Function at 0x1001c320
Capabilities:
Find taskbar
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x114
cmp dword [0x1005dc0c], 0
jne 0x1001c5cf
push ebx
push esi
push edi
push str.SHELLHOOK
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 0
push str.Shell_TrayWnd
mov dword [0x1005e0bc], eax
call dword [sym.imp.USER32.dll_FindWindowW]
mov ebx, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0
mov dword [0x1005dc0c], eax
call ebx
push 0x1004f3bc
mov dword [0x1005dc10], eax
call ebx
push 0x1004fd18
push str.combase.dll
mov dword [0x1005dbf8], eax
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call esi
push str.user32.dll
mov dword [0x1005dc88], eax
call ebx
mov edi, eax
push str.SetWindowCompositionAttribute
push edi
call esi
push str.GetWindowCompositionAttribute
push edi
mov dword [0x1005dc40], eax
call esi
push str.CreateWindowInBand
push edi
call esi
push str.GetWindowBand
push edi
mov dword [0x1005dc14], eax
call esi
push str.SetWindowBand
push edi
mov dword [0x1005dc84], eax
call esi
push str.EnableChildWindowDpiMessage
push edi
call esi
mov dword [0x1005dc38], eax
test eax, eax
jne 0x1001c3ee
push 0xa90
push edi
call esi
mov dword [0x1005dc38], eax
push 0x9cd
push edi
call esi
push 0x9ce
push edi
call esi
push 0x8b
push 0x100544c8
call ebx
push eax
call esi
push 0x8a
push 0x100544c8
mov dword [0x1005dc28], eax
call ebx
push eax
call esi
push 0x8c
push 0x100544c8
mov dword [0x1005dc2c], eax
call ebx
push eax
call esi
push 0x91
push 0x100544c8
mov dword [0x1005dc24], eax
call ebx
push eax
call esi
push 0x93
push 0x100544c8
call ebx
push eax
call esi
push 0x8d
push 0x100544c8
call ebx
push eax
call esi
push 0x9f
push 0x100544c8
call ebx
push eax
call esi
push 0x313
push dword [0x1005dbf8]
mov dword [0x1005dc80], eax
call esi
push 0x332
push dword [0x1005dbf8]
mov dword [0x1005dc44], eax
call esi
push 0x109
push dword [0x1005dbf8]
mov dword [0x1005dc64], eax
call esi
push 0x3ab
push dword [0x1005dbf8]
mov dword [0x1005dc4c], eax
call esi
push 0x38b
push dword [0x1005dbf8]
call esi
push 0x100530fc
mov dword [0x1005dc5c], eax
call ebx
mov edi, eax
push 0x32
push edi
call esi
push 0x4a
push edi
mov dword [0x1005dc6c], eax
call esi
push 0x78
push edi
mov dword [0x1005dc68], eax
call esi
push 0x79
mov dword [0x1005dc7c], eax
push edi
call esi
push str.OpenThemeDataForDpi
push edi
mov dword [0x1005dc78], eax
call esi
mov dword [0x1005dc60], eax
test eax, eax
jne 0x1001c530
push str.OpenThemeDataForDPI
push edi
call esi
mov dword [0x1005dc60], eax
test eax, eax
jne 0x1001c530
push 0x81
push edi
call esi
mov dword [0x1005dc60], eax
push pe_nt_image_headers32
lea eax, [ebp - 0x110]
mov dword [ebp - 0x114], 0x114
push 0
push eax
call sub.msvcrt.dll_memset
mov ebx, dword [sym.imp.KERNEL32.dll_GetVersionExW]
lea eax, [ebp - 0x114]
add esp, 0xc
push eax
call ebx
cmp dword [ebp - 0x108], 0x44f2
jb 0x1001c585
push 0x85
push edi
call esi
push 0x87
push edi
mov dword [0x1005dc08], eax
call esi
mov dword [0x1005dc70], eax
push pe_nt_image_headers32
lea eax, [ebp - 0x110]
mov dword [ebp - 0x114], 0x114
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x114]
push eax
call ebx
cmp dword [ebp - 0x108], 0x5208
jb 0x1001c5c7
push 0x8c
push edi
call esi
mov dword [0x1005dc74], eax
call fcn.1001baa0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret