Function at 0x83b870
Capabilities:
Create thread
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x190
push ebx
push esi
push edi
push 0x8bb8ac
call fcn.00848230
add esp, 4
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x74], 0x30
push ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [ebp + 8]
push 0x101
push edi
mov dword [ebp - 0x60], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 3
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ebx
call fcn.008514b0
mov eax, dword [ebp + 0x10]
push eax
push 0x8dd230
call fcn.008489c9
add esp, 0xc
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x6c], 0x83b5e0
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x83b90b
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov dword [0x8de780], edi
call fcn.0040dc00
push esi
push esi
call dword [0x8de8cc]
test eax, eax
je 0x83bf63
fld qword [0x89a578]
fld qword [0x89a578]
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x8a1438]
fsub st(1)
fxch st(1)
fmul qword [0x8a1430]
fadd qword [0x8a1428]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x8a1420]
fnstsw ax
test ah, 0x41
jne 0x83b96b
fld st(0)
fmul qword [0x8a1418]
fsubp st(2)
fadd qword [0x8a1410]
fcom qword [0x8a1408]
fnstsw ax
test ah, 1
jne 0x83b932
fxch st(1)
fst qword [ebp - 0x28]
fxch st(1)
fstp st(0)
fcomp qword [0x89a578]
fnstsw ax
test ah, 1
je 0x83b9b1
sub eax, 0x7735656d
jnp 0x83ba15
jno case.0x83ba01.0
push esi
imul esp, dword [ecx + esi + 0x26], 0x69
jae 0x83b9d1
call 0xf3b0a6d8
sub esi, edi
jmp 0x83bf45
mov dword [ebp - 0x10], 0x83b9a4
mov dword [ebp - 0x14], 0x83b994
xor eax, eax
mov byte [ebp + eax - 0x190], al
inc eax
cmp eax, 0x100
jb 0x83b9c1
fld qword [ebp - 0x28]
mov byte [ebp + 8], 0
inc ebp
fadd st(6)
inc ebp
or byte [eax], al
mov eax, 0xff
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp + 0x10], eax
jmp 0x83b9e8
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, 1
cmp eax, ebx
jbe 0x83b9fc
lea ebx, [ebx + ebx + 1]
cmp ebx, eax
jb 0x83b9f4
cmp edi, 3
ja case.default.0x83ba01
jmp dword [edi*4 + 0x83c074]
fld st(0)
and esi, 0xff
call fcn.00848444
mov cl, byte [ebp + esi - 0x190]
jmp 0x83ba7d
fld st(0)
and esi, 0xff
call fcn.00848444
mov cl, byte [ebp + esi - 0x190]
shr eax, 8
jmp 0x83ba7d
fld st(0)
and esi, 0xff
call fcn.00848444
mov cl, byte [ebp + esi - 0x190]
shr eax, 0x10
jmp 0x83ba7d
fld st(0)
and esi, 0xff
call fcn.00848444
mov cl, byte [ebp + esi - 0x190]
shr eax, 0x18
jmp 0x83ba7d
mov edx, dword [ebp - 0x14]
and esi, 0xff
mov cl, byte [edx + edi - 4]
mov al, byte [ebp + esi - 0x190]
add cl, al
inc edi
cmp edi, 0x14
mov byte [ebp + 8], cl
jb 0x83ba90
xor edi, edi
add cl, 0x14
mov byte [ebp + 8], cl
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x24], eax
jbe 0x83bab0
mov eax, edx
xor edx, edx
div dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, edx
jb 0x83b9fc
je 0x83baeb
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + edx - 0x190]
mov bl, byte [ebp + ecx - 0x190]
lea edx, [ebp + ecx - 0x190]
mov cl, byte [eax]
xor bl, cl
mov byte [edx], bl
mov cl, bl
mov bl, byte [eax]
xor bl, cl
mov byte [eax], bl
mov cl, byte [edx]
mov al, bl
xor cl, al
mov byte [edx], cl
mov eax, dword [ebp + 0x10]
dec eax
mov dword [ebp + 0x10], eax
jne 0x83b9e6
mov dl, byte [ebp - 0x189]
and esi, 0xff
mov byte [ebp - 0x18], dl
xor edx, edx
mov al, byte [ebp + esi - 0x190]
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
xor eax, eax
mov al, byte [esi]
mov dl, byte [esi + 1]
add eax, 0xffffffdc
sub edx, 0xe8
shl eax, 4
or al, dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
mov byte [ebp - 0x10], al
mov bl, byte [ebp - 0x18d]
mov cl, byte [ebp - 0x18b]
mov al, byte [ebp + edx - 0x190]
lea edi, [ebp + edx - 0x190]
mov edx, dword [ebp - 0x18f]
mov byte [ebp + 8], al
mov eax, edx
and eax, 0xff
fstp st(0)
mov al, byte [ebp + eax - 0x190]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
mov edi, dword [ebp - 0xc]
and edx, 0xff
xor ebx, ebx
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov dl, byte [edx]
mov bl, byte [ebp + ebx - 0x190]
add edx, edi
and edx, 0xff
xor bl, byte [ebp + edx - 0x190]
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x20], dl
xor bl, dl
mov byte [ebp - 0x18], bl
mov bl, byte [esi + 2]
mov dl, byte [esi + 3]
add bl, 0xc
add dl, 0x18
shl bl, 4
or dl, bl
mov byte [ebp - 0x10], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
mov dl, byte [ebp + 0x10]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0xc]
add ebx, edx
mov dl, byte [ebp + edi - 0x190]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x190]
mov bl, byte [ebp - 0x10]
mov byte [ebp - 0x20], bl
xor dl, bl
mov byte [ebp - 0x18], dl
movsx dx, dl
mov word [ebp - 0x30], dx
mov bl, byte [esi + 4]
mov dl, byte [esi + 5]
add bl, 0xc
add dl, 0x18
shl bl, 4
or dl, bl
mov byte [ebp - 0x10], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
mov dl, byte [ebp + 0x10]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov bl, byte [edi]
mov edi, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0xc]
add ebx, edx
mov dl, byte [ebp + edi - 0x190]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x190]
mov bl, byte [ebp - 0x10]
xor dl, bl
mov byte [ebp - 0x18], dl
movsx dx, dl
mov word [ebp - 0x2e], dx
mov edx, dword [ebp - 0x10]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
add al, bl
mov bl, byte [ebp + 0x10]
mov byte [ebp - 0x1c], al
inc bl
mov eax, dword [ebp - 0x1c]
mov byte [ebp + 0x10], bl
and eax, 0xff
mov dl, byte [ebp + eax - 0x190]
lea eax, [ebp + eax - 0x190]
mov byte [edi], dl
mov edx, dword [ebp - 0x18]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [eax], bl
mov ebx, dword [ebp + 0x10]
and ebx, 0xff
mov dword [ebp - 4], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
mov bl, byte [esi + 6]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov dl, byte [esi + 7]
mov esi, dword [ebp - 0xc]
sub bl, 4
add dl, 0x18
mov al, byte [eax]
shl bl, 4
or dl, bl
mov bl, byte [ebp + esi - 0x190]
mov esi, dword [ebp - 4]
add bl, cl
and ebx, 0xff
mov word [ebp - 0x2a], 0
mov cl, byte [ebp + ebx - 0x190]
mov bl, byte [edi]
mov edi, dword [ebp - 0xc]
add ecx, ebx
mov bl, byte [esi]
add eax, edi
add ecx, ebx
xor ebx, ebx
and ecx, 0xff
and eax, 0xff
mov esi, dword [ebp - 0x44]
mov bl, byte [ebp + ecx - 0x190]
mov cl, byte [ebp + ebx - 0x190]
xor dl, cl
mov cl, byte [ebp + eax - 0x190]
xor dl, cl
xor ebx, ebx
movsx cx, dl
mov word [ebp - 0x2c], cx
lea edx, [ebp - 0x30]
push edx
push 0x8dd230
call fcn.00848694
add esp, 8
test eax, eax
jne 0x83bf63
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebp - 0x4c]
push eax
push ebx
push ebx
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
push esi
push ecx
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
cmp eax, ebx
mov dword [0x8de77c], eax
jne 0x83bf9d
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea edx, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
call edi
mov edx, dword [ebp - 0x38]
push 1
sub eax, edx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
call edi
mov ecx, dword [ebp - 0x34]
push 5
sub eax, ecx
push ebx
cdq
sub eax, edx
push ebx
sar eax, 1
push eax
mov eax, dword [0x8de77c]
push esi
push ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp + 0x14]
mov edx, dword [0x8de77c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x8de77c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x83b7b0
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x83b6e0
push ebx
push ebx
call esi
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
lea ecx, [ebp - 0x90]
push ebx
push ecx
call esi
test eax, eax
je 0x83c060
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x90]
push eax
call ebx
push 0
push 0
lea ecx, [ebp - 0x90]
push 0
push ecx
call esi
test eax, eax
jne 0x83c03b
call fcn.00851550
mov eax, dword [ebp - 0x88]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10