Function at 0x42076e
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebx
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push esi
mov esi, ecx
mov dword [0x54dbe4], 1
push edi
mov edi, dword [sym.imp.USER32.dll_IsWindow]
mov eax, dword [esi + 0x87a0]
test eax, eax
je 0x4207c5
push dword [eax + 4]
call edi
test eax, eax
je 0x4207ad
mov eax, dword [esi + 0x87a0]
push 0
push 0
push 0x10
push dword [eax + 4]
call ebx
mov ecx, dword [esi + 0x87a0]
test ecx, ecx
je 0x4207c5
mov eax, dword [ecx]
push 1
call dword [eax + 4]
and dword [esi + 0x87a0], 0
push 0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
push eax
push eax
push 0x2710
push 0x4236d1
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x514d1c
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov dword [esi + 0x86d0], 1
push dword [esi + 0x86c0]
call dword [sym.imp.KERNEL32.dll_SetEvent]
mov eax, dword [esi + 0x878c]
test eax, eax
je 0x420846
push dword [eax + 4]
call edi
test eax, eax
je 0x42082e
mov eax, dword [esi + 0x878c]
push 0
push 0
push 0x10
push dword [eax + 4]
call ebx
mov ecx, dword [esi + 0x878c]
test ecx, ecx
je 0x420846
mov eax, dword [ecx]
push 1
call dword [eax + 4]
and dword [esi + 0x878c], 0
mov eax, dword [0x54e4d0]
xor edi, edi
cmp dword [eax - 8], edi
je 0x42086e
push edi
push edi
push edi
push 0x46829b
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [esi + 0x628]
test eax, eax
je 0x420880
push eax
push edi
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [esi + 0x52c]
sub eax, dword [esi + 0x528]
test eax, 0xfffffffc
jle 0x4208c4
mov eax, dword [esi + 0x528]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x4208b0
push ecx
call fcn.004bcc7b
mov eax, dword [esi + 0x528]
and dword [eax + edi*4], 0
mov eax, dword [esi + 0x52c]
inc edi
sub eax, dword [esi + 0x528]
sar eax, 2
cmp edi, eax
jl 0x420893
push dword [esi + 0x538]
mov edi, dword [sym.imp.USER32.dll_IsWindow]
call edi
test eax, eax
je 0x4208e4
push 0
push 0
push 0x10
push dword [esi + 0x538]
call ebx
lea ecx, [esi + 0x86ec]
call fcn.00435309
mov eax, dword [esi + 0x87b0]
test eax, eax
je 0x420913
push dword [eax + 4]
call edi
test eax, eax
je 0x420913
mov eax, dword [esi + 0x87b0]
push 0
push 0
push 0x10
push dword [eax + 4]
call ebx
mov ecx, dword [esi + 0x87b0]
test ecx, ecx
je 0x42092e
mov eax, dword [ecx]
push 1
call dword [eax + 4]
xor ebx, ebx
mov dword [esi + 0x87b0], ebx
jmp 0x420930
xor ebx, ebx
lea eax, [esi + 0x16c]
push eax
push 2
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
lea ecx, [esi + 0x24]
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [esi + 0x8734]
call fcn.0044b60e
mov ecx, esi
call fcn.0044aab4
mov ecx, dword [0x54e02c]
test ecx, ecx
je 0x42096f
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x54e02c], ebx
mov ecx, dword [0x54e028]
test ecx, ecx
je 0x420985
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x54e028], ebx
mov ecx, dword [0x54de18]
test ecx, ecx
je 0x42099b
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x54de18], ebx
call fcn.004b882f
mov eax, dword [0x54efac]
mov ecx, 0x54efac
push dword [eax + 4]
call fcn.0046d706
mov eax, dword [0x54efac]
mov edi, 0x54dbc0
mov dword [eax + 4], eax
mov eax, dword [0x54efac]
mov dword [eax], eax
mov eax, dword [0x54efac]
mov dword [eax + 8], eax
mov dword [0x54efb0], ebx
cmp dword [edi], 0
je 0x4209e1
push dword [edi]
call dword [sym.imp.USER32.dll_DestroyCursor]
mov dword [edi], ebx
add edi, 4
cmp edi, 0x54dbdc
jl 0x4209d4
mov ecx, dword [esi + 0x873c]
test ecx, ecx
je 0x420a04
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [esi + 0x873c], ebx
mov edi, ebx
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x420a1d
push 0x64
call ebx
add edi, 0x64
cmp edi, 0xbb8
ja 0x420a26
cmp dword [0x54e300], 0
jne 0x420a0e
push 0
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0x1f4
call ebx
push dword [esi + 0x87a4]
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
and dword [0x54d9b4], 0
xor eax, eax
pop edi
pop esi
pop ebx
ret 0x10