Function at 0x835820
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x190
push ebx
push esi
push edi
push 0x8b496c
call fcn.008414d0
add esp, 4
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x74], 0x30
push ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [ebp + 8]
push 0x101
push edi
mov dword [ebp - 0x60], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 3
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ebx
call fcn.0084a750
mov eax, dword [ebp + 0x10]
push eax
push 0x8d6230
call fcn.00841c69
add esp, 0xc
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x6c], 0x835590
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x8358bb
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov dword [0x8d7780], edi
call fcn.0040dae0
push esi
push esi
call dword [0x8d78cc]
test eax, eax
je 0x835f1f
fld qword [0x893578]
fld qword [0x893578]
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x89a478]
fsub st(1)
fxch st(1)
fmul qword [0x89a470]
fadd qword [0x89a468]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x89a460]
fnstsw ax
test ah, 0x41
jne 0x83591b
fld st(0)
fmul qword [0x89a458]
fsubp st(2)
fadd qword [0x89a450]
fcom qword [0x89a448]
fnstsw ax
test ah, 1
jne 0x8358e2
fxch st(1)
fst qword [ebp - 0x28]
fxch st(1)
fstp st(0)
fcomp qword [0x893578]
fnstsw ax
test ah, 1
je 0x835970
and cl, byte [ebx + 0x1f]
dec eax
inc ebp
and byte [ebp + 0x28], cl
xor eax, 0x5f43483c
xor dword [eax + 0x52], ebx
jo 0x835999
outsd dx, dword [esi]
push ecx
inc ecx
jp 0x8359b3
inc edi
sub edi, dword [0x453d6874]
xor dword [0x773a377c], edi
arpl cx, bp
xchg ecx, eax
add eax, 0x45c70000
invalid
mov dword [ebp - 0x10], 0x835944
mov dword [ebp - 0x14], 0x83594c
xor eax, eax
mov byte [ebp + eax - 0x190], al
inc eax
cmp eax, 0x100
jb 0x835980
fld qword [ebp - 0x28]
mov byte [ebp + 8], 0
mov eax, 0xff
add byte [eax], al
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp + 0x10], eax
jmp 0x8359a7
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, 1
cmp eax, ebx
jbe 0x8359bb
lea ebx, [ebx + ebx + 1]
cmp ebx, eax
jb 0x8359b3
cmp edi, 3
ja case.default.0x8359c0
jmp dword [edi*4 + 0x836030]
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x190]
jmp 0x835a3c
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x190]
shr eax, 8
jmp 0x835a3c
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x190]
shr eax, 0x10
jmp 0x835a3c
fld st(0)
and esi, 0xff
call fcn.008416e4
mov cl, byte [ebp + esi - 0x190]
shr eax, 0x18
jmp 0x835a3c
mov edx, dword [ebp - 0x14]
and esi, 0xff
mov cl, byte [edx + edi - 4]
mov al, byte [ebp + esi - 0x190]
add cl, al
inc edi
cmp edi, 0x23
mov byte [ebp + 8], cl
jb 0x835a4f
xor edi, edi
add cl, 0x23
mov byte [ebp + 8], cl
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x24], eax
jbe 0x835a6f
mov eax, edx
xor edx, edx
div dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, edx
jb 0x8359bb
je 0x835aaa
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + edx - 0x190]
mov bl, byte [ebp + ecx - 0x190]
lea edx, [ebp + ecx - 0x190]
mov cl, byte [eax]
xor bl, cl
mov byte [edx], bl
mov cl, bl
mov bl, byte [eax]
xor bl, cl
mov byte [eax], bl
mov cl, byte [edx]
mov al, bl
xor cl, al
mov byte [edx], cl
mov eax, dword [ebp + 0x10]
dec eax
mov dword [ebp + 0x10], eax
jne 0x8359a5
mov dl, byte [ebp - 0x189]
and esi, 0xff
mov byte [ebp - 0x18], dl
mov bl, byte [ebp - 0x18d]
mov al, byte [ebp + esi - 0x190]
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
xor eax, eax
mov al, byte [esi]
mov dl, byte [esi + 1]
add al, 6
sub dl, 0x3e
shl al, 4
or al, dl
mov cl, byte [ebp - 0x18b]
mov byte [ebp - 0x10], al
mov eax, dword [ebp - 0x20]
and eax, 0xff
fstp st(0)
mov dl, byte [ebp + eax - 0x190]
lea edi, [ebp + eax - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 0x18f]
mov eax, edx
and eax, 0xff
mov al, byte [ebp + eax - 0x190]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
mov edi, dword [ebp - 0xc]
and edx, 0xff
xor ebx, ebx
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov dl, byte [edx]
mov bl, byte [ebp + ebx - 0x190]
add edx, edi
and edx, 0xff
xor bl, byte [ebp + edx - 0x190]
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x20], dl
xor bl, dl
xor edx, edx
mov byte [ebp - 0x18], bl
mov dl, byte [esi + 2]
mov bl, byte [esi + 3]
add dl, 6
sub bl, 0x3e
shl dl, 4
or bl, dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov byte [ebp - 0x10], bl
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
mov dl, byte [ebp + 0x10]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0xc]
add ebx, edx
mov dl, byte [ebp + edi - 0x190]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x190]
mov bl, byte [ebp - 0x10]
mov byte [ebp - 0x20], bl
xor dl, bl
mov byte [ebp - 0x18], dl
movsx dx, dl
mov word [ebp - 0x30], dx
mov bl, byte [esi + 5]
xor edx, edx
sub bl, 0x3e
mov dl, byte [esi + 4]
add dl, 6
shl dl, 4
or bl, dl
mov edx, dword [ebp - 0x20]
mov byte [ebp - 0x10], bl
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
mov dl, byte [ebp + 0x10]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0xc]
add ebx, edx
mov dl, byte [ebp + edi - 0x190]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x190]
mov bl, byte [ebp - 0x10]
xor dl, bl
mov byte [ebp - 0x18], dl
movsx dx, dl
mov word [ebp - 0x2e], dx
mov edx, dword [ebp - 0x10]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
add al, bl
mov bl, byte [ebp + 0x10]
mov byte [ebp - 0x1c], al
inc bl
mov eax, dword [ebp - 0x1c]
mov byte [ebp + 0x10], bl
and eax, 0xff
mov dl, byte [ebp + eax - 0x190]
lea eax, [ebp + eax - 0x190]
mov byte [edi], dl
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [eax], bl
mov ebx, dword [ebp + 0x10]
and ebx, 0xff
mov dword [ebp - 4], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
mov bl, byte [esi + 6]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov dl, byte [esi + 7]
mov esi, dword [ebp - 0xc]
add bl, 6
sub dl, 0x3e
mov al, byte [eax]
shl bl, 4
or dl, bl
mov bl, byte [ebp + esi - 0x190]
mov esi, dword [ebp - 4]
add bl, cl
and ebx, 0xff
mov word [ebp - 0x2a], 0
mov cl, byte [ebp + ebx - 0x190]
mov bl, byte [edi]
mov edi, dword [ebp - 0xc]
add ecx, ebx
mov bl, byte [esi]
add eax, edi
add ecx, ebx
xor ebx, ebx
and ecx, 0xff
and eax, 0xff
mov esi, dword [ebp - 0x44]
mov bl, byte [ebp + ecx - 0x190]
mov cl, byte [ebp + ebx - 0x190]
xor dl, cl
mov cl, byte [ebp + eax - 0x190]
xor dl, cl
xor ebx, ebx
movsx cx, dl
mov word [ebp - 0x2c], cx
lea edx, [ebp - 0x30]
push edx
push 0x8d6230
call fcn.00841934
add esp, 8
test eax, eax
jne 0x835f1f
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebp - 0x4c]
push eax
push ebx
push ebx
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
push esi
push ecx
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
cmp eax, ebx
mov dword [0x8d777c], eax
jne 0x835f59
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea edx, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
call edi
mov edx, dword [ebp - 0x38]
push 1
sub eax, edx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
call edi
mov ecx, dword [ebp - 0x34]
push 5
sub eax, ecx
push ebx
cdq
sub eax, edx
push ebx
sar eax, 1
push eax
mov eax, dword [0x8d777c]
push esi
push ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp + 0x14]
mov edx, dword [0x8d777c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x8d777c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x835760
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x835690
push ebx
push ebx
call esi
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
lea ecx, [ebp - 0x90]
push ebx
push ecx
call esi
test eax, eax
je 0x83601c
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x90]
push eax
call ebx
push 0
push 0
lea ecx, [ebp - 0x90]
push 0
push ecx
call esi
test eax, eax
jne 0x835ff7
call fcn.0084a7f0
mov eax, dword [ebp - 0x88]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10