Function at 0x420090
Capabilities:
Create thread

Disassembly:
sub esp, 0x18
push ebx
push ebp
push esi
push edi
mov edi, dword [0x45ece8]
mov eax, edi
cdq
mov ebx, eax
mov eax, dword [0x45ece0]
push 8
mov ebp, edx
cdq
push 0x974b287b
push edx
push eax
call fcn.00432020
mov esi, eax
mov eax, dword [0x45ecd4]
push 0x13
cdq
push 0x2c2da253
push edx
push eax
call fcn.00432020
push 0x13
push 0x392bae29
push ebp
push ebx
sub esi, eax
call fcn.00432020
push 0x14
push 0x471ee414
push ebp
push ebx
sub esi, eax
call fcn.00432020
imul edi, edi, 0x31b5823a
mov ecx, dword [0x45ecc8]
add esi, eax
imul ecx, ecx, 0x2c2da253
mov eax, dword [0x45ece0]
imul eax, eax, 0x68b4d785
sub esi, eax
mov eax, dword [esp + 0x2c]
add esi, edi
add esi, ecx
cmp eax, 0x132b600
mov dword [0x45ecd8], esi
je 0x420144
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
nop
push 0x3e8
call edi
dec esi
jne 0x420130
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x18
ret
mov eax, dword [0x45ece4]
mov ebp, dword [0x45eccc]
cdq
mov edi, eax
push 0xd
mov ebx, edx
mov eax, ebp
cdq
push 0x3dbf610d
push edx
push eax
call fcn.00432020
mov edx, dword [0x45ecd0]
add ebp, edx
imul ebp, ebp, 0x3c2325f6
push 0x13
push 0x2c2da253
push ebx
push edi
sub ebp, eax
call fcn.00432020
push 0x14
push 0x76aab896
push ebx
push edi
add ebp, eax
call fcn.00432020
add ebp, eax
mov eax, dword [0x45ece0]
imul eax, eax, 0x42a7b17d
mov ecx, dword [0x45ecc8]
add ebp, eax
mov eax, dword [0x45ecdc]
imul eax, eax, 0x31b5823a
sub ebp, eax
mov eax, esi
mov esi, dword [str._r_____r____]
cdq
mov dword [esp + 0x1c], edx
mov edx, dword [0x45ecd4]
mov dword [esp + 0x18], eax
push 0x10
mov dword [0x45ecdc], ebp
lea ebp, [ecx + edx]
mov eax, esi
imul ebp, ebp, 0x68b4d785
cdq
push 0xe4325444
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0x13
push 0x2c2da253
push ecx
sub eax, ebp
push edx
mov ebp, eax
call fcn.00432020
push 0x14
push 0x76aab896
push ebx
push edi
sub ebp, eax
call fcn.00432020
mov ecx, dword [esp + 0x18]
push 0xf
sub ebp, eax
mov eax, dword [esp + 0x20]
push 0x3c2325f6
push eax
push ecx
call fcn.00432020
imul esi, esi, 0x2c2da253
sub ebp, eax
add ebp, esi
lea edx, [esp + 0x10]
mov dword [0x45ece4], ebp
push edx
push 0
push 0
push 0x415450
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ebx, eax
mov eax, dword [0x45ecd0]
cdq
mov esi, eax
mov eax, dword [0x45ece4]
push 0xd
mov edi, edx
cdq
push 0x3dbf610d
push edx
push eax
call fcn.00432020
push 8
push 0x42a7b17d
push edi
push esi
mov ebp, eax
call fcn.00432020
push 3
push 0xce4a7dc6
push edi
sub eax, ebp
push esi
mov ebp, eax
call fcn.00432020
push 0x13
push 0x392bae29
push edi
push esi
add ebp, eax
call fcn.00432020
mov ecx, dword [0x45ecc8]
add ebp, eax
imul ecx, ecx, 0x31b5823a
mov eax, dword [0x45ece0]
imul eax, eax, 0xafbbe1e
add ebp, eax
sub ebp, ecx
push ebx
mov dword [0x45ecc8], ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebp, dword [0x45ecdc]
mov ebx, dword [0x45ecd8]
mov eax, ebp
cdq
mov esi, eax
push 3
mov dword [esp + 0x28], edx
mov eax, ebx
cdq
push 0xce4a7dc6
push edx
push eax
mov dword [esp + 0x30], esi
call fcn.00432020
mov dword [esp + 0x2c], eax
mov eax, dword [0x45ecd0]
push 0x10
cdq
push 0xe4325444
push edx
push eax
call fcn.00432020
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x2c]
push 0x14
push 0x76aab896
push edx
sub ecx, eax
push esi
mov dword [esp + 0x3c], ecx
call fcn.00432020
mov ecx, dword [esp + 0x2c]
sub ecx, eax
mov edi, dword [0x45ecc8]
mov esi, dword [0x45ece8]
mov eax, edi
imul eax, eax, 0x3dbf610d
add ecx, eax
mov edx, ebx
imul edx, edx, 0x76aab896
mov eax, esi
imul eax, eax, 0x471ee414
add ecx, edx
mov edx, dword [0x45ece4]
add ecx, eax
mov eax, dword [0x572b08]
sub ecx, edx
add ecx, 0x31b5823a
mov dword [0x45ecd0], ecx
mov ecx, eax
inc eax
test ecx, ecx
mov dword [0x572b08], eax
jle 0x420757
mov edx, dword [str._r_____r____]
mov ecx, dword [esp + 0x24]
lea eax, [edx + ebx]
mov edx, dword [esp + 0x20]
imul eax, eax, 0x3dbf610d
push 0x13
push 0x2c2da253
push ecx
push edx
mov dword [esp + 0x3c], eax
call fcn.00432020
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x20]
push 8
add ecx, eax
mov eax, dword [esp + 0x28]
push 0x974b287b
push eax
push edx
mov dword [esp + 0x3c], ecx
call fcn.00432020
mov ecx, dword [esp + 0x2c]
mov ebx, dword [0x45ece0]
sub ecx, eax
mov eax, dword [str._r_____r____]
mov edx, ebp
imul eax, eax, 0x2c2da253
imul edx, edx, 0x392bae29
add edx, ebx
add edx, ecx
lea eax, [eax + edx + 0x31b5823a]
mov dword [0x45ecd4], eax
mov eax, 0x5615e8
lea ecx, [eax + 1]
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x420410
sub eax, ecx
cmp eax, 5
jbe 0x4206a3
mov eax, esi
cdq
mov dword [esp + 0x20], eax
push 8
mov dword [esp + 0x28], edx
mov eax, ebx
cdq
push 0x974b287b
push edx
push eax
call fcn.00432020
mov ebp, eax
mov eax, dword [0x45ecd4]
push 0x13
cdq
push 0x2c2da253
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push 0x13
push 0x392bae29
push ecx
push edx
sub ebp, eax
call fcn.00432020
mov ecx, dword [esp + 0x20]
push 0x14
sub ebp, eax
mov eax, dword [esp + 0x28]
push 0x471ee414
push eax
push ecx
call fcn.00432020
imul ebx, ebx, 0x68b4d785
imul esi, esi, 0x31b5823a
imul edi, edi, 0x2c2da253
add ebp, eax
sub ebp, ebx
add ebp, esi
add ebp, edi
push 0x5615e8
mov dword [0x45ecd8], ebp
mov dword [0x5626ec], 0
call fcn.00427cb0
mov ebp, dword [0x45eccc]
mov ebx, eax
mov eax, dword [0x45ece4]
cdq
mov esi, eax
push 0xd
mov edi, edx
mov eax, ebp
cdq
push 0x3dbf610d
push edx
push eax
call fcn.00432020
mov edx, dword [0x45ecd0]
add ebp, edx
imul ebp, ebp, 0x3c2325f6
push 0x13
push 0x2c2da253
push edi
push esi
sub ebp, eax
call fcn.00432020
push 0x14
push 0x76aab896
push edi
push esi
add ebp, eax
call fcn.00432020
mov ecx, dword [0x45ecdc]
add ebp, eax
imul ecx, ecx, 0x31b5823a
mov eax, dword [0x45ece0]
imul eax, eax, 0x42a7b17d
add ebp, eax
sub ebp, ecx
push 0
mov dword [0x45ecdc], ebp
call fcn.00432707
mov eax, dword [0x572ac8]
mov edx, dword [eax]
add esp, 4
push 0
push 0
push 0
push 0
push ebx
push eax
call dword [edx + 0x2c]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x45ecd0]
mov esi, dword [0x45ece8]
mov ebx, dword [0x45eccc]
lea edi, [eax + esi]
push 0xffffffffffffffef
imul edi, edi, 0x1bcdabbc
mov eax, ebx
cdq
push 0x1bcdabbc
push edx
push eax
call fcn.00432020
sub eax, edi
mov dword [esp + 0x2c], eax
push 0xf
mov eax, esi
cdq
push 0x3c2325f6
push edx
push eax
call fcn.00432020
mov edi, dword [0x45ecd8]
mov ecx, dword [esp + 0x2c]
mov ebp, dword [0x45ecdc]
mov edx, edi
imul edx, edx, 0x42a7b17d
add ecx, eax
add ecx, edx
mov edx, dword [0x45ecd4]
mov eax, ebp
imul edx, edx, 0x471ee414
imul eax, eax, 0x31b5823a
add ecx, eax
sub ecx, edx
mov dword [0x45ece0], ecx
mov ecx, 0x5615e8
lea eax, [ecx + 1]
lea esp, [esp]
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x4205e0
sub ecx, eax
cmp ecx, 0x100
jae 0x420604
xor eax, eax
mov cl, byte [eax + 0x5615e8]
mov byte [eax + 0x561de8], cl
inc eax
test cl, cl
jne 0x4205f3
mov eax, edi
cdq
mov dword [esp + 0x18], eax
mov eax, dword [0x45ece4]
push 0xffffffffffffffeb
mov dword [esp + 0x20], edx
cdq
push 0x8955476a
push edx
push eax
call fcn.00432020
mov ecx, dword [0x45ecd4]
mov edi, eax
mov eax, dword [0x45ecc8]
add eax, ecx
imul eax, eax, 0x68b4d785
sub edi, eax
mov eax, dword [str._r_____r____]
push 0x10
cdq
push 0xe4325444
push edx
push eax
call fcn.00432020
mov edx, dword [esp + 0x1c]
push 0x13
push 0x2c2da253
add edi, eax
mov eax, dword [esp + 0x20]
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0xf
push 0x3c2325f6
push ecx
push edx
sub edi, eax
call fcn.00432020
sub edi, eax
mov eax, dword [str._r_____r____]
imul eax, eax, 0x2c2da253
add edi, eax
mov dword [0x45ece4], edi
mov ecx, 0x200
xor eax, eax
mov edi, 0x5615e8
rep stosd dword es:[edi], eax
jmp 0x4206a9
mov ebx, dword [0x45eccc]
mov eax, ebx
cdq
mov edi, eax
mov eax, dword [0x45ecd4]
push 0x13
mov dword [esp + 0x28], edx
cdq
push 0x2c2da253
push edx
push eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
call fcn.00432020
mov ecx, dword [esp + 0x24]
push 0x14
push 0x76aab896
push ecx
push edi
mov dword [esp + 0x3c], eax
call fcn.00432020
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x1c]
push 0x14
push 0x76aab896
add ecx, eax
mov eax, dword [esp + 0x20]
push edx
push eax
mov dword [esp + 0x3c], ecx
call fcn.00432020
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x24]
push 0xf
push 0x3c2325f6
sub ecx, eax
push edx
mov eax, edi
push eax
mov dword [esp + 0x3c], ecx
call fcn.00432020
imul ebp, ebp, 0x3dbf610d
imul esi, esi, 0x471ee414
mov ecx, dword [esp + 0x2c]
imul ebx, ebx, 0x392bae29
sub ecx, eax
add ecx, ebp
pop edi
add ecx, esi
pop esi
add ecx, ebx
pop ebp
mov dword [str._r_____r____], ecx
mov eax, 1
pop ebx
add esp, 0x18
ret
mov ebx, dword [0x45ece0]
mov eax, esi
cdq
mov dword [esp + 0x20], eax
push 8
mov dword [esp + 0x28], edx
mov eax, ebx
cdq
push 0x974b287b
push edx
push eax
call fcn.00432020
mov ebp, eax
mov eax, dword [0x45ecd4]
push 0x13
cdq
push 0x2c2da253
push edx
push eax
call fcn.00432020
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
push 0x13
push 0x392bae29
push ecx
push edx
sub ebp, eax
call fcn.00432020
mov ecx, dword [esp + 0x20]
push 0x14
sub ebp, eax
mov eax, dword [esp + 0x28]
push 0x471ee414
push eax
push ecx
call fcn.00432020
imul ebx, ebx, 0x68b4d785
imul esi, esi, 0x31b5823a
lea edx, [esp + 0x14]
imul edi, edi, 0x2c2da253
push edx
push 0
add ebp, eax
push 0
sub ebp, ebx
push 0x41f620
add ebp, esi
push 0
add ebp, edi
push 0
mov dword [0x45ecd8], ebp
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
mov dword [0x45f4d8], eax
call fcn.00432707
add esp, 4
pop edi
pop esi
pop ebp
mov dword [0x572b04], eax
mov eax, 1
pop ebx
add esp, 0x18
ret