Function at 0x431acc
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff780
mov eax, 0x68cd3c
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
call fcn.00650394
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
add edx, 0x58c
call fcn.004423f0
test al, al
je 0x431f44
mov word [ebp - 0x588], 0x18
xor edx, edx
lea ecx, [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, str.url:
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x534
call fcn.0065ff98
lea ecx, [ebp - 0x10]
push ecx
mov edx, str._port:
lea eax, [ebp - 0x14]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x18], eax
lea edx, [ebp - 0x14]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x18]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x1c], edx
lea ecx, [ebp - 0x1c]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x538
call fcn.0065fbec
lea eax, [ebp - 0x1c]
push eax
mov edx, str._source:
lea eax, [ebp - 0x20]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x20]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x24]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x24]
xor edx, edx
mov dword [ebp - 0x28], edx
lea ecx, [ebp - 0x28]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x540
call fcn.0065fbec
lea eax, [ebp - 0x28]
push eax
mov edx, str._dest:Update_
lea eax, [ebp - 0x2c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x30], eax
lea edx, [ebp - 0x2c]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x30]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x34], edx
lea ecx, [ebp - 0x34]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x540
call fcn.0065fbec
lea eax, [ebp - 0x34]
push eax
mov edx, str._md:
lea eax, [ebp - 0x38]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3c], eax
lea edx, [ebp - 0x38]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3c]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x3c]
xor edx, edx
mov dword [ebp - 0x40], edx
lea ecx, [ebp - 0x40]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x544
call fcn.0065fbec
lea eax, [ebp - 0x40]
push eax
mov edx, str._xy:
lea eax, [ebp - 0x44]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x44]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x48]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x48]
xor edx, edx
mov dword [ebp - 0x4c], edx
lea ecx, [ebp - 0x4c]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x242c
call fcn.0065fbec
lea eax, [ebp - 0x4c]
push eax
mov edx, 0x67ef3e
lea eax, [ebp - 0x50]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0xc], eax
lea edx, [ebp - 0x50]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0xc]
pop eax
call fcn.0065fbec
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0xc
push 1
xor ecx, ecx
mov word [ebp - 0x588], 0x24
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x54]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0xc]
mov eax, str.ClientUpdate.exe__
call fcn.0065ff98
lea eax, [ebp - 0x54]
push eax
mov edx, 0x67ef54
lea eax, [ebp - 0x58]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor ecx, ecx
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0x5c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x58]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x5c]
lea eax, [ebp - 0x60]
xor ecx, ecx
call fcn.0065de84
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x60]
inc dword [ebp - 0x57c]
mov dword [ebp - 0x59c], edx
mov eax, dword [ebp - 0x59c]
cmp dword [eax], 0
jne 0x431eab
mov edx, 0x67ef59
jmp 0x431eb3
mov ecx, dword [ebp - 0x59c]
mov edx, dword [ecx]
push edx
call sub.KERNEL32.DLL_WinExec
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0065fb9c
mov eax, dword [0x6ae0a4]
mov eax, dword [eax]
call fcn.005385bc
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0xc]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov ecx, dword [ebp + 8]
xor ebx, ebx
mov edx, 0x67ef5a
lea eax, [ebp - 4]
mov dword [ecx + 0x2440], ebx
mov word [ebp - 0x588], 0x3c
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0x30
mov word [ebp - 0x588], 0x48
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
inc dword [ebp - 0x57c]
lea edx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.0065fbec
mov word [ebp - 0x588], 0x30
cmp dword [ebp - 8], 0
je 0x431faa
mov esi, dword [ebp - 8]
jmp 0x431faf
mov esi, 0x67ef68
push esi
mov ecx, 0x67ef5e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x80]
mov word [ebp - 0x588], 0x54
mov ebx, eax
xor eax, eax
mov dword [ebp - 0x64], eax
mov eax, ebx
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x64]
call fcn.004bdbe8
lea edx, [ebp - 0x64]
xor ecx, ecx
mov dword [ebp - 0x68], ecx
lea ecx, [ebp - 0x68]
inc dword [ebp - 0x57c]
mov eax, 0x67ef6a
call fcn.0065ff98
lea edx, [ebp - 0x68]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0065fb9c
test ebx, ebx
je 0x43216c
push 0x40
push 0x67efc6
push 0x67ef9a
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov edx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [edx]
xor edx, edx
call fcn.00411b64
mov word [ebp - 0x588], 0x6c
mov edx, 0x67efcc
lea eax, [ebp - 0x6c]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0x60
mov word [ebp - 0x588], 0x78
mov dword [ebp - 0x70], ecx
lea ecx, [ebp - 0x70]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x6c]
lea eax, [ebp - 0x6c]
call fcn.0065fbec
mov word [ebp - 0x588], 0x60
cmp dword [ebp - 0x70], 0
je 0x4320cf
mov eax, dword [ebp - 0x70]
jmp 0x4320d4
mov eax, 0x67efda
push eax
mov ecx, 0x67efd0
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, 0x67efdc
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x70]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov ecx, dword [sym.WoTax.exe__FormLogin]
mov esi, dword [ecx + 0x4e8]
call dword [esi + 0x60]
mov word [ebp - 0x588], 0x30
mov word [ebp - 0x588], 0x84
mov ebx, eax
xor eax, eax
mov dword [ebp - 0x74], eax
mov eax, ebx
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x74]
call fcn.004bdbe8
lea edx, [ebp - 0x74]
xor ecx, ecx
mov dword [ebp - 0x78], ecx
lea ecx, [ebp - 0x78]
inc dword [ebp - 0x57c]
mov eax, 0x67efee
call fcn.0065ff98
lea edx, [ebp - 0x78]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0065fb9c
test ebx, ebx
je 0x432306
mov ecx, dword [ebp + 8]
xor eax, eax
mov byte [ecx + 0x560], 1
push 0x30
push 0x67f052
mov word [ebp - 0x588], 0x90
mov dword [ebp - 0x7c], eax
mov eax, 0x67f01f
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x7c]
mov edx, dword [ebp + 8]
add edx, 0x4b0
call fcn.0065ff98
lea edx, [ebp - 0x7c]
push edx
mov edx, 0x67f024
lea eax, [ebp - 0x80]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x84], eax
lea edx, [ebp - 0x80]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x84]
pop eax
call fcn.0065fbec
cmp dword [ebp - 0x84], 0
je 0x43227a
mov edx, dword [ebp - 0x84]
jmp 0x43227f
mov edx, 0x67f05c
push edx
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.0065fb9c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 8]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov eax, dword [ebp + 8]
add eax, 0x4d4
cmp dword [eax], 0
je 0x43231a
mov edx, dword [eax]
mov ecx, dword [edx - 4]
jmp 0x43231c
xor ecx, ecx
test ecx, ecx
jne 0x432456
push 0x40
push 0x67f092
push 0x67f05e
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0xa8
mov edx, 0x67f0a0
lea eax, [ebp - 0x88]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0x9c
mov word [ebp - 0x588], 0xb4
mov dword [ebp - 0x8c], edx
lea edx, [ebp - 0x88]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x8c]
lea eax, [ebp - 0x88]
call fcn.0065fbec
mov word [ebp - 0x588], 0x9c
cmp dword [ebp - 0x8c], 0
je 0x4323ae
mov ecx, dword [ebp - 0x8c]
jmp 0x4323b3
mov ecx, 0x67f0ae
push ecx
mov ecx, 0x67f0a4
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x67f0b0
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x8c]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [ecx + 0x4d4]
call fcn.00423d78
test al, al
jne 0x43259c
push 0x40
push 0x67f11a
push 0x67f0c2
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0xcc
mov edx, 0x67f128
lea eax, [ebp - 0x90]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0xc0
mov word [ebp - 0x588], 0xd8
mov dword [ebp - 0x94], edx
lea edx, [ebp - 0x90]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x94]
lea eax, [ebp - 0x90]
call fcn.0065fbec
mov word [ebp - 0x588], 0xc0
cmp dword [ebp - 0x94], 0
je 0x4324f9
mov ecx, dword [ebp - 0x94]
jmp 0x4324fe
mov ecx, 0x67f136
push ecx
mov ecx, 0x67f12c
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x67f138
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x94]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov eax, dword [ebp + 8]
add eax, 0x4d8
cmp dword [eax], 0
je 0x4325b0
mov edx, dword [eax]
mov ecx, dword [edx - 4]
jmp 0x4325b2
xor ecx, ecx
test ecx, ecx
jne 0x4326ec
push 0x40
push 0x67f180
push 0x67f14a
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0xf0
mov edx, 0x67f18e
lea eax, [ebp - 0x98]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0xe4
mov word [ebp - 0x588], 0xfc
mov dword [ebp - 0x9c], edx
lea edx, [ebp - 0x98]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x9c]
lea eax, [ebp - 0x98]
call fcn.0065fbec
mov word [ebp - 0x588], 0xe4
cmp dword [ebp - 0x9c], 0
je 0x432644
mov ecx, dword [ebp - 0x9c]
jmp 0x432649
mov ecx, 0x67f19c
push ecx
mov ecx, 0x67f192
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x67f19e
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x9c]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [ecx + 0x4d8]
call fcn.00423d78
test al, al
jne 0x432832
push 0x40
push 0x67f20c
push 0x67f1b0
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0x114
mov edx, 0x67f21a
lea eax, [ebp - 0xa0]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0x108
mov word [ebp - 0x588], 0x120
mov dword [ebp - 0xa4], edx
lea edx, [ebp - 0xa0]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0xa4]
lea eax, [ebp - 0xa0]
call fcn.0065fbec
mov word [ebp - 0x588], 0x108
cmp dword [ebp - 0xa4], 0
je 0x43278f
mov ecx, dword [ebp - 0xa4]
jmp 0x432794
mov ecx, 0x67f228
push ecx
mov ecx, 0x67f21e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x67f22a
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0xa4]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
jmp 0x43cacb
mov word [ebp - 0x588], 0x12c
mov ecx, dword [ebp + 8]
mov dx, 0xfff5
mov byte [ecx + 0x48c], 1
mov eax, dword [ebp + 8]
call fcn.005509d4
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov esi, dword [ecx]
cmp byte [esi + 0x445], 0
je 0x43c836
mov word [ebp - 0x588], 0x138
xor eax, eax
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], eax
push edx
inc dword [ebp - 0x57c]
mov edx, 0x67f241
lea eax, [ebp - 0xb8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, 0x67f23c
mov ecx, dword [eax]
lea eax, [ebp - 0xb4]
push ecx
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
pop ecx
call fcn.0042133c
lea eax, [ebp - 0xbc]
xor edx, edx
mov dword [ebp - 0xc0], edx
lea edx, [ebp - 0xc0]
inc dword [ebp - 0x57c]
call fcn.0065fdd4
lea edx, [ebp - 0xc0]
xor eax, eax
mov dword [ebp - 0xc4], eax
lea ecx, [ebp - 0xc4]
inc dword [ebp - 0x57c]
mov eax, dword [ebp + 8]
add eax, 0x4cc
call fcn.0065fbec
lea edx, [ebp - 0xc4]
mov eax, dword [ebp + 8]
add eax, 0x4c0
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x144
xor ecx, ecx
lea esi, [ebp - 0xd0]
mov dword [ebp - 0xd0], ecx
push esi
inc dword [ebp - 0x57c]
mov edx, 0x67f24c
lea eax, [ebp - 0xcc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, 0x67f247
mov ecx, dword [eax]
lea eax, [ebp - 0xc8]
push ecx
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
pop ecx
call fcn.0042133c
lea eax, [ebp - 0xd0]
xor edx, edx
mov dword [ebp - 0xd4], edx
lea edx, [ebp - 0xd4]
inc dword [ebp - 0x57c]
call fcn.0065fdd4
lea edx, [ebp - 0xd4]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea ecx, [ebp - 0xd8]
inc dword [ebp - 0x57c]
mov eax, dword [ebp + 8]
add eax, 0x4d0
call fcn.0065fbec
lea edx, [ebp - 0xd8]
mov eax, dword [ebp + 8]
add eax, 0x4c4
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0065fb9c
mov ebx, dword [ebp + 8]
xor eax, eax
mov word [ebp - 0x588], 0x150
mov dword [ebp - 0xdc], eax
lea edx, [ebp - 0xdc]
push edx
add ebx, 0x2438
inc dword [ebp - 0x57c]
mov esi, dword [ebp + 8]
add esi, 0x4c0
cmp dword [esi], 0
je 0x432ae0
mov eax, dword [esi]
mov ecx, dword [eax - 4]
jmp 0x432ae2
xor ecx, ecx
add ecx, 0xfffffffa
mov eax, dword [ebp + 8]
add eax, 0x4c0
mov edx, 8
call fcn.0065fe60
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0xe0]
xor ecx, ecx
call fcn.0065de84
inc dword [ebp - 0x57c]
lea eax, [ebp - 0xe0]
inc dword [ebp - 0x57c]
mov edx, eax
mov eax, ebx
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x15c
mov ebx, dword [ebp + 8]
add ebx, 0x2438
xor eax, eax
mov dword [ebp - 0xe4], eax
lea eax, [ebp - 0xe4]
mov edx, ebx
call fcn.004765ac
lea ecx, [ebp - 0xe4]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0065fb9c
mov edx, dword [ebp + 8]
add edx, 0x4c0
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.0065fbc4
mov word [ebp - 0x588], 0x174
xor ecx, ecx
mov dword [ebp - 0xa8], ecx
lea edx, [ebp - 0xa8]
inc dword [ebp - 0x57c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x3c4]
call fcn.00550780
mov word [ebp - 0x588], 0x168
mov word [ebp - 0x588], 0x180
mov eax, dword [ebp + 8]
add eax, 0x584
lea edx, [ebp - 0xac]
mov ecx, edx
xor edx, edx
xchg ecx, eax
xchg ecx, edx
call fcn.0065de84
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0xb0]
mov word [ebp - 0x588], 0x168
mov word [ebp - 0x588], 0x18c
mov eax, dword [ebp + 8]
mov ecx, edx
add eax, 0x588
xor edx, edx
xchg ecx, eax
xchg ecx, edx
call fcn.0065de84
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x168
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 0x4e8]
call dword [esi + 0x5c]
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0xe8]
mov word [ebp - 0x588], 0x198
mov dword [ebp - 0x5a0], edi
add ebx, 0x4f8
xor ecx, ecx
mov edx, dword [ebp - 0x5a0]
call fcn.0065de84
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0xe8]
mov eax, ebx
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0040a464
mov eax, dword [ebp + 8]
add eax, 0x4f8
cmp dword [eax], 0
jne 0x432cda
mov edx, 0x67f253
jmp 0x432cdc
mov edx, dword [eax]
push edx
cmp dword [ebp - 0xac], 0
jne 0x432ced
mov eax, 0x67f252
jmp 0x432cf3
mov eax, dword [ebp - 0xac]
push eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x58]
mov word [ebp - 0x588], 0x168
mov word [ebp - 0x588], 0x1a4
mov ebx, eax
xor eax, eax
mov dword [ebp - 0xec], eax
add esp, 8
inc dword [ebp - 0x57c]
mov eax, ebx
lea edx, [ebp - 0xec]
call fcn.004bdbe8
lea edx, [ebp - 0xec]
xor ecx, ecx
mov dword [ebp - 0xf0], ecx
lea ecx, [ebp - 0xf0]
inc dword [ebp - 0x57c]
mov eax, 0x67f254
call fcn.0065ff98
lea edx, [ebp - 0xf0]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0065fb9c
test ebx, ebx
je 0x433413
cmp ebx, 0x1fa5
jg 0x432dc1
je 0x432ef8
sub ebx, 0xfffffffc
je 0x432df9
dec ebx
je 0x432dda
sub ebx, 0x1f44
je 0x432ef8
jmp 0x432f9b
sub ebx, 0x2009
je 0x432ef8
sub ebx, 0x31f
je 0x432e18
jmp 0x432f9b
push 0x40
push 0x67f2c4
push 0x67f276
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
jmp 0x433337
push 0x40
push 0x67f31c
push 0x67f2ce
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
jmp 0x433337
push 0x40
push 0x67f332
mov word [ebp - 0x588], 0x1b0
xor edx, edx
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x100], edx
mov eax, 0x67f326
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x4b0
call fcn.0065ff98
lea ecx, [ebp - 0x100]
push ecx
mov edx, 0x67f32f
lea eax, [ebp - 0x104]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x108], eax
lea edx, [ebp - 0x104]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x108]
pop eax
call fcn.0065fbec
cmp dword [ebp - 0x108], 0
je 0x432e9d
mov edx, dword [ebp - 0x108]
jmp 0x432ea2
mov edx, 0x67f33c
push edx
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.0065fb9c
jmp 0x433337
push 0x40
push 0x67f38a
mov word [ebp - 0x588], 0x1bc
mov edx, 0x67f33e
lea eax, [ebp - 0x10c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x110], eax
lea edx, [ebp - 0x10c]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x110]
mov eax, dword [ebp + 8]
add eax, 0x4b0
call fcn.0065fbec
cmp dword [ebp - 0x110], 0
je 0x432f56
mov edx, dword [ebp - 0x110]
jmp 0x432f5b
mov edx, 0x67f394
push edx
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0065fb9c
jmp 0x433337
mov word [ebp - 0x588], 0x1d4
mov edx, 0x67f396
lea eax, [ebp - 0xfc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x1c8
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
cmp dword [eax + 0x84], 0
je 0x4332ea
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x84]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0x84]
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 1
jl 0x4331b6
mov word [ebp - 0x588], 0x1e0
xor ecx, ecx
mov dword [ebp - 0x118], ecx
lea edx, [ebp - 0x118]
inc dword [ebp - 0x57c]
mov eax, dword [ebp - 0x5a4]
call fcn.004bdbe8
lea edx, [ebp - 0x118]
xor eax, eax
mov dword [ebp - 0x11c], eax
lea ecx, [ebp - 0x11c]
inc dword [ebp - 0x57c]
mov eax, 0x67f397
call fcn.0065ff98
lea edx, [ebp - 0x11c]
push edx
mov edx, 0x67f3a4
lea eax, [ebp - 0x120]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x124], eax
lea edx, [ebp - 0x120]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x124]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x124]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x448]
mov edx, dword [edx]
call fcn.005507b8
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x1ec
mov edx, 0x67f3a7
lea eax, [ebp - 0x128]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x128]
lea eax, [ebp - 0xfc]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x204
xor ecx, ecx
mov dword [ebp - 0x114], ecx
lea edx, [ebp - 0x114]
inc dword [ebp - 0x57c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x448]
call fcn.00550780
mov word [ebp - 0x588], 0x1f8
lea edx, [ebp - 0x114]
lea eax, [ebp - 0xfc]
call fcn.0065fbd8
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x1c8
jmp 0x4332da
cmp dword [ebp - 0x5a4], 0
jne 0x4332da
mov word [ebp - 0x588], 0x210
xor ecx, ecx
mov eax, 0x67f3db
mov dword [ebp - 0x12c], ecx
lea ecx, [ebp - 0x12c]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x4b0
call fcn.0065ff98
lea eax, [ebp - 0x12c]
push eax
mov edx, 0x67f3e0
lea eax, [ebp - 0x130]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor ecx, ecx
mov dword [ebp - 0x134], ecx
lea ecx, [ebp - 0x134]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x130]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x134]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x448]
mov edx, dword [edx]
call fcn.005507b8
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x21c
xor ecx, ecx
mov dword [ebp - 0x138], ecx
lea edx, [ebp - 0x138]
inc dword [ebp - 0x57c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x448]
call fcn.00550780
lea edx, [ebp - 0x138]
lea eax, [ebp - 0xfc]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp + 8]
mov dl, 1
mov eax, dword [ecx + 0x448]
call fcn.005506a0
push 0x40
push 0x67f40e
cmp dword [ebp - 0xfc], 0
je 0x433302
mov ecx, dword [ebp - 0xfc]
jmp 0x433307
mov ecx, 0x67f418
push ecx
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.0065fb9c
jmp 0x433337
mov word [ebp - 0x588], 0x234
mov edx, 0x67f41a
lea eax, [ebp - 0xf4]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0x228
mov word [ebp - 0x588], 0x240
mov dword [ebp - 0xf8], ecx
lea ecx, [ebp - 0xf8]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0xf4]
lea eax, [ebp - 0xf4]
call fcn.0065fbec
mov word [ebp - 0x588], 0x228
cmp dword [ebp - 0xf8], 0
je 0x4333a7
mov eax, dword [ebp - 0xf8]
jmp 0x4333ac
mov eax, 0x67f428
push eax
mov ecx, 0x67f41e
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, 0x67f42a
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x168
jmp 0x43c7e4
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
cmp dword [eax + 0xc8], 0
je 0x433667
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
cmp dword [ecx + 0xc4], 0
je 0x433667
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0xc8]
test eax, eax
je 0x433667
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xc4]
test eax, eax
jne 0x433628
mov word [ebp - 0x588], 0x24c
mov edx, 0x67f43c
lea eax, [ebp - 0x15c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x258
mov ecx, dword [ebp + 8]
add ecx, 0x4f8
mov dword [ebp - 0x5ac], ecx
mov eax, dword [ebp - 0x5ac]
cmp dword [eax], 0
jne 0x4334d6
mov edx, 0x67f454
jmp 0x4334de
mov ecx, dword [ebp - 0x5ac]
mov edx, dword [ecx]
mov dword [ebp - 0x5b0], edx
lea eax, [ebp - 0x160]
xor ecx, ecx
mov edx, dword [ebp - 0x5b0]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x160]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
push ecx
cmp dword [ebp - 0xac], 0
jne 0x43351c
mov eax, 0x67f453
jmp 0x433522
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x5a8], eax
lea eax, [ebp - 0x164]
xor ecx, ecx
mov edx, dword [ebp - 0x5a8]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x164]
inc dword [ebp - 0x57c]
mov edx, dword [eax]
push edx
mov ecx, dword [ebp + 8]
push ecx
call fcn.00464720
add esp, 0xc
test al, al
sete al
and eax, 1
mov edx, 2
push eax
lea eax, [ebp - 0x164]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x160]
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x433667
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0xb0]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x264
mov edx, 0x67f455
lea eax, [ebp - 0x168]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x168
mov word [ebp - 0x588], 0x270
mov edx, 0x67f46c
lea eax, [ebp - 0x16c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.0065fb9c
mov eax, dword [ebp + 8]
call fcn.004439f0
mov byte [ebp - 0x5b1], al
lea eax, [ebp - 0x170]
mov word [ebp - 0x588], 0x27c
mov edx, 0x67f488
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x294
mov edx, 0x67f4ab
lea eax, [ebp - 0x13c]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2a0
mov edx, 0x67f4ad
lea eax, [ebp - 0x140]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2ac
mov edx, 0x67f4ae
lea eax, [ebp - 0x144]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2b8
mov edx, 0x67f4af
lea eax, [ebp - 0x148]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2c4
mov edx, 0x67f4b0
lea eax, [ebp - 0x14c]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov edx, 0x67f4b1
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2d0
lea eax, [ebp - 0x150]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2dc
mov edx, 0x67f4b2
lea eax, [ebp - 0x154]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov bl, 1
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x2e8
push 0x67f4b3
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0xac]
pop ecx
mov dword [ebp - 0x5c4], eax
lea eax, [ebp - 0x174]
xor ecx, ecx
mov edx, dword [ebp - 0x5c4]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x174]
inc dword [ebp - 0x57c]
mov dword [ebp - 0x5c0], ecx
lea eax, [ebp - 0x13c]
mov edx, dword [ebp - 0x5c0]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x174]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x2f4
xor ecx, ecx
mov dword [ebp - 0x178], ecx
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x178]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x13c]
mov eax, 0x67f4ba
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0x17c], ecx
lea edx, [ebp - 0x178]
lea eax, [ebp - 0x17c]
call fcn.004765ac
lea ecx, [ebp - 0x17c]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.0040a464
cmp byte [ebp - 0x5b1], 0
jne 0x43408d
mov word [ebp - 0x588], 0x300
mov edx, 0x67f4c0
lea eax, [ebp - 0x180]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x180]
lea eax, [ebp - 0x13c]
call fcn.0065e010
push eax
lea eax, [ebp - 0x180]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x433c11
push 0
push 0x67f4f0
push 0x67f4c2
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x30c
mov edx, 0x67f4f6
lea eax, [ebp - 0x184]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x184]
lea eax, [ebp - 0x13c]
call fcn.0065e010
push eax
lea eax, [ebp - 0x184]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x433dae
push 0
push 0x67f524
push 0x67f4f8
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x318
mov edx, 0x67f52a
lea eax, [ebp - 0x188]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x188]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
jne 0x433e08
cmp dword [ebp - 0x13c], 0
je 0x433dfe
mov edx, dword [ebp - 0x13c]
mov ecx, dword [edx - 4]
jmp 0x433e00
xor ecx, ecx
test ecx, ecx
jle 0x433e08
xor eax, eax
jmp 0x433e0d
mov eax, 1
push eax
lea eax, [ebp - 0x188]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x43408d
push 0x40
push 0x67f562
push 0x67f52c
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
cmp byte [ebp - 0x5b1], 0
jne 0x436557
mov word [ebp - 0x588], 0x324
mov edx, 0x67f56c
lea eax, [ebp - 0x18c]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x18c]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x18c]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
je 0x436557
mov word [ebp - 0x588], 0x330
push 0x67f56e
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xac]
pop ecx
mov dword [ebp - 0x5cc], eax
lea eax, [ebp - 0x190]
xor ecx, ecx
mov edx, dword [ebp - 0x5cc]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x190]
inc dword [ebp - 0x57c]
mov dword [ebp - 0x5c8], ecx
lea eax, [ebp - 0x140]
mov edx, dword [ebp - 0x5c8]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x190]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x33c
push 0x67f575
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x4e8]
call dword [ecx + 0xac]
pop ecx
mov dword [ebp - 0x5d4], eax
lea eax, [ebp - 0x194]
xor ecx, ecx
mov edx, dword [ebp - 0x5d4]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x194]
inc dword [ebp - 0x57c]
mov dword [ebp - 0x5d0], eax
lea eax, [ebp - 0x144]
mov edx, dword [ebp - 0x5d0]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x194]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x348
push 0x67f57c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x4e8]
call dword [ecx + 0xac]
pop ecx
mov dword [ebp - 0x5dc], eax
lea eax, [ebp - 0x198]
xor ecx, ecx
mov edx, dword [ebp - 0x5dc]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x198]
inc dword [ebp - 0x57c]
mov dword [ebp - 0x5d8], eax
lea eax, [ebp - 0x148]
mov edx, dword [ebp - 0x5d8]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x198]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x354
xor ecx, ecx
mov dword [ebp - 0x19c], ecx
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x19c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x148]
mov eax, 0x67f583
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0x1a0], ecx
lea edx, [ebp - 0x19c]
lea eax, [ebp - 0x1a0]
call fcn.004765ac
lea ecx, [ebp - 0x1a0]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x360
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x4e8]
call dword [ecx + 0xf8]
mov dword [ebp - 0x5e4], eax
lea eax, [ebp - 0x1a4]
xor ecx, ecx
mov edx, dword [ebp - 0x5e4]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x1a4]
inc dword [ebp - 0x57c]
mov dword [ebp - 0x5e0], eax
lea eax, [ebp - 0x14c]
mov edx, dword [ebp - 0x5e0]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x36c
xor ecx, ecx
mov dword [ebp - 0x1a8], ecx
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x1a8]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x14c]
mov eax, 0x67f58b
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0x1ac], ecx
lea edx, [ebp - 0x1a8]
lea eax, [ebp - 0x1ac]
call fcn.004765ac
lea ecx, [ebp - 0x1ac]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x378
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x4e8]
call dword [ecx + 0xa4]
mov edx, eax
lea eax, [ebp - 0x1b0]
call fcn.0065fa0c
mov edx, eax
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x384
xor ecx, ecx
mov dword [ebp - 0x1b4], ecx
lea ecx, [ebp - 0x1b4]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x150]
mov eax, 0x67f5a2
call fcn.0065ff98
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x390
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x4e8]
call dword [ecx + 0x100]
mov dword [ebp - 0x5e8], eax
lea eax, [ebp - 0x1b8]
xor ecx, ecx
mov edx, dword [ebp - 0x5e8]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x154]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x39c
xor ecx, ecx
mov dword [ebp - 0x1bc], ecx
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x1bc]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x154]
mov eax, 0x67f5bb
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0x1c0], ecx
lea edx, [ebp - 0x1bc]
lea eax, [ebp - 0x1c0]
call fcn.004765ac
lea ecx, [ebp - 0x1c0]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3a8
mov edx, 0x67f5d5
lea eax, [ebp - 0x1c4]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0x148]
call fcn.0065e010
test al, al
jne 0x4345de
cmp dword [ebp - 0x148], 0
je 0x4345d4
mov ecx, dword [ebp - 0x148]
mov ecx, dword [ecx - 4]
jmp 0x4345d6
xor ecx, ecx
test ecx, ecx
jle 0x4345de
xor eax, eax
jmp 0x4345e3
mov eax, 1
push eax
lea eax, [ebp - 0x1c4]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x434748
push 0x40
push 0x67f60e
push 0x67f5d6
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x3b4
mov edx, 0x67f618
lea eax, [ebp - 0x1c8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1c8]
lea eax, [ebp - 0x150]
call fcn.0065fc70
test al, al
jne 0x43479a
cmp dword [ebp - 0x150], 0
je 0x434790
mov edx, dword [ebp - 0x150]
mov ecx, dword [edx - 4]
jmp 0x434792
xor ecx, ecx
test ecx, ecx
jle 0x43479a
xor eax, eax
jmp 0x43479f
mov eax, 1
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x434a1e
push 0x40
push 0x67f652
push 0x67f61a
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x3c0
mov edx, 0x67f65c
lea eax, [ebp - 0x1cc]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1cc]
lea eax, [ebp - 0x154]
call fcn.0065e010
test al, al
jne 0x434a78
cmp dword [ebp - 0x154], 0
je 0x434a6e
mov ecx, dword [ebp - 0x154]
mov ecx, dword [ecx - 4]
jmp 0x434a70
xor ecx, ecx
test ecx, ecx
jle 0x434a78
xor eax, eax
jmp 0x434a7d
mov eax, 1
push eax
lea eax, [ebp - 0x1cc]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x434be2
push 0x40
push 0x67f696
push 0x67f65e
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x3d8
xor edx, edx
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x1d0], edx
mov edx, 1
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 4
lea eax, [ebp - 0x14c]
call fcn.0043caf0
lea eax, [ebp - 0x1d0]
call fcn.0065e2b0
mov word [ebp - 0x5ea], ax
lea eax, [ebp - 0x1d0]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x3e4
xor ecx, ecx
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x1d4], ecx
lea ecx, [ebp - 0x1d4]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 5
call fcn.0043caf0
lea eax, [ebp - 0x1d4]
call fcn.0065e2b0
mov word [ebp - 0x5ec], ax
lea eax, [ebp - 0x1d4]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x3f0
xor ecx, ecx
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x1d8], ecx
lea ecx, [ebp - 0x1d8]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 7
call fcn.0043caf0
lea eax, [ebp - 0x1d8]
call fcn.0065e2b0
mov word [ebp - 0x5ee], ax
lea eax, [ebp - 0x1d8]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x3fc
xor ecx, ecx
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x1dc], ecx
lea ecx, [ebp - 0x1dc]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 9
call fcn.0043caf0
lea eax, [ebp - 0x1dc]
call fcn.0065e2b0
mov word [ebp - 0x5f0], ax
lea eax, [ebp - 0x1dc]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x408
xor ecx, ecx
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x1e0], ecx
lea ecx, [ebp - 0x1e0]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 0xb
call fcn.0043caf0
lea eax, [ebp - 0x1e0]
call fcn.0065e2b0
mov word [ebp - 0x5f2], ax
lea eax, [ebp - 0x1e0]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x414
xor ecx, ecx
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x1e4], ecx
lea ecx, [ebp - 0x1e4]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 0xd
call fcn.0043caf0
lea eax, [ebp - 0x1e4]
call fcn.0065e2b0
mov word [ebp - 0x5f4], ax
lea eax, [ebp - 0x1e4]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x420
mov edx, 0x67f6a0
lea eax, [ebp - 0x1e8]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1e8]
lea eax, [ebp - 0x14c]
call fcn.0065e010
test al, al
jne 0x434f86
mov edx, 0x67f6a5
lea eax, [ebp - 0x1ec]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1ec]
lea eax, [ebp - 0x14c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x1ec]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x434f86
mov edx, 0x67f6aa
lea eax, [ebp - 0x1f0]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1f0]
lea eax, [ebp - 0x14c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x1f0]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x434f86
movzx ecx, word [ebp - 0x5ee]
push ecx
movzx eax, word [ebp - 0x5f0]
push eax
movzx edx, word [ebp - 0x5f2]
push edx
movzx ecx, word [ebp - 0x5ec]
movzx edx, word [ebp - 0x5ea]
mov eax, dword [ebp + 8]
call fcn.004501a0
test al, al
je 0x434f86
xor ecx, ecx
jmp 0x434f8b
mov ecx, 1
push ecx
lea eax, [ebp - 0x1e8]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x43526a
push 0x67f6af
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0xf0]
pop ecx
cmp al, 1
jne 0x43500b
mov word [ebp - 0x588], 0x42c
mov edx, 0x67f6b1
lea eax, [ebp - 0x1f4]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1f4]
mov edx, 2
call fcn.0065fb9c
xor ebx, ebx
jmp 0x43526a
push 0x40
push 0x67f6ea
push 0x67f6ce
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
lea edx, [ebp - 0x154]
lea eax, [ebp - 0x14c]
call fcn.0065e040
test al, al
je 0x435426
push 0x67f6f4
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xf0]
pop ecx
cmp al, 1
jne 0x4352e2
mov word [ebp - 0x588], 0x438
mov edx, 0x67f6f6
lea eax, [ebp - 0x1f8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1f8]
mov edx, 2
call fcn.0065fb9c
xor ebx, ebx
jmp 0x435426
push 0x40
push 0x67f730
push 0x67f714
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x444
mov edx, 0x67f73a
lea eax, [ebp - 0x1fc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x1fc]
lea eax, [ebp - 0x150]
call fcn.0065fc7c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x1fc]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x43578e
mov word [ebp - 0x588], 0x450
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x200]
xor ecx, ecx
call fcn.0065de84
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x200]
lea eax, [ebp - 0x14c]
call fcn.0065e040
push eax
lea eax, [ebp - 0x200]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x43578e
push 0x67f749
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0xf0]
pop ecx
cmp al, 1
jne 0x43552f
mov word [ebp - 0x588], 0x45c
mov edx, 0x67f74b
lea eax, [ebp - 0x204]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x204]
mov edx, 2
call fcn.0065fb9c
xor ebx, ebx
jmp 0x43578e
push 0x40
push 0x67f784
push 0x67f768
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
test bl, bl
jne 0x435a8a
mov word [ebp - 0x588], 0x468
mov edx, 0x67f78e
lea eax, [ebp - 0x208]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x208]
push ecx
call fcn.004c01b8
fstp qword [ebp - 0x5fc]
lea eax, [ebp - 0x5fc]
xor edx, edx
mov dword [ebp - 0x20c], edx
lea ecx, [ebp - 0x20c]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065f8a4
lea edx, [ebp - 0x20c]
lea eax, [ebp - 0x210]
xor ecx, ecx
call fcn.0065de84
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x210]
lea eax, [ebp - 0x14c]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x210]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x20c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x208]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x474
xor ecx, ecx
mov dword [ebp - 0x214], ecx
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x214]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x14c]
mov eax, 0x67f79d
call fcn.00423c40
xor ecx, ecx
mov dword [ebp - 0x218], ecx
lea edx, [ebp - 0x214]
lea eax, [ebp - 0x218]
call fcn.004765ac
lea ecx, [ebp - 0x218]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x218]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.0040a464
lea edx, [ebp - 0x154]
lea eax, [ebp - 0x14c]
call fcn.0065e040
test al, al
je 0x435d48
mov word [ebp - 0x588], 0x480
mov edx, 0x67f7a7
lea eax, [ebp - 0x21c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x21c]
mov edx, 2
call fcn.0065fb9c
push 0
push 0x67f7e2
push 0x67f7ba
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
push 0x67f7e8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0xf0]
pop ecx
cmp al, 1
jne 0x435ae9
mov word [ebp - 0x588], 0x48c
mov edx, 0x67f7ea
lea eax, [ebp - 0x220]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x220]
mov edx, 2
call fcn.0065fb9c
mov bl, 1
jmp 0x435d48
push 0x40
push 0x67f824
push 0x67f808
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x498
mov edx, 0x67f82e
lea eax, [ebp - 0x224]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x224]
lea eax, [ebp - 0x14c]
call fcn.0065e028
test al, al
je 0x435dcf
mov edx, 0x67f830
lea eax, [ebp - 0x228]
call fcn.0065fb38
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x228]
lea eax, [ebp - 0x150]
call fcn.0065fc7c
test al, al
lea eax, [ebp - 0x228]
setne cl
and ecx, 1
mov edx, 2
push ecx
dec dword [ebp - 0x57c]
call fcn.0065fb9c
pop ecx
test ecx, ecx
jne 0x435dd3
xor ecx, ecx
jmp 0x435dd8
mov ecx, 1
push ecx
lea eax, [ebp - 0x224]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x43654e
push 0xd
push 3
push 0
push 0
push 0
lea eax, [ebp - 0x604]
mov cx, 5
mov dx, 0x7dd
call fcn.0065f838
mov word [ebp - 0x588], 0x3cc
xor eax, eax
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x234], eax
lea eax, [ebp - 0x14c]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 7
call fcn.0043caf0
lea eax, [ebp - 0x234]
call fcn.0065e2b0
push eax
xor ecx, ecx
mov dword [ebp - 0x238], ecx
lea eax, [ebp - 0x238]
inc dword [ebp - 0x57c]
push eax
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x14c]
mov ecx, 2
mov edx, 9
call fcn.0043caf0
lea eax, [ebp - 0x238]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x23c], edx
lea ecx, [ebp - 0x23c]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 0xb
lea eax, [ebp - 0x14c]
call fcn.0043caf0
lea eax, [ebp - 0x23c]
call fcn.0065e2b0
push eax
xor edx, edx
mov dword [ebp - 0x240], edx
lea ecx, [ebp - 0x240]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 0xd
lea eax, [ebp - 0x14c]
call fcn.0043caf0
lea eax, [ebp - 0x240]
call fcn.0065e2b0
push eax
push 0
xor edx, edx
lea ecx, [ebp - 0x230]
mov dword [ebp - 0x230], edx
mov edx, 5
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
lea eax, [ebp - 0x14c]
call fcn.0043caf0
lea eax, [ebp - 0x230]
call fcn.0065e2b0
push eax
xor edx, edx
mov word [ebp - 0x588], 0x4b0
mov dword [ebp - 0x22c], edx
lea ecx, [ebp - 0x22c]
inc dword [ebp - 0x57c]
push ecx
inc dword [ebp - 0x57c]
mov ecx, 4
mov edx, 1
lea eax, [ebp - 0x14c]
call fcn.0043caf0
lea eax, [ebp - 0x22c]
call fcn.0065e2b0
mov edx, eax
lea eax, [ebp - 0x60c]
pop ecx
call fcn.0065f838
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x23c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x234]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x230]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x22c]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x4a4
cmp dword [ebp - 0x150], 0
je 0x436046
mov ecx, dword [ebp - 0x150]
mov ecx, dword [ecx - 4]
jmp 0x436048
xor ecx, ecx
test ecx, ecx
jg 0x4360a0
mov word [ebp - 0x588], 0x4bc
xor eax, eax
mov dword [ebp - 0x244], eax
lea edx, [ebp - 0x14c]
lea eax, [ebp - 0x244]
call fcn.004765ac
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x244]
lea eax, [ebp - 0x150]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x244]
mov edx, 2
call fcn.0065fb9c
jmp 0x43613b
mov word [ebp - 0x588], 0x4c8
mov edx, 0x67f84e
lea eax, [ebp - 0x248]
call fcn.0065fb38
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x248]
lea eax, [ebp - 0x150]
call fcn.0065fc70
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x248]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x43613b
mov word [ebp - 0x588], 0x4d4
xor ecx, ecx
mov dword [ebp - 0x24c], ecx
lea edx, [ebp - 0x14c]
lea eax, [ebp - 0x24c]
call fcn.004765ac
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x24c]
lea eax, [ebp - 0x150]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x24c]
mov edx, 2
call fcn.0065fb9c
xor ecx, ecx
lea eax, [ebp - 0x150]
mov dword [ebp - 0x258], ecx
lea ecx, [ebp - 0x258]
push ecx
mov ecx, 2
inc dword [ebp - 0x57c]
mov edx, 7
call fcn.0065fe60
lea eax, [ebp - 0x258]
call fcn.0065ff48
push eax
xor ecx, ecx
mov dword [ebp - 0x25c], ecx
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x150]
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 9
call fcn.0065fe60
lea eax, [ebp - 0x25c]
call fcn.0065ff48
push eax
xor edx, edx
mov dword [ebp - 0x260], edx
lea ecx, [ebp - 0x260]
push ecx
mov ecx, 2
inc dword [ebp - 0x57c]
mov edx, 0xb
lea eax, [ebp - 0x150]
call fcn.0065fe60
lea eax, [ebp - 0x260]
call fcn.0065ff48
push eax
xor edx, edx
mov dword [ebp - 0x264], edx
lea ecx, [ebp - 0x264]
push ecx
mov ecx, 2
inc dword [ebp - 0x57c]
mov edx, 0xd
lea eax, [ebp - 0x150]
call fcn.0065fe60
lea eax, [ebp - 0x264]
call fcn.0065ff48
push eax
push 0
xor edx, edx
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x254], edx
push ecx
inc dword [ebp - 0x57c]
mov ecx, 2
mov edx, 5
lea eax, [ebp - 0x150]
call fcn.0065fe60
lea eax, [ebp - 0x254]
call fcn.0065ff48
push eax
xor edx, edx
mov word [ebp - 0x588], 0x4e0
mov dword [ebp - 0x250], edx
lea ecx, [ebp - 0x250]
push ecx
mov ecx, 4
inc dword [ebp - 0x57c]
mov edx, 1
lea eax, [ebp - 0x150]
call fcn.0065fe60
lea eax, [ebp - 0x250]
call fcn.0065ff48
mov edx, eax
lea eax, [ebp - 0x614]
pop ecx
call fcn.0065f838
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x264]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x260]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x25c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x258]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x254]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x250]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x4a4
fld qword [ebp - 0x60c]
fsub qword [ebp - 0x614]
fmul dword [0x43cae4]
fmul dword [0x43cae8]
fstp qword [ebp - 0x5bc]
mov word [ebp - 0x588], 0x4ec
add esp, 0xfffffff4
xor ecx, ecx
fld qword [ebp - 0x5bc]
fstp xword [esp]
mov dword [ebp - 0x268], ecx
lea eax, [ebp - 0x268]
inc dword [ebp - 0x57c]
call fcn.004bfaa0
lea edx, [ebp - 0x268]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x268]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x4f8
mov edx, 0x67f850
lea eax, [ebp - 0x26c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x26c]
lea eax, [ebp - 0x150]
call fcn.0065fc7c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x26c]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x436545
fld qword [ebp - 0x5bc]
fld dword [0x43caec]
fxch st(1)
fucompp
fnstsw ax
test ah, 5
jp 0x436545
push 0
push 0x67f888
push 0x67f860
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x3cc
mov word [ebp - 0x588], 0x288
cmp byte [ebp - 0x5b1], 0
jne 0x437f00
mov word [ebp - 0x588], 0x504
mov edx, 0x67f88e
lea eax, [ebp - 0x270]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x270]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x270]
setne dl
and edx, 1
push edx
mov edx, 2
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
je 0x437f00
mov word [ebp - 0x588], 0x510
mov edx, 0x67f890
lea eax, [ebp - 0x278]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x278]
lea eax, [ebp - 0x150]
call fcn.0065fc7c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x278]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x4368a0
lea eax, [ebp - 0x148]
call fcn.0065e2b0
mov dword [ebp - 0x880], eax
fild dword [ebp - 0x880]
fld qword [ebp - 0x5bc]
fxch st(1)
fucompp
fnstsw ax
test ah, 0x41
jp 0x4368a0
push 0
push 0x67f8cc
push 0x67f8a0
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov byte [ebp - 0x615], 0
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x51c
mov edx, 0x67f8d2
lea eax, [ebp - 0x27c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.0065fb9c
mov eax, dword [ebp + 8]
call fcn.00424314
mov word [ebp - 0x588], 0x528
mov edx, 0x67f8ec
lea eax, [ebp - 0x280]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x280]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x534
xor ecx, ecx
mov dword [ebp - 0x284], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x284]
call fcn.004765ac
lea ecx, [ebp - 0x284]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
lea ecx, [ebp - 0x615]
mov eax, dword [ebp + 8]
call fcn.0044d6e8
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x284]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x436b06
mov eax, dword [ebp + 8]
xor edx, edx
mov byte [eax + 0x48c], 0
mov eax, dword [ebp + 8]
call fcn.005509d4
push 0x67f90e
mov ecx, 0x67f904
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x4369dc
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 0
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x288]
mov dword [edx + 0x2440], 1
mov word [ebp - 0x588], 0x540
mov edx, 0x67f912
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x288]
mov edx, 2
call fcn.0065fb9c
lea ecx, [ebp - 0x87c]
push ecx
push 0x104
call sub.KERNEL32.DLL_GetCurrentDirectoryW
mov word [ebp - 0x588], 0x558
lea edx, [ebp - 0x87c]
lea eax, [ebp - 0x274]
call fcn.0065fb38
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x54c
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x4a4], 0
mov ecx, dword [sym.WoTax.exe__FormMain]
cmp dword [ecx], 0
jne 0x436bbc
mov eax, dword [0x6ae0a4]
mov ecx, dword [eax]
mov dl, 1
mov eax, dword [0x6996e8]
call fcn.004655b0
mov edx, dword [sym.WoTax.exe__FormMain]
mov dword [edx], eax
mov word [ebp - 0x588], 0x564
mov edx, 0x67f93f
lea eax, [ebp - 0x28c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, eax
xor eax, eax
lea ecx, [ebp - 0x290]
mov dword [ebp - 0x290], eax
lea eax, [ebp - 0x274]
inc dword [ebp - 0x57c]
call fcn.0065fbec
lea edx, [ebp - 0x290]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
add eax, 0x424
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x290]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x28c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov dl, byte [ecx + 0x445]
mov eax, dword [eax + 0x3bc]
call fcn.005506a0
mov edx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [edx]
xor edx, edx
mov dl, byte [ecx + 0x445]
mov ecx, dword [eax]
cmp edx, 1
sbb edx, edx
mov eax, dword [ecx + 0x3c0]
neg edx
call fcn.005506a0
mov edx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [edx]
cmp byte [ecx + 0x445], 0
je 0x436d93
mov word [ebp - 0x588], 0x570
mov edx, 0x67f95f
lea eax, [ebp - 0x294]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov eax, dword [sym.WoTax.exe__newMainForm]
lea edx, [ebp - 0x294]
mov eax, dword [eax]
add eax, 0x450
call fcn.0065fd3c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x294]
mov edx, 2
call fcn.0065fb9c
pop ecx
test ecx, ecx
je 0x436d43
mov word [ebp - 0x588], 0x57c
mov edx, 0x67f966
lea eax, [ebp - 0x298]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x298]
mov edx, 2
call fcn.0065fb9c
jmp 0x436de1
mov word [ebp - 0x588], 0x588
mov edx, 0x67f97e
lea eax, [ebp - 0x29c]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x29c]
mov edx, 2
call fcn.0065fb9c
jmp 0x436de1
mov word [ebp - 0x588], 0x594
mov edx, 0x67f996
lea eax, [ebp - 0x2a0]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3c0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2a0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e0]
call fcn.005506a0
mov word [ebp - 0x588], 0x5a0
mov edx, 0x67f9a1
lea eax, [ebp - 0x2a4]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3e0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2a4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [ecx]
cmp byte [ecx + 0x444], 0
je 0x43774b
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
cmp dword [edx + 0x454], 3
je 0x436e93
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp dword [eax + 0x454], 1
jne 0x437080
mov word [ebp - 0x588], 0x5ac
mov edx, 0x67f9ac
lea eax, [ebp - 0x2a8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov edx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x40c]
mov edx, 8
call fcn.004ec108
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov word [ebp - 0x588], 0x5b8
mov edx, 0x67f9b7
lea eax, [ebp - 0x2ac]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2ac]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov word [ebp - 0x588], 0x5c4
mov edx, 0x67f9be
lea eax, [ebp - 0x2b0]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3ec]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2b0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e8]
call fcn.005506a0
jmp 0x437932
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp byte [eax + 0x446], 0
je 0x4370e2
mov word [ebp - 0x588], 0x5d0
mov edx, 0x67f9ca
lea eax, [ebp - 0x2b4]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov edx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2b4]
mov edx, 2
call fcn.0065fb9c
jmp 0x437130
mov word [ebp - 0x588], 0x5dc
mov edx, 0x67f9d5
lea eax, [ebp - 0x2b8]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2b8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
cmp byte [edx + 0x446], 0
je 0x437185
mov edx, 8
jmp 0x43718a
mov edx, 6
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
mov eax, dword [eax + 0x40c]
call fcn.004ec108
mov word [ebp - 0x588], 0x5e8
mov edx, 0x67f9e0
lea eax, [ebp - 0x2bc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov edx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e8]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2bc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x448]
cmp eax, 5
ja case.default.0x43722c
jmp dword [eax*4 + 0x437233]
mov edx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [edx]
mov dl, 1
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov word [ebp - 0x588], 0x5f4
mov edx, 0x67f9ec
lea eax, [ebp - 0x2c0]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2c0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
jmp case.default.0x43722c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov word [ebp - 0x588], 0x600
mov edx, 0x67f9f3
lea eax, [ebp - 0x2c4]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f4]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2c4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43722c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f8]
call fcn.005506a0
mov word [ebp - 0x588], 0x60c
mov edx, 0x67f9fc
lea eax, [ebp - 0x2c8]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f8]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2c8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
jmp case.default.0x43722c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov word [ebp - 0x588], 0x618
mov edx, 0x67fa05
lea eax, [ebp - 0x2cc]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3fc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2cc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43722c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x400]
call fcn.005506a0
mov word [ebp - 0x588], 0x624
mov edx, 0x67fa0e
lea eax, [ebp - 0x2d0]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x400]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2d0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
jmp case.default.0x43722c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
mov word [ebp - 0x588], 0x630
mov edx, 0x67fa17
lea eax, [ebp - 0x2d4]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x404]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2d4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [ecx]
cmp byte [ecx + 0x446], 0
jne 0x437932
jmp 0x437932
mov word [ebp - 0x588], 0x63c
mov edx, 0x67fa22
lea eax, [ebp - 0x2d8]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2d8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x40c]
mov edx, 8
call fcn.004ec108
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f0]
call fcn.005506a0
mov word [ebp - 0x588], 0x648
mov edx, 0x67fa2d
lea eax, [ebp - 0x2dc]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2dc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x404]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov word [ebp - 0x588], 0x654
mov edx, 0x67fa34
lea eax, [ebp - 0x2e0]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3ec]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2e0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov ecx, dword [ecx]
mov eax, dword [ecx + 0x3e8]
call fcn.005506a0
mov word [ebp - 0x588], 0x660
xor ecx, ecx
mov eax, 0x67fa40
mov dword [ebp - 0x2e4], ecx
lea ecx, [ebp - 0x2e4]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x584
call fcn.0065ff98
lea edx, [ebp - 0x2e4]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2e4]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp + 8]
add ecx, 0x584
mov dword [ebp - 0x620], ecx
mov ecx, dword [ebp - 0x620]
cmp dword [ecx], 0
je 0x4379ac
mov eax, dword [ebp - 0x620]
mov edx, dword [eax]
jmp 0x4379b1
mov edx, 0x67fa4e
mov dword [ebp - 0x61c], edx
mov word [ebp - 0x588], 0x54c
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x61c]
push eax
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x61c]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x624], eax
mov ecx, dword [ebp - 0x624]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x624]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x628]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x624]
push ecx
mov eax, dword [ebp - 0x628]
push eax
mov edx, dword [ebp - 0x61c]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x61c]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x628]
push eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0xa8]
pop ecx
mov eax, dword [ebp - 0x628]
push eax
call fcn.00639dfc
pop ecx
xor edx, edx
mov word [ebp - 0x588], 0x66c
mov dword [ebp - 0x2e8], edx
lea ecx, [ebp - 0x2e8]
inc dword [ebp - 0x57c]
mov eax, 0x67fa50
mov edx, dword [ebp + 8]
add edx, 0x520
call fcn.0065ff98
mov eax, dword [sym.WoTax.exe__FormMain]
lea edx, [ebp - 0x2e8]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [ecx + 0x3b8]
call fcn.005507b8
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2e8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x678
mov edx, 0x67fa5b
lea eax, [ebp - 0x2ec]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x2ec]
lea eax, [ebp - 0x150]
call fcn.0065fc70
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2ec]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x437c1f
cmp dword [ebp - 0x14c], 0
jne 0x437b2d
mov ecx, 0x67fa6a
jmp 0x437b33
mov ecx, dword [ebp - 0x14c]
push ecx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0xa0]
pop ecx
mov dword [ebp - 0x62c], eax
mov word [ebp - 0x588], 0x54c
cmp dword [ebp - 0x62c], 0
je 0x437c1f
mov word [ebp - 0x588], 0x684
xor ecx, ecx
mov dword [ebp - 0x2f0], ecx
lea edx, [ebp - 0x2f0]
inc dword [ebp - 0x57c]
mov eax, dword [ebp - 0x62c]
call fcn.004bdbe8
lea edx, [ebp - 0x2f0]
xor eax, eax
mov dword [ebp - 0x2f4], eax
lea ecx, [ebp - 0x2f4]
inc dword [ebp - 0x57c]
mov eax, 0x67fa6b
call fcn.0065ff98
cmp dword [ebp - 0x2f4], 0
je 0x437bbd
mov edx, dword [ebp - 0x2f4]
jmp 0x437bc2
mov edx, 0x67fa92
lea eax, [ebp - 0x2f8]
call fcn.0065fb38
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2f8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2f4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2f0]
mov edx, 2
call fcn.0065fb9c
test bl, bl
jne 0x437c3d
push 0
push 0x67fada
push 0x67fa94
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov eax, dword [ebp + 8]
call fcn.0053399c
mov eax, dword [ebp + 8]
call fcn.005500ac
mov edx, dword [ebp + 8]
mov dword [edx + 0x4a0], eax
xor edx, edx
mov eax, dword [ebp + 8]
call fcn.0052eb4c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x437c79
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 1
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
call fcn.005339a4
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 0x274]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x690
mov edx, str.getcastate_begin...
lea eax, [ebp - 0x2fc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x2fc]
mov edx, 2
call fcn.0065fb9c
mov eax, dword [ebp + 8]
call fcn.00424314
mov word [ebp - 0x588], 0x69c
mov edx, str.getcastate_end...
lea eax, [ebp - 0x300]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x300]
mov edx, 2
call fcn.0065fb9c
mov byte [ebp - 0x62d], 0
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x6a8
xor ecx, ecx
mov dword [ebp - 0x304], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x304]
call fcn.004765ac
lea ecx, [ebp - 0x304]
inc dword [ebp - 0x57c]
mov edx, dword [ecx]
lea ecx, [ebp - 0x62d]
mov eax, dword [ebp + 8]
call fcn.004247e4
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x304]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x438166
mov eax, dword [ebp + 8]
xor edx, edx
mov byte [eax + 0x48c], 0
mov eax, dword [ebp + 8]
call fcn.005509d4
push 0x67fb10
mov ecx, 0x67fb06
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x43803c
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 0
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x154]
sub dword [ebp - 0x57c], 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x6b4
mov edx, str.loginCA_begin...
lea eax, [ebp - 0x308]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x308]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
cmp dword [ecx], 0
je 0x4381c6
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
call fcn.004d8320
mov edx, dword [sym.WoTax.exe__FormMain]
xor ecx, ecx
mov dword [edx], ecx
mov word [ebp - 0x588], 0x6c0
xor eax, eax
mov dword [ebp - 0x158], eax
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x288
mov word [ebp - 0x588], 0x6cc
mov word [ebp - 0x588], 0x6e4
push 0x67fb25
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x90]
pop ecx
mov edx, eax
lea eax, [ebp - 0x30c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, 0x67fb2a
mov word [ebp - 0x588], 0x6d8
mov word [ebp - 0x588], 0x6f0
lea eax, [ebp - 0x310]
call fcn.0065fb38
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x310]
lea eax, [ebp - 0x158]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x310]
mov edx, 2
call fcn.0065fb9c
mov eax, dword [ebp - 0x30c]
call fcn.0062c2e4
mov edx, dword [0x629d5c]
call fcn.00650cf0
mov dword [ebp - 0x634], eax
mov word [ebp - 0x588], 0x6d8
cmp dword [ebp - 0x634], 0
je 0x43839c
mov word [ebp - 0x588], 0x708
mov edx, 0x67fb2c
lea eax, [ebp - 0x314]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x634]
call fcn.0062c490
mov dword [ebp - 0x638], eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x314]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x6fc
cmp dword [ebp - 0x638], 0
je 0x438393
mov word [ebp - 0x588], 0x714
mov eax, dword [ebp - 0x638]
call fcn.0062b734
mov dword [ebp - 0x63c], eax
xor edx, edx
mov dword [ebp - 0x318], edx
lea edx, [ebp - 0x318]
inc dword [ebp - 0x57c]
mov eax, dword [ebp - 0x63c]
mov ecx, dword [eax]
call dword [ecx]
lea eax, [ebp - 0x318]
xor edx, edx
mov dword [ebp - 0x31c], edx
lea edx, [ebp - 0x31c]
inc dword [ebp - 0x57c]
call fcn.0065fdd4
lea edx, [ebp - 0x31c]
lea eax, [ebp - 0x158]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x31c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x318]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x6d8
cmp dword [ebp - 0x158], 0
je 0x4383b0
mov ecx, dword [ebp - 0x158]
mov eax, dword [ecx - 4]
jmp 0x4383b2
xor eax, eax
test eax, eax
jle 0x43840a
mov word [ebp - 0x588], 0x720
mov edx, 0x67fb32
lea eax, [ebp - 0x320]
call fcn.0065fb38
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x320]
lea eax, [ebp - 0x158]
call fcn.0065fc70
test al, al
lea eax, [ebp - 0x320]
setne dl
and edx, 1
push edx
mov edx, 2
dec dword [ebp - 0x57c]
call fcn.0065fb9c
pop ecx
test ecx, ecx
je 0x43845f
mov word [ebp - 0x588], 0x72c
push 0x67fb34
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0x2c]
pop ecx
mov edx, eax
lea eax, [ebp - 0x324]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x324]
lea eax, [ebp - 0x158]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x324]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x30c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x6cc
mov word [ebp - 0x588], 0x288
jmp 0x4384dd
mov word [ebp - 0x588], 0x750
lea edx, [ebp - 0x158]
lea eax, [ebp - 0x32c]
call fcn.0065f6b8
inc dword [ebp - 0x57c]
mov edx, 0x67fb3a
lea eax, [ebp - 0x330]
call fcn.0065f678
mov edx, eax
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x32c]
call fcn.0065f758
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x330]
mov edx, 2
call fcn.0065f70c
pop ecx
test cl, cl
je 0x438556
cmp dword [ebp - 0x158], 0
je 0x438550
mov eax, dword [ebp - 0x158]
mov edx, dword [eax - 4]
jmp 0x438552
xor edx, edx
test edx, edx
jne 0x43855a
xor eax, eax
jmp 0x43855f
mov eax, 1
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x32c]
mov edx, 2
call fcn.0065f70c
pop ecx
test cl, cl
je 0x438ab7
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4e8]
call dword [edx + 0x5c]
push 0x40
push 0x67fb64
mov word [ebp - 0x588], 0x75c
xor ecx, ecx
mov eax, 0x67fb3c
mov dword [ebp - 0x33c], ecx
lea ecx, [ebp - 0x33c]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x4b0
call fcn.0065ff98
lea eax, [ebp - 0x33c]
push eax
mov edx, 0x67fb4b
lea eax, [ebp - 0x340]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor ecx, ecx
mov dword [ebp - 0x344], ecx
lea ecx, [ebp - 0x344]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x340]
pop eax
call fcn.0065fbec
cmp dword [ebp - 0x344], 0
je 0x438610
mov edx, dword [ebp - 0x344]
jmp 0x438615
mov edx, 0x67fb6e
push edx
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x344]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x340]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x33c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x768
xor ecx, ecx
mov eax, 0x67fb70
mov dword [ebp - 0x348], ecx
lea ecx, [ebp - 0x348]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x4b0
call fcn.0065ff98
lea eax, [ebp - 0x348]
push eax
mov edx, 0x67fb8c
lea eax, [ebp - 0x34c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor ecx, ecx
mov dword [ebp - 0x350], ecx
lea ecx, [ebp - 0x350]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x34c]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x350]
mov eax, dword [ebp + 8]
mov edx, dword [edx]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x350]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x34c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x348]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x780
mov edx, 0x67fba6
lea eax, [ebp - 0x334]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0x774
mov word [ebp - 0x588], 0x78c
mov dword [ebp - 0x338], ecx
lea ecx, [ebp - 0x338]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x334]
lea eax, [ebp - 0x334]
call fcn.0065fbec
mov word [ebp - 0x588], 0x774
cmp dword [ebp - 0x338], 0
je 0x438795
mov eax, dword [ebp - 0x338]
jmp 0x43879a
mov eax, 0x67fbb4
push eax
mov ecx, 0x67fbaa
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, 0x67fbb6
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x4387e0
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 0
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x338]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x334]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x7a4
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x354]
add edx, 0x58c
call fcn.0065fa4c
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0x798
mov word [ebp - 0x588], 0x7b0
mov dword [ebp - 0x358], ecx
lea edx, [ebp - 0xac]
lea eax, [ebp - 0x358]
call fcn.004765ac
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x798
mov word [ebp - 0x588], 0x7bc
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0x18]
mov edx, eax
lea eax, [ebp - 0x36c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x36c]
mov eax, dword [ebp + 8]
add eax, 0x4bc
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x36c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x7c8
xor ecx, ecx
mov dword [ebp - 0x370], ecx
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x370]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0xb0]
mov eax, 0x67fbc8
call fcn.00423c40
xor eax, eax
mov dword [ebp - 0x374], eax
lea edx, [ebp - 0x370]
lea eax, [ebp - 0x374]
call fcn.004765ac
lea edx, [ebp - 0x374]
inc dword [ebp - 0x57c]
mov edx, dword [edx]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x374]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x370]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x7d4
mov edx, 0x67fc39
lea eax, [ebp - 0x3d0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3d0]
push ecx
call fcn.004c01b8
fstp qword [ebp - 0x648]
lea eax, [ebp - 0x648]
xor edx, edx
mov dword [ebp - 0x3d4], edx
lea ecx, [ebp - 0x3d4]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065f8a4
lea eax, [ebp - 0x3d4]
push eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x3c4]
add eax, 0x2ac
mov dword [ebp - 0x640], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3c4]
mov edx, dword [eax]
call dword [edx + 0xec]
mov edx, eax
mov eax, dword [ebp - 0x640]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x18]
xor edx, edx
mov dword [ebp - 0x3a8], edx
lea edx, [ebp - 0x3a8]
inc dword [ebp - 0x57c]
call fcn.004bdbe8
lea eax, [ebp - 0x3a8]
push eax
mov edx, 0x67fbe7
lea eax, [ebp - 0x378]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x37c], eax
lea edx, [ebp - 0x378]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x37c]
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.0065fbec
lea eax, [ebp - 0x37c]
xor edx, edx
mov dword [ebp - 0x380], edx
lea ecx, [ebp - 0x380]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x354]
call fcn.0065fbec
lea eax, [ebp - 0x380]
push eax
mov edx, 0x67fc0d
lea eax, [ebp - 0x384]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x388], eax
lea edx, [ebp - 0x384]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x388]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x388]
push edx
xor ecx, ecx
mov dword [ebp - 0x38c], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x38c]
call fcn.004765ac
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x390], eax
lea edx, [ebp - 0x38c]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x390]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x390]
push edx
mov edx, 0x67fc15
lea eax, [ebp - 0x394]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x398], eax
lea edx, [ebp - 0x394]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x398]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x398]
xor edx, edx
mov dword [ebp - 0x39c], edx
lea ecx, [ebp - 0x39c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x358]
call fcn.0065fbec
lea eax, [ebp - 0x39c]
push eax
mov edx, 0x67fc1d
lea eax, [ebp - 0x3a0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3a4], eax
lea edx, [ebp - 0x3a0]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3a4]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x3a4]
xor edx, edx
mov dword [ebp - 0x3ac], edx
lea ecx, [ebp - 0x3ac]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065fbec
lea eax, [ebp - 0x3ac]
push eax
mov edx, 0x67fc25
lea eax, [ebp - 0x3b0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3b4], eax
lea edx, [ebp - 0x3b0]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3b4]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x3b4]
xor edx, edx
mov dword [ebp - 0x3b8], edx
lea ecx, [ebp - 0x3b8]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x4bc
call fcn.0065fbec
lea eax, [ebp - 0x3b8]
push eax
mov edx, 0x67fc2e
lea eax, [ebp - 0x3bc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3c0], eax
lea edx, [ebp - 0x3bc]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3c0]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x3c0]
xor edx, edx
mov dword [ebp - 0x3c4], edx
lea ecx, [ebp - 0x3c4]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x490
call fcn.0065fbec
lea eax, [ebp - 0x3c4]
push eax
mov edx, 0x67fc35
lea eax, [ebp - 0x3c8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3cc], eax
lea edx, [ebp - 0x3c8]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3cc]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x3cc]
xor edx, edx
mov dword [ebp - 0x3d8], edx
lea ecx, [ebp - 0x3d8]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065fbec
lea eax, [ebp - 0x3d8]
push eax
mov edx, 0x67fc48
lea eax, [ebp - 0x3dc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3e0], eax
lea edx, [ebp - 0x3dc]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3e0]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x3e0]
push edx
mov edx, 0x67fc4f
lea eax, [ebp - 0x3e4]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x35c], eax
lea edx, [ebp - 0x3e4]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x35c]
pop eax
call fcn.0065fbec
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3e4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3e0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3dc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3d8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3d4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3d0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3cc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3c8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3c4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3c0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3bc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3b8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3b4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3b0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3ac]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3a8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3a4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3a0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x39c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x398]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x394]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x390]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x38c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x388]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x384]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x380]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x378]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x798
mov word [ebp - 0x588], 0x7e0
mov edx, 0x67fc51
lea eax, [ebp - 0x3e8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x3e8]
mov eax, dword [ebp + 8]
add eax, 0x494
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3e8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x7ec
mov edx, 0x67fc55
lea eax, [ebp - 0x3ec]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x3ec]
mov eax, dword [ebp + 8]
add eax, 0x498
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3ec]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x7f8
xor ecx, ecx
mov dword [ebp - 0x360], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x360]
call fcn.004765ac
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x798
mov word [ebp - 0x588], 0x804
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x3c4]
add eax, 0x2ac
mov dword [ebp - 0x64c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3c4]
mov edx, dword [eax]
call dword [edx + 0xec]
mov edx, eax
mov eax, dword [ebp - 0x64c]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x18]
xor edx, edx
mov dword [ebp - 0x364], edx
lea edx, [ebp - 0x364]
inc dword [ebp - 0x57c]
call fcn.004bdbe8
mov word [ebp - 0x588], 0x798
mov eax, dword [ebp - 0x360]
push eax
mov ecx, dword [ebp - 0x358]
push ecx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x4bc]
lea eax, [ebp - 0x364]
push edx
mov ecx, dword [ebp + 8]
add ecx, 0x490
push ecx
push eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x354]
mov edx, dword [edx + 0x2438]
call fcn.00443f10
test al, al
jne 0x439b93
mov eax, dword [sym.WoTax.exe__FormMain]
cmp dword [eax], 0
je 0x4393de
mov edx, dword [sym.WoTax.exe__FormMain]
xor ecx, ecx
mov dword [edx], ecx
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
call fcn.004d8320
mov edx, dword [ebp + 8]
add edx, 0x4c4
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.0065fbc4
mov word [ebp - 0x588], 0x810
mov edx, 0x67fcea
lea eax, [ebp - 0x44c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x44c]
push edx
call fcn.004c01b8
fstp qword [ebp - 0x658]
lea eax, [ebp - 0x658]
xor edx, edx
mov dword [ebp - 0x450], edx
lea ecx, [ebp - 0x450]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065f8a4
lea eax, [ebp - 0x450]
push eax
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x3c4]
add eax, 0x2ac
mov dword [ebp - 0x650], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3c4]
mov edx, dword [eax]
call dword [edx + 0xec]
mov edx, eax
mov eax, dword [ebp - 0x650]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x18]
xor edx, edx
mov dword [ebp - 0x424], edx
lea edx, [ebp - 0x424]
inc dword [ebp - 0x57c]
call fcn.004bdbe8
lea eax, [ebp - 0x424]
push eax
mov edx, 0x67fc98
lea eax, [ebp - 0x3f4]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x3f8], eax
lea edx, [ebp - 0x3f4]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x3f8]
mov eax, dword [ebp + 8]
add eax, 0x4e0
call fcn.0065fbec
lea eax, [ebp - 0x3f8]
xor edx, edx
mov dword [ebp - 0x3fc], edx
lea ecx, [ebp - 0x3fc]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x354]
call fcn.0065fbec
lea eax, [ebp - 0x3fc]
push eax
mov edx, 0x67fcbe
lea eax, [ebp - 0x400]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x404], eax
lea edx, [ebp - 0x400]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x404]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x404]
push edx
xor ecx, ecx
mov dword [ebp - 0x408], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x408]
call fcn.004765ac
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x40c], eax
lea edx, [ebp - 0x408]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x40c]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x40c]
push edx
mov edx, 0x67fcc6
lea eax, [ebp - 0x410]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x414], eax
lea edx, [ebp - 0x410]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x414]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x414]
xor edx, edx
mov dword [ebp - 0x418], edx
lea ecx, [ebp - 0x418]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x358]
call fcn.0065fbec
lea eax, [ebp - 0x418]
push eax
mov edx, 0x67fcce
lea eax, [ebp - 0x41c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x420], eax
lea edx, [ebp - 0x41c]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x420]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x420]
xor edx, edx
mov dword [ebp - 0x428], edx
lea ecx, [ebp - 0x428]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065fbec
lea eax, [ebp - 0x428]
push eax
mov edx, 0x67fcd6
lea eax, [ebp - 0x42c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x430], eax
lea edx, [ebp - 0x42c]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x430]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x430]
xor edx, edx
mov dword [ebp - 0x434], edx
lea ecx, [ebp - 0x434]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x4bc
call fcn.0065fbec
lea eax, [ebp - 0x434]
push eax
mov edx, 0x67fcdf
lea eax, [ebp - 0x438]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x43c], eax
lea edx, [ebp - 0x438]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x43c]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x43c]
xor edx, edx
mov dword [ebp - 0x440], edx
lea ecx, [ebp - 0x440]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x490
call fcn.0065fbec
lea eax, [ebp - 0x440]
push eax
mov edx, 0x67fce6
lea eax, [ebp - 0x444]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x448], eax
lea edx, [ebp - 0x444]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x448]
pop eax
call fcn.0065fbec
lea eax, [ebp - 0x448]
xor edx, edx
mov dword [ebp - 0x454], edx
lea ecx, [ebp - 0x454]
inc dword [ebp - 0x57c]
pop edx
call fcn.0065fbec
lea eax, [ebp - 0x454]
push eax
mov edx, 0x67fcf9
lea eax, [ebp - 0x458]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x45c], eax
lea edx, [ebp - 0x458]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x45c]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x45c]
push edx
mov edx, 0x67fd00
lea eax, [ebp - 0x460]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
xor eax, eax
mov dword [ebp - 0x464], eax
lea edx, [ebp - 0x460]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x464]
pop eax
call fcn.0065fbec
lea edx, [ebp - 0x464]
lea eax, [ebp - 0x35c]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x464]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x460]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x45c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x458]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x454]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x450]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x44c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x448]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x444]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x440]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x43c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x438]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x434]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x430]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x42c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x428]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x424]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x420]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x41c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x418]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x414]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x410]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x40c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x408]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x404]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x400]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3fc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3f8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3f4]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x81c
mov edx, 0x67fd02
lea eax, [ebp - 0x468]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x468]
mov eax, dword [ebp + 8]
add eax, 0x494
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x468]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x828
mov edx, 0x67fd06
lea eax, [ebp - 0x46c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x46c]
mov eax, dword [ebp + 8]
add eax, 0x498
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x46c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x840
xor ecx, ecx
mov dword [ebp - 0x3f0], ecx
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x3f0]
call fcn.004765ac
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x834
mov ecx, dword [ebp - 0x3f0]
push ecx
mov eax, dword [ebp - 0x358]
push eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4bc]
lea edx, [ebp - 0x364]
push ecx
mov eax, dword [ebp + 8]
add eax, 0x490
push eax
push edx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [ecx + 0x2438]
mov ecx, dword [ebp - 0x354]
call fcn.00443f10
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x3f0]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x798
mov word [ebp - 0x588], 0x84c
mov edx, 0x67fd4f
lea eax, [ebp - 0x368]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, 0x67fd50
mov word [ebp - 0x588], 0x798
mov word [ebp - 0x588], 0x858
lea eax, [ebp - 0x470]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x470]
mov eax, dword [ebp + 8]
add eax, 0x494
call fcn.0065fc70
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x470]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x43c486
mov word [ebp - 0x588], 0x864
xor eax, eax
lea edx, [ebp - 0x490]
mov dword [ebp - 0x490], eax
xor ecx, ecx
inc dword [ebp - 0x57c]
push edx
inc dword [ebp - 0x57c]
mov dword [ebp - 0x48c], ecx
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x48c]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x4f8]
call fcn.0040a2e0
lea edx, [ebp - 0x48c]
mov ecx, dword [edx]
push ecx
mov eax, dword [ebp + 8]
add eax, 0x498
xor ecx, ecx
mov dword [ebp - 0x65c], eax
lea eax, [ebp - 0x488]
mov edx, dword [ebp - 0x65c]
call fcn.0065de84
inc dword [ebp - 0x57c]
lea eax, [ebp - 0x488]
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
pop ecx
call fcn.00422648
xor edx, edx
mov dword [ebp - 0x494], edx
lea edx, [ebp - 0x490]
lea eax, [ebp - 0x494]
call fcn.004765ac
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x494]
lea eax, [ebp - 0x368]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x494]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x490]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x48c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x488]
mov edx, 2
call fcn.0040a464
mov word [ebp - 0x588], 0x870
mov edx, 0x67fd52
lea eax, [ebp - 0x498]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x498]
lea eax, [ebp - 0x368]
call fcn.0065fd3c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x498]
mov edx, 2
call fcn.0065fb9c
pop ecx
test ecx, ecx
je 0x439dcf
mov word [ebp - 0x588], 0x87c
mov edx, 0x67fd54
lea eax, [ebp - 0x49c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x49c]
lea eax, [ebp - 0x368]
call fcn.0065fd3c
mov edx, eax
lea eax, [ebp - 0x368]
mov ecx, 1
call fcn.0065fd14
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x49c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x894
mov edx, 0x67fd56
lea eax, [ebp - 0x474]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x888
mov word [ebp - 0x588], 0x8a0
mov edx, 0x67fd58
lea eax, [ebp - 0x4a0]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4a0]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
jne 0x439f47
xor ecx, ecx
mov dword [ebp - 0x4a4], ecx
inc dword [ebp - 0x57c]
push 0
push 0x67fd5d
lea eax, [ebp - 0x4a4]
push eax
call fcn.0041d918
add esp, 0xc
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4a4]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x4a4]
setne dl
and edx, 1
push edx
mov edx, 2
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x439f47
mov edx, 0x67fd59
lea eax, [ebp - 0x4a8]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4a8]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x4a8]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x439f47
mov edx, 0x67fd5b
lea eax, [ebp - 0x4ac]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4ac]
lea eax, [ebp - 0x13c]
call fcn.0065e010
test al, al
lea eax, [ebp - 0x4ac]
setne cl
and ecx, 1
mov edx, 2
push ecx
sub dword [ebp - 0x57c], 2
call fcn.0040a464
pop ecx
test ecx, ecx
jne 0x439f47
xor eax, eax
jmp 0x439f4c
mov eax, 1
push eax
lea eax, [ebp - 0x4a0]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x439fb4
mov word [ebp - 0x588], 0x8ac
mov edx, 0x67fd60
lea eax, [ebp - 0x4b0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4b0]
lea eax, [ebp - 0x474]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4b0]
mov edx, 2
call fcn.0065fb9c
jmp 0x43a04f
mov word [ebp - 0x588], 0x8b8
mov edx, 0x67fd62
lea eax, [ebp - 0x4b4]
xor ecx, ecx
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4b4]
lea eax, [ebp - 0x13c]
call fcn.0065e010
push eax
lea eax, [ebp - 0x4b4]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
pop ecx
test cl, cl
je 0x43a04f
mov word [ebp - 0x588], 0x8c4
mov edx, 0x67fd64
lea eax, [ebp - 0x4b8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4b8]
lea eax, [ebp - 0x474]
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4b8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x8d0
mov edx, 0x67fd66
lea eax, [ebp - 0x4bc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4bc]
mov eax, dword [ebp + 8]
add eax, 0x498
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4bc]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x8dc
xor ecx, ecx
lea edx, [ebp - 0xb0]
mov dword [ebp - 0x478], ecx
inc dword [ebp - 0x57c]
xor eax, eax
mov word [ebp - 0x588], 0x888
mov word [ebp - 0x588], 0x8e8
mov dword [ebp - 0x47c], eax
lea eax, [ebp - 0x47c]
call fcn.004765ac
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x888
mov word [ebp - 0x588], 0x8f4
push 0x67fd67
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x20]
pop ecx
mov edx, eax
lea eax, [ebp - 0x480]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x888
mov word [ebp - 0x588], 0x900
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xf4]
mov dword [ebp - 0x660], eax
lea eax, [ebp - 0x484]
xor ecx, ecx
mov edx, dword [ebp - 0x660]
call fcn.0065ddb4
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x888
mov eax, dword [ebp - 0x47c]
push eax
mov edx, dword [ebp - 0x358]
push edx
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4bc]
push eax
mov edx, dword [ebp - 0x368]
push edx
lea edx, [ebp - 0x478]
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4ac]
push eax
push edx
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x364]
add ecx, 0x490
lea edx, [ebp - 0x474]
push ecx
push eax
push edx
lea ecx, [ebp - 0x480]
push ecx
lea eax, [ebp - 0x484]
push eax
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x354]
mov edx, dword [edx + 0x2438]
call fcn.00460e18
test al, al
jne 0x43a61f
mov word [ebp - 0x588], 0x90c
mov edx, 0x67fd6c
lea eax, [ebp - 0x4c8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4c8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x918
mov edx, 0x67fd8e
lea eax, [ebp - 0x4cc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4cc]
mov eax, dword [ebp + 8]
add eax, 0x498
call fcn.0065fc70
test al, al
jne 0x43a280
mov ecx, dword [ebp + 8]
add ecx, 0x498
mov dword [ebp - 0x664], ecx
mov eax, dword [ebp - 0x664]
cmp dword [eax], 0
je 0x43a276
mov edx, dword [ebp - 0x664]
mov ecx, dword [edx]
mov eax, dword [ecx - 4]
jmp 0x43a278
xor eax, eax
test eax, eax
jle 0x43a280
xor edx, edx
jmp 0x43a285
mov edx, 1
push edx
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4cc]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x43a2bd
push 0
push 0x67fda8
push 0x67fd90
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
jmp 0x43a2fc
push 0
push 0x67fdae
mov edx, dword [ebp + 8]
add edx, 0x498
mov dword [ebp - 0x668], edx
mov ecx, dword [ebp - 0x668]
cmp dword [ecx], 0
je 0x43a2e8
mov eax, dword [ebp - 0x668]
mov edx, dword [eax]
jmp 0x43a2ed
mov edx, 0x67fdb4
push edx
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0x930
mov edx, 0x67fdb6
lea eax, [ebp - 0x4c0]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0x924
mov word [ebp - 0x588], 0x93c
mov dword [ebp - 0x4c4], ecx
lea ecx, [ebp - 0x4c4]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4c0]
lea eax, [ebp - 0x4c0]
call fcn.0065fbec
mov word [ebp - 0x588], 0x924
cmp dword [ebp - 0x4c4], 0
je 0x43a36c
mov eax, dword [ebp - 0x4c4]
jmp 0x43a371
mov eax, 0x67fdc4
push eax
mov ecx, 0x67fdba
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, 0x67fdc6
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x43a3b7
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 0
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x4c4]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4c0]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x484]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x480]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x47c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x478]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x474]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov edx, dword [ebp + 8]
mov byte [edx + 0x4a4], 0
mov ecx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [ecx + 0x2438]
call fcn.00447878
mov byte [ebp - 0x669], al
mov word [ebp - 0x588], 0x888
cmp byte [ebp - 0x669], 0
je 0x43a657
jmp 0x43b246
mov word [ebp - 0x588], 0x954
mov edx, 0x67fdd8
lea eax, [ebp - 0x4d0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov word [ebp - 0x588], 0x948
mov ecx, dword [ebp + 8]
add ecx, 0x243c
push ecx
lea ecx, [ebp - 0x4d0]
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x2438]
mov eax, dword [ebp + 8]
call fcn.004486ac
test al, al
jne 0x43acc1
mov word [ebp - 0x588], 0x960
mov edx, 0x67fdd9
lea eax, [ebp - 0x4dc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4dc]
mov edx, 2
call fcn.0065fb9c
push 0x67fdfb
push 0x67fdf9
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xb0]
add esp, 8
push 0
push 0x67fe24
push 0x67fdfe
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0x978
mov edx, 0x67fe2a
lea eax, [ebp - 0x4d4]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0x96c
mov word [ebp - 0x588], 0x984
mov dword [ebp - 0x4d8], edx
lea edx, [ebp - 0x4d4]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x4d8]
lea eax, [ebp - 0x4d4]
call fcn.0065fbec
mov word [ebp - 0x588], 0x96c
cmp dword [ebp - 0x4d8], 0
je 0x43a78d
mov ecx, dword [ebp - 0x4d8]
jmp 0x43a792
mov ecx, 0x67fe38
push ecx
mov ecx, 0x67fe2e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x67fe3a
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x43a7d8
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 0
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x4d8]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4d4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4d0]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x484]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x480]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x47c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x478]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x474]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0x990
mov edx, 0x67fe4c
lea eax, [ebp - 0x4e0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4e0]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x99c
mov edx, 0x67fe6c
lea eax, [ebp - 0x4e4]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4e4]
lea eax, [ebp - 0x4d0]
call fcn.0065fc7c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4e4]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x43b227
push 0
push 0x67feae
push 0x67fe7e
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
mov word [ebp - 0x588], 0x9b4
mov edx, 0x67feb4
lea eax, [ebp - 0x4e8]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0x9a8
mov word [ebp - 0x588], 0x9c0
mov dword [ebp - 0x4ec], edx
lea edx, [ebp - 0x4e8]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x4ec]
lea eax, [ebp - 0x4e8]
call fcn.0065fbec
mov word [ebp - 0x588], 0x9a8
cmp dword [ebp - 0x4ec], 0
je 0x43adda
mov ecx, dword [ebp - 0x4ec]
jmp 0x43addf
mov ecx, 0x67fec2
push ecx
mov ecx, 0x67feb8
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x67fec4
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x43ae25
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 0
push 0x67fed8
push 0x67fed6
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xb0]
add esp, 8
mov word [ebp - 0x588], 0x9cc
push 0x67fee1
push 0x67feda
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0xc0]
add esp, 8
mov edx, eax
lea eax, [ebp - 0x4f0]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, 0x67fee3
mov word [ebp - 0x588], 0x9a8
mov word [ebp - 0x588], 0x9d8
lea eax, [ebp - 0x4f4]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x4f4]
lea eax, [ebp - 0x4f0]
call fcn.0065fc70
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4f4]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x43af12
mov word [ebp - 0x588], 0x9e4
mov edx, 0x67fee5
lea eax, [ebp - 0x4f8]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4f8]
mov edx, 2
call fcn.0065fb9c
jmp 0x43b1dc
mov word [ebp - 0x588], 0x9f0
mov edx, 0x67ff0b
lea eax, [ebp - 0x4fc]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4fc]
mov edx, 2
call fcn.0065fb9c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x4f0]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4ec]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4e8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4d0]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x484]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x480]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x47c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x478]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x474]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4f0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4ec]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4e8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x948
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x4d0]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x888
mov ecx, dword [0x6ae0a4]
mov ecx, dword [ecx]
mov dl, 1
mov eax, dword [0x6996e8]
call fcn.004655b0
mov edx, dword [sym.WoTax.exe__FormMain]
mov dword [edx], eax
lea edx, [ebp - 0x478]
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
add eax, 0x424
call fcn.0065fbc4
mov edx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [edx]
mov dl, byte [ecx + 0x445]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
call fcn.005506a0
mov edx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [sym.WoTax.exe__FormMain]
mov ecx, dword [edx]
xor edx, edx
mov dl, byte [ecx + 0x445]
mov ecx, dword [eax]
cmp edx, 1
sbb edx, edx
mov eax, dword [ecx + 0x3c0]
neg edx
call fcn.005506a0
mov edx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [edx]
cmp byte [ecx + 0x445], 0
je 0x43b3cc
mov word [ebp - 0x588], 0x9fc
mov edx, 0x67ff31
lea eax, [ebp - 0x500]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov eax, dword [sym.WoTax.exe__newMainForm]
lea edx, [ebp - 0x500]
mov eax, dword [eax]
add eax, 0x450
call fcn.0065fd3c
push eax
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x500]
mov edx, 2
call fcn.0065fb9c
pop ecx
test ecx, ecx
je 0x43b37c
mov word [ebp - 0x588], 0xa08
mov edx, 0x67ff38
lea eax, [ebp - 0x504]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x504]
mov edx, 2
call fcn.0065fb9c
jmp 0x43b41a
mov word [ebp - 0x588], 0xa14
mov edx, 0x67ff50
lea eax, [ebp - 0x508]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3bc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x508]
mov edx, 2
call fcn.0065fb9c
jmp 0x43b41a
mov word [ebp - 0x588], 0xa20
mov edx, 0x67ff68
lea eax, [ebp - 0x50c]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3c0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x50c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e0]
call fcn.005506a0
mov word [ebp - 0x588], 0xa2c
mov edx, 0x67ff73
lea eax, [ebp - 0x510]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3e0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x510]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp byte [eax + 0x444], 0
je 0x43bd85
mov edx, dword [sym.WoTax.exe__newMainForm]
mov ecx, dword [edx]
cmp dword [ecx + 0x454], 3
je 0x43b4cc
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
cmp dword [edx + 0x454], 1
jne 0x43b6b9
mov word [ebp - 0x588], 0xa38
mov edx, 0x67ff7e
lea eax, [ebp - 0x514]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x514]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
call fcn.004e6a68
mov edx, dword [sym.WoTax.exe__FormMain]
mov ecx, eax
mov ebx, dword [edx]
mov edx, 8
mov eax, dword [ebx + 0x40c]
call fcn.004ec108
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov word [ebp - 0x588], 0xa44
mov edx, 0x67ff89
lea eax, [ebp - 0x518]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x518]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov word [ebp - 0x588], 0xa50
mov edx, 0x67ff90
lea eax, [ebp - 0x51c]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3ec]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x51c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e8]
call fcn.005506a0
jmp 0x43bf6e
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp byte [eax + 0x446], 0
je 0x43b71b
mov word [ebp - 0x588], 0xa5c
mov edx, 0x67ff9c
lea eax, [ebp - 0x520]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov edx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x520]
mov edx, 2
call fcn.0065fb9c
jmp 0x43b769
mov word [ebp - 0x588], 0xa68
mov edx, 0x67ffa7
lea eax, [ebp - 0x524]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x524]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
call fcn.004e6a68
mov ecx, eax
mov edx, dword [sym.WoTax.exe__newMainForm]
mov ebx, dword [edx]
cmp byte [ebx + 0x446], 0
je 0x43b7bf
mov edx, 8
jmp 0x43b7c4
mov edx, 6
mov eax, dword [sym.WoTax.exe__FormMain]
mov eax, dword [eax]
mov eax, dword [eax + 0x40c]
call fcn.004ec108
mov word [ebp - 0x588], 0xa74
mov edx, 0x67ffb2
lea eax, [ebp - 0x528]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov edx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e8]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x528]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
mov edx, dword [eax + 0x448]
cmp edx, 5
ja case.default.0x43b866
jmp dword [edx*4 + 0x43b86d]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov word [ebp - 0x588], 0xa80
mov edx, 0x67ffbe
lea eax, [ebp - 0x52c]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x52c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43b866
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov word [ebp - 0x588], 0xa8c
mov edx, 0x67ffc5
lea eax, [ebp - 0x530]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f4]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x530]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43b866
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov word [ebp - 0x588], 0xa98
mov edx, 0x67ffce
lea eax, [ebp - 0x534]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f8]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x534]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43b866
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov word [ebp - 0x588], 0xaa4
mov edx, 0x67ffd7
lea eax, [ebp - 0x538]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3fc]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x538]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43b866
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov word [ebp - 0x588], 0xab0
mov edx, 0x67ffe0
lea eax, [ebp - 0x53c]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x400]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x53c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
jmp case.default.0x43b866
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
mov word [ebp - 0x588], 0xabc
mov edx, 0x67ffe9
lea eax, [ebp - 0x540]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x404]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x540]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__newMainForm]
mov eax, dword [ecx]
cmp byte [eax + 0x446], 0
jne 0x43bf6e
jmp 0x43bf6e
mov word [ebp - 0x588], 0xac8
mov edx, 0x67fff4
lea eax, [ebp - 0x544]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov ecx, dword [sym.WoTax.exe__FormMain]
mov edx, eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x544]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
xor edx, edx
mov ecx, dword [eax]
call dword [ecx + 0x74]
mov eax, dword [sym.WoTax.exe__FormMain]
mov edx, dword [eax]
mov eax, dword [edx + 0x39c]
xor edx, edx
call fcn.004e6a74
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
mov eax, dword [eax + 0x39c]
call fcn.004e6a68
mov edx, dword [sym.WoTax.exe__FormMain]
mov ecx, eax
mov ebx, dword [edx]
mov edx, 8
mov eax, dword [ebx + 0x40c]
call fcn.004ec108
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f0]
call fcn.005506a0
mov word [ebp - 0x588], 0xad4
mov edx, 0x67ffff
lea eax, [ebp - 0x548]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3f0]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x548]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f4]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3f8]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3fc]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x400]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x404]
call fcn.005506a0
mov ecx, dword [sym.WoTax.exe__FormMain]
mov dl, 1
mov eax, dword [ecx]
mov eax, dword [eax + 0x3ec]
call fcn.005506a0
mov word [ebp - 0x588], 0xae0
mov edx, 0x680006
lea eax, [ebp - 0x54c]
call fcn.0065fa0c
mov edx, eax
mov eax, dword [sym.WoTax.exe__FormMain]
inc dword [ebp - 0x57c]
mov ecx, dword [eax]
mov eax, dword [ecx + 0x3ec]
add eax, 0x80
call fcn.0065fbc4
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x54c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__FormMain]
xor edx, edx
mov eax, dword [ecx]
mov eax, dword [eax + 0x3e8]
call fcn.005506a0
mov word [ebp - 0x588], 0xaec
xor ecx, ecx
mov eax, 0x680012
mov dword [ebp - 0x550], ecx
lea ecx, [ebp - 0x550]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x520
call fcn.0065ff98
mov eax, dword [sym.WoTax.exe__FormMain]
lea edx, [ebp - 0x550]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [ecx + 0x3b8]
call fcn.005507b8
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x550]
mov edx, 2
call fcn.0065fb9c
mov eax, dword [ebp + 8]
call fcn.0053399c
mov eax, dword [ebp + 8]
call fcn.005500ac
mov edx, dword [ebp + 8]
mov dword [edx + 0x4a0], eax
xor edx, edx
mov eax, dword [ebp + 8]
call fcn.0052eb4c
mov ecx, dword [sym.WoTax.exe__newMainForm]
cmp dword [ecx], 0
je 0x43c00a
mov eax, dword [sym.WoTax.exe__newMainForm]
mov edx, dword [eax]
mov byte [edx + 0x47c], 1
mov ecx, dword [sym.WoTax.exe__FormMain]
mov eax, dword [ecx]
call fcn.005339a4
mov edx, dword [ebp + 8]
mov al, 1
mov byte [edx + 0x564], 1
push eax
lea eax, [ebp - 0x484]
sub dword [ebp - 0x57c], 2
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x480]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x47c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x478]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x474]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
mov word [ebp - 0x588], 0xaf8
mov edx, 0x68001d
lea eax, [ebp - 0x55c]
call fcn.0065fa0c
inc dword [ebp - 0x57c]
mov edx, dword [eax]
mov eax, dword [ebp + 8]
call fcn.00421160
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x55c]
mov edx, 2
call fcn.0065fb9c
push 0x40
push 0x680054
mov word [ebp - 0x588], 0xb04
xor ecx, ecx
mov eax, 0x680035
mov dword [ebp - 0x560], ecx
lea ecx, [ebp - 0x560]
inc dword [ebp - 0x57c]
mov edx, dword [ebp + 8]
add edx, 0x498
call fcn.0065ff98
cmp dword [ebp - 0x560], 0
je 0x43c50d
mov eax, dword [ebp - 0x560]
jmp 0x43c512
mov eax, 0x68005e
push eax
mov eax, dword [ebp + 8]
call fcn.0055975c
push eax
call sub.USER32.DLL_MessageBoxW
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x560]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0xb1c
mov edx, 0x680060
lea eax, [ebp - 0x554]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0xb10
mov word [ebp - 0x588], 0xb28
mov dword [ebp - 0x558], ecx
lea ecx, [ebp - 0x558]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x554]
lea eax, [ebp - 0x554]
call fcn.0065fbec
mov word [ebp - 0x588], 0xb10
cmp dword [ebp - 0x558], 0
je 0x43c5a7
mov eax, dword [ebp - 0x558]
jmp 0x43c5ac
mov eax, 0x68006e
push eax
mov ecx, 0x680064
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, 0x680070
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0x558]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x554]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x368]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x364]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x360]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x35c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x358]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x354]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
push eax
xor edx, edx
mov dword [ebp - 0x57c], edx
lea ecx, [ebp - 0x598]
push ecx
call fcn.0065d4b0
pop ecx
pop eax
jmp 0x43cacb
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0040a464
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x57c]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x12c
jmp 0x43c97a
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x56c]
add ecx, 0x4f8
mov dword [ebp - 0x670], ecx
xor ecx, ecx
mov word [ebp - 0x588], 0xb34
mov dword [ebp - 0x674], edi
mov edx, dword [ebp - 0x674]
call fcn.0065de84
inc dword [ebp - 0x57c]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x56c]
mov eax, dword [ebp - 0x670]
call fcn.0065dfb4
sub dword [ebp - 0x57c], 2
lea eax, [ebp - 0x56c]
mov edx, 2
call fcn.0040a464
mov eax, dword [ebp + 8]
call fcn.00449438
mov word [ebp - 0x588], 0xb4c
mov edx, 0x680082
lea eax, [ebp - 0x564]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor edx, edx
mov word [ebp - 0x588], 0xb40
mov word [ebp - 0x588], 0xb58
mov dword [ebp - 0x568], edx
lea edx, [ebp - 0x564]
inc dword [ebp - 0x57c]
lea ecx, [ebp - 0x568]
lea eax, [ebp - 0x564]
call fcn.0065fbec
mov word [ebp - 0x588], 0xb40
cmp dword [ebp - 0x568], 0
je 0x43c913
mov ecx, dword [ebp - 0x568]
jmp 0x43c918
mov ecx, 0x680090
push ecx
mov ecx, 0x680086
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x474]
mov eax, dword [ebp + 8]
call fcn.004318e8
mov ecx, 0x680092
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x568]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x564]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x12c
mov word [ebp - 0x588], 0x30
mov word [ebp - 0x588], 0x30
mov ecx, dword [ebp + 8]
xor edx, edx
mov byte [ecx + 0x48c], 0
mov eax, dword [ebp + 8]
call fcn.005509d4
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x38c]
mov dx, 0xffeb
call fcn.005509d4
mov word [ebp - 0x588], 0xb70
mov edx, 0x6800a4
lea eax, [ebp - 0x570]
call fcn.0065fb38
inc dword [ebp - 0x57c]
xor ecx, ecx
mov word [ebp - 0x588], 0xb64
mov word [ebp - 0x588], 0xb7c
mov dword [ebp - 0x574], ecx
lea ecx, [ebp - 0x574]
inc dword [ebp - 0x57c]
lea edx, [ebp - 0x570]
lea eax, [ebp - 0x570]
call fcn.0065fbec
mov word [ebp - 0x588], 0xb64
cmp dword [ebp - 0x574], 0
je 0x43ca22
mov eax, dword [ebp - 0x574]
jmp 0x43ca27
mov eax, 0x6800b2
push eax
mov ecx, 0x6800a8
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [edx + 0x474]
call fcn.004318e8
mov ecx, 0x6800b4
mov ebx, dword [ebp + 8]
mov edx, dword [ebx + 0x474]
mov eax, dword [ebp + 8]
call fcn.0043ea8c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x574]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 0x570]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x588], 0x30
cmp word [ebp - 0x586], 0
je 0x43ca94
ret
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 8]
dec dword [ebp - 0x57c]
call fcn.0065fb9c
dec dword [ebp - 0x57c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0065fb9c
pop eax
mov edx, dword [ebp - 0x598]
mov dword fs:[0], edx
mov esp, ebp
mov edi, dword [ebp - 0x88c]
mov esi, dword [ebp - 0x888]
mov ebx, dword [ebp - 0x884]
pop ebp
ret