Function at 0x41fc00
Capabilities:
Create thread

Disassembly:
sub esp, 0x18
push ebx
mov ebx, dword [0x45ece8]
push ebp
push esi
push edi
mov eax, ebx
cdq
mov edi, eax
mov eax, dword [0x45ecd4]
push 1
mov ebp, edx
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
push 0xfffffffffffffffe
push 0x140cef57
push ebp
push edi
mov dword [esp + 0x20], eax
call fcn.004319f0
push 2
push 0x6b66a94
mov esi, eax
mov eax, dword [esp + 0x18]
push ebp
push edi
sub esi, eax
call fcn.004319f0
imul ebx, ebx, 0x6181b446
mov edi, dword [0x45ece0]
mov ecx, dword [0x45ecc8]
add esi, eax
imul ecx, ecx, 0x151f392d
mov eax, 0x2a215c6f
mul edi
mov eax, edi
sub eax, edx
shr eax, 1
add eax, edx
mov edx, edi
imul edx, edx, 0x242d3a05
shr eax, 0x1f
add esi, eax
mov eax, dword [esp + 0x2c]
sub esi, ebx
sub esi, ecx
sub esi, edx
cmp eax, 0x132b600
mov dword [0x45ecd8], esi
je 0x41fcbc
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
push 0x3e8
call edi
dec esi
jne 0x41fca8
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret
mov eax, dword [0x45ece4]
mov ebp, dword [0x45eccc]
cdq
mov ebx, eax
push 0xfffffffffffffffe
mov dword [esp + 0x28], edx
mov eax, ebp
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
mov edx, dword [esp + 0x24]
add ecx, ebp
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
push edx
sub eax, ecx
push ebx
mov dword [esp + 0x3c], eax
call fcn.004319f0
mov ecx, dword [esp + 0x2c]
push 1
add ecx, eax
mov eax, dword [esp + 0x28]
push 0xeae0c6d3
push eax
push ebx
mov dword [esp + 0x3c], ecx
call fcn.004319f0
imul edi, edi, 0x2c857103
mov edx, dword [0x45ecdc]
mov ecx, dword [esp + 0x2c]
imul edx, edx, 0x6181b446
add ecx, eax
sub ecx, edi
add ecx, edx
mov eax, esi
mov esi, dword [str._r_____r____]
cdq
mov edi, eax
push 1
mov ebp, edx
mov eax, esi
cdq
push 0xb09bfdc4
push edx
push eax
mov dword [0x45ecdc], ecx
mov dword [esp + 0x2c], ebp
call fcn.004319f0
mov edx, dword [0x45ecd4]
mov ecx, dword [0x45ecc8]
add ecx, edx
imul ecx, ecx, 0x242d3a05
push 1
push 0x86050f76
push ebp
sub eax, ecx
push edi
mov dword [esp + 0x3c], eax
call fcn.004319f0
mov ecx, dword [esp + 0x2c]
push 2
sub ecx, eax
mov eax, dword [esp + 0x28]
push 0xb57eb16
push eax
push ebx
mov dword [esp + 0x3c], ecx
call fcn.004319f0
mov ecx, dword [esp + 0x2c]
push 1
push 0xeae0c6d3
mov edx, ebp
sub ecx, eax
push edx
push edi
mov dword [esp + 0x3c], ecx
call fcn.004319f0
imul esi, esi, 0x151f392d
mov ecx, dword [esp + 0x2c]
sub ecx, eax
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x415070
push 0
sub ecx, esi
push 0
mov dword [0x45ece4], ecx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, dword [0x45ecd0]
mov edi, eax
push 1
mov eax, esi
cdq
push 0xebf310a9
push edx
push eax
call fcn.004319f0
mov ebx, eax
mov eax, dword [0x45ece4]
push 1
cdq
push 0x5295f78d
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ece0]
sub ebx, eax
imul ecx, ecx, 0x7f4ea4e2
mov eax, 0x4d7937c3
mul esi
shr edx, 0x1e
add ebx, edx
mov eax, 0x2a01e433
imul esi
sub ebx, ecx
mov ecx, dword [0x45ecc8]
imul ecx, ecx, 0x6181b446
sar edx, 0x1c
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, ecx
push edi
mov dword [0x45ecc8], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x45ecdc]
cdq
mov edi, eax
mov eax, dword [0x45ecd0]
push 1
mov esi, edx
cdq
push 0xb09bfdc4
push edx
push eax
mov dword [esp + 0x34], esi
call fcn.004319f0
push 0xfffffffffffffffd
push 0xf4a814ea
push esi
push edi
mov ebx, eax
call fcn.004319f0
mov esi, dword [0x45ece8]
mov ebp, dword [0x45ecd8]
mov ecx, eax
mov edx, esi
imul edx, edx, 0x6b66a94
mov eax, ebp
imul eax, eax, 0xb57eb16
sub ecx, ebx
add ecx, edx
add ecx, eax
mov eax, 0x2a01e433
mov ebx, dword [0x45ecc8]
imul ebp
sar edx, 0x1c
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, ebx
imul ecx, ecx, 0x5295f78d
add eax, ecx
sub eax, dword [0x45ece4]
sub eax, 0x6181b446
mov dword [0x45ecd0], eax
mov eax, dword [0x572b08]
mov edx, eax
inc eax
test edx, edx
push 1
mov dword [0x572b08], eax
push 0xeae0c6d3
jle 0x4202b9
mov ecx, dword [0x45ecdc]
mov eax, 0x2a215c6f
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
mov eax, ecx
mov ecx, dword [esp + 0x2c]
push ecx
push edi
mov dword [esp + 0x3c], eax
call fcn.004319f0
imul ebp, ebp, 0x5295f78d
mov ecx, dword [esp + 0x2c]
mov edx, dword [0x45ecdc]
mov edi, dword [0x45ece0]
imul edx, edx, 0x140cef57
sub eax, ecx
mov ecx, dword [str._r_____r____]
imul ecx, ecx, 0x3d76be60
sub eax, edx
add ebp, edi
add ebp, eax
lea ebp, [ecx + ebp - 0x6181b446]
mov eax, 0x5615e8
mov dword [0x45ecd4], ebp
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41ff78
sub eax, ecx
cmp eax, 5
jbe 0x42021b
mov eax, esi
cdq
mov dword [esp + 0x20], eax
push 1
mov dword [esp + 0x28], edx
mov eax, ebp
cdq
push 0xeae0c6d3
push edx
push eax
call fcn.004319f0
mov edx, dword [esp + 0x24]
push 0xfffffffffffffffe
push 0x140cef57
mov ebp, eax
mov eax, dword [esp + 0x28]
push edx
push eax
call fcn.004319f0
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push 2
push 0x6b66a94
push ecx
sub eax, ebp
push edx
mov ebp, eax
call fcn.004319f0
imul esi, esi, 0x6181b446
imul ebx, ebx, 0x151f392d
add ebp, eax
mov eax, 0x2a215c6f
mul edi
mov eax, edi
imul edi, edi, 0x242d3a05
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add ebp, eax
sub ebp, esi
sub ebp, ebx
sub ebp, edi
push 0x5615e8
mov dword [0x45ecd8], ebp
mov dword [0x5626ec], 0
call fcn.00427680
mov ebp, dword [0x45eccc]
mov ebx, eax
mov eax, dword [0x45ece4]
cdq
mov esi, eax
push 0xfffffffffffffffe
mov edi, edx
mov eax, ebp
cdq
push 0xad6a0873
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecd0]
add ecx, ebp
imul ecx, ecx, 0x79faf08a
push 2
push 0xb57eb16
push edi
sub eax, ecx
push esi
mov dword [esp + 0x3c], eax
call fcn.004319f0
mov ecx, dword [esp + 0x2c]
push 1
push 0xeae0c6d3
push edi
add ecx, eax
push esi
mov dword [esp + 0x3c], ecx
call fcn.004319f0
mov ecx, dword [esp + 0x2c]
add ecx, eax
mov edx, dword [0x45ece0]
mov eax, dword [0x45ecdc]
imul edx, edx, 0x2c857103
imul eax, eax, 0x6181b446
sub ecx, edx
add ecx, eax
push 0
mov dword [0x45ecdc], ecx
call fcn.004320d7
mov eax, dword [0x572ac8]
mov ecx, dword [eax]
add esp, 4
push 0
push 0
push 0
push 0
push ebx
push eax
call dword [ecx + 0x2c]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [0x45ecd0]
mov ebx, dword [0x45eccc]
mov esi, dword [0x45ece8]
push 0xfffffffffffffffe
lea edi, [edx + esi]
mov eax, ebx
imul edi, edi, 0x4f64023c
cdq
push 0x4f64023c
push edx
push eax
call fcn.004319f0
sub eax, edi
mov dword [esp + 0x2c], eax
push 1
mov eax, esi
cdq
push 0x86050f76
push edx
push eax
call fcn.004319f0
mov ecx, dword [esp + 0x2c]
mov ebp, dword [0x45ecd4]
mov edi, dword [0x45ecd8]
add ecx, eax
mov eax, ebp
imul eax, eax, 0x6b66a94
sub ecx, eax
mov eax, dword [0x45ecdc]
mov edx, edi
imul eax, eax, 0x6181b446
imul edx, edx, 0x2c857103
sub ecx, edx
sub ecx, eax
mov dword [0x45ece0], ecx
mov ecx, 0x5615e8
lea eax, [ecx + 1]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x420151
sub ecx, eax
cmp ecx, 0x100
jae 0x420181
xor eax, eax
jmp 0x420170
mov cl, byte [eax + 0x5615e8]
mov byte [eax + 0x561de8], cl
inc eax
test cl, cl
jne 0x420170
mov eax, edi
cdq
mov dword [esp + 0x18], eax
mov eax, dword [0x45ece4]
push 0xfffffffffffffffd
mov dword [esp + 0x20], edx
cdq
push 0xf4a814ea
push edx
push eax
call fcn.004319f0
mov ecx, dword [0x45ecc8]
add ecx, ebp
mov edi, eax
imul ecx, ecx, 0x242d3a05
mov eax, dword [str._r_____r____]
push 1
cdq
push 0xb09bfdc4
push edx
push eax
sub edi, ecx
call fcn.004319f0
mov edx, dword [esp + 0x1c]
push 1
push 0x86050f76
add edi, eax
mov eax, dword [esp + 0x20]
push edx
push eax
call fcn.004319f0
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 1
push 0xeae0c6d3
push ecx
push edx
sub edi, eax
call fcn.004319f0
sub edi, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x151f392d
sub edi, eax
mov dword [0x45ece4], edi
mov ecx, 0x200
xor eax, eax
mov edi, 0x5615e8
rep stosd dword es:[edi], eax
jmp 0x420221
mov ebx, dword [0x45eccc]
mov eax, ebx
cdq
push 1
mov edi, eax
mov ecx, edx
push 0x86050f76
mov eax, ebp
cdq
push ecx
push edi
mov dword [esp + 0x2c], ecx
mov ebp, eax
mov dword [esp + 0x34], edx
call fcn.004319f0
mov ecx, dword [esp + 0x1c]
push 2
push 0xb57eb16
push ecx
push edi
mov dword [esp + 0x3c], eax
call fcn.004319f0
mov edx, dword [esp + 0x24]
push 2
push 0xb57eb16
mov edi, eax
mov eax, dword [esp + 0x34]
push edx
push ebp
sub edi, eax
call fcn.004319f0
push 1
sub edi, eax
mov eax, dword [esp + 0x28]
push 0xeae0c6d3
push eax
push ebp
call fcn.004319f0
imul ebx, ebx, 0x140cef57
imul esi, esi, 0x6b66a94
add edi, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x5295f78d
sub edi, ebx
add edi, esi
add edi, eax
mov dword [str._r_____r____], edi
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x18
ret
mov eax, esi
cdq
mov edi, eax
mov eax, dword [0x45ecd4]
mov ebp, edx
cdq
push edx
push eax
mov dword [esp + 0x34], ebp
call fcn.004319f0
push 0xfffffffffffffffe
push 0x140cef57
push ebp
push edi
mov dword [esp + 0x3c], eax
call fcn.004319f0
mov ecx, dword [esp + 0x24]
push 2
push 0x6b66a94
mov ebp, eax
mov eax, dword [esp + 0x34]
push ecx
push edi
sub ebp, eax
call fcn.004319f0
imul esi, esi, 0x6181b446
imul ebx, ebx, 0x151f392d
mov ecx, dword [0x45ece0]
add ebp, eax
mov eax, 0x2a215c6f
mul ecx
mov eax, ecx
imul ecx, ecx, 0x242d3a05
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add ebp, eax
sub ebp, esi
sub ebp, ebx
sub ebp, ecx
lea ecx, [esp + 0x14]
push ecx
push 0
push 0
push 0x41f210
push 0
push 0
mov dword [0x45ecd8], ebp
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
mov dword [0x45f4d8], eax
call fcn.004320d7
add esp, 4
pop edi
pop esi
pop ebp
mov dword [0x572b04], eax
mov eax, 1
pop ebx
add esp, 0x18
ret