Function at 0x412640
Capabilities:
Create thread
Hide graphical window

Disassembly:
sub esp, 0x4c
push esi
push edi
push 0x2c
lea eax, [esp + 0x2c]
push 0
push eax
call fcn.00412e90
mov edi, dword [esp + 0x64]
mov esi, dword [sym.imp.USER32.dll_LoadIconW]
add esp, 0xc
push 0x7f00
push edi
mov dword [esp + 0x2c], 0x30
mov dword [esp + 0x30], 3
mov dword [esp + 0x34], 0x412370
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], edi
call esi
push 0x7f00
push 0
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov ecx, dword [esp + 0x38]
push 0x7f00
push ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], 6
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0x421024
call esi
lea edx, [esp + 0x58]
push edx
push 2
push 0
push 0x410940
push 0
push 0
mov dword [esp + 0x68], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x41d858
push 0x400000
call fcn.00410660
add esp, 8
call eax
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
test ax, ax
jne 0x41272e
push str.Create_Process
push str.Call_to_RegisterClassEx_failed_
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
mov eax, 1
pop esi
add esp, 0x4c
ret 0x10
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push edi
push 0
push 0
push 0x258
push 0x1b8
push 0x80000000
push 0x80000000
push 0xcf0000
push str.Windows_Process_Manager
push 0x421024
push 0
mov dword [0x4220c8], edi
call esi
mov dword [0x4220c0], eax
push 0
test eax, eax
jne 0x41278f
push str.Win32_Guided_Tour
push str.Call_to_CreateWindow_failed_
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
mov eax, 1
pop esi
add esp, 0x4c
ret 0x10
mov ecx, dword [0x4220c8]
push ecx
push 0
push eax
push 0x14
push 0x7d
push 0xa
push 0xa
push 0x50010001
push str.Create_Process
push str.BUTTON
push 0
call esi
mov edx, dword [0x4220c8]
push 0
push edx
push 0
mov dword [0x4227e0], eax
mov eax, dword [0x4220c0]
push eax
push 0x14
push 0x69
push 0xa
push 0x91
push 0x50010001
push str.Kill_Process
push str.BUTTON
push 0
call esi
mov ecx, dword [0x4220c8]
mov edx, dword [0x4220c0]
push 0
push ecx
push 0
push edx
push 0x14
push 0x91
push 0xa
push 0x104
push 0x50010001
push str.View_All_Processes
push str.BUTTON
push 0
mov dword [0x4220d4], eax
call esi
mov dword [0x4234cc], eax
mov eax, dword [0x4220c0]
push eax
call fcn.00410450
push eax
mov dword [0x4227e4], eax
call fcn.004104a0
add esp, 8
push 0
push edi
push 0
push 0
push 0x78
push 0x1b8
push 0x80000000
push 0x80000000
push 0xcf0000
push str.Windows_Process_Manager
push 0x421024
push 0
call esi
mov ecx, dword [0x4220c8]
push 0
push ecx
push 0
push eax
push 0x1e
push 0x1a4
push 0xa
push 0xa
push 0x50810000
push 0x41d468
push str.Edit
push 0x200
mov dword [0x4220cc], eax
call esi
mov edx, dword [0x4220c8]
push 0
push edx
push 0
mov dword [0x4220c4], eax
mov eax, dword [0x4220cc]
push eax
push 0x14
push 0x64
push 0x32
push 0xa
push 0x50010001
push 0x41d758
push str.BUTTON
push 0
call esi
mov ecx, dword [0x4220c8]
mov edx, dword [0x4220cc]
push 0
push ecx
push 0
push edx
push 0x14
push 0x64
push 0x32
push 0x78
push 0x50010001
push 0x41d748
push str.BUTTON
push 0
mov dword [0x4220d0], eax
call esi
mov dword [0x4234c8], eax
call fcn.0040fef0
call fcn.00412330
mov eax, dword [0x4220c0]
push 0
push 0x1770
push 0
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [esp + 0x64]
mov edx, dword [0x4220c0]
push ecx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x4220c0]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push 0
push 0
push 0
lea ecx, [esp + 0x14]
push ecx
call esi
test eax, eax
je 0x412984
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
push ebx
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea edx, [esp + 0xc]
push edx
call edi
lea eax, [esp + 0xc]
push eax
call ebx
push 0
push 0
push 0
lea ecx, [esp + 0x18]
push ecx
call esi
test eax, eax
jne 0x412964
pop ebx
mov eax, dword [esp + 0x10]
pop edi
pop esi
add esp, 0x4c
ret 0x10