Function at 0x41dab0
Capabilities:
Create thread

Disassembly:
push ecx
mov ecx, dword [0x45b9b4]
mov eax, 0x6352a551
imul ecx
sar edx, 0x12
mov ecx, edx
push ebx
mov ebx, dword [0x45b9c8]
shr ecx, 0x1f
add ecx, edx
mov eax, 0x24d17191
imul ebx
mov eax, dword [0x45b9ac]
imul eax, eax, 0x6ef8e
sar edx, 0x10
push ebp
mov ebp, dword [0x45b9c0]
push esi
mov esi, edx
shr esi, 0x1f
add esi, edx
add esi, eax
mov eax, 0x6352a551
imul ebp
sar edx, 0x12
push edi
add esi, edx
mov edi, edx
mov edx, ebx
imul edx, edx, 0x1b669
shr edi, 0x1f
add edi, esi
add edi, edx
mov eax, 0x2682f007
imul ebx
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, dword [esp + 0x18]
sub edi, ecx
cmp eax, 0x132b600
mov dword [esp + 0x10], ecx
mov dword [0x45b9b8], edi
je 0x41db5a
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
push 0x3e8
call edi
dec esi
jne 0x41db48
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
pop ecx
ret
mov ecx, dword [0x45b9b0]
imul ebp, ebp, 0x85399
imul ebx, ebx, 0x6f3fe
mov eax, 0x6352a551
imul edi
sar edx, 0x12
mov esi, edx
shr esi, 0x1f
add esi, edx
mov eax, 0x92ea28a3
imul ecx
add edx, ecx
imul ecx, ecx, 0x67dee
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9bc]
imul edx, edx, 0x53d95
add eax, ebp
add eax, edx
mov dword [esp + 0x18], eax
mov eax, 0x2a7feb
imul dword [0x45b9ac]
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [esp + 0x18]
sub edx, eax
add edx, esi
add ecx, edx
mov ebp, dword [0x45b9a8]
add ecx, ebx
imul ebp, ebp, 0x6ef8e
mov dword [0x45b9bc], ecx
mov ecx, dword [0x45b9c4]
mov eax, 0x92ea28a3
imul ecx
add edx, ecx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, edi
imul edx, edx, 0xa4f50
sub ebp, ecx
add ebp, edx
mov eax, 0x9dbc161
imul edi
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
lea ecx, [esp + 0x18]
push ecx
push 0
add eax, edx
sub ebp, eax
push 0
sub ebp, esi
push 0x4130b0
add ebp, ebx
mov ebx, dword [esp + 0x20]
push 0
add ebp, ebx
push 0
mov dword [0x45b9c4], ebp
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x45b9b0]
mov edi, dword [0x45b9c8]
mov esi, eax
imul edi, edi, 0x6f3fe
mov eax, 0xf5f5c9f5
imul ecx
add edx, ecx
mov ecx, dword [0x45b9a8]
sar edx, 0x13
mov ebx, edx
shr ebx, 0x1f
add edi, edx
add ebx, edi
mov eax, 0x6352a551
imul ecx
imul ecx, ecx, 0x53d95
sar edx, 0x12
add ebx, edx
mov edi, edx
shr edi, 0x1f
add edi, ebx
add edi, ecx
mov ecx, dword [0x45b9c4]
mov eax, 0x61b317a1
imul ecx
sar edx, 0x11
mov ebx, edx
add edi, edx
mov eax, 0x2a7feb
imul ecx
mov ecx, dword [0x45b9c0]
sar edx, 9
imul ecx, ecx, 0x67dee
mov eax, edx
shr ebx, 0x1f
shr eax, 0x1f
add ebx, edi
add eax, edx
sub ebx, eax
sub ebx, ecx
push esi
mov dword [0x45b9a8], ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [0x45b9bc]
mov ebx, dword [str._r_____r____]
mov eax, 0x92ea28a3
imul edi
add edx, edi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45b9b0]
mov ebp, ebx
imul ebp, ebp, 0x6f854
sub ebp, eax
mov esi, dword [0x45b9c8]
mov eax, 0x10779897
imul edx
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x6352a551
imul esi
sar edx, 0x12
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
mov ebp, dword [0x45b9a8]
mov edx, ebp
imul edx, edx, 0xc0c12
mov ecx, esi
imul ecx, ecx, 0x6f3fe
add eax, edx
sub eax, dword [0x45b9c4]
lea eax, [eax + ecx - 0x53d95]
mov dword [0x45b9b0], eax
mov eax, dword [0x56f7e8]
mov edx, eax
inc eax
test edx, edx
mov dword [0x56f7e8], eax
jle 0x41e0a3
mov eax, 0x93a3ffdd
imul ebx, ebx, 0xa4f50
imul ebp, ebp, 0x6a5ba
imul edi
add edx, edi
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x6352a551
imul dword [0x45b9c4]
add ebp, ecx
mov ecx, dword [0x45b9b8]
sar edx, 0x12
imul ecx, ecx, 0xc0c12
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add ebp, eax
add ecx, ebp
mov ebp, dword [0x45b9c0]
lea ebx, [ecx + ebp - 0x53d95]
mov eax, 0x55e2c8
mov dword [0x45b9b4], ebx
lea edi, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41ddd0
sub eax, edi
cmp eax, 5
jbe 0x41e030
mov eax, 0x24d17191
imul esi
sar edx, 0x10
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov edx, dword [0x45b9ac]
imul edx, edx, 0x6ef8e
add ecx, edx
mov eax, 0x6352a551
imul ebp
sar edx, 0x12
add ecx, edx
mov edi, edx
mov eax, 0x6352a551
imul ebx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
shr edi, 0x1f
add edi, ecx
sub edi, eax
mov eax, 0x2682f007
imul esi
mov ecx, esi
imul ecx, ecx, 0x1b669
sar edx, 0x10
mov eax, edx
shr eax, 0x1f
add edi, ecx
add eax, edx
sub edi, eax
push 0x55e2c8
mov dword [0x45b9b8], edi
mov dword [0x55f3cc], 0
call fcn.00424b70
mov ecx, dword [0x45b9b0]
mov esi, eax
mov eax, 0x92ea28a3
imul ecx
mov eax, dword [0x45b9c0]
add edx, ecx
imul eax, eax, 0x85399
imul ecx, ecx, 0x67dee
sar edx, 0x12
mov edi, edx
shr edi, 0x1f
add edi, edx
mov edx, dword [0x45b9c8]
imul edx, edx, 0x6f3fe
add edi, edx
mov edx, dword [0x45b9b8]
add edi, eax
mov eax, 0x6352a551
imul edx
sar edx, 0x12
mov ebx, edx
add edi, edx
mov edx, dword [0x45b9bc]
imul edx, edx, 0x53d95
shr ebx, 0x1f
add ebx, edi
add ebx, edx
mov edx, dword [0x45b9ac]
mov eax, 0x2a7feb
imul edx
sar edx, 9
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
add ebx, ecx
push 0
mov dword [0x45b9bc], ebx
call fcn.0042f427
mov eax, dword [0x56f7a8]
mov ecx, dword [eax]
add esp, 4
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0x2c]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [0x45b9b8]
mov edi, dword [0x45b9bc]
imul ebx, ebx, 0x85399
mov eax, 0x10779897
imul dword [0x45b9ac]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov esi, dword [0x45b9c8]
mov eax, 0x6352a551
imul edi
imul edi, edi, 0x53d95
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
mov ebx, dword [0x45b9b4]
mov edx, ebx
imul edx, edx, 0x3110b
mov ecx, esi
imul ecx, ecx, 0x6f3fe
sub eax, edi
sub eax, edx
add eax, ecx
mov ebp, eax
mov edi, 0x55e2c8
mov dword [0x45b9c0], ebp
lea eax, [edi + 1]
nop
mov dl, byte [edi]
inc edi
test dl, dl
jne 0x41df80
sub edi, eax
cmp edi, 0x100
jae 0x41dfa4
xor edi, edi
mov al, byte [edi + 0x55e2c8]
mov byte [edi + 0x55eac8], al
inc edi
test al, al
jne 0x41df93
mov edi, dword [0x45b9c4]
mov eax, 0x92ea28a3
imul edi
add edx, edi
mov edi, dword [0x45b9a8]
imul edi, edi, 0x6ef8e
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x6352a551
imul ebx
sar edx, 0x12
add edi, edx
mov eax, edx
mov edx, dword [0x45b9b8]
shr eax, 0x1f
add eax, edi
mov edi, edx
imul edi, edi, 0xa4f50
add eax, edi
mov edi, eax
mov eax, 0x6352a551
imul edx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x9dbc161
imul dword [0x45b9b8]
sar edx, 0xe
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
add edi, ecx
mov dword [0x45b9c4], edi
mov ecx, 0x200
xor eax, eax
mov edi, 0x55e2c8
rep stosd dword es:[edi], eax
mov eax, 0x92ea28a3
imul esi, esi, 0xde7fc
imul ebp, ebp, 0x6a5ba
imul ebx
add edx, ebx
sar edx, 0x12
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x6352a551
imul ebx
sub esi, ecx
mov ecx, dword [0x45b9ac]
sar edx, 0x12
add esi, edx
mov edi, edx
mov eax, 0x6352a551
imul ecx
shr edi, 0x1f
add edi, esi
sar edx, 0x12
add edi, edx
mov esi, edx
mov eax, 0x9dbc161
imul ecx
sar edx, 0xe
shr esi, 0x1f
add esi, edi
mov eax, edx
shr eax, 0x1f
add esi, ebp
add eax, edx
sub esi, eax
pop edi
mov dword [str._r_____r____], esi
pop esi
pop ebp
mov eax, 1
pop ebx
pop ecx
ret
mov ecx, dword [0x45b9ac]
mov eax, 0x24d17191
imul ecx, ecx, 0x6ef8e
imul esi
sar edx, 0x10
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, ecx
mov ecx, dword [0x45b9c0]
mov eax, 0x6352a551
imul ecx
mov ecx, dword [0x45b9b4]
sar edx, 0x12
mov ebx, edx
add edi, edx
mov eax, 0x6352a551
imul ecx
sar edx, 0x12
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebx, 0x1f
add ebx, edi
sub ebx, eax
mov ecx, esi
imul ecx, ecx, 0x1b669
mov eax, 0x2682f007
imul esi
add ebx, ecx
lea ecx, [esp + 0x10]
push ecx
push 0
sar edx, 0x10
push 0
mov eax, edx
shr eax, 0x1f
push 0x41d0e0
add eax, edx
push 0
sub ebx, eax
push 0
mov dword [0x45b9b8], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
mov dword [0x45c1b8], eax
call fcn.0042f427
add esp, 4
pop edi
pop esi
pop ebp
mov dword [0x56f7e4], eax
mov eax, 1
pop ebx
pop ecx
ret