Function at 0x595a00
Capabilities:
Create thread

Disassembly:
push rbp
sub rsp, 0xb0
mov rbp, rsp
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0x98], 0
nop
mov dword [rbp + 0x8c], 0
mov eax, dword [rbp + 0x70]
sub eax, 0x29e
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x78]
cmp eax, dword [rbp + 0x70]
jle 0x595a95
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x1c5
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x88]
sub eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x80]
sub ecx, dword [rbp + 0x7c]
cmp eax, ecx
jle 0x595abd
mov eax, 0x16d
sub eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
mov ecx, dword [rbp + 0x84]
add ecx, dword [rbp + 0x80]
cmp eax, ecx
jge 0x595ae8
mov eax, dword [rbp + 0x84]
add eax, 0x55
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x84]
add eax, 0x59
mov dword [rbp + 0x88], eax
add dword [rbp + 0x8c], 1
cmp dword [rbp + 0x8c], 3
jne 0x595a6c
nop
mov eax, 0x13e
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x183
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1a7
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0x88]
mov ecx, dword [rbp + 0x84]
add ecx, dword [rbp + 0x80]
cmp eax, ecx
jge 0x595b72
lea rcx, [rbp + 0x8c]
lea rdx, [rbp + 0x84]
lea r8, [rbp + 0x80]
call fcn.0053eaa0
mov dword [rbp + 0x90], 0
cmp dword [rbp + 0x90], 1
jge 0x595bf6
add dword [rbp + 0x90], 1
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x74]
cmp eax, dword [rbp + 0x70]
jle 0x595ba9
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1c9
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x88]
sub eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x80]
sub ecx, dword [rbp + 0x7c]
cmp eax, ecx
jle 0x595bce
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x8c]
imul eax, dword [rbp + 0x88]
mov dword [rbp + 0x94], eax
cmp dword [rbp + 0x90], 1
jl 0x595b85
nop
mov dword [rbp + 0x90], 0
cmp dword [rbp + 0x90], 1
jge 0x595c81
add dword [rbp + 0x90], 1
mov eax, dword [rbp + 0x78]
sub eax, dword [rbp + 0x74]
cmp dword [rbp + 0x80], eax
jne 0x595c2e
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x182
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0x88]
mov ecx, dword [rbp + 0x84]
add ecx, dword [rbp + 0x80]
cmp eax, ecx
jge 0x595c56
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x8c]
imul eax, dword [rbp + 0x88]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x330
mov dword [rbp + 0x70], eax
cmp dword [rbp + 0x90], 1
jl 0x595c0a
nop
mov eax, dword [rbp + 0x94]
sub eax, 0x2c4
mov dword [rbp + 0x74], eax
cmp dword [0x005d1c41], 0x1000
jne 0x5962ba
mov dword [rbp + 0x90], 0
cmp dword [rbp + 0x90], 1
jge 0x595d30
add dword [rbp + 0x90], 1
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x74]
cmp eax, dword [rbp + 0x70]
jle 0x595cd8
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1c2
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x8c]
sub eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x80]
sub ecx, dword [rbp + 0x7c]
cmp eax, ecx
jle 0x595d03
mov eax, dword [rbp + 0x84]
add eax, 0xca
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x8c]
add dword [rbp + 0x94], eax
cmp dword [rbp + 0x90], 1
jl 0x595cb4
nop
mov eax, dword [rbp + 0x94]
cmp eax, dword [rbp + 0x90]
jle 0x595d6c
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x90]
lea r8, [rbp + 0x8c]
lea r9, [rbp + 0x84]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
call fcn.0058d8e0
mov dword [rbp + 0x8c], 0
mov eax, dword [rbp + 0x7c]
add eax, dword [rbp + 0x74]
cmp eax, dword [rbp + 0x70]
jle 0x595d90
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1c9
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x8c]
sub eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x80]
sub ecx, dword [rbp + 0x7c]
cmp eax, ecx
jle 0x595dbb
mov eax, dword [rbp + 0x80]
add eax, 0x90
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x84]
add eax, 0x54
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x88]
imul eax, dword [rbp + 0x84]
mov dword [rbp + 0x94], eax
add dword [rbp + 0x8c], 1
cmp dword [rbp + 0x8c], 2
jne 0x595d76
nop
mov dword [rbp + 0x8c], 0
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x78]
cmp eax, dword [rbp + 0x70]
jle 0x595e25
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x186
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0x88]
mov ecx, dword [rbp + 0x84]
add ecx, dword [rbp + 0x80]
cmp eax, ecx
jge 0x595e50
mov eax, dword [rbp + 0x84]
add eax, 0x6d
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x90]
imul eax, dword [rbp + 0x84]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x90]
add dword [rbp + 0x94], eax
add dword [rbp + 0x8c], 1
cmp dword [rbp + 0x8c], 2
jne 0x595e08
nop
call fcn.00569f10
mov eax, 0x16e
sub eax, dword [rbp + 0x7c]
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1b2
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1d7
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1db
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
add eax, 0x21f
mov dword [rbp + 0x78], eax
mov ecx, 0x10129
call fcn.005698a0
mov dword [rbp + 0xa8], eax
mov eax, 0x187
sub eax, dword [rbp + 0x7c]
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x18b
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x1b0
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1b4
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1d9
mov dword [rbp + 0x7c], eax
mov ecx, dword [rbp + 0xa8]
call sub.kernel32.dll_Sleep_2
mov eax, dword [rbp + 0x78]
add eax, 0x201
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x90]
add dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x94]
cmp eax, dword [rbp + 0x90]
jle 0x595f71
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x90]
call fcn.00584b40
mov rax, qword [0x005c4c28]
mov byte [rax], 1
xor ecx, ecx
xor edx, edx
lea r8, [0x00563600]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0xac]
mov qword [rsp + 0x28], rax
call sub.kernel32.dll_CreateThread_1
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x2ce
mov dword [rbp + 0x70], eax
lea rcx, [rbp + 0xa0]
call fcn.0040e5d0
mov eax, dword [rbp + 0x80]
add eax, 0xf4
mov dword [rbp + 0x88], eax
lea rcx, [rbp + 0xa0]
lea rdx, [0x00596594]
call fcn.0040fe40
mov eax, dword [rbp + 0x88]
sub eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x80]
sub ecx, dword [rbp + 0x7c]
cmp eax, ecx
jle 0x596007
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x88], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1cb0]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
add eax, 0xe1
mov dword [rbp + 0x88], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1cc8]
call fcn.0040fe40
mov eax, dword [rbp + 0x8c]
add eax, dword [rbp + 0x88]
mov ecx, dword [rbp + 0x84]
add ecx, dword [rbp + 0x80]
cmp eax, ecx
jge 0x596067
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x8c], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1d58]
call fcn.0040fe40
mov eax, dword [rbp + 0x90]
cmp eax, dword [rbp + 0x8c]
jle 0x59609b
mov eax, dword [rbp + 0x8c]
imul eax, dword [rbp + 0x88]
mov dword [rbp + 0x90], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, dword [rbp + 0x94]
cmp eax, dword [rbp + 0x90]
jle 0x5960ce
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x90]
sub eax, dword [rbp + 0x8c]
mov dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x8c]
add dword [rbp + 0x94], eax
lea rcx, [rbp + 0x68]
mov edx, 3
call fcn.0042be80
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x68]
call fcn.0040fe40
mov eax, dword [rbp + 0x90]
add dword [rbp + 0x94], eax
lea rcx, [rbp + 0x60]
mov edx, 2
call fcn.0042be80
lea rcx, [rbp + 0xa0]
mov rdx, qword [rbp + 0x60]
call fcn.0040fe40
mov eax, dword [rbp + 0x90]
add dword [rbp + 0x94], eax
lea rcx, [rbp + 0xa0]
lea rdx, [0x005965a4]
call fcn.0040fe40
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x2ed
mov dword [rbp + 0x70], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
mov eax, dword [rbp + 0x94]
imul eax, eax, 0x2d1
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1d38]
call fcn.0040fe40
mov eax, dword [rbp + 0x94]
add eax, dword [rbp + 0x90]
mov dword [rbp + 0x70], eax
lea rcx, [rbp + 0xa0]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
lea rcx, [rbp + 0x98]
call fcn.0040e5d0
mov eax, 0x13e
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x98]
mov rdx, qword [0x005d1d00]
call fcn.0040fe40
mov eax, dword [rbp + 0x7c]
imul eax, eax, 0x182
mov dword [rbp + 0x80], eax
lea rcx, [rbp + 0x58]
xor edx, edx
call fcn.0042be80
lea rcx, [rbp + 0x98]
mov rdx, qword [rbp + 0x58]
call fcn.0040fe40
lea rcx, [rbp + 0x50]
call fcn.005519b0
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0x50]
call fcn.0040fc50
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0xa0]
call fcn.0040fe40
lea rcx, [rbp + 0x40]
mov rdx, qword [rbp + 0x48]
call fcn.0040fc80
lea rcx, [rbp + 0x38]
lea rdx, [0x005d139d]
mov r8d, pe_nt_image_headers64
call fcn.0040f500
lea rcx, [rbp + 0x30]
mov rdx, qword [rbp + 0x98]
call fcn.0040fc80
mov cl, 1
mov rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x38]
mov r9, qword [rbp + 0x30]
call fcn.005645d0
mov eax, dword [rbp + 0x74]
add eax, 0x20c
mov dword [rbp + 0x78], eax
jmp 0x5964d5
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x8c]
lea r8, [rbp + 0x88]
lea r9, [rbp + 0x84]
lea rax, [rbp + 0x80]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x7c]
mov qword [rsp + 0x28], rax
call fcn.00588720
mov dword [rbp + 0x8c], 0
mov eax, dword [rbp + 0x7c]
sub eax, dword [rbp + 0x70]
cmp eax, dword [rbp + 0x70]
jge 0x596311
mov eax, dword [rbp + 0x78]
add eax, 0x20f
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x7c]
cmp dword [rbp + 0x88], eax
jne 0x59632e
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x88]
imul eax, dword [rbp + 0x84]
mov dword [rbp + 0x90], eax
mov eax, dword [rbp + 0x90]
add dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x70]
sub eax, 0x261
mov dword [rbp + 0x78], eax
add dword [rbp + 0x8c], 1
cmp dword [rbp + 0x8c], 3
jne 0x5962fa
nop
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1c4
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x74]
add eax, 0x208
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
add eax, 0x24d
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x74]
add eax, 0x251
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x70]
sub eax, 0x276
mov dword [rbp + 0x78], eax
mov rax, qword [0x005c4c28]
mov byte [rax], 1
xor ecx, ecx
xor edx, edx
lea r8, [0x00584de0]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0xac]
mov qword [rsp + 0x28], rax
call sub.kernel32.dll_CreateThread_1
mov eax, dword [rbp + 0x90]
add eax, dword [rbp + 0x8c]
mov ecx, dword [rbp + 0x88]
add ecx, dword [rbp + 0x80]
cmp eax, ecx
jge 0x596410
lea rcx, [rbp + 0x8c]
lea rdx, [rbp + 0x84]
lea r8, [rbp + 0x80]
call fcn.0053ded0
mov dword [rbp + 0x90], 0
cmp dword [rbp + 0x90], 1
jge 0x59649c
add dword [rbp + 0x90], 1
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x74]
cmp eax, dword [rbp + 0x70]
jle 0x596444
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x1dd
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x8c]
sub eax, dword [rbp + 0x84]
mov ecx, dword [rbp + 0x80]
sub ecx, dword [rbp + 0x7c]
cmp eax, ecx
jle 0x59646f
mov eax, dword [rbp + 0x84]
add eax, 0xc4
mov dword [rbp + 0x88], eax
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x8c], eax
mov eax, dword [rbp + 0x88]
mov dword [rbp + 0x94], eax
mov eax, dword [rbp + 0x8c]
add dword [rbp + 0x94], eax
cmp dword [rbp + 0x90], 1
jl 0x596423
nop
mov eax, 0x5f
sub eax, dword [rbp + 0x8c]
cmp eax, 0x10b
jge 0x5964c4
lea rcx, [rbp + 0x94]
lea rdx, [rbp + 0x94]
call fcn.005835a0
call fcn.00593dd0
mov eax, dword [rbp + 0x70]
sub eax, 0x2a0
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
add eax, 0x228
mov dword [rbp + 0x78], eax
nop
lea rcx, [rbp + 0x30]
mov edx, 3
call fcn.0040e710
lea rcx, [rbp + 0x48]
call fcn.0040e5d0
lea rcx, [rbp + 0x50]
call fcn.0040e670
lea rcx, [rbp + 0x58]
mov edx, 3
call fcn.0040e6b0
lea rcx, [rbp + 0x98]
mov edx, 2
call fcn.0040e6b0
lea rsp, [rbp + 0xb0]
pop rbp
ret