Function at 0x44b520
Capabilities:
Check mutex on windows
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x42c
mov eax, dword [0x52e144]
xor eax, esp
mov dword [esp + 0x428], eax
mov ecx, dword [0x53ca00]
inc ecx
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
push ebx
add eax, eax
mov dword [0x53ca00], ecx
sub ecx, eax
push esi
xor ebx, ebx
push edi
cmp ecx, 9
jne 0x44c5aa
mov esi, dword [sym.imp.KERNEL32.dll_GetLastError]
or edi, 0xffffffff
cmp byte [0x54a134], bl
jne 0x44b98f
cmp dword [0x52b3e0], edi
jne 0x44b63a
push ebx
push 0x51d694
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3e0], eax
cmp eax, edi
jne 0x44b5b9
call esi
cmp eax, 5
jne 0x44b63a
mov eax, dword [0x52b3e0]
cmp eax, edi
je 0x44b5c0
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d680
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb79290
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3dc], edi
jne 0x44b6f8
push ebx
push 0x51d658
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3dc], eax
cmp eax, edi
jne 0x44b678
call esi
cmp eax, 5
jne 0x44b6f8
mov eax, dword [0x52b3dc]
cmp eax, edi
je 0x44b67f
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d644
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb79291
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3d8], edi
jne 0x44b7b7
push ebx
push 0x51d634
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3d8], eax
cmp eax, edi
jne 0x44b736
call esi
cmp eax, 5
jne 0x44b7b7
mov eax, dword [0x52b3d8]
cmp eax, edi
je 0x44b73d
push eax
call dword [0x5385f4]
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d620
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d668
push ebx
push 0xb79292
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp byte [0x53c046], bl
jne 0x44b7fb
cmp byte [0x53c047], bl
jne 0x44b7fb
cmp byte [0x53c040], bl
jne 0x44b7fb
cmp byte [0x53c042], bl
jne 0x44b7fb
cmp byte [0x53c043], bl
jne 0x44b7fb
cmp byte [0x53c044], bl
jne 0x44b7fb
cmp byte [0x53c045], bl
jne 0x44b7fb
cmp byte [0x53c04a], bl
je 0x44b8ba
cmp dword [0x52b3d4], edi
jne 0x44b8ba
push ebx
push 0x51d610
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3d4], eax
cmp eax, edi
jne 0x44b839
call esi
cmp eax, 5
jne 0x44b8ba
mov eax, dword [0x52b3d4]
cmp eax, edi
je 0x44b840
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d5fc
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb79293
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3d0], edi
jne 0x44c5aa
push ebx
push 0x51d5ec
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3d0], eax
cmp eax, edi
jne 0x44b8f8
call esi
cmp eax, 5
jne 0x44c5aa
mov eax, dword [0x52b3d0]
cmp eax, edi
je 0x44b8ff
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d5d4
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb79294
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
jne 0x44c5aa
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x428]
xor ecx, esp
call fcn.004b6da3
mov esp, ebp
pop ebp
ret
cmp dword [0x52b3e0], edi
jne 0x44ba4e
push ebx
push 0x51d5c4
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3e0], eax
cmp eax, edi
jne 0x44b9cd
call esi
cmp eax, 5
jne 0x44ba4e
mov eax, dword [0x52b3e0]
cmp eax, edi
je 0x44b9d4
push eax
call dword [0x5385f4]
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d5b0
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d668
push ebx
push 0xb79295
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3dc], edi
jne 0x44baaa
push ebx
push 0x51d5a0
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3dc], eax
cmp eax, edi
jne 0x44ba84
call esi
cmp eax, 5
jne 0x44baaa
mov eax, dword [0x52b3dc]
cmp eax, edi
je 0x44ba8b
push eax
call dword [0x5385f4]
push 0x51d58c
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov byte [0x53c035], 1
cmp dword [0x52b3d8], edi
jne 0x44bb06
push ebx
push 0x51d57c
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3d8], eax
cmp eax, edi
jne 0x44bae0
call esi
cmp eax, 5
jne 0x44bb06
mov eax, dword [0x52b3d8]
cmp eax, edi
je 0x44bae7
push eax
call dword [0x5385f4]
push 0x51d568
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov byte [0x53c035], 1
cmp dword [0x52b3d4], edi
jne 0x44bbc5
push ebx
push 0x51d554
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3d4], eax
cmp eax, edi
jne 0x44bb44
call esi
cmp eax, 5
jne 0x44bbc5
mov eax, dword [0x52b3d4]
cmp eax, edi
je 0x44bb4b
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d53c
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb79296
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3cc], edi
jne 0x44bc83
push ebx
push 0x51d52c
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3cc], eax
cmp eax, edi
jne 0x44bc03
call esi
cmp eax, 5
jne 0x44bc83
mov eax, dword [0x52b3cc]
cmp eax, edi
je 0x44bc0a
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d51c
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb79297
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3c8], edi
jne 0x44bd42
push ebx
push 0x51d50c
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3c8], eax
cmp eax, edi
jne 0x44bcc1
call esi
cmp eax, 5
jne 0x44bd42
mov eax, dword [0x52b3c8]
cmp eax, edi
je 0x44bcc8
push eax
call dword [0x5385f4]
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d4f8
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d668
push ebx
push 0xb79298
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3d0], edi
jne 0x44be01
push ebx
push 0x51d4e8
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3d0], eax
cmp eax, edi
jne 0x44bd80
call esi
cmp eax, 5
jne 0x44be01
mov eax, dword [0x52b3d0]
cmp eax, edi
je 0x44bd87
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d5d4
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb79299
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x1b
call fcn.0040a8e0
add esp, 4
test eax, eax
jne 0x44bed1
cmp dword [0x52b3c4], edi
jne 0x44bed1
push ebx
push 0x51d4d8
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3c4], eax
cmp eax, edi
jne 0x44be51
call esi
cmp eax, 5
jne 0x44bed1
mov eax, dword [0x52b3c4]
cmp eax, edi
je 0x44be58
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d4c4
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb7929a
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp byte [0x53c042], bl
jne 0x44bef5
cmp byte [0x53c043], bl
jne 0x44bef5
cmp byte [0x53c044], bl
jne 0x44bef5
cmp byte [0x53c045], bl
je 0x44c07f
cmp dword [0x52b3c0], edi
jne 0x44bfb4
push ebx
push 0x51d610
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3c0], eax
cmp eax, edi
jne 0x44bf33
call esi
cmp eax, 5
jne 0x44bfb4
mov eax, dword [0x52b3c0]
cmp eax, edi
je 0x44bf3a
push eax
call dword [0x5385f4]
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d5fc
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d668
push ebx
push 0xb7929b
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp byte [0x53c044], bl
je 0x44c07f
cmp dword [0x52b3bc], edi
jne 0x44c07f
push ebx
push 0x51d4b0
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3bc], eax
cmp eax, edi
jne 0x44bffe
call esi
cmp eax, 5
jne 0x44c07f
mov eax, dword [0x52b3bc]
cmp eax, edi
je 0x44c005
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d498
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb7929c
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3b8], edi
jne 0x44c13d
push ebx
push 0x51d484
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3b8], eax
cmp eax, edi
jne 0x44c0bd
call esi
cmp eax, 5
jne 0x44c13d
mov eax, dword [0x52b3b8]
cmp eax, edi
je 0x44c0c4
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d46c
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb7929d
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3b4], edi
jne 0x44c1fc
push ebx
push 0x51d45c
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3b4], eax
cmp eax, edi
jne 0x44c17b
call esi
cmp eax, 5
jne 0x44c1fc
mov eax, dword [0x52b3b4]
cmp eax, edi
je 0x44c182
push eax
call dword [0x5385f4]
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d440
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d668
push ebx
push 0xb7929e
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3b0], edi
jne 0x44c2bb
push ebx
push 0x51d430
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3b0], eax
cmp eax, edi
jne 0x44c23a
call esi
cmp eax, 5
jne 0x44c2bb
mov eax, dword [0x52b3b0]
cmp eax, edi
je 0x44c241
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d418
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb7929f
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3ac], edi
jne 0x44c379
push ebx
push 0x51d408
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3ac], eax
cmp eax, edi
jne 0x44c2f9
call esi
cmp eax, 5
jne 0x44c379
mov eax, dword [0x52b3ac]
cmp eax, edi
je 0x44c300
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d3e8
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb792a0
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3a8], edi
jne 0x44c438
push ebx
push 0x51d3d8
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3a8], eax
cmp eax, edi
jne 0x44c3b7
call esi
cmp eax, 5
jne 0x44c438
mov eax, dword [0x52b3a8]
cmp eax, edi
je 0x44c3be
push eax
call dword [0x5385f4]
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d3b8
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d668
push ebx
push 0xb792a1
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x538380], ebx
jne 0x44c503
cmp dword [0x52b3a4], edi
jne 0x44c503
push ebx
push 0x51d3a4
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3a4], eax
cmp eax, edi
jne 0x44c482
call esi
cmp eax, 5
jne 0x44c503
mov eax, dword [0x52b3a4]
cmp eax, edi
je 0x44c489
push eax
call dword [0x5385f4]
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d388
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d668
push ebx
push 0xb792a2
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x52b3a0], edi
jne 0x44c5aa
push ebx
push 0x51d36c
call fcn.00404690
add esp, 4
push eax
call dword [0x5385f0]
mov dword [0x52b3a0], eax
cmp eax, edi
jne 0x44c53d
call esi
cmp eax, 5
jne 0x44c5aa
mov eax, dword [0x52b3a0]
cmp eax, edi
je 0x44c544
push eax
call dword [0x5385f4]
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d34c
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d668
push ebx
push 0xb792a3
jmp 0x44b960
push 0x51d334
call fcn.00404690
mov edi, dword [sym.imp.KERNEL32.dll_OpenEventA]
add esp, 4
push eax
push ebx
push 0x100000
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp eax, ebx
je 0x44c64d
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d320
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792a4
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d2f8
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp dword [0x537f24], ebx
jne 0x44c6f0
cmp eax, ebx
je 0x44c6f0
push eax
call esi
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d2e8
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d310
push ebx
push 0xb792a5
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d2cc
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44c786
push eax
call esi
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d2bc
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d310
push ebx
push 0xb792a6
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d2a0
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44c81d
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d290
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792a7
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d274
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44c8b4
push eax
call esi
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d264
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d310
push ebx
push 0xb792a8
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d250
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44c94a
push eax
call esi
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d23c
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d310
push ebx
push 0xb792a9
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d228
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44c9e1
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d214
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792aa
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51c688
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44ca84
push eax
call esi
cmp byte [0x53cee1], bl
jne 0x44ca84
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51c688
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d310
push ebx
push 0xb792ab
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d1ec
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cb1a
push eax
call esi
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d1d8
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d310
push ebx
push 0xb792ac
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d1cc
call fcn.00404690
mov edi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cbb7
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d1bc
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792ac
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d1ac
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cc4e
push eax
call esi
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d19c
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d310
push ebx
push 0xb792ad
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d190
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cce4
push eax
call esi
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d17c
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d310
push ebx
push 0xb792ae
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d168
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cd7b
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d154
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792af
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d13c
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44ce2b
push eax
call esi
push 0x51d154
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
push 0x1ff
lea ecx, [esp + 0x41]
push ebx
push ecx
mov byte [esp + 0x48], bl
call fcn.004b6dc0
push 0x51d154
call fcn.00404690
push eax
lea edx, [esp + 0x50]
push edx
call fcn.004b79a8
lea eax, [esp + 0x54]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x2c
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d310
push ebx
push 0xb792b0
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d12c
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cec1
push eax
call esi
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d118
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d310
push ebx
push 0xb792b1
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d108
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cf58
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d0f4
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792b2
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d0e0
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44cfef
push eax
call esi
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d0c8
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d310
push ebx
push 0xb792b3
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d0b4
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44d085
push eax
call esi
push 0x1ff
lea eax, [esp + 0x35]
push ebx
push eax
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d0a0
call fcn.00404690
push eax
lea ecx, [esp + 0x44]
push ecx
call fcn.004b79a8
lea edx, [esp + 0x48]
push edx
push 0x527e20
call fcn.00401350
mov eax, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x40]
push ecx
push 0x51d310
push ebx
push 0xb792b4
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d08c
call fcn.00404690
add esp, 4
push eax
push ebx
push 0x100000
call edi
cmp eax, ebx
je 0x44d11c
push eax
call esi
push 0x1ff
lea edx, [esp + 0x35]
push ebx
push edx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d08c
call fcn.00404690
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004b79a8
lea ecx, [esp + 0x48]
push ecx
push 0x527e20
call fcn.00401350
mov edx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x40]
push eax
push 0x51d310
push ebx
push 0xb792b5
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
push 0x51d070
call fcn.00404690
add esp, 4
push eax
push ebx
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
cmp eax, ebx
je 0x44d1b4
push eax
call esi
push 0x1ff
lea ecx, [esp + 0x35]
push ebx
push ecx
mov byte [esp + 0x3c], bl
call fcn.004b6dc0
push 0x51d060
call fcn.00404690
push eax
lea edx, [esp + 0x44]
push edx
call fcn.004b79a8
lea eax, [esp + 0x48]
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x527d88]
add esp, 0x20
push ebx
push ebx
push ecx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea edx, [esp + 0x40]
push edx
push 0x51d04c
push ebx
push 0xb792b6
push 2
push 2
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
cmp dword [0x537c5c], 0x17c
je 0x44d231
mov ecx, dword [0x53ca00]
mov eax, 0x51eb851f
mul ecx
shr edx, 5
imul edx, edx, 0x64
mov eax, ecx
sub eax, edx
cmp eax, 1
jne 0x44d237
call fcn.004b0530
test eax, eax
je 0x44d203
push str.NPGGERR_NPGM_HWMHACK
push 0x138a
call fcn.0040c590
add esp, 8
cmp dword [0x537d78], ebx
je 0x44da12
mov eax, dword [0x53bc5c]
cmp eax, ebx
je 0x44d231
call eax
test eax, eax
je 0x44d231
push 0x51d020
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
mov byte [0x548d81], 1
mov ecx, dword [0x53ca00]
cmp dword [0x537c74], ebx
je 0x44d27c
cmp byte [0x53c04e], bl
je 0x44d261
mov eax, 0xcccccccd
mul ecx
shr edx, 4
lea edx, [edx + edx*4]
add edx, edx
add edx, edx
mov eax, ecx
sub eax, edx
cmp eax, 7
jne 0x44d27c
lea ecx, [esp + 0x17]
push ecx
call fcn.0044b3e0
add esp, 4
test al, al
je 0x44da12
mov ecx, dword [0x53ca00]
mov esi, dword [sym.imp.USER32.dll_EnumWindows]
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea edx, [edx + edx*4]
add edx, edx
mov eax, ecx
sub eax, edx
cmp eax, 3
jne 0x44d2b3
mov eax, dword [0x53c9fc]
inc eax
push eax
push 0x43e670
mov dword [0x53c9fc], eax
call esi
mov ecx, dword [0x53ca00]
cmp dword [0x537c60], ebx
je 0x44d2e4
cmp byte [0x54a134], bl
je 0x44d407
xor edx, edx
mov eax, ecx
div dword [0x52b398]
cmp edx, 2
jne 0x44d2e4
push ebx
push fcn.0043efd0
call esi
mov ecx, dword [0x53ca00]
cmp byte [0x54a134], bl
je 0x44d407
cmp byte [0x527d8d], bl
je 0x44d407
cmp dword [0x5383c4], ebx
jne 0x44d407
mov ecx, dword [0x53c038]
push ebx
call fcn.00409480
test eax, eax
je 0x44d401
lea esp, [esp]
mov ecx, dword [0x53c038]
add ecx, 8
push ecx
call fcn.004ba189
push 0x51d008
call fcn.00404690
mov ecx, dword [0x53c038]
add ecx, 8
push eax
push ecx
call fcn.004b9929
add esp, 0x10
test eax, eax
je 0x44d3ee
mov edx, dword [0x53cfec]
mov eax, dword [0x53cfd4]
mov dword [esp + 0x1c], edx
mov edx, dword [0x53c038]
lea ecx, [esp + 0x18]
push ecx
add edx, 0x10c
mov dword [esp + 0x1c], eax
push edx
lea eax, [esp + 0x28]
push eax
mov ecx, 0x53cfd4
call fcn.0041f7e0
mov ecx, eax
call fcn.004164a0
test al, al
je 0x44d3e8
mov eax, dword [0x53c9f8]
inc eax
mov dword [0x53c9f8], eax
cmp eax, 3
jbe 0x44d3ee
mov eax, dword [0x53c038]
mov edx, dword [eax + 0x10c]
lea ecx, [eax + 8]
push ecx
push edx
push 0x51cfe8
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
push 1
push 4
push 0x639
push 0x8b1
call fcn.00417130
add esp, 0x20
call fcn.00418810
jmp 0x44d3ee
mov dword [0x53c9f8], ebx
mov ecx, dword [0x53c038]
call fcn.004095f0
test eax, eax
jne 0x44d320
mov ecx, dword [0x53ca00]
cmp byte [0x53bc84], bl
je 0x44d739
mov eax, 0xcccccccd
mul ecx
shr edx, 3
lea eax, [edx + edx*4]
add eax, eax
mov edx, ecx
sub edx, eax
cmp edx, 1
jne 0x44d739
cmp dword [0x53bc6c], ebx
je 0x44d608
mov esi, dword [0x53c9f4]
cmp esi, 3
jae 0x44d519
mov edi, dword [0x539710]
xor eax, eax
push 0xff
mov dword [esp + 0x25], eax
mov dword [esp + 0x29], eax
mov dword [esp + 0x2d], eax
mov word [esp + 0x31], ax
mov byte [esp + 0x33], al
mov dword [esp + 0x1d], eax
mov byte [esp + 0x21], al
lea eax, [esp + 0x235]
push ebx
push eax
mov byte [esp + 0x2c], bl
mov byte [esp + 0x24], bl
mov byte [esp + 0x23c], bl
call fcn.004b6dc0
add esp, 0xc
push esi
push 0x51cfd4
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
inc dword [0x53c9f4]
lea ecx, [esp + 0x23c]
push ecx
lea edx, [esp + 0x20]
push edx
push edi
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x3c]
push ecx
call dword [0x53bc6c]
add esp, 0x20
test al, al
je 0x44d602
mov edx, dword [0x548ea4]
push ebx
push ebx
push edx
push 0x51a1a0
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x30]
push eax
lea ecx, [esp + 0x244]
push ecx
lea edx, [esp + 0x30]
push ebx
push edx
call fcn.004b90b0
add esp, 4
push eax
mov eax, dword [esp + 0x30]
push eax
jmp 0x44d5f8
mov eax, 0x51eb851f
mul ecx
shr edx, 5
imul edx, edx, 0x64
mov eax, ecx
sub eax, edx
cmp eax, 1
jne 0x44d608
mov edi, dword [0x539710]
xor eax, eax
push 0xff
lea ecx, [esp + 0x235]
push ebx
push ecx
mov byte [esp + 0x2c], bl
mov dword [esp + 0x2d], eax
mov dword [esp + 0x31], eax
mov dword [esp + 0x35], eax
mov word [esp + 0x39], ax
mov byte [esp + 0x3b], al
mov byte [esp + 0x24], bl
mov dword [esp + 0x25], eax
mov byte [esp + 0x29], al
mov byte [esp + 0x23c], bl
call fcn.004b6dc0
add esp, 0xc
push esi
push 0x51cfd4
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
inc dword [0x53c9f4]
lea edx, [esp + 0x23c]
push edx
lea eax, [esp + 0x20]
push eax
push edi
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x3c]
push edx
call dword [0x53bc6c]
add esp, 0x20
test al, al
je 0x44d602
mov eax, dword [0x548ea4]
push ebx
push ebx
push eax
push 0x51a1a0
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x30]
push ecx
lea edx, [esp + 0x244]
push edx
lea eax, [esp + 0x30]
push ebx
push eax
call fcn.004b90b0
mov ecx, dword [esp + 0x30]
add esp, 4
push eax
push ecx
push 1
call fcn.0043c0b0
add esp, 0x28
mov ecx, dword [0x53ca00]
cmp dword [0x539710], 0x26
je 0x44d621
cmp dword [0x537c6c], 0x17c
je 0x44d739
cmp dword [0x53bc70], ebx
je 0x44d739
mov eax, 0x88888889
mul ecx
shr edx, 5
mov eax, edx
shl eax, 4
sub eax, edx
add eax, eax
add eax, eax
mov edx, ecx
sub edx, eax
cmp edx, 1
jne 0x44d739
push 0x51cfc4
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
push 0xff
lea eax, [esp + 0x241]
push ebx
push eax
mov byte [esp + 0x248], bl
call fcn.004b6dc0
push 0xff
lea ecx, [esp + 0x4d]
push ebx
push ecx
mov byte [esp + 0x54], bl
call fcn.004b6dc0
mov eax, dword [0x539710]
lea edx, [esp + 0x34]
push edx
lea ecx, [esp + 0x48]
push ecx
lea edx, [esp + 0x5c]
push edx
lea ecx, [esp + 0x260]
push ecx
lea edx, [esp + 0x4c]
push edx
push eax
call dword [0x53bc70]
add esp, 0x3c
test al, al
je 0x44d71b
mov eax, dword [0x548ea4]
push ebx
push ebx
push eax
push 0x51a1a0
call fcn.00404690
add esp, 4
push eax
mov eax, dword [esp + 0x20]
lea ecx, [esp + 0x240]
push ecx
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x44]
push edx
mov edx, dword [esp + 0x30]
push eax
push ecx
push edx
push 1
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
jne 0x44d71b
push 1
push 0xb
push 0x62f
push 0x8b1
call fcn.00417130
add esp, 0x10
push 0x51cfb0
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
mov ecx, dword [0x53ca00]
add esp, 0xc
cmp dword [0x537d38], 0x1f53
jne 0x44d928
push 0x1ff
lea eax, [esp + 0x235]
push ebx
push eax
mov byte [esp + 0x23c], bl
call fcn.004b6dc0
push 0x103
lea ecx, [esp + 0x41]
push ebx
push ecx
mov byte [esp + 0x48], bl
call fcn.004b6dc0
push 0x51cfa0
call fcn.00404690
push eax
call fcn.00494950
mov esi, eax
add esp, 0x20
cmp esi, ebx
je 0x44d8a9
push 0x104
lea edx, [esp + 0x34]
push edx
push esi
call fcn.00494a40
add esp, 0xc
cmp eax, ebx
jne 0x44d84d
lea eax, [esp + 0x30]
push 0x5c
push eax
call fcn.004b9510
add esp, 8
push eax
push 0x51cf90
call fcn.00404690
add esp, 4
push eax
call fcn.004bab59
add esp, 8
test eax, eax
je 0x44d8a9
push 0x51cf74
call fcn.00404690
push eax
lea ecx, [esp + 0x238]
push ecx
call fcn.004b79a8
mov edx, dword [0x527d88]
add esp, 0xc
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x240]
push eax
push 0x51cf6c
push ebx
push 0xc70025
push 2
push 1
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
jne 0x44d8a9
mov al, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x428]
xor ecx, esp
call fcn.004b6da3
mov esp, ebp
pop ebp
ret
cmp eax, 2
jne 0x44d8a9
push 0x51cf50
call fcn.00404690
push eax
lea ecx, [esp + 0x238]
push ecx
call fcn.004b79a8
mov edx, dword [0x527d88]
add esp, 0xc
push ebx
push ebx
push edx
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea eax, [esp + 0x240]
push eax
push 0x51cf6c
push ebx
push 0xc7027d
push 2
push 1
call fcn.0043c0b0
push esi
call fcn.0042a3b0
add esp, 0x2c
lea ecx, [esp + 0x10]
push ebx
push ecx
mov dword [esp + 0x18], ebx
call fcn.0042a8c0
add esp, 8
cmp eax, 1
jne 0x44d922
cmp dword [esp + 0x10], eax
jne 0x44d922
push 0x51cf34
call fcn.00404690
push eax
lea edx, [esp + 0x238]
push edx
call fcn.004b79a8
mov eax, dword [0x527d88]
add esp, 0xc
push ebx
push ebx
push eax
push 0x50d930
call fcn.00404690
add esp, 4
push eax
lea ecx, [esp + 0x240]
push ecx
push 0x51cf6c
push ebx
push 0xc6fd69
push 2
push 6
call fcn.0043c0b0
add esp, 0x28
cmp dword [0x537d78], ebx
je 0x44b978
mov ecx, dword [0x53ca00]
test cl, 3
jne 0x44da12
call fcn.00440a20
mov ecx, dword [0x53ca00]
test cl, 3
jne 0x44da12
cmp byte [0x53bc84], bl
je 0x44d9cd
cmp dword [0x53bc80], ebx
je 0x44d9cd
cmp dword [0x537c70], ebx
je 0x44d9cd
xor esi, esi
cmp byte [esi + 0x539708], bl
je 0x44d9bc
mov edx, dword [esi + 0x539714]
push 0x440650
push edx
call dword [0x53bc80]
add esp, 8
cmp eax, 1
jne 0x44d988
push eax
jmp 0x44d9a1
cmp eax, 2
jne 0x44d990
push eax
jmp 0x44d9a1
cmp eax, 0x19
jne 0x44d998
push eax
jmp 0x44d9a1
lea ecx, [eax - 4]
cmp ecx, 3
ja 0x44d9bc
push eax
push 0x51cf20
call fcn.00404690
add esp, 4
push eax
push 0x527e20
call fcn.00401350
add esp, 0xc
add esi, 0x6c
cmp esi, 0x1518
jb 0x44d963
mov ecx, dword [0x53ca00]
test cl, 3
jne 0x44da12
cmp dword [0x537c0c], 3
jne 0x44da12
push 0x51cf10
call fcn.00404690
push eax
call fcn.00494950
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x44da12
push 0x51ceec
call fcn.00404690
push eax
push 0x527e20
call fcn.00401350
push esi
call fcn.00491be0
add esp, 0x10
mov ecx, dword [esp + 0x434]
pop edi
pop esi
pop ebx
xor ecx, esp
xor al, al
call fcn.004b6da3
mov esp, ebp
pop ebp
ret