doFindName doKill
Add(MainForm,2953706,126,126)
{
link(onCreate,10543187:doWork2,[])
}
Add(WinExec,4557846,224,133)
{
Param=" "
FileName="notepad.exe"
}
Add(EnumProcess,10923929,427,147)
{
Name="notepad.exe"
Point(doFindName)
Point(onFind)
link(onFind,10272101:doEvent1,[])
}
Add(Timer,12794496,280,147)
{
Interval=2000
link(onTimer,10923929:doFindName,[(352,153)(352,174)])
}
Add(Hub,10272101,497,154)
{
link(onEvent1,10923929:doKill,[(523,160)(523,125)(383,125)(383,167)])
link(onEvent2,10543187:doWork3,[(516,167)(516,197)(200,197)])
}
Add(HubEx,10543187,196,140)
{
link(onEvent,4557846:doShellExec,[])
}