Function at 0x45f1c4
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x1b
push 0
push 0
dec ecx
jne 0x45f1cd
xchg dword [ebp - 4], ecx
push ebx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
lea eax, [ebp - 8]
call fcn.00406ee8
lea eax, [ebp - 0xc]
call fcn.00406ee8
xor eax, eax
push ebp
push 0x460f9a
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.0045a314
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45f21e
call fcn.00454f34
mov eax, dword [ebp - 0x3c]
add eax, 0x202
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x247
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x2ab
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x208
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x26d
mov dword [ebp - 0x3c], eax
call sub.kernel32.dll_GetCurrentProcessId
cmp dword [ebp - 4], 0x20
jne 0x45f975
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45f2f2
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jle 0x45f2b5
mov eax, dword [ebp - 0x3c]
add eax, 0x1fd
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x28]
jne 0x45f2cb
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, 0x3f0
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x24], 1
jl 0x45f29c
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x45f31e
mov eax, dword [ebp - 0x38]
add eax, 0x1da
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x2c]
jne 0x45f334
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x25
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, 0xa
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
sub dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x45f2f7
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45f369
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.00456d70
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1cd
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x212
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x216
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21a
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x23f
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x243
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x267
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x26c
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x290
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2b4
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2b9
mov dword [ebp - 0x40], eax
cmp dword [0x4b4299], 0x20
jne 0x45f53b
lea eax, [ebp - 0x18]
call fcn.00406de4
lea eax, [ebp - 0x18]
mov edx, 0x460fb4
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4300]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b430c]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4354]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4324]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b433c]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b433c]
call fcn.00407a68
lea edx, [ebp - 0x8c]
mov eax, 3
call fcn.00414e08
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0x18]
call fcn.00407a68
lea edx, [ebp - 0x90]
mov eax, 2
call fcn.00414e08
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 0x18]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, 0x460fc4
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b42fc]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4344]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b42fc]
call fcn.00407a68
lea eax, [ebp - 0x98]
call fcn.0044aae4
mov edx, dword [ebp - 0x98]
lea eax, [ebp - 0x94]
call fcn.0040794c
lea eax, [ebp - 0x94]
mov edx, dword [ebp - 0x18]
call fcn.00407a68
mov edx, dword [ebp - 0x94]
lea eax, [ebp - 0x10]
call fcn.00407960
jmp 0x45f724
lea eax, [ebp - 0x18]
call fcn.00406de4
lea eax, [ebp - 0x18]
mov edx, 0x460fb4
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4300]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b430c]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4354]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4324]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b433c]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b433c]
call fcn.00407a68
lea edx, [ebp - 0x9c]
mov eax, 3
call fcn.00414e08
mov edx, dword [ebp - 0x9c]
lea eax, [ebp - 0x18]
call fcn.00407a68
lea edx, [ebp - 0xa0]
mov eax, 2
call fcn.00414e08
mov edx, dword [ebp - 0xa0]
lea eax, [ebp - 0x18]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, 0x460fc4
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b42fc]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4344]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b42fc]
call fcn.00407a68
lea eax, [ebp - 0x1c]
call fcn.00406de4
lea edx, [ebp - 0xa4]
mov eax, dword [0x4b4320]
call fcn.0041478c
mov edx, dword [ebp - 0xa4]
lea eax, [ebp - 0x1c]
call fcn.00407a68
lea eax, [ebp - 0x1c]
mov edx, dword [0x4b4308]
call fcn.00407a68
lea eax, [ebp - 0x1c]
mov edx, dword [0x4b4320]
call fcn.00407a68
lea edx, [ebp - 0xa8]
mov eax, dword [0x4b42f8]
call fcn.0041478c
mov edx, dword [ebp - 0xa8]
lea eax, [ebp - 0x1c]
call fcn.00407a68
lea edx, [ebp - 0xac]
mov eax, dword [0x4b4314]
call fcn.0041478c
mov edx, dword [ebp - 0xac]
lea eax, [ebp - 0x1c]
call fcn.00407a68
lea edx, [ebp - 0xb0]
mov eax, dword [0x4b42f8]
call fcn.0041478c
mov edx, dword [ebp - 0xb0]
lea eax, [ebp - 0x1c]
call fcn.00407a68
lea edx, [ebp - 0xb4]
mov eax, 6
call fcn.00414e08
mov edx, dword [ebp - 0xb4]
lea eax, [ebp - 0x1c]
call fcn.00407a68
lea edx, [ebp - 0xb8]
mov eax, 4
call fcn.00414e08
mov edx, dword [ebp - 0xb8]
lea eax, [ebp - 0x1c]
call fcn.00407a68
lea eax, [ebp - 0xc0]
call fcn.00447b08
push dword [ebp - 0xc0]
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
lea eax, [ebp - 0xbc]
mov edx, 3
call fcn.00407b48
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 0x10]
call fcn.00407960
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x204
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x248
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x26d
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x291
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov ecx, 1
mov edx, 0x460fd4
mov eax, 0x460ff8
call fcn.00407d88
cmp eax, 0x60
jge 0x45f794
mov eax, dword [ebp - 0x28]
add eax, 0x24
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45f806
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x45f7c9
mov eax, dword [ebp - 0x38]
add eax, 0x1ce
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x38]
cmp eax, edx
jle 0x45f7e3
imul eax, dword [ebp - 0x30], 0xb5
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x39
mov dword [ebp - 0x28], eax
mov eax, 0x3dd
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
add eax, 0x381
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x45f79f
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45f86b
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x3c]
jle 0x45f839
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x45f854
mov eax, 0x53
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3b6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x45f811
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
cmp eax, edx
jge 0x45f88d
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x24]
call fcn.00424cf4
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45f8ee
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x30]
jne 0x45f8c0
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x45f8d7
imul eax, dword [ebp - 0x2c], 0x75
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3b8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x45f898
mov eax, 0x58
sub eax, dword [ebp - 0x24]
cmp eax, 0xf1
jge 0x45f908
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.00452ae0
imul eax, dword [ebp - 0x40], 0x288
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2ac
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x20], 0x2b1
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1be
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
jmp 0x45fddd
mov eax, dword [ebp - 0x38]
add eax, 0x1d5
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21a
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x27f
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2a3
mov dword [ebp - 0x3c], eax
mov ecx, 1
mov edx, 0x460fd4
mov eax, 0x461014
call fcn.00407d88
cmp eax, 0x5a
jge 0x45f9d0
add dword [ebp - 0x24], 0x3f1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45f9ea
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.0045a314
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45fa08
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.00457904
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45fa15
call fcn.0045515c
mov eax, dword [ebp - 0x38]
add eax, 0x1cc
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1f1
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1f5
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1f9
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x23e
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x262
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x267
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x28b
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x28f
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x293
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2b8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x18]
call fcn.00406de4
lea eax, [ebp - 0x18]
mov edx, 0x460fb4
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4300]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b430c]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4354]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4324]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b433c]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b433c]
call fcn.00407a68
lea edx, [ebp - 0xc4]
mov eax, 3
call fcn.00414e08
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 0x18]
call fcn.00407a68
lea edx, [ebp - 0xc8]
mov eax, 2
call fcn.00414e08
mov edx, dword [ebp - 0xc8]
lea eax, [ebp - 0x18]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, 0x460fc4
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b42fc]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b4344]
call fcn.00407a68
lea eax, [ebp - 0x18]
mov edx, dword [0x4b42fc]
call fcn.00407a68
lea eax, [ebp - 0xd0]
call fcn.0044aae4
mov edx, dword [ebp - 0xd0]
lea eax, [ebp - 0xcc]
call fcn.0040794c
lea eax, [ebp - 0xcc]
mov edx, dword [ebp - 0x18]
call fcn.00407a68
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0x10]
call fcn.00407960
call sub.kernel32.dll_GetCurrentProcessId
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45fc51
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
sub eax, 0x28c
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x45fc1f
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x2c]
jne 0x45fc35
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x28], eax
mov eax, 0x3e3
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x45fbec
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45fcc3
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x45fc86
mov eax, dword [ebp - 0x38]
add eax, 0x1ad
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x38]
cmp eax, edx
jle 0x45fca0
imul eax, dword [ebp - 0x30], 0xd5
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x39
mov dword [ebp - 0x28], eax
mov eax, 0x3fd
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3a0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x45fc5c
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x45fd2d
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x45fcf6
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x45fd0d
imul eax, dword [ebp - 0x2c], 0x72
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3b6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x24], 1
jl 0x45fcce
call fcn.00454f34
mov eax, dword [ebp - 0x38]
add eax, 0x1c5
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1c9
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1cd
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1f2
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1f6
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21a
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21e
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x243
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x267
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x26c
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x290
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x278
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x29d
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
imul eax, dword [ebp - 0x30], 0xb0
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x45fe30
mov eax, dword [ebp - 0x38]
add eax, 0x1da
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x45fe4b
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x28]
jle 0x45fe5e
mov eax, 0x3e8
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
add eax, 0x3ac
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x45fe09
lea eax, [ebp - 0x84]
xor ecx, ecx
mov edx, 0x44
call fcn.00404d64
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45fea4
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.0045466c
imul eax, dword [ebp - 0x30], 0xcb
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x20]
jge 0x45feda
mov eax, dword [ebp - 0x3c]
add eax, 0x1f5
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x45fef5
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x45ff08
mov eax, 0x3e4
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x45feb3
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1b0
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1d5
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1d9
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1dd
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x201
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x206
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x22a
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x84], 0x44
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1d6
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21b
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21f
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x264
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x268
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x28c
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2b1
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2b5
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x40], eax
mov ecx, 1
mov edx, 0x460fd4
mov eax, 0x461030
call fcn.00407d88
cmp eax, 0x60
jge 0x4600cb
mov eax, dword [ebp - 0x28]
add eax, 0x28
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x4600e1
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.00456d70
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x283
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x30]
jne 0x460112
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
cmp eax, edx
jge 0x460129
imul eax, dword [ebp - 0x2c], 0x32
mov dword [ebp - 0x24], eax
imul eax, dword [ebp - 0x2c], 0x3d6
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x4600f1
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x46016e
mov eax, dword [ebp - 0x38]
add eax, 0x1a4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x460189
mov eax, 0x6c
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3cf
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jne 0x460147
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x4601e3
mov eax, dword [ebp - 0x38]
add eax, 0x1cf
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x4601fe
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x3a
mov dword [ebp - 0x24], eax
mov eax, 0x3de
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x4601bc
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.00457904
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x46024f
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.00457b44
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
sub dword [ebp - 0x3c], 0x263
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x30]
jne 0x46027c
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x4d
mov dword [ebp - 0x24], eax
mov eax, 0x3f1
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, 0x395
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x46025f
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x460308
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x30]
jne 0x4602d5
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x30]
cmp eax, edx
jge 0x4602ec
imul eax, dword [ebp - 0x2c], 0x46
mov dword [ebp - 0x28], eax
mov eax, 0x3ea
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
add eax, 0x38e
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x4602ad
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x46031e
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.00456d70
xor eax, eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x259
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x40], 0x293
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x30]
jne 0x460373
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x46038e
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x26
mov dword [ebp - 0x24], eax
mov eax, 0xa
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x460344
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x4603d5
mov eax, dword [ebp - 0x38]
add eax, 0x1b4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x38]
cmp eax, edx
jle 0x4603ef
imul eax, dword [ebp - 0x2c], 0xbb
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x2c]
mov edx, eax
shl eax, 5
sub eax, edx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jne 0x4603ae
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x46044b
mov eax, dword [ebp - 0x38]
add eax, 0x1be
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x460466
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x29
mov dword [ebp - 0x24], eax
mov eax, 0x3cd
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x460424
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x28]
jle 0x4604a5
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x20]
call fcn.0045a314
mov dword [ebp - 0x58], 1
mov ecx, 1
mov edx, 0x460fd4
mov eax, 0x46104c
call fcn.00407d88
cmp eax, 0x19
je 0x4604e1
mov eax, dword [ebp - 0x38]
add eax, 0x1ed
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x232
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x276
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x27b
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x29f
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x20], 0x2a3
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
imul eax, dword [ebp - 0x30], 0xb6
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x460553
mov eax, dword [ebp - 0x38]
add eax, 0x1c0
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x46056e
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, 0xb
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
add eax, 0x3af
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
sub dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x46052c
mov word [ebp - 0x54], 0
call sub.kernel32.dll_GetCurrentProcessId
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x4605ab
call fcn.00454f34
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1c6
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x20b
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x22f
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x233
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x258
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x25c
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x280
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2a5
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2a9
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x20], 0x2cd
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0xd8]
mov edx, dword [ebp - 8]
call fcn.0040794c
mov eax, dword [ebp - 0xd8]
lea edx, [ebp - 0xd4]
call fcn.00446f28
mov edx, dword [ebp - 0xd4]
lea eax, [ebp - 0x14]
call fcn.00407960
mov eax, dword [ebp - 0x38]
add eax, 0x1bd
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x242
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x286
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2aa
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov ecx, 1
mov edx, 0x460fd4
mov eax, 0x46106c
call fcn.00407d88
cmp eax, 0x5b
jge 0x4606f1
mov eax, dword [ebp - 0x28]
add eax, 0x3fd
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x46075b
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x3c]
jle 0x460724
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x46073f
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, 0x52
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3b6
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x24], 1
jl 0x4606fc
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x2c]
cmp eax, edx
jge 0x460781
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x20]
call fcn.0045f06c
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x20]
jle 0x46079c
mov eax, dword [ebp - 0x3c]
sub eax, 0x22a
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x2c]
jne 0x4607b2
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 0x34
mov dword [ebp - 0x24], eax
mov eax, 0x3d8
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x460786
mov eax, 0x54
sub eax, dword [ebp - 0x24]
cmp eax, 0xf1
jge 0x4607f1
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x40]
call fcn.00452ae0
mov eax, dword [ebp - 0x40]
sub eax, 0x267
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x28c
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x20], 0x2b0
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x20]
jle 0x460859
mov eax, dword [ebp - 0x38]
add eax, 0x1d1
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x460874
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
fild dword [ebp - 0x2c]
call fcn.00404c64
mov dword [ebp - 0x24], eax
mov eax, 0x3e0
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x460832
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jle 0x4608b7
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x20]
call fcn.00453908
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x40]
call fcn.00453908
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x200
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x264
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x20], 0x2a9
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1e6
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x20a
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x22f
mov dword [ebp - 0x38], eax
sub dword [ebp - 0x3c], 0x253
imul eax, dword [ebp - 0x40], 0x277
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x27c
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x2a0
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x20], 0x2c4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x40], 0x279
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x30]
jne 0x4609b8
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
cmp eax, edx
jge 0x4609d3
mov eax, 8
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov eax, 0x3ec
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
imul dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x460998
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x460a03
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.00453b38
mov eax, dword [ebp - 0x20]
add dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov ecx, 1
mov edx, 0x460fd4
mov eax, 0x461088
call fcn.00407d88
cmp eax, 0x1d
je 0x460a32
add dword [ebp - 0x38], 0x1f0
mov eax, dword [ebp - 0x3c]
sub eax, 0x254
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x259
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x25d
mov dword [ebp - 0x3c], eax
cmp dword [0x4ad76c], 0
jne 0x460a70
mov edx, 0xcf82f1
mov eax, dword [0x4ad6a8]
call fcn.004225e0
mov dword [0x4ad76c], eax
imul eax, dword [ebp - 0x40], 0x2a6
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1a2
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x30], eax
call sub.kernel32.dll_GetCurrentProcessId
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x84]
push eax
push 0
push 0
push 0x20
push 0
push 0
push 0
push dword [ebp - 0x10]
push 0x4610a0
push dword [ebp - 0x14]
push 0x4610a8
push dword [ebp - 0xc]
lea eax, [ebp - 0xdc]
mov edx, 5
call fcn.004076a8
mov eax, dword [ebp - 0xdc]
call fcn.00407620
push eax
push 0
call sub.kernel32.dll_CreateProcessW
test eax, eax
je 0x460dbd
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1f5
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x27a
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 0x192
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1d7
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21c
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x240
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x284
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x460bf7
mov eax, dword [ebp - 0x38]
add eax, 0x1c6
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x460c12
fild dword [ebp - 0x30]
call fcn.00404c64
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x2c], 0x31
mov dword [ebp - 0x28], eax
mov eax, 0x3d4
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jne 0x460bd0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x460c59
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x20]
call fcn.0045b774
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x288
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x30]
jne 0x460c8e
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
cmp eax, edx
jge 0x460ca9
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
cmp eax, edx
jge 0x460cc6
mov eax, dword [ebp - 0x2c]
mov edx, eax
shl eax, 5
sub eax, edx
mov dword [ebp - 0x24], eax
mov eax, 3
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jne 0x460c5e
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x460d06
mov eax, dword [ebp - 0x38]
add eax, 0x1ae
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x34]
cmp eax, edx
jle 0x460d20
imul eax, dword [ebp - 0x2c], 0xb5
mov dword [ebp - 0x28], eax
imul eax, dword [ebp - 0x2c], 0x3f8
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x3bc
mov dword [ebp - 0x20], eax
add dword [ebp - 0x20], 0x360
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jne 0x460cdf
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40]
jle 0x460d71
mov eax, dword [ebp - 0x38]
add eax, 0x1cb
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x38]
cmp eax, edx
jle 0x460d8b
imul eax, dword [ebp - 0x30], 0xd3
mov dword [ebp - 0x28], eax
mov eax, 0x3f6
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
add eax, 0x39a
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jne 0x460d4a
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x24]
jle 0x460dbd
call fcn.0045515c
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1b6
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1da
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21f
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x243
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x267
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x40], 0x28c
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x34]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x38]
add eax, 4
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c70
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x1d5
mov dword [ebp - 0x88], eax
fild dword [ebp - 0x88]
call fcn.00404c64
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x1fa
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, 0x21e
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x40]
sub eax, 0x243
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x40], 0x267
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x28]
jle 0x460f21
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
lea eax, [ebp - 0x20]
call fcn.0045b774
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x460fa1
lea eax, [ebp - 0xdc]
call fcn.00406e2c
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00406e44
lea eax, [ebp - 0xd0]
call fcn.00406e2c
lea eax, [ebp - 0xcc]
mov edx, 0xd
call fcn.00406e44
lea eax, [ebp - 0x98]
call fcn.00406e2c
lea eax, [ebp - 0x94]
mov edx, 3
call fcn.00406e44
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00406e44
lea eax, [ebp - 0x14]
mov edx, 4
call fcn.00406ea4
ret