Function at 0x447860
Capabilities:
Get common file path
Initialize winsock library

Disassembly:
sub esp, 0xc10
mov eax, dword [0x52e144]
xor eax, esp
mov dword [esp + 0xc0c], eax
mov eax, dword [esp + 0xc18]
push ebx
xor ebx, ebx
push 0xb
mov dword [esp + 0x44], eax
mov dword [esp + 0x3c], ebx
mov byte [eax], bl
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x4478eb
push 8
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x4478eb
push 7
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x4478eb
push 0x43
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x4478eb
push 0xe
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x4478eb
mov eax, dword [esp + 0xc18]
imul eax, eax, 0x6c
mov ecx, dword [eax + 0x53970c]
call fcn.004052f0
cmp byte [eax], bl
je 0x44b3ba
push ebp
push esi
push edi
cmp dword [0x53c9f0], ebx
jne 0x447d7c
mov ebp, dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
push 0x104
lea ecx, [esp + 0x71c]
push ecx
call ebp
push 0x51ce94
call fcn.00404690
add esp, 4
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x447920
lea edi, [esp + 0x718]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x447933
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea edx, [esp + 0x718]
and ecx, 3
push edx
rep movsb byte es:[edi], byte [esi]
call ebx
mov esi, eax
test esi, esi
je 0x4479e0
push 0x51ce88
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0x51ce78
mov dword [0x53c9ec], eax
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0x51ce68
mov dword [0x53c9e8], eax
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0x51ce58
mov dword [0x53c9e4], eax
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0x51ce48
mov dword [0x53c9e0], eax
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
mov dword [0x53c9dc], eax
push 0x104
lea eax, [esp + 0x71c]
push eax
call ebp
push 0x51ce34
call fcn.00404690
add esp, 4
mov ecx, eax
mov edi, edi
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x447a00
lea edi, [esp + 0x718]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x447a13
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x718]
push ecx
call ebx
mov esi, eax
test esi, esi
je 0x447d59
push 0x51ce1c
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0x51ce0c
mov dword [0x53c9d8], eax
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0x51cde4
mov dword [0x53c9d4], eax
call fcn.00404690
add esp, 4
push eax
push esi
call fcn.0040fed0
push 0xb
mov dword [0x53c9d0], eax
call fcn.0040a8e0
add esp, 4
test eax, eax
je 0x447d59
push 0xff
lea edx, [esp + 0x61d]
push 0
push edx
mov dword [esp + 0x40], 0x31c
mov byte [esp + 0x624], 0
call fcn.004b6dc0
push 0xff
lea eax, [esp + 0x529]
push 0
push eax
mov byte [esp + 0x530], 0
call fcn.004b6dc0
add esp, 0x18
push str.GetIpAddrTable
push esi
call fcn.0040fed0
push str.GetAdaptersInfo
push esi
mov edi, eax
call fcn.0040fed0
mov dword [esp + 0x28], eax
test edi, edi
je 0x447d16
push 1
lea ecx, [esp + 0x38]
push ecx
lea edx, [esp + 0x824]
push edx
call edi
test eax, eax
jne 0x447d16
xor ebp, ebp
cmp dword [esp + 0x81c], ebp
jle 0x447c9a
lea ebx, [esp + 0x828]
cmp dword [ebx - 8], 0
lea eax, [ebx - 8]
je 0x447c89
push 4
push eax
lea eax, [esp + 0x1c]
push eax
call fcn.004bb010
movzx ecx, byte [esp + 0x23]
movzx edx, byte [esp + 0x22]
mov eax, dword [esp + 0x20]
push ecx
push edx
movzx ecx, ah
movzx edx, al
push ecx
push edx
lea eax, [esp + 0x4d4]
push str._d._d._d._d
push eax
call fcn.004b79a8
lea ecx, [esp + 0x4dc]
push str.127.0.0.1
push ecx
call fcn.004b9a67
add esp, 0x2c
test eax, eax
je 0x447c89
cmp byte [esp + 0x618], 0
je 0x447bb5
lea edi, [esp + 0x618]
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x447ba3
mov dx, word [0x518f64]
mov word [edi], dx
lea eax, [esp + 0x4b8]
mov edx, eax
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x447bc0
lea edi, [esp + 0x618]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x447bd1
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp dword [ebx], 0
rep movsb byte es:[edi], byte [esi]
je 0x447c89
push 4
lea eax, [esp + 0x18]
push ebx
push eax
call fcn.004bb010
movzx ecx, byte [esp + 0x23]
movzx edx, byte [esp + 0x22]
mov eax, dword [esp + 0x20]
push ecx
push edx
movzx ecx, ah
movzx edx, al
push ecx
push edx
lea eax, [esp + 0x4d4]
push str._d._d._d._d
push eax
call fcn.004b79a8
add esp, 0x24
cmp byte [esp + 0x518], 0
je 0x447c52
lea edi, [esp + 0x518]
dec edi
mov edi, edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x447c40
mov cx, word [0x518f64]
mov word [edi], cx
lea eax, [esp + 0x4b8]
mov edx, eax
jmp 0x447c60
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x447c60
lea edi, [esp + 0x518]
sub eax, edx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x447c71
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
inc ebp
add ebx, 0x18
cmp ebp, dword [esp + 0x81c]
jl 0x447b30
lea edx, [esp + 0x618]
push edx
push 0x51cd98
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
lea eax, [esp + 0x518]
push eax
push 0x51cd84
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
push 0x51cd7c
call fcn.00404690
push 3
push eax
lea ecx, [esp + 0x538]
push ecx
call fcn.004b9e25
add esp, 0x1c
test eax, eax
je 0x447d16
push 0x51cd64
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov eax, dword [esp + 0x28]
test eax, eax
je 0x447d59
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x64]
push ecx
mov dword [esp + 0x30], 0x288
call eax
test eax, eax
jne 0x447d59
lea edx, [esp + 0x238]
push edx
push 0x51cd50
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
cmp byte [0x54a134], 0
jne 0x447d67
call fcn.00439260
lea eax, [esp + 0x2e8]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
xor ebx, ebx
inc dword [0x53c9f0]
mov eax, dword [0x53c9d4]
mov ecx, dword [0x53c9ec]
mov edx, dword [0x53c9e8]
cmp dword [0x53c9d0], ebx
jne 0x447da4
cmp eax, ebx
jne 0x447db4
jmp 0x44b3b7
cmp ecx, ebx
je 0x44b3b7
cmp edx, ebx
je 0x44b3b7
cmp byte [0x54a134], 0
jne 0x447e05
cmp eax, ebx
je 0x44b3b7
cmp dword [0x53c670], ebx
je 0x44b3b7
cmp ecx, ebx
je 0x44b3b7
cmp edx, ebx
je 0x44b3b7
cmp dword [0x53c9e4], ebx
je 0x44b3b7
cmp dword [0x53c9e0], ebx
je 0x44b3b7
cmp dword [0x53c9dc], ebx
je 0x44b3b7
mov ecx, 0x53c8f0
mov dword [esp + 0x20], ebx
call fcn.00446b80
mov ebp, dword [sym.imp.KERNEL32.dll_HeapFree]
cmp dword [0x53c9d0], ebx
jne 0x4497b0
cmp dword [0x53c9d8], ebx
jne 0x4498fe
cmp byte [0x54a134], 0
jne 0x449770
mov edi, dword [esp + 0xc24]
imul edi, edi, 0x6c
mov eax, dword [edi + 0x539714]
push eax
mov dword [esp + 0x1c], edi
mov dword [esp + 0x38], eax
call fcn.00439250
mov ebp, dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
add esp, 4
mov esi, eax
push 4
push esi
call ebp
test eax, eax
jne 0x44b3b7
mov esi, dword [esi + 0x44]
push 4
push esi
mov dword [0x53c674], esi
call ebp
test eax, eax
jne 0x44b3b7
mov byte [esp + 0x12], al
mov byte [esp + 0x13], al
mov eax, dword [0x53c674]
mov ebp, 1
mov dword [esp + 0x28], ebx
mov dword [esp + 0x24], ebp
cmp dword [eax], ebp
jbe 0x44b3b7
jmp 0x447eb4
mov edi, dword [esp + 0x18]
mov ecx, dword [eax + ebp*8 + 8]
push 4
push ecx
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x44958c
mov edx, dword [0x53c674]
mov eax, dword [edx + ebp*8 + 8]
movzx ecx, word [eax]
xor bl, bl
mov byte [esp + 0x11], bl
cmp ecx, 0x13
jne 0x449590
push 2
push 0
push 0
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ecx, dword [edi + 0x539720]
push eax
lea eax, [ebp*4]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_DuplicateHandle]
test eax, eax
je 0x44958c
mov esi, dword [esp + 0x30]
xor eax, eax
lea edx, [esp + 0x3c]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
push edx
lea eax, [esp + 0x54]
push eax
push esi
mov dword [esp + 0x48], 0x10
call dword [0x53c9e4]
test eax, eax
je 0x447f5f
mov ecx, dword [esp + 0x30]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x449590
xor eax, eax
lea edx, [esp + 0x3c]
mov dword [esp + 0x4b8], eax
mov dword [esp + 0x4bc], eax
mov dword [esp + 0x4c0], eax
mov dword [esp + 0x4c4], eax
push edx
lea eax, [esp + 0x4bc]
push eax
push esi
mov dword [esp + 0x48], 0x10
call dword [0x53c9e0]
push esi
call dword [0x53c9dc]
mov ecx, dword [esp + 0x52]
mov ebp, dword [esp + 0x54]
push ecx
call dword [0x53c9ec]
mov edi, dword [esp + 0x4bc]
movzx edx, ax
mov eax, dword [esp + 0x4ba]
push eax
mov dword [esp + 0x4c], edx
mov dword [esp + 0x18], edi
call dword [0x53c9ec]
push ebp
movzx esi, ax
call dword [0x53c9e8]
lea edx, [esp + 0x4d8]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x447fe0
push edi
call dword [0x53c9e8]
lea edx, [esp + 0x478]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x447ff8
push 0x51cd44
call fcn.00404690
push eax
lea ecx, [esp + 0x480]
push ecx
call fcn.004b9a67
add esp, 0xc
test eax, eax
je 0x44958c
mov ecx, dword [esp + 0x18]
inc dword [esp + 0x28]
cmp dword [ecx + 0x539710], 0x31
jne 0x448086
mov edx, 0x1e61
cmp si, dx
je 0x448061
cmp si, 0x50
je 0x448086
lea eax, [esp + 0x478]
push eax
call fcn.00439800
add esp, 4
test al, al
je 0x448086
mov byte [esp + 0x12], 1
jmp 0x448086
lea edx, [esp + 0x478]
push edx
call fcn.00439800
add esp, 4
test al, al
je 0x448079
mov bl, 1
jmp 0x448086
cmp ebp, edi
jne 0x448081
mov bl, 1
jmp 0x448086
mov byte [esp + 0x11], 1
cmp dword [ecx + 0x539710], 0x33
jne 0x4480b7
lea eax, [esp + 0x478]
push eax
call fcn.0043b480
add esp, 4
test al, al
jne 0x4480aa
mov byte [esp + 0x11], 1
jmp 0x4480b7
cmp ebp, edi
jne 0x4480b2
mov bl, 1
jmp 0x4480b7
mov byte [esp + 0x12], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x16
jne 0x448145
push 0x51cd34
call fcn.00404690
push eax
lea edx, [esp + 0x480]
push edx
call fcn.004b9a67
add esp, 0xc
test eax, eax
jne 0x4481a3
push 0x51cd34
call fcn.00404690
push eax
lea eax, [esp + 0x4e0]
push eax
call fcn.004b9a67
add esp, 0xc
test eax, eax
jne 0x4481a3
cmp word [esp + 0x48], si
jne 0x4481a3
movzx ecx, si
push ecx
lea edx, [esp + 0x47c]
push edx
push 0x51cd08
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x10
mov byte [esp + 0x11], 1
push 0x51ccf8
call fcn.00404690
mov edi, dword [esp + 0x1c]
push eax
lea edi, [edi + 0x53972c]
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x4482f9
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b340
add esp, 4
test al, al
je 0x448184
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043b340
add esp, 4
test al, al
je 0x4482ea
mov bl, 1
jmp 0x4482f9
cmp byte [esp + 0x11], 0
jne 0x448145
mov eax, 0x1490
cmp si, ax
je 0x4482cb
mov ecx, 0x2096
cmp si, cx
je 0x4482cb
mov edx, 0x20a0
cmp si, dx
je 0x44825d
mov eax, 0x20fc
cmp si, ax
je 0x44825d
mov ecx, 0x2134
cmp si, cx
je 0x44825d
mov edx, 0x2198
cmp si, dx
je 0x44825d
mov eax, 0x2669
cmp si, ax
je 0x44825d
mov ecx, 0x9f00
cmp si, cx
jb 0x44821c
mov edx, 0x9f21
cmp si, dx
jbe 0x44825d
mov eax, 0xc678
cmp si, ax
jb 0x448230
mov ecx, 0xc684
cmp si, cx
jbe 0x44825d
mov edx, 0x9c40
cmp si, dx
jb 0x448244
mov eax, 0x9c5f
cmp si, ax
jbe 0x44825d
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b3a0
add esp, 4
test al, al
je 0x44825d
mov byte [esp + 0x12], 1
mov edx, 0x20a0
cmp si, dx
je 0x4482cb
mov eax, 0x20fc
cmp si, ax
je 0x4482cb
mov ecx, 0x2134
cmp si, cx
je 0x4482cb
mov edx, 0x2198
cmp si, dx
je 0x4482cb
mov eax, 0x2669
cmp si, ax
je 0x4482cb
mov ecx, 0x9f00
cmp si, cx
jb 0x4482a7
mov edx, 0x9f21
cmp si, dx
jbe 0x4482cb
mov eax, 0xc678
cmp si, ax
jb 0x4482bb
mov ecx, 0xc684
cmp si, cx
jbe 0x4482cb
lea edx, [esi + 0x63c0]
cmp dx, 0x1f
ja 0x448145
lea eax, [esp + 0x478]
push eax
call fcn.0043b3a0
add esp, 4
test al, al
je 0x448140
mov bl, 1
jmp 0x448145
cmp ebp, dword [esp + 0x14]
jne 0x4482f4
mov bl, 1
jmp 0x4482f9
mov byte [esp + 0x11], 1
push 0x51cce4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44835d
mov eax, 0x1ec9
cmp si, ax
je 0x448336
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b380
add esp, 4
test al, al
je 0x44835d
mov byte [esp + 0x12], 1
jmp 0x44835d
lea edx, [esp + 0x478]
push edx
call fcn.0043b380
add esp, 4
test al, al
je 0x44834e
mov bl, 1
jmp 0x44835d
cmp ebp, dword [esp + 0x14]
jne 0x448358
mov bl, 1
jmp 0x44835d
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], 0x2f
jne 0x448414
mov ecx, 0x752e
cmp si, cx
jb 0x448382
mov edx, 0x753a
cmp si, dx
jbe 0x4483c3
mov eax, 0x7530
cmp si, ax
jb 0x448396
mov ecx, 0x753a
cmp si, cx
jbe 0x4483c3
mov edx, 0x7594
cmp si, dx
jb 0x4483aa
mov eax, 0x759e
cmp si, ax
jbe 0x4483c3
lea ecx, [esp + 0x478]
push ecx
call fcn.0043afa0
add esp, 4
test al, al
je 0x4483c3
mov byte [esp + 0x12], 1
mov edx, 0x752e
cmp si, dx
jb 0x4483d7
mov eax, 0x753a
cmp si, ax
jbe 0x4483f7
mov ecx, 0x7530
cmp si, cx
jb 0x4483eb
mov edx, 0x753a
cmp si, dx
jbe 0x4483f7
lea eax, [esi - 0x7594]
cmp ax, 0xa
ja 0x448414
lea ecx, [esp + 0x478]
push ecx
call fcn.0043afa0
add esp, 4
test al, al
je 0x44840f
mov bl, 1
jmp 0x448414
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
cmp dword [edx + 0x539710], 0x11
jne 0x44844b
lea eax, [esp + 0x478]
push eax
call fcn.0043afc0
add esp, 4
test al, al
jne 0x44843c
mov byte [esp + 0x11], 1
jmp 0x44844b
cmp ebp, dword [esp + 0x14]
jne 0x448446
mov bl, 1
jmp 0x44844b
mov byte [esp + 0x12], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x2d
jne 0x448498
lea edx, [esp + 0x478]
push edx
call fcn.0043af80
add esp, 4
test al, al
je 0x448471
mov byte [esp + 0x12], 1
lea eax, [esp + 0x478]
push eax
call fcn.0043af80
add esp, 4
test al, al
je 0x448489
mov bl, 1
jmp 0x448498
cmp ebp, dword [esp + 0x14]
jne 0x448493
mov bl, 1
jmp 0x448498
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x27
jne 0x4484e5
lea edx, [esp + 0x478]
push edx
call fcn.0043a200
add esp, 4
test al, al
je 0x4484be
mov byte [esp + 0x12], 1
lea eax, [esp + 0x478]
push eax
call fcn.0043a200
add esp, 4
test al, al
je 0x4484d6
mov bl, 1
jmp 0x4484e5
cmp ebp, dword [esp + 0x14]
jne 0x4484e0
mov bl, 1
jmp 0x4484e5
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x10
jne 0x448532
lea edx, [esp + 0x478]
push edx
call fcn.0043af40
add esp, 4
test al, al
je 0x44850b
mov byte [esp + 0x12], 1
lea eax, [esp + 0x478]
push eax
call fcn.0043af40
add esp, 4
test al, al
je 0x448523
mov bl, 1
jmp 0x448532
cmp ebp, dword [esp + 0x14]
jne 0x44852d
mov bl, 1
jmp 0x448532
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x18
jne 0x4485c0
push 0x51cd34
call fcn.00404690
push eax
lea edx, [esp + 0x480]
push edx
call fcn.004b9a67
add esp, 0xc
test eax, eax
jne 0x44861a
push 0x51cd34
call fcn.00404690
push eax
lea eax, [esp + 0x4e0]
push eax
call fcn.004b9a67
add esp, 0xc
test eax, eax
jne 0x44861a
cmp word [esp + 0x48], si
jne 0x44861a
movzx ecx, si
push ecx
lea edx, [esp + 0x47c]
push edx
push 0x51ccb4
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x10
mov byte [esp + 0x11], 1
push 0x51cca8
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44868d
mov edx, 0x3cbe
cmp si, dx
je 0x448666
mov eax, 0x3cc8
cmp si, ax
je 0x448666
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ad60
add esp, 4
test al, al
je 0x44868d
mov byte [esp + 0x12], 1
jmp 0x44868d
cmp byte [esp + 0x11], 0
jne 0x4485c0
lea eax, [esp + 0x478]
push eax
call fcn.0043adc0
add esp, 4
test al, al
je 0x44863a
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x478]
push ecx
call fcn.0043adc0
add esp, 4
test al, al
je 0x448655
mov bl, 1
jmp 0x4485c0
cmp ebp, dword [esp + 0x14]
jne 0x4485bb
mov bl, 1
jmp 0x4485c0
lea edx, [esp + 0x478]
push edx
call fcn.0043ad60
add esp, 4
test al, al
je 0x44867e
mov bl, 1
jmp 0x44868d
cmp ebp, dword [esp + 0x14]
jne 0x448688
mov bl, 1
jmp 0x44868d
mov byte [esp + 0x11], 1
push 0x51cc98
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x4486bd
push 0x51cc88
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x4486fd
lea eax, [esp + 0x478]
push eax
call fcn.0043ad40
add esp, 4
test al, al
je 0x4486d6
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ad40
add esp, 4
test al, al
je 0x4486ee
mov bl, 1
jmp 0x4486fd
cmp ebp, dword [esp + 0x14]
jne 0x4486f8
mov bl, 1
jmp 0x4486fd
mov byte [esp + 0x11], 1
push 0x51cc7c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44872d
push 0x51cc6c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44876d
lea edx, [esp + 0x478]
push edx
call fcn.0043ac60
add esp, 4
test al, al
je 0x448746
mov byte [esp + 0x12], 1
lea eax, [esp + 0x478]
push eax
call fcn.0043ac60
add esp, 4
test al, al
je 0x44875e
mov bl, 1
jmp 0x44876d
cmp ebp, dword [esp + 0x14]
jne 0x448768
mov bl, 1
jmp 0x44876d
mov byte [esp + 0x11], 1
push 0x51cc5c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x4487c5
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ac40
add esp, 4
test al, al
je 0x44879e
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043ac40
add esp, 4
test al, al
je 0x4487b6
mov bl, 1
jmp 0x4487c5
cmp ebp, dword [esp + 0x14]
jne 0x4487c0
mov bl, 1
jmp 0x4487c5
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], 0x25
jne 0x448874
mov ecx, 0x9c40
cmp si, cx
je 0x44884d
mov edx, 0x9c4b
cmp si, dx
je 0x44884d
mov eax, 0x9c55
cmp si, ax
je 0x44884d
mov ecx, 0x9c5f
cmp si, cx
je 0x44884d
mov edx, 0x9c69
cmp si, dx
je 0x44884d
cmp si, 0x50
je 0x44884d
mov eax, 0xb9fb
cmp si, ax
je 0x44884d
mov ecx, 0xb9fc
cmp si, cx
je 0x44884d
mov edx, 0xb9fd
cmp si, dx
je 0x44884d
lea eax, [esp + 0x478]
push eax
call fcn.0043aaf0
add esp, 4
test al, al
je 0x44884d
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x478]
push ecx
call fcn.0043aaf0
add esp, 4
test al, al
je 0x448865
mov bl, 1
jmp 0x448874
cmp ebp, dword [esp + 0x14]
jne 0x44886f
mov bl, 1
jmp 0x448874
mov byte [esp + 0x11], 1
push 0x51cc4c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x4488a8
push 0x51cc3c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x448910
mov edx, 0x2af8
cmp si, dx
je 0x4488e9
mov eax, 0x2b0c
cmp si, ax
je 0x4488e9
mov ecx, 0x1f42
cmp si, cx
je 0x4488df
lea edx, [esp + 0x478]
push edx
call fcn.0043aab0
add esp, 4
test al, al
je 0x4488df
mov byte [esp + 0x12], 1
mov eax, 0x1f42
cmp si, ax
jne 0x448910
lea ecx, [esp + 0x478]
push ecx
call fcn.0043aab0
add esp, 4
test al, al
je 0x448901
mov bl, 1
jmp 0x448910
cmp ebp, dword [esp + 0x14]
jne 0x44890b
mov bl, 1
jmp 0x448910
mov byte [esp + 0x11], 1
push 0x51cc2c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x448968
lea edx, [esp + 0x478]
push edx
call fcn.0043a950
add esp, 4
test al, al
je 0x448941
mov byte [esp + 0x12], 1
lea eax, [esp + 0x478]
push eax
call fcn.0043a950
add esp, 4
test al, al
je 0x448959
mov bl, 1
jmp 0x448968
cmp ebp, dword [esp + 0x14]
jne 0x448963
mov bl, 1
jmp 0x448968
mov byte [esp + 0x11], 1
push 0x51cc4c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44b3b7
push 0x51cc3c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44b3b7
push 0x51cc1c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44b3b7
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0xa
jne 0x448a85
mov edx, 0x6d60
cmp si, dx
je 0x448a5e
mov eax, 0x59d8
cmp si, ax
je 0x448a5e
mov ecx, 0x3c28
cmp si, cx
je 0x448a30
mov edx, 0x1518
cmp si, dx
je 0x448a30
cmp si, 0x50
je 0x448a30
mov eax, 0x5e25
cmp si, ax
je 0x448a30
mov ecx, 0x44f
cmp si, cx
je 0x448a30
lea edx, [esp + 0x478]
push edx
call fcn.0043a510
add esp, 4
test al, al
je 0x448a30
mov byte [esp + 0x12], 1
mov eax, 0x3c28
cmp si, ax
je 0x448a5e
mov ecx, 0x1518
cmp si, cx
je 0x448a5e
cmp si, 0x50
je 0x448a5e
mov edx, 0x5e25
cmp si, dx
je 0x448a5e
mov eax, 0x44f
cmp si, ax
jne 0x448a85
lea ecx, [esp + 0x478]
push ecx
call fcn.0043a510
add esp, 4
test al, al
je 0x448a76
mov bl, 1
jmp 0x448a85
cmp ebp, dword [esp + 0x14]
jne 0x448a80
mov bl, 1
jmp 0x448a85
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
cmp dword [edx + 0x539710], 0x21
jne 0x448ae8
mov eax, 0x998f
cmp si, ax
je 0x448ac1
mov ecx, 0x9991
cmp si, cx
je 0x448ac1
lea edx, [esp + 0x478]
push edx
call fcn.0043a450
add esp, 4
test al, al
je 0x448ae8
mov byte [esp + 0x12], 1
jmp 0x448ae8
lea eax, [esp + 0x478]
push eax
call fcn.0043a450
add esp, 4
test al, al
je 0x448ad9
mov bl, 1
jmp 0x448ae8
cmp ebp, dword [esp + 0x14]
jne 0x448ae3
mov bl, 1
jmp 0x448ae8
mov byte [esp + 0x11], 1
push 0x51cc10
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x448b30
push 0x51cc04
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x448b30
push 0x51cbf4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x448b5c
lea ecx, [esp + 0x478]
push ecx
call fcn.0043a270
add esp, 4
test al, al
je 0x448b4d
test si, si
je 0x448b4d
mov bl, 1
jmp 0x448b5c
cmp ebp, dword [esp + 0x14]
jne 0x448b57
mov bl, 1
jmp 0x448b5c
mov byte [esp + 0x11], 1
push 0x51cbe4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x448bf9
mov edx, 0x1388
cmp si, dx
je 0x448ba2
mov eax, 0x1770
cmp si, ax
je 0x448ba2
mov ecx, 0x1af4
cmp si, cx
je 0x448b9b
mov byte [esp + 0x12], 1
mov edx, ecx
cmp si, dx
jne 0x448bf9
lea eax, [esp + 0x478]
push eax
call fcn.0043a140
add esp, 4
test al, al
je 0x448bba
mov bl, 1
jmp 0x448bf9
cmp ebp, dword [esp + 0x14]
jne 0x448bc4
mov bl, 1
jmp 0x448bf9
lea ecx, [esp + 0x4d8]
push ecx
call fcn.0043a140
add esp, 4
test al, al
jne 0x448bf4
push 0x51cbd0
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
jmp 0x448bf9
mov byte [esp + 0x11], 1
push 0x51cbc0
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x448c45
push 0x51cba8
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x448c45
push 0x51cb94
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x448dff
push 0x51cb84
call fcn.00404690
push eax
lea edx, [esp + 0x4e0]
push edx
call fcn.004b9a67
add esp, 0xc
test eax, eax
jne 0x448c7e
push 0x51cb6c
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov eax, 0x1401
cmp si, ax
je 0x448da8
mov ecx, 0x17e9
cmp si, cx
je 0x448da8
mov edx, 0x1af4
cmp si, dx
je 0x448d32
mov eax, 0xfa0
cmp si, ax
je 0x448d32
mov ecx, 0x1a90
cmp si, cx
je 0x448d32
mov edx, 0x1402
cmp si, dx
je 0x448d32
mov eax, 0x1403
cmp si, ax
je 0x448d32
mov ecx, 0x1404
cmp si, cx
je 0x448d32
mov edx, 0x1405
cmp si, dx
je 0x448d32
mov eax, 0x1406
cmp si, ax
je 0x448d32
mov ecx, 0x1407
cmp si, cx
je 0x448d32
mov edx, 0x1408
cmp si, dx
je 0x448d32
mov eax, 0x1409
cmp si, ax
je 0x448d32
push 0x51cb58
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov ecx, 0x1af4
cmp si, cx
je 0x448da8
mov edx, 0xfa0
cmp si, dx
je 0x448da8
mov eax, 0x1a90
cmp si, ax
je 0x448da8
mov ecx, 0x1402
cmp si, cx
je 0x448da8
mov edx, 0x1403
cmp si, dx
je 0x448da8
mov eax, 0x1404
cmp si, ax
je 0x448da8
mov ecx, 0x1405
cmp si, cx
je 0x448da8
mov edx, 0x1406
cmp si, dx
je 0x448da8
mov eax, 0x1407
cmp si, ax
je 0x448da8
mov ecx, 0x1408
cmp si, cx
je 0x448da8
mov edx, 0x1409
cmp si, dx
jne 0x448dff
lea eax, [esp + 0x478]
push eax
call fcn.0043a060
add esp, 4
test al, al
je 0x448dc0
mov bl, 1
jmp 0x448dff
cmp ebp, dword [esp + 0x14]
jne 0x448dca
mov bl, 1
jmp 0x448dff
lea ecx, [esp + 0x4d8]
push ecx
call fcn.0043a060
add esp, 4
test al, al
jne 0x448dfa
push 0x51cbd0
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
jmp 0x448dff
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
mov edi, 2
cmp dword [edx + 0x539710], edi
jne 0x448ed3
mov eax, 0xda5d
cmp si, ax
je 0x448ed3
mov ecx, 0xda5f
cmp si, cx
je 0x448ed3
mov edx, 0xda61
cmp si, dx
je 0x448ed3
mov eax, 0xda63
cmp si, ax
je 0x448ed3
mov ecx, 0xda67
cmp si, cx
je 0x448ed3
mov edx, 0xad75
cmp si, dx
je 0x448ed3
mov eax, 0xaddd
cmp si, ax
je 0x448ed3
mov ecx, 0xdaac
cmp si, cx
je 0x448ed3
cmp si, 0x15
je 0x448ed3
cmp si, 0x50
je 0x448ed3
mov edx, 0x170d
cmp si, dx
je 0x448ed3
mov eax, 0x170f
cmp si, ax
je 0x448ed3
cmp si, 0x1c
je 0x448ed3
lea ecx, [esp + 0x478]
push ecx
call fcn.00439380
add esp, 4
test al, al
je 0x448ed3
lea edx, [esp + 0x478]
push edx
call fcn.00439800
add esp, 4
test al, al
jne 0x448ed3
mov byte [esp + 0x12], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], edi
jne 0x448f88
mov ecx, 0xda5d
cmp si, cx
je 0x448f61
mov edx, 0xda5f
cmp si, dx
je 0x448f61
mov eax, 0xda61
cmp si, ax
je 0x448f61
mov ecx, 0xda63
cmp si, cx
je 0x448f61
mov edx, 0xda67
cmp si, dx
je 0x448f61
mov eax, 0xad75
cmp si, ax
je 0x448f61
mov ecx, 0xaddd
cmp si, cx
je 0x448f61
mov edx, 0xdaac
cmp si, dx
je 0x448f61
cmp si, 0x15
je 0x448f61
cmp si, 0x50
je 0x448f61
mov eax, 0x170d
cmp si, ax
je 0x448f61
mov ecx, 0x170f
cmp si, cx
je 0x448f61
cmp si, 0x1c
jne 0x448f88
lea edx, [esp + 0x478]
push edx
call fcn.00439500
add esp, 4
test al, al
je 0x448f79
mov bl, 1
jmp 0x448f88
cmp ebp, dword [esp + 0x14]
jne 0x448f83
mov bl, 1
jmp 0x448f88
mov byte [esp + 0x11], 1
mov edi, dword [esp + 0x18]
mov ebp, 8
cmp dword [edi + 0x539710], ebp
jne 0x44902b
mov eax, 0x1e61
cmp si, ax
je 0x448fde
mov ecx, 0x83a
cmp si, cx
je 0x448fde
mov edx, 0x89b
cmp si, dx
je 0x448fde
mov eax, 0xcd14
cmp si, ax
je 0x448fde
lea ecx, [esp + 0x478]
push ecx
call fcn.00439810
add esp, 4
test al, al
je 0x448fde
mov byte [esp + 0x12], 1
cmp dword [edi + 0x539710], ebp
jne 0x44902b
mov edx, 0x1e61
cmp si, dx
je 0x44900e
mov eax, 0x83a
cmp si, ax
je 0x44900e
mov ecx, 0x89b
cmp si, cx
je 0x44900e
mov edx, 0xcd14
cmp si, dx
jne 0x44902b
lea eax, [esp + 0x478]
push eax
call fcn.00439810
add esp, 4
test al, al
je 0x449026
mov bl, 1
jmp 0x44902b
mov byte [esp + 0x11], 1
mov ebp, dword [esp + 0x18]
mov edi, 7
cmp dword [ebp + 0x539710], edi
jne 0x44908e
mov ecx, 0x7d0
cmp si, cx
je 0x44905f
lea edx, [esp + 0x478]
push edx
call fcn.00439c80
add esp, 4
test al, al
je 0x44905f
mov byte [esp + 0x12], 1
cmp dword [ebp + 0x539710], edi
jne 0x44908e
mov eax, 0x7d0
cmp si, ax
jne 0x44908e
lea ecx, [esp + 0x478]
push ecx
call fcn.00439c80
add esp, 4
test al, al
je 0x449089
mov bl, 1
jmp 0x44908e
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
mov ebp, 0x3c
cmp dword [edx + 0x539710], ebp
jne 0x4490cc
mov eax, 0x1f40
cmp si, ax
je 0x4490cc
mov ecx, 0x1f49
cmp si, cx
je 0x4490cc
lea edx, [esp + 0x478]
push edx
call fcn.0043b9f0
add esp, 4
test al, al
je 0x4490cc
mov byte [esp + 0x12], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], ebp
jne 0x449109
mov ecx, 0x1f40
cmp si, cx
je 0x4490ec
mov edx, 0x1f49
cmp si, dx
jne 0x449109
lea eax, [esp + 0x478]
push eax
call fcn.0043b9f0
add esp, 4
test al, al
je 0x449104
mov bl, 1
jmp 0x449109
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
mov ebp, 0x14
cmp dword [ecx + 0x539710], ebp
jne 0x449147
mov edx, 0x7850
cmp si, dx
je 0x449147
mov eax, 0x785a
cmp si, ax
je 0x449147
lea ecx, [esp + 0x478]
push ecx
call fcn.0043bb60
add esp, 4
test al, al
je 0x449147
mov byte [esp + 0x12], 1
mov edx, dword [esp + 0x18]
cmp dword [edx + 0x539710], ebp
jne 0x449184
mov eax, 0x7850
cmp si, ax
je 0x449167
mov ecx, 0x785a
cmp si, cx
jne 0x449184
lea edx, [esp + 0x478]
push edx
call fcn.0043bb60
add esp, 4
test al, al
je 0x44917f
mov bl, 1
jmp 0x449184
mov byte [esp + 0x11], 1
mov ebp, dword [esp + 0x18]
cmp dword [ebp + 0x539710], 0x4c
jne 0x4491ae
lea eax, [esp + 0x478]
push eax
call fcn.0043bc80
add esp, 4
test al, al
je 0x4491a9
mov bl, 1
jmp 0x4491ae
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x51
jne 0x4491dd
test byte [ebp + 0x539770], 4
je 0x4491dd
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b520
add esp, 4
test al, al
je 0x4491d8
mov bl, 1
jmp 0x4491dd
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x52
jne 0x449203
lea edx, [esp + 0x478]
push edx
call fcn.0043b560
add esp, 4
test al, al
je 0x4491fe
mov bl, 1
jmp 0x449203
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x53
jne 0x449232
test byte [ebp + 0x539770], 4
je 0x449232
lea eax, [esp + 0x478]
push eax
call fcn.0043bca0
add esp, 4
test al, al
je 0x44922d
mov bl, 1
jmp 0x449232
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x54
jne 0x449258
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b5b0
add esp, 4
test al, al
je 0x449253
mov bl, 1
jmp 0x449258
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x13
jne 0x449287
test byte [ebp + 0x539770], 2
je 0x449287
lea edx, [esp + 0x478]
push edx
call fcn.0043b630
add esp, 4
test al, al
je 0x449282
mov bl, 1
jmp 0x449287
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x4e
jne 0x4492e6
test byte [ebp + 0x539770], 1
je 0x4492e6
lea eax, [esp + 0x478]
push eax
call fcn.0043b6a0
add esp, 4
test al, al
je 0x4492b1
mov bl, 1
jmp 0x4492b6
mov byte [esp + 0x11], 1
mov ecx, 0x456
cmp si, cx
jne 0x4492e6
push 0x51cb48
call fcn.00404690
push eax
lea edx, [esp + 0x480]
push edx
call fcn.004b9929
add esp, 0xc
test eax, eax
je 0x4492e6
xor bl, bl
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x50
jne 0x449315
test byte [ebp + 0x539770], 0x10
je 0x449315
lea eax, [esp + 0x478]
push eax
call fcn.0043bcf0
add esp, 4
test al, al
je 0x449310
mov bl, 1
jmp 0x449315
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x57
jne 0x44933b
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ba10
add esp, 4
test al, al
je 0x449336
mov bl, 1
jmp 0x44933b
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x58
jne 0x449361
lea edx, [esp + 0x478]
push edx
call fcn.0043ba30
add esp, 4
test al, al
je 0x44935c
mov bl, 1
jmp 0x449361
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0xe
jne 0x449390
test byte [ebp + 0x539770], 2
je 0x449390
lea eax, [esp + 0x478]
push eax
call fcn.0043bd60
add esp, 4
test al, al
je 0x44938b
mov bl, 1
jmp 0x449390
mov byte [esp + 0x11], 1
cmp byte [0x53c04e], 0
jne 0x44940a
mov ecx, dword [ebp + 0x53970c]
call fcn.004052f0
cmp byte [eax], 0
je 0x4493ba
mov ecx, dword [ebp + 0x53970c]
call fcn.004052f0
jmp 0x4493bf
mov eax, 0x50d147
movzx ecx, byte [esp + 0x13]
movzx edx, byte [esp + 0x12]
push ecx
push edx
mov edx, dword [esp + 0x3c]
movzx ecx, bl
push ecx
push eax
movzx eax, word [esp + 0x58]
push edx
push eax
lea ecx, [esp + 0x4f0]
push ecx
movzx edx, si
push edx
lea eax, [esp + 0x498]
push eax
push 0x51cab8
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x2c
test bl, bl
jne 0x449418
cmp byte [esp + 0x12], bl
je 0x449580
lea ecx, [esp + 0x478]
push ecx
push 0x53c990
call fcn.004b9a67
add esp, 8
test eax, eax
jne 0x44943e
cmp word [0x53c988], si
je 0x4494cd
xor eax, eax
mov cl, byte [esp + eax + 0x478]
mov byte [eax + 0x53c990], cl
inc eax
test cl, cl
jne 0x449440
mov ecx, dword [ebp + 0x53970c]
mov word [0x53c988], si
call fcn.004052f0
cmp byte [eax], 0
je 0x449476
mov ecx, dword [ebp + 0x53970c]
call fcn.004052f0
jmp 0x44947b
mov eax, 0x50d147
movzx edx, byte [esp + 0x13]
movzx ecx, byte [esp + 0x12]
push edx
push ecx
mov ecx, dword [0x53c9f0]
movzx edx, bl
push edx
mov edx, dword [esp + 0x40]
push ecx
push eax
movzx eax, word [esp + 0x5c]
push edx
push eax
lea ecx, [esp + 0x4f4]
push ecx
movzx edx, si
push edx
lea eax, [esp + 0x49c]
push eax
push 0x51ca20
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x30
test bl, bl
je 0x44955c
push 0x7f
lea ecx, [esp + 0x51d]
push 0
push ecx
mov byte [esp + 0x524], 0
call fcn.004b6dc0
movzx edx, si
add esp, 0xc
push edx
lea eax, [esp + 0x47c]
push eax
push 0x51ca10
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x524]
push ecx
call fcn.004b79a8
mov edx, dword [0x527d88]
add esp, 0x10
push 0
push 0
push edx
push 0x50d930
call fcn.00404690
mov ecx, dword [esp + 0x34]
add esp, 4
push eax
lea eax, [esp + 0x528]
push eax
push 0x51c9f8
push 0
push ecx
push 2
push edi
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], 0
je 0x4495a2
cmp byte [esp + 0x12], 0
je 0x449580
cmp byte [esp + 0x11], 0
jne 0x449587
lea edx, [esp + 0x478]
movzx eax, si
push edx
push eax
call fcn.004477d0
add esp, 8
jmp 0x44958c
cmp byte [esp + 0x11], 0
je 0x44958c
mov byte [esp + 0x13], 1
mov ebp, dword [esp + 0x24]
mov eax, dword [0x53c674]
inc ebp
mov dword [esp + 0x24], ebp
cmp ebp, dword [eax]
jb 0x447eb0
cmp byte [esp + 0x12], 0
je 0x449752
cmp byte [esp + 0x13], 0
jne 0x449752
cmp dword [0x53c908], 0
je 0x449752
push 0x51c9e8
call fcn.00404690
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
add esp, 4
push eax
call esi
test eax, eax
jne 0x44960f
push 0x51c9d8
call fcn.00404690
add esp, 4
push eax
call esi
test eax, eax
jne 0x449752
push 0x51c9c8
call fcn.00404690
add esp, 4
push eax
call esi
test eax, eax
jne 0x449752
push 0x3ff
lea ecx, [esp + 0x821]
push 0
push ecx
mov byte [esp + 0x828], 0
call fcn.004b6dc0
push 0x7f
lea edx, [esp + 0x529]
push 0
push edx
mov byte [esp + 0x530], 0
call fcn.004b6dc0
mov eax, dword [0x53c904]
mov ecx, dword [eax]
mov edx, dword [0x53c8f0]
add esp, 0x18
mov dword [esp + 0x38], ecx
mov dword [esp + 0x34], edx
lea esp, [esp]
mov ecx, dword [0x53c8f0]
mov eax, dword [0x53c904]
lea edx, [esp + 0x3c]
mov dword [esp + 0x3c], ecx
push edx
lea ecx, [esp + 0x38]
mov dword [esp + 0x44], eax
call fcn.004164d0
test al, al
je 0x449707
lea ecx, [esp + 0x34]
call fcn.00446e40
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x38]
call fcn.00446e40
add eax, 4
push eax
push 0x51c9bc
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x524]
push ecx
call fcn.004b79a8
lea eax, [esp + 0x528]
add esp, 0x10
mov ecx, eax
lea esp, [esp]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x4496d0
lea edi, [esp + 0x81c]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x4496e3
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x34]
call fcn.00444ea0
jmp 0x449660
mov edx, dword [0x527d88]
push 0
push 0
push edx
push 0x50d930
call fcn.00404690
mov ecx, dword [esp + 0x34]
add esp, 4
push eax
lea eax, [esp + 0x82c]
push eax
push 0x51c9a0
push 0
push ecx
push 2
push 7
call fcn.0043c0b0
lea edx, [esp + 0x844]
push edx
push 0x527e20
call fcn.00401350
add esp, 0x30
cmp dword [esp + 0x28], 0
jbe 0x44b3b7
mov eax, dword [esp + 0x4c]
mov byte [eax], 1
mov byte [0x53c04e], 1
jmp 0x44b3b7
cmp dword [0x54a138], 0x4e2a
jae 0x44b3b7
push 1
push 9
push 0x639
push 0x8b1
call fcn.00417130
push 0x51c980
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0x1c
jmp 0x44b3b7
push 2
push ebx
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
push 1
lea ecx, [esp + 0x30]
push ecx
call dword [0x53c9d0]
test eax, eax
jne 0x44b3b7
mov eax, dword [esp + 0x20]
mov byte [esp + 0x12], 0
mov byte [esp + 0x1f], 0
mov dword [esp + 0x30], ebx
mov dword [esp + 0x24], ebx
cmp dword [eax], ebx
jbe 0x44b3a3
mov ecx, dword [esp + 0xc24]
imul ecx, ecx, 0x6c
mov dword [esp + 0x18], ecx
jmp 0x449800
mov ecx, dword [esp + 0x24]
lea edi, [ecx + ecx*2]
add edi, edi
add edi, edi
add edi, edi
movzx ecx, word [edi + eax + 0xc]
mov ebp, dword [edi + eax + 8]
push ecx
mov dword [esp + 0x2c], edi
call dword [0x53c9ec]
movzx edx, ax
mov eax, dword [esp + 0x20]
mov ebx, dword [edi + eax + 0x10]
movzx eax, word [edi + eax + 0x14]
push eax
mov dword [esp + 0x40], edx
mov dword [esp + 0x18], ebx
call dword [0x53c9ec]
mov ecx, dword [esp + 0x18]
movzx esi, ax
mov eax, dword [esp + 0x20]
mov edi, dword [edi + eax + 0x18]
mov dword [esp + 0x34], edi
cmp edi, dword [ecx + 0x539714]
jne 0x44b1e6
mov edx, dword [esp + 0x28]
cmp dword [edx + eax + 4], 5
jne 0x44b1e6
mov ecx, 0x400
cmp word [esp + 0x3c], cx
jbe 0x44b1e6
push ebp
call dword [0x53c9e8]
lea edx, [esp + 0x4d8]
lea esp, [esp]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x449890
push ebx
call dword [0x53c9e8]
lea edx, [esp + 0x478]
mov cl, byte [eax]
mov byte [edx], cl
inc eax
inc edx
test cl, cl
jne 0x4498a8
mov edi, dword [esp + 0x18]
inc dword [esp + 0x30]
cmp dword [edi + 0x539710], 3
mov byte [esp + 0x13], cl
mov byte [esp + 0x11], cl
jne 0x4499cb
test byte [edi + 0x539770], 0x10
je 0x4499cb
lea edx, [esp + 0x478]
push edx
call fcn.0043ba50
add esp, 4
test al, al
jne 0x4499bb
mov byte [esp + 0x13], 1
jmp 0x4499cb
mov edi, dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push 0x1c
push ebx
call edi
mov esi, dword [sym.imp.KERNEL32.dll_HeapAlloc]
push eax
call esi
mov dword [esp + 0x20], eax
cmp eax, ebx
jne 0x449937
push 0x51c95c
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
jmp 0x44b3b7
push ebx
push 5
push 2
push 1
lea edx, [esp + 0x54]
push edx
push eax
mov dword [esp + 0x5c], 0x1c
call dword [0x53c9d8]
cmp eax, 0x7a
jne 0x4499a9
mov eax, dword [esp + 0x20]
push eax
push ebx
call edi
push eax
call ebp
mov ecx, dword [esp + 0x44]
push ecx
push ebx
call edi
push eax
call esi
mov dword [esp + 0x20], eax
cmp eax, ebx
jne 0x44997c
push 0x51c938
jmp 0x44991f
push ebx
push 5
push 2
push 1
lea edx, [esp + 0x54]
push edx
push eax
call dword [0x53c9d8]
cmp eax, 0x7a
jne 0x4499a9
mov eax, dword [esp + 0x20]
push eax
push ebx
call edi
push eax
call ebp
push 0x51c914
jmp 0x44991f
cmp eax, ebx
je 0x4497cf
push 0x51c8f0
jmp 0x44991f
cmp ebp, ebx
jne 0x4499c6
mov byte [esp + 0x13], 1
jmp 0x4499cb
mov byte [esp + 0x11], 1
cmp dword [edi + 0x539710], 0x39
jne 0x449b06
lea eax, [esp + 0x478]
push eax
call fcn.0043b990
mov ecx, 0x5213
add esp, 4
cmp si, cx
jb 0x449a00
mov edx, 0x5215
cmp si, dx
jbe 0x449ae0
mov ecx, 0x55f1
cmp si, cx
jb 0x449a18
mov edx, 0x55f6
cmp si, dx
jbe 0x449ae0
mov ecx, 0x59d9
cmp si, cx
jb 0x449a30
mov edx, 0x59db
cmp si, dx
jbe 0x449ae0
mov ecx, 0x59e0
cmp si, cx
jb 0x449a48
mov edx, 0x59e6
cmp si, dx
jbe 0x449ae0
mov ecx, 0x59f6
cmp si, cx
jb 0x449a60
mov edx, 0x59fe
cmp si, dx
jbe 0x449ae0
mov ecx, 0x5a0b
cmp si, cx
je 0x449ae0
mov edx, 0x5a15
cmp si, dx
je 0x449ae0
mov ecx, 0x5bcd
cmp si, cx
je 0x449ae0
mov edx, 0x5bd7
cmp si, dx
je 0x449ae0
mov ecx, 0x5be1
cmp si, cx
je 0x449ae0
mov edx, 0x5beb
cmp si, dx
je 0x449ae0
mov ecx, 0x5dbf
cmp si, cx
je 0x449ae0
mov edx, 0x5dc1
cmp si, dx
je 0x449ae0
mov ecx, 0x6591
cmp si, cx
je 0x449ae0
mov edx, 0x6979
cmp si, dx
je 0x449ae0
mov ecx, 0x6d62
cmp si, cx
je 0x449ae0
mov edx, 0x7531
cmp si, dx
jne 0x449afd
test al, al
jne 0x449aeb
mov byte [esp + 0x13], 1
jmp 0x449b06
cmp ebp, ebx
jne 0x449af6
mov byte [esp + 0x13], 1
jmp 0x449b06
mov byte [esp + 0x11], 1
jmp 0x449b06
test al, al
jne 0x449b06
mov byte [esp + 0x12], 1
cmp dword [edi + 0x539710], 0x38
jne 0x449bbd
lea eax, [esp + 0x478]
push eax
call fcn.0043b950
mov ecx, 0x1c20
add esp, 4
xor bl, bl
mov byte [esp + 0x2f], al
cmp si, cx
je 0x449b6b
mov edx, 0x1c21
cmp si, dx
je 0x449b6b
mov eax, 0x1c22
cmp si, ax
je 0x449b6b
mov ecx, 0x1c85
cmp si, cx
je 0x449b6b
cmp si, 0x50
je 0x449b6b
mov edx, 0x1f90
cmp si, dx
je 0x449b6b
mov eax, 0x1f91
cmp si, ax
jne 0x449b6d
mov bl, 1
push 0x51c8e0
call fcn.00404690
push eax
lea ecx, [esp + 0x480]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
jne 0x449b9d
cmp bl, 1
jne 0x449bb1
cmp byte [esp + 0x2f], al
jne 0x449b9d
mov byte [esp + 0x13], bl
jmp 0x449bbd
cmp ebp, dword [esp + 0x14]
jne 0x449baa
mov byte [esp + 0x13], 1
jmp 0x449bbd
mov byte [esp + 0x11], 1
jmp 0x449bbd
cmp byte [esp + 0x2f], 0
jne 0x449bbd
mov byte [esp + 0x12], 1
mov edx, edi
mov eax, dword [edx + 0x539710]
cmp eax, 0x31
jne 0x449c5d
mov ecx, 0x1e61
cmp si, cx
je 0x449c5d
cmp si, 0x50
je 0x449c5d
mov edx, 0x778e
cmp si, dx
je 0x449c5d
mov ecx, 0x1b57
cmp si, cx
je 0x449c5d
mov edx, 0xc639
cmp si, dx
je 0x449c5d
mov ecx, 0x456
cmp si, cx
je 0x449c5d
mov edx, 0x401
cmp si, dx
je 0x449c5d
mov ecx, 0x83a
cmp si, cx
je 0x449c5d
mov edx, 0x89c
cmp si, dx
je 0x449c5d
mov ecx, 0x2801
cmp si, cx
je 0x449c5d
mov edx, 0x2f30
cmp si, dx
je 0x449c5d
mov ecx, 0x203e
cmp si, cx
je 0x449c5d
mov edx, 0x1bb
cmp si, dx
je 0x449c5d
mov byte [esp + 0x12], 1
cmp eax, 0x33
jne 0x449c8c
lea eax, [esp + 0x478]
push eax
call fcn.0043b480
add esp, 4
test al, al
jne 0x449c7d
mov byte [esp + 0x11], 1
jmp 0x449c8c
cmp ebp, dword [esp + 0x14]
jne 0x449c87
mov bl, 1
jmp 0x449c90
mov byte [esp + 0x12], 1
mov bl, byte [esp + 0x13]
mov ecx, edi
cmp dword [ecx + 0x539710], 0x16
jne 0x449dd1
mov edx, 0x1490
cmp si, dx
je 0x449db4
mov eax, 0x2096
cmp si, ax
je 0x449db4
mov ecx, 0x20a0
cmp si, cx
je 0x449d4e
mov edx, 0x20fc
cmp si, dx
je 0x449d4e
mov eax, 0x2134
cmp si, ax
je 0x449d4e
mov ecx, 0x2198
cmp si, cx
je 0x449d4e
mov edx, 0x2669
cmp si, dx
je 0x449d4e
mov eax, 0x9f00
cmp si, ax
jb 0x449d0d
mov ecx, 0x9f21
cmp si, cx
jbe 0x449d4e
mov edx, 0xc678
cmp si, dx
jb 0x449d21
mov eax, 0xc684
cmp si, ax
jbe 0x449d4e
mov ecx, 0x9c40
cmp si, cx
jb 0x449d35
mov edx, 0x9c5f
cmp si, dx
jbe 0x449d4e
lea eax, [esp + 0x478]
push eax
call fcn.0043b3a0
add esp, 4
test al, al
je 0x449d4e
mov byte [esp + 0x12], 1
mov ecx, 0x20a0
cmp si, cx
je 0x449db4
mov edx, 0x20fc
cmp si, dx
je 0x449db4
mov eax, 0x2134
cmp si, ax
je 0x449db4
mov ecx, 0x2198
cmp si, cx
je 0x449db4
mov edx, 0x2669
cmp si, dx
je 0x449db4
mov eax, 0x9f00
cmp si, ax
jb 0x449d94
mov ecx, 0x9f21
cmp si, cx
jbe 0x449db4
mov edx, 0xc678
cmp si, dx
jb 0x449da8
mov eax, 0xc684
cmp si, ax
jbe 0x449db4
lea ecx, [esi + 0x63c0]
cmp cx, 0x1f
ja 0x449dd1
lea edx, [esp + 0x478]
push edx
call fcn.0043b3a0
add esp, 4
test al, al
je 0x449dcc
mov bl, 1
jmp 0x449dd1
mov byte [esp + 0x11], 1
push 0x51ccf8
call fcn.00404690
push eax
lea edi, [edi + 0x53972c]
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x449e2f
lea eax, [esp + 0x478]
push eax
call fcn.0043b340
add esp, 4
test al, al
je 0x449e08
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b340
add esp, 4
test al, al
je 0x449e20
mov bl, 1
jmp 0x449e2f
cmp ebp, dword [esp + 0x14]
jne 0x449e2a
mov bl, 1
jmp 0x449e2f
mov byte [esp + 0x11], 1
push 0x51cce4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x449e93
mov edx, 0x1ec9
cmp si, dx
je 0x449e6c
lea eax, [esp + 0x478]
push eax
call fcn.0043b380
add esp, 4
test al, al
je 0x449e93
mov byte [esp + 0x12], 1
jmp 0x449e93
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b380
add esp, 4
test al, al
je 0x449e84
mov bl, 1
jmp 0x449e93
cmp ebp, dword [esp + 0x14]
jne 0x449e8e
mov bl, 1
jmp 0x449e93
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
cmp dword [edx + 0x539710], 0x2f
jne 0x449f4a
mov eax, 0x752e
cmp si, ax
jb 0x449eb8
mov ecx, 0x753a
cmp si, cx
jbe 0x449ef9
mov edx, 0x7530
cmp si, dx
jb 0x449ecc
mov eax, 0x753a
cmp si, ax
jbe 0x449ef9
mov ecx, 0x7594
cmp si, cx
jb 0x449ee0
mov edx, 0x759e
cmp si, dx
jbe 0x449ef9
lea eax, [esp + 0x478]
push eax
call fcn.0043afa0
add esp, 4
test al, al
je 0x449ef9
mov byte [esp + 0x12], 1
mov ecx, 0x752e
cmp si, cx
jb 0x449f0d
mov edx, 0x753a
cmp si, dx
jbe 0x449f2d
mov eax, 0x7530
cmp si, ax
jb 0x449f21
mov ecx, 0x753a
cmp si, cx
jbe 0x449f2d
lea edx, [esi - 0x7594]
cmp dx, 0xa
ja 0x449f4a
lea eax, [esp + 0x478]
push eax
call fcn.0043afa0
add esp, 4
test al, al
je 0x449f45
mov bl, 1
jmp 0x449f4a
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x11
jne 0x449f81
lea edx, [esp + 0x478]
push edx
call fcn.0043afc0
add esp, 4
test al, al
jne 0x449f72
mov byte [esp + 0x11], 1
jmp 0x449f81
cmp ebp, dword [esp + 0x14]
jne 0x449f7c
mov bl, 1
jmp 0x449f81
mov byte [esp + 0x12], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], 0x2d
jne 0x449fce
lea ecx, [esp + 0x478]
push ecx
call fcn.0043af80
add esp, 4
test al, al
je 0x449fa7
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043af80
add esp, 4
test al, al
je 0x449fbf
mov bl, 1
jmp 0x449fce
cmp ebp, dword [esp + 0x14]
jne 0x449fc9
mov bl, 1
jmp 0x449fce
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], 0x27
jne 0x44a01b
lea ecx, [esp + 0x478]
push ecx
call fcn.0043a200
add esp, 4
test al, al
je 0x449ff4
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043a200
add esp, 4
test al, al
je 0x44a00c
mov bl, 1
jmp 0x44a01b
cmp ebp, dword [esp + 0x14]
jne 0x44a016
mov bl, 1
jmp 0x44a01b
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], 0x10
jne 0x44a068
lea ecx, [esp + 0x478]
push ecx
call fcn.0043af40
add esp, 4
test al, al
je 0x44a041
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043af40
add esp, 4
test al, al
je 0x44a059
mov bl, 1
jmp 0x44a068
cmp ebp, dword [esp + 0x14]
jne 0x44a063
mov bl, 1
jmp 0x44a068
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], 0x18
jne 0x44a0b5
lea ecx, [esp + 0x478]
push ecx
call fcn.0043adc0
add esp, 4
test al, al
je 0x44a08e
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043adc0
add esp, 4
test al, al
je 0x44a0a6
mov bl, 1
jmp 0x44a0b5
cmp ebp, dword [esp + 0x14]
jne 0x44a0b0
mov bl, 1
jmp 0x44a0b5
mov byte [esp + 0x11], 1
push 0x51c8d4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a123
mov eax, 0x3cbe
cmp si, ax
je 0x44a0fc
mov ecx, 0x3cc8
cmp si, cx
je 0x44a0fc
lea edx, [esp + 0x478]
push edx
call fcn.0043ad60
add esp, 4
test al, al
je 0x44a123
mov byte [esp + 0x12], 1
jmp 0x44a123
lea eax, [esp + 0x478]
push eax
call fcn.0043ad60
add esp, 4
test al, al
je 0x44a114
mov bl, 1
jmp 0x44a123
cmp ebp, dword [esp + 0x14]
jne 0x44a11e
mov bl, 1
jmp 0x44a123
mov byte [esp + 0x11], 1
push 0x51c8c4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a153
push 0x51c8b4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a193
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ad40
add esp, 4
test al, al
je 0x44a16c
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043ad40
add esp, 4
test al, al
je 0x44a184
mov bl, 1
jmp 0x44a193
cmp ebp, dword [esp + 0x14]
jne 0x44a18e
mov bl, 1
jmp 0x44a193
mov byte [esp + 0x11], 1
push 0x51cc7c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a1c3
push 0x51cc6c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a203
lea eax, [esp + 0x478]
push eax
call fcn.0043ac60
add esp, 4
test al, al
je 0x44a1dc
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ac60
add esp, 4
test al, al
je 0x44a1f4
mov bl, 1
jmp 0x44a203
cmp ebp, dword [esp + 0x14]
jne 0x44a1fe
mov bl, 1
jmp 0x44a203
mov byte [esp + 0x11], 1
push 0x51c8a4
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a25b
lea edx, [esp + 0x478]
push edx
call fcn.0043ac40
add esp, 4
test al, al
je 0x44a234
mov byte [esp + 0x12], 1
lea eax, [esp + 0x478]
push eax
call fcn.0043ac40
add esp, 4
test al, al
je 0x44a24c
mov bl, 1
jmp 0x44a25b
cmp ebp, dword [esp + 0x14]
jne 0x44a256
mov bl, 1
jmp 0x44a25b
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0x25
jne 0x44a306
mov edx, 0x9c40
cmp si, dx
je 0x44a2df
mov eax, 0x9c4b
cmp si, ax
je 0x44a2df
mov ecx, 0x9c55
cmp si, cx
je 0x44a2df
mov edx, 0x9c5f
cmp si, dx
je 0x44a2df
mov eax, 0x9c69
cmp si, ax
je 0x44a2df
cmp si, 0x50
je 0x44a2df
mov ecx, 0xb9fb
cmp si, cx
je 0x44a2df
mov edx, 0xb9fc
cmp si, dx
je 0x44a2df
mov eax, 0xb9fd
cmp si, ax
je 0x44a2df
lea ecx, [esp + 0x478]
push ecx
call fcn.0043aaf0
add esp, 4
test al, al
je 0x44a2df
mov byte [esp + 0x12], 1
lea edx, [esp + 0x478]
push edx
call fcn.0043aaf0
add esp, 4
test al, al
je 0x44a2f7
mov bl, 1
jmp 0x44a306
cmp ebp, dword [esp + 0x14]
jne 0x44a301
mov bl, 1
jmp 0x44a306
mov byte [esp + 0x11], 1
push 0x51c894
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a33a
push 0x51c880
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a3a2
mov eax, 0x2af8
cmp si, ax
je 0x44a37b
mov ecx, 0x2b0c
cmp si, cx
je 0x44a37b
mov edx, 0x1f42
cmp si, dx
je 0x44a371
lea eax, [esp + 0x478]
push eax
call fcn.0043aab0
add esp, 4
test al, al
je 0x44a371
mov byte [esp + 0x12], 1
mov ecx, 0x1f42
cmp si, cx
jne 0x44a3a2
lea edx, [esp + 0x478]
push edx
call fcn.0043aab0
add esp, 4
test al, al
je 0x44a393
mov bl, 1
jmp 0x44a3a2
cmp ebp, dword [esp + 0x14]
jne 0x44a39d
mov bl, 1
jmp 0x44a3a2
mov byte [esp + 0x11], 1
push 0x51cc2c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a3fa
lea eax, [esp + 0x478]
push eax
call fcn.0043a950
add esp, 4
test al, al
je 0x44a3d3
mov byte [esp + 0x12], 1
lea ecx, [esp + 0x478]
push ecx
call fcn.0043a950
add esp, 4
test al, al
je 0x44a3eb
mov bl, 1
jmp 0x44a3fa
cmp ebp, dword [esp + 0x14]
jne 0x44a3f5
mov bl, 1
jmp 0x44a3fa
mov byte [esp + 0x11], 1
push 0x51cc4c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a446
push 0x51cc3c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a446
push 0x51cc1c
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a586
mov edx, 0x2096
cmp si, dx
je 0x44a55f
mov eax, 0x20a0
cmp si, ax
je 0x44a55f
mov ecx, 0x20a8
cmp si, cx
jb 0x44a47a
mov edx, 0x20b4
cmp si, dx
jbe 0x44a4f1
mov eax, 0x20be
cmp si, ax
je 0x44a4f1
mov ecx, 0x20d0
cmp si, cx
je 0x44a4f1
mov edx, 0x2134
cmp si, dx
je 0x44a4f1
mov eax, 0x2490
cmp si, ax
jb 0x44a4b0
mov ecx, 0x2493
cmp si, cx
jbe 0x44a4f1
mov edx, 0x24b8
cmp si, dx
je 0x44a4f1
mov eax, 0x2558
cmp si, ax
jb 0x44a4ce
mov ecx, 0x255b
cmp si, cx
jbe 0x44a4f1
mov edx, 0x2580
cmp si, dx
je 0x44a4f1
lea eax, [esp + 0x478]
push eax
call fcn.0043aa10
add esp, 4
test al, al
je 0x44a4f1
mov byte [esp + 0x12], 1
mov ecx, 0x20a8
cmp si, cx
jb 0x44a505
mov edx, 0x20b4
cmp si, dx
jbe 0x44a55f
mov eax, 0x20be
cmp si, ax
je 0x44a55f
mov ecx, 0x20d0
cmp si, cx
je 0x44a55f
mov edx, 0x2134
cmp si, dx
je 0x44a55f
mov eax, 0x2490
cmp si, ax
jb 0x44a537
mov ecx, 0x2493
cmp si, cx
jbe 0x44a55f
mov edx, 0x24b8
cmp si, dx
je 0x44a55f
mov eax, 0x2558
cmp si, ax
jb 0x44a555
mov ecx, 0x255b
cmp si, cx
jbe 0x44a55f
mov edx, 0x2580
cmp si, dx
jne 0x44a586
lea eax, [esp + 0x478]
push eax
call fcn.0043aa10
add esp, 4
test al, al
je 0x44a577
mov bl, 1
jmp 0x44a586
cmp ebp, dword [esp + 0x14]
jne 0x44a581
mov bl, 1
jmp 0x44a586
mov byte [esp + 0x11], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], 0xa
jne 0x44a64f
mov edx, 0x6d60
cmp si, dx
je 0x44a628
mov eax, 0x3c28
cmp si, ax
je 0x44a628
mov ecx, 0x59d8
cmp si, cx
je 0x44a5fa
mov edx, 0x1518
cmp si, dx
je 0x44a5fa
cmp si, 0x50
je 0x44a5fa
mov eax, 0x5e25
cmp si, ax
je 0x44a5fa
mov ecx, 0x44f
cmp si, cx
je 0x44a5fa
lea edx, [esp + 0x478]
push edx
call fcn.0043a510
add esp, 4
test al, al
je 0x44a5fa
mov byte [esp + 0x12], 1
mov eax, 0x59d8
cmp si, ax
je 0x44a628
mov ecx, 0x1518
cmp si, cx
je 0x44a628
cmp si, 0x50
je 0x44a628
mov edx, 0x5e25
cmp si, dx
je 0x44a628
mov eax, 0x44f
cmp si, ax
jne 0x44a64f
lea ecx, [esp + 0x478]
push ecx
call fcn.0043a510
add esp, 4
test al, al
je 0x44a640
mov bl, 1
jmp 0x44a64f
cmp ebp, dword [esp + 0x14]
jne 0x44a64a
mov bl, 1
jmp 0x44a64f
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
cmp dword [edx + 0x539710], 0x21
jne 0x44a6a8
mov eax, 0x998f
cmp si, ax
je 0x44a681
lea ecx, [esp + 0x478]
push ecx
call fcn.0043a450
add esp, 4
test al, al
je 0x44a6a8
mov byte [esp + 0x12], 1
jmp 0x44a6a8
lea edx, [esp + 0x478]
push edx
call fcn.0043a450
add esp, 4
test al, al
je 0x44a699
mov bl, 1
jmp 0x44a6a8
cmp ebp, dword [esp + 0x14]
jne 0x44a6a3
mov bl, 1
jmp 0x44a6a8
mov byte [esp + 0x11], 1
push 0x51cc10
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a6d8
push 0x51cc04
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a6ff
lea eax, [esp + 0x478]
push eax
call fcn.0043a270
add esp, 4
test al, al
je 0x44a6f0
mov bl, 1
jmp 0x44a6ff
cmp ebp, dword [esp + 0x14]
jne 0x44a6fa
mov bl, 1
jmp 0x44a6ff
mov byte [esp + 0x11], 1
push 0x51c870
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a784
mov ecx, 0x1388
cmp si, cx
je 0x44a745
mov edx, 0x1770
cmp si, dx
je 0x44a745
mov eax, 0x1af4
cmp si, ax
je 0x44a73e
mov byte [esp + 0x12], 1
mov ecx, eax
cmp si, cx
jne 0x44a784
lea edx, [esp + 0x478]
push edx
call fcn.0043a140
add esp, 4
test al, al
je 0x44a75d
mov bl, 1
jmp 0x44a784
cmp ebp, dword [esp + 0x14]
jne 0x44a767
mov bl, 1
jmp 0x44a784
lea eax, [esp + 0x4d8]
push eax
call fcn.0043a140
add esp, 4
test al, al
jne 0x44a77f
mov bl, 1
jmp 0x44a784
mov byte [esp + 0x11], 1
push 0x51cbc0
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a7d0
push 0x51cba8
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
je 0x44a7d0
push 0x51cb94
call fcn.00404690
push eax
push edi
call fcn.004b9ca4
add esp, 0xc
test eax, eax
jne 0x44a972
push 0x51cb84
call fcn.00404690
push eax
lea ecx, [esp + 0x4e0]
push ecx
call fcn.004b9a67
add esp, 0xc
test eax, eax
jne 0x44a809
push 0x51cb6c
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov edx, 0x1401
cmp si, dx
je 0x44a91b
mov eax, 0x17e9
cmp si, ax
je 0x44a91b
mov ecx, 0x1af4
cmp si, cx
je 0x44a8b9
mov edx, 0xfa0
cmp si, dx
je 0x44a8b9
mov eax, 0x1a90
cmp si, ax
je 0x44a8b9
mov ecx, 0x1402
cmp si, cx
je 0x44a8b9
mov edx, 0x1403
cmp si, dx
je 0x44a8b9
mov eax, 0x1404
cmp si, ax
je 0x44a8b9
mov ecx, 0x1405
cmp si, cx
je 0x44a8b9
mov edx, 0x1406
cmp si, dx
je 0x44a8b9
mov eax, 0x1407
cmp si, ax
je 0x44a8b9
mov ecx, 0x1408
cmp si, cx
je 0x44a8b9
mov edx, 0x1409
cmp si, dx
je 0x44a8b9
push 0x51cb58
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov eax, 0x1af4
cmp si, ax
je 0x44a91b
mov ecx, 0xfa0
cmp si, cx
je 0x44a91b
mov edx, 0x1a90
cmp si, dx
je 0x44a972
mov eax, 0x1403
cmp si, ax
je 0x44a91b
mov ecx, 0x1404
cmp si, cx
je 0x44a91b
mov edx, 0x1405
cmp si, dx
je 0x44a972
mov eax, 0x1407
cmp si, ax
je 0x44a91b
mov ecx, 0x1408
cmp si, cx
je 0x44a91b
mov edx, 0x1409
cmp si, dx
jne 0x44a972
lea eax, [esp + 0x478]
push eax
call fcn.0043a060
add esp, 4
test al, al
je 0x44a933
mov bl, 1
jmp 0x44a972
cmp ebp, dword [esp + 0x14]
jne 0x44a93d
mov bl, 1
jmp 0x44a972
lea ecx, [esp + 0x4d8]
push ecx
call fcn.0043a060
add esp, 4
test al, al
jne 0x44a96d
push 0x51cbd0
mov bl, 1
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
jmp 0x44a972
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
mov edi, 2
cmp dword [edx + 0x539710], edi
jne 0x44aa42
mov eax, 0xda5d
cmp si, ax
je 0x44aa42
mov ecx, 0xda5f
cmp si, cx
je 0x44aa42
mov edx, 0xda61
cmp si, dx
je 0x44aa42
mov eax, 0xda63
cmp si, ax
je 0x44aa42
mov ecx, 0xda67
cmp si, cx
je 0x44aa42
mov edx, 0xad75
cmp si, dx
je 0x44aa42
mov eax, 0xaddd
cmp si, ax
je 0x44aa42
mov ecx, 0xdaac
cmp si, cx
je 0x44aa42
cmp si, 0x15
je 0x44aa42
cmp si, 0x50
je 0x44aa42
mov edx, 0x170d
cmp si, dx
je 0x44aa42
mov eax, 0x170f
cmp si, ax
je 0x44aa42
cmp si, 0x1c
je 0x44aa42
lea ecx, [esp + 0x478]
push ecx
call fcn.00439380
add esp, 4
test al, al
je 0x44aa42
lea edx, [esp + 0x478]
push edx
call fcn.00439800
add esp, 4
test al, al
jne 0x44aa42
mov byte [esp + 0x12], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], edi
jne 0x44aaf7
mov ecx, 0xda5d
cmp si, cx
je 0x44aad0
mov edx, 0xda5f
cmp si, dx
je 0x44aad0
mov eax, 0xda61
cmp si, ax
je 0x44aad0
mov ecx, 0xda63
cmp si, cx
je 0x44aad0
mov edx, 0xda67
cmp si, dx
je 0x44aad0
mov eax, 0xad75
cmp si, ax
je 0x44aad0
mov ecx, 0xaddd
cmp si, cx
je 0x44aad0
mov edx, 0xdaac
cmp si, dx
je 0x44aad0
cmp si, 0x15
je 0x44aad0
cmp si, 0x50
je 0x44aad0
mov eax, 0x170d
cmp si, ax
je 0x44aad0
mov ecx, 0x170f
cmp si, cx
je 0x44aad0
cmp si, 0x1c
jne 0x44aaf7
lea edx, [esp + 0x478]
push edx
call fcn.00439500
add esp, 4
test al, al
je 0x44aae8
mov bl, 1
jmp 0x44aaf7
cmp ebp, dword [esp + 0x14]
jne 0x44aaf2
mov bl, 1
jmp 0x44aaf7
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
mov edi, 8
cmp dword [eax + 0x539710], edi
jne 0x44ab49
mov ecx, 0x1e61
cmp si, cx
je 0x44ab49
mov edx, 0x83a
cmp si, dx
je 0x44ab49
mov eax, 0x89b
cmp si, ax
je 0x44ab49
mov ecx, 0xcd14
cmp si, cx
je 0x44ab49
lea edx, [esp + 0x478]
push edx
call fcn.00439810
add esp, 4
test al, al
je 0x44ab49
mov byte [esp + 0x12], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], edi
jne 0x44ab9a
mov ecx, 0x1e61
cmp si, cx
je 0x44ab7d
mov edx, 0x83a
cmp si, dx
je 0x44ab7d
mov eax, 0x89b
cmp si, ax
je 0x44ab7d
mov ecx, 0xcd14
cmp si, cx
jne 0x44ab9a
lea edx, [esp + 0x478]
push edx
call fcn.00439810
add esp, 4
test al, al
je 0x44ab95
mov bl, 1
jmp 0x44ab9a
mov byte [esp + 0x11], 1
mov ebp, dword [esp + 0x18]
mov edi, 7
cmp dword [ebp + 0x539710], edi
jne 0x44ac15
mov eax, 0x7d0
cmp si, ax
je 0x44abdc
mov ecx, 0x7d5
cmp si, cx
je 0x44abdc
lea edx, [esp + 0x478]
push edx
call fcn.00439c80
add esp, 4
test al, al
je 0x44abdc
mov byte [esp + 0x12], 1
cmp dword [ebp + 0x539710], edi
jne 0x44ac15
mov eax, 0x7d0
cmp si, ax
je 0x44abf8
mov ecx, 0x7d5
cmp si, cx
jne 0x44ac15
lea edx, [esp + 0x478]
push edx
call fcn.00439c80
add esp, 4
test al, al
je 0x44ac10
mov bl, 1
jmp 0x44ac15
mov byte [esp + 0x11], 1
mov eax, dword [esp + 0x18]
mov ebp, 0x3c
cmp dword [eax + 0x539710], ebp
jne 0x44ac53
mov ecx, 0x1f40
cmp si, cx
je 0x44ac53
mov edx, 0x1f49
cmp si, dx
je 0x44ac53
lea eax, [esp + 0x478]
push eax
call fcn.0043b9f0
add esp, 4
test al, al
je 0x44ac53
mov byte [esp + 0x12], 1
mov ecx, dword [esp + 0x18]
cmp dword [ecx + 0x539710], ebp
jne 0x44ac90
mov edx, 0x1f40
cmp si, dx
je 0x44ac73
mov eax, 0x1f49
cmp si, ax
jne 0x44ac90
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b9f0
add esp, 4
test al, al
je 0x44ac8b
mov bl, 1
jmp 0x44ac90
mov byte [esp + 0x11], 1
mov edx, dword [esp + 0x18]
mov ebp, 0x14
cmp dword [edx + 0x539710], ebp
jne 0x44acce
mov eax, 0x7850
cmp si, ax
je 0x44acce
mov ecx, 0x785a
cmp si, cx
je 0x44acce
lea edx, [esp + 0x478]
push edx
call fcn.0043bb60
add esp, 4
test al, al
je 0x44acce
mov byte [esp + 0x12], 1
mov eax, dword [esp + 0x18]
cmp dword [eax + 0x539710], ebp
jne 0x44ad0b
mov ecx, 0x7850
cmp si, cx
je 0x44acee
mov edx, 0x785a
cmp si, dx
jne 0x44ad0b
lea eax, [esp + 0x478]
push eax
call fcn.0043bb60
add esp, 4
test al, al
je 0x44ad06
mov bl, 1
jmp 0x44ad0b
mov byte [esp + 0x11], 1
mov ebp, dword [esp + 0x18]
cmp dword [ebp + 0x539710], 0xf
jne 0x44ad35
lea ecx, [esp + 0x478]
push ecx
call fcn.0043bbc0
add esp, 4
test al, al
je 0x44ad30
mov bl, 1
jmp 0x44ad35
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x43
jne 0x44ad5b
lea edx, [esp + 0x478]
push edx
call fcn.0043bbe0
add esp, 4
test al, al
je 0x44ad56
mov bl, 1
jmp 0x44ad5b
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 4
jne 0x44ad81
lea eax, [esp + 0x478]
push eax
call fcn.0043bc20
add esp, 4
test al, al
je 0x44ad7c
mov bl, 1
jmp 0x44ad81
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x48
jne 0x44ada7
lea ecx, [esp + 0x478]
push ecx
call fcn.0043bc40
add esp, 4
test al, al
je 0x44ada2
mov bl, 1
jmp 0x44ada7
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x4c
jne 0x44adcd
lea edx, [esp + 0x478]
push edx
call fcn.0043bc80
add esp, 4
test al, al
je 0x44adc8
mov bl, 1
jmp 0x44adcd
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x51
jne 0x44adfc
test byte [ebp + 0x539770], 4
je 0x44adfc
lea eax, [esp + 0x478]
push eax
call fcn.0043b520
add esp, 4
test al, al
je 0x44adf7
mov bl, 1
jmp 0x44adfc
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x52
jne 0x44ae22
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b560
add esp, 4
test al, al
je 0x44ae1d
mov bl, 1
jmp 0x44ae22
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x53
jne 0x44ae51
test byte [ebp + 0x539770], 4
je 0x44ae51
lea edx, [esp + 0x478]
push edx
call fcn.0043bca0
add esp, 4
test al, al
je 0x44ae4c
mov bl, 1
jmp 0x44ae51
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x54
jne 0x44ae77
lea eax, [esp + 0x478]
push eax
call fcn.0043b5b0
add esp, 4
test al, al
je 0x44ae72
mov bl, 1
jmp 0x44ae77
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x13
jne 0x44aea6
test byte [ebp + 0x539770], 2
je 0x44aea6
lea ecx, [esp + 0x478]
push ecx
call fcn.0043b630
add esp, 4
test al, al
je 0x44aea1
mov bl, 1
jmp 0x44aea6
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x4e
jne 0x44af05
test byte [ebp + 0x539770], 1
je 0x44af05
lea edx, [esp + 0x478]
push edx
call fcn.0043b6a0
add esp, 4
test al, al
je 0x44aed0
mov bl, 1
jmp 0x44aed5
mov byte [esp + 0x11], 1
mov eax, 0x456
cmp si, ax
jne 0x44af05
push 0x51cb48
call fcn.00404690
push eax
lea ecx, [esp + 0x480]
push ecx
call fcn.004b9929
add esp, 0xc
test eax, eax
je 0x44af05
xor bl, bl
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x50
jne 0x44af34
test byte [ebp + 0x539770], 0x10
je 0x44af34
lea edx, [esp + 0x478]
push edx
call fcn.0043bcf0
add esp, 4
test al, al
je 0x44af2f
mov bl, 1
jmp 0x44af34
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x57
jne 0x44af5a
lea eax, [esp + 0x478]
push eax
call fcn.0043ba10
add esp, 4
test al, al
je 0x44af55
mov bl, 1
jmp 0x44af5a
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0x58
jne 0x44af80
lea ecx, [esp + 0x478]
push ecx
call fcn.0043ba30
add esp, 4
test al, al
je 0x44af7b
mov bl, 1
jmp 0x44af80
mov byte [esp + 0x11], 1
cmp dword [ebp + 0x539710], 0xe
jne 0x44afaf
test byte [ebp + 0x539770], 2
je 0x44afaf
lea edx, [esp + 0x478]
push edx
call fcn.0043bd60
add esp, 4
test al, al
je 0x44afaa
mov bl, 1
jmp 0x44afaf
mov byte [esp + 0x11], 1
cmp byte [0x53c04e], 0
jne 0x44b03f
mov ecx, dword [ebp + 0x53970c]
call fcn.004052f0
cmp byte [eax], 0
je 0x44afd9
mov ecx, dword [ebp + 0x53970c]
call fcn.004052f0
jmp 0x44afde
mov eax, 0x50d147
movzx ecx, byte [esp + 0x1f]
movzx edx, byte [esp + 0x12]
push ecx
push edx
mov edx, dword [esp + 0x3c]
movzx ecx, bl
push ecx
mov ecx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x30]
push edx
mov edx, dword [ecx + eax + 4]
push edx
call fcn.004392f0
add esp, 4
push eax
movzx eax, word [esp + 0x54]
push eax
lea ecx, [esp + 0x4f4]
push ecx
movzx edx, si
push edx
lea eax, [esp + 0x49c]
push eax
push 0x51c7d0
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x30
test bl, bl
jne 0x44b04d
cmp byte [esp + 0x12], bl
je 0x44b1d6
lea ecx, [esp + 0x478]
push ecx
push 0x53c948
call fcn.004b9a67
add esp, 8
test eax, eax
jne 0x44b073
cmp word [0x53c940], si
je 0x44b123
xor eax, eax
jmp 0x44b080
mov cl, byte [esp + eax + 0x478]
mov byte [eax + 0x53c948], cl
inc eax
test cl, cl
jne 0x44b080
mov ecx, dword [ebp + 0x53970c]
mov word [0x53c940], si
call fcn.004052f0
cmp byte [eax], 0
je 0x44b0b6
mov ecx, dword [ebp + 0x53970c]
call fcn.004052f0
jmp 0x44b0bb
mov eax, 0x50d147
movzx edx, byte [esp + 0x1f]
movzx ecx, byte [esp + 0x12]
push edx
push ecx
mov ecx, dword [0x53c9f0]
movzx edx, bl
push edx
mov edx, dword [esp + 0x40]
push ecx
mov ecx, dword [esp + 0x38]
push eax
mov eax, dword [esp + 0x34]
push edx
mov edx, dword [ecx + eax + 4]
push edx
call fcn.004392f0
add esp, 4
push eax
movzx eax, word [esp + 0x58]
push eax
lea ecx, [esp + 0x4f8]
push ecx
movzx edx, si
push edx
lea eax, [esp + 0x4a0]
push eax
push 0x51c728
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0x34
test bl, bl
je 0x44b1b2
push 0x7f
lea ecx, [esp + 0x51d]
push 0
push ecx
mov byte [esp + 0x524], 0
call fcn.004b6dc0
movzx edx, si
add esp, 0xc
push edx
lea eax, [esp + 0x47c]
push eax
push 0x51c71c
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x524]
push ecx
call fcn.004b79a8
mov edx, dword [0x527d88]
add esp, 0x10
push 0
push 0
push edx
push 0x50d930
call fcn.00404690
mov ecx, dword [esp + 0x34]
add esp, 4
push eax
lea eax, [esp + 0x528]
push eax
push 0x51c9f8
push 0
push ecx
push 2
push edi
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], 0
je 0x44b1f9
cmp byte [esp + 0x12], 0
je 0x44b1d6
cmp byte [esp + 0x11], 0
jne 0x44b1dd
lea edx, [esp + 0x478]
movzx eax, si
push edx
push eax
call fcn.004477d0
add esp, 8
jmp 0x44b1e2
cmp byte [esp + 0x11], 0
je 0x44b1e2
mov byte [esp + 0x1f], 1
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
inc ecx
mov dword [esp + 0x24], ecx
cmp ecx, dword [eax]
jb 0x449800
jmp 0x44b1fd
mov eax, dword [esp + 0x20]
cmp byte [esp + 0x12], 0
je 0x44b38e
cmp byte [esp + 0x1f], 0
jne 0x44b38e
cmp dword [0x53c908], 0
je 0x44b38e
push 0x3ff
lea ecx, [esp + 0x821]
push 0
push ecx
mov byte [esp + 0x828], 0
call fcn.004b6dc0
push 0x7f
lea edx, [esp + 0x529]
push 0
push edx
mov byte [esp + 0x530], 0
call fcn.004b6dc0
mov eax, dword [0x53c904]
mov ebx, dword [eax]
mov ebp, dword [0x53c8f0]
add esp, 0x18
mov esi, dword [0x53c904]
test ebp, ebp
je 0x44b277
cmp ebp, dword [0x53c8f0]
je 0x44b27c
call fcn.004b7c48
cmp ebx, esi
je 0x44b33f
test ebp, ebp
jne 0x44b32a
call fcn.004b7c48
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x44b29d
call fcn.004b7c48
test ebp, ebp
jne 0x44b332
call fcn.004b7c48
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x44b2b6
call fcn.004b7c48
mov ecx, dword [ebx + 8]
push ecx
lea edx, [ebx + 0xc]
push edx
push 0x51c710
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x524]
push eax
call fcn.004b79a8
lea eax, [esp + 0x528]
add esp, 0x10
mov ecx, eax
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x44b2e5
lea edi, [esp + 0x81c]
sub eax, ecx
mov esi, ecx
dec edi
mov cl, byte [edi + 1]
inc edi
test cl, cl
jne 0x44b2f8
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
test ebp, ebp
jne 0x44b33a
call fcn.004b7c48
xor eax, eax
cmp ebx, dword [eax + 0x14]
jne 0x44b323
call fcn.004b7c48
mov ebx, dword [ebx]
jmp 0x44b265
mov eax, dword [ebp]
jmp 0x44b293
mov eax, dword [ebp]
jmp 0x44b2ac
mov eax, dword [ebp]
jmp 0x44b319
mov ecx, dword [0x527d88]
push 0
push 0
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
mov eax, dword [esp + 0x34]
lea edx, [esp + 0x82c]
push edx
push 0x51c6f4
push 0
push eax
push 2
push 7
call fcn.0043c0b0
lea ecx, [esp + 0x844]
push ecx
push 0x527e20
call fcn.00401350
mov eax, dword [esp + 0x50]
add esp, 0x30
cmp dword [esp + 0x30], 0
jbe 0x44b3a3
mov edx, dword [esp + 0x4c]
mov byte [edx], 1
mov byte [0x53c04e], 1
test eax, eax
je 0x44b3b7
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
pop edi
pop esi
pop ebp
mov ecx, dword [esp + 0xc10]
pop ebx
xor ecx, esp
xor al, al
call fcn.004b6da3
add esp, 0xc10
ret