Function at 0x4016bd
Capabilities:
Contain obfuscated stackstrings
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push edi
sub esp, 0xc4
mov dword [ebp - 0x2a], 0x67687563
mov dword [ebp - 0x26], 0x75626875
mov word [ebp - 0x22], 0x68
lea edx, [ebp - 0x54]
mov eax, 0
mov ecx, 0xa
mov edi, edx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x50], sym._WindowProc_16
mov eax, dword [ebp + 8]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x2a]
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x54]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_RegisterClassA]
call eax
sub esp, 4
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x20], 0
mov dword [esp + 0x1c], pe_nt_image_headers32
mov dword [esp + 0x18], pe_nt_image_headers32
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x80000000
mov dword [esp + 8], 0x405048
lea eax, [ebp - 0x2a]
mov dword [esp + 4], eax
mov dword [esp], 0x80028
mov eax, dword [sym.imp.USER32.dll_CreateWindowExA]
call eax
sub esp, 0x30
mov dword [ebp - 0x14], eax
mov dword [esp + 0x2c], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x24], 0
mov eax, dword [ebp - 0x14]
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], pe_nt_image_headers32
mov dword [esp + 0x18], pe_nt_image_headers32
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x50000003
mov dword [esp + 8], str.cuh_guh_buh__
mov dword [esp + 4], str.STATIC
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_CreateWindowExA]
call eax
sub esp, 0x30
mov dword [ebp - 0x18], eax
mov dword [esp + 0xc], 2
mov dword [esp + 8], 0xc8
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
call eax
sub esp, 0x10
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
call eax
sub esp, 4
mov dword [esp + 0x14], 0x8000
mov dword [esp + 0x10], pe_nt_image_headers32
mov dword [esp + 0xc], pe_nt_image_headers32
mov dword [esp + 8], 1
mov dword [esp + 4], 1
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_LoadImageA]
call eax
sub esp, 0x18
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0x172
mov eax, dword [ebp - 0x18]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_SendMessageA]
call eax
sub esp, 0x10
cmp dword [ebp - 0x14], 0
jne 0x401887
mov eax, 0
jmp 0x401a7c
mov dword [esp + 0x18], 3
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_SetWindowPos]
call eax
sub esp, 0x1c
mov eax, dword [ebp + 0x14]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_ShowWindow]
call eax
sub esp, 8
lea eax, [ebp - 0x64]
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_GetWindowRect]
call eax
sub esp, 8
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x10], eax
mov ecx, 0
mov eax, 0x1c
and eax, 0xfffffffc
mov edx, eax
mov eax, 0
mov dword [ebp + eax - 0x80], ecx
add eax, 4
cmp eax, edx
jb 0x401915
jmp 0x401a6b
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
lea eax, [ebp - 0x80]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_PeekMessageA]
call eax
sub esp, 0x14
test eax, eax
je 0x40197e
lea eax, [ebp - 0x80]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_TranslateMessage]
call eax
sub esp, 4
lea eax, [ebp - 0x80]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_DispatchMessageA]
call eax
sub esp, 4
jmp 0x401a6b
lea eax, [ebp - 0x88]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_GetCursorPos]
call eax
sub esp, 4
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x20], eax
fild dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
sub eax, 0x4b
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x90]
fld qword [0x405060]
fmulp st(1)
faddp st(1)
fnstcw word [ebp - 0x8a]
movzx eax, word [ebp - 0x8a]
or ah, 0xc
mov word [ebp - 0x8c], ax
fldcw word [ebp - 0x8c]
fistp dword [ebp - 0xc]
fldcw word [ebp - 0x8a]
fild dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
sub eax, 0x32
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x90], eax
fild dword [ebp - 0x90]
fld qword [0x405060]
fmulp st(1)
faddp st(1)
fldcw word [ebp - 0x8c]
fistp dword [ebp - 0x10]
fldcw word [ebp - 0x8a]
mov dword [esp + 0x18], 0x15
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov eax, dword [ebp - 0x10]
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_SetWindowPos]
call eax
sub esp, 0x1c
mov dword [esp], 0x14
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
call eax
sub esp, 4
mov eax, dword [ebp - 0x7c]
cmp eax, 0x12
jne 0x401925
mov eax, 0
mov edi, dword [ebp - 4]
leave
ret 0x10