Function at 0x82d220
Capabilities:
Create thread
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x190
push ebx
push esi
push edi
push 0x8aca9c
call fcn.008395e0
add esp, 4
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x74], 0x30
push ebx
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x70], 3
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [ebp + 8]
push 0x101
push edi
mov dword [ebp - 0x60], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 3
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x48], ebx
call fcn.00842860
mov eax, dword [ebp + 0x10]
push eax
push 0x8ce230
call fcn.00839d79
add esp, 0xc
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x6c], 0x82cf90
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x82d2bb
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov dword [0x8cf780], edi
call fcn.0040e000
push esi
push esi
call dword [0x8cf8cc]
test eax, eax
je 0x82d90f
fld qword [0x88b578]
fld qword [0x88b578]
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x8924b0]
fsub st(1)
fxch st(1)
fmul qword [0x8924a8]
fadd qword [0x8924a0]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x892498]
fnstsw ax
test ah, 0x41
jne 0x82d31b
fld st(0)
fmul qword [0x892490]
fsubp st(2)
fadd qword [0x892488]
fcom qword [0x892480]
fnstsw ax
test ah, 1
jne 0x82d2e2
fxch st(1)
fst qword [ebp - 0x28]
fxch st(1)
fstp st(0)
fcomp qword [0x88b578]
fnstsw ax
test ah, 1
je 0x82d36b
lodsd eax, dword [esi]
dec eax
mov bh, 0x46
mov cl, 0x40
mov edx, 0x4e5d204c
sub eax, 0x2a445b60
jge case.0x82d3bb.0
sub byte [ebx], bh
push esp
dec ebx
push esp
jle 0x82d3af
cmp edi, dword [0x65705461]
jmp 0x82d8f1
mov dword [ebp - 0x10], 0x82d344
mov dword [ebp - 0x14], 0x82d34c
xor eax, eax
mov byte [ebp + eax - 0x190], al
inc eax
cmp eax, 0x100
jb 0x82d37b
fld qword [ebp - 0x28]
mov byte [ebp + 8], 0
mov eax, 0xff
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp + 0x10], eax
jmp 0x82d3a2
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, 1
cmp eax, ebx
jbe 0x82d3b6
lea ebx, [ebx + ebx + 1]
pop esp
sbb eax, dword [ecx]
cmp ebx, eax
jb 0x82d3ae
cmp edi, 3
ja case.default.0x82d3bb
jmp dword [edi*4 + 0x82da20]
fld st(0)
and esi, 0xff
call fcn.008397f4
mov cl, byte [ebp + esi - 0x190]
jmp 0x82d437
fld st(0)
and esi, 0xff
call fcn.008397f4
mov cl, byte [ebp + esi - 0x190]
shr eax, 8
jmp 0x82d437
fld st(0)
and esi, 0xff
call fcn.008397f4
mov cl, byte [ebp + esi - 0x190]
shr eax, 0x10
jmp 0x82d437
fld st(0)
and esi, 0xff
call fcn.008397f4
mov cl, byte [ebp + esi - 0x190]
shr eax, 0x18
jmp 0x82d437
mov edx, dword [ebp - 0x14]
and esi, 0xff
mov cl, byte [edx + edi - 4]
mov al, byte [ebp + esi - 0x190]
add cl, al
inc edi
cmp edi, 0x1e
mov byte [ebp + 8], cl
jb 0x82d44a
xor edi, edi
add cl, 0x1e
mov byte [ebp + 8], cl
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x24], eax
jbe 0x82d46a
mov eax, edx
xor edx, edx
div dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, edx
jb 0x82d3b6
je 0x82d4a5
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + edx - 0x190]
mov bl, byte [ebp + ecx - 0x190]
lea edx, [ebp + ecx - 0x190]
mov cl, byte [eax]
xor bl, cl
mov byte [edx], bl
mov cl, bl
mov bl, byte [eax]
xor bl, cl
mov byte [eax], bl
mov cl, byte [edx]
mov al, bl
xor cl, al
mov byte [edx], cl
mov eax, dword [ebp + 0x10]
dec eax
mov dword [ebp + 0x10], eax
jne 0x82d3a0
mov dl, byte [ebp - 0x189]
and esi, 0xff
mov byte [ebp - 0x18], dl
mov bl, byte [ebp - 0x18d]
mov al, byte [ebp + esi - 0x190]
mov esi, dword [ebp - 0x10]
mov byte [ebp - 0x20], al
mov cl, byte [ebp - 0x18b]
mov al, byte [esi]
mov dl, byte [esi + 1]
add al, 4
sub dl, 0x3e
shl al, 4
or al, dl
mov byte [ebp - 0x10], al
mov eax, dword [ebp - 0x20]
and eax, 0xff
fstp st(0)
mov dl, byte [ebp + eax - 0x190]
lea edi, [ebp + eax - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 0x18f]
mov eax, edx
and eax, 0xff
mov al, byte [ebp + eax - 0x190]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov ebx, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
mov edi, dword [ebp - 0xc]
and edx, 0xff
xor ebx, ebx
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov dl, byte [edx]
mov bl, byte [ebp + ebx - 0x190]
add edx, edi
and edx, 0xff
xor bl, byte [ebp + edx - 0x190]
mov dl, byte [ebp - 0x10]
mov byte [ebp - 0x20], dl
xor bl, dl
mov dl, byte [esi + 3]
mov byte [ebp - 0x18], bl
sub dl, 0x3e
mov bl, byte [esi + 2]
add bl, 4
shl bl, 4
or dl, bl
mov byte [ebp - 0x10], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
mov dl, byte [ebp + 0x10]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov ebx, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0xc]
add ebx, edx
mov dl, byte [ebp + edi - 0x190]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x190]
mov bl, byte [ebp - 0x10]
mov byte [ebp - 0x20], bl
xor dl, bl
mov byte [ebp - 0x18], dl
movsx dx, dl
mov word [ebp - 0x30], dx
mov bl, byte [esi + 4]
mov dl, byte [esi + 5]
add bl, 4
sub dl, 0x3e
shl bl, 4
or dl, bl
mov byte [ebp - 0x10], dl
mov edx, dword [ebp - 0x20]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
mov dl, byte [ebp + 0x10]
add al, bl
inc dl
mov byte [ebp - 0x1c], al
mov byte [ebp + 0x10], dl
mov edx, dword [ebp - 0x1c]
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
lea edx, [ebp + edx - 0x190]
mov byte [edi], bl
mov ebx, dword [ebp - 0x18]
and ebx, 0xff
mov dword [ebp - 0x24], edx
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov edx, dword [ebp + 0x10]
mov ebx, dword [ebp - 4]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 8], edx
mov dl, byte [edx]
mov byte [ebx], dl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov bl, byte [ebp + edx - 0x190]
add cl, bl
mov ebx, dword [ebp - 4]
mov byte [ebp - 0x14], cl
mov edx, dword [ebp - 0x14]
mov bl, byte [ebx]
and edx, 0xff
mov dl, byte [ebp + edx - 0x190]
add edx, ebx
mov bl, byte [edi]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x190]
mov edx, dword [ebp - 0x24]
mov edi, ebx
mov bl, byte [edx]
mov edx, dword [ebp - 0xc]
add ebx, edx
mov dl, byte [ebp + edi - 0x190]
and ebx, 0xff
xor dl, byte [ebp + ebx - 0x190]
mov bl, byte [ebp - 0x10]
xor dl, bl
mov byte [ebp - 0x18], dl
movsx dx, dl
mov word [ebp - 0x2e], dx
mov edx, dword [ebp - 0x10]
and edx, 0xff
lea edi, [ebp + edx - 0x190]
mov dl, byte [ebp + edx - 0x190]
mov byte [ebp + 8], dl
mov edx, dword [ebp - 8]
mov bl, byte [edx]
add al, bl
mov bl, byte [ebp + 0x10]
mov byte [ebp - 0x1c], al
inc bl
mov eax, dword [ebp - 0x1c]
mov byte [ebp + 0x10], bl
and eax, 0xff
mov dl, byte [ebp + eax - 0x190]
lea eax, [ebp + eax - 0x190]
mov byte [edi], dl
mov edx, dword [ebp - 0x18]
and edx, 0xff
lea edx, [ebp + edx - 0x190]
mov dword [ebp - 4], edx
mov bl, byte [edx]
mov byte [eax], bl
mov ebx, dword [ebp + 0x10]
and ebx, 0xff
lea ebx, [ebp + ebx - 0x190]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [edx], bl
mov ebx, dword [ebp - 8]
mov dl, byte [ebp + 8]
mov byte [ebx], dl
mov edx, dword [ebp + 8]
mov bl, byte [esi + 6]
and edx, 0xff
mov dword [ebp - 0xc], edx
mov dl, byte [esi + 7]
mov esi, dword [ebp - 0xc]
add bl, 4
sub dl, 0x3e
mov al, byte [eax]
shl bl, 4
or dl, bl
mov bl, byte [ebp + esi - 0x190]
mov esi, dword [ebp - 4]
add bl, cl
and ebx, 0xff
mov word [ebp - 0x2a], 0
mov cl, byte [ebp + ebx - 0x190]
mov bl, byte [edi]
mov edi, dword [ebp - 0xc]
add ecx, ebx
mov bl, byte [esi]
add eax, edi
add ecx, ebx
xor ebx, ebx
and ecx, 0xff
and eax, 0xff
mov esi, dword [ebp - 0x44]
mov bl, byte [ebp + ecx - 0x190]
mov cl, byte [ebp + ebx - 0x190]
xor dl, cl
mov cl, byte [ebp + eax - 0x190]
xor dl, cl
xor ebx, ebx
movsx cx, dl
mov word [ebp - 0x2c], cx
lea edx, [ebp - 0x30]
push edx
push 0x8ce230
call fcn.00839a44
add esp, 8
test eax, eax
jne 0x82d90f
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov eax, dword [ebp - 0x60]
push ebx
mov ecx, dword [ebp - 0x4c]
push eax
push ebx
push ebx
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
push esi
push ecx
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
cmp eax, ebx
mov dword [0x8cf77c], eax
jne 0x82d949
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea edx, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
call edi
mov edx, dword [ebp - 0x38]
push 1
sub eax, edx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
call edi
mov ecx, dword [ebp - 0x34]
push 5
sub eax, ecx
push ebx
cdq
sub eax, edx
push ebx
sar eax, 1
push eax
mov eax, dword [0x8cf77c]
push esi
push ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp + 0x14]
mov edx, dword [0x8cf77c]
push ecx
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x8cf77c]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x82d160
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x82d090
push ebx
push ebx
call esi
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
lea ecx, [ebp - 0x90]
push ebx
push ecx
call esi
test eax, eax
je 0x82da0c
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x90]
push eax
call ebx
push 0
push 0
lea ecx, [ebp - 0x90]
push 0
push ecx
call esi
test eax, eax
jne 0x82d9e7
call fcn.00842900
mov eax, dword [ebp - 0x88]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10