Function at 0x449438
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffb34
push ebx
push esi
push edi
mov esi, eax
lea ebx, [ebp - 0x250]
lea edi, [ebp - 0x90]
mov eax, 0x691f4c
call fcn.00650394
mov dword [esi + 0x2440], 1
mov word [ebx + 0x10], 0xc
mov edx, str.doOfflineLogin_
lea eax, [ebp - 0xc]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x18
xor ecx, ecx
mov edx, 0x6819a0
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
inc dword [ebx + 0x1c]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, 0x68199b
mov ecx, dword [eax]
lea eax, [ebp - 0x10]
push ecx
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
pop ecx
call fcn.0042133c
lea eax, [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x1c], edx
lea edx, [ebp - 0x1c]
inc dword [ebx + 0x1c]
call fcn.0065fdd4
lea edx, [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x20]
inc dword [ebx + 0x1c]
lea eax, [esi + 0x4cc]
call fcn.0065fbec
lea edx, [ebp - 0x20]
lea eax, [esi + 0x4c0]
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x24
xor ecx, ecx
mov edx, 0x6819ab
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x2c]
push ecx
lea eax, [ebp - 0x28]
inc dword [ebx + 0x1c]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, 0x6819a6
mov ecx, dword [eax]
lea eax, [ebp - 0x24]
push ecx
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
pop ecx
call fcn.0042133c
lea eax, [ebp - 0x2c]
xor edx, edx
mov dword [ebp - 0x30], edx
lea edx, [ebp - 0x30]
inc dword [ebx + 0x1c]
call fcn.0065fdd4
lea edx, [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0x34]
inc dword [ebx + 0x1c]
lea eax, [esi + 0x4d0]
call fcn.0065fbec
lea edx, [ebp - 0x34]
lea eax, [esi + 0x4c4]
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0065fb9c
lea edx, [esi + 0x4c0]
lea eax, [esi + 0x4e0]
call fcn.0065fbc4
mov word [ebx + 0x10], 0x3c
lea eax, [esi + 0x584]
lea edx, [ebp - 4]
mov ecx, edx
xor edx, edx
xchg ecx, eax
xchg ecx, edx
call fcn.0065de84
inc dword [ebx + 0x1c]
lea edx, [ebp - 8]
inc dword [ebx + 0x1c]
mov ecx, edx
lea eax, [esi + 0x588]
xor edx, edx
xchg ecx, eax
mov word [ebx + 0x10], 0x30
xchg ecx, edx
mov word [ebx + 0x10], 0x48
call fcn.0065de84
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0x30
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0x5c]
lea eax, [esi + 0x4f8]
cmp dword [eax], 0
jne 0x4496a1
mov edx, 0x6819b2
jmp 0x4496a3
mov edx, dword [eax]
push edx
cmp dword [ebp - 4], 0
jne 0x4496b1
mov eax, 0x6819b1
jmp 0x4496b4
mov eax, dword [ebp - 4]
push eax
mov edx, dword [esi + 0x4e8]
call dword [edx + 0x58]
mov dword [ebp - 0x254], eax
xor ecx, ecx
mov word [ebx + 0x10], 0x54
mov dword [ebp - 0x38], ecx
add esp, 8
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x254]
call fcn.004bdbe8
lea edx, [ebp - 0x38]
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x3c]
inc dword [ebx + 0x1c]
mov eax, 0x6819b3
call fcn.0065ff98
lea edx, [ebp - 0x3c]
mov eax, esi
mov edx, dword [edx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0065fb9c
cmp dword [ebp - 0x254], 0
je 0x449b76
mov ecx, dword [ebp - 0x254]
cmp ecx, 0x1fa5
jg 0x449761
je 0x449859
sub ecx, 0xfffffffc
je 0x449798
dec ecx
je 0x44977a
sub ecx, 0x1f44
je 0x449859
jmp 0x4498d2
sub ecx, 0x2009
je 0x449859
sub ecx, 0x31f
je 0x4497b6
jmp 0x4498d2
push 0x40
push 0x681a22
push 0x6819d4
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
jmp 0x44d6aa
push 0x40
push 0x681a7a
push 0x681a2c
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
jmp 0x44d6aa
push 0x40
push 0x681a90
mov word [ebx + 0x10], 0x60
xor edx, edx
mov dword [ebp - 0x44], edx
lea ecx, [ebp - 0x44]
inc dword [ebx + 0x1c]
lea edx, [esi + 0x4b0]
mov eax, 0x681a84
call fcn.0065ff98
lea ecx, [ebp - 0x44]
push ecx
mov edx, 0x681a8d
lea eax, [ebp - 0x48]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x4c], eax
lea edx, [ebp - 0x48]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x4c]
pop eax
call fcn.0065fbec
cmp dword [ebp - 0x4c], 0
je 0x449811
mov edx, dword [ebp - 0x4c]
jmp 0x449816
mov edx, 0x681a9a
push edx
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0065fb9c
jmp 0x44d6aa
push 0x40
push 0x681ae8
mov word [ebx + 0x10], 0x6c
mov edx, 0x681a9c
lea eax, [ebp - 0x50]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x54], eax
lea eax, [esi + 0x4b0]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x54]
call fcn.0065fbec
cmp dword [ebp - 0x54], 0
je 0x44989a
mov edx, dword [ebp - 0x54]
jmp 0x44989f
mov edx, 0x681af2
push edx
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0065fb9c
jmp 0x44d6aa
mov word [ebx + 0x10], 0x84
mov edx, 0x681af4
lea eax, [ebp - 0x40]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0x78
mov ecx, dword [esi + 0x4e8]
cmp dword [ecx + 0x84], 0
je 0x449b31
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0x84]
mov dword [ebp - 0x258], eax
mov eax, dword [esi + 0x4e8]
call dword [eax + 0x84]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jl 0x449a57
mov word [ebx + 0x10], 0x90
xor edx, edx
mov dword [ebp - 0x5c], edx
lea edx, [ebp - 0x5c]
inc dword [ebx + 0x1c]
mov eax, dword [ebp - 0x258]
call fcn.004bdbe8
lea edx, [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x60]
inc dword [ebx + 0x1c]
mov eax, 0x681af5
call fcn.0065ff98
lea edx, [ebp - 0x60]
push edx
mov edx, 0x681b02
lea eax, [ebp - 0x64]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x68], eax
lea edx, [ebp - 0x64]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x68]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x68]
mov eax, dword [esi + 0x448]
mov edx, dword [edx]
call fcn.005507b8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x9c
mov edx, 0x681b05
lea eax, [ebp - 0x6c]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x6c]
lea eax, [ebp - 0x40]
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0xb4
xor ecx, ecx
mov dword [ebp - 0x58], ecx
lea edx, [ebp - 0x58]
inc dword [ebx + 0x1c]
mov eax, dword [esi + 0x448]
call fcn.00550780
mov word [ebx + 0x10], 0xa8
lea edx, [ebp - 0x58]
lea eax, [ebp - 0x40]
call fcn.0065fbd8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x78
jmp 0x449b24
cmp dword [ebp - 0x258], 0
jne 0x449b24
mov word [ebx + 0x10], 0xc0
xor ecx, ecx
mov dword [ebp - 0x70], ecx
lea ecx, [ebp - 0x70]
inc dword [ebx + 0x1c]
lea edx, [esi + 0x4b0]
mov eax, 0x681b39
call fcn.0065ff98
lea ecx, [ebp - 0x70]
push ecx
mov edx, 0x681b3e
lea eax, [ebp - 0x74]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
xor eax, eax
mov dword [ebp - 0x78], eax
lea edx, [ebp - 0x74]
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x78]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x78]
mov eax, dword [esi + 0x448]
mov edx, dword [edx]
call fcn.005507b8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0xcc
xor ecx, ecx
mov dword [ebp - 0x7c], ecx
lea edx, [ebp - 0x7c]
inc dword [ebx + 0x1c]
mov eax, dword [esi + 0x448]
call fcn.00550780
lea edx, [ebp - 0x7c]
lea eax, [ebp - 0x40]
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0065fb9c
mov dl, 1
mov eax, dword [esi + 0x448]
call fcn.005506a0
push 0x40
push 0x681b6c
cmp dword [ebp - 0x40], 0
je 0x449b43
mov ecx, dword [ebp - 0x40]
jmp 0x449b48
mov ecx, 0x681b76
push ecx
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0065fb9c
jmp 0x44d6aa
mov ecx, dword [esi + 0x4e8]
cmp dword [ecx + 0xc8], 0
je 0x449d2b
mov ecx, dword [esi + 0x4e8]
cmp dword [ecx + 0xc4], 0
je 0x449d2b
mov eax, dword [esi + 0x4e8]
call dword [eax + 0xc8]
test eax, eax
je 0x449d2b
mov edx, dword [esi + 0x4e8]
call dword [edx + 0xc4]
test eax, eax
jne 0x449cf6
mov word [ebx + 0x10], 0xd8
mov edx, 0x681b78
lea eax, [ebp - 0x9c]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0xe4
lea ecx, [esi + 0x4f8]
mov dword [ebp - 0x260], ecx
mov ecx, dword [ebp - 0x260]
cmp dword [ecx], 0
jne 0x449c1d
mov eax, 0x681b90
jmp 0x449c25
mov edx, dword [ebp - 0x260]
mov eax, dword [edx]
mov dword [ebp - 0x264], eax
lea eax, [ebp - 0xa0]
xor ecx, ecx
mov edx, dword [ebp - 0x264]
call fcn.0065ddb4
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xa0]
inc dword [ebx + 0x1c]
mov eax, dword [ecx]
push eax
cmp dword [ebp - 4], 0
jne 0x449c5a
mov edx, 0x681b8f
jmp 0x449c5d
mov edx, dword [ebp - 4]
mov dword [ebp - 0x25c], edx
lea eax, [ebp - 0xa4]
xor ecx, ecx
mov edx, dword [ebp - 0x25c]
call fcn.0065ddb4
inc dword [ebx + 0x1c]
lea eax, [ebp - 0xa4]
inc dword [ebx + 0x1c]
mov ecx, dword [eax]
push ecx
push esi
call fcn.00464720
add esp, 0xc
test al, al
sete cl
and ecx, 1
lea eax, [ebp - 0xa4]
push ecx
mov edx, 2
sub dword [ebx + 0x1c], 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x449d2b
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0xf0
mov edx, 0x681b91
lea eax, [ebp - 0xa8]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x108
mov edx, 0x681ba8
lea eax, [ebp - 0x80]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x114
push 0x681baa
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xac]
pop ecx
mov dword [ebp - 0x268], eax
lea eax, [ebp - 0xac]
xor ecx, ecx
mov edx, dword [ebp - 0x268]
call fcn.0065ddb4
inc dword [ebx + 0x1c]
lea eax, [ebp - 0xac]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x80]
mov ecx, edx
mov edx, eax
mov eax, ecx
call fcn.0065dfb4
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x120
xor ecx, ecx
mov dword [ebp - 0xb0], ecx
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xb0]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x80]
mov eax, 0x681bb1
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0xb4], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xb4]
call fcn.004765ac
lea ecx, [ebp - 0xb4]
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0065fb9c
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x12c
mov edx, 0x681bb7
lea eax, [ebp - 0x84]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x138
push 0x681bb8
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xac]
pop ecx
mov dword [ebp - 0x26c], eax
lea eax, [ebp - 0xb8]
xor ecx, ecx
mov edx, dword [ebp - 0x26c]
call fcn.0065ddb4
inc dword [ebx + 0x1c]
lea eax, [ebp - 0xb8]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x84]
mov ecx, edx
mov edx, eax
mov eax, ecx
call fcn.0065dfb4
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x144
mov edx, 0x681bbf
lea eax, [ebp - 0x88]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x150
push 0x681bc0
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xac]
pop ecx
mov dword [ebp - 0x270], eax
lea eax, [ebp - 0xbc]
xor ecx, ecx
mov edx, dword [ebp - 0x270]
call fcn.0065ddb4
inc dword [ebx + 0x1c]
lea eax, [ebp - 0xbc]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x88]
mov ecx, edx
mov edx, eax
mov eax, ecx
call fcn.0065dfb4
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x15c
mov edx, 0x681bc7
lea eax, [ebp - 0x8c]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x168
push 0x681bc8
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xac]
pop ecx
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0xc0]
xor ecx, ecx
mov edx, dword [ebp - 0x274]
call fcn.0065ddb4
inc dword [ebx + 0x1c]
lea eax, [ebp - 0xc0]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x8c]
mov ecx, edx
mov edx, eax
mov eax, ecx
call fcn.0065dfb4
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x174
xor ecx, ecx
mov dword [ebp - 0xc4], ecx
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xc4]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x8c]
mov eax, 0x681bcf
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0xc8], ecx
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xc8]
call fcn.004765ac
lea ecx, [ebp - 0xc8]
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0065fb9c
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x180
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xf8]
mov edx, edi
xor ecx, ecx
xchg edx, eax
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
xor ecx, ecx
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x18c
mov dword [ebp - 0xcc], ecx
lea ecx, [ebp - 0xcc]
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov edx, edi
mov eax, 0x681bd7
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0xd0], ecx
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0xd0]
call fcn.004765ac
lea ecx, [ebp - 0xd0]
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0065fb9c
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x198
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xa4]
lea edx, [ebp - 0x94]
mov ecx, edx
xor edx, edx
xchg ecx, eax
xchg ecx, edx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
xor ecx, ecx
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x1a4
mov dword [ebp - 0xd4], ecx
lea ecx, [ebp - 0xd4]
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x94]
mov eax, 0x681bee
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0xd8], ecx
lea edx, [ebp - 0xd4]
lea eax, [ebp - 0xd8]
call fcn.004765ac
lea ecx, [ebp - 0xd8]
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0065fb9c
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x1b0
mov edx, 0x681c07
lea eax, [ebp - 0x98]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
mov word [ebx + 0x10], 0xfc
mov byte [ebp - 0x275], 1
mov word [ebx + 0x10], 0x1bc
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0x100]
lea edx, [ebp - 0xdc]
xor ecx, ecx
xchg edx, eax
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0x98]
call fcn.0065dfb4
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x1c8
xor ecx, ecx
mov dword [ebp - 0xe0], ecx
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0xe0]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x98]
mov eax, 0x681c08
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0xe4], ecx
lea edx, [ebp - 0xe0]
lea eax, [ebp - 0xe4]
call fcn.004765ac
lea ecx, [ebp - 0xe4]
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0065fb9c
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x1d4
mov edx, 0x681c22
lea eax, [ebp - 0xe8]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xe8]
lea eax, [ebp - 0x80]
call fcn.0065e010
test al, al
jne 0x44a2b8
cmp dword [ebp - 0x80], 0
je 0x44a2ae
mov ecx, dword [ebp - 0x80]
mov ecx, dword [ecx - 4]
jmp 0x44a2b0
xor ecx, ecx
test ecx, ecx
jle 0x44a2b8
xor eax, eax
jmp 0x44a2bd
mov eax, 1
push eax
lea eax, [ebp - 0xe8]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44a3a9
push 0x40
push 0x681c5c
push 0x681c24
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x1e0
mov edx, 0x681c66
lea eax, [ebp - 0xec]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xec]
lea eax, [ebp - 0x8c]
call fcn.0065e010
test al, al
jne 0x44a3fa
cmp dword [ebp - 0x8c], 0
je 0x44a3f0
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx - 4]
jmp 0x44a3f2
xor ecx, ecx
test ecx, ecx
jle 0x44a3fa
xor eax, eax
jmp 0x44a3ff
mov eax, 1
push eax
lea eax, [ebp - 0xec]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44a4eb
push 0x40
push 0x681ca0
push 0x681c68
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x1ec
mov edx, 0x681caa
lea eax, [ebp - 0xf0]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xf0]
lea eax, [ebp - 0x98]
call fcn.0065e010
test al, al
jne 0x44a53c
cmp dword [ebp - 0x98], 0
je 0x44a532
mov ecx, dword [ebp - 0x98]
mov ecx, dword [ecx - 4]
jmp 0x44a534
xor ecx, ecx
test ecx, ecx
jle 0x44a53c
xor eax, eax
jmp 0x44a541
mov eax, 1
push eax
lea eax, [ebp - 0xf0]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44a62d
push 0x40
push 0x681ce4
push 0x681cac
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x1f8
mov edx, 0x681cee
lea eax, [ebp - 0xf4]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xf4]
lea eax, [ebp - 0x94]
call fcn.0065e010
test al, al
jne 0x44a67e
cmp dword [ebp - 0x94], 0
je 0x44a674
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx - 4]
jmp 0x44a676
xor ecx, ecx
test ecx, ecx
jle 0x44a67e
xor eax, eax
jmp 0x44a683
mov eax, 1
push eax
lea eax, [ebp - 0xf4]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44a76f
push 0x40
push 0x681d28
push 0x681cf0
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x204
mov edx, 0x681d32
lea eax, [ebp - 0xf8]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0xf8]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44a88c
push 0
push 0x681d62
push 0x681d34
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x210
mov edx, 0x681d68
lea eax, [ebp - 0xfc]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0xfc]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0xfc]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44a9a9
push 0
push 0x681d96
push 0x681d6a
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x21c
mov edx, 0x681d9c
lea eax, [ebp - 0x100]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x100]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x100]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44aac6
push 0
push 0x681dca
push 0x681d9e
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x228
mov edx, 0x681dd0
lea eax, [ebp - 0x104]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x104]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x104]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44abde
push 0
push 0x681dfe
push 0x681dd2
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x234
xor ecx, ecx
lea eax, [ebp - 0x108]
mov dword [ebp - 0x108], ecx
mov ecx, 4
inc dword [ebx + 0x1c]
push eax
inc dword [ebx + 0x1c]
mov eax, edi
mov edx, 1
call fcn.0043caf0
lea eax, [ebp - 0x108]
call fcn.0065e2b0
mov word [ebp - 0x278], ax
lea eax, [ebp - 0x108]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x240
xor ecx, ecx
mov eax, edi
mov dword [ebp - 0x10c], ecx
lea ecx, [ebp - 0x10c]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 5
call fcn.0043caf0
lea eax, [ebp - 0x10c]
call fcn.0065e2b0
mov word [ebp - 0x27a], ax
lea eax, [ebp - 0x10c]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x24c
xor ecx, ecx
mov eax, edi
mov dword [ebp - 0x110], ecx
lea ecx, [ebp - 0x110]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 7
call fcn.0043caf0
lea eax, [ebp - 0x110]
call fcn.0065e2b0
mov word [ebp - 0x27c], ax
lea eax, [ebp - 0x110]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x258
xor ecx, ecx
mov eax, edi
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0x114]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 9
call fcn.0043caf0
lea eax, [ebp - 0x114]
call fcn.0065e2b0
mov word [ebp - 0x27e], ax
lea eax, [ebp - 0x114]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x264
xor ecx, ecx
mov eax, edi
mov dword [ebp - 0x118], ecx
lea ecx, [ebp - 0x118]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 0xb
call fcn.0043caf0
lea eax, [ebp - 0x118]
call fcn.0065e2b0
mov word [ebp - 0x280], ax
lea eax, [ebp - 0x118]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x270
xor ecx, ecx
mov eax, edi
mov dword [ebp - 0x11c], ecx
lea ecx, [ebp - 0x11c]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 0xd
call fcn.0043caf0
lea eax, [ebp - 0x11c]
call fcn.0065e2b0
mov word [ebp - 0x282], ax
lea eax, [ebp - 0x11c]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x27c
mov edx, 0x681e04
lea eax, [ebp - 0x120]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x120]
mov eax, edi
call fcn.0065e010
test al, al
jne 0x44aee4
mov edx, 0x681e09
lea eax, [ebp - 0x124]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x124]
mov eax, edi
call fcn.0065e010
test al, al
lea eax, [ebp - 0x124]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebx + 0x1c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x44aee4
mov edx, 0x681e0e
lea eax, [ebp - 0x128]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x128]
mov eax, edi
call fcn.0065e010
test al, al
lea eax, [ebp - 0x128]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebx + 0x1c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x44aee4
movzx ecx, word [ebp - 0x27c]
push ecx
movzx eax, word [ebp - 0x27e]
push eax
movzx edx, word [ebp - 0x280]
push edx
movzx ecx, word [ebp - 0x27a]
movzx edx, word [ebp - 0x278]
mov eax, esi
call fcn.004501a0
test al, al
je 0x44aee4
xor ecx, ecx
jmp 0x44aee9
mov ecx, 1
push ecx
lea eax, [ebp - 0x120]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44b02c
push 0x681e13
mov eax, dword [esi + 0x4e8]
call dword [eax + 0xf0]
pop ecx
cmp al, 1
jne 0x44af5e
mov word [ebx + 0x10], 0x288
mov edx, 0x681e15
lea eax, [ebp - 0x12c]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.0065fb9c
mov byte [ebp - 0x275], 0
jmp 0x44b02c
push 0x40
push 0x681e4e
push 0x681e32
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
lea edx, [ebp - 0x98]
mov eax, edi
call fcn.0065e040
test al, al
je 0x44b166
push 0x681e58
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xf0]
pop ecx
cmp al, 1
jne 0x44b098
mov word [ebx + 0x10], 0x294
mov edx, 0x681e5a
lea eax, [ebp - 0x130]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.0065fb9c
mov byte [ebp - 0x275], 0
jmp 0x44b166
push 0x40
push 0x681e94
push 0x681e78
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x2a0
mov edx, 0x681e9e
lea eax, [ebp - 0x134]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x134]
lea eax, [ebp - 0x94]
call fcn.0065e028
push eax
lea eax, [ebp - 0x134]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44b2ed
lea edx, [ebp - 0x94]
mov eax, edi
call fcn.0065e040
test al, al
je 0x44b2ed
push 0x681ead
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xf0]
pop ecx
cmp al, 1
jne 0x44b21f
mov word [ebx + 0x10], 0x2ac
mov edx, 0x681eaf
lea eax, [ebp - 0x138]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.0065fb9c
mov byte [ebp - 0x275], 0
jmp 0x44b2ed
push 0x40
push 0x681ee8
push 0x681ecc
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
cmp byte [ebp - 0x275], 0
jne 0x44b537
mov word [ebx + 0x10], 0x2b8
mov edx, 0x681ef2
lea eax, [ebp - 0x13c]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x13c]
push ecx
call fcn.004c01b8
fstp qword [ebp - 0x28c]
lea eax, [ebp - 0x28c]
xor edx, edx
mov dword [ebp - 0x140], edx
lea ecx, [ebp - 0x140]
inc dword [ebx + 0x1c]
pop edx
call fcn.0065f8a4
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x144]
xor ecx, ecx
call fcn.0065de84
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x144]
mov eax, edi
call fcn.0065dfb4
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x2c4
xor ecx, ecx
mov dword [ebp - 0x148], ecx
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x148]
inc dword [ebx + 0x1c]
mov edx, edi
mov eax, 0x681f01
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0x14c], ecx
lea edx, [ebp - 0x148]
lea eax, [ebp - 0x14c]
call fcn.004765ac
lea ecx, [ebp - 0x14c]
mov eax, esi
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0065fb9c
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
lea edx, [ebp - 0x98]
mov eax, edi
call fcn.0065e040
test al, al
je 0x44b65c
mov word [ebx + 0x10], 0x2d0
mov edx, 0x681f0b
lea eax, [ebp - 0x150]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
push 0
push 0x681f46
push 0x681f1e
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
push 0x681f4c
mov ecx, dword [esi + 0x4e8]
call dword [ecx + 0xf0]
pop ecx
cmp al, 1
jne 0x44b58e
mov word [ebx + 0x10], 0x2dc
mov edx, 0x681f4e
lea eax, [ebp - 0x154]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0065fb9c
mov byte [ebp - 0x275], 1
jmp 0x44b65c
push 0x40
push 0x681f88
push 0x681f6c
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
xor ecx, ecx
lea eax, [ebp - 0x160]
mov dword [ebp - 0x160], ecx
mov ecx, 2
inc dword [ebx + 0x1c]
push eax
inc dword [ebx + 0x1c]
mov eax, edi
mov edx, 7
call fcn.0043caf0
lea eax, [ebp - 0x160]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x164], edx
lea ecx, [ebp - 0x164]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 9
mov eax, edi
call fcn.0043caf0
lea eax, [ebp - 0x164]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x168], edx
lea ecx, [ebp - 0x168]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 0xb
mov eax, edi
call fcn.0043caf0
lea eax, [ebp - 0x168]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x16c], edx
lea ecx, [ebp - 0x16c]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 0xd
mov eax, edi
call fcn.0043caf0
lea eax, [ebp - 0x16c]
call fcn.0065e2b0
push eax
push 0
xor edx, edx
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x15c], edx
mov edx, 5
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov eax, edi
call fcn.0043caf0
lea eax, [ebp - 0x15c]
call fcn.0065e2b0
push eax
xor edx, edx
mov word [ebx + 0x10], 0x2e8
mov dword [ebp - 0x158], edx
lea ecx, [ebp - 0x158]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 4
mov edx, 1
mov eax, edi
call fcn.0043caf0
lea eax, [ebp - 0x158]
call fcn.0065e2b0
mov edx, eax
lea eax, [ebp - 0x294]
pop ecx
call fcn.0065f838
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x164]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x160]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
cmp dword [ebp - 0x94], 0
je 0x44b82f
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx - 4]
jmp 0x44b831
xor ecx, ecx
test ecx, ecx
jg 0x44b844
mov edx, edi
lea eax, [ebp - 0x94]
call fcn.0065dfb4
jmp 0x44b89a
mov word [ebx + 0x10], 0x2f4
mov edx, 0x681f92
lea eax, [ebp - 0x170]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x170]
lea eax, [ebp - 0x94]
call fcn.0065e010
push eax
lea eax, [ebp - 0x170]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44b89a
mov edx, edi
lea eax, [ebp - 0x94]
call fcn.0065dfb4
xor ecx, ecx
lea eax, [ebp - 0x94]
mov dword [ebp - 0x17c], ecx
lea ecx, [ebp - 0x17c]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 7
call fcn.0043caf0
lea eax, [ebp - 0x17c]
call fcn.0065e2b0
push eax
xor ecx, ecx
mov dword [ebp - 0x180], ecx
lea eax, [ebp - 0x180]
inc dword [ebx + 0x1c]
push eax
inc dword [ebx + 0x1c]
lea eax, [ebp - 0x94]
mov ecx, 2
mov edx, 9
call fcn.0043caf0
lea eax, [ebp - 0x180]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x184], edx
lea ecx, [ebp - 0x184]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 0xb
lea eax, [ebp - 0x94]
call fcn.0043caf0
lea eax, [ebp - 0x184]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x188], edx
lea ecx, [ebp - 0x188]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
mov edx, 0xd
lea eax, [ebp - 0x94]
call fcn.0043caf0
lea eax, [ebp - 0x188]
call fcn.0065e2b0
push eax
push 0
xor edx, edx
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x178], edx
mov edx, 5
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 2
lea eax, [ebp - 0x94]
call fcn.0043caf0
lea eax, [ebp - 0x178]
call fcn.0065e2b0
push eax
xor edx, edx
mov word [ebx + 0x10], 0x300
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x174]
inc dword [ebx + 0x1c]
push ecx
inc dword [ebx + 0x1c]
mov ecx, 4
mov edx, 1
lea eax, [ebp - 0x94]
call fcn.0043caf0
lea eax, [ebp - 0x174]
call fcn.0065e2b0
mov edx, eax
lea eax, [ebp - 0x29c]
pop ecx
call fcn.0065f838
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x174]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0xfc
fld qword [ebp - 0x294]
fsub qword [ebp - 0x29c]
fmul dword [0x44d6dc]
fmul dword [0x44d6e0]
fstp qword [ebp - 0x2a4]
mov word [ebx + 0x10], 0x30c
mov edx, 0x681f93
lea eax, [ebp - 0x18c]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x94]
call fcn.0065e028
push eax
lea eax, [ebp - 0x18c]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44bbc5
fld qword [ebp - 0x2a4]
fld dword [0x44d6e4]
fxch st(1)
fucompp
fnstsw ax
test ah, 5
jp 0x44bbc5
push 0
push 0x681fca
push 0x681fa2
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x318
mov edx, 0x681fd0
lea eax, [ebp - 0x190]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x190]
lea eax, [ebp - 0x94]
call fcn.0065e028
push eax
lea eax, [ebp - 0x190]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44bd5f
mov word [ebx + 0x10], 0x324
mov edx, 0x681fdf
lea eax, [ebp - 0x194]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x194]
lea eax, [ebp - 0x80]
call fcn.0065e010
test al, al
je 0x44bc6a
lea eax, [ebp - 0x8c]
call fcn.0065e2b0
mov dword [ebp - 0x4c8], eax
fild dword [ebp - 0x4c8]
fld qword [ebp - 0x2a4]
fxch st(1)
fucompp
fnstsw ax
test ah, 0x41
jnp 0x44bc6e
xor edx, edx
jmp 0x44bc73
mov edx, 1
push edx
mov edx, 2
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x194]
call fcn.0040a464
pop ecx
test cl, cl
je 0x44bd5f
push 0
push 0x68200e
push 0x681fe2
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x330
mov edx, 0x682014
lea eax, [ebp - 0x198]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x198]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44d0dd
mov word [ebx + 0x10], 0x33c
mov edx, 0x682016
lea eax, [ebp - 0x1a0]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x1a0]
lea eax, [ebp - 0x94]
call fcn.0065e028
push eax
lea eax, [ebp - 0x1a0]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44bef0
lea eax, [ebp - 0x8c]
call fcn.0065e2b0
mov dword [ebp - 0x4cc], eax
fild dword [ebp - 0x4cc]
fld qword [ebp - 0x2a4]
fxch st(1)
fucompp
fnstsw ax
test ah, 0x41
jp 0x44bef0
push 0
push 0x682052
push 0x682026
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov byte [ebp - 0x2a5], 0
mov word [ebx + 0x10], 0xfc
mov word [ebx + 0x10], 0x348
mov edx, str.no_35_getcastate_begin...
lea eax, [ebp - 0x1a4]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.0065fb9c
mov eax, esi
call fcn.00424314
mov word [ebx + 0x10], 0x354
mov edx, str.no_35_getcastate_end...
lea eax, [ebp - 0x1a8]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x360
xor ecx, ecx
mov dword [ebp - 0x1ac], ecx
lea edx, [ebp - 8]
lea eax, [ebp - 0x1ac]
call fcn.004765ac
lea ecx, [ebp - 0x1ac]
inc dword [ebx + 0x1c]
mov edx, dword [ecx]
lea ecx, [ebp - 0x2a5]
mov eax, esi
call fcn.0044d6e8
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x44c0b5
mov byte [esi + 0x48c], 0
xor edx, edx
mov eax, esi
call fcn.005509d4
push 0x682094
mov ecx, 0x68208a
mov edx, dword [esi + 0x474]
mov eax, esi
call fcn.004318e8
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x44c000
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
mov byte [eax + 0x47c], 0
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
lea ecx, [ebp - 0x4c4]
push ecx
push 0x104
call sub.KERNEL32.DLL_GetCurrentDirectoryW
mov word [ebx + 0x10], 0x378
lea edx, [ebp - 0x4c4]
lea eax, [ebp - 0x19c]
call fcn.0065fb38
inc dword [ebx + 0x1c]
mov dl, 1
mov word [ebx + 0x10], 0x36c
mov ecx, dword [0x6ae0a4]
mov eax, dword [0x6996e8]
mov ecx, dword [ecx]
call fcn.004655b0
mov edx, dword [sym.WoTax.exe__FormMain]
mov dword [edx], eax
lea eax, [ebp - 0x1b0]
mov word [ebx + 0x10], 0x384
mov edx, str.WebRootofflinePagesmain.html
call fcn.0065fa0c
inc dword [ebx + 0x1c]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x1b4], eax
lea eax, [ebp - 0x19c]
inc dword [ebx + 0x1c]
call fcn.0065fbec
lea edx, [ebp - 0x1b4]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
add eax, 0x424
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov dl, byte [ecx + 0x445]
mov eax, dword [eax + 0x3bc]
call fcn.005506a0
mov edx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [edx]
xor edx, edx
mov dl, byte [ecx + 0x445]
mov ecx, dword [eax]
cmp edx, 1
sbb edx, edx
mov eax, dword [ecx + 0x3c0]
neg edx
call fcn.005506a0
mov edx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [edx]
cmp byte [ecx + 0x445], 0
je 0x44c2af
mov word [ebx + 0x10], 0x390
mov edx, 0x6820b8
lea eax, [ebp - 0x1b8]
call fcn.0065fa0c
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x1b8]
mov eax, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [eax]
add eax, 0x450
call fcn.0065fd3c
push eax
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.0065fb9c
pop ecx
test ecx, ecx
je 0x44c268
mov word [ebx + 0x10], 0x39c
mov edx, 0x6820bf
lea eax, [ebp - 0x1bc]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.0065fb9c
jmp 0x44c2f4
mov word [ebx + 0x10], 0x3a8
mov edx, 0x6820d7
lea eax, [ebp - 0x1c0]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.0065fb9c
jmp 0x44c2f4
mov word [ebx + 0x10], 0x3b4
mov edx, 0x6820ef
lea eax, [ebp - 0x1c4]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3c0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e0]
call fcn.005506a0
mov word [ebx + 0x10], 0x3c0
mov edx, 0x6820fa
lea eax, [ebp - 0x1c8]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3e0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [ecx]
cmp byte [ecx + 0x444], 0
je 0x44cbe9
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
cmp dword [edx + 0x454], 3
je 0x44c39d
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp dword [eax + 0x454], 1
jne 0x44c56f
mov word [ebx + 0x10], 0x3cc
mov edx, 0x682105
lea eax, [ebp - 0x1cc]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1cc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x40c]
mov edx, 8
call fcn.004ec108
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov word [ebx + 0x10], 0x3d8
mov edx, 0x682110
lea eax, [ebp - 0x1d0]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1d0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov word [ebx + 0x10], 0x3e4
mov edx, 0x682117
lea eax, [ebp - 0x1d4]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3ec]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1d4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e8]
call fcn.005506a0
jmp 0x44cdb5
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp byte [eax + 0x446], 0
je 0x44c5c8
mov word [ebx + 0x10], 0x3f0
mov edx, 0x682123
lea eax, [ebp - 0x1d8]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1d8]
mov edx, 2
call fcn.0065fb9c
jmp 0x44c60d
mov word [ebx + 0x10], 0x3fc
mov edx, 0x68212e
lea eax, [ebp - 0x1dc]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1dc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
cmp byte [edx + 0x446], 0
je 0x44c662
mov edx, 8
jmp 0x44c667
mov edx, 6
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
mov eax, dword [eax + 0x40c]
call fcn.004ec108
mov word [ebx + 0x10], 0x408
mov edx, 0x682139
lea eax, [ebp - 0x1e0]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e8]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1e0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x448]
cmp eax, 5
ja case.default.0x44c700
jmp dword [eax*4 + 0x44c707]
mov edx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [edx]
mov dl, 1
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov word [ebx + 0x10], 0x414
mov edx, 0x682145
lea eax, [ebp - 0x1e4]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1e4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
jmp case.default.0x44c700
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov word [ebx + 0x10], 0x420
mov edx, 0x68214c
lea eax, [ebp - 0x1e8]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f4]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1e8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x44c700
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f8]
call fcn.005506a0
mov word [ebx + 0x10], 0x42c
mov edx, 0x682155
lea eax, [ebp - 0x1ec]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f8]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1ec]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
jmp case.default.0x44c700
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov word [ebx + 0x10], 0x438
mov edx, 0x68215e
lea eax, [ebp - 0x1f0]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3fc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1f0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x44c700
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x400]
call fcn.005506a0
mov word [ebx + 0x10], 0x444
mov edx, 0x682167
lea eax, [ebp - 0x1f4]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x400]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1f4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
jmp case.default.0x44c700
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
mov word [ebx + 0x10], 0x450
mov edx, 0x682170
lea eax, [ebp - 0x1f8]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x404]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1f8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [ecx]
cmp byte [ecx + 0x446], 0
jne 0x44cdb5
jmp 0x44cdb5
mov word [ebx + 0x10], 0x45c
mov edx, 0x68217b
lea eax, [ebp - 0x1fc]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x1fc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x40c]
mov edx, 8
call fcn.004ec108
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov word [ebx + 0x10], 0x468
mov edx, 0x682186
lea eax, [ebp - 0x200]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x200]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov word [ebx + 0x10], 0x474
mov edx, 0x68218d
lea eax, [ebp - 0x204]
call fcn.0065fa0c
mov edx, eax
inc dword [ebx + 0x1c]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3ec]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e8]
call fcn.005506a0
mov word [ebx + 0x10], 0x480
xor ecx, ecx
mov dword [ebp - 0x208], ecx
lea ecx, [ebp - 0x208]
inc dword [ebx + 0x1c]
lea edx, [esi + 0x584]
mov eax, 0x682199
call fcn.0065ff98
lea edx, [ebp - 0x208]
mov eax, esi
mov edx, dword [edx]
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0065fb9c
lea ecx, [esi + 0x584]
mov dword [ebp - 0x2b0], ecx
mov ecx, dword [ebp - 0x2b0]
cmp dword [ecx], 0
je 0x44ce1f
mov eax, dword [ebp - 0x2b0]
mov edx, dword [eax]
jmp 0x44ce24
mov edx, 0x6821a8
mov dword [ebp - 0x2ac], edx
mov word [ebx + 0x10], 0x36c
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x2ac]
push eax
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x2ac]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2b4]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b4]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x2b8]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x2b4]
push ecx
mov eax, dword [ebp - 0x2b8]
push eax
mov edx, dword [ebp - 0x2ac]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x2ac]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x2b8]
push eax
mov edx, dword [esi + 0x4e8]
call dword [edx + 0xa8]
pop ecx
mov ecx, dword [ebp - 0x2b8]
push ecx
call fcn.00639dfc
pop ecx
xor eax, eax
mov word [ebx + 0x10], 0x48c
mov dword [ebp - 0x20c], eax
mov eax, 0x6821aa
inc dword [ebx + 0x1c]
lea ecx, [ebp - 0x20c]
lea edx, [esi + 0x520]
call fcn.0065ff98
mov eax, dword [sym.WoTax.exe__FormMain]
lea edx, [ebp - 0x20c]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [ecx + 0x3b8]
call fcn.005507b8
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x20c]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0x498
mov edx, 0x6821b5
lea eax, [ebp - 0x210]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x210]
lea eax, [ebp - 0x94]
call fcn.0065e010
push eax
lea eax, [ebp - 0x210]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44d059
cmp dword [edi], 0
jne 0x44cf87
mov ecx, 0x6821c4
jmp 0x44cf89
mov ecx, dword [edi]
push ecx
mov eax, dword [esi + 0x4e8]
call dword [eax + 0xa0]
pop ecx
mov dword [ebp - 0x2bc], eax
mov word [ebx + 0x10], 0x36c
cmp dword [ebp - 0x2bc], 0
je 0x44d059
mov word [ebx + 0x10], 0x4a4
xor edx, edx
mov dword [ebp - 0x214], edx
lea edx, [ebp - 0x214]
inc dword [ebx + 0x1c]
mov eax, dword [ebp - 0x2bc]
call fcn.004bdbe8
lea edx, [ebp - 0x214]
xor eax, eax
mov dword [ebp - 0x218], eax
lea ecx, [ebp - 0x218]
inc dword [ebx + 0x1c]
mov eax, 0x6821c5
call fcn.0065ff98
cmp dword [ebp - 0x218], 0
je 0x44d004
mov edx, dword [ebp - 0x218]
jmp 0x44d009
mov edx, 0x6821ec
lea eax, [ebp - 0x21c]
call fcn.0065fb38
inc dword [ebx + 0x1c]
mov edx, dword [eax]
mov eax, esi
call fcn.00421160
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x21c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x218]
mov edx, 2
call fcn.0065fb9c
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x44d073
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
mov byte [eax + 0x47c], 1
cmp byte [ebp - 0x275], 0
jne 0x44d095
push 0
push 0x682234
push 0x6821ee
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov eax, esi
call fcn.0053399c
mov eax, esi
call fcn.005500ac
mov dword [esi + 0x4a0], eax
xor edx, edx
mov eax, esi
call fcn.0052eb4c
mov edx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [edx]
call fcn.005339a4
dec dword [ebx + 0x1c]
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.0065fb9c
mov word [ebx + 0x10], 0xfc
jmp 0x44d61f
mov word [ebx + 0x10], 0x4b0
mov edx, 0x68223a
lea eax, [ebp - 0x220]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x220]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x220]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44d1fa
push 0
push 0x68226a
push 0x68223c
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x4bc
mov edx, 0x682270
lea eax, [ebp - 0x224]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x224]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x224]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44d317
push 0
push 0x68229e
push 0x682272
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x4c8
mov edx, 0x6822a4
lea eax, [ebp - 0x228]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x228]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x228]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44d434
push 0
push 0x6822d2
push 0x6822a6
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
mov word [ebx + 0x10], 0x4d4
mov edx, 0x6822d8
lea eax, [ebp - 0x22c]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebx + 0x1c]
inc dword [ebx + 0x1c]
lea edx, [ebp - 0x22c]
lea eax, [ebp - 0x80]
call fcn.0065e010
push eax
lea eax, [ebp - 0x22c]
sub dword [ebx + 0x1c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x44d551
push 0
push 0x682306
push 0x6822da
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
push 0x40
push 0x68231e
push 0x68230c
mov eax, esi
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
jmp 0x44d6d5
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
mov eax, edi
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0040a464
mov word [ebx + 0x10], 0x30
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 8]
mov edx, 2
call fcn.0040a464
sub dword [ebx + 0x1c], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
mov ecx, dword [ebx]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret