Function at 0x41ebe0
Capabilities:
Create thread

Disassembly:
sub esp, 8
push ebx
push esi
push edi
mov ecx, dword [0x45cbe8]
mov eax, 0xc4e5d61
imul ecx
mov eax, dword [0x45cbc8]
imul eax, eax, 0x4ebb783
sar edx, 0x16
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
add ebx, eax
mov eax, 0x680c7cd1
imul dword [0x45cbd4]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov eax, 0x342745e1
imul ecx
imul ecx, ecx, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebx, eax
mov edi, dword [0x45cbe0]
mov eax, 0x74b32761
imul edi
mov eax, dword [esp + 0x18]
sar edx, 0x18
add ebx, edx
mov esi, edx
mov edx, edi
imul edx, edx, 0x23193db
shr esi, 0x1f
add esi, ebx
add esi, edx
sub esi, ecx
cmp eax, 0x132db2c
mov dword [0x45cbd8], esi
je 0x41ec93
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
jmp 0x41ec80
push 0x3e8
call edi
dec esi
jne 0x41ec80
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 8
ret
mov ebx, dword [0x45cbcc]
imul edi, edi, 0x222559d
push ebp
mov eax, 0x315a5211
imul dword [0x45cbe4]
mov eax, dword [0x45cbd0]
lea ebp, [eax + ebx]
sar edx, 0x18
imul ebp, ebp, 0x3e51956
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x993c2c11
imul ebx
add edx, ebx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x680c7cd1
imul dword [0x45cbe4]
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbdc]
imul edx, edx, 0xfcfe96
add eax, ecx
add ebp, edi
mov edi, dword [str._r_____r____]
add eax, ebp
add edx, eax
mov eax, dword [0x45cbc8]
mov dword [0x45cbdc], edx
mov edx, dword [0x45cbd4]
lea ebx, [eax + edx]
mov eax, 0x3b012ec7
imul ebx, ebx, 0x23193db
imul edi
imul edi, edi, 0x4ebb783
sar edx, 0x18
mov ebp, edx
add ebx, edx
mov eax, 0x680c7cd1
imul esi
sar edx, 0x19
shr ebp, 0x1f
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebp, ebx
add ebp, edi
sub ebp, eax
mov eax, 0x83740ec5
imul esi
add edx, esi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
sub ebp, ecx
lea ecx, [esp + 0x10]
push ecx
push 0
push 0
push 0x4141e0
push 0
push 0
mov dword [0x45cbe4], ebp
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [0x45cbe4]
mov esi, eax
mov eax, 0x993c2c11
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, dword [0x45cbd0]
mov edi, eax
mov eax, 0x3bfa58a9
imul ecx
sar edx, 0x17
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [0x45cbe0]
imul edx, edx, 0x14e459e
mov ebx, eax
sub ebx, edi
add ebx, edx
mov eax, 0x342745e1
imul ecx
sar edx, 0x18
mov edi, edx
add ebx, edx
mov eax, 0x206151bf
imul ecx
mov ecx, dword [0x45cbc8]
imul ecx, ecx, 0xfcfe96
sar edx, 0x15
shr edi, 0x1f
mov eax, edx
add edi, ebx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
push esi
mov dword [0x45cbc8], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [0x45cbdc]
mov edi, dword [0x45cbd8]
mov ecx, dword [0x45cbc8]
mov esi, dword [0x45cbe8]
mov eax, 0x315a5211
imul ebx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebp, edi
imul ebp, ebp, 0x52fe876
sub ebp, eax
mov edx, ecx
imul edx, edx, 0x3575d9d
add ebp, edx
mov edx, dword [0x45cbd0]
mov eax, esi
imul eax, eax, 0x5335ef4
add ebp, eax
mov eax, 0x3b012ec7
imul edx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x206151bf
imul edi
sar edx, 0x15
add ebp, edx
mov eax, edx
shr eax, 0x1f
add eax, ebp
sub eax, dword [0x45cbe4]
sub eax, 0xfcfe96
mov dword [0x45cbd0], eax
mov eax, dword [0x570a08]
mov edx, eax
inc eax
test edx, edx
mov dword [0x570a08], eax
jle 0x41f1f4
mov eax, dword [str._r_____r____]
add edi, eax
imul eax, eax, 0x4ebb783
imul edi, edi, 0x3575d9d
add edi, eax
mov eax, 0x680c7cd1
imul ebx
sar edx, 0x19
mov eax, ebx
imul eax, eax, 0x4e899b9
mov ebp, edx
add edi, edx
shr ebp, 0x1f
add ebp, edi
mov edi, dword [0x45cbe0]
add ebp, eax
mov eax, 0x74b32761
imul ebx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ebp, eax
mov eax, 0x55f4e8
lea ebp, [edi + ebp - 0xfcfe96]
lea edx, [eax + 1]
mov dword [0x45cbd4], ebp
mov dword [esp + 0x1c], edx
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41ef06
sub eax, dword [esp + 0x1c]
cmp eax, 5
jbe 0x41f173
mov eax, 0xc4e5d61
imul ecx, ecx, 0x4ebb783
imul esi
sar edx, 0x16
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
mov eax, 0x680c7cd1
imul ebp
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
add ebx, ecx
sub ebx, eax
mov eax, 0x342745e1
imul esi
imul esi, esi, 0xfcfe96
sar edx, 0x18
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x74b32761
imul edi
imul edi, edi, 0x23193db
sar edx, 0x18
sub ebx, ecx
mov eax, edx
shr eax, 0x1f
add ebx, edx
add eax, ebx
add eax, edi
sub eax, esi
push 0x55f4e8
mov dword [0x45cbd8], eax
mov dword [0x5605ec], 0
call fcn.00425fe0
mov ecx, dword [0x45cbcc]
mov edx, dword [0x45cbd0]
mov edi, dword [0x45cbe4]
mov esi, eax
lea ebx, [edx + ecx]
mov eax, 0x315a5211
imul ebx, ebx, 0x3e51956
imul edi
sar edx, 0x18
mov ebp, edx
add ebx, edx
mov eax, 0x993c2c11
imul ecx
add edx, ecx
mov ecx, dword [0x45cbe0]
sar edx, 0x19
imul ecx, ecx, 0x222559d
mov eax, edx
shr eax, 0x1f
add eax, edx
shr ebp, 0x1f
add ebp, ebx
sub ebp, eax
mov eax, 0x680c7cd1
imul edi
add ebp, ecx
mov ecx, dword [0x45cbdc]
imul ecx, ecx, 0xfcfe96
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add ebp, edx
add eax, ebp
add eax, ecx
push 0
mov dword [0x45cbdc], eax
call fcn.00430977
mov eax, dword [0x5709c8]
mov edx, dword [eax]
add esp, 4
push 0
push 0
push 0
push 0
push esi
push eax
call dword [edx + 0x2c]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [0x45cbe8]
mov eax, dword [0x45cbd0]
mov ebp, dword [0x45cbd4]
mov edi, dword [0x45cbd8]
lea ecx, [eax + esi]
imul ecx, ecx, 0x456b154
mov edx, ebp
imul edx, edx, 0x5335ef4
sub ecx, edx
mov eax, edi
imul eax, eax, 0x222559d
add ecx, eax
mov eax, 0x3b012ec7
imul dword [0x45cbcc]
sar edx, 0x18
mov ebx, dword [0x45cbdc]
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x83740ec5
imul esi
add edx, esi
sar edx, 0x19
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, ebx
imul ecx, ecx, 0xfcfe96
sub eax, ecx
mov dword [0x45cbe0], eax
mov eax, 0x55f4e8
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41f0b4
sub eax, ecx
cmp eax, 0x100
jae 0x41f0e1
xor eax, eax
jmp 0x41f0d0
mov cl, byte [eax + 0x55f4e8]
mov byte [eax + 0x55fce8], cl
inc eax
test cl, cl
jne 0x41f0d0
mov edx, dword [0x45cbc8]
mov ecx, dword [0x45cbe4]
lea eax, [edx + ebp]
imul eax, eax, 0x23193db
mov dword [esp + 0x1c], eax
mov eax, 0x315a5211
imul ecx
mov ecx, dword [esp + 0x1c]
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x3b012ec7
imul dword [str._r_____r____]
sar edx, 0x18
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x4ebb783
add ecx, eax
mov eax, 0x680c7cd1
imul edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov eax, 0x83740ec5
imul edi
add edx, edi
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
sub ecx, eax
mov dword [0x45cbe4], ecx
mov ecx, 0x200
xor eax, eax
mov edi, 0x55f4e8
rep stosd dword es:[edi], eax
mov ecx, dword [0x45cbcc]
imul esi, esi, 0x5335ef4
imul ebx, ebx, 0x3575d9d
mov eax, 0x315a5211
imul ecx
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edi, eax
mov eax, 0x315a5211
imul ebp
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, eax
mov eax, 0x680c7cd1
imul ebp
sar edx, 0x19
add edi, ebx
add edi, esi
add edi, edx
mov esi, edx
mov edx, ecx
imul edx, edx, 0x4e899b9
shr esi, 0x1f
add esi, edi
add esi, edx
mov eax, 0x83740ec5
imul ecx
add edx, ecx
sar edx, 0x19
mov eax, edx
shr eax, 0x1f
add eax, edx
pop ebp
sub esi, eax
pop edi
mov dword [str._r_____r____], esi
pop esi
mov eax, 1
pop ebx
add esp, 8
ret
mov eax, 0xc4e5d61
imul ecx, ecx, 0x4ebb783
imul esi
sar edx, 0x16
mov edi, edx
shr edi, 0x1f
add edi, edx
add edi, ecx
mov ecx, dword [0x45cbd4]
mov eax, 0x680c7cd1
imul ecx
sar edx, 0x19
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
mov eax, 0x342745e1
imul esi
imul esi, esi, 0xfcfe96
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add eax, edx
sub edi, ecx
mov ecx, dword [0x45cbe0]
sub edi, eax
mov eax, 0x74b32761
imul ecx
imul ecx, ecx, 0x23193db
sar edx, 0x18
mov eax, edx
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
lea ecx, [esp + 0x14]
push ecx
push 0
push 0
push 0x41e240
push 0
sub eax, esi
push 0
mov dword [0x45cbd8], eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
mov dword [0x45d3d8], eax
call fcn.00430977
add esp, 4
pop ebp
pop edi
pop esi
mov dword [0x570a04], eax
mov eax, 1
pop ebx
add esp, 8
ret