Function at 0x40fa80
Capabilities:
Create thread
Hide graphical window

Disassembly:
sub esp, 0x4c
push esi
push edi
push 0x2c
lea eax, [esp + 0x2c]
push 0
push eax
call fcn.004101c0
mov edi, dword [esp + 0x64]
mov esi, dword [sym.imp.USER32.dll_LoadIconW]
add esp, 0xc
push 0x7f00
push edi
mov dword [esp + 0x2c], 0x30
mov dword [esp + 0x30], 3
mov dword [esp + 0x34], 0x40f7b0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], edi
call esi
push 0x7f00
push 0
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov ecx, dword [esp + 0x38]
push 0x7f00
push ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 6
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0x41d020
call esi
lea edx, [esp + 0x58]
push edx
push 2
push 0
push 0x40ecc0
push 0
push 0
mov dword [esp + 0x68], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x419828
push 0x400000
call fcn.0040e9f0
add esp, 8
call eax
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
test ax, ax
jne 0x40fb6e
push str.Create_Process
push str.Call_to_RegisterClassEx_failed_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
mov eax, 1
pop esi
add esp, 0x4c
ret 0x10
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push edi
push 0
push 0
push 0x258
push 0x1b8
push 0x80000000
push 0x80000000
push 0xcf0000
push str.Windows_Process_Manager
push 0x41d020
push 0
mov dword [0x41df88], edi
call esi
mov dword [0x41df80], eax
push 0
test eax, eax
jne 0x40fbcf
push str.Win32_Guided_Tour
push str.Call_to_CreateWindow_failed_
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
mov eax, 1
pop esi
add esp, 0x4c
ret 0x10
mov ecx, dword [0x41df88]
push ecx
push 0
push eax
push 0x14
push 0x7d
push 0xa
push 0xa
push 0x50010001
push str.Create_Process
push str.BUTTON
push 0
call esi
mov edx, dword [0x41df88]
push 0
push edx
push 0
mov dword [0x41e6a0], eax
mov eax, dword [0x41df80]
push eax
push 0x14
push 0x69
push 0xa
push 0x91
push 0x50010001
push str.Kill_Process
push str.BUTTON
push 0
call esi
mov ecx, dword [0x41df88]
mov edx, dword [0x41df80]
push 0
push ecx
push 0
push edx
push 0x14
push 0x91
push 0xa
push 0x104
push 0x50010001
push str.View_All_Processes
push str.BUTTON
push 0
mov dword [0x41df94], eax
call esi
mov dword [0x41f38c], eax
mov eax, dword [0x41df80]
push eax
call fcn.0040e7b0
push eax
mov dword [0x41e6a4], eax
call fcn.0040e800
add esp, 8
push 0
push edi
push 0
push 0
push 0x78
push 0x1b8
push 0x80000000
push 0x80000000
push 0xcf0000
push str.Windows_Process_Manager
push 0x41d020
push 0
call esi
mov ecx, dword [0x41df88]
push 0
push ecx
push 0
push eax
push 0x1e
push 0x1a4
push 0xa
push 0xa
push 0x50810000
push 0x419450
push str.Edit
push 0x200
mov dword [0x41df8c], eax
call esi
mov edx, dword [0x41df88]
push 0
push edx
push 0
mov dword [0x41df84], eax
mov eax, dword [0x41df8c]
push eax
push 0x14
push 0x64
push 0x32
push 0xa
push 0x50010001
push 0x419728
push str.BUTTON
push 0
call esi
mov ecx, dword [0x41df88]
mov edx, dword [0x41df8c]
push 0
push ecx
push 0
push edx
push 0x14
push 0x64
push 0x32
push 0x78
push 0x50010001
push 0x419718
push str.BUTTON
push 0
mov dword [0x41df90], eax
call esi
mov dword [0x41f388], eax
call fcn.0040e220
call fcn.0040f770
mov eax, dword [0x41df80]
push 0
push 0x1770
push 0
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [esp + 0x64]
mov edx, dword [0x41df80]
push ecx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x41df80]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push 0
push 0
push 0
lea ecx, [esp + 0x14]
push ecx
call esi
test eax, eax
je 0x40fdc4
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
push ebx
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea edx, [esp + 0xc]
push edx
call edi
lea eax, [esp + 0xc]
push eax
call ebx
push 0
push 0
push 0
lea ecx, [esp + 0x18]
push ecx
call esi
test eax, eax
jne 0x40fda4
pop ebx
mov eax, dword [esp + 0x10]
pop edi
pop esi
add esp, 0x4c
ret 0x10