Function at 0x41f134
Capabilities:
Create process on windows
Enumerate gui resources
Hide graphical window
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffa5c
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x59c], edx
mov dword [ebp - 0x5a0], edx
mov dword [ebp - 0x5a4], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x41f3c9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x426088
call fcn.0041f084
xor edx, edx
push ebp
push 0x41f395
push dword fs:[edx]
mov dword fs:[edx], esp
push 0x426078
push 0x426088
push 0
push 0
push 0x80
push 0xffffffffffffffff
push 0
push 0
push 0x41f3d8
lea ecx, [ebp - 0x5a4]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x38]
xor edx, edx
mov ebx, dword [eax]
call dword [ebx + 0xc]
mov eax, dword [ebp - 0x5a4]
lea edx, [ebp - 0x5a0]
call fcn.00407418
mov ecx, dword [ebp - 0x5a0]
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x34]
lea eax, [ebp - 0x59c]
call fcn.00403bc4
mov eax, dword [ebp - 0x59c]
call fcn.00403d3c
push eax
call sub.kernel32.dll_CreateProcessA
push 0xffffffffffffffff
mov eax, dword [0x426078]
push eax
call sub.user32.dll_WaitForInputIdle
mov eax, dword [0x42607c]
push eax
call sub.kernel32.dll_SuspendThread
xor eax, eax
mov dword [0x4260cc], eax
mov eax, dword [0x4244d4]
push eax
push 0x41f044
call sub.user32.dll_EnumWindows
mov eax, dword [0x42607c]
push eax
call sub.kernel32.dll_ResumeThread
push 0xffffffffffffffff
mov eax, dword [0x426078]
push eax
call sub.user32.dll_WaitForInputIdle
cmp dword [0x4260cc], 0
je 0x41f38b
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_GetMenu
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x30], ebx
test ebx, ebx
jne 0x41f2e4
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_SetFocus
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_SetForegroundWindow
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_SetActiveWindow
push 0
push 0
push 0x1b
push 0x1b
call sub.user32.dll_keybd_event
push 0
push 2
push 0x1b
push 0x1b
call sub.user32.dll_keybd_event
push 0
push 0
push 0xd
push 0xd
call sub.user32.dll_keybd_event
push 0
push 2
push 0xd
push 0xd
call sub.user32.dll_keybd_event
push 0xffffffffffffffff
mov eax, dword [0x426078]
push eax
call sub.user32.dll_WaitForInputIdle
mov ebx, 1
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_GetMenu
mov edx, dword [ebp - 4]
mov dword [edx + 0x30], eax
inc ebx
push 0xa
call sub.kernel32.dll_Sleep
mov eax, dword [ebp - 4]
cmp dword [eax + 0x30], 0
jne 0x41f2e4
cmp ebx, 0x32
jle 0x41f2bd
push ebp
call fcn.0041f0ac
pop ecx
mov eax, dword [0x426024]
push eax
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_SetParent
mov edx, dword [ebp - 4]
mov dword [edx + 0x28], eax
push 0x42605c
mov eax, dword [0x426024]
push eax
call sub.user32.dll_GetClientRect
push 0x10
mov eax, dword [0x426068]
push eax
mov eax, dword [0x426064]
push eax
push 0
push 0
push 1
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_SetWindowPos
push 4
mov eax, dword [0x4260cc]
push eax
call sub.user32.dll_ShowWindow
mov cl, 1
mov dl, 1
mov eax, dword [0x41e444]
call fcn.00410e58
mov ebx, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x24], ebx
mov eax, ebx
mov edx, dword [ebp - 4]
mov dword [eax + 0x4c], edx
mov dword [eax + 0x48], 0x42082c
mov edx, dword [ebp - 4]
mov dword [eax + 0x44], edx
mov dword [eax + 0x40], 0x41f610
lea edi, [eax + 0x30]
mov esi, 0x426078
mov ecx, 4
rep movsd dword es:[edi], dword [esi]
call fcn.00410f7c
mov eax, dword [ebp - 4]
mov byte [eax + 0x50], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x41f3ab
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x41f3d0
lea eax, [ebp - 0x5a4]
mov edx, 3
call fcn.0040391c
ret