Function at 0x432070
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Hide graphical window
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0xa8
mov eax, dword [0x49c00c]
xor eax, esp
mov dword [esp + 0xa4], eax
cmp dword [0x4a6d68], 0x10
mov dl, 0x2d
push esi
push edi
mov esi, 0x4a6d54
mov byte [esp + 8], 0xb
mov edi, esi
mov byte [esp + 0x10], dl
cmovae edi, dword [0x4a6d54]
mov al, 0x64
xor al, dl
mov byte [esp + 0x13], 0
mov byte [esp + 0x11], al
mov cl, 0x69
xor cl, dl
mov byte [esp + 0xf], 0
mov al, 0x58
mov byte [esp + 0x12], cl
xor al, byte [esp + 8]
mov dh, 0x4d
xor dh, byte [esp + 8]
mov cl, 0x5f
mov byte [esp + 0xa], al
mov dl, 0x47
mov al, byte [esp + 8]
mov ah, 0x4c
mov ch, 0x45
mov byte [esp + 0x13], 0
xor cl, al
mov byte [esp + 9], dh
xor dl, al
mov byte [esp + 0xb], cl
xor ah, al
mov byte [esp + 0xc], dl
xor ch, al
mov byte [esp + 0xd], ah
mov byte [esp + 0xe], ch
mov byte [esp + 0xf], 0
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], 0
mov byte [esp + 0x68], 0
test dh, dh
jne 0x432125
xor ecx, ecx
jmp 0x432139
lea ecx, [esp + 9]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432130
sub ecx, edx
push ecx
lea eax, [esp + 0xd]
push eax
lea ecx, [esp + 0x70]
call fcn.004049f0
cmp dword [esp + 0x7c], 0x10
lea ecx, [esp + 0x11]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0x6c]
cmovae eax, dword [esp + 0x6c]
push 0x15
push 0x4a5798
push 0x490ddc
push ecx
push eax
call edi
mov eax, dword [esp + 0x7c]
cmp eax, 0x10
jb 0x432189
inc eax
lea ecx, [esp + 0x68]
push eax
push dword [esp + 0x6c]
call fcn.00405110
cmp dword [0x4a6d68], 0x10
mov ch, 0x24
mov al, 0x74
mov byte [esp + 8], 0x45
cmovae esi, dword [0x4a6d54]
mov dl, 0x57
xor al, ch
mov byte [esp + 0x10], ch
mov ah, dl
mov byte [esp + 0x11], al
xor dl, ch
mov byte [esp + 0x15], 0
xor ah, ch
mov byte [esp + 0x13], dl
mov cl, 0x45
mov byte [esp + 0x14], ah
xor cl, ch
mov byte [esp + 0xf], 0
mov al, 0x16
mov byte [esp + 0x12], cl
xor al, byte [esp + 8]
mov dh, 3
xor dh, byte [esp + 8]
mov cl, 0x11
mov byte [esp + 0xa], al
mov dl, 9
mov al, byte [esp + 8]
mov ah, 2
mov ch, 0xb
mov byte [esp + 0x15], 0
xor cl, al
mov byte [esp + 9], dh
xor dl, al
mov byte [esp + 0xb], cl
xor ah, al
mov byte [esp + 0xc], dl
xor ch, al
mov byte [esp + 0xd], ah
mov byte [esp + 0xe], ch
mov byte [esp + 0xf], 0
mov dword [esp + 0x7c], 0xf
mov dword [esp + 0x78], 0
mov byte [esp + 0x68], 0
test dh, dh
jne 0x43222b
xor ecx, ecx
jmp 0x43223b
lea ecx, [esp + 9]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x432232
sub ecx, edx
push ecx
lea eax, [esp + 0xd]
push eax
lea ecx, [esp + 0x70]
call fcn.004049f0
cmp dword [esp + 0x7c], 0x10
lea ecx, [esp + 0x11]
push esi
push 0x15
push 0x4a57b0
push 0x490ddc
lea eax, [esp + 0x78]
cmovae eax, dword [esp + 0x78]
push ecx
push eax
call edi
mov eax, dword [esp + 0x7c]
cmp eax, 0x10
jb 0x432285
inc eax
lea ecx, [esp + 0x68]
push eax
push dword [esp + 0x6c]
call fcn.00405110
mov cl, 0x19
mov dword [esp + 0x68], 0x584d4a19
mov dword [esp + 0x6c], 0x5e394d4b
xor eax, eax
mov dword [esp + 0x70], 0x395c5458
mov word [esp + 0x74], 0x2734
mov byte [esp + 0x76], 0
nop dword [eax]
xor byte [esp + eax + 0x69], cl
inc eax
cmp eax, 0xd
jae 0x4322c0
mov cl, byte [esp + 0x68]
jmp 0x4322b0
cmp byte [esp + 0x69], 0
mov byte [esp + 0x76], 0
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
jne 0x4322e5
xor ecx, ecx
jmp 0x4322f9
lea ecx, [esp + 0x69]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4322f0
sub ecx, edx
push ecx
lea eax, [esp + 0x6d]
push eax
lea ecx, [esp + 0x20]
call fcn.004049f0
sub esp, 0x18
lea eax, [esp + 0x30]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00404af0
mov ecx, 0x4a6da0
call fcn.00433530
mov eax, dword [esp + 0x2c]
cmp eax, 0x10
jb 0x43234e
inc eax
lea ecx, [esp + 0x18]
push eax
push dword [esp + 0x1c]
call fcn.00405110
movaps xmm0, xmmword [0x491cd0]
xor ecx, ecx
movups xmmword [esp + 0x68], xmm0
mov dword [esp + 0x78], 0x69622263
mov word [esp + 0x7c], 0x78
nop dword [eax + eax]
mov al, byte [esp + 0x68]
xor byte [esp + ecx + 0x69], al
inc ecx
cmp ecx, 0x14
jb 0x432370
cmp byte [esp + 0x69], 0
mov byte [esp + 0x7d], 0
mov dword [esp + 0x2c], 0xf
mov dword [esp + 0x28], 0
mov byte [esp + 0x18], 0
jne 0x4323a3
xor ecx, ecx
jmp 0x4323b9
lea ecx, [esp + 0x69]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4323b0
sub ecx, edx
push ecx
lea eax, [esp + 0x6d]
push eax
lea ecx, [esp + 0x20]
call fcn.004049f0
sub esp, 0x18
lea eax, [esp + 0x30]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00404af0
mov ecx, 0x4a81a0
call fcn.00433530
mov eax, dword [esp + 0x2c]
cmp eax, 0x10
jb 0x43240e
inc eax
lea ecx, [esp + 0x18]
push eax
push dword [esp + 0x1c]
call fcn.00405110
push ecx
call fcn.004330e0
push 1
call fcn.0043eec7
add esp, 4
mov dword [0x4a5794], eax
mov dword [esp + 0x38], 0x30
mov dword [esp + 0x3c], 0x40
mov dword [esp + 0x40], 0x432a20
push 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x4c], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
cmp dword [0x4a5964], 0x10
xorps xmm0, xmm0
mov dword [esp + 0x4c], eax
mov eax, 0x4a5950
cmovae eax, dword [0x4a5950]
mov dword [esp + 0x60], eax
lea eax, [esp + 0x38]
push eax
movups xmmword [esp + 0x54], xmm0
mov dword [esp + 0x68], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
cmp dword [0x4a5964], 0x10
mov eax, 0x4a5950
push 0
push dword [esp + 0x50]
cmovae eax, dword [0x4a5950]
push 0
push 0
push 0xe4
push 0x138
push 0x64
push 0x64
push closesocket
push eax
push dword [esp + 0x88]
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
mov edi, eax
mov dword [esp + 0x10], edi
mov dword [0x4a574c], edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [esp + 0x68]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x74]
sub eax, dword [esp + 0x6c]
sub eax, 0xe4
cdq
push 1
sub eax, edx
sar eax, 1
push 0xe4
push 0x138
push eax
mov eax, dword [esp + 0x80]
sub eax, dword [esp + 0x78]
sub eax, 0x138
cdq
sub eax, edx
sar eax, 1
push eax
push edi
call dword [sym.imp.USER32.dll_MoveWindow]
mov ecx, edi
call fcn.00432960
test al, al
jne 0x43258b
mov ecx, dword [0x4a5788]
test ecx, ecx
je 0x432548
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4a5788], 0
mov ecx, dword [0x4a578c]
test ecx, ecx
je 0x432562
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4a578c], 0
push dword [esp + 0x4c]
push dword [esp + 0x64]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov eax, 1
pop edi
pop esi
mov ecx, dword [esp + 0xa4]
xor ecx, esp
call fcn.0043eeb1
mov esp, ebp
pop ebp
ret 0x10
push 0xa
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
call fcn.0040a4a0
mov eax, dword [0x4a5724]
or dword [eax + 8], 3
call fcn.0041f6f0
mov ecx, edi
call fcn.00427680
mov ecx, dword [0x4a5788]
mov eax, dword [0x4a5724]
push ecx
mov dword [0x4a572c], ecx
or dword [eax + 0xc], 8
mov dword [eax + 0xc0], str.imgui_impl_dx9
mov eax, dword [ecx]
call dword [eax + 4]
xorps xmm0, xmm0
mov dword [esp + 0x98], 0
movaps xmmword [esp + 0x80], xmm0
movq qword [esp + 0x90], xmm0
psrldq xmm0, 4
movd eax, xmm0
cmp eax, 0x12
je 0x432888
mov edi, dword [sym.imp.USER32.dll_PeekMessageA]
push 1
push 0
push 0
push 0
lea eax, [esp + 0x90]
push eax
call edi
test eax, eax
je 0x432648
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [esp + 0x80]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x432876
cmp dword [0x4a5734], 0
jne 0x43265f
cmp dword [0x4a572c], 0
je 0x43265f
call fcn.00427520
call fcn.00427c10
call fcn.0040b560
mov ecx, dword [0x4a5724]
mov dword [esp + 8], 0x439c0000
mov eax, dword [esp + 8]
mov dword [esp + 0xc], 0x43640000
or dword [ecx + 0x1af0], 2
or dword [ecx + 0x1af0], 1
mov dword [ecx + 0x1b10], eax
mov eax, dword [esp + 0xc]
mov dword [ecx + 0x1b14], eax
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x30]
mov dword [ecx + 0x1b00], eax
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x34]
mov dword [ecx + 0x1b04], eax
mov dword [esp + 0x68], 0
mov eax, dword [esp + 0x68]
mov dword [ecx + 0x1b08], eax
mov dword [ecx + 0x1af8], 1
mov dword [ecx + 0x1af4], 1
mov dword [esp + 0x6c], 0
mov eax, dword [esp + 0x6c]
mov dword [ecx + 0x1b0c], eax
mov ecx, 0x4a5950
cmp dword [0x4a5964], 0x10
push 0x126
cmovae ecx, dword [0x4a5950]
call fcn.0040fb90
add esp, 4
call fcn.00431fd0
call fcn.00439bf0
call fcn.00411ab0
call fcn.0040cb60
mov eax, dword [0x4a5788]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4a5788]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x4a5788]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
movss xmm1, dword [0x491450]
movss xmm0, dword [0x490dac]
mulss xmm0, xmm1
push 0
push ecx
mov edx, dword [0x4a5788]
cvttss2si eax, xmm0
mov dword [esp], 0x3f800000
mov esi, dword [edx]
movss xmm0, dword [0x490db8]
mulss xmm0, xmm1
movzx ecx, al
cvttss2si eax, xmm0
movss xmm0, dword [0x490db0]
shl eax, 8
or ecx, eax
mulss xmm0, xmm1
shl ecx, 8
cvttss2si eax, xmm0
movss xmm0, dword [0x490db4]
movzx eax, al
mulss xmm0, xmm1
or ecx, eax
shl ecx, 8
cvttss2si eax, xmm0
movzx eax, al
or ecx, eax
push ecx
push 3
push 0
push 0
push edx
call dword [esi + 0xac]
mov eax, dword [0x4a5788]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x432827
call fcn.0040ce10
mov ecx, dword [0x4a5724]
xor eax, eax
add ecx, 0x1cdc
cmp byte [ecx], al
cmove ecx, eax
call fcn.00427030
mov eax, dword [0x4a5788]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [0x4a5788]
push 0
push 0
push 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
cmp eax, 0x88760868
jne 0x432876
mov eax, dword [0x4a5788]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x432876
call fcn.00427610
mov eax, dword [0x4a5788]
push 0x4a5750
push eax
mov ecx, dword [eax]
call dword [ecx + 0x40]
cmp dword [0x4a572c], 0
je 0x432876
call fcn.00427520
cmp dword [esp + 0x84], 0x12
jne 0x432611
mov edi, dword [esp + 0x10]
call fcn.00427610
mov ecx, dword [0x4a572c]
test ecx, ecx
je 0x4328a7
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4a572c], 0
mov esi, dword [0x4a5724]
mov ecx, esi
mov dword [0x4a5748], 0
call fcn.0040c120
mov eax, dword [0x4a5724]
xor ecx, ecx
cmp eax, esi
cmove eax, ecx
mov dword [0x4a5724], eax
test esi, esi
je 0x4328f2
mov ecx, esi
call fcn.00417d80
mov eax, dword [0x4a5724]
test eax, eax
je 0x4328e9
dec dword [eax + 0x374]
push esi
call fcn.0044aa0f
add esp, 4
mov ecx, dword [0x4a5788]
test ecx, ecx
je 0x43290c
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4a5788], 0
mov ecx, dword [0x4a578c]
test ecx, ecx
je 0x432926
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x4a578c], 0
push edi
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [esp + 0x4c]
push dword [esp + 0x64]
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov ecx, dword [esp + 0xac]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.0043eeb1
mov esp, ebp
pop ebp
ret 0x10