Function at 0x83f0c0
Capabilities:
Create process on windows

Disassembly:
push rbp
push rbx
sub rsp, 0x458
mov rbp, rsp
mov qword [rbp + 0x78], 0
mov qword [rbp + 0x70], 0
mov qword [rbp + 0xc8], 0
mov qword [rbp + 0xc0], 0
mov qword [rbp + 0xb8], 0
mov qword [rbp + 0xb0], 0
mov qword [rbp + 0x98], 0
mov qword [rbp + 0x90], 0
mov qword [rbp + 0x88], 0
mov qword [rbp + 0x80], 0
mov qword [rbp + 0xa8], 0
mov qword [rbp + 0xa0], 0
mov qword [rbp + 0xd8], 0
mov qword [rbp + 0xd0], 0
mov qword [rbp + 0xe8], 0
mov qword [rbp + 0xe0], 0
mov qword [rbp + 0x110], 0
mov qword [rbp + 0x108], 0
mov qword [rbp + 0x100], 0
mov qword [rbp + 0xf8], 0
mov qword [rbp + 0xf0], 0
mov qword [rbp + 0x120], 0
mov qword [rbp + 0x118], 0
mov qword [rbp + 0x130], 0
mov qword [rbp + 0x128], 0
mov qword [rbp + 0x140], 0
mov qword [rbp + 0x138], 0
mov qword [rbp + 0x150], 0
mov qword [rbp + 0x148], 0
mov qword [rbp + 0x160], 0
mov qword [rbp + 0x158], 0
mov qword [rbp + 0x170], 0
mov qword [rbp + 0x168], 0
mov qword [rbp + 0x180], 0
mov qword [rbp + 0x178], 0
mov qword [rbp + 0x190], 0
mov qword [rbp + 0x188], 0
mov qword [rbp + 0x198], 0
mov qword [rbp + 0x1a0], 0
mov qword [rbp + 0x1b8], 0
mov qword [rbp + 0x1a8], 0
mov qword [rbp + 0x1b0], 0
mov qword [rbp + 0x1c8], 0
mov qword [rbp + 0x1c0], 0
mov qword [rbp + 0x1d8], 0
mov qword [rbp + 0x1d0], 0
mov qword [rbp + 0x1e8], 0
mov qword [rbp + 0x1e0], 0
mov qword [rbp + 0x1f8], 0
mov qword [rbp + 0x1f0], 0
mov qword [rbp + 0x270], 0
mov qword [rbp + 0x268], 0
mov qword [rbp + 0x260], 0
mov qword [rbp + 0x258], 0
mov qword [rbp + 0x248], 0
mov qword [rbp + 0x240], 0
mov qword [rbp + 0x230], 0
mov qword [rbp + 0x228], 0
mov qword [rbp + 0x218], 0
mov qword [rbp + 0x210], 0
mov qword [rbp + 0x200], 0
mov qword [rbp + 0x208], 0
mov qword [rbp + 0x220], 0
mov qword [rbp + 0x238], 0
mov qword [rbp + 0x250], 0
mov qword [rbp + 0x280], 0
mov qword [rbp + 0x278], 0
mov qword [rbp + 0x310], 0
mov qword [rbp + 0x308], 0
mov qword [rbp + 0x300], 0
mov qword [rbp + 0x2f8], 0
mov qword [rbp + 0x2e8], 0
mov qword [rbp + 0x2e0], 0
mov qword [rbp + 0x2d0], 0
mov qword [rbp + 0x2c8], 0
mov qword [rbp + 0x2b8], 0
mov qword [rbp + 0x2b0], 0
mov qword [rbp + 0x2a0], 0
mov qword [rbp + 0x298], 0
mov qword [rbp + 0x288], 0
mov qword [rbp + 0x290], 0
mov qword [rbp + 0x2a8], 0
mov qword [rbp + 0x2c0], 0
mov qword [rbp + 0x2d8], 0
mov qword [rbp + 0x2f0], 0
mov qword [rbp + 0x320], 0
mov qword [rbp + 0x318], 0
mov qword [rbp + 0x360], 0
mov qword [rbp + 0x358], 0
mov qword [rbp + 0x350], 0
mov qword [rbp + 0x348], 0
mov qword [rbp + 0x338], 0
mov qword [rbp + 0x330], 0
mov qword [rbp + 0x328], 0
mov qword [rbp + 0x340], 0
mov qword [rbp + 0x3b0], 0
mov qword [rbp + 0x3a8], 0
mov qword [rbp + 0x3a0], 0
mov qword [rbp + 0x398], 0
mov qword [rbp + 0x380], 0
mov qword [rbp + 0x378], 0
mov qword [rbp + 0x370], 0
mov qword [rbp + 0x368], 0
mov qword [rbp + 0x390], 0
mov qword [rbp + 0x388], 0
mov qword [rbp + 0x3c0], 0
mov qword [rbp + 0x3b8], 0
mov qword [rbp + 0x3d0], 0
mov qword [rbp + 0x3c8], 0
mov qword [rbp + 0x3d8], 0
mov qword [rbp + 0x3f0], 0
mov qword [rbp + 0x3e0], 0
mov qword [rbp + 0x3e8], 0
mov qword [rbp + 0x400], 0
mov qword [rbp + 0x3f8], 0
mov qword [rbp + 0x410], 0
mov qword [rbp + 0x408], 0
mov qword [rbp + 0x448], 0
mov qword [rbp + 0x418], rbp
mov qword [rbp + 0x470], rcx
mov qword [rbp + 0x478], rdx
mov rcx, qword [rbp + 0x478]
call fcn.00410140
nop
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x408]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x410]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x408]
call fcn.00565830
mov rax, qword [rbp + 0x410]
mov rcx, qword [rax + 8]
lea rdx, [rbp + 0x444]
call fcn.00436840
test al, al
je 0x840bd4
mov eax, dword [rbp + 0x444]
cmp eax, 0xb
jg 0x83f6d4
cmp eax, 0xb
je 0x8403bf
cmp eax, 6
jg 0x83f6a3
cmp eax, 6
je 0x83f961
sub eax, 1
test eax, eax
je 0x83f744
sub eax, 1
test eax, eax
je 0x83f89d
sub eax, 2
test eax, eax
je 0x83f8b8
sub eax, 1
test eax, eax
jne 0x840bd4
jmp 0x83f907
sub eax, 7
test eax, eax
je 0x83fbf1
sub eax, 1
test eax, eax
je 0x83fd75
sub eax, 1
test eax, eax
je 0x840072
sub eax, 1
test eax, eax
jne 0x840bd4
jmp 0x8402ff
cmp eax, 0x10
jg 0x83f713
cmp eax, 0x10
je 0x840789
sub eax, 0xc
test eax, eax
je 0x8405aa
sub eax, 1
test eax, eax
je 0x840607
sub eax, 1
test eax, eax
je 0x840664
sub eax, 1
test eax, eax
jne 0x840bd4
jmp 0x840724
sub eax, 0x11
test eax, eax
je 0x8407ee
sub eax, 1
test eax, eax
je 0x840873
sub eax, 2
test eax, eax
je 0x840924
sub eax, 1
test eax, eax
jne 0x840bd4
jmp 0x840b6e
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x50]
xor edx, edx
call fcn.007ba7b0
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x50]
mov dl, 1
call fcn.007ba7b0
mov rax, qword [0x008d6778]
mov rax, qword [rax]
cmp byte [rax + 0x749], 0
jne 0x840bd4
mov rax, qword [0x008e3350]
cmp byte [rax + 0x700], 0
je 0x840bd4
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x3f8]
mov r8d, 0x1f
call fcn.00849630
lea rcx, [rbp + 0x400]
mov rax, qword [0x008d59a8]
mov rax, qword [rax]
mov rdx, qword [rax + 0x758]
mov r8, qword [rbp + 0x3f8]
call fcn.00411750
mov rcx, qword [rbp + 0x400]
mov dl, 1
call fcn.00437250
test al, al
je 0x83f85f
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x3e8]
mov r8d, 0x1f
call fcn.00849630
lea rcx, [rbp + 0x3f0]
mov rax, qword [0x008d59a8]
mov rax, qword [rax]
mov rdx, qword [rax + 0x758]
mov r8, qword [rbp + 0x3e8]
call fcn.00411750
mov rcx, qword [rbp + 0x3f0]
call fcn.00411310
lea rcx, [rbp + 0x3e0]
mov rdx, rax
call fcn.004113b0
mov rcx, qword [rbp + 0x3e0]
call fcn.00437a30
mov ecx, 0xbb8
call fcn.00525c40
lea rcx, [rbp + 0x3d8]
mov edx, 6
call fcn.00436320
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x3d8]
call fcn.00850d00
mov rax, qword [0x008d6778]
mov rax, qword [rax]
mov byte [rax + 0x749], 1
jmp 0x840bd4
mov rax, qword [0x008d6830]
mov rcx, qword [rax]
lea rdx, [0x0084130c]
call fcn.0085f540
jmp 0x840bd4
mov ecx, 0xc8
call fcn.00525c40
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
xor edx, edx
call fcn.007ba7b0
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x50]
xor edx, edx
call fcn.007ba7b0
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x60]
xor edx, edx
call fcn.00665500
jmp 0x840bd4
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
xor edx, edx
call fcn.007ba7b0
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x50]
xor edx, edx
call fcn.007ba7b0
mov ecx, 0x64
call fcn.00525c40
mov rax, qword [0x008d56e0]
mov rax, qword [rax]
mov rcx, qword [rax + 0x48]
mov dl, 1
call fcn.007ba7b0
mov ecx, 0x406
call fcn.00525c40
jmp 0x840bd4
mov rax, qword [0x008d5e38]
mov rax, qword [rax]
cmp byte [rax + 0x779], 0
je 0x83fa7e
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x3c8]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x3d0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x3c8]
call fcn.00565830
mov rax, qword [rbp + 0x3d0]
mov rcx, qword [rax + 0x10]
call fcn.004367c0
mov ebx, eax
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x3b8]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x3c0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x3b8]
call fcn.00565830
mov rax, qword [rbp + 0x3c0]
mov rcx, qword [rax + 0x18]
call fcn.004367c0
mov ecx, eax
mov eax, ebx
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov r8, rax
mov eax, ecx
imul eax, eax, 0x64
mov ecx, 0x45
cdq
idiv ecx
mov rdx, rax
mov ecx, r8d
call sub.user32.dll_SetCursorPos
mov ecx, 2
xor edx, edx
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
call sub.user32.dll_mouse_event
mov ecx, 0x384
call fcn.00525c40
mov ecx, 4
xor edx, edx
xor r8, r8
xor r9, r9
mov qword [rsp + 0x20], 0
call sub.user32.dll_mouse_event
jmp 0x840bd4
lea rcx, [rbp + 0x3a8]
mov edx, 2
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x3a0]
mov r8d, 0x2d
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x388]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x390]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x388]
call fcn.00565830
mov rax, qword [rbp + 0x390]
mov rcx, qword [rax + 0x10]
call fcn.004367c0
lea rcx, [rbp + 0x398]
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov rdx, rax
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x380]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x368]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x370]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x368]
call fcn.00565830
mov rax, qword [rbp + 0x370]
mov rcx, qword [rax + 0x18]
call fcn.004367c0
lea rcx, [rbp + 0x378]
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov rdx, rax
call fcn.00436320
lea rcx, [rbp + 0x3b0]
mov edx, 5
mov r8, qword [rbp + 0x3a8]
mov r9, qword [rbp + 0x3a0]
mov rax, qword [rbp + 0x398]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x380]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x378]
mov qword [rsp + 0x30], rax
call fcn.00411880
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x3b0]
call fcn.00850d00
jmp 0x840bd4
lea rcx, [rbp + 0x358]
mov edx, 1
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x350]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x340]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x348]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x340]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x338]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x328]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x330]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x328]
call fcn.00565830
lea rcx, [rbp + 0x360]
mov edx, 5
mov r8, qword [rbp + 0x358]
mov r9, qword [rbp + 0x350]
mov rax, qword [rbp + 0x348]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x338]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x330]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
call fcn.00411880
mov rax, qword [0x008d5b40]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x360]
call fcn.0083c5b0
mov ecx, 0x1e
call fcn.00525c40
lea rcx, [rbp + 0x320]
mov edx, 5
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x318]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x320]
mov rdx, qword [rbp + 0x318]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x320]
call fcn.00850d00
jmp 0x840bd4
lea rcx, [rbp + 0x308]
mov edx, 7
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x300]
mov r8d, 0x2d
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2f0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x2f8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2f0]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2e8]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2d8]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x2e0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2d8]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2d0]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2c0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x2c8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2c0]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2b8]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2a8]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x2b0]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x2a8]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x2a0]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x290]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x298]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x290]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x288]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x310]
mov edx, 0xc
mov r8, qword [rbp + 0x308]
mov r9, qword [rbp + 0x300]
mov rax, qword [rbp + 0x2f8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x2e8]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x2e0]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x2d0]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x2c8]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x2b8]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x2b0]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0x2a0]
mov qword [rsp + 0x58], rax
mov rax, qword [rbp + 0x298]
mov rax, qword [rax + 0x30]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp + 0x288]
mov qword [rsp + 0x68], rax
call fcn.00411880
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x310]
call fcn.00850d00
mov ecx, 0x258
call fcn.00525c40
lea rcx, [rbp + 0x280]
mov edx, 5
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x278]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x280]
mov rdx, qword [rbp + 0x278]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x280]
call fcn.00850d00
jmp 0x840bd4
lea rcx, [rbp + 0x268]
mov edx, 3
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x260]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x250]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x258]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x250]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x248]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x238]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x240]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x238]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x230]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x220]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x228]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x220]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x218]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x208]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x210]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x208]
call fcn.00565830
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x200]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x270]
mov edx, 0xa
mov r8, qword [rbp + 0x268]
mov r9, qword [rbp + 0x260]
mov rax, qword [rbp + 0x258]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x248]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x240]
mov rax, qword [rax + 0x18]
mov qword [rsp + 0x30], rax
mov rax, qword [rbp + 0x230]
mov qword [rsp + 0x38], rax
mov rax, qword [rbp + 0x228]
mov rax, qword [rax + 0x20]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0x218]
mov qword [rsp + 0x48], rax
mov rax, qword [rbp + 0x210]
mov rax, qword [rax + 0x28]
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0x200]
mov qword [rsp + 0x58], rax
call fcn.00411880
mov rax, qword [0x008d5b40]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x270]
call fcn.0083c5b0
mov ecx, 0x1e
call fcn.00525c40
lea rcx, [rbp + 0x1f8]
mov edx, 5
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x1f0]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x1f8]
mov rdx, qword [rbp + 0x1f0]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1f8]
call fcn.00850d00
jmp 0x840bd4
lea rcx, [rbp + 0x1e8]
mov edx, 4
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x1e0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x1e8]
mov rdx, qword [rbp + 0x1e0]
call fcn.00411680
mov rax, qword [0x008d5b40]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1e8]
call fcn.0083c5b0
mov ecx, 0x1e
call fcn.00525c40
lea rcx, [rbp + 0x1d8]
mov edx, 4
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x1d0]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x1d8]
mov rdx, qword [rbp + 0x1d0]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x1d8]
call fcn.00850d00
jmp 0x840bd4
mov rcx, qword [0x004dba48]
mov dl, 1
call fcn.0050e210
mov qword [rbp + 0x438], rax
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x1c0]
mov r8d, 0xd
call fcn.00849630
lea rcx, [rbp + 0x1c8]
mov rax, qword [0x008d59a8]
mov rax, qword [rax]
mov rdx, qword [rax + 0x758]
mov r8, qword [rbp + 0x1c0]
call fcn.00411750
mov rcx, qword [rbp + 0x1c8]
mov dl, 1
call fcn.00437250
test al, al
je 0x84048f
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x1b0]
mov r8d, 0xd
call fcn.00849630
lea rcx, [rbp + 0x1b8]
mov rax, qword [0x008d59a8]
mov rax, qword [rax]
mov rdx, qword [rax + 0x758]
mov r8, qword [rbp + 0x1b0]
call fcn.00411750
mov rcx, qword [rbp + 0x1b8]
call fcn.00411310
lea rcx, [rbp + 0x1a8]
mov rdx, rax
call fcn.004113b0
mov rcx, qword [rbp + 0x1a8]
call fcn.00437a30
nop
nop
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x1a0]
mov r8d, 0xe
call fcn.00849630
mov rax, qword [rbp + 0x1a0]
mov qword [rbp + 0x430], rax
call fcn.0043cfa0
movsd qword [rbp + 0x428], xmm0
lea rcx, [rbp + 0x448]
mov rdx, qword [rbp + 0x430]
movsd xmm2, qword [rbp + 0x428]
mov r9, qword [0x008d6598]
call fcn.0043e540
mov rax, qword [0x008d5968]
mov rcx, qword [rax]
lea rdx, [rbp + 0x198]
mov r8, qword [rbp + 0x448]
call fcn.00839f10
mov rcx, qword [rbp + 0x438]
mov rdx, qword [rbp + 0x198]
mov rax, qword [rbp + 0x438]
mov rax, qword [rax]
call qword [rax + 0x78]
nop
lea rcx, [rbp + 0x448]
call fcn.0040ffb0
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x188]
mov r8d, 0xd
call fcn.00849630
lea rcx, [rbp + 0x190]
mov rax, qword [0x008d59a8]
mov rax, qword [rax]
mov rdx, qword [rax + 0x758]
mov r8, qword [rbp + 0x188]
call fcn.00411750
mov rcx, qword [rbp + 0x438]
mov rdx, qword [rbp + 0x190]
mov rax, qword [rbp + 0x438]
mov rbx, qword [rax]
call qword [rbx + pe_nt_image_headers64]
jmp 0x840599
mov rcx, qword [rbp + 0x438]
call fcn.0040cbb0
jmp 0x840bd4
lea rcx, [rbp + 0x180]
mov edx, 4
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x178]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x180]
mov rdx, qword [rbp + 0x178]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x180]
call fcn.00850d00
jmp 0x840bd4
lea rcx, [rbp + 0x170]
mov edx, 5
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x168]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x170]
mov rdx, qword [rbp + 0x168]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x170]
call fcn.00850d00
jmp 0x840bd4
lea rcx, [rbp + 0x160]
mov edx, 5
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x158]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x160]
mov rdx, qword [rbp + 0x158]
call fcn.00411680
mov rax, qword [0x008d5b40]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x160]
call fcn.0083c5b0
mov ecx, 0x1e
call fcn.00525c40
lea rcx, [rbp + 0x150]
mov edx, 4
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x148]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x150]
mov rdx, qword [rbp + 0x148]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x150]
call fcn.00850d00
jmp 0x840bd4
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x140]
mov r8d, 0xf
call fcn.00849630
lea rcx, [rbp + 0x138]
mov rdx, qword [rbp + 0x140]
xor r8, r8
call fcn.00410e20
mov rcx, qword [rbp + 0x138]
call fcn.00410d30
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_WinExec
mov ecx, 0x57
xor edx, edx
xor r8, r8
mov r9d, 0x1b
call sub.user32.dll_SystemParametersInfoW
jmp 0x840bd4
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x130]
mov r8d, 0x10
call fcn.00849630
lea rcx, [rbp + 0x128]
mov rdx, qword [rbp + 0x130]
xor r8, r8
call fcn.00410e20
mov rcx, qword [rbp + 0x128]
call fcn.00410d30
mov rcx, rax
xor edx, edx
call sub.kernel32.dll_WinExec
mov ecx, 0x57
xor edx, edx
xor r8, r8
mov r9d, 0x1b
call sub.user32.dll_SystemParametersInfoW
jmp 0x840bd4
mov rax, qword [0x008d58d8]
mov rax, qword [rax]
cmp byte [rax + 0xb4c], 0
jne 0x840bd4
lea rcx, [rbp + 0x120]
mov edx, 7
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x118]
mov r8d, 0x2d
call fcn.00849630
lea rcx, [rbp + 0x120]
mov rdx, qword [rbp + 0x118]
call fcn.00411680
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x120]
call fcn.00850d00
mov rax, qword [0x008d58d8]
mov rax, qword [rax]
mov byte [rax + 0xb4c], 1
jmp 0x840bd4
lea rcx, [rbp + 0x108]
mov edx, 6
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x100]
mov r8d, 0x2d
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0xf0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0xf8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xf0]
call fcn.00565830
lea rcx, [rbp + 0x110]
mov edx, 3
mov r8, qword [rbp + 0x108]
mov r9, qword [rbp + 0x100]
mov rax, qword [rbp + 0xf8]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x20], rax
call fcn.00411880
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0x110]
call fcn.00850d00
jmp 0x840bd4
mov rax, qword [0x008d5e38]
mov rax, qword [rax]
cmp byte [rax + 0x779], 0
je 0x8409fe
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0xe0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0xe8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xe0]
call fcn.00565830
mov rax, qword [rbp + 0xe8]
mov rcx, qword [rax + 0x10]
call fcn.004367c0
mov ebx, eax
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0xd0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0xd8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xd0]
call fcn.00565830
mov rax, qword [rbp + 0xd8]
mov rcx, qword [rax + 0x18]
call fcn.004367c0
mov ecx, eax
mov eax, ebx
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov r8, rax
mov eax, ecx
imul eax, eax, 0x64
mov ecx, 0x45
cdq
idiv ecx
mov rdx, rax
mov ecx, r8d
call sub.user32.dll_SetCursorPos
jmp 0x840bd4
lea rcx, [rbp + 0xc0]
mov edx, 3
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0xb8]
mov r8d, 0x2d
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0xa0]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0xa8]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0xa0]
call fcn.00565830
mov rax, qword [rbp + 0xa8]
mov rcx, qword [rax + 0x10]
call fcn.004367c0
lea rcx, [rbp + 0xb0]
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov rdx, rax
call fcn.00436320
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x98]
mov r8d, 1
call fcn.00849630
mov rax, qword [0x008d59a8]
mov rcx, qword [rax]
lea rdx, [rbp + 0x80]
mov r8d, 1
call fcn.00849630
lea rcx, [rbp + 0x88]
mov rdx, qword [rbp + 0x478]
mov r8, qword [rbp + 0x80]
call fcn.00565830
mov rax, qword [rbp + 0x88]
mov rcx, qword [rax + 0x18]
call fcn.004367c0
lea rcx, [rbp + 0x90]
imul eax, eax, 0x64
mov r8d, 0x45
cdq
idiv r8d
mov rdx, rax
call fcn.00436320
lea rcx, [rbp + 0xc8]
mov edx, 5
mov r8, qword [rbp + 0xc0]
mov r9, qword [rbp + 0xb8]
mov rax, qword [rbp + 0xb0]
mov qword [rsp + 0x20], rax
mov rax, qword [rbp + 0x98]
mov qword [rsp + 0x28], rax
mov rax, qword [rbp + 0x90]
mov qword [rsp + 0x30], rax
call fcn.00411880
mov rax, qword [0x008d6778]
mov rcx, qword [rax]
mov rdx, qword [rbp + 0xc8]
call fcn.00850d00
jmp 0x840bd4
mov rax, qword [0x008d6898]
mov rcx, qword [rax]
lea rdx, [rbp + 0x70]
call fcn.0085d6b0
lea rcx, [rbp + 0x78]
mov edx, 3
lea r8, [0x00841324]
mov r9, qword [rbp + 0x70]
lea rax, [0x00841344]
mov qword [rsp + 0x20], rax
call fcn.00411880
mov rcx, qword [rbp + 0x78]
call fcn.00411310
xor ecx, ecx
xor edx, edx
mov r8, rax
lea r9, [0x008413a8]
mov qword [rsp + 0x20], 0
mov dword [rsp + 0x28], 1
call sub.shell32.dll_ShellExecuteW
nop
lea rcx, [rbp + 0x70]
mov edx, 3
call fcn.00410090
lea rcx, [rbp + 0x88]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x90]
mov edx, 3
call fcn.00410090
lea rcx, [rbp + 0xa8]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0xb0]
mov edx, 5
call fcn.00410090
lea rcx, [rbp + 0xd8]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0xe0]
call fcn.0040ffb0
lea rcx, [rbp + 0xe8]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0xf0]
call fcn.0040ffb0
lea rcx, [rbp + 0xf8]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x100]
mov edx, 5
call fcn.00410090
lea rcx, [rbp + 0x128]
call fcn.00410000
lea rcx, [rbp + 0x130]
call fcn.0040ffb0
lea rcx, [rbp + 0x138]
call fcn.00410000
lea rcx, [rbp + 0x140]
mov edx, 0x1a
call fcn.00410090
lea rcx, [rbp + 0x210]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x218]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x228]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x230]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x240]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x248]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x258]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x260]
mov edx, 7
call fcn.00410090
lea rcx, [rbp + 0x298]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x2a0]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x2b0]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x2b8]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x2c8]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x2d0]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x2e0]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x2e8]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x2f8]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x300]
mov edx, 6
call fcn.00410090
lea rcx, [rbp + 0x330]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x338]
mov edx, 2
call fcn.00410090
lea rcx, [rbp + 0x348]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x350]
mov edx, 3
call fcn.00410090
lea rcx, [rbp + 0x380]
call fcn.0040ffb0
lea rcx, [rbp + 0x398]
mov edx, 4
call fcn.00410090
lea rcx, [rbp + 0x368]
call fcn.0040ffb0
lea rcx, [rbp + 0x370]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x378]
call fcn.0040ffb0
lea rcx, [rbp + 0x388]
call fcn.0040ffb0
lea rcx, [rbp + 0x390]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x3b8]
call fcn.0040ffb0
lea rcx, [rbp + 0x3c0]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x3c8]
call fcn.0040ffb0
lea rcx, [rbp + 0x3d0]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x3d8]
mov edx, 7
call fcn.00410090
lea rcx, [rbp + 0x410]
mov rdx, qword [0x0041af90]
call fcn.00413710
lea rcx, [rbp + 0x448]
call fcn.0040ffb0
lea rcx, [rbp + 0x478]
call fcn.0040ffb0
lea rsp, [rbp + 0x458]
pop rbx
pop rbp
ret