Function at 0x41f070
Capabilities:
Create thread

Disassembly:
mov eax, dword [0x45dbe0]
sub esp, 0x18
push ebx
push esi
push edi
push 1
cdq
push 0x388a7f11
push edx
push eax
call fcn.004305f0
mov edi, dword [0x45dbc8]
mov esi, eax
push 2
mov eax, edi
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub esi, eax
mov eax, dword [0x45dbc4]
push 1
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbe8]
add esi, eax
mov ebx, dword [0x45dbcc]
mov eax, 0x2d0ae8c5
mul ecx
mov eax, ecx
imul ecx, ecx, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add esi, eax
mov edx, ebx
imul edx, edx, 0x388a7f11
mov eax, edi
imul eax, eax, 0x1b912b5c
sub esi, edx
add esi, eax
mov eax, dword [esp + 0x28]
sub esi, ecx
cmp eax, 0x132db2c
mov dword [0x45dbd8], esi
je 0x41f126
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, 0x64
push 0x3e8
call edi
dec esi
jne 0x41f113
pop edi
pop esi
xor eax, eax
pop ebx
add esp, 0x18
ret
mov eax, dword [0x45dbd0]
push ebp
cdq
mov ecx, eax
mov eax, dword [0x45dbe4]
push 2
mov ebp, edx
push 0xbeb5aaf
cdq
push ebp
push ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], edx
call fcn.004305f0
mov ecx, dword [esp + 0x1c]
mov ebp, eax
mov eax, 0x1f64bb9f
mul ebx
push 2
shr edx, 0x1c
push 0x1b912b5c
sub ebp, edx
mov edx, dword [esp + 0x20]
push ecx
push edx
call fcn.004305f0
imul edi, edi, 0x3903276d
add ebp, eax
sub ebp, edi
mov edi, dword [0x45dbc4]
mov eax, edi
imul eax, eax, 0x7672ee00
mov ecx, ebx
imul ecx, ecx, 0x74f4f79a
add ebp, eax
push 2
mov eax, ebx
cdq
push 0x1b912b5c
push edx
add ebp, ecx
push eax
mov dword [0x45dbdc], ebp
call fcn.004305f0
mov edx, dword [esp + 0x1c]
push 2
push 0xbeb5aaf
mov ebx, eax
mov eax, dword [esp + 0x20]
push edx
push eax
call fcn.004305f0
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
push 1
push 0xba7a7bcd
push ecx
push edx
sub ebx, eax
call fcn.004305f0
imul esi, esi, 0x1b912b5c
sub ebx, eax
mov eax, 0x9a168f41
mul edi
mov eax, dword [0x45dbd4]
imul eax, eax, 0x7114fe22
lea ecx, [esp + 0x10]
push ecx
push 0
push 0
shr edx, 0x1f
add ebx, edx
push 0x414680
sub ebx, esi
push 0
add ebx, eax
push 0
mov dword [0x45dbe4], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ebx, eax
mov eax, dword [0x45dbdc]
push 1
cdq
push 0xc6fcd893
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbe0]
mov ecx, dword [0x45dbd0]
mov edi, eax
mov eax, 0x1f64bb9f
mul esi
imul esi, esi, 0x3053d3f1
shr edx, 0x1c
sub edi, edx
mov eax, 0x2d0ae8c5
mul ecx
sub ecx, edx
shr ecx, 1
add ecx, edx
shr ecx, 0x1f
add edi, ecx
mov ecx, dword [0x45dbe4]
mov eax, 0x45291d0f
imul ecx
mov ecx, dword [0x45dbd8]
imul ecx, ecx, 0x7672ee00
sar edx, 0x1d
mov eax, edx
add edi, esi
shr eax, 0x1f
add edi, edx
add eax, edi
add eax, ecx
push ebx
mov dword [0x45dbc8], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [0x45dbe8]
push 2
mov eax, esi
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebp, dword [0x45dbc4]
mov ecx, ebp
imul ecx, ecx, 0xf414a551
sub ecx, eax
mov eax, 0x9a168f41
mul dword [0x45dbd0]
shr edx, 0x1f
sub ecx, edx
mov edx, esi
imul edx, edx, 0x1531b042
sub ecx, edx
mov eax, 0x45291d0f
imul dword [0x45dbd8]
mov ebx, dword [0x45dbe0]
sar edx, 0x1d
add ecx, edx
mov eax, edx
shr eax, 0x1f
add eax, ecx
mov ecx, dword [0x45dbe4]
imul ecx, ecx, 0x7d86eec7
sub eax, ecx
lea edx, [eax + ebx - 0x7672ee00]
mov eax, dword [0x571b08]
mov ecx, eax
inc eax
test ecx, ecx
push 1
mov dword [0x45dbd0], edx
mov dword [0x571b08], eax
push 0x388a7f11
jle 0x41f664
mov eax, dword [0x45dbdc]
cdq
mov edi, eax
push edx
push edi
mov dword [esp + 0x34], edx
call fcn.004305f0
mov edx, dword [esp + 0x24]
push 2
push 0x1b912b5c
push edx
push edi
mov dword [esp + 0x3c], eax
call fcn.004305f0
mov ecx, dword [esp + 0x2c]
mov edi, dword [0x45dbc8]
sub eax, ecx
mov ecx, esi
imul ecx, ecx, 0x1b912b5c
mov edx, ebp
imul edx, edx, 0x4f22272
add eax, ecx
add edx, dword [0x45dbe4]
mov ecx, edi
imul ecx, ecx, 0x264da184
add edx, eax
lea edx, [ecx + edx + 0x7672ee00]
mov eax, 0x5605e8
mov dword [0x45dbd4], edx
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x41f3a3
sub eax, ecx
cmp eax, 5
jbe 0x41f5e3
push 1
mov eax, ebx
cdq
push 0x388a7f11
push edx
push eax
call fcn.004305f0
mov ebx, eax
push 2
mov eax, edi
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub ebx, eax
push 1
mov eax, ebp
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
imul edi, edi, 0x1b912b5c
mov ecx, dword [0x45dbcc]
add ebx, eax
imul ecx, ecx, 0x388a7f11
mov eax, 0x2d0ae8c5
mul esi
mov eax, esi
imul esi, esi, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
shr eax, 0x1f
add ebx, eax
sub ebx, ecx
add ebx, edi
sub ebx, esi
push 0x5605e8
mov dword [0x45dbd8], ebx
mov dword [0x5616ec], 0
call fcn.00426280
mov esi, eax
mov eax, dword [0x45dbd0]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edi, eax
mov eax, dword [0x45dbe4]
push 2
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
mov ecx, dword [0x45dbcc]
add edi, eax
mov eax, 0x1f64bb9f
mul ecx
imul ecx, ecx, 0x74f4f79a
mov eax, dword [0x45dbc4]
shr edx, 0x1c
imul eax, eax, 0x7672ee00
sub edi, edx
mov edx, dword [0x45dbc8]
imul edx, edx, 0x3903276d
sub edi, edx
add edi, eax
add edi, ecx
push 0
mov dword [0x45dbdc], edi
call fcn.00430cd7
mov eax, dword [0x571ac8]
mov ecx, dword [eax]
add esp, 4
push 0
push 0
push 0
push 0
push esi
push eax
call dword [ecx + 0x2c]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x45dbe8]
push 1
cdq
push 0xba7a7bcd
push edx
push eax
call fcn.004305f0
mov esi, dword [0x45dbd0]
mov edx, dword [0x45dbd4]
sub edx, esi
imul edx, edx, 0x2b57abfe
mov ebp, dword [0x45dbcc]
mov ecx, eax
add ecx, edx
mov eax, 0x9a168f41
mul esi
mov eax, dword [0x45dbc8]
imul eax, eax, 0x1531b042
shr edx, 0x1f
sub ecx, edx
mov edx, dword [0x45dbd8]
sub ecx, eax
imul edx, edx, 0x3903276d
mov eax, ebp
imul eax, eax, 0x7672ee00
sub ecx, edx
sub ecx, eax
mov ebx, ecx
mov eax, 0x5605e8
mov dword [0x45dbe0], ebx
lea edi, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41f540
sub eax, edi
cmp eax, 0x100
jae 0x41f563
xor eax, eax
mov cl, byte [eax + 0x5605e8]
mov byte [eax + 0x560de8], cl
inc eax
test cl, cl
jne 0x41f552
mov eax, dword [0x45dbe4]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov edi, eax
push 0xfffffffffffffffe
mov eax, esi
cdq
push 0x45858433
push edx
push eax
call fcn.004305f0
mov esi, eax
push 2
mov eax, ebp
cdq
push 0x1b912b5c
push edx
push eax
sub esi, edi
call fcn.004305f0
mov ecx, dword [0x45dbd8]
add esi, eax
imul ecx, ecx, 0x1b912b5c
mov eax, 0x9a168f41
mul dword [0x45dbc4]
shr edx, 0x1f
add esi, edx
mov edx, dword [0x45dbd4]
imul edx, edx, 0x7114fe22
sub esi, ecx
add esi, edx
mov ecx, 0x200
xor eax, eax
mov edi, 0x5605e8
mov dword [0x45dbe4], esi
rep stosd dword es:[edi], eax
jmp 0x41f5e9
mov ebp, dword [0x45dbcc]
mov eax, dword [0x45dbd4]
cdq
mov esi, eax
push 2
mov edi, edx
mov eax, ebp
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
mov ebp, eax
mov eax, dword [0x45dbd8]
push 2
cdq
push 0xbeb5aaf
push edx
push eax
call fcn.004305f0
push 1
push 0xba7a7bcd
push edi
push esi
add ebp, eax
call fcn.004305f0
push 2
push 0x1b912b5c
push edi
push esi
sub ebp, eax
call fcn.004305f0
imul ebx, ebx, 0x264da184
add ebp, eax
mov eax, dword [0x45dbdc]
imul eax, eax, 0x6d4760f7
add ebp, eax
add ebp, ebx
mov dword [0x45dbc4], ebp
pop ebp
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x18
ret
mov eax, ebx
cdq
push edx
push eax
call fcn.004305f0
mov ebx, dword [0x45dbc8]
mov edi, eax
push 2
mov eax, ebx
cdq
push 0x1b912b5c
push edx
push eax
call fcn.004305f0
sub edi, eax
push 1
mov eax, ebp
cdq
push 0xeace4fbe
push edx
push eax
call fcn.004305f0
imul ebx, ebx, 0x1b912b5c
mov ecx, dword [0x45dbcc]
add edi, eax
imul ecx, ecx, 0x388a7f11
mov eax, 0x2d0ae8c5
mul esi
mov eax, esi
imul esi, esi, 0x7672ee00
sub eax, edx
shr eax, 1
add eax, edx
lea edx, [esp + 0x18]
push edx
push 0
shr eax, 0x1f
add edi, eax
push 0
sub edi, ecx
push 0x41e6a0
add edi, ebx
push 0
sub edi, esi
push 0
mov dword [0x45dbd8], edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
mov dword [0x45e4d8], eax
call fcn.00430cd7
add esp, 4
pop ebp
pop edi
pop esi
mov dword [0x571b04], eax
mov eax, 1
pop ebx
add esp, 0x18
ret