Function at 0x5600c0
Capabilities:
Create process on windows

Disassembly:
push rbp
sub rsp, 0x1c0
mov rbp, rsp
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x1d0], rcx
mov dword [rbp + 0x1d8], edx
mov qword [rbp + 0x1e0], r8
mov qword [rbp + 0x1e8], r9
lea rcx, [rbp + 0x1e0]
call fcn.0040e7a0
lea rcx, [rbp + 0x1e8]
call fcn.0040e7a0
nop
mov dword [rbp + 0x128], 0
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2b1
mov dword [rbp + 0x10c], eax
mov eax, dword [rbp + 0x118]
add eax, dword [rbp + 0x110]
cmp eax, dword [rbp + 0x134]
jle 0x560245
mov eax, dword [rbp + 0x114]
add eax, 0x1f8
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x11c]
add eax, dword [rbp + 0x118]
cmp dword [rbp + 0x124], eax
jne 0x56026b
mov eax, dword [rbp + 0x120]
add eax, 0xe0
mov dword [rbp + 0x124], eax
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x12c], eax
mov eax, dword [rbp + 0x12c]
mov dword [rbp + 0x134], eax
add dword [rbp + 0x128], 1
cmp dword [rbp + 0x128], 3
jne 0x56020d
nop
mov dword [rbp + 0x130], 0
cmp dword [rbp + 0x130], 1
jge 0x56033a
add dword [rbp + 0x130], 1
mov eax, dword [rbp + 0x118]
add eax, dword [rbp + 0x110]
cmp eax, dword [rbp + 0x10c]
jle 0x5602dc
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1d2
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x11c]
add eax, dword [rbp + 0x118]
cmp dword [rbp + 0x128], eax
jne 0x5602fc
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x128], eax
mov eax, dword [rbp + 0x128]
imul eax, dword [rbp + 0x124]
mov dword [rbp + 0x134], eax
mov eax, dword [rbp + 0x12c]
add dword [rbp + 0x134], eax
mov eax, dword [rbp + 0x10c]
sub eax, 0x283
mov dword [rbp + 0x110], eax
cmp dword [rbp + 0x130], 1
jl 0x5602af
nop
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2e8
mov dword [rbp + 0x10c], eax
lea rcx, [0x00561628]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x1a
je 0x56037e
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1f8
mov dword [rbp + 0x118], eax
cmp dword [rbp + 0x1d8], 0x20
jne 0x560bba
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1a8
mov dword [rbp + 0x120], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1ed
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x114]
add eax, 0x211
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x110]
add eax, 0x235
mov dword [rbp + 0x114], eax
mov eax, dword [rbp + 0x10c]
sub eax, 0x27a
mov dword [rbp + 0x110], eax
cmp dword [0x005d1c39], 0x20
jne 0x56065d
lea rcx, [rbp + 0x140]
call fcn.0040e5d0
lea rcx, [rbp + 0x140]
lea rdx, [0x0056167c]
call fcn.0040fe40
lea rcx, [0x0056168c]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x23
je 0x560442
mov eax, dword [rbp + 0x110]
add eax, 0x220
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cb0]
call fcn.0040fe40
mov eax, dword [rbp + 0x110]
add eax, 0x224
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cc8]
call fcn.0040fe40
mov eax, dword [rbp + 0x114]
add eax, 0x208
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d58]
call fcn.0040fe40
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1cc
mov dword [rbp + 0x11c], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, 0x190
sub eax, dword [rbp + 0x118]
mov dword [rbp + 0x120], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, 0x134
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, 0x118
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x124], eax
lea rcx, [rbp + 0xf8]
mov edx, 3
call fcn.0042be80
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0xf8]
call fcn.0040fe40
mov eax, dword [rbp + 0x12c]
add eax, dword [rbp + 0x128]
mov ecx, dword [rbp + 0x124]
add ecx, dword [rbp + 0x120]
cmp eax, ecx
jge 0x560574
mov eax, dword [rbp + 0x128]
imul eax, dword [rbp + 0x124]
mov dword [rbp + 0x12c], eax
lea rcx, [rbp + 0xf0]
mov edx, 2
call fcn.0042be80
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0xf0]
call fcn.0040fe40
lea rcx, [rbp + 0x140]
lea rdx, [0x005616ac]
call fcn.0040fe40
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d38]
call fcn.0040fe40
mov eax, dword [rbp + 0x130]
add eax, dword [rbp + 0x12c]
mov ecx, dword [rbp + 0x128]
add ecx, dword [rbp + 0x124]
cmp eax, ecx
jge 0x560600
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov dword [rbp + 0x130], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
lea rcx, [rbp + 0xe8]
call fcn.005519b0
lea rcx, [rbp + 0xe0]
mov rdx, qword [rbp + 0xe8]
call fcn.0040fc50
lea rcx, [rbp + 0xe0]
mov rdx, qword [rbp + 0x140]
call fcn.0040fe40
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0xe0]
call fcn.0040fc80
jmp 0x560aa8
lea rcx, [rbp + 0x140]
call fcn.0040e5d0
lea rcx, [0x005616bc]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x25
je 0x56069a
mov eax, dword [rbp + 0x10c]
sub eax, 0x270
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x140]
lea rdx, [0x0056167c]
call fcn.0040fe40
mov eax, dword [rbp + 0x10c]
imul eax, eax, 0x2b5
mov dword [rbp + 0x110], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cb0]
call fcn.0040fe40
mov eax, dword [rbp + 0x10c]
sub eax, 0x299
mov dword [rbp + 0x110], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cc8]
call fcn.0040fe40
mov eax, dword [rbp + 0x10c]
sub eax, 0x2bd
mov dword [rbp + 0x110], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d58]
call fcn.0040fe40
mov eax, dword [rbp + 0x10c]
sub eax, 0x261
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, dword [rbp + 0x110]
sub eax, 0x245
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x114]
add eax, 0x1e9
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1ad
mov dword [rbp + 0x11c], eax
lea rcx, [rbp + 0xd8]
mov edx, 3
call fcn.0042be80
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0xd8]
call fcn.0040fe40
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1d1
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0xd0]
mov edx, 2
call fcn.0042be80
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0xd0]
call fcn.0040fe40
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x195
mov dword [rbp + 0x11c], eax
lea rcx, [rbp + 0x140]
lea rdx, [0x005616ac]
call fcn.0040fe40
mov eax, 0x159
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
mov eax, 0x11d
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x124], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d38]
call fcn.0040fe40
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov ecx, dword [rbp + 0x120]
sub ecx, dword [rbp + 0x11c]
cmp eax, ecx
jle 0x560890
mov eax, dword [rbp + 0x128]
mov dword [rbp + 0x12c], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
lea rcx, [rbp + 0x138]
call fcn.0040e5d0
mov eax, dword [rbp + 0x110]
sub eax, 0x24b
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0xc8]
mov rdx, qword [0x005d1cf0]
call fcn.0042b360
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0xc8]
call fcn.0040fe40
mov eax, dword [rbp + 0x110]
sub eax, 0x250
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x138]
mov rdx, qword [0x005d1cc0]
call fcn.0040fe40
mov eax, dword [rbp + 0x110]
add eax, 0x214
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0x138]
mov rdx, qword [0x005d1cf0]
call fcn.0040fe40
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1f8
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0xc0]
mov rdx, qword [0x005d1ca0]
call fcn.0042b360
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0xc0]
call fcn.0040fe40
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x19c
mov dword [rbp + 0x11c], eax
lea rcx, [rbp + 0xb8]
mov rdx, qword [0x005d1cd8]
call fcn.0042b360
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0xb8]
call fcn.0040fe40
mov eax, 0x140
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
lea rcx, [rbp + 0xb0]
mov rdx, qword [0x005d1ca0]
call fcn.0042b360
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0xb0]
call fcn.0040fe40
mov eax, 0x124
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
lea rcx, [rbp + 0xa8]
mov edx, 6
call fcn.0042be80
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0xa8]
call fcn.0040fe40
mov eax, dword [rbp + 0x12c]
add eax, dword [rbp + 0x128]
mov ecx, dword [rbp + 0x120]
add ecx, dword [rbp + 0x11c]
cmp eax, ecx
jge 0x560a38
mov eax, dword [rbp + 0x128]
mov dword [rbp + 0x12c], eax
lea rcx, [rbp + 0xa0]
mov edx, 4
call fcn.0042be80
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0xa0]
call fcn.0040fe40
lea rcx, [rbp + 0x90]
call fcn.0054fc10
lea rcx, [rbp + 0x98]
mov edx, 3
mov r8, qword [rbp + 0x90]
mov r9, qword [rbp + 0x138]
mov rax, qword [rbp + 0x140]
mov qword [rsp + 0x20], rax
call fcn.00410040
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x98]
call fcn.0040fc80
mov dword [rbp + 0x130], 0
cmp dword [rbp + 0x130], 1
jge 0x560b57
add dword [rbp + 0x130], 1
mov eax, dword [rbp + 0x118]
sub eax, dword [rbp + 0x110]
cmp eax, dword [rbp + 0x10c]
jge 0x560aec
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x20a
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x124]
sub eax, dword [rbp + 0x120]
mov ecx, dword [rbp + 0x11c]
sub ecx, dword [rbp + 0x118]
cmp eax, ecx
jle 0x560b1a
mov eax, dword [rbp + 0x120]
add eax, 0xd2
mov dword [rbp + 0x124], eax
mov eax, dword [rbp + 0x128]
mov dword [rbp + 0x12c], eax
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov dword [rbp + 0x134], eax
mov eax, dword [rbp + 0x134]
add eax, dword [rbp + 0x12c]
mov dword [rbp + 0x10c], eax
cmp dword [rbp + 0x130], 1
jl 0x560abf
nop
mov eax, dword [rbp + 0x134]
cmp eax, dword [rbp + 0x130]
jle 0x560b80
lea rcx, [rbp + 0x134]
lea rdx, [rbp + 0x134]
lea r8, [rbp + 0x12c]
call fcn.00557700
lea rcx, [0x005616dc]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x1a
je 0x560ee3
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1d5
mov dword [rbp + 0x118], eax
jmp 0x560ee3
mov eax, dword [rbp + 0x10c]
sub eax, 0x29e
mov dword [rbp + 0x110], eax
lea rcx, [rbp + 0x140]
call fcn.0040e5d0
lea rcx, [0x005616fc]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x64
jge 0x560c0a
mov eax, dword [rbp + 0x12c]
imul eax, dword [rbp + 0x128]
mov dword [rbp + 0x130], eax
lea rcx, [rbp + 0x140]
lea rdx, [0x0056167c]
call fcn.0040fe40
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cb0]
call fcn.0040fe40
lea rcx, [0x0056170c]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x5c
jge 0x560c61
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov dword [rbp + 0x134], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cc8]
call fcn.0040fe40
lea rcx, [0x00561730]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x5e
jge 0x560ca5
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov dword [rbp + 0x130], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d58]
call fcn.0040fe40
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1cf8]
call fcn.0040fe40
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2e6
mov dword [rbp + 0x10c], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x10c]
sub eax, 0x28a
mov dword [rbp + 0x110], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d28]
call fcn.0040fe40
mov eax, dword [rbp + 0x110]
add eax, 0x24e
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x88]
mov edx, 3
call fcn.0042be80
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0x88]
call fcn.0040fe40
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1f2
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0x80]
mov edx, 2
call fcn.0042be80
lea rcx, [rbp + 0x140]
mov rdx, qword [rbp + 0x80]
call fcn.0040fe40
mov eax, 0x196
sub eax, dword [rbp + 0x118]
mov dword [rbp + 0x11c], eax
lea rcx, [rbp + 0x140]
lea rdx, [0x005616ac]
call fcn.0040fe40
mov eax, dword [rbp + 0x120]
add eax, 0x11a
mov dword [rbp + 0x124], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
mov eax, dword [rbp + 0x12c]
add eax, dword [rbp + 0x128]
mov ecx, dword [rbp + 0x124]
add ecx, dword [rbp + 0x120]
cmp eax, ecx
jge 0x560dfc
mov eax, dword [rbp + 0x12c]
imul eax, dword [rbp + 0x128]
mov dword [rbp + 0x130], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1d38]
call fcn.0040fe40
lea rcx, [0x00561754]
lea rdx, [0x00561648]
mov r8d, 1
call fcn.004102c0
cmp eax, 0x61
jge 0x560e40
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov dword [rbp + 0x130], eax
lea rcx, [rbp + 0x140]
mov rdx, qword [0x005d1ca8]
call fcn.0040fe40
lea rcx, [rbp + 0x78]
call fcn.005519b0
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x78]
call fcn.0040fc50
lea rcx, [rbp + 0x70]
mov rdx, qword [rbp + 0x140]
call fcn.0040fe40
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x70]
call fcn.0040fc80
mov eax, 0x184
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1a8
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1ed
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x114]
add eax, 0x1f1
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x110]
add eax, 0x236
mov dword [rbp + 0x114], eax
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1be
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1e2
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1e6
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
add eax, 0x1eb
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x114]
add eax, 0x20f
mov dword [rbp + 0x118], eax
lea rcx, [rbp + 0x158]
mov edx, 0x68
xor r8, r8
call fcn.0040a770
mov eax, dword [rbp + 0x110]
add eax, 0x258
mov dword [rbp + 0x114], eax
mov dword [rbp + 0x158], 0x68
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1d9
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x110]
add eax, 0x21d
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x110]
sub eax, 0x242
mov dword [rbp + 0x114], eax
mov eax, dword [rbp + 0x10c]
sub eax, 0x2a6
mov dword [rbp + 0x110], eax
mov eax, dword [rbp + 0x120]
add eax, 0xf5
mov dword [rbp + 0x124], eax
mov qword [rbp + 0x168], 0
mov dword [rbp + 0x128], 0
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2c0
mov dword [rbp + 0x110], eax
mov eax, dword [rbp + 0x11c]
add eax, dword [rbp + 0x114]
cmp eax, dword [rbp + 0x10c]
jle 0x561015
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1c7
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x128]
sub eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0x120]
sub ecx, dword [rbp + 0x118]
cmp eax, ecx
jle 0x561043
mov eax, dword [rbp + 0x120]
add eax, 0xcf
mov dword [rbp + 0x124], eax
mov eax, dword [rbp + 0x124]
add eax, 0x32
mov dword [rbp + 0x12c], eax
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x130], eax
add dword [rbp + 0x128], 1
cmp dword [rbp + 0x128], 3
jne 0x560fdd
nop
mov dword [rbp + 0x128], 0
mov eax, dword [rbp + 0x118]
add eax, dword [rbp + 0x10c]
cmp eax, dword [rbp + 0x134]
jle 0x5610a3
mov eax, dword [rbp + 0x114]
add eax, 0x201
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x11c]
add eax, dword [rbp + 0x114]
cmp dword [rbp + 0x124], eax
jne 0x5610c9
mov eax, dword [rbp + 0x120]
add eax, 0xe8
mov dword [rbp + 0x124], eax
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x12c], eax
mov eax, dword [rbp + 0x130]
sub eax, dword [rbp + 0x12c]
mov dword [rbp + 0x134], eax
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2d3
mov dword [rbp + 0x10c], eax
add dword [rbp + 0x128], 1
cmp dword [rbp + 0x128], 3
jne 0x56107d
nop
lea rcx, [rbp + 0x134]
lea rdx, [rbp + 0x12c]
lea r8, [rbp + 0x128]
lea r9, [rbp + 0x124]
lea rax, [rbp + 0x120]
mov qword [rsp + 0x20], rax
call fcn.0055b6f0
mov dword [rbp + 0x130], 0
cmp dword [rbp + 0x130], 1
jge 0x5611d8
add dword [rbp + 0x130], 1
mov eax, dword [rbp + 0x11c]
add eax, dword [rbp + 0x114]
cmp eax, dword [rbp + 0x10c]
jle 0x56117f
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1b4
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x128]
sub eax, dword [rbp + 0x124]
mov ecx, dword [rbp + 0x120]
sub ecx, dword [rbp + 0x11c]
cmp eax, ecx
jle 0x5611a7
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x128], eax
mov eax, dword [rbp + 0x12c]
sub eax, dword [rbp + 0x128]
mov dword [rbp + 0x134], eax
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x302
mov dword [rbp + 0x10c], eax
cmp dword [rbp + 0x130], 1
jl 0x561152
nop
mov dword [rbp + 0x194], 1
mov eax, dword [rbp + 0x10c]
sub eax, 0x26a
mov dword [rbp + 0x114], eax
mov word [rbp + 0x198], 0
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1d1
mov dword [rbp + 0x11c], eax
lea rcx, [rbp + 0x60]
mov rdx, qword [rbp + 0x1e0]
call fcn.0040fc50
lea rcx, [rbp + 0x68]
mov rdx, qword [rbp + 0x60]
call fcn.0054f5e0
lea rcx, [rbp + 0x148]
mov rdx, qword [rbp + 0x68]
call fcn.0040fc80
mov eax, dword [rbp + 0x134]
cmp eax, dword [rbp + 0x12c]
jle 0x56126c
lea rcx, [rbp + 0x134]
lea rdx, [rbp + 0x12c]
lea r8, [rbp + 0x128]
lea r9, [rbp + 0x124]
call fcn.0055ad30
mov eax, dword [rbp + 0x134]
cmp eax, dword [rbp + 0x130]
jle 0x56129b
lea rcx, [rbp + 0x134]
lea rdx, [rbp + 0x134]
lea r8, [rbp + 0x130]
lea r9, [rbp + 0x12c]
call fcn.005582c0
mov eax, dword [rbp + 0x110]
add eax, 0x224
mov dword [rbp + 0x114], eax
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x181
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1c5
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
add eax, 0x20a
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x114]
add eax, 0x20e
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x110]
add eax, 0x253
mov dword [rbp + 0x114], eax
lea rcx, [rbp + 0x58]
mov edx, 5
mov r8, qword [rbp + 0x150]
lea r9, [0x0056175c]
mov rax, qword [rbp + 0x148]
mov qword [rsp + 0x20], rax
lea rax, [0x00561764]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x1e8]
mov qword [rsp + 0x30], rax
call fcn.0040f890
mov rcx, qword [rbp + 0x58]
call fcn.0040f580
xor ecx, ecx
mov rdx, rax
xor r8, r8
xor r9, r9
mov dword [rsp + 0x20], 0
mov dword [rsp + 0x28], 0x20
mov qword [rsp + 0x30], 0
mov qword [rsp + 0x38], 0
lea rax, [rbp + 0x158]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x1d0]
mov qword [rsp + 0x48], rax
call sub.kernel32.dll_CreateProcessW
test eax, eax
je 0x5613f9
mov eax, 0x16f
sub eax, dword [rbp + 0x118]
mov dword [rbp + 0x120], eax
mov eax, dword [rbp + 0x118]
imul eax, eax, 0x1b3
mov dword [rbp + 0x11c], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1d8
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x114]
imul eax, eax, 0x1dc
mov dword [rbp + 0x118], eax
mov eax, dword [rbp + 0x114]
add eax, 0x201
mov dword [rbp + 0x118], eax
mov dword [rbp + 0x128], 0
mov eax, dword [rbp + 0x10c]
sub eax, 0x28a
mov dword [rbp + 0x114], eax
mov eax, dword [rbp + 0x118]
sub eax, dword [rbp + 0x110]
cmp dword [rbp + 0x120], eax
jne 0x56143b
mov eax, 0x151
sub eax, dword [rbp + 0x11c]
mov dword [rbp + 0x120], eax
mov eax, dword [rbp + 0x130]
add eax, dword [rbp + 0x128]
mov ecx, dword [rbp + 0x124]
add ecx, dword [rbp + 0x120]
cmp eax, ecx
jge 0x561463
mov eax, dword [rbp + 0x124]
mov dword [rbp + 0x130], eax
mov eax, dword [rbp + 0x130]
sub eax, dword [rbp + 0x12c]
mov dword [rbp + 0x134], eax
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2df
mov dword [rbp + 0x10c], eax
add dword [rbp + 0x128], 1
cmp dword [rbp + 0x128], 3
jne 0x561403
nop
mov eax, dword [rbp + 0x10c]
sub eax, 0x270
mov dword [rbp + 0x114], eax
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2d4
mov dword [rbp + 0x110], eax
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2d9
mov dword [rbp + 0x10c], eax
mov eax, dword [rbp + 0x134]
imul eax, eax, 0x2dd
mov dword [rbp + 0x10c], eax
nop
lea rcx, [rbp + 0x58]
call fcn.0040e670
lea rcx, [rbp + 0x60]
mov edx, 3
call fcn.0040e6b0
lea rcx, [rbp + 0x78]
call fcn.0040e670
lea rcx, [rbp + 0x80]
mov edx, 0xd
call fcn.0040e6b0
lea rcx, [rbp + 0xe8]
call fcn.0040e670
lea rcx, [rbp + 0xf0]
mov edx, 2
call fcn.0040e6b0
lea rcx, [rbp + 0x138]
mov edx, 2
call fcn.0040e6b0
lea rcx, [rbp + 0x148]
mov edx, 2
call fcn.0040e710
lea rcx, [rbp + 0x1e0]
mov edx, 2
call fcn.0040e710
mov rax, qword [rbp + 0x1d0]
lea rsp, [rbp + 0x1c0]
pop rbp
ret