Function at 0x401192
Capabilities:
Check for unmoving mouse cursor
Create thread
Extract resource via kernel32 functions
Get session user name
Hide graphical window

Disassembly:
push 0
call sub.kernel32.dll_GetModuleHandleA
mov dword [0x4073e8], eax
push eax
call fcn.00401ff5
push 0
push 0x401192
push 0
push 0x3e9
push dword [0x4073e8]
call sub.user32.dll_DialogBoxParamA
push eax
call sub.kernel32.dll_ExitProcess
push ebp
mov ebp, esp
add esp, 0xffffffbc
cmp dword [ebp + 0xc], 0x110
jne 0x4013d6
push 0x7d1
push dword [0x4073e8]
call sub.user32.dll_LoadIconA
push eax
push 1
push 0x80
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
push str.Seek_n_Destroy
push dword [ebp + 8]
call sub.user32.dll_SetWindowTextA
push esi
push 0xa
push 0x7d9
push dword [0x4073e8]
call sub.kernel32.dll_FindResourceA
push eax
push eax
push dword [0x4073e8]
call sub.kernel32.dll_SizeofResource
mov dword [0x407428], eax
pop eax
push eax
push dword [0x4073e8]
call sub.kernel32.dll_LoadResource
push eax
call sub.kernel32.dll_LockResource
mov esi, eax
mov eax, dword [0x407428]
add eax, 4
push eax
push 0x40
call sub.kernel32.dll_GlobalAlloc
mov dword [0x40742c], eax
mov ecx, dword [0x407428]
mov dword [eax], ecx
add eax, 4
mov edi, eax
rep movsb byte es:[edi], byte [esi]
pop esi
push dword [0x40742c]
call fcn.00402f59
push 0x3ed
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407430], eax
push 0x401d03
push 0xfffffffffffffffc
push eax
call sub.user32.dll_SetWindowLongA
mov dword [0x407480], eax
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407434], eax
push 0x401d69
push 0xfffffffffffffffc
push eax
call sub.user32.dll_SetWindowLongA
push 0x42e
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407438], eax
push 0x42f
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x40743c], eax
push 0x430
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407440], eax
push 0x438
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407444], eax
push 0x439
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407448], eax
push 0x43a
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x40744c], eax
push 0x442
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407450], eax
push 0x443
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407454], eax
push 0x444
push dword [ebp + 8]
call sub.user32.dll_GetDlgItem
mov dword [0x407458], eax
call sub.kernel32.dll_GetTickCount
and eax, 0xffff
or eax, 0xee00
mov dword [0x407712], eax
push 0x80000
push 0x3e8
push dword [ebp + 8]
call sub.user32.dll_AnimateWindow
push dword [ebp + 8]
pop dword [0x40745c]
push dword [ebp + 8]
call sub.user32.dll_GetDC
push eax
call sub.gdi32.dll_CreateCompatibleDC
mov dword [0x407460], eax
push dword [0x40746c]
push dword [0x407460]
call sub.gdi32.dll_SelectObject
push esp
push 0
push 0
push 0x4019b8
push 0
push 0
call sub.kernel32.dll_CreateThread
push 2
push eax
call sub.kernel32.dll_SetThreadPriority
push section..data
push 0x407484
call sub.advapi32.dll_GetUserNameA
push 0x407484
push 0x3ed
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
push dword [0x407430]
call sub.user32.dll_SetFocus
push 0xffffffffffffffff
push 0
push 0xb1
push 0x3ed
push dword [ebp + 8]
call sub.user32.dll_SendDlgItemMessageA
jmp 0x4019b2
cmp dword [ebp + 0xc], 0x133
jne 0x401463
push dword [ebp + 0x14]
call sub.user32.dll_GetDlgCtrlID
cmp ax, 0x3ed
jne 0x401425
push 2
push dword [ebp + 0x10]
call sub.gdi32.dll_SetBkMode
push 0x402a25
push dword [ebp + 0x10]
call sub.gdi32.dll_SetBkColor
push 0xdddddd
push dword [ebp + 0x10]
call sub.gdi32.dll_SetTextColor
push 5
call sub.gdi32.dll_GetStockObject
leave
ret 0x10
cmp ax, 0x3ee
jne 0x4019b2
push 2
push dword [ebp + 0x10]
call sub.gdi32.dll_SetBkMode
push 0x402a25
push dword [ebp + 0x10]
call sub.gdi32.dll_SetBkColor
push 0xdddddd
push dword [ebp + 0x10]
call sub.gdi32.dll_SetTextColor
push 5
call sub.gdi32.dll_GetStockObject
leave
ret 0x10
cmp dword [ebp + 0xc], 0x201
jne 0x401509
cmp dword [0x40741c], 0
je 0x401498
push 5
push dword [0x407440]
call sub.user32.dll_ShowWindow
push 0
push dword [0x40743c]
call sub.user32.dll_ShowWindow
jmp 0x4019b2
cmp dword [0x407420], 0
je 0x4014c0
push 5
push dword [0x40744c]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407448]
call sub.user32.dll_ShowWindow
jmp 0x4019b2
cmp dword [0x407424], 0
je 0x4014e8
push 5
push dword [0x407458]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407454]
call sub.user32.dll_ShowWindow
jmp 0x4019b2
mov dword [0x4073ec], 1
push dword [ebp + 8]
call sub.user32.dll_SetCapture
push 0x4073f0
call sub.user32.dll_GetCursorPos
jmp 0x4019b2
cmp dword [ebp + 0xc], 0x200
jne 0x4017a4
mov eax, dword [ebp + 0x14]
and eax, 0xffff
mov dword [0x407410], eax
mov eax, dword [ebp + 0x14]
shr eax, 0x10
mov dword [0x407414], eax
cmp dword [0x407410], 0x99
jb 0x401591
cmp dword [0x407410], 0xe6
ja 0x401591
cmp dword [0x407414], 0xbb
jb 0x401591
cmp dword [0x407414], 0xca
ja 0x401591
push 5
push dword [0x40743c]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407438]
call sub.user32.dll_ShowWindow
mov dword [0x40741c], 1
mov dword [0x407418], 1
jmp 0x4019b2
cmp dword [0x407410], 0x157
jb 0x4015f7
cmp dword [0x407410], 0x165
ja 0x4015f7
cmp dword [0x407414], 5
jb 0x4015f7
cmp dword [0x407414], 0x13
ja 0x4015f7
cmp dword [0x407420], 0
jne 0x4015de
push 5
push dword [0x407448]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407444]
call sub.user32.dll_ShowWindow
mov dword [0x407420], 1
mov dword [0x407418], 1
jmp 0x4019b2
cmp dword [0x407410], 0x169
jb 0x401654
cmp dword [0x407410], 0x176
ja 0x401654
cmp dword [0x407414], 5
jb 0x401654
cmp dword [0x407414], 0x13
ja 0x401654
push 5
push dword [0x407454]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407450]
call sub.user32.dll_ShowWindow
mov dword [0x407424], 1
mov dword [0x407418], 1
jmp 0x4019b2
cmp dword [0x407418], 0
je 0x401722
cmp dword [0x40741c], 0
je 0x40169d
push 5
push dword [0x407438]
call sub.user32.dll_ShowWindow
push 0
push dword [0x40743c]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407440]
call sub.user32.dll_ShowWindow
mov dword [0x40741c], 0
jmp 0x401713
cmp dword [0x407420], 0
je 0x4016d9
push 5
push dword [0x407444]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407448]
call sub.user32.dll_ShowWindow
push 0
push dword [0x40744c]
call sub.user32.dll_ShowWindow
mov dword [0x407420], 0
jmp 0x401713
cmp dword [0x407424], 0
je 0x401713
push 5
push dword [0x407450]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407454]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407458]
call sub.user32.dll_ShowWindow
mov dword [0x407424], 0
mov dword [0x407418], 0
jmp 0x4019b2
cmp dword [0x4073ec], 1
jne 0x4019b2
push 0x407400
push dword [ebp + 8]
call sub.user32.dll_GetWindowRect
push 0x4073f8
call sub.user32.dll_GetCursorPos
mov eax, dword [0x4073f8]
mov ecx, eax
sub eax, dword [0x4073f0]
mov dword [0x4073f0], ecx
add eax, dword [0x407400]
mov ebx, dword [0x4073fc]
mov ecx, ebx
sub ebx, dword [0x4073f4]
mov dword [0x4073f4], ecx
add ebx, dword [0x407404]
mov ecx, dword [0x407408]
sub ecx, dword [0x407400]
mov edx, dword [0x40740c]
sub edx, dword [0x407404]
push 1
push edx
push ecx
push ebx
push eax
push dword [ebp + 8]
call sub.user32.dll_MoveWindow
jmp 0x4019b2
cmp dword [ebp + 0xc], 0x202
jne 0x4018f2
cmp dword [0x40741c], 0
je 0x40186c
push 5
push dword [0x40743c]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407440]
call sub.user32.dll_ShowWindow
call sub.kernel32.dll_GetTickCount
and eax, 0xffff
or eax, 0xee00
mov dword [0x407712], eax
push 0x32
push 0x407484
push 0x3ed
push dword [ebp + 8]
call sub.user32.dll_GetDlgItemTextA
or eax, eax
jne 0x401818
push 0
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
jmp 0x4019b2
cmp eax, 3
jae 0x401834
push str.More_chars__
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
jmp 0x4019b2
cmp eax, 0x1f
jbe 0x401850
push str.Less_chars__
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
jmp 0x4019b2
push 0x12c
push 0x4074b6
call sub.kernel32.dll_RtlZeroMemory
push dword [ebp + 8]
call fcn.00401000
jmp 0x4019b2
cmp dword [0x407420], 0
je 0x4018a8
push 6
push dword [ebp + 8]
call sub.user32.dll_ShowWindow
push 0xc8
call sub.kernel32.dll_Sleep
push 5
push dword [0x407444]
call sub.user32.dll_ShowWindow
push 0
push dword [0x40744c]
call sub.user32.dll_ShowWindow
jmp 0x4019b2
cmp dword [0x407424], 0
je 0x4018de
push 0
push 0
push 0x10
push dword [ebp + 8]
call sub.user32.dll_SendMessageA
push 5
push dword [0x407454]
call sub.user32.dll_ShowWindow
push 0
push dword [0x407458]
call sub.user32.dll_ShowWindow
jmp 0x4019b2
mov dword [0x4073ec], 0
call sub.user32.dll_ReleaseCapture
jmp 0x4019b2
cmp dword [ebp + 0xc], 0x111
jne 0x401989
mov eax, dword [ebp + 0x10]
cmp ax, 0x3ed
jne 0x4019b2
shr eax, 0x10
cmp ax, 0x300
jne 0x401987
push 0x32
push 0x407484
push 0x3ed
push dword [ebp + 8]
call sub.user32.dll_GetDlgItemTextA
or eax, eax
jne 0x40193e
push 0
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
jmp 0x401987
cmp eax, 3
jae 0x401957
push str.More_chars__
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
jmp 0x401987
cmp eax, 0x1f
jbe 0x401970
push str.Less_chars__
push 0x3ee
push dword [ebp + 8]
call sub.user32.dll_SetDlgItemTextA
jmp 0x401987
push 0x12c
push 0x4074b6
call sub.kernel32.dll_RtlZeroMemory
push dword [ebp + 8]
call fcn.00401000
jmp 0x4019b2
cmp dword [ebp + 0xc], 0x10
jne 0x4019b2
push 0x90000
push 0x3e8
push dword [ebp + 8]
call sub.user32.dll_AnimateWindow
push 0
call fcn.00402f59
push 0
push dword [ebp + 8]
call sub.user32.dll_EndDialog
xor eax, eax
leave
ret 0x10