Function at 0x402d90
Capabilities:
Create thread
Execute anti-debugging instructions
Terminate thread

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xc
mov eax, dword [0x416004]
xor eax, esp
mov dword [esp + 8], eax
push ebx
push esi
rdtsc
mov esi, eax
mov eax, 0xd1b71759
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
push edi
shr edx, 0xc
imul eax, edx, 0x1388
sub esi, eax
add esi, 0xd48
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x401670
push 0
push 0
call ebx
mov edi, eax
rdtsc
mov esi, eax
mov eax, 0x1b4e81b5
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 9
imul eax, edx, 0x12c0
sub esi, eax
add esi, 0xf3c
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4016d0
push 0
push 0
call ebx
call fcn.00401060
rdtsc
mov esi, eax
mov eax, 0x45e7b273
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xc
imul eax, edx, 0x3a98
sub esi, eax
add esi, 0x2af8
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
rdtsc
mov esi, eax
mov ecx, esi
mov eax, 0x57619f1
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 8
imul eax, edx, 0x2ee0
sub esi, eax
add esi, 0x2710
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402060
push 0
push 0
call ebx
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4022c0
push 0
push 0
call ebx
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4018e0
push 0
push 0
call ebx
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x401b90
push 0
push 0
call ebx
push dword [0x417178]
mov ebx, dword [sym.imp.WINMM.dll_waveOutReset]
call ebx
mov dword [0x417178], 0
call fcn.00401190
push 0
push edi
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
rdtsc
mov esi, eax
mov eax, 0x95cbec1b
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xd
imul eax, edx, 0x36b0
sub esi, eax
add esi, 0x32c8
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x401eb0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
rdtsc
mov esi, eax
mov eax, 0xd1b71759
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xd
imul eax, edx, 0x2710
sub esi, eax
add esi, 0x2328
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x401f50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
rdtsc
mov esi, eax
mov eax, 0x10624dd3
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 9
imul eax, edx, 0x1f40
sub esi, eax
add esi, 0x1b58
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x4023c0
push 0
push 0
call esi
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402320
push 0
push 0
call esi
push dword [0x417178]
call ebx
mov dword [0x417178], 0
call fcn.004012c0
rdtsc
mov esi, eax
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
mov eax, 0xd1b71759
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xd
imul eax, edx, 0x2710
sub esi, eax
add esi, 0x2328
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x401ff0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
rdtsc
mov esi, eax
mov eax, 0xe90452d5
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xc
imul eax, edx, 0x1194
sub esi, eax
add esi, 0xc80
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402c40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
rdtsc
mov esi, eax
mov eax, 0x57619f1
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 9
imul eax, edx, 0x5dc0
sub esi, eax
add esi, 0x5208
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402570
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
rdtsc
mov esi, eax
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
mov eax, 0x10624dd3
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 8
imul eax, edx, 0xfa0
sub esi, eax
add esi, 0xa8c
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402820
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
rdtsc
mov esi, eax
mov eax, 0x45e7b273
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xb
imul eax, edx, 0x1d4c
sub esi, eax
add esi, 0x1900
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402690
push 0
push 0
call esi
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402770
push 0
push 0
call esi
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402890
push 0
push 0
call esi
push dword [0x417178]
call ebx
mov dword [0x417178], 0
call fcn.004013f0
rdtsc
mov esi, eax
mov eax, 0xd1b71759
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xe
imul eax, edx, 0x4e20
sub esi, eax
add esi, 0x4650
push esi
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402a40
push 0
push 0
call esi
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402af0
push 0
push 0
call esi
push dword [0x417178]
call ebx
mov dword [0x417178], 0
call fcn.00401530
rdtsc
mov esi, eax
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, esi
mov eax, 0xf6b948a5
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 0xe
imul eax, edx, 0x4268
sub esi, eax
add esi, 0x3e80
push esi
call ebx
lea eax, [esp + 0x10]
push eax
push 0
push 0
push 0x402d50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call edi
rdtsc
mov esi, eax
mov eax, 0x10624dd3
mov ecx, esi
shl ecx, 0xd
xor esi, ecx
mov ecx, esi
shl ecx, 0x11
xor esi, ecx
mov ecx, esi
shl ecx, 5
xor esi, ecx
mul esi
shr edx, 8
imul eax, edx, 0xfa0
sub esi, eax
add esi, 0xbb8
push esi
call ebx
mov ecx, dword [esp + 0x14]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00403341
mov esp, ebp
pop ebp
ret