Function at 0x4318c0
Capabilities:
Contain obfuscated stackstrings
Hide graphical window
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
sub esp, 0xdc
mov eax, dword [0x43d040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [sym.imp.USER32.dll_DefWindowProcA]
push esi
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push 0
mov dword [ebp - 0x70], 0x30
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
call esi
push 0x7f00
push 0
mov dword [ebp - 0x58], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [ebp - 0x90], 0xbfa3c506
mov dword [ebp - 0x8c], 0x1da884c8
mov dword [ebp - 0x88], 0xb17616c
mov dword [ebp - 0x84], 0x13efda9a
movaps xmm1, xmmword [ebp - 0x90]
mov dword [ebp - 0x80], 0x1e1b2074
mov dword [ebp - 0x7c], 0xecc692a6
mov dword [ebp - 0x78], 0x2c061de6
mov dword [ebp - 0x74], 0x329fb587
movaps xmm2, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0xb0], xmm1
movaps xmmword [ebp - 0xa0], xmm2
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0xb0]
push 0x7f00
mov dword [ebp - 0x30], 0xd6d7ab53
mov dword [ebp - 0x2c], 0x79cde8bc
mov dword [ebp - 0x28], 0x45374c4c
mov dword [ebp - 0x24], 0x638aaef5
xorps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0x20], 0x1e1b4415
mov dword [ebp - 0x1c], 0xecc692a6
mov dword [ebp - 0x18], 0x2c061de6
mov dword [ebp - 0x14], 0x329fb587
xorps xmm2, xmmword [ebp - 0x20]
push 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
movaps xmmword [ebp - 0xb0], xmm1
movaps xmmword [ebp - 0xa0], xmm2
mov dword [ebp - 0x48], eax
call esi
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov eax, dword [0x44866c]
test eax, eax
je 0x431c19
push 0x4486a4
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
lea eax, [ebp - 0x18]
push eax
push dword [0x44866c]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x4486b0]
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov ecx, dword [0x4486ac]
push 0
push 0
push 0
push 0
push eax
push ecx
push edx
mov dword [ebp - 0x20], 0xb3a3c41d
mov dword [ebp - 0x1c], 0x79a989cc
mov dword [ebp - 0x18], 0x45374c4c
mov dword [ebp - 0x14], 0x638aaef5
movaps xmm1, xmmword [ebp - 0x20]
push esi
movaps xmmword [ebp - 0x20], xmm1
mov dword [0x448708], eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x80], 0xd6d7ab53
mov dword [ebp - 0x7c], 0x79cde8bc
mov dword [ebp - 0x78], 0x45374c4c
mov dword [ebp - 0x74], 0x638aaef5
xorps xmm1, xmmword [ebp - 0x80]
push 0x90000000
push eax
movaps xmmword [ebp - 0x20], xmm1
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x90], 0xbfa3c506
mov dword [ebp - 0x8c], 0x1da884c8
mov dword [ebp - 0x88], 0xb17616c
mov dword [ebp - 0x84], 0x13efda9a
movaps xmm1, xmmword [ebp - 0x90]
mov dword [ebp - 0x80], 0x1e1b2074
mov dword [ebp - 0x7c], 0xecc692a6
mov dword [ebp - 0x78], 0x2c061de6
mov dword [ebp - 0x74], 0x329fb587
movaps xmm2, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0xd0], xmm1
movaps xmmword [ebp - 0xc0], xmm2
push eax
mov dword [ebp - 0xb0], 0xd6d7ab53
mov dword [ebp - 0xac], 0x79cde8bc
mov dword [ebp - 0xa8], 0x45374c4c
mov dword [ebp - 0xa4], 0x638aaef5
xorps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0xa0], 0x1e1b4415
mov dword [ebp - 0x9c], 0xecc692a6
mov dword [ebp - 0x98], 0x2c061de6
mov dword [ebp - 0x94], 0x329fb587
xorps xmm2, xmmword [ebp - 0xa0]
push 0
mov dword [0x4486a4], esi
mov dword [0x4486a8], edx
mov dword [0x44870c], ecx
movaps xmmword [ebp - 0xd0], xmm1
movaps xmmword [ebp - 0xc0], xmm2
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x43a0c0
push eax
mov dword [0x44868c], eax
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov esi, dword [sym.imp.USER32.dll_SetWindowLongA]
push 0x10000000
push 0xfffffffffffffff0
push dword [0x44868c]
call esi
push 0x80800a0
push 0xffffffffffffffec
push dword [0x44868c]
call esi
push 2
push 0xff
push 0
push dword [0x44868c]
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 5
push dword [0x44868c]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x44868c]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.004331b4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3