b0a1
cmp ebx, 0x5a
jbe 0x48b0ad
lea eax, [ebx - 0x30]
cmp eax, 9
ja 0x48b2c1
mov ecx, edi
call fcn.00427430
cmp eax, dword [edi + 0x10fc]
je 0x48b2c1
mov ecx, dword [edi + 0x1110]
push 0
call fcn.00439cb0
mov ecx, dword [edi + 0x1110]
push 1
push 1
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [edi + 0x1110]
call fcn.00423fd0
push eax
call fcn.004a39f0
mov ecx, dword [edi + 0x1110]
add esp, 4
call fcn.004a3bf0
push dword [ebp + 0x10]
mov ecx, ebx
lea eax, [ebx - 0x41]
cmp eax, 0x19
lea ebx, [ecx + 0x20]
cmova ebx, ecx
mov ecx, dword [edi + 0x1110]
push ebx
push 0x102
call fcn.00423fd0
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
jmp 0x48b2c1
call fcn.00478990
lea ecx, [eax + 0x48]
mov eax, dword [edi + 0x1530]
mov dword [ecx], eax
call fcn.00478990
lea ecx, [eax + 0x4c]
mov eax, dword [edi + 0x1534]
mov dword [ecx], eax
call fcn.00478990
mov ecx, eax
call fcn.004a2690
jmp 0x48b2c1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x280], 0
call fcn.004393c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x214
je 0x48b1a6
sub eax, 2
jne 0x48b2ce
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x216
mov ecx, edi
call dword [eax + 0x9c]
mov dword [ebp - 8], eax
jmp 0x48b2c1
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x214
mov ecx, edi
call dword [eax + 0xa0]
mov dword [ebp - 8], eax
jmp 0x48b2c1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 1
call fcn.004393c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
cmp esi, 0x464
ja 0x48b256
je 0x48b238
cmp esi, 0x232
je 0x48b21b
cmp esi, 0x312
jne 0x48b2ce
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push esi
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x98]
jmp 0x48b2c1
push ecx
push ebx
push esi
mov ecx, edi
mov dword [edi + 0x28c], 0
call fcn.004393c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [edi]
lea edx, [ebp - 4]
push edx
push ecx
push ebx
push 0x464
mov ecx, edi
mov dword [ebp - 4], 1
call dword [eax + 0x94]
jmp 0x48b2c1
cmp esi, 0x7e9
ja 0x48b31e
je 0x48b2fc
mov eax, esi
sub eax, 0x465
je 0x48b2ec
sub eax, 1
je 0x48b2e1
sub eax, 1
jne 0x48b2ce
mov ecx, dword [edi + 0x10f4]
mov eax, dword [ecx]
call dword [eax + 0x15c]
xor ebx, ebx
mov dword [ebp - 0xc], eax
test eax, eax
jle 0x48b2be
mov esi, eax
mov ecx, dword [edi + 0x10f4]
push ebx
mov edx, dword [ecx]
call dword [edx + pe_nt_image_headers32]
test eax, eax
je 0x48b2b6
lea ecx, [eax + 0x424]
mov eax, dword [ecx]
push 1
push 0
call dword [eax + 0x1c]
inc ebx
cmp ebx, esi
jl 0x48b294
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
cmp dword [ebp - 4], 0
jne 0x48b3f0
mov ecx, dword [ebp + 0x10]
push ecx
push ebx
push esi
mov ecx, edi
call fcn.004393c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 1
mov ecx, edi
call fcn.004a5420
jmp 0x48b2c1
mov ecx, edi
mov dword [ebp - 4], 1
call fcn.00488d40
jmp 0x48b2c1
call fcn.00478990
cmp byte [eax + 0x2e], 0
je 0x48b3f0
mov ecx, edi
call fcn.00489050
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov eax, esi
sub eax, 0x7ea
je 0x48b359
sub eax, 1
jne 0x48b2ce
call fcn.00478990
cmp byte [eax + 0x2f], 0
jne 0x48b346
call fcn.00478990
cmp byte [eax + 0x30], 0
je 0x48b3f0
mov ecx, edi
call fcn.00489050
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
call fcn.00478990
cmp byte [eax + 0x2d], 0
je 0x48b3f0
mov eax, dword [edi + 0x1108]
cmp dword [eax + 8], 0
jne 0x48b3f0
cmp dword [edi + 0x110c], 0
jne 0x48b3f0
mov ecx, edi
call fcn.00423fd0
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x48b3f0
lea eax, [ebp - 0x20]
mov dword [ebp - 0x14], 0
push eax
mov ecx, edi
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
call fcn.00423fd0
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], 0
push eax
mov dword [ebp - 0x10], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
push dword [ebp - 0xc]
lea eax, [ebp - 0x20]
push dword [ebp - 0x10]
push eax
call dword [sym.imp.USER32.dll_PtInRect]
test eax, eax
jne 0x48b3f0
mov ecx, edi
call fcn.00487a50
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push 0x5b9b34
call fcn.00532174
add esp, 4
cmp dword [0x5b9b34], 0xffffffff
jne 0x48af4e
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0x5b9b34
mov dword [0x5b9b30], eax
call fcn.0053212a
add esp, 4
jmp 0x48af4e