Function at 0x459bb0
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword [0x658538]
sub esp, 0x20
push ebx
push esi
mov esi, ecx
push edi
cmp eax, 0x237c
je 0x459bce
cmp eax, 0x237d
jne 0x459bdf
cmp word [esi + 0x10c8], 0
je 0x459bdf
mov ebx, 1
jmp 0x459be1
xor ebx, ebx
push 0
push str.UNavTray
call dword [sym.imp.USER32.dll_FindWindowW]
push 1
push 3
mov ecx, 0x658670
mov edi, eax
call fcn.0041c780
push 1
push 3
mov ecx, 0x658670
mov dword [ebp - 0xc], eax
call fcn.0041c880
push 0
push 3
mov ecx, 0x658670
mov dword [ebp - 0x10], eax
call fcn.0041c780
push 0
push 3
mov ecx, 0x658670
mov dword [ebp - 0x14], eax
call fcn.0041c880
mov ecx, eax
mov dword [ebp - 8], 0
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 4], 0
test ecx, ecx
je 0x459c77
mov ecx, dword [ecx + 0x34]
xor eax, eax
mov dword [ebp - 8], eax
test ecx, ecx
je 0x459c6d
mov eax, dword [ecx]
lea edx, [ebp - 8]
push edx
push 0x3000133
push ecx
call dword [eax + 0xc]
mov eax, dword [ebp - 8]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x14]
test ecx, ecx
je 0x459ca6
mov ecx, dword [ecx + 0x34]
xor eax, eax
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x459c9c
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
push 0x3000133
push ecx
call dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x459cd5
mov ecx, dword [ecx + 0x34]
xor eax, eax
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x459ccb
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
push 0x3000133
push ecx
call dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
test eax, eax
sete cl
mov dword [ebp - 4], ecx
mov ecx, dword [ebp - 0xc]
test ecx, ecx
je 0x459d03
mov ecx, dword [ecx + 0x34]
xor eax, eax
mov dword [ebp - 0x18], eax
test ecx, ecx
je 0x459cfa
mov eax, dword [ecx]
lea edx, [ebp - 0x18]
push edx
push 0x3000133
push ecx
call dword [eax + 0xc]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
test eax, eax
sete cl
jmp 0x459d05
xor ecx, ecx
mov eax, dword [esi + 8]
and eax, 0xffffffbf
cmp eax, 0x31
ja case.0x459d1b.2
movzx eax, byte [eax + 0x459eb0]
jmp dword [eax*4 + 0x459ea4]
test ebx, ebx
je 0x459d42
test edi, edi
je 0x459e9b
push 0
push 0
push 0x10
push edi
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esi + 0x3dc]
mov edx, dword [esi]
lea eax, [esi + 0x20]
push eax
mov ecx, esi
call dword [edx + 0x80]
pop edi
mov dword [esi + 0x3dc], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test ebx, ebx
je 0x459db2
test edi, edi
jne 0x459d9b
push 1
push 0x51f01c
push 0x50daec
lea eax, [esi + 0x10c8]
push eax
push str.open
push edi
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, esi
call fcn.00457dc0
mov edi, eax
test edi, edi
je 0x459e9b
push 0
push 0
push 0x4d2
push edi
call dword [sym.imp.USER32.dll_PostMessageW]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, dword [ebp - 0x1c]
test edx, edx
jne 0x459dbd
test ecx, ecx
je 0x459dcd
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
test eax, eax
jne 0x459dd3
test edi, edi
je 0x459dec
jmp 0x459dd3
mov eax, dword [ebp - 8]
mov edi, dword [ebp - 4]
cmp dword [ebp - 0x14], 0
mov ebx, dword [ebp - 0xc]
jne 0x459de0
test ebx, ebx
je 0x459e13
cmp dword [ebp - 0x20], 0
jne 0x459e13
cmp dword [ebp - 0x10], 0
jne 0x459e13
push dword [esi + 0x3dc]
mov edx, dword [esi]
lea eax, [esi + 0x20]
push eax
push dword [esi + 0x96c]
mov ecx, esi
call dword [edx + 0x84]
pop edi
mov dword [esi + 0x3dc], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
test eax, eax
jne 0x459e1b
test edi, edi
je 0x459e23
test edx, edx
jne 0x459e23
test ecx, ecx
je 0x459e39
cmp dword [ebp - 0x20], 0
jne 0x459e2f
cmp dword [ebp - 0x10], 0
je 0x459e60
cmp dword [ebp - 0x14], 0
jne 0x459e60
test ebx, ebx
jne 0x459e60
push dword [esi + 0x3dc]
mov edx, dword [esi]
lea eax, [esi + 0x20]
push eax
push dword [esi + 0x974]
mov ecx, esi
call dword [edx + 0x84]
pop edi
mov dword [esi + 0x3dc], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push dword [esi + 0x3dc]
mov edx, dword [esi]
lea eax, [esi + 0x20]
push eax
push dword [esi + 0x970]
mov ecx, esi
call dword [edx + 0x84]
pop edi
mov dword [esi + 0x3dc], eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push str.CTrayIcon::ProcessOEMTrayIcon:_invalid_state____n
push 0
push str.CTPTrayAction::ProcessOEMTrayIcon
call fcn.004cb3a0
add esp, 0xc
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret