Function at 0x5d1d60
Capabilities:
Create thread

Disassembly:
push rbp
sub rsp, 0xa0
mov rbp, rsp
mov qword [rbp + 0x50], 0
mov qword [rbp + 0x48], 0
mov qword [rbp + 0x40], 0
mov qword [rbp + 0x38], 0
mov qword [rbp + 0x30], 0
mov qword [rbp + 0x58], 0
mov qword [rbp + 0x60], 0
mov qword [rbp + 0x68], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
nop
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x78]
lea r8, [rbp + 0x74]
lea r9, [rbp + 0x70]
call fcn.0053be40
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
add eax, 0x176
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov dword [rbp + 0x80], 0
cmp dword [rbp + 0x80], 2
jge 0x5d1e95
add dword [rbp + 0x80], 1
mov eax, dword [rbp + 0x7c]
add eax, 0x377
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d1e5e
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x7c]
add eax, 0x368
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d1e8c
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1f3
mov dword [rbp + 0x74], eax
cmp dword [rbp + 0x80], 2
jl 0x5d1e2e
nop
mov dword [rbp + 0x80], 0
cmp dword [rbp + 0x80], 2
jge 0x5d1ef5
add dword [rbp + 0x80], 1
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x62
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x70]
sub eax, dword [rbp + 0x84]
cmp dword [rbp + 0x78], eax
jne 0x5d1ee2
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
add dword [rbp + 0x84], 0x352
cmp dword [rbp + 0x80], 2
jl 0x5d1ea9
nop
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x5d1f3f
lea rcx, [rbp + 0x7c]
lea rdx, [rbp + 0x74]
lea r8, [rbp + 0x70]
lea r9, [rbp + 0x84]
lea rax, [rbp + 0x84]
mov qword [rsp + 0x20], rax
call fcn.005625a0
mov eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x80]
jle 0x5d1f7d
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x7c]
lea r8, [rbp + 0x74]
lea r9, [rbp + 0x70]
lea rax, [rbp + 0x84]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x84]
mov qword [rsp + 0x28], rax
call fcn.00544370
mov eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x80]
jle 0x5d1f90
call fcn.00546c80
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
call fcn.005c4b60
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
lea r9, [rbp + 0x78]
lea rax, [rbp + 0x74]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.005ccb20
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
cmp dword [0x0060ec29], 0x1000
jne 0x5d2b0c
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x7c]
add eax, 0x375
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d201f
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x221
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x4b
mov dword [rbp + 0x7c], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x5d1ff9
nop
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
sub eax, 0x179
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x7c], 0
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, 0x3ad
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d20bf
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1f8
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x84]
jge 0x5d20da
add dword [rbp + 0x84], 0x362
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d20f9
mov eax, dword [rbp + 0x70]
sub eax, 0x1cd
mov dword [rbp + 0x78], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 3
jne 0x5d207b
nop
call fcn.005880d0
mov eax, dword [rbp + 0x74]
sub eax, 0x1b7
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
sub eax, 0x1a3
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x7c], 0
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
add eax, 0x3d7
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d2183
mov eax, dword [rbp + 0x78]
add eax, 0x3a3
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x80]
jge 0x5d21a3
mov eax, dword [rbp + 0x84]
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
add eax, 0x79
mov dword [rbp + 0x78], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 3
jne 0x5d2144
nop
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x74]
sub ecx, dword [rbp + 0x70]
cmp eax, ecx
jle 0x5d21ee
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x78]
lea r8, [rbp + 0x74]
lea r9, [rbp + 0x70]
lea rax, [rbp + 0x84]
mov qword [rsp + 0x20], rax
call fcn.0053d670
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
lea r9, [rbp + 0x78]
lea rax, [rbp + 0x74]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x70]
mov qword [rsp + 0x28], rax
call fcn.005ca400
mov dword [rbp + 0x70], 0
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x5d2245
lea rcx, [rbp + 0x7c]
lea rdx, [rbp + 0x78]
call fcn.00561b30
mov ecx, 0x10129
call fcn.00587a30
mov dword [rbp + 0x98], eax
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x7c]
call fcn.00538540
mov ecx, dword [rbp + 0x98]
call sub.kernel32.dll_Sleep_2
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
lea r9, [rbp + 0x78]
lea rax, [rbp + 0x74]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x84]
mov qword [rsp + 0x28], rax
call fcn.005ccb20
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x70]
sub eax, 0x1b3
mov dword [rbp + 0x78], eax
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x84]
lea r8, [rbp + 0x7c]
call fcn.005b3910
mov eax, dword [rbp + 0x80]
sub dword [rbp + 0x84], eax
mov dword [rbp + 0x7c], 0
mov eax, 0x3bd
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d230e
mov dword [rbp + 0x70], 0
mov eax, dword [rbp + 0x80]
add eax, 0x38e
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d2342
mov eax, dword [rbp + 0x80]
add eax, 0x1f9
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x78]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d2364
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 4
jne 0x5d22ea
nop
mov dword [rbp + 0x80], 0
cmp dword [rbp + 0x80], 2
jge 0x5d23e8
add dword [rbp + 0x80], 1
mov eax, dword [rbp + 0x7c]
add eax, 0x378
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d23be
mov eax, dword [rbp + 0x7c]
add eax, 0x1e3
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
add eax, dword [rbp + 0x74]
cmp dword [rbp + 0x80], eax
jne 0x5d23d8
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x218
mov dword [rbp + 0x74], eax
mov dword [rbp + 0x70], 0
cmp dword [rbp + 0x80], 2
jl 0x5d2386
nop
mov dword [rbp + 0x7c], 0
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
add eax, 0x3eb
mov dword [rbp + 0x84], eax
mov eax, 0x90
sub eax, dword [rbp + 0x78]
mov dword [rbp + 0x80], eax
mov eax, dword [rbp + 0x78]
add eax, dword [rbp + 0x74]
cmp dword [rbp + 0x80], eax
jne 0x5d243e
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1fa
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x84]
jge 0x5d2461
mov eax, 0x3a4
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 3
jne 0x5d23f0
nop
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
add eax, 0x7a
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x70]
sub eax, dword [rbp + 0x84]
cmp dword [rbp + 0x78], eax
jne 0x5d24b3
mov dword [rbp + 0x70], 0
add dword [rbp + 0x84], 0x34a
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x5d2489
nop
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x211
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x7c]
lea r8, [rbp + 0x78]
lea r9, [rbp + 0x74]
lea rax, [rbp + 0x70]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x84]
mov qword [rsp + 0x28], rax
call fcn.0053ae80
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
sub eax, 0x166
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov rax, qword [0x00601cb8]
mov byte [rax], 1
xor ecx, ecx
xor edx, edx
lea r8, [0x0057df50]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x28], rax
call sub.kernel32.dll_CreateThread_1
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d257b
call fcn.00580b00
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1d2
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x80]
jle 0x5d25b9
lea rcx, [rbp + 0x7c]
lea rdx, [rbp + 0x78]
lea r8, [rbp + 0x74]
lea r9, [rbp + 0x84]
lea rax, [rbp + 0x84]
mov qword [rsp + 0x20], rax
call fcn.0055e470
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
lea r9, [rbp + 0x78]
lea rax, [rbp + 0x74]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x84]
mov qword [rsp + 0x28], rax
call fcn.005ccb20
lea rcx, [rbp + 0x90]
call fcn.0040e5d0
mov eax, dword [rbp + 0x70]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0x90]
lea rdx, [0x005d2f84]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x80]
jle 0x5d262e
mov eax, dword [rbp + 0x78]
imul eax, eax, 0xdc
mov dword [rbp + 0x7c], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ec98]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ecb0]
call fcn.0040fe40
mov eax, dword [rbp + 0x7c]
add eax, 0x28
mov dword [rbp + 0x80], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ed40]
call fcn.0040fe40
mov eax, dword [rbp + 0x74]
sub eax, 0x1ad
mov dword [rbp + 0x78], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ece0]
call fcn.0040fe40
mov eax, dword [rbp + 0x80]
sub dword [rbp + 0x84], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x5d26e2
mov eax, dword [rbp + 0x74]
add eax, 0x15e
mov dword [rbp + 0x78], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ed10]
call fcn.0040fe40
mov eax, dword [rbp + 0x80]
sub dword [rbp + 0x84], eax
lea rcx, [rbp + 0x68]
mov edx, 3
call fcn.0042c720
lea rcx, [rbp + 0x90]
mov rdx, qword [rbp + 0x68]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x80]
jle 0x5d273a
mov eax, dword [rbp + 0x78]
imul eax, eax, 0xce
mov dword [rbp + 0x7c], eax
lea rcx, [rbp + 0x60]
mov edx, 2
call fcn.0042c720
lea rcx, [rbp + 0x90]
mov rdx, qword [rbp + 0x60]
call fcn.0040fe40
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
lea rcx, [rbp + 0x90]
lea rdx, [0x005d2f94]
call fcn.0040fe40
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ec90]
call fcn.0040fe40
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d27b9
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1e5
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ed20]
call fcn.0040fe40
mov eax, dword [rbp + 0x80]
add eax, 0x3eb
mov dword [rbp + 0x84], eax
lea rcx, [rbp + 0x90]
mov rdx, qword [0x0060ec90]
call fcn.0040fe40
lea rcx, [rbp + 0x88]
call fcn.0040e5d0
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x5d281f
mov eax, dword [rbp + 0x74]
add eax, 0x139
mov dword [rbp + 0x7c], eax
lea rcx, [rbp + 0x88]
mov rdx, qword [0x0060ece8]
call fcn.0040fe40
mov eax, dword [rbp + 0x80]
sub dword [rbp + 0x84], eax
lea rcx, [rbp + 0x58]
xor edx, edx
call fcn.0042c720
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x58]
call fcn.0040fe40
lea rcx, [rbp + 0x50]
call fcn.00564110
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0x50]
call fcn.0040fc50
lea rcx, [rbp + 0x48]
mov rdx, qword [rbp + 0x90]
call fcn.0040fe40
lea rcx, [rbp + 0x40]
mov rdx, qword [rbp + 0x48]
call fcn.0040fc80
lea rcx, [rbp + 0x38]
lea rdx, [0x0060e385]
mov r8d, pe_nt_image_headers64
call fcn.0040f500
lea rcx, [rbp + 0x30]
mov rdx, qword [rbp + 0x88]
call fcn.0040fc80
mov cl, 1
mov rdx, qword [rbp + 0x40]
mov r8, qword [rbp + 0x38]
mov r9, qword [rbp + 0x30]
call fcn.0057f550
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
add ecx, dword [rbp + 0x74]
cmp eax, ecx
jge 0x5d290a
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1ee
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x39
mov dword [rbp + 0x7c], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 2
jne 0x5d28df
nop
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x7c], 0
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, 0x3ce
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d298e
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x1f9
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x84]
jge 0x5d29b2
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 8
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 4
jne 0x5d294a
nop
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x5d29f2
lea rcx, [rbp + 0x7c]
call fcn.00561240
mov dword [rbp + 0x7c], 0
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, 0x3e5
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d2a3d
mov eax, dword [rbp + 0x70]
sub eax, 0x1d0
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x84]
jge 0x5d2a61
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, 0x3bf
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 4
jne 0x5d29f9
nop
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x74], eax
lea rcx, [rbp + 0x84]
lea rdx, [rbp + 0x80]
lea r8, [rbp + 0x7c]
call fcn.00536390
mov dword [rbp + 0x80], 0
cmp dword [rbp + 0x80], 2
jge 0x5d2b06
add dword [rbp + 0x80], 1
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x79
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d2af1
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
cmp dword [rbp + 0x80], 2
jl 0x5d2abb
nop
jmp 0x5d2eab
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, 0x34
sub eax, dword [rbp + 0x78]
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d2b67
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x21e
mov dword [rbp + 0x74], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 2
jne 0x5d2b29
nop
mov dword [rbp + 0x80], 0
cmp dword [rbp + 0x80], 2
jge 0x5d2bde
add dword [rbp + 0x80], 1
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
imul eax, eax, 0x45
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x70]
cmp dword [rbp + 0x78], eax
jne 0x5d2bc5
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
cmp dword [rbp + 0x80], 2
jl 0x5d2b8b
nop
mov eax, dword [rbp + 0x74]
add eax, 0x17c
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x80], 0
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
shl eax, 4
lea rax, [rax + rax*4]
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d2c35
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x21a
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x84]
jge 0x5d2c52
mov eax, dword [rbp + 0x84]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x80], 1
cmp dword [rbp + 0x80], 3
jne 0x5d2c05
nop
mov eax, dword [rbp + 0x70]
imul eax, eax, 0x20b
mov dword [rbp + 0x74], eax
mov rax, qword [0x00601cb8]
mov byte [rax], 1
xor ecx, ecx
xor edx, edx
lea r8, [0x005b5220]
xor r9, r9
mov dword [rsp + 0x20], 0
lea rax, [rbp + 0x9c]
mov qword [rsp + 0x28], rax
call sub.kernel32.dll_CreateThread_1
lea rcx, [rbp + 0x80]
lea rdx, [rbp + 0x78]
lea r8, [rbp + 0x74]
lea r9, [rbp + 0x70]
call fcn.0053d350
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
mov dword [rbp + 0x80], 0
cmp dword [rbp + 0x80], 2
jge 0x5d2d24
add dword [rbp + 0x80], 1
add dword [rbp + 0x84], 0x338
mov eax, dword [rbp + 0x78]
imul eax, eax, 0xbe
mov dword [rbp + 0x7c], eax
mov eax, dword [rbp + 0x74]
add eax, dword [rbp + 0x70]
cmp dword [rbp + 0x7c], eax
jne 0x5d2d11
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x84]
mov dword [rbp + 0x70], eax
add dword [rbp + 0x84], 0x34d
cmp dword [rbp + 0x80], 2
jl 0x5d2cda
nop
mov eax, dword [rbp + 0x84]
add dword [rbp + 0x70], eax
call fcn.005ccf40
mov eax, dword [rbp + 0x74]
sub eax, 0x181
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
sub eax, 0x18e
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x7c], 0
add dword [rbp + 0x84], 0x35c
mov eax, dword [rbp + 0x80]
add eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
add ecx, dword [rbp + 0x74]
cmp eax, ecx
jge 0x5d2d9a
mov eax, dword [rbp + 0x74]
sub eax, 0x1c7
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x74]
sub eax, dword [rbp + 0x84]
cmp eax, dword [rbp + 0x84]
jge 0x5d2dbe
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, 0x3d6
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x78]
sub eax, dword [rbp + 0x74]
test eax, eax
jge 0x5d2de7
mov eax, dword [rbp + 0x70]
mov ecx, eax
shl eax, 9
add eax, ecx
mov dword [rbp + 0x74], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 4
jne 0x5d2d71
nop
mov eax, dword [rbp + 0x84]
add eax, dword [rbp + 0x80]
mov ecx, dword [rbp + 0x7c]
add ecx, dword [rbp + 0x78]
cmp eax, ecx
jge 0x5d2e11
lea rcx, [rbp + 0x7c]
call fcn.0055ff80
mov eax, dword [rbp + 0x70]
sub eax, 0x1b1
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov dword [rbp + 0x7c], 0
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, 0x3e5
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x80]
sub eax, dword [rbp + 0x7c]
mov ecx, dword [rbp + 0x78]
sub ecx, dword [rbp + 0x74]
cmp eax, ecx
jle 0x5d2e74
mov eax, dword [rbp + 0x70]
sub eax, 0x1cf
mov dword [rbp + 0x74], eax
mov eax, dword [rbp + 0x78]
add eax, dword [rbp + 0x70]
cmp eax, dword [rbp + 0x84]
jle 0x5d2e8e
mov eax, dword [rbp + 0x80]
sub dword [rbp + 0x84], eax
mov eax, 0x3de
sub eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
add dword [rbp + 0x7c], 1
cmp dword [rbp + 0x7c], 4
jne 0x5d2e30
nop
mov eax, dword [rbp + 0x80]
mov dword [rbp + 0x84], eax
mov eax, dword [rbp + 0x74]
add eax, 0x171
mov dword [rbp + 0x78], eax
mov eax, dword [rbp + 0x84]
imul eax, dword [rbp + 0x7c]
mov dword [rbp + 0x84], eax
nop
lea rcx, [rbp + 0x30]
mov edx, 3
call fcn.0040e710
lea rcx, [rbp + 0x48]
call fcn.0040e5d0
lea rcx, [rbp + 0x50]
call fcn.0040e670
lea rcx, [rbp + 0x58]
mov edx, 3
call fcn.0040e6b0
lea rcx, [rbp + 0x88]
mov edx, 2
call fcn.0040e6b0
lea rsp, [rbp + 0xa0]
pop rbp
ret