Function at 0x824070
Capabilities:
Create thread
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x194
push ebx
push esi
push edi
push 0x8a39cc
call fcn.0082fcc0
add esp, 4
xor ebx, ebx
mov esi, eax
mov dword [ebp - 0x78], 0x30
push ebx
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x74], 3
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [ebp + 8]
push 0x101
push edi
mov dword [ebp - 0x64], eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 3
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], ebx
call fcn.00838f40
mov eax, dword [ebp + 0x10]
push eax
push 0x8c5230
call fcn.00830459
add esp, 0xc
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x70], 0x823de0
push ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x82410b
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov dword [0x8c6780], edi
call fcn.0040dd80
push esi
push esi
call dword [0x8c68cc]
test eax, eax
je 0x82474e
fld qword [0x882578]
fld qword [0x882578]
fld st(0)
fmul st(1)
fld st(0)
fmul qword [0x889490]
fsub st(1)
fxch st(1)
fmul qword [0x889488]
fadd qword [0x889480]
fdivp st(1)
faddp st(2)
fld st(1)
fcomp qword [0x889478]
fnstsw ax
test ah, 0x41
jne 0x82416b
fld st(0)
fmul qword [0x889470]
fsubp st(2)
fadd qword [0x889468]
fcom qword [0x889460]
fnstsw ax
test ah, 1
jne 0x824132
fxch st(1)
fst qword [ebp - 0x28]
fxch st(1)
fstp st(0)
fcomp qword [0x882578]
fnstsw ax
test ah, 1
je 0x8241b3
jno 0x82420e
sub al, 0x28
das
jl 0x8241f4
imul ebx, dword [edi + 0x4f], 0x23767051
xor byte fs:[edi + 0x60], dl
movsb byte es:[edi], byte ds:[esi]
mov al, byte ds:[0xa13da846]
jmp 0x824730
mov dword [ebp - 0x34], 0x8241a6
mov dword [ebp - 0xc], 0x824194
xor eax, eax
mov byte [ebp + eax - 0x194], al
inc eax
cmp eax, 0x100
jb 0x8241c3
fld qword [ebp - 0x28]
mov byte [ebp + 8], 0
mov eax, 0xff
mov esi, dword [ebp + 8]
xor edi, edi
mov dword [ebp + 0x10], eax
jmp 0x8241ea
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov ebx, 1
cmp eax, ebx
jbe 0x8241fe
lea ebx, [ebx + ebx + 1]
cmp ebx, eax
jb 0x8241f6
cmp edi, 3
ja case.default.0x824203
jmp dword [edi*4 + 0x824864]
fld st(0)
and esi, 0xff
inc dword [eax]
add byte [eax], al
call fcn.0082fed4
mov cl, byte [ebp + esi - 0x194]
jmp 0x82427f
fld st(0)
and esi, 0xff
call fcn.0082fed4
mov cl, byte [ebp + esi - 0x194]
shr eax, 8
jmp 0x82427f
fld st(0)
and esi, 0xff
call fcn.0082fed4
mov cl, byte [ebp + esi - 0x194]
shr eax, 0x10
jmp 0x82427f
fld st(0)
and esi, 0xff
call fcn.0082fed4
mov cl, byte [ebp + esi - 0x194]
shr eax, 0x18
jmp 0x82427f
mov edx, dword [ebp - 0xc]
and esi, 0xff
mov cl, byte [edx + edi - 4]
mov al, byte [ebp + esi - 0x194]
add cl, al
inc edi
cmp edi, 0x16
mov byte [ebp + 8], cl
jb 0x824292
xor edi, edi
add cl, 0x16
mov byte [ebp + 8], cl
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x24]
mov edx, esi
and edx, 0xff
and edx, ebx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x24], eax
jbe 0x8242b2
mov eax, edx
xor edx, edx
div dword [ebp + 0x10]
mov eax, dword [ebp + 0x10]
cmp eax, edx
jb 0x8241fe
je 0x8242ed
mov ecx, dword [ebp + 0x10]
lea eax, [ebp + edx - 0x194]
mov bl, byte [ebp + ecx - 0x194]
lea edx, [ebp + ecx - 0x194]
mov cl, byte [eax]
xor bl, cl
mov byte [edx], bl
mov cl, bl
mov bl, byte [eax]
xor bl, cl
mov byte [eax], bl
mov cl, byte [edx]
mov al, bl
xor cl, al
mov byte [edx], cl
mov eax, dword [ebp + 0x10]
dec eax
mov dword [ebp + 0x10], eax
jne 0x8241e8
mov al, byte [ebp - 0x18d]
and esi, 0xff
mov byte [ebp - 0x14], al
xor eax, eax
mov cl, byte [ebp + esi - 0x194]
mov esi, dword [ebp - 0x34]
mov byte [ebp - 0x20], cl
xor ecx, ecx
mov al, byte [esi]
mov cl, byte [esi + 1]
sub eax, 0x38
sub ecx, 0xa0
shl eax, 4
or al, cl
mov bl, byte [ebp - 0x191]
mov byte [ebp - 0x18], al
mov eax, dword [ebp - 0x20]
and eax, 0xff
mov dl, byte [ebp - 0x18f]
fstp st(0)
mov cl, byte [ebp + eax - 0x194]
lea edi, [ebp + eax - 0x194]
mov eax, dword [ebp - 0x193]
mov byte [ebp + 8], cl
mov ecx, eax
and ecx, 0xff
mov cl, byte [ebp + ecx - 0x194]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp + 0x10], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x194]
lea eax, [ebp + eax - 0x194]
mov byte [edi], bl
mov ebx, dword [ebp - 0x14]
and ebx, 0xff
mov dword [ebp - 0xc], eax
lea ebx, [ebp + ebx - 0x194]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 8]
and eax, 0xff
lea eax, [ebp + eax - 0x194]
mov dword [ebp - 4], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 4]
mov al, byte [ebp + 8]
mov byte [ebx], al
mov eax, dword [ebp + 8]
and eax, 0xff
mov dword [ebp - 0x24], eax
mov bl, byte [ebp + eax - 0x194]
add dl, bl
mov ebx, dword [ebp - 8]
mov byte [ebp - 0x1c], dl
mov eax, dword [ebp - 0x1c]
mov bl, byte [ebx]
and eax, 0xff
mov al, byte [ebp + eax - 0x194]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
mov edi, dword [ebp - 0x24]
and eax, 0xff
xor ebx, ebx
mov bl, byte [ebp + eax - 0x194]
mov eax, dword [ebp - 0xc]
mov al, byte [eax]
mov bl, byte [ebp + ebx - 0x194]
add eax, edi
and eax, 0xff
xor bl, byte [ebp + eax - 0x194]
mov al, byte [ebp - 0x18]
mov byte [ebp - 0x20], al
xor bl, al
mov byte [ebp - 0x14], bl
mov bl, byte [esi + 2]
mov al, byte [esi + 3]
add bl, 8
add al, 0x60
shl bl, 4
or al, bl
mov byte [ebp - 0x18], al
mov eax, dword [ebp - 0x20]
and eax, 0xff
lea edi, [ebp + eax - 0x194]
mov al, byte [ebp + eax - 0x194]
mov byte [ebp + 8], al
mov eax, dword [ebp - 4]
mov bl, byte [eax]
mov al, byte [ebp + 0x10]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp + 0x10], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x194]
lea eax, [ebp + eax - 0x194]
mov byte [edi], bl
mov ebx, dword [ebp - 0x14]
and ebx, 0xff
mov dword [ebp - 0xc], eax
lea ebx, [ebp + ebx - 0x194]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 8]
and eax, 0xff
lea eax, [ebp + eax - 0x194]
mov dword [ebp - 4], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 4]
mov al, byte [ebp + 8]
mov byte [ebx], al
mov eax, dword [ebp + 8]
and eax, 0xff
mov dword [ebp - 0x24], eax
mov bl, byte [ebp + eax - 0x194]
add dl, bl
mov ebx, dword [ebp - 8]
mov byte [ebp - 0x1c], dl
mov eax, dword [ebp - 0x1c]
mov bl, byte [ebx]
and eax, 0xff
mov al, byte [ebp + eax - 0x194]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
xor ebx, ebx
and eax, 0xff
mov bl, byte [ebp + eax - 0x194]
mov eax, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [eax]
mov eax, dword [ebp - 0x24]
add ebx, eax
mov al, byte [ebp + edi - 0x194]
and ebx, 0xff
xor al, byte [ebp + ebx - 0x194]
mov bl, byte [ebp - 0x18]
mov byte [ebp - 0x20], bl
xor al, bl
mov byte [ebp - 0x14], al
movsx ax, al
mov word [ebp - 0x30], ax
mov al, byte [esi + 4]
mov bl, byte [esi + 5]
add al, 8
shl al, 4
add bl, 0x60
or al, bl
mov byte [ebp - 0x18], al
mov eax, dword [ebp - 0x20]
and eax, 0xff
lea edi, [ebp + eax - 0x194]
mov al, byte [ebp + eax - 0x194]
mov byte [ebp + 8], al
mov eax, dword [ebp - 4]
mov bl, byte [eax]
mov al, byte [ebp + 0x10]
add cl, bl
inc al
mov byte [ebp - 0x10], cl
mov byte [ebp + 0x10], al
mov eax, dword [ebp - 0x10]
and eax, 0xff
mov bl, byte [ebp + eax - 0x194]
lea eax, [ebp + eax - 0x194]
mov byte [edi], bl
mov ebx, dword [ebp - 0x14]
and ebx, 0xff
mov dword [ebp - 0xc], eax
lea ebx, [ebp + ebx - 0x194]
mov dword [ebp - 8], ebx
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp - 8]
and eax, 0xff
lea eax, [ebp + eax - 0x194]
mov dword [ebp - 4], eax
mov al, byte [eax]
mov byte [ebx], al
mov ebx, dword [ebp - 4]
mov al, byte [ebp + 8]
mov byte [ebx], al
mov eax, dword [ebp + 8]
and eax, 0xff
mov dword [ebp - 0x24], eax
mov bl, byte [ebp + eax - 0x194]
add dl, bl
mov ebx, dword [ebp - 8]
mov byte [ebp - 0x1c], dl
mov eax, dword [ebp - 0x1c]
mov bl, byte [ebx]
and eax, 0xff
mov al, byte [ebp + eax - 0x194]
add eax, ebx
mov bl, byte [edi]
add eax, ebx
xor ebx, ebx
and eax, 0xff
mov bl, byte [ebp + eax - 0x194]
mov eax, dword [ebp - 0xc]
mov edi, ebx
mov bl, byte [eax]
mov eax, dword [ebp - 0x24]
add ebx, eax
mov al, byte [ebp + edi - 0x194]
and ebx, 0xff
mov edi, dword [ebp - 4]
xor al, byte [ebp + ebx - 0x194]
mov bl, byte [ebp - 0x18]
xor al, bl
xor ebx, ebx
mov byte [ebp - 0x14], al
movsx ax, al
mov word [ebp - 0x2e], ax
mov bl, byte [esi + 7]
xor eax, eax
mov dword [ebp - 0x34], ebx
mov al, byte [esi + 6]
mov esi, dword [ebp - 0x18]
and esi, 0xff
mov bl, byte [ebp + esi - 0x194]
lea esi, [ebp + esi - 0x194]
mov byte [ebp + 8], bl
mov bl, byte [edi]
add cl, bl
mov bl, byte [ebp + 0x10]
mov byte [ebp - 0x10], cl
inc bl
mov ecx, dword [ebp - 0x10]
mov byte [ebp + 0x10], bl
and ecx, 0xff
lea edi, [ebp + ecx - 0x194]
sub al, 8
shl al, 4
mov cl, byte [edi]
mov word [ebp - 0x2a], 0
mov byte [esi], cl
mov ecx, dword [ebp - 0x14]
and ecx, 0xff
mov bl, byte [ebp + ecx - 0x194]
lea ecx, [ebp + ecx - 0x194]
mov byte [edi], bl
mov ebx, dword [ebp + 0x10]
and ebx, 0xff
mov dword [ebp - 8], ecx
lea ebx, [ebp + ebx - 0x194]
mov dword [ebp - 4], ebx
mov bl, byte [ebx]
mov byte [ecx], bl
mov ebx, dword [ebp - 4]
mov cl, byte [ebp + 8]
mov byte [ebx], cl
mov ecx, dword [ebp + 8]
mov bl, byte [ebp - 0x34]
and ecx, 0xff
add bl, 0x60
or al, bl
mov bl, byte [ebp + ecx - 0x194]
add bl, dl
and ebx, 0xff
mov dl, byte [ebp + ebx - 0x194]
mov bl, byte [esi]
mov esi, dword [ebp - 8]
add edx, ebx
mov bl, byte [esi]
mov esi, dword [ebp - 0x48]
add edx, ebx
xor ebx, ebx
and edx, 0xff
mov bl, byte [ebp + edx - 0x194]
mov dl, byte [ebp + ebx - 0x194]
xor al, dl
mov dl, byte [edi]
add edx, ecx
and edx, 0xff
mov cl, byte [ebp + edx - 0x194]
xor al, cl
xor ebx, ebx
movsx ax, al
mov word [ebp - 0x2c], ax
lea ecx, [ebp - 0x30]
push ecx
push 0x8c5230
call fcn.00830124
add esp, 8
test eax, eax
jne 0x82474e
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [ebp - 0x64]
push ebx
mov eax, dword [ebp - 0x50]
push edx
push ebx
push ebx
push 0x4b
push 0x118
push 0x64
push 0x64
push 0x10ca0000
push esi
push eax
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
cmp eax, ebx
mov dword [0x8c677c], eax
jne 0x824788
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [ebp - 0x44]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
call edi
mov edx, dword [ebp - 0x3c]
push 1
sub eax, edx
cdq
sub eax, edx
mov esi, eax
sar esi, 1
call edi
mov ecx, dword [ebp - 0x38]
push 5
sub eax, ecx
push ebx
cdq
sub eax, edx
mov edx, dword [0x8c677c]
sar eax, 1
push ebx
push eax
push esi
push ebx
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [ebp + 0x14]
mov ecx, dword [0x8c677c]
push eax
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [0x8c677c]
push edx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push ebx
push ebx
push 0x823fb0
push ebx
push ebx
call esi
push ebx
push ebx
push ebx
push 0x823ee0
push ebx
push ebx
call esi
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
push ebx
push ebx
lea eax, [ebp - 0x94]
push ebx
push eax
call esi
test eax, eax
je 0x82484d
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebx, dword [sym.imp.USER32.dll_DispatchMessageW]
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call ebx
push 0
push 0
lea eax, [ebp - 0x94]
push 0
push eax
call esi
test eax, eax
jne 0x824828
call fcn.00838fe0
mov eax, dword [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10