Function at 0x408000
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [0x461288]
add eax, 0xfffffff5
cmp eax, 0x15
ja case.0x408015.19
xor edx, edx
mov dl, byte [eax + 0x40806c]
jmp dword [edx*4 + 0x408048]
jmp 0x408090
jmp 0x40a3d0
jmp 0x40ac30
jmp 0x409160
jmp 0x40b2e0
jmp 0x40bbe0
jmp 0x40c290
jmp 0x40cb90
ret
push 0xffffffffffffffff
push 0x4485d3
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x138
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov eax, dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x1009
push eax
mov dword [esp + 0x28], esi
call edi
mov ecx, dword [esi + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
push edx
call esi
lea eax, [esp + 0x38]
mov dword [esp + 0x150], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x154], 1
call edi
cmp eax, ebx
jge 0x40810e
push eax
call fcn.00422d94
mov ebp, 8
push str.select__from_car
mov word [esp + 0x3c], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x40], eax
jne 0x40813d
mov edx, str.select__from_car
test edx, edx
je 0x40813d
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x38]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x408163
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x10]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x408184
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x10], ebx
jne 0x4081c1
lea eax, [esp + 0x38]
mov byte [esp + 0x150], bl
push eax
call edi
cmp eax, ebx
jge 0x4081a2
push eax
call fcn.00422d94
lea ecx, [esp + 0x1c]
mov dword [esp + 0x150], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x4089e8
jmp 0x4089e2
cmp dword [0x461250], ebx
jne 0x4081d3
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x4081f2
push 0x45e1c8
push esi
push eax
call fcn.00422da2
mov dword [esp + 0x14], ebx
cmp dword [0x461250], ebx
jne 0x408208
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2e]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x408229
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2e], bx
jne 0x4089a1
push str.Car_NO
mov word [esp + 0x8c], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x90], eax
jne 0x408264
mov edx, str.Car_NO
test edx, edx
je 0x408264
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x150], 2
cmp eax, ebx
jne 0x40827f
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x88]
lea ecx, [esp + 0x128]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x158], 3
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x4082b8
push eax
call fcn.00422d94
lea eax, [esp + 0x128]
mov byte [esp + 0x150], 2
push eax
call edi
cmp eax, ebx
jge 0x4082d4
push eax
call fcn.00422d94
lea ecx, [esp + 0x88]
mov byte [esp + 0x150], 1
push ecx
call edi
cmp eax, ebx
jge 0x4082f0
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x4083a9
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x40831d
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
jmp 0x408368
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x68]
push eax
call esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 4
push ecx
push ebp
lea ecx, [esp + 0x70]
call fcn.00402690
mov edx, dword [esp + 0x70]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x68]
mov byte [esp + 0x150], 1
push eax
call edi
cmp eax, ebx
jge 0x408368
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x150], 5
cmp ecx, ebx
je 0x40837f
call fcn.00402e90
jmp 0x408381
xor eax, eax
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x30]
push 1
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 1
call fcn.004025b0
jmp 0x4083af
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
push str.Car_Kind
mov word [esp + 0xac], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xb0], eax
jne 0x4083df
mov edx, str.Car_Kind
test edx, edx
je 0x4083df
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x150], 6
cmp eax, ebx
jne 0x4083fa
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0xa8]
lea ecx, [esp + 0x108]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x158], 7
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x408433
push eax
call fcn.00422d94
lea eax, [esp + 0x108]
mov byte [esp + 0x150], 6
push eax
call edi
cmp eax, ebx
jge 0x40844f
push eax
call fcn.00422d94
lea ecx, [esp + 0xa8]
mov byte [esp + 0x150], 1
push ecx
call edi
cmp eax, ebx
jge 0x40846b
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x408512
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x408492
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x4084d7
lea eax, [esp + 0x48]
push eax
call esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 8
push ecx
push ebp
lea ecx, [esp + 0x50]
call fcn.00402690
mov edx, dword [esp + 0x50]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x48]
mov byte [esp + 0x150], 1
push eax
call edi
cmp eax, ebx
jge 0x4084d7
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x150], 9
cmp ecx, ebx
je 0x4084ee
call fcn.00402e90
jmp 0x4084f0
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 1
push ecx
mov ecx, dword [esp + 0x24]
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 1
call fcn.004025b0
push str.Car_Color
mov word [esp + 0x5c], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x60], eax
jne 0x40853c
mov edx, str.Car_Color
test edx, edx
je 0x40853c
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x150], 0xa
cmp eax, ebx
jne 0x408557
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x58]
lea ecx, [esp + 0xe8]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x158], 0xb
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40858d
push eax
call fcn.00422d94
lea eax, [esp + 0xe8]
mov byte [esp + 0x150], 0xa
push eax
call edi
cmp eax, ebx
jge 0x4085a9
push eax
call fcn.00422d94
lea ecx, [esp + 0x58]
mov byte [esp + 0x150], 1
push ecx
call edi
cmp eax, ebx
jge 0x4085c2
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40866f
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x4085e9
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x408634
lea eax, [esp + 0x78]
push eax
call esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 0xc
push ecx
push ebp
lea ecx, [esp + 0x80]
call fcn.00402690
mov edx, dword [esp + 0x80]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x78]
mov byte [esp + 0x150], 1
push eax
call edi
cmp eax, ebx
jge 0x408634
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x150], 0xd
cmp ecx, ebx
je 0x40864b
call fcn.00402e90
jmp 0x40864d
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 2
push ecx
mov ecx, dword [esp + 0x24]
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 1
call fcn.004025b0
push str.Car_EngineNO
mov word [esp + 0x9c], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xa0], eax
jne 0x40869f
mov edx, str.Car_EngineNO
test edx, edx
je 0x40869f
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x150], 0xe
cmp eax, ebx
jne 0x4086ba
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x98]
lea ecx, [esp + 0xf8]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x158], 0xf
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x4086f3
push eax
call fcn.00422d94
lea eax, [esp + 0xf8]
mov byte [esp + 0x150], 0xe
push eax
call edi
cmp eax, ebx
jge 0x40870f
push eax
call fcn.00422d94
lea ecx, [esp + 0x98]
mov byte [esp + 0x150], 1
push ecx
call edi
cmp eax, ebx
jge 0x40872b
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x4087de
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x408752
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x4087a3
lea eax, [esp + 0xb8]
push eax
call esi
lea ecx, [esp + 0x1c]
mov byte [esp + 0x150], 0x10
push ecx
push ebp
lea ecx, [esp + 0xc0]
call fcn.00402690
mov edx, dword [esp + 0xc0]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0xb8]
mov byte [esp + 0x150], 1
push eax
call edi
cmp eax, ebx
jge 0x4087a3
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x150], 0x11
cmp ecx, ebx
je 0x4087ba
call fcn.00402e90
jmp 0x4087bc
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 3
push ecx
mov ecx, dword [esp + 0x24]
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x150], 1
call fcn.004025b0
push str.Car_ClassisNO
lea ecx, [esp + 0xcc]
call fcn.00402ec0
lea edx, [esp + 0xc8]
lea eax, [esp + 0x118]
push edx
push eax
mov ecx, 0x461250
mov byte [esp + 0x158], 0x12
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x154], 0x13
call fcn.00402ef0
lea ecx, [esp + 0x118]
mov byte [esp + 0x150], 0x12
push ecx
call edi
cmp eax, ebx
jge 0x408846
push eax
call fcn.00422d94
lea edx, [esp + 0xc8]
mov byte [esp + 0x150], 1
push edx
call edi
cmp eax, ebx
jge 0x408862
push eax
call fcn.00422d94
mov esi, 1
cmp word [esp + 0x1c], si
je 0x4088b5
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x30]
push eax
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x150], 0x14
cmp ecx, ebx
je 0x408891
call fcn.00402e90
jmp 0x408893
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 4
push ecx
mov ecx, dword [esp + 0x24]
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0x150], 1
call fcn.004025b0
push str.Car_MeterNO
lea ecx, [esp + 0xdc]
call fcn.00402ec0
lea edx, [esp + 0xd8]
lea eax, [esp + 0x138]
push edx
push eax
mov ecx, 0x461250
mov byte [esp + 0x158], 0x15
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x154], 0x16
call fcn.00402ef0
lea ecx, [esp + 0x138]
mov byte [esp + 0x150], 0x15
push ecx
call edi
cmp eax, ebx
jge 0x40891d
push eax
call fcn.00422d94
lea edx, [esp + 0xd8]
mov byte [esp + 0x150], 1
push edx
call edi
cmp eax, ebx
jge 0x408939
push eax
call fcn.00422d94
cmp word [esp + 0x1c], si
je 0x408987
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x34]
push eax
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x150], 0x17
cmp ecx, ebx
je 0x408963
call fcn.00402e90
jmp 0x408965
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 5
push ecx
mov ecx, dword [esp + 0x24]
call fcn.0042781a
lea ecx, [esp + 0x34]
mov byte [esp + 0x150], 1
call fcn.004025b0
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc dword [esp + 0x14]
jmp 0x4081f6
mov edx, dword [esp + 0x18]
push ebx
push 1
push 0xb
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x38]
mov byte [esp + 0x150], bl
push ecx
call edi
cmp eax, ebx
jge 0x4089cc
push eax
call fcn.00422d94
lea edx, [esp + 0x1c]
mov dword [esp + 0x150], 0xffffffff
push edx
call edi
cmp eax, ebx
jge 0x4089e8
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x148]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x144
ret
push 0xffffffffffffffff
push 0x4488ca
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x17c
push ebx
push ebp
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov eax, dword [esi + 0x1c]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push ebx
push ebx
push 0x1009
push eax
mov dword [esp + 0x24], esi
call edi
mov ecx, dword [esi + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
push edx
call esi
lea eax, [esp + 0x3c]
mov dword [esp + 0x194], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x3c]
push ecx
mov byte [esp + 0x198], 1
call edi
cmp eax, ebx
jge 0x4091de
push eax
call fcn.00422d94
mov ebp, 8
push str.select__from_driver
mov word [esp + 0x40], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x44], eax
jne 0x40920d
mov edx, str.select__from_driver
test edx, edx
je 0x40920d
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x3c]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x409233
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x10]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x409254
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x10], ebx
jne 0x409291
lea eax, [esp + 0x3c]
mov byte [esp + 0x194], bl
push eax
call edi
cmp eax, ebx
jge 0x409272
push eax
call fcn.00422d94
lea ecx, [esp + 0x1c]
mov dword [esp + 0x194], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x409c84
jmp 0x409c7e
cmp dword [0x461250], ebx
jne 0x4092a3
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x4092c2
push 0x45e1c8
push esi
push eax
call fcn.00422da2
mov dword [esp + 0x18], ebx
cmp dword [0x461250], ebx
jne 0x4092d8
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2e]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x4092f9
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2e], bx
jne 0x409c3d
push str.Driver_NO
mov word [esp + 0x60], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x64], eax
jne 0x40932e
mov edx, str.Driver_NO
test edx, edx
je 0x40932e
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x194], 2
cmp eax, ebx
jne 0x409349
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x5c]
lea ecx, [esp + 0x14c]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x19c], 3
call esi
cmp eax, ebx
jge 0x409381
push eax
call fcn.00422d94
lea eax, [esp + 0x14c]
mov byte [esp + 0x194], 2
push eax
call edi
cmp eax, ebx
jge 0x40939d
push eax
call fcn.00422d94
lea ecx, [esp + 0x5c]
mov byte [esp + 0x194], 1
push ecx
call edi
cmp eax, ebx
jge 0x4093b6
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x409465
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x4093dd
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x409426
lea eax, [esp + 0x6c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x194], 4
push ecx
push ebp
lea ecx, [esp + 0x74]
call fcn.00402690
mov edx, dword [esp + 0x74]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x6c]
mov byte [esp + 0x194], 1
push eax
call edi
cmp eax, ebx
jge 0x409426
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x194], 5
cmp ecx, ebx
je 0x40943d
call fcn.00402e90
jmp 0x40943f
xor eax, eax
mov ecx, dword [esp + 0x18]
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x2c]
push 1
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0x194], 1
call fcn.004025b0
push str.Driver_Name
mov word [esp + 0xb0], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xb4], eax
jne 0x409495
mov edx, str.Driver_Name
test edx, edx
je 0x409495
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x194], 6
cmp eax, ebx
jne 0x4094b0
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0xac]
lea ecx, [esp + 0x12c]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x19c], 7
call esi
cmp eax, ebx
jge 0x4094e5
push eax
call fcn.00422d94
lea eax, [esp + 0x12c]
mov byte [esp + 0x194], 6
push eax
call edi
cmp eax, ebx
jge 0x409501
push eax
call fcn.00422d94
lea ecx, [esp + 0xac]
mov byte [esp + 0x194], 1
push ecx
call edi
cmp eax, ebx
jge 0x40951d
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x4095d4
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x409544
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x409599
lea eax, [esp + 0x8c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x194], 8
push ecx
push ebp
lea ecx, [esp + 0x94]
call fcn.00402690
mov edx, dword [esp + 0x94]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x8c]
mov byte [esp + 0x194], 1
push eax
call edi
cmp eax, ebx
jge 0x409599
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x194], 9
cmp ecx, ebx
je 0x4095b0
call fcn.00402e90
jmp 0x4095b2
xor eax, eax
mov ecx, dword [esp + 0x18]
push eax
push 1
push ecx
mov ecx, dword [esp + 0x20]
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x194], 1
call fcn.004025b0
push str.Driver_Sex
mov word [esp + 0xd0], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xd4], eax
jne 0x409604
mov edx, str.Driver_Sex
test edx, edx
je 0x409604
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x194], 0xa
cmp eax, ebx
jne 0x40961f
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0xcc]
lea ecx, [esp + 0x16c]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x19c], 0xb
call esi
cmp eax, ebx
jge 0x409654
push eax
call fcn.00422d94
lea eax, [esp + 0x16c]
mov byte [esp + 0x194], 0xa
push eax
call edi
cmp eax, ebx
jge 0x409670
push eax
call fcn.00422d94
lea ecx, [esp + 0xcc]
mov byte [esp + 0x194], 1
push ecx
call edi
cmp eax, ebx
jge 0x40968c
push eax
call fcn.00422d94
mov eax, 1
cmp word [esp + 0x1c], ax
je 0x4096ba
cmp word [esp + 0x24], ax
mov eax, 0x45e5d4
je 0x4096a9
mov eax, 0x45eb3c
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push 2
push edx
call fcn.0042781a
push str.Driver_ID
mov word [esp + 0x50], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x54], eax
jne 0x4096e4
mov eax, str.Driver_ID
test eax, eax
je 0x4096e4
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x194], 0xc
cmp eax, ebx
jne 0x4096ff
push 0x80004003
call fcn.00422d94
lea ecx, [esp + 0x4c]
lea edx, [esp + 0x10c]
push ecx
mov ecx, dword [0x461250]
push edx
call fcn.004026d0
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x19c], 0xd
call esi
cmp eax, ebx
jge 0x409731
push eax
call fcn.00422d94
lea ecx, [esp + 0x10c]
mov byte [esp + 0x194], 0xc
push ecx
call edi
cmp eax, ebx
jge 0x40974d
push eax
call fcn.00422d94
lea edx, [esp + 0x4c]
mov byte [esp + 0x194], 1
push edx
call edi
cmp eax, ebx
jge 0x409766
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x409814
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x40978d
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
jmp 0x4097d9
lea ecx, [esp + 0x7c]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x7c]
push edx
push ebp
mov byte [esp + 0x19c], 0xe
call fcn.00402690
mov eax, dword [esp + 0x84]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
lea ecx, [esp + 0x7c]
mov byte [esp + 0x194], 1
push ecx
call edi
cmp eax, ebx
jge 0x4097d9
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x194], 0xf
cmp ecx, ebx
je 0x4097f0
call fcn.00402e90
jmp 0x4097f2
xor eax, eax
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push 3
push edx
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x194], 1
call fcn.004025b0
push str.Driver_Address
mov word [esp + 0xa0], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xa4], eax
jne 0x409844
mov eax, str.Driver_Address
test eax, eax
je 0x409844
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x194], 0x10
cmp eax, ebx
jne 0x40985f
push 0x80004003
call fcn.00422d94
lea ecx, [esp + 0x9c]
lea edx, [esp + 0x11c]
push ecx
mov ecx, dword [0x461250]
push edx
call fcn.004026d0
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x19c], 0x11
call esi
cmp eax, ebx
jge 0x409894
push eax
call fcn.00422d94
lea ecx, [esp + 0x11c]
mov byte [esp + 0x194], 0x10
push ecx
call edi
cmp eax, ebx
jge 0x4098b0
push eax
call fcn.00422d94
lea edx, [esp + 0x9c]
mov byte [esp + 0x194], 1
push edx
call edi
cmp eax, ebx
jge 0x4098cc
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x409985
cmp ax, bp
mov dword [esp + 0x10], ebx
jne 0x4098f3
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
jmp 0x409948
lea ecx, [esp + 0xbc]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
lea ecx, [esp + 0xbc]
push edx
push ebp
mov byte [esp + 0x19c], 0x12
call fcn.00402690
mov eax, dword [esp + 0xc4]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
lea ecx, [esp + 0xbc]
mov byte [esp + 0x194], 1
push ecx
call edi
cmp eax, ebx
jge 0x409948
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x194], 0x13
cmp ecx, ebx
je 0x40995f
call fcn.00402e90
jmp 0x409961
xor eax, eax
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push eax
push 4
push esi
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x194], 1
call fcn.004025b0
jmp 0x409989
mov esi, dword [esp + 0x18]
push str.Driver_BookDate
mov word [esp + 0xe0], bp
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xe4], eax
jne 0x4099b9
mov edx, str.Driver_BookDate
test edx, edx
je 0x4099b9
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x194], 0x14
cmp eax, ebx
jne 0x4099d4
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0xdc]
lea ecx, [esp + 0x13c]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 0x15
call fcn.00402ef0
lea edx, [esp + 0x13c]
mov byte [esp + 0x194], 0x14
push edx
call edi
cmp eax, ebx
jge 0x409a1d
push eax
call fcn.00422d94
lea eax, [esp + 0xdc]
mov byte [esp + 0x194], 1
push eax
call edi
cmp eax, ebx
jge 0x409a39
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x409a84
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x34]
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x194], 0x16
cmp ecx, ebx
je 0x409a64
call fcn.00402e90
jmp 0x409a66
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 5
push esi
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0x194], 1
call fcn.004025b0
push str.Driver_CarKind
lea ecx, [esp + 0xf0]
call fcn.00402ec0
lea edx, [esp + 0xec]
lea eax, [esp + 0x15c]
push edx
push eax
mov ecx, 0x461250
mov byte [esp + 0x19c], 0x17
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 0x18
call fcn.00402ef0
lea ecx, [esp + 0x15c]
mov byte [esp + 0x194], 0x17
push ecx
call edi
cmp eax, ebx
jge 0x409aec
push eax
call fcn.00422d94
lea edx, [esp + 0xec]
mov byte [esp + 0x194], 1
push edx
call edi
cmp eax, ebx
jge 0x409b08
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x409b53
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x34]
push eax
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x194], 0x19
cmp ecx, ebx
je 0x409b33
call fcn.00402e90
jmp 0x409b35
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 6
push esi
call fcn.0042781a
lea ecx, [esp + 0x34]
mov byte [esp + 0x194], 1
call fcn.004025b0
push str.Driver_Phone
lea ecx, [esp + 0x100]
call fcn.00402ec0
lea ecx, [esp + 0xfc]
lea edx, [esp + 0x17c]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0x19c], 0x1a
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x198], 0x1b
call fcn.00402ef0
lea eax, [esp + 0x17c]
mov byte [esp + 0x194], 0x1a
push eax
call edi
cmp eax, ebx
jge 0x409bbb
push eax
call fcn.00422d94
lea ecx, [esp + 0xfc]
mov byte [esp + 0x194], 1
push ecx
call edi
cmp eax, ebx
jge 0x409bd7
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x409c22
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x38]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x194], 0x1c
cmp ecx, ebx
je 0x409c02
call fcn.00402e90
jmp 0x409c04
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 7
push esi
call fcn.0042781a
lea ecx, [esp + 0x38]
mov byte [esp + 0x194], 1
call fcn.004025b0
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc esi
mov dword [esp + 0x18], esi
jmp 0x4092c6
mov eax, dword [esp + 0x14]
push ebx
push 1
push 0xb
mov ecx, dword [eax + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [esp + 0x3c]
mov byte [esp + 0x194], bl
push edx
call edi
cmp eax, ebx
jge 0x409c68
push eax
call fcn.00422d94
lea eax, [esp + 0x1c]
mov dword [esp + 0x194], 0xffffffff
push eax
call edi
cmp eax, ebx
jge 0x409c84
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x18c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x188
ret
push 0xffffffffffffffff
push 0x448b74
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa4
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0x1c]
push ebx
push ebx
push 0x1009
push eax
mov dword [esp + 0x24], esi
call edi
mov ecx, dword [esi + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
push edx
call esi
lea eax, [esp + 0x30]
mov dword [esp + 0xb8], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x30]
push ecx
mov byte [esp + 0xbc], 1
call edi
cmp eax, ebx
jge 0x40a44d
push eax
call fcn.00422d94
push str.select__from__car_driver_
mov word [esp + 0x34], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x38], eax
jne 0x40a479
mov edx, str.select__from__car_driver_
test edx, edx
je 0x40a479
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x30]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x40a49f
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0xc]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x40a4c0
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0xc], ebx
jne 0x40a4fd
lea eax, [esp + 0x30]
mov byte [esp + 0xb8], bl
push eax
call edi
cmp eax, ebx
jge 0x40a4de
push eax
call fcn.00422d94
lea ecx, [esp + 0x1c]
mov dword [esp + 0xb8], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x40a900
jmp 0x40a8fa
cmp dword [0x461250], ebx
jne 0x40a50f
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x40a52e
push 0x45e1c8
push esi
push eax
call fcn.00422da2
push ebp
mov ebp, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [esp + 0x14], ebx
cmp dword [0x461250], ebx
jne 0x40a54b
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x1e]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x40a56c
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x1e], bx
jne 0x40a8b8
push str.Car_NO
mov word [esp + 0x58], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x5c], eax
jne 0x40a5a3
mov edx, str.Car_NO
test edx, edx
je 0x40a5a3
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xbc], 2
cmp eax, ebx
jne 0x40a5be
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x54]
lea ecx, [esp + 0x84]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x20]
push eax
push edx
mov byte [esp + 0xc4], 3
call ebp
cmp eax, ebx
jge 0x40a5f0
push eax
call fcn.00422d94
lea eax, [esp + 0x84]
mov byte [esp + 0xbc], 2
push eax
call edi
cmp eax, ebx
jge 0x40a60c
push eax
call fcn.00422d94
lea ecx, [esp + 0x54]
mov byte [esp + 0xbc], 1
push ecx
call edi
cmp eax, ebx
jge 0x40a625
push eax
call fcn.00422d94
mov eax, dword [esp + 0x20]
mov esi, 1
cmp ax, si
je 0x40a6d9
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40a651
mov edx, dword [esp + 0x28]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40a69b
lea eax, [esp + 0x74]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x20]
mov byte [esp + 0xbc], 4
push ecx
push 8
lea ecx, [esp + 0x7c]
call fcn.00402690
mov edx, dword [esp + 0x7c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x74]
mov byte [esp + 0xbc], 1
push eax
call edi
cmp eax, ebx
jge 0x40a69b
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xbc], 5
cmp ecx, ebx
je 0x40a6b2
call fcn.00402e90
jmp 0x40a6b4
xor eax, eax
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
mov ecx, dword [esp + 0x30]
push esi
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0xbc], 1
call fcn.004025b0
push str.Driver_NO
mov word [esp + 0x68], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x6c], eax
jne 0x40a705
mov edx, str.Driver_NO
test edx, edx
je 0x40a705
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xbc], 6
cmp eax, ebx
jne 0x40a720
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x64]
lea ecx, [esp + 0x94]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x20]
push eax
push edx
mov byte [esp + 0xc4], 7
call ebp
cmp eax, ebx
jge 0x40a752
push eax
call fcn.00422d94
lea eax, [esp + 0x94]
mov byte [esp + 0xbc], 6
push eax
call edi
cmp eax, ebx
jge 0x40a76e
push eax
call fcn.00422d94
lea ecx, [esp + 0x64]
mov byte [esp + 0xbc], 1
push ecx
call edi
cmp eax, ebx
jge 0x40a787
push eax
call fcn.00422d94
cmp word [esp + 0x20], si
je 0x40a7d4
lea edx, [esp + 0x20]
lea ecx, [esp + 0x30]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xbc], 8
cmp ecx, ebx
je 0x40a7b1
call fcn.00402e90
jmp 0x40a7b3
xor eax, eax
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x18]
push esi
push eax
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0xbc], 1
call fcn.004025b0
push str.IsWork
mov word [esp + 0x48], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x4c], eax
jne 0x40a800
mov ecx, str.IsWork
test ecx, ecx
je 0x40a800
push 0x8007000e
call fcn.00422d94
lea edx, [esp + 0x44]
lea eax, [esp + 0xa4]
push edx
push eax
mov ecx, 0x461250
mov byte [esp + 0xc4], 9
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
lea ecx, [esp + 0x20]
push eax
push ecx
mov byte [esp + 0xc4], 0xa
call ebp
cmp eax, ebx
jge 0x40a840
push eax
call fcn.00422d94
lea edx, [esp + 0xa4]
mov byte [esp + 0xbc], 9
push edx
call edi
cmp eax, ebx
jge 0x40a85c
push eax
call fcn.00422d94
lea eax, [esp + 0x44]
mov byte [esp + 0xbc], 1
push eax
call edi
cmp eax, ebx
jge 0x40a875
push eax
call fcn.00422d94
cmp word [esp + 0x20], si
je 0x40a89e
cmp word [esp + 0x28], si
mov eax, 0x45e460
je 0x40a88d
mov eax, 0x45eb58
mov ecx, dword [esp + 0x14]
push eax
push 2
push ecx
mov ecx, dword [esp + 0x24]
call fcn.0042781a
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc dword [esp + 0x14]
jmp 0x40a539
mov edx, dword [esp + 0x18]
push ebx
push 1
push 0xb
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x34]
mov byte [esp + 0xbc], bl
push ecx
call edi
cmp eax, ebx
pop ebp
jge 0x40a8e4
push eax
call fcn.00422d94
lea edx, [esp + 0x1c]
mov dword [esp + 0xb8], 0xffffffff
push edx
call edi
cmp eax, ebx
jge 0x40a900
push eax
call fcn.00422d94
mov ecx, dword [esp + 0xb0]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xb0
ret
push 0xffffffffffffffff
push 0x448cfb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd4
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, ecx
xor ebx, ebx
push edi
push ebx
mov eax, dword [ebp + 0x1c]
push ebx
push 0x1009
push eax
call esi
mov ecx, dword [ebp + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x18]
push edx
call esi
lea eax, [esp + 0x34]
mov dword [esp + 0xec], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xf0], 1
call edi
cmp eax, ebx
jge 0x40acaa
push eax
call fcn.00422d94
push str.select__from__car_fee_
mov word [esp + 0x38], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x3c], eax
jne 0x40acd6
mov edx, str.select__from__car_fee_
test edx, edx
je 0x40acd6
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x34]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x40acfc
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x10]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x40ad1d
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x10], ebx
jne 0x40ad5a
lea eax, [esp + 0x34]
mov byte [esp + 0xec], bl
push eax
call edi
cmp eax, ebx
jge 0x40ad3b
push eax
call fcn.00422d94
lea ecx, [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x40b2c3
jmp 0x40b2bd
cmp dword [0x461250], ebx
jne 0x40ad6c
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x40ad8b
push 0x45e1c8
push esi
push eax
call fcn.00422da2
mov dword [esp + 0x14], ebx
cmp dword [0x461250], ebx
jne 0x40ada1
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2a]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x40adc2
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2a], bx
jne 0x40b280
push str.Car_NO
mov word [esp + 0x78], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x7c], eax
jne 0x40adf9
mov edx, str.Car_NO
test edx, edx
je 0x40adf9
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 2
cmp eax, ebx
jne 0x40ae14
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x74]
lea ecx, [esp + 0xc4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 3
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40ae4a
push eax
call fcn.00422d94
lea eax, [esp + 0xc4]
mov byte [esp + 0xec], 2
push eax
call edi
cmp eax, ebx
jge 0x40ae66
push eax
call fcn.00422d94
lea ecx, [esp + 0x74]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40ae7f
push eax
call fcn.00422d94
mov eax, dword [esp + 0x18]
mov esi, 1
cmp ax, si
je 0x40af31
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40aeab
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40aef5
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x18]
mov byte [esp + 0xec], 4
push ecx
push 8
lea ecx, [esp + 0x4c]
call fcn.00402690
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x44]
mov byte [esp + 0xec], 1
push eax
call edi
cmp eax, ebx
jge 0x40aef5
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xec], 5
cmp ecx, ebx
je 0x40af0c
call fcn.00402e90
jmp 0x40af0e
xor eax, eax
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
push esi
mov ecx, ebp
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.Fee_NO
mov word [esp + 0x58], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x5c], eax
jne 0x40af5d
mov edx, str.Fee_NO
test edx, edx
je 0x40af5d
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 6
cmp eax, ebx
jne 0x40af78
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x54]
lea ecx, [esp + 0xa4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 7
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40afae
push eax
call fcn.00422d94
lea eax, [esp + 0xa4]
mov byte [esp + 0xec], 6
push eax
call edi
cmp eax, ebx
jge 0x40afca
push eax
call fcn.00422d94
lea ecx, [esp + 0x54]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40afe3
push eax
call fcn.00422d94
mov eax, dword [esp + 0x18]
cmp ax, si
je 0x40b08c
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40b00a
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40b054
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x18]
mov byte [esp + 0xec], 8
push ecx
push 8
lea ecx, [esp + 0x6c]
call fcn.00402690
mov edx, dword [esp + 0x6c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x64]
mov byte [esp + 0xec], 1
push eax
call edi
cmp eax, ebx
jge 0x40b054
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xec], 9
cmp ecx, ebx
je 0x40b06b
call fcn.00402e90
jmp 0x40b06d
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push esi
push ecx
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.InDate
mov word [esp + 0x88], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x8c], eax
jne 0x40b0be
mov edx, str.InDate
test edx, edx
je 0x40b0be
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 0xa
cmp eax, ebx
jne 0x40b0d9
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x84]
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 0xb
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40b112
push eax
call fcn.00422d94
lea eax, [esp + 0xb4]
mov byte [esp + 0xec], 0xa
push eax
call edi
cmp eax, ebx
jge 0x40b12e
push eax
call fcn.00422d94
lea ecx, [esp + 0x84]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40b14a
push eax
call fcn.00422d94
cmp word [esp + 0x18], si
je 0x40b196
lea edx, [esp + 0x18]
lea ecx, [esp + 0x2c]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xec], 0xc
cmp ecx, ebx
je 0x40b174
call fcn.00402e90
jmp 0x40b176
xor eax, eax
push eax
mov eax, dword [esp + 0x18]
push 2
push eax
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x2c]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.OutDate
lea ecx, [esp + 0x98]
call fcn.00402ec0
lea ecx, [esp + 0x94]
lea edx, [esp + 0xd4]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0xf4], 0xd
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xf0], 0xe
call fcn.00402ef0
lea eax, [esp + 0xd4]
mov byte [esp + 0xec], 0xd
push eax
call edi
cmp eax, ebx
jge 0x40b1fe
push eax
call fcn.00422d94
lea ecx, [esp + 0x94]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40b21a
push eax
call fcn.00422d94
cmp word [esp + 0x18], si
je 0x40b266
lea edx, [esp + 0x18]
lea ecx, [esp + 0x30]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xec], 0xf
cmp ecx, ebx
je 0x40b244
call fcn.00402e90
jmp 0x40b246
xor eax, eax
push eax
mov eax, dword [esp + 0x18]
push 3
push eax
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0xec], 1
call fcn.004025b0
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc dword [esp + 0x14]
jmp 0x40ad8f
mov ecx, dword [ebp + 0x1c]
push ebx
push 1
push 0xb
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [esp + 0x34]
mov byte [esp + 0xec], bl
push edx
call edi
cmp eax, ebx
jge 0x40b2a7
push eax
call fcn.00422d94
lea eax, [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
push eax
call edi
cmp eax, ebx
jge 0x40b2c3
push eax
call fcn.00422d94
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xe0
ret
push 0xffffffffffffffff
push 0x448ded
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x128
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0x1c]
push ebx
push ebx
push 0x1009
push eax
mov dword [esp + 0x20], esi
call edi
mov ecx, dword [esi + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x18]
push edx
call esi
lea eax, [esp + 0x34]
mov dword [esp + 0x13c], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0x140], 1
call edi
cmp eax, ebx
jge 0x40b35d
push eax
call fcn.00422d94
push str.select__from__driver_punish_
mov word [esp + 0x38], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x3c], eax
jne 0x40b389
mov edx, str.select__from__driver_punish_
test edx, edx
je 0x40b389
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x34]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x40b3af
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x14]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x40b3d0
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x14], ebx
jne 0x40b40d
lea eax, [esp + 0x34]
mov byte [esp + 0x13c], bl
push eax
call edi
cmp eax, ebx
jge 0x40b3ee
push eax
call fcn.00422d94
lea ecx, [esp + 0x18]
mov dword [esp + 0x13c], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x40bbc3
jmp 0x40bbbd
cmp dword [0x461250], ebx
jne 0x40b41f
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x40b43e
push 0x45e1c8
push esi
push eax
call fcn.00422da2
push ebp
mov ebp, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [esp + 0x18], ebx
cmp dword [0x461250], ebx
jne 0x40b45b
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2e]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x40b47c
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2e], bx
jne 0x40bb7b
push str.Driver_NO
mov word [esp + 0x8c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x90], eax
jne 0x40b4b9
mov edx, str.Driver_NO
test edx, edx
je 0x40b4b9
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 2
cmp eax, ebx
jne 0x40b4d4
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x88]
lea ecx, [esp + 0x118]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x148], 3
call ebp
cmp eax, ebx
jge 0x40b509
push eax
call fcn.00422d94
lea eax, [esp + 0x118]
mov byte [esp + 0x140], 2
push eax
call edi
cmp eax, ebx
jge 0x40b525
push eax
call fcn.00422d94
lea ecx, [esp + 0x88]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40b541
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40b600
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40b569
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40b5bf
lea eax, [esp + 0xb8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x140], 4
push ecx
push 8
lea ecx, [esp + 0xc0]
call fcn.00402690
mov edx, dword [esp + 0xc0]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0xb8]
mov byte [esp + 0x140], 1
push eax
call edi
cmp eax, ebx
jge 0x40b5bf
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x140], 5
cmp ecx, ebx
je 0x40b5d6
call fcn.00402e90
jmp 0x40b5d8
xor eax, eax
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push esi
push 1
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0x140], 1
call fcn.004025b0
jmp 0x40b604
mov esi, dword [esp + 0x18]
push str.Punish_NO
mov word [esp + 0xac], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xb0], eax
jne 0x40b636
mov ecx, str.Punish_NO
test ecx, ecx
je 0x40b636
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 6
cmp eax, ebx
jne 0x40b651
push 0x80004003
call fcn.00422d94
mov ecx, dword [0x461250]
lea edx, [esp + 0xa8]
lea eax, [esp + 0xf8]
push edx
push eax
call fcn.004026d0
lea ecx, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x148], 7
call ebp
cmp eax, ebx
jge 0x40b686
push eax
call fcn.00422d94
lea edx, [esp + 0xf8]
mov byte [esp + 0x140], 6
push edx
call edi
cmp eax, ebx
jge 0x40b6a2
push eax
call fcn.00422d94
lea eax, [esp + 0xa8]
mov byte [esp + 0x140], 1
push eax
call edi
cmp eax, ebx
jge 0x40b6be
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40b767
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40b6e6
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esp + 0x14]
call fcn.004024d0
jmp 0x40b730
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x48]
push eax
push 8
mov byte [esp + 0x148], 8
call fcn.00402690
mov ecx, dword [esp + 0x50]
push ecx
lea ecx, [esp + 0x14]
call fcn.004024d0
lea edx, [esp + 0x48]
mov byte [esp + 0x140], 1
push edx
call edi
cmp eax, ebx
jge 0x40b730
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x140], 9
cmp ecx, ebx
je 0x40b747
call fcn.00402e90
jmp 0x40b749
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 1
push esi
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.HappenAddress
mov word [esp + 0x6c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x70], eax
jne 0x40b793
mov eax, str.HappenAddress
test eax, eax
je 0x40b793
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 0xa
cmp eax, ebx
jne 0x40b7ae
push 0x80004003
call fcn.00422d94
lea ecx, [esp + 0x68]
lea edx, [esp + 0xd8]
push ecx
mov ecx, dword [0x461250]
push edx
call fcn.004026d0
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x148], 0xb
call ebp
cmp eax, ebx
jge 0x40b7e0
push eax
call fcn.00422d94
lea ecx, [esp + 0xd8]
mov byte [esp + 0x140], 0xa
push ecx
call edi
cmp eax, ebx
jge 0x40b7fc
push eax
call fcn.00422d94
lea edx, [esp + 0x68]
mov byte [esp + 0x140], 1
push edx
call edi
cmp eax, ebx
jge 0x40b815
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40b8c1
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40b83d
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
jmp 0x40b88a
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x78]
push edx
push 8
mov byte [esp + 0x148], 0xc
call fcn.00402690
mov eax, dword [esp + 0x80]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
lea ecx, [esp + 0x78]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40b88a
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x140], 0xd
cmp ecx, ebx
je 0x40b8a1
call fcn.00402e90
jmp 0x40b8a3
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 2
push esi
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.HappenDate
mov word [esp + 0x9c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xa0], eax
jne 0x40b8f3
mov edx, str.HappenDate
test edx, edx
je 0x40b8f3
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 0xe
cmp eax, ebx
jne 0x40b90e
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x98]
lea ecx, [esp + 0xe8]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x148], 0xf
call ebp
cmp eax, ebx
jge 0x40b943
push eax
call fcn.00422d94
lea eax, [esp + 0xe8]
mov byte [esp + 0x140], 0xe
push eax
call edi
cmp eax, ebx
jge 0x40b95f
push eax
call fcn.00422d94
lea ecx, [esp + 0x98]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40b97b
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x40b9c6
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x34]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x140], 0x10
cmp ecx, ebx
je 0x40b9a6
call fcn.00402e90
jmp 0x40b9a8
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 3
push esi
call fcn.0042781a
lea ecx, [esp + 0x34]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.TreatState
mov word [esp + 0x5c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x60], eax
jne 0x40b9f2
mov eax, str.TreatState
test eax, eax
je 0x40b9f2
push 0x8007000e
call fcn.00422d94
lea ecx, [esp + 0x58]
lea edx, [esp + 0x108]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0x148], 0x11
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x148], 0x12
call ebp
cmp eax, ebx
jge 0x40ba32
push eax
call fcn.00422d94
lea ecx, [esp + 0x108]
mov byte [esp + 0x140], 0x11
push ecx
call edi
cmp eax, ebx
jge 0x40ba4e
push eax
call fcn.00422d94
lea edx, [esp + 0x58]
mov byte [esp + 0x140], 1
push edx
call edi
cmp eax, ebx
jge 0x40ba67
push eax
call fcn.00422d94
mov eax, 1
cmp word [esp + 0x1c], ax
je 0x40ba91
cmp word [esp + 0x24], ax
mov eax, 0x45e460
je 0x40ba84
mov eax, 0x45eb58
mov ecx, dword [esp + 0x14]
push eax
push 4
push esi
call fcn.0042781a
push str.OtherMessage
lea ecx, [esp + 0xcc]
call fcn.00402ec0
lea eax, [esp + 0xc8]
lea ecx, [esp + 0x128]
push eax
push ecx
mov ecx, 0x461250
mov byte [esp + 0x148], 0x13
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x144], 0x14
call fcn.00402ef0
lea edx, [esp + 0x128]
mov byte [esp + 0x140], 0x13
push edx
call edi
cmp eax, ebx
jge 0x40baf9
push eax
call fcn.00422d94
lea eax, [esp + 0xc8]
mov byte [esp + 0x140], 1
push eax
call edi
cmp eax, ebx
jge 0x40bb15
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x40bb60
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x34]
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x140], 0x15
cmp ecx, ebx
je 0x40bb40
call fcn.00402e90
jmp 0x40bb42
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 5
push esi
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0x140], 1
call fcn.004025b0
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc esi
mov dword [esp + 0x18], esi
jmp 0x40b449
mov edx, dword [esp + 0x14]
push ebx
push 1
push 0xb
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x38]
mov byte [esp + 0x140], bl
push ecx
call edi
cmp eax, ebx
pop ebp
jge 0x40bba7
push eax
call fcn.00422d94
lea edx, [esp + 0x18]
mov dword [esp + 0x13c], 0xffffffff
push edx
call edi
cmp eax, ebx
jge 0x40bbc3
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x134]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x134
ret
push 0xffffffffffffffff
push 0x448e9b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd4
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, ecx
xor ebx, ebx
push edi
push ebx
mov eax, dword [ebp + 0x1c]
push ebx
push 0x1009
push eax
call esi
mov ecx, dword [ebp + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x18]
push edx
call esi
lea eax, [esp + 0x34]
mov dword [esp + 0xec], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xf0], 1
call edi
cmp eax, ebx
jge 0x40bc5a
push eax
call fcn.00422d94
push str.select__from__driver_award_
mov word [esp + 0x38], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x3c], eax
jne 0x40bc86
mov edx, str.select__from__driver_award_
test edx, edx
je 0x40bc86
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x34]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x40bcac
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x10]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x40bccd
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x10], ebx
jne 0x40bd0a
lea eax, [esp + 0x34]
mov byte [esp + 0xec], bl
push eax
call edi
cmp eax, ebx
jge 0x40bceb
push eax
call fcn.00422d94
lea ecx, [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x40c273
jmp 0x40c26d
cmp dword [0x461250], ebx
jne 0x40bd1c
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x40bd3b
push 0x45e1c8
push esi
push eax
call fcn.00422da2
mov dword [esp + 0x14], ebx
cmp dword [0x461250], ebx
jne 0x40bd51
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2a]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x40bd72
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2a], bx
jne 0x40c230
push str.Driver_NO
mov word [esp + 0x78], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x7c], eax
jne 0x40bda9
mov edx, str.Driver_NO
test edx, edx
je 0x40bda9
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 2
cmp eax, ebx
jne 0x40bdc4
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x74]
lea ecx, [esp + 0xc4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 3
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40bdfa
push eax
call fcn.00422d94
lea eax, [esp + 0xc4]
mov byte [esp + 0xec], 2
push eax
call edi
cmp eax, ebx
jge 0x40be16
push eax
call fcn.00422d94
lea ecx, [esp + 0x74]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40be2f
push eax
call fcn.00422d94
mov eax, dword [esp + 0x18]
mov esi, 1
cmp ax, si
je 0x40bee1
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40be5b
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40bea5
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x18]
mov byte [esp + 0xec], 4
push ecx
push 8
lea ecx, [esp + 0x4c]
call fcn.00402690
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x44]
mov byte [esp + 0xec], 1
push eax
call edi
cmp eax, ebx
jge 0x40bea5
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xec], 5
cmp ecx, ebx
je 0x40bebc
call fcn.00402e90
jmp 0x40bebe
xor eax, eax
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
push esi
mov ecx, ebp
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.Award_NO
mov word [esp + 0x58], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x5c], eax
jne 0x40bf0d
mov edx, str.Award_NO
test edx, edx
je 0x40bf0d
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 6
cmp eax, ebx
jne 0x40bf28
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x54]
lea ecx, [esp + 0xa4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 7
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40bf5e
push eax
call fcn.00422d94
lea eax, [esp + 0xa4]
mov byte [esp + 0xec], 6
push eax
call edi
cmp eax, ebx
jge 0x40bf7a
push eax
call fcn.00422d94
lea ecx, [esp + 0x54]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40bf93
push eax
call fcn.00422d94
mov eax, dword [esp + 0x18]
cmp ax, si
je 0x40c03c
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40bfba
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40c004
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x18]
mov byte [esp + 0xec], 8
push ecx
push 8
lea ecx, [esp + 0x6c]
call fcn.00402690
mov edx, dword [esp + 0x6c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x64]
mov byte [esp + 0xec], 1
push eax
call edi
cmp eax, ebx
jge 0x40c004
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xec], 9
cmp ecx, ebx
je 0x40c01b
call fcn.00402e90
jmp 0x40c01d
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push esi
push ecx
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.Content
mov word [esp + 0x88], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x8c], eax
jne 0x40c06e
mov edx, str.Content
test edx, edx
je 0x40c06e
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 0xa
cmp eax, ebx
jne 0x40c089
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x84]
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 0xb
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40c0c2
push eax
call fcn.00422d94
lea eax, [esp + 0xb4]
mov byte [esp + 0xec], 0xa
push eax
call edi
cmp eax, ebx
jge 0x40c0de
push eax
call fcn.00422d94
lea ecx, [esp + 0x84]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40c0fa
push eax
call fcn.00422d94
cmp word [esp + 0x18], si
je 0x40c146
lea edx, [esp + 0x18]
lea ecx, [esp + 0x2c]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xec], 0xc
cmp ecx, ebx
je 0x40c124
call fcn.00402e90
jmp 0x40c126
xor eax, eax
push eax
mov eax, dword [esp + 0x18]
push 2
push eax
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x2c]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.OtherMessage
lea ecx, [esp + 0x98]
call fcn.00402ec0
lea ecx, [esp + 0x94]
lea edx, [esp + 0xd4]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0xf4], 0xd
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xf0], 0xe
call fcn.00402ef0
lea eax, [esp + 0xd4]
mov byte [esp + 0xec], 0xd
push eax
call edi
cmp eax, ebx
jge 0x40c1ae
push eax
call fcn.00422d94
lea ecx, [esp + 0x94]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40c1ca
push eax
call fcn.00422d94
cmp word [esp + 0x18], si
je 0x40c216
lea edx, [esp + 0x18]
lea ecx, [esp + 0x30]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xec], 0xf
cmp ecx, ebx
je 0x40c1f4
call fcn.00402e90
jmp 0x40c1f6
xor eax, eax
push eax
mov eax, dword [esp + 0x18]
push 3
push eax
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0xec], 1
call fcn.004025b0
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc dword [esp + 0x14]
jmp 0x40bd3f
mov ecx, dword [ebp + 0x1c]
push ebx
push 1
push 0xb
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [esp + 0x34]
mov byte [esp + 0xec], bl
push edx
call edi
cmp eax, ebx
jge 0x40c257
push eax
call fcn.00422d94
lea eax, [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
push eax
call edi
cmp eax, ebx
jge 0x40c273
push eax
call fcn.00422d94
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xe0
ret
push 0xffffffffffffffff
push 0x448f8d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x128
push ebx
push esi
mov esi, ecx
xor ebx, ebx
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [esi + 0x1c]
push ebx
push ebx
push 0x1009
push eax
mov dword [esp + 0x20], esi
call edi
mov ecx, dword [esi + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call edi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x18]
push edx
call esi
lea eax, [esp + 0x34]
mov dword [esp + 0x13c], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0x140], 1
call edi
cmp eax, ebx
jge 0x40c30d
push eax
call fcn.00422d94
push str.select__from_punish
mov word [esp + 0x38], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x3c], eax
jne 0x40c339
mov edx, str.select__from_punish
test edx, edx
je 0x40c339
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x34]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x40c35f
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x14]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x40c380
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x14], ebx
jne 0x40c3bd
lea eax, [esp + 0x34]
mov byte [esp + 0x13c], bl
push eax
call edi
cmp eax, ebx
jge 0x40c39e
push eax
call fcn.00422d94
lea ecx, [esp + 0x18]
mov dword [esp + 0x13c], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x40cb73
jmp 0x40cb6d
cmp dword [0x461250], ebx
jne 0x40c3cf
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x40c3ee
push 0x45e1c8
push esi
push eax
call fcn.00422da2
push ebp
mov ebp, dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
mov dword [esp + 0x18], ebx
cmp dword [0x461250], ebx
jne 0x40c40b
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2e]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x40c42c
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2e], bx
jne 0x40cb2b
push str.Punish_NO
mov word [esp + 0x8c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x90], eax
jne 0x40c469
mov edx, str.Punish_NO
test edx, edx
je 0x40c469
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 2
cmp eax, ebx
jne 0x40c484
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x88]
lea ecx, [esp + 0x118]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x148], 3
call ebp
cmp eax, ebx
jge 0x40c4b9
push eax
call fcn.00422d94
lea eax, [esp + 0x118]
mov byte [esp + 0x140], 2
push eax
call edi
cmp eax, ebx
jge 0x40c4d5
push eax
call fcn.00422d94
lea ecx, [esp + 0x88]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40c4f1
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40c5b0
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40c519
mov edx, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40c56f
lea eax, [esp + 0xb8]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x1c]
mov byte [esp + 0x140], 4
push ecx
push 8
lea ecx, [esp + 0xc0]
call fcn.00402690
mov edx, dword [esp + 0xc0]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0xb8]
mov byte [esp + 0x140], 1
push eax
call edi
cmp eax, ebx
jge 0x40c56f
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x140], 5
cmp ecx, ebx
je 0x40c586
call fcn.00402e90
jmp 0x40c588
xor eax, eax
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push esi
push 1
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0x140], 1
call fcn.004025b0
jmp 0x40c5b4
mov esi, dword [esp + 0x18]
push str.Punish_name
mov word [esp + 0xac], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xb0], eax
jne 0x40c5e6
mov ecx, str.Punish_name
test ecx, ecx
je 0x40c5e6
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 6
cmp eax, ebx
jne 0x40c601
push 0x80004003
call fcn.00422d94
mov ecx, dword [0x461250]
lea edx, [esp + 0xa8]
lea eax, [esp + 0xf8]
push edx
push eax
call fcn.004026d0
lea ecx, [esp + 0x1c]
push eax
push ecx
mov byte [esp + 0x148], 7
call ebp
cmp eax, ebx
jge 0x40c636
push eax
call fcn.00422d94
lea edx, [esp + 0xf8]
mov byte [esp + 0x140], 6
push edx
call edi
cmp eax, ebx
jge 0x40c652
push eax
call fcn.00422d94
lea eax, [esp + 0xa8]
mov byte [esp + 0x140], 1
push eax
call edi
cmp eax, ebx
jge 0x40c66e
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40c717
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40c696
mov ecx, dword [esp + 0x24]
push ecx
lea ecx, [esp + 0x14]
call fcn.004024d0
jmp 0x40c6e0
lea edx, [esp + 0x48]
push edx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x48]
push eax
push 8
mov byte [esp + 0x148], 8
call fcn.00402690
mov ecx, dword [esp + 0x50]
push ecx
lea ecx, [esp + 0x14]
call fcn.004024d0
lea edx, [esp + 0x48]
mov byte [esp + 0x140], 1
push edx
call edi
cmp eax, ebx
jge 0x40c6e0
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x140], 9
cmp ecx, ebx
je 0x40c6f7
call fcn.00402e90
jmp 0x40c6f9
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 1
push esi
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.Punish_Admin
mov word [esp + 0x6c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x70], eax
jne 0x40c743
mov eax, str.Punish_Admin
test eax, eax
je 0x40c743
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 0xa
cmp eax, ebx
jne 0x40c75e
push 0x80004003
call fcn.00422d94
lea ecx, [esp + 0x68]
lea edx, [esp + 0xd8]
push ecx
mov ecx, dword [0x461250]
push edx
call fcn.004026d0
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x148], 0xb
call ebp
cmp eax, ebx
jge 0x40c790
push eax
call fcn.00422d94
lea ecx, [esp + 0xd8]
mov byte [esp + 0x140], 0xa
push ecx
call edi
cmp eax, ebx
jge 0x40c7ac
push eax
call fcn.00422d94
lea edx, [esp + 0x68]
mov byte [esp + 0x140], 1
push edx
call edi
cmp eax, ebx
jge 0x40c7c5
push eax
call fcn.00422d94
mov eax, dword [esp + 0x1c]
cmp ax, 1
je 0x40c871
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40c7ed
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
jmp 0x40c83a
lea ecx, [esp + 0x78]
push ecx
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x78]
push edx
push 8
mov byte [esp + 0x148], 0xc
call fcn.00402690
mov eax, dword [esp + 0x80]
lea ecx, [esp + 0x10]
push eax
call fcn.004024d0
lea ecx, [esp + 0x78]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40c83a
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0x140], 0xd
cmp ecx, ebx
je 0x40c851
call fcn.00402e90
jmp 0x40c853
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 2
push esi
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.Punish_Money
mov word [esp + 0x9c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0xa0], eax
jne 0x40c8a3
mov edx, str.Punish_Money
test edx, edx
je 0x40c8a3
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0x140], 0xe
cmp eax, ebx
jne 0x40c8be
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x98]
lea ecx, [esp + 0xe8]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x1c]
push eax
push edx
mov byte [esp + 0x148], 0xf
call ebp
cmp eax, ebx
jge 0x40c8f3
push eax
call fcn.00422d94
lea eax, [esp + 0xe8]
mov byte [esp + 0x140], 0xe
push eax
call edi
cmp eax, ebx
jge 0x40c90f
push eax
call fcn.00422d94
lea ecx, [esp + 0x98]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40c92b
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x40c976
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x34]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x140], 0x10
cmp ecx, ebx
je 0x40c956
call fcn.00402e90
jmp 0x40c958
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 3
push esi
call fcn.0042781a
lea ecx, [esp + 0x34]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.Punish_Point
mov word [esp + 0x5c], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x60], eax
jne 0x40c9a2
mov eax, str.Punish_Point
test eax, eax
je 0x40c9a2
push 0x8007000e
call fcn.00422d94
lea ecx, [esp + 0x58]
lea edx, [esp + 0x108]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0x148], 0x11
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea eax, [esp + 0x20]
push eax
mov byte [esp + 0x148], 0x12
call ebp
cmp eax, ebx
jge 0x40c9e2
push eax
call fcn.00422d94
lea ecx, [esp + 0x108]
mov byte [esp + 0x140], 0x11
push ecx
call edi
cmp eax, ebx
jge 0x40c9fe
push eax
call fcn.00422d94
lea edx, [esp + 0x58]
mov byte [esp + 0x140], 1
push edx
call edi
cmp eax, ebx
jge 0x40ca17
push eax
call fcn.00422d94
cmp word [esp + 0x1c], 1
je 0x40ca62
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x30]
push eax
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0x140], 0x13
cmp ecx, ebx
je 0x40ca42
call fcn.00402e90
jmp 0x40ca44
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push 4
push esi
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0x140], 1
call fcn.004025b0
push str.Punish_Book
lea ecx, [esp + 0xcc]
call fcn.00402ec0
lea ecx, [esp + 0xc8]
lea edx, [esp + 0x128]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0x148], 0x14
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x20]
mov byte [esp + 0x144], 0x15
call fcn.00402ef0
lea eax, [esp + 0x128]
mov byte [esp + 0x140], 0x14
push eax
call edi
cmp eax, ebx
jge 0x40caca
push eax
call fcn.00422d94
lea ecx, [esp + 0xc8]
mov byte [esp + 0x140], 1
push ecx
call edi
cmp eax, ebx
jge 0x40cae6
push eax
call fcn.00422d94
mov eax, 1
cmp word [esp + 0x1c], ax
je 0x40cb10
cmp word [esp + 0x24], ax
mov eax, 0x45e460
je 0x40cb03
mov eax, 0x45eb58
mov ecx, dword [esp + 0x14]
push eax
push 5
push esi
call fcn.0042781a
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc esi
mov dword [esp + 0x18], esi
jmp 0x40c3f9
mov edx, dword [esp + 0x14]
push ebx
push 1
push 0xb
mov eax, dword [edx + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
lea ecx, [esp + 0x38]
mov byte [esp + 0x140], bl
push ecx
call edi
cmp eax, ebx
pop ebp
jge 0x40cb57
push eax
call fcn.00422d94
lea edx, [esp + 0x18]
mov dword [esp + 0x13c], 0xffffffff
push edx
call edi
cmp eax, ebx
jge 0x40cb73
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x134]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0x134
ret
push 0xffffffffffffffff
push 0x44903b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd4
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
mov ebp, ecx
xor ebx, ebx
push edi
push ebx
mov eax, dword [ebp + 0x1c]
push ebx
push 0x1009
push eax
call esi
mov ecx, dword [ebp + 0x1c]
push ebx
push ebx
push 0xb
push ecx
call esi
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea edx, [esp + 0x18]
push edx
call esi
lea eax, [esp + 0x34]
mov dword [esp + 0xec], ebx
push eax
call esi
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xf0], 1
call edi
cmp eax, ebx
jge 0x40cc0a
push eax
call fcn.00422d94
push str.select__from_fee
mov word [esp + 0x38], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x3c], eax
jne 0x40cc36
mov edx, str.select__from_fee
test edx, edx
je 0x40cc36
push 0x8007000e
call fcn.00422d94
lea eax, [esp + 0x34]
mov ecx, 0x461190
push eax
push 0x461250
call fcn.0040f7c0
cmp dword [0x461250], ebx
jne 0x40cc5c
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea edx, [esp + 0x10]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x68]
cmp eax, ebx
jge 0x40cc7d
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp dword [esp + 0x10], ebx
jne 0x40ccba
lea eax, [esp + 0x34]
mov byte [esp + 0xec], bl
push eax
call edi
cmp eax, ebx
jge 0x40cc9b
push eax
call fcn.00422d94
lea ecx, [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
push ecx
call edi
cmp eax, ebx
jge 0x40d223
jmp 0x40d21d
cmp dword [0x461250], ebx
jne 0x40cccc
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
push esi
mov edx, dword [esi]
call dword [edx + 0x98]
cmp eax, ebx
jge 0x40cceb
push 0x45e1c8
push esi
push eax
call fcn.00422da2
mov dword [esp + 0x14], ebx
cmp dword [0x461250], ebx
jne 0x40cd01
push 0x80004003
call fcn.00422d94
mov esi, dword [0x461250]
lea ecx, [esp + 0x2a]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x50]
cmp eax, ebx
jge 0x40cd22
push 0x45e1c8
push esi
push eax
call fcn.00422da2
cmp word [esp + 0x2a], bx
jne 0x40d1e0
push str.Fee_NO
mov word [esp + 0x78], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x7c], eax
jne 0x40cd59
mov edx, str.Fee_NO
test edx, edx
je 0x40cd59
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 2
cmp eax, ebx
jne 0x40cd74
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x74]
lea ecx, [esp + 0xc4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 3
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40cdaa
push eax
call fcn.00422d94
lea eax, [esp + 0xc4]
mov byte [esp + 0xec], 2
push eax
call edi
cmp eax, ebx
jge 0x40cdc6
push eax
call fcn.00422d94
lea ecx, [esp + 0x74]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40cddf
push eax
call fcn.00422d94
mov eax, dword [esp + 0x18]
mov esi, 1
cmp ax, si
je 0x40ce91
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40ce0b
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40ce55
lea eax, [esp + 0x44]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x18]
mov byte [esp + 0xec], 4
push ecx
push 8
lea ecx, [esp + 0x4c]
call fcn.00402690
mov edx, dword [esp + 0x4c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x44]
mov byte [esp + 0xec], 1
push eax
call edi
cmp eax, ebx
jge 0x40ce55
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xec], 5
cmp ecx, ebx
je 0x40ce6c
call fcn.00402e90
jmp 0x40ce6e
xor eax, eax
mov ecx, dword [esp + 0x14]
push ebx
push ebx
push ebx
push ebx
push eax
push ecx
push esi
mov ecx, ebp
call fcn.00427798
lea ecx, [esp + 0x10]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.Fee_Name
mov word [esp + 0x58], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x5c], eax
jne 0x40cebd
mov edx, str.Fee_Name
test edx, edx
je 0x40cebd
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 6
cmp eax, ebx
jne 0x40ced8
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x54]
lea ecx, [esp + 0xa4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 7
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40cf0e
push eax
call fcn.00422d94
lea eax, [esp + 0xa4]
mov byte [esp + 0xec], 6
push eax
call edi
cmp eax, ebx
jge 0x40cf2a
push eax
call fcn.00422d94
lea ecx, [esp + 0x54]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40cf43
push eax
call fcn.00422d94
mov eax, dword [esp + 0x18]
cmp ax, si
je 0x40cfec
cmp ax, 8
mov dword [esp + 0x10], ebx
jne 0x40cf6a
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
jmp 0x40cfb4
lea eax, [esp + 0x64]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea ecx, [esp + 0x18]
mov byte [esp + 0xec], 8
push ecx
push 8
lea ecx, [esp + 0x6c]
call fcn.00402690
mov edx, dword [esp + 0x6c]
lea ecx, [esp + 0x10]
push edx
call fcn.004024d0
lea eax, [esp + 0x64]
mov byte [esp + 0xec], 1
push eax
call edi
cmp eax, ebx
jge 0x40cfb4
push eax
call fcn.00422d94
mov ecx, dword [esp + 0x10]
mov byte [esp + 0xec], 9
cmp ecx, ebx
je 0x40cfcb
call fcn.00402e90
jmp 0x40cfcd
xor eax, eax
mov ecx, dword [esp + 0x14]
push eax
push esi
push ecx
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x10]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.Fee_Admin
mov word [esp + 0x88], 8
call fcn.00422e41
cmp eax, ebx
mov dword [esp + 0x8c], eax
jne 0x40d01e
mov edx, str.Fee_Admin
test edx, edx
je 0x40d01e
push 0x8007000e
call fcn.00422d94
mov eax, dword [0x461250]
mov byte [esp + 0xec], 0xa
cmp eax, ebx
jne 0x40d039
push 0x80004003
call fcn.00422d94
lea eax, [esp + 0x84]
lea ecx, [esp + 0xb4]
push eax
push ecx
mov ecx, dword [0x461250]
call fcn.004026d0
lea edx, [esp + 0x18]
push eax
push edx
mov byte [esp + 0xf4], 0xb
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp eax, ebx
jge 0x40d072
push eax
call fcn.00422d94
lea eax, [esp + 0xb4]
mov byte [esp + 0xec], 0xa
push eax
call edi
cmp eax, ebx
jge 0x40d08e
push eax
call fcn.00422d94
lea ecx, [esp + 0x84]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40d0aa
push eax
call fcn.00422d94
cmp word [esp + 0x18], si
je 0x40d0f6
lea edx, [esp + 0x18]
lea ecx, [esp + 0x2c]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xec], 0xc
cmp ecx, ebx
je 0x40d0d4
call fcn.00402e90
jmp 0x40d0d6
xor eax, eax
push eax
mov eax, dword [esp + 0x18]
push 2
push eax
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x2c]
mov byte [esp + 0xec], 1
call fcn.004025b0
push str.Fee_Money
lea ecx, [esp + 0x98]
call fcn.00402ec0
lea ecx, [esp + 0x94]
lea edx, [esp + 0xd4]
push ecx
push edx
mov ecx, 0x461250
mov byte [esp + 0xf4], 0xd
call fcn.0040f9d0
mov ecx, eax
call fcn.004026d0
push eax
lea ecx, [esp + 0x1c]
mov byte [esp + 0xf0], 0xe
call fcn.00402ef0
lea eax, [esp + 0xd4]
mov byte [esp + 0xec], 0xd
push eax
call edi
cmp eax, ebx
jge 0x40d15e
push eax
call fcn.00422d94
lea ecx, [esp + 0x94]
mov byte [esp + 0xec], 1
push ecx
call edi
cmp eax, ebx
jge 0x40d17a
push eax
call fcn.00422d94
cmp word [esp + 0x18], si
je 0x40d1c6
lea edx, [esp + 0x18]
lea ecx, [esp + 0x30]
push edx
call fcn.00402f10
mov ecx, dword [eax]
mov byte [esp + 0xec], 0xf
cmp ecx, ebx
je 0x40d1a4
call fcn.00402e90
jmp 0x40d1a6
xor eax, eax
push eax
mov eax, dword [esp + 0x18]
push 3
push eax
mov ecx, ebp
call fcn.0042781a
lea ecx, [esp + 0x30]
mov byte [esp + 0xec], 1
call fcn.004025b0
mov ecx, 0x461250
call fcn.0040f9d0
mov ecx, eax
call fcn.004030d0
inc dword [esp + 0x14]
jmp 0x40ccef
mov ecx, dword [ebp + 0x1c]
push ebx
push 1
push 0xb
push ecx
call dword [sym.imp.USER32.dll_SendMessageA]
lea edx, [esp + 0x34]
mov byte [esp + 0xec], bl
push edx
call edi
cmp eax, ebx
jge 0x40d207
push eax
call fcn.00422d94
lea eax, [esp + 0x18]
mov dword [esp + 0xec], 0xffffffff
push eax
call edi
cmp eax, ebx
jge 0x40d223
push eax
call fcn.00422d94
mov ecx, dword [esp + 0xe4]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xe0
ret