Function at 0x402080
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push esi
jmp 0x40286d
mov dword [ebp - 0x48], 0x30
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x40], 0x4043a0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x34], eax
push 0x65
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x30], eax
push 0x7f00
push 0
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], str.SOHWALL
push 0x66
mov edx, dword [ebp - 0x34]
push edx
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
movzx ecx, ax
test ecx, ecx
jne 0x402908
push 0
push 0x4282b0
push str.Call_to_RegisterClassEx_failed_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x40438b
mov edx, dword [ebp + 8]
mov dword [0x42a6ac], edx
push 0
call fcn.00402060
add esp, 4
push eax
call dword [sym.imp.MSVCR90.dll_srand]
add esp, 4
jmp 0x40310b
push 0
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x10], eax
push 1
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov dword [ebp - 0x18], eax
push 0
mov eax, dword [ebp + 8]
push eax
push 0
push 0
push 0x126
push 0x12c
mov esi, dword [ebp - 0x18]
shr esi, 1
call dword [sym.imp.MSVCR90.dll_rand]
mov ecx, dword [ebp - 0x18]
shr ecx, 1
xor edx, edx
div ecx
sub esi, edx
push esi
mov esi, dword [ebp - 0x10]
shr esi, 1
call dword [sym.imp.MSVCR90.dll_rand]
mov ecx, dword [ebp - 0x10]
shr ecx, 1
xor edx, edx
div ecx
sub esi, edx
push esi
push 0x80000000
push str._SOH__Wallhack___v3__
push str.SOHWALL
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov dword [ebp - 0xc], eax
push 0x68
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.USER32.dll_LoadBitmapA]
mov dword [0x42a5a4], eax
push 0x69
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.USER32.dll_LoadBitmapA]
mov dword [ebp - 4], eax
mov dword [ebp - 0x14], 0xff
mov ecx, dword [ebp - 0x14]
push ecx
mov edx, dword [ebp - 4]
push edx
call fcn.00405cc0
add esp, 8
mov dword [ebp - 8], eax
push 1
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_SetWindowRgn]
cmp dword [ebp - 0xc], 0
jne 0x4031eb
push 0
push str.Win32_Guided_Tour
push str.Call_to_CreateWindow_failed_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
jmp 0x40438b
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp - 0xc]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x7d0
push fcn.004054d0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00406e50
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00418c90
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00419480
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00419d60
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.0041a610
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.0041aef0
call fcn.004017f0
add esp, 8
push 0x7d0
push int.0041b6e0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00420510
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00420d00
call fcn.004017f0
add esp, 8
jmp 0x403a9d
push 0x7d0
push fcn.00421bb0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.004223a0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00422b90
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00423380
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00423b70
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.004245d0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00424dc0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.004257c0
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00426200
call fcn.004017f0
add esp, 8
push 0x7d0
push fcn.00426ac0
call fcn.004017f0
add esp, 8
push 0x7d0
push section..text
call fcn.004017f0
add esp, 8
jmp 0x404349
push 0
push 0
push 0
push 0x41bef0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
lea edx, [ebp - 0x64]
push edx
call dword [sym.imp.USER32.dll_GetMessageA]
test eax, eax
je 0x404388
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [ebp - 0x64]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x40435e
mov eax, dword [ebp - 0x5c]
pop esi
mov esp, ebp
pop ebp
ret 0x10