Function at 0x464528
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff70
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x46619c
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0x466130
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x4645a4
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x24]
call fcn.004318cc
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x14]
jle 0x4645c2
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x18]
call fcn.0042330c
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.0045f5fc
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x14]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x4645fd
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x14]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x464628
imul eax, dword [ebp - 0x2c], 0x1cf
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x4645d9
add ebx, ebx
mov edx, 1
test eax, ebx
cmp edx, 0
ja 0x464640
dec byte [ebp - 0x72af03bb]
inc ebp
test byte [edx + 0x4808c0], bh
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x7c]
mov edx, 0x4808c0
call fcn.0040706c
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x78]
call fcn.0041c0c4
mov eax, dword [ebp - 0x78]
lea edx, [ebp - 0x74]
call fcn.00422118
mov eax, dword [ebp - 0x74]
mov ecx, 8
mov edx, 1
call fcn.004076a4
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4646d2
inc dword [ebp - 0x18]
mov eax, 0x372
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x98
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x4646b3
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x4646cc
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x18], 2
jl 0x464684
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
cmp eax, edx
jle 0x4646f8
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x24]
call fcn.00431460
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x10], 0x325
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x8a
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jne 0x464723
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x4646fd
lea eax, [ebp - 0xc]
call fcn.004068c0
imul eax, dword [ebp - 0x28], 0x1c5
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812a4]
call fcn.004074dc
mov eax, 0x36b
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812b8]
call fcn.004074dc
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x46478f
mov eax, dword [ebp - 0x14]
add eax, 0x360
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x481294]
call fcn.004074dc
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x4647b7
imul eax, dword [ebp - 0x28], 0x1cb
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x481298]
call fcn.004074dc
mov eax, 0x371
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x84]
mov eax, 3
call fcn.00414660
mov edx, dword [ebp - 0x84]
lea eax, [ebp - 0xc]
call fcn.004074dc
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
cmp eax, edx
jle 0x464809
mov eax, 0x1bc
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x88]
mov eax, 2
call fcn.00414660
mov edx, dword [ebp - 0x88]
lea eax, [ebp - 0xc]
call fcn.004074dc
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x464840
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xc]
mov edx, 0x4661b8
call fcn.004074dc
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812bc]
call fcn.004074dc
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x46487a
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812d4]
call fcn.004074dc
mov eax, dword [ebp - 0x20]
add eax, 0x69
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812d4]
call fcn.004074dc
cmp dword [0x47a5f0], 0
jne 0x4648c6
mov eax, dword [ebp - 0xc]
call fcn.004072e0
push eax
call sub.kernel32.dll_LoadLibraryW
mov dword [0x47a5f0], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x4648db
call fcn.00448330
imul eax, dword [ebp - 0x14], 0x31b
mov dword [ebp - 0x10], eax
cmp dword [0x47a7ac], 0
jne 0x464902
mov edx, 0x7ef9fc
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7ac], eax
imul eax, dword [ebp - 0x28], 0x196
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.0041c078
mov eax, dword [ebp - 0x28]
sub eax, 0x1a3
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.00456c90
mov eax, dword [ebp - 4]
call fcn.004072e0
push eax
mov eax, dword [ebp - 4]
call fcn.004072e0
push eax
call sub.user32.dll_FindWindowW
test eax, eax
jne 0x465d75
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x18]
call fcn.00404770
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x46497e
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x4649a4
mov eax, dword [ebp - 0x28]
sub eax, 0x1a2
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x4649ba
mov eax, 0x34c
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x46495f
imul eax, dword [ebp - 0x28], 0x193
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x14]
call fcn.0041c01c
call fcn.004622b0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov ecx, 0x3d7
add ebx, ebx
mov eax, 0
test ebx, ebx
cmp eax, 0
je 0x4649f4
sub dh, byte [ebx]
ror byte [ecx + 0x458bf845], 0xf0
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x464a28
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x10], 0x304
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x6a
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x464a04
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
call fcn.00463c78
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.004644c4
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.0041ab58
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x464afe
inc dword [ebp - 0x18]
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x464acf
mov eax, dword [ebp - 0x28]
sub eax, 0x1a6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x464ae4
imul eax, dword [ebp - 0x10], 0x330
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x56
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x18], 1
jl 0x464aa6
mov eax, dword [ebp - 0x14]
add eax, 0x33d
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x164
mov dword [ebp - 0x20], eax
add dword [ebp - 0x10], 0x32a
mov dword [ebp - 0x54], 0x203
mov eax, dword [ebp - 0x28]
sub eax, 0x176
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
call fcn.004644c4
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x32d
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x93
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x464b78
imul eax, dword [ebp - 0x10], 0x2fe
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x84
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jne 0x464b4e
mov dword [ebp - 0x50], 0x463cd4
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
add eax, 0x354
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x464bd6
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
add dword [ebp - 0x10], 0x32d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jne 0x464b98
imul eax, dword [ebp - 0x28], 0x194
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.0045c134
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, 0x362
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x464c3a
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
add eax, 0x337
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x464c07
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x28]
sub eax, 0x179
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x18], 0x3c0
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x28], 0x1e6
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
call fcn.0041ab58
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x14]
add eax, 0x339
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
call fcn.004068c0
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812c4]
call fcn.004074dc
imul eax, dword [ebp - 0x28], 0x1c8
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812bc]
call fcn.004074dc
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812a8]
call fcn.004074dc
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x464d0f
imul eax, dword [ebp - 0x28], 0x1b9
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x8c]
mov eax, 3
call fcn.00414660
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0xc]
call fcn.004074dc
mov eax, dword [ebp - 0x14]
add eax, 0x33f
mov dword [ebp - 0x10], eax
lea edx, [ebp - 0x90]
mov eax, 2
call fcn.00414660
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0xc]
call fcn.004074dc
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x464d71
mov eax, dword [ebp - 0x28]
sub eax, 0x1aa
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0xc]
mov edx, 0x4661b8
call fcn.004074dc
mov eax, 0x370
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812bc]
call fcn.004074dc
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x464db2
mov eax, dword [ebp - 0x28]
sub eax, 0x19b
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812d4]
call fcn.004074dc
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0xc]
mov edx, dword [0x4812d4]
call fcn.004074dc
cmp dword [0x47a608], 0
jne 0x464df0
mov eax, dword [ebp - 0xc]
call fcn.004072e0
push eax
call sub.kernel32.dll_LoadLibraryW
mov dword [0x47a608], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x464e11
lea eax, [ebp - 0x24]
call fcn.0043348c
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jle 0x464e2d
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x1c]
call fcn.004292e0
mov eax, dword [ebp - 0x28]
sub eax, 0x180
mov dword [ebp - 0x20], eax
mov eax, 0x366
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x14]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x464e6c
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x464e82
fild dword [ebp - 0x14]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x464e9c
imul eax, dword [ebp - 0x2c], 0x1ef
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x464e48
xor eax, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x14]
jle 0x464ed7
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x18]
call fcn.00424240
mov eax, 0x393
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x28], 0x199
mov dword [ebp - 0x24], eax
mov eax, 0x37f
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x464f22
mov eax, dword [ebp - 0x28]
sub eax, 0x192
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x464f34
add dword [ebp - 0x10], 0x31d
fild dword [ebp - 0x18]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x464f59
imul eax, dword [ebp - 0x2c], 0x1cc
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x464efc
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jle 0x464f75
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x18]
call fcn.004292e0
cmp dword [0x47a7c8], 0
jne 0x464f92
mov edx, 0x564788
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7c8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, 0x376
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 0x3b
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x20]
jne 0x464fd0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x14], 0x34b
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x464f9d
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jle 0x46500a
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x1c]
call fcn.004232a8
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.00456c30
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x46503e
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x1c]
call fcn.0042e8dc
imul eax, dword [ebp - 0x18], 0x3b5
mov dword [ebp - 0x10], eax
push 0x7f00
push 0
call dword [0x47a7c8]
mov dword [ebp - 0x40], eax
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.0041d438
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x334
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x9a
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x465092
imul eax, dword [ebp - 0x10], 0x305
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x6b
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x465068
cmp dword [0x47a7cc], 0
jne 0x4650c1
mov edx, 0x8bbf2f
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7cc], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x4650eb
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x20]
call fcn.00431550
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
cmp eax, edx
jle 0x465115
imul eax, dword [ebp - 0x28], 0x1dc
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x46512b
mov eax, dword [ebp - 0x14]
add eax, 0x326
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x465150
imul eax, dword [ebp - 0x28], 0x1d6
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jne 0x4650f0
push 0x7f00
push 0
call dword [0x47a7cc]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
cmp dword [0x47a610], 0
jne 0x46518f
mov edx, 0xa4b539
mov eax, dword [0x47a608]
call fcn.0041abc0
mov dword [0x47a610], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x325
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x8a
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jne 0x4651c0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x1c]
call fcn.00404764
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x46519a
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x46522b
inc dword [ebp - 0x14]
add dword [ebp - 0x10], 0x32b
mov eax, dword [ebp - 0x1c]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
jne 0x46521a
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, 0x2e0
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], 1
jl 0x4651e8
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.0041ab58
imul eax, dword [ebp - 0x28], 0x1b4
mov dword [ebp - 0x24], eax
push 0
call dword [0x47a610]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 4]
call fcn.004072e0
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x4652b7
inc dword [ebp - 0x18]
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x18]
jne 0x46529c
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x14], 0x32a
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0xaf
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x18], 2
jl 0x46527a
imul eax, dword [ebp - 0x18], 0x397
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x28], 0x1bd
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 4]
call fcn.004072e0
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, 0x36c
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x46530e
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
add dword [ebp - 0x10], 0x321
fild dword [ebp - 0x18]
call fcn.00404770
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jne 0x4652db
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x46538a
inc dword [ebp - 0x18]
imul eax, dword [ebp - 0x10], 0x316
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x1c]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465370
mov eax, dword [ebp - 0x28]
sub eax, 0x185
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x465384
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x18], 2
jl 0x46533d
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x10], 0x338
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 0x5d
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x4653c1
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x46538f
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x10], 0x315
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 0x3b
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
jne 0x46540a
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x4653d8
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x465445
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x46545b
mov eax, dword [ebp - 0x14]
add eax, 0x35f
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465481
mov eax, dword [ebp - 0x28]
sub eax, 0x18e
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x465421
lea eax, [ebp - 0x14]
call fcn.0041d814
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jle 0x4654b0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
call fcn.004232a8
mov eax, dword [ebp - 0x14]
add eax, 0x325
mov dword [ebp - 0x10], eax
cmp dword [0x47a7d0], 0
jne 0x4654d8
mov edx, 0xce156a
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7d0], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465507
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x24]
call fcn.004320f8
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x331
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
add eax, 0xb7
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x465540
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x46550c
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465583
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x1c]
call fcn.0042dcb8
lea eax, [ebp - 0x54]
push eax
call dword [0x47a7d0]
test ax, ax
je 0x465970
mov edx, 0xba27ef
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7d4], eax
cmp dword [0x47a648], 0
jne 0x4655c7
mov edx, 0xf79c84
mov eax, dword [0x47a5e4]
call fcn.0041abc0
mov dword [0x47a648], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x10], 0x337
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x9d
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jne 0x4655fe
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, 0x36d
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x4655d5
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
call fcn.0041d86c
mov eax, dword [ebp - 0x14]
add eax, 0x33e
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x346
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x4b
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404764
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x465662
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x465630
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
push 0
push 0
call dword [0x47a648]
push eax
push 0
push 0
push 0x64
push 0x64
push 0xffffff38
push 0xffffff38
push 0xcf0000
mov eax, dword [ebp - 4]
call fcn.004072e0
push eax
mov eax, dword [ebp - 4]
call fcn.004072e0
push eax
push 0
call dword [0x47a7d4]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x14]
call fcn.0041de68
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x4656e7
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x1c]
call fcn.004312e4
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.004623e8
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
cmp eax, edx
jle 0x465717
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x24]
call fcn.00433898
xor eax, eax
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465742
mov eax, dword [ebp - 0x28]
sub eax, 0x18b
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x465757
imul eax, dword [ebp - 0x14], 0x335
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x9b
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x46571c
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.0045ea48
mov edx, 0x7cc009
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7e8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
push 0
mov eax, dword [ebp - 8]
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x4657c7
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
add dword [ebp - 0x10], 0x313
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x4657a3
call fcn.0041aa58
mov eax, 0x349
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465830
imul eax, dword [ebp - 0x28], 0x19c
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jle 0x465846
mov eax, dword [ebp - 0x14]
add eax, 0x326
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x46586c
mov eax, dword [ebp - 0x28]
sub eax, 0x195
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x46580b
mov edx, 0x9c88bd
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7d8], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x14]
call fcn.00404770
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
jne 0x4658ad
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, 0x383
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jne 0x46588e
imul eax, dword [ebp - 0x28], 0x1aa
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.0041d488
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x4658f1
call fcn.00430cd0
mov eax, dword [ebp - 8]
push eax
call dword [0x47a7d8]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
cmp eax, edx
jle 0x46591f
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x24]
call fcn.00433144
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x328
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x8e
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x20]
jne 0x465953
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x46592a
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x28], 0x1ba
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x10]
call fcn.0045e924
mov eax, 0x364
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x28]
sub eax, 0x18b
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x18], 0x3b1
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x28], 0x197
mov dword [ebp - 0x24], eax
cmp dword [0x47a7dc], 0
jne 0x4659c9
mov edx, 0x91c75b
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7dc], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
fild dword [ebp - 0x18]
call fcn.00404770
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x4659ed
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
add eax, 0x334
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
fild dword [ebp - 0x20]
call fcn.00404770
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x4659ce
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x465a7a
inc dword [ebp - 0x14]
mov eax, 0x30d
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x1c]
call fcn.00404770
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
cmp eax, edx
jle 0x465a5e
imul eax, dword [ebp - 0x28], 0x1bd
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x465a74
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x14], 1
jl 0x465a2b
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
cmp dword [0x47a7e0], 0
jne 0x465aa0
mov edx, 0xd57df6
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7e0], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465acb
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x10]
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0x24]
call fcn.004318cc
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jle 0x465aed
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x18]
call fcn.004293a0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x18]
jle 0x465b0b
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x10]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x1c]
call fcn.0042ad54
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x10]
call fcn.004579b8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
mov edx, 0xd75e49
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7e4], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465b5d
call fcn.00430cd0
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x465ba5
inc dword [ebp - 0x18]
imul eax, dword [ebp - 0x10], 0x321
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0xa6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jne 0x465b94
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, 0x376
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x18], 2
jl 0x465b68
imul eax, dword [ebp - 0x28], 0x1bd
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x1c]
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x10]
call fcn.00462edc
test eax, ebx
sub edx, 0x7d
xor edx, edx
test eax, ebx
call fcn.00465bcf
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x337
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x9c
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x465dac
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, 0x38c
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x465d83
imul eax, dword [ebp - 0x28], 0x1b3
mov dword [ebp - 0x24], eax
mov eax, 0x399
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, 0x381
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
cmp eax, edx
jge 0x465e0b
mov eax, dword [ebp - 0x24]
sub eax, 0x170
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x20]
jne 0x465e1f
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
add eax, 0x35f
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x465dda
imul eax, dword [ebp - 0x28], 0x1c6
mov dword [ebp - 0x24], eax
mov eax, 0x38c
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
cmp dword [0x47a7dc], 0
jne 0x465e65
mov edx, 0x91c75b
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7dc], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x14], 0x32a
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x90
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x10]
jle 0x465e9d
imul eax, dword [ebp - 0x10], 0x2fb
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x24]
add eax, 0x61
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jne 0x465e73
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x14]
call fcn.0041ab58
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x18]
jle 0x465edd
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x18]
call fcn.004292e0
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
add eax, 0x362
mov dword [ebp - 0x10], eax
fild dword [ebp - 0x18]
call fcn.00404764
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
add eax, 4
mov dword [ebp - 0x80], eax
fild dword [ebp - 0x80]
call fcn.00404770
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x1c]
jne 0x465f20
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
imul dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jne 0x465ee2
cmp dword [0x47a7e0], 0
jne 0x465f4f
mov edx, 0xd57df6
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7e0], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
fild dword [ebp - 0x14]
call fcn.00404764
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
cmp eax, edx
jle 0x465f7e
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, 0x390
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jne 0x465f5a
imul eax, dword [ebp - 0x28], 0x1b6
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x18], 0x39d
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x28]
sub eax, 0x1a3
mov dword [ebp - 0x20], eax
mov eax, 0x389
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x28]
sub eax, 0x170
mov dword [ebp - 0x20], eax
mov edx, 0xd75e49
mov eax, dword [0x47a5f0]
call fcn.0041abc0
mov dword [0x47a7e4], eax
mov eax, 0x384
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
test eax, eax
sub edx, 0x5f
xor edx, edx
test eax, ebx
call fcn.00465ffa