Function at 0x444a98
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffcf0
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov dword [ebp - 4], edx
mov dword [ebp - 0x200], eax
mov edi, dword [ebp + 0x14]
mov esi, dword [ebp + 0x18]
mov eax, 0x690980
call fcn.00650394
mov dword [ebp - 0x1e0], 8
lea edx, [ebp - 4]
lea eax, [ebp - 4]
call fcn.0065de14
inc dword [ebp - 0x1e0]
inc dword [ebp - 0x1e0]
lea edx, [ebp - 8]
mov word [ebp - 0x1ec], 0xc
lea eax, [ebp - 8]
call fcn.0065fa4c
inc dword [ebp - 0x1e0]
lea edx, [ebp + 0x40]
lea eax, [ebp + 0x40]
call fcn.0065fa4c
inc dword [ebp - 0x1e0]
lea edx, [ebp + 0x3c]
lea eax, [ebp + 0x3c]
call fcn.0065fa4c
inc dword [ebp - 0x1e0]
lea edx, [ebp + 0x38]
lea eax, [ebp + 0x38]
call fcn.0065fa4c
inc dword [ebp - 0x1e0]
lea edx, [ebp + 0x34]
lea eax, [ebp + 0x34]
call fcn.0065fa4c
inc dword [ebp - 0x1e0]
lea edx, [ebp + 0x30]
lea eax, [ebp + 0x30]
call fcn.0065fa4c
inc dword [ebp - 0x1e0]
mov edx, 0x68127e
mov word [ebp - 0x1ec], 0x18
lea eax, [ebp - 0x14]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0065fb9c
mov dl, 1
mov eax, dword [0x629d5c]
call fcn.0062c3bc
mov word [ebp - 0x1ec], 0xc
mov word [ebp - 0x1ec], 0x24
mov ebx, eax
lea eax, [ebp - 0x18]
mov edx, 0x68129e
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [ebp - 8]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x30
mov edx, 0x6812a5
lea eax, [ebp - 0x1c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x40]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x3c
mov edx, 0x6812ab
lea eax, [ebp - 0x20]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x3c]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x48
mov edx, 0x6812b1
lea eax, [ebp - 0x24]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x38]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x54
mov edx, 0x6812b8
lea eax, [ebp - 0x28]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x34]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x60
mov edx, 0x6812c2
lea eax, [ebp - 0x2c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [ebp + 0x30]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x6c
mov edx, 0x6812c4
lea eax, [ebp - 0x30]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x78
mov edx, 0x6812c9
lea eax, [ebp - 0x34]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x34]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x84
mov edx, 0x6812cf
lea eax, [ebp - 0x38]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp + 0x20]
mov ecx, dword [eax]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x38]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [sym.WoTax.exe__Form8]
mov ecx, dword [ecx]
cmp dword [ecx + 0x440], 1
jne 0x4450ad
mov word [ebp - 0x1ec], 0x90
mov edx, str.sbmbz
lea eax, [ebp - 0x3c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp + 0x1c]
mov ecx, dword [eax]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x9c
xor ecx, ecx
mov dword [ebp - 0x40], ecx
push 0
push 0x6812dc
lea ecx, [ebp - 0x40]
push ecx
call fcn.0065fce4
add esp, 0xc
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x40]
mov eax, esi
call fcn.0065fc70
test al, al
jne 0x444e59
cmp dword [esi], 0
je 0x444e4f
mov ecx, dword [esi]
mov eax, dword [ecx - 4]
jmp 0x444e51
xor eax, eax
test eax, eax
jle 0x444e59
xor edx, edx
jmp 0x444e5e
mov edx, 1
push edx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x40]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x444eb0
mov word [ebp - 0x1ec], 0xa8
mov edx, 0x6812e2
lea eax, [ebp - 0x44]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x44]
mov eax, esi
call fcn.0065fbc4
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xb4
xor ecx, ecx
mov dword [ebp - 0x48], ecx
push 0
push 0x6812e4
lea ecx, [ebp - 0x48]
push ecx
call fcn.0065fce4
add esp, 0xc
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x48]
mov eax, edi
call fcn.0065fc70
test al, al
jne 0x444efb
cmp dword [edi], 0
je 0x444ef1
mov ecx, dword [edi]
mov eax, dword [ecx - 4]
jmp 0x444ef3
xor eax, eax
test eax, eax
jle 0x444efb
xor edx, edx
jmp 0x444f00
mov edx, 1
push edx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x444f52
mov word [ebp - 0x1ec], 0xc0
mov edx, 0x6812ea
lea eax, [ebp - 0x4c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x4c]
mov eax, edi
call fcn.0065fbc4
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x4c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xcc
xor ecx, ecx
mov dword [ebp - 0x50], ecx
push 0
push 0x6812ec
lea ecx, [ebp - 0x50]
push ecx
call fcn.0065fce4
add esp, 0xc
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x50]
mov eax, dword [ebp + 0x10]
call fcn.0065fc70
test al, al
jne 0x444fa4
mov ecx, dword [ebp + 0x10]
cmp dword [ecx], 0
je 0x444f9a
mov eax, dword [ebp + 0x10]
mov edx, dword [eax]
mov ecx, dword [edx - 4]
jmp 0x444f9c
xor ecx, ecx
test ecx, ecx
jle 0x444fa4
xor eax, eax
jmp 0x444fa9
mov eax, 1
push eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x50]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x444ffc
mov word [ebp - 0x1ec], 0xd8
mov edx, 0x6812f2
lea eax, [ebp - 0x54]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x54]
mov eax, dword [ebp + 0x10]
call fcn.0065fbc4
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xe4
mov edx, 0x6812f4
lea eax, [ebp - 0x58]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [esi]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xf0
mov edx, str.wwaddr
lea eax, [ebp - 0x5c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov ecx, dword [edi]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xfc
mov edx, str.kduser
lea eax, [ebp - 0x60]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp + 0x10]
mov ecx, dword [eax]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x108
mov edx, 0x681306
lea eax, [ebp - 0x64]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov eax, ebx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x204], ecx
xor ecx, ecx
mov dword [ebp - 0x6c], ecx
lea eax, [ebp - 0x6c]
mov edx, dword [ebp - 0x204]
call fcn.004765ac
lea ecx, [ebp - 0x6c]
mov edx, 0x68130b
inc dword [ebp - 0x1e0]
mov eax, dword [ecx]
push eax
lea eax, [ebp - 0x68]
mov word [ebp - 0x1ec], 0x114
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, ebx
pop ecx
call fcn.0062c60c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x120
xor ecx, ecx
mov eax, ebx
mov dword [ebp - 0x70], ecx
lea edx, [ebp - 0x70]
inc dword [ebp - 0x1e0]
mov ecx, dword [eax]
call dword [ecx - 0x24]
lea edx, [ebp - 0x70]
lea eax, [ebp - 0xc]
xor ecx, ecx
call fcn.0065de84
inc dword [ebp - 0x1e0]
inc dword [ebp - 0x1e0]
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xc
mov word [ebp - 0x1ec], 0x12c
xor ecx, ecx
mov dword [ebp - 0x74], ecx
inc dword [ebp - 0x1e0]
lea ecx, [ebp - 0x74]
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0xc]
mov eax, 0x681314
call fcn.00423c40
cmp dword [ebp - 0x74], 0
jne 0x4451e8
mov edx, 0x681326
jmp 0x4451eb
mov edx, dword [ebp - 0x74]
lea eax, [ebp - 0x78]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x1e0], 2
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.0040a464
mov dword [ebp - 0x80], ebx
cmp dword [ebp - 0x80], 0
je 0x44525d
mov ecx, dword [ebp - 0x80]
mov eax, dword [ecx]
mov dword [ebp - 0x7c], eax
mov word [ebp - 0x1ec], 0x150
mov edx, 3
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x1ec], 0x138
xor ebx, ebx
mov word [ebp - 0x1ec], 0xc
push 0x681328
call sub.KERNEL32.DLL_LoadLibraryW
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x2430], eax
mov eax, dword [ebp - 0x200]
cmp dword [eax + 0x2430], 0
je 0x4452b5
push 0x681350
mov ecx, dword [ebp - 0x200]
mov ecx, dword [ecx + 0x2430]
push ecx
call sub.KERNEL32.DLL_GetProcAddress
mov edx, dword [ebp - 0x200]
mov dword [edx + 0x2434], eax
jmp 0x4453a7
mov word [ebp - 0x1ec], 0x15c
mov edx, 0x681359
lea eax, [ebp - 0x84]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.0065fb9c
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 0xc]
sub dword [ebp - 0x1e0], 2
call fcn.0040a464
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x30]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x34]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x38]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x3c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x40]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x1e0], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
pop eax
mov edx, dword [ebp - 0x1fc]
mov dword fs:[0], edx
jmp 0x447848
push 0x800000
call fcn.0064630c
pop ecx
mov dword [ebp - 0x208], eax
mov word [ebp - 0x1ec], 0xc
push 0x800000
push 0
mov ecx, dword [ebp - 0x208]
push ecx
call fcn.0064fec3
add esp, 0xc
mov ecx, dword [ebp - 0x200]
cmp dword [ecx + 0x2434], 0
je 0x445459
lea edi, [ebp - 0x224]
mov esi, 0x674886
mov ecx, 6
lea eax, [ebp - 0x244]
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x244]
mov esi, 0x67489f
mov ecx, 7
lea edx, [ebp - 0x224]
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
push eax
push edx
mov ecx, dword [ebp - 0x208]
push ecx
cmp dword [ebp - 0xc], 0
jne 0x445430
mov ecx, 0x681384
jmp 0x445433
mov ecx, dword [ebp - 0xc]
push ecx
cmp dword [ebp - 4], 0
jne 0x445441
mov eax, 0x681383
jmp 0x445444
mov eax, dword [ebp - 4]
push eax
mov edx, dword [ebp - 0x200]
call dword [edx + 0x2434]
add esp, 0x14
jmp 0x445580
mov word [ebp - 0x1ec], 0x180
mov edx, 0x681385
lea eax, [ebp - 0x88]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx + 0x2430]
push eax
call sub.KERNEL32.DLL_FreeLibrary
mov edx, dword [ebp - 0x200]
xor ecx, ecx
mov dword [edx + 0x2430], ecx
mov eax, dword [ebp - 0x208]
push eax
call fcn.00639dfc
pop ecx
xor edx, edx
mov dword [ebp - 0x208], edx
xor eax, eax
push eax
lea eax, [ebp - 0xc]
sub dword [ebp - 0x1e0], 2
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x30]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x34]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x38]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x3c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x40]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x1e0], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
pop eax
mov edx, dword [ebp - 0x1fc]
mov dword fs:[0], edx
jmp 0x447848
mov ecx, dword [ebp - 0x200]
mov ecx, dword [ecx + 0x2430]
push ecx
call sub.KERNEL32.DLL_FreeLibrary
mov eax, dword [ebp - 0x200]
xor edx, edx
mov dword [eax + 0x2430], edx
lea eax, [ebp - 0x10]
mov word [ebp - 0x1ec], 0x18c
mov edx, dword [ebp - 0x208]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
xor ecx, ecx
mov word [ebp - 0x1ec], 0xc
mov word [ebp - 0x1ec], 0x198
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x8c]
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x10]
mov eax, 0x6813ad
call fcn.0065ff98
cmp dword [ebp - 0x8c], 0
je 0x445601
mov edx, dword [ebp - 0x8c]
jmp 0x445606
mov edx, 0x6813c0
lea eax, [ebp - 0x90]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x1a4
xor ecx, ecx
lea edx, [ebp - 0x94]
mov dword [ebp - 0x94], ecx
lea eax, [ebp - 0x10]
inc dword [ebp - 0x1e0]
call fcn.0065fdd4
lea eax, [ebp - 0x94]
mov eax, dword [eax]
call fcn.0062c2e4
mov edx, dword [0x629d5c]
call fcn.00650cf0
mov dword [ebp - 0x248], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0xc
cmp dword [ebp - 0x248], 0
je 0x447731
mov word [ebp - 0x1ec], 0x1b0
mov word [ebp - 0x1ec], 0x1c8
mov edx, 0x6813c2
lea eax, [ebp - 0x98]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x248]
call fcn.0062c490
mov esi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x1bc
mov word [ebp - 0x1ec], 0x1d4
mov edx, 0x6813c7
lea eax, [ebp - 0x9c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x248]
call fcn.0062c490
mov dword [ebp - 0x24c], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x1bc
test esi, esi
je 0x447625
cmp dword [ebp - 0x24c], 0
je 0x447625
mov word [ebp - 0x1ec], 0x1e0
mov eax, esi
call fcn.0062b734
mov dword [ebp - 0x250], eax
xor edx, edx
mov dword [ebp - 0xa0], edx
lea edx, [ebp - 0xa0]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x250]
mov ecx, dword [eax]
call dword [ecx]
lea eax, [ebp - 0xa0]
xor edx, edx
mov dword [ebp - 0xa4], edx
lea edx, [ebp - 0xa4]
inc dword [ebp - 0x1e0]
call fcn.0065fdd4
lea eax, [ebp - 0xa4]
xor ecx, ecx
mov dword [ebp - 0xa8], ecx
lea edx, [ebp - 0xa8]
inc dword [ebp - 0x1e0]
call fcn.0065fd48
lea edx, [ebp - 0xa8]
mov eax, dword [ebp - 0x200]
add eax, 0x494
call fcn.0065fbc4
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x1ec
mov eax, dword [ebp - 0x24c]
call fcn.0062b734
mov dword [ebp - 0x254], eax
xor edx, edx
mov dword [ebp - 0xac], edx
lea edx, [ebp - 0xac]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax]
call dword [ecx]
lea eax, [ebp - 0xac]
xor edx, edx
mov dword [ebp - 0xb0], edx
lea edx, [ebp - 0xb0]
inc dword [ebp - 0x1e0]
call fcn.0065fdd4
lea edx, [ebp - 0xb0]
mov eax, dword [ebp - 0x200]
add eax, 0x498
call fcn.0065fbc4
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x1f8
mov bl, 1
mov edx, 0x6813cb
lea eax, [ebp - 0xb4]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0xb4]
mov eax, dword [ebp - 0x200]
add eax, 0x494
call fcn.0065fc70
push eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.0065fb9c
pop ecx
test cl, cl
je 0x447623
mov word [ebp - 0x1ec], 0x210
mov edx, 0x6813cd
lea eax, [ebp - 0xbc]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x248]
call fcn.0062c490
mov dword [ebp - 0x258], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x21c
mov eax, dword [ebp - 0x258]
call fcn.0062b734
mov dword [ebp - 0x25c], eax
xor edx, edx
mov dword [ebp - 0xb8], edx
lea edx, [ebp - 0xb8]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x228
xor ecx, ecx
lea edx, [ebp - 0xc0]
mov dword [ebp - 0xc0], ecx
lea eax, [ebp - 0xb8]
inc dword [ebp - 0x1e0]
call fcn.0065fdd4
lea eax, [ebp - 0xc0]
mov eax, dword [eax]
call fcn.0062c2e4
mov edx, dword [0x629d5c]
call fcn.00650cf0
mov esi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x234
mov edx, 0x6813d8
lea eax, [ebp - 0xc4]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov dword [ebp - 0x260], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
cmp dword [ebp - 0x260], 0
je 0x445b60
mov word [ebp - 0x1ec], 0x24c
xor ecx, ecx
mov eax, esi
mov dword [ebp - 0xc8], ecx
lea edx, [ebp - 0xc8]
inc dword [ebp - 0x1e0]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x240
mov word [ebp - 0x1ec], 0x258
mov eax, dword [ebp - 0x260]
call fcn.0062b734
mov dword [ebp - 0x264], eax
xor edx, edx
mov dword [ebp - 0xcc], edx
lea edx, [ebp - 0xcc]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x264]
mov ecx, dword [eax]
call dword [ecx]
lea eax, [ebp - 0xcc]
xor edx, edx
mov dword [ebp - 0xd0], edx
lea edx, [ebp - 0xd0]
inc dword [ebp - 0x1e0]
call fcn.0065fdd4
lea edx, [ebp - 0xd0]
mov eax, dword [ebp + 0x2c]
call fcn.0065fbc4
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x264
mov edx, 0x6813dc
lea eax, [ebp - 0xd4]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov edi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
test edi, edi
je 0x445d94
mov word [ebp - 0x1ec], 0x27c
mov eax, edi
call fcn.0062b734
mov dword [ebp - 0x268], eax
xor edx, edx
mov dword [ebp - 0xd8], edx
lea edx, [ebp - 0xd8]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x268]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x270
cmp dword [ebp - 0xd8], 0
je 0x445c09
mov edi, dword [ebp - 0xd8]
jmp 0x445c0e
mov edi, 0x6813e2
push 0
push 0
push 0
push 0
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x26c]
inc eax
push eax
call fcn.0064630c
pop ecx
mov dword [ebp - 0x270], eax
mov edx, dword [ebp - 0x26c]
inc edx
push edx
push 0
mov ecx, dword [ebp - 0x270]
push ecx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x26c]
push ecx
mov eax, dword [ebp - 0x270]
push eax
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov edx, dword [ebp - 0x270]
push edx
push 0x6813e4
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0x8c]
add esp, 8
mov edi, eax
test edi, edi
je 0x445d68
mov word [ebp - 0x1ec], 0x288
xor eax, eax
lea edx, [ebp - 0xdc]
mov dword [ebp - 0xdc], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0xdc]
xor ecx, ecx
mov dword [ebp - 0xe0], ecx
lea ecx, [ebp - 0xe0]
inc dword [ebp - 0x1e0]
mov eax, 0x6813e9
call fcn.0065ff98
cmp dword [ebp - 0xe0], 0
je 0x445d03
mov edx, dword [ebp - 0xe0]
jmp 0x445d08
mov edx, 0x681400
lea eax, [ebp - 0xe4]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xdc]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x270]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x294
mov edx, 0x681402
lea eax, [ebp - 0xe8]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov edi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
test edi, edi
je 0x445fbf
mov word [ebp - 0x1ec], 0x2ac
mov eax, edi
call fcn.0062b734
mov dword [ebp - 0x274], eax
xor edx, edx
mov dword [ebp - 0xec], edx
lea edx, [ebp - 0xec]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x2a0
cmp dword [ebp - 0xec], 0
je 0x445e34
mov edi, dword [ebp - 0xec]
jmp 0x445e39
mov edi, 0x681408
push 0
push 0
push 0
push 0
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
inc eax
push eax
call fcn.0064630c
pop ecx
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x278]
inc edx
push edx
push 0
mov ecx, dword [ebp - 0x27c]
push ecx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x278]
push ecx
mov eax, dword [ebp - 0x27c]
push eax
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov edx, dword [ebp - 0x27c]
push edx
push 0x68140a
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0x8c]
add esp, 8
mov edi, eax
test edi, edi
je 0x445f93
mov word [ebp - 0x1ec], 0x2b8
xor eax, eax
lea edx, [ebp - 0xf0]
mov dword [ebp - 0xf0], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0xf0]
xor ecx, ecx
mov dword [ebp - 0xf4], ecx
lea ecx, [ebp - 0xf4]
inc dword [ebp - 0x1e0]
mov eax, 0x681410
call fcn.0065ff98
cmp dword [ebp - 0xf4], 0
je 0x445f2e
mov edx, dword [ebp - 0xf4]
jmp 0x445f33
mov edx, 0x681428
lea eax, [ebp - 0xf8]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x27c]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x2c4
mov edx, 0x68142a
lea eax, [ebp - 0xfc]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov edi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
test edi, edi
je 0x4461ea
mov word [ebp - 0x1ec], 0x2dc
mov eax, edi
call fcn.0062b734
mov dword [ebp - 0x280], eax
xor edx, edx
mov dword [ebp - 0x100], edx
lea edx, [ebp - 0x100]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x2d0
cmp dword [ebp - 0x100], 0
je 0x44605f
mov edi, dword [ebp - 0x100]
jmp 0x446064
mov edi, 0x681432
push 0
push 0
push 0
push 0
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x284]
inc eax
push eax
call fcn.0064630c
pop ecx
mov dword [ebp - 0x288], eax
mov edx, dword [ebp - 0x284]
inc edx
push edx
push 0
mov ecx, dword [ebp - 0x288]
push ecx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x284]
push ecx
mov eax, dword [ebp - 0x288]
push eax
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov edx, dword [ebp - 0x288]
push edx
push 0x681434
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xb8]
add esp, 8
mov edi, eax
test edi, edi
je 0x4461be
mov word [ebp - 0x1ec], 0x2e8
xor eax, eax
lea edx, [ebp - 0x104]
mov dword [ebp - 0x104], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x104]
xor ecx, ecx
mov dword [ebp - 0x108], ecx
lea ecx, [ebp - 0x108]
inc dword [ebp - 0x1e0]
mov eax, 0x68143b
call fcn.0065ff98
cmp dword [ebp - 0x108], 0
je 0x446159
mov edx, dword [ebp - 0x108]
jmp 0x44615e
mov edx, 0x681454
lea eax, [ebp - 0x10c]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x10c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x288]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x2f4
mov edx, 0x681456
lea eax, [ebp - 0x110]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov edi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x110]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
test edi, edi
je 0x446415
mov word [ebp - 0x1ec], 0x30c
mov eax, edi
call fcn.0062b734
mov dword [ebp - 0x28c], eax
xor edx, edx
mov dword [ebp - 0x114], edx
lea edx, [ebp - 0x114]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x300
cmp dword [ebp - 0x114], 0
je 0x44628a
mov edi, dword [ebp - 0x114]
jmp 0x44628f
mov edi, 0x68145e
push 0
push 0
push 0
push 0
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
inc eax
push eax
call fcn.0064630c
pop ecx
mov dword [ebp - 0x294], eax
mov edx, dword [ebp - 0x290]
inc edx
push edx
push 0
mov ecx, dword [ebp - 0x294]
push ecx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x290]
push ecx
mov eax, dword [ebp - 0x294]
push eax
push edi
call fcn.00650304
pop ecx
push eax
push edi
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov edx, dword [ebp - 0x294]
push edx
push 0x681460
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xb8]
add esp, 8
mov edi, eax
test edi, edi
je 0x4463e9
mov word [ebp - 0x1ec], 0x318
xor eax, eax
lea edx, [ebp - 0x118]
mov dword [ebp - 0x118], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x118]
xor ecx, ecx
mov dword [ebp - 0x11c], ecx
lea ecx, [ebp - 0x11c]
inc dword [ebp - 0x1e0]
mov eax, 0x681467
call fcn.0065ff98
cmp dword [ebp - 0x11c], 0
je 0x446384
mov edx, dword [ebp - 0x11c]
jmp 0x446389
mov edx, 0x681480
lea eax, [ebp - 0x120]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x120]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x11c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x118]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x294]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x114]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x324
mov edx, 0x681482
lea eax, [ebp - 0x124]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov edi, eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x124]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
test edi, edi
je 0x446d39
mov ecx, dword [sym.WoTax.exe__Form8]
mov ecx, dword [ecx]
cmp dword [ecx + 0x440], 0
jne 0x446678
mov word [ebp - 0x1ec], 0x33c
mov eax, edi
call fcn.0062b734
mov dword [ebp - 0x298], eax
xor edx, edx
mov dword [ebp - 0x128], edx
lea edx, [ebp - 0x128]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x298]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x330
cmp dword [ebp - 0x128], 0
je 0x4464ca
mov ecx, dword [ebp - 0x128]
jmp 0x4464cf
mov ecx, 0x681488
mov dword [ebp - 0x29c], ecx
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x29c]
push eax
call fcn.00650304
pop ecx
push eax
mov edx, dword [ebp - 0x29c]
push edx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a0]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a0]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x2a4]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x2a0]
push ecx
mov eax, dword [ebp - 0x2a4]
push eax
mov edx, dword [ebp - 0x29c]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x29c]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x2a4]
push eax
push 0x68148a
mov edx, dword [ebp - 0x200]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x98]
add esp, 8
mov edi, eax
test edi, edi
je 0x446647
mov word [ebp - 0x1ec], 0x348
xor eax, eax
lea edx, [ebp - 0x12c]
mov dword [ebp - 0x12c], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x12c]
xor ecx, ecx
mov dword [ebp - 0x130], ecx
lea ecx, [ebp - 0x130]
inc dword [ebp - 0x1e0]
mov eax, 0x68148f
call fcn.0065ff98
cmp dword [ebp - 0x130], 0
je 0x4465e2
mov edx, dword [ebp - 0x130]
jmp 0x4465e7
mov edx, 0x6814a6
lea eax, [ebp - 0x134]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x134]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x130]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x2a4]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x128]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
jmp 0x446d39
mov ecx, dword [sym.WoTax.exe__Form8]
mov ecx, dword [ecx]
cmp dword [ecx + 0x440], 1
jne 0x446d39
mov word [ebp - 0x1ec], 0x360
mov eax, edi
call fcn.0062b734
mov dword [ebp - 0x2a8], eax
xor edx, edx
mov dword [ebp - 0x138], edx
lea edx, [ebp - 0x138]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x354
mov edx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x200]
call fcn.00421160
mov word [ebp - 0x1ec], 0x36c
xor ecx, ecx
lea edx, [ebp - 0x13c]
mov dword [ebp - 0x13c], ecx
lea eax, [ebp - 0x138]
inc dword [ebp - 0x1e0]
call fcn.0065fdd4
lea eax, [ebp - 0x13c]
mov eax, dword [eax]
call fcn.0062c2e4
mov edx, dword [0x629d5c]
call fcn.00650cf0
mov dword [ebp - 0x2ac], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x13c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x354
mov word [ebp - 0x1ec], 0x378
mov edx, 0x6814a8
lea eax, [ebp - 0x140]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x2ac]
call fcn.0062c490
mov dword [ebp - 0x2b0], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x140]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x354
cmp dword [ebp - 0x2b0], 0
je 0x446a31
mov word [ebp - 0x1ec], 0x390
mov eax, dword [ebp - 0x2b0]
call fcn.0062b734
mov dword [ebp - 0x2b4], eax
xor edx, edx
mov dword [ebp - 0x144], edx
lea edx, [ebp - 0x144]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x384
mov word [ebp - 0x1ec], 0x39c
xor ecx, ecx
mov dword [ebp - 0x148], ecx
lea ecx, [ebp - 0x148]
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x144]
mov eax, 0x6814ab
call fcn.0065ff98
cmp dword [ebp - 0x148], 0
je 0x44681f
mov edx, dword [ebp - 0x148]
jmp 0x446824
mov edx, 0x6814b2
lea eax, [ebp - 0x14c]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x14c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x148]
mov edx, 2
call fcn.0065fb9c
cmp dword [ebp - 0x144], 0
je 0x44687f
mov ecx, dword [ebp - 0x144]
jmp 0x446884
mov ecx, 0x6814b4
mov dword [ebp - 0x2b8], ecx
mov word [ebp - 0x1ec], 0x384
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x2b8]
push eax
call fcn.00650304
pop ecx
push eax
mov edx, dword [ebp - 0x2b8]
push edx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x2bc]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x2bc]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x2c0]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x2bc]
push ecx
mov eax, dword [ebp - 0x2c0]
push eax
mov edx, dword [ebp - 0x2b8]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x2b8]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x2c0]
push eax
push 0x6814b6
mov edx, dword [ebp - 0x200]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x98]
add esp, 8
mov edi, eax
test edi, edi
je 0x446a05
mov word [ebp - 0x1ec], 0x3a8
xor eax, eax
lea edx, [ebp - 0x150]
mov dword [ebp - 0x150], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x150]
xor ecx, ecx
mov dword [ebp - 0x154], ecx
lea ecx, [ebp - 0x154]
inc dword [ebp - 0x1e0]
mov eax, 0x6814bb
call fcn.0065ff98
cmp dword [ebp - 0x154], 0
je 0x4469a0
mov edx, dword [ebp - 0x154]
jmp 0x4469a5
mov edx, 0x6814d2
lea eax, [ebp - 0x158]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x158]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x154]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x150]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x2c0]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x144]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x354
mov word [ebp - 0x1ec], 0x3b4
mov edx, 0x6814d4
lea eax, [ebp - 0x15c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x2ac]
call fcn.0062c490
mov dword [ebp - 0x2c4], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x15c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x354
cmp dword [ebp - 0x2c4], 0
je 0x446d1a
mov word [ebp - 0x1ec], 0x3cc
mov eax, dword [ebp - 0x2c4]
call fcn.0062b734
mov dword [ebp - 0x2c8], eax
xor edx, edx
mov dword [ebp - 0x160], edx
lea edx, [ebp - 0x160]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x3c0
mov word [ebp - 0x1ec], 0x3d8
xor ecx, ecx
mov dword [ebp - 0x164], ecx
lea ecx, [ebp - 0x164]
inc dword [ebp - 0x1e0]
lea edx, [ebp - 0x160]
mov eax, 0x6814d8
call fcn.0065ff98
cmp dword [ebp - 0x164], 0
je 0x446b0f
mov edx, dword [ebp - 0x164]
jmp 0x446b14
mov edx, 0x6814e0
lea eax, [ebp - 0x168]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x168]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x164]
mov edx, 2
call fcn.0065fb9c
cmp dword [ebp - 0x160], 0
je 0x446b6f
mov ecx, dword [ebp - 0x160]
jmp 0x446b74
mov ecx, 0x6814e2
mov dword [ebp - 0x2cc], ecx
mov word [ebp - 0x1ec], 0x3c0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x2cc]
push eax
call fcn.00650304
pop ecx
push eax
mov edx, dword [ebp - 0x2cc]
push edx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x2d0]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d0]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x2d4]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x2d0]
push ecx
mov eax, dword [ebp - 0x2d4]
push eax
mov edx, dword [ebp - 0x2cc]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x2cc]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x2d4]
push eax
mov edx, dword [ebp - 0x200]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0xe0]
pop ecx
mov edi, eax
test edi, edi
je 0x446cee
mov word [ebp - 0x1ec], 0x3e4
xor eax, eax
lea edx, [ebp - 0x16c]
mov dword [ebp - 0x16c], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x16c]
xor ecx, ecx
mov dword [ebp - 0x170], ecx
lea ecx, [ebp - 0x170]
inc dword [ebp - 0x1e0]
mov eax, 0x6814e4
call fcn.0065ff98
cmp dword [ebp - 0x170], 0
je 0x446c89
mov edx, dword [ebp - 0x170]
jmp 0x446c8e
mov edx, 0x6814fa
lea eax, [ebp - 0x174]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x174]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x170]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x2d4]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x160]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x354
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x138]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x3f0
mov edx, 0x6814fc
lea eax, [ebp - 0x178]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov dword [ebp - 0x2d8], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x178]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
cmp dword [ebp - 0x2d8], 0
je 0x446f8f
mov word [ebp - 0x1ec], 0x408
mov eax, dword [ebp - 0x2d8]
call fcn.0062b734
mov dword [ebp - 0x2dc], eax
xor edx, edx
mov dword [ebp - 0x17c], edx
lea edx, [ebp - 0x17c]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x3fc
cmp dword [ebp - 0x17c], 0
je 0x446de6
mov ecx, dword [ebp - 0x17c]
jmp 0x446deb
mov ecx, 0x681502
mov dword [ebp - 0x2e0], ecx
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x2e0]
push eax
call fcn.00650304
pop ecx
push eax
mov edx, dword [ebp - 0x2e0]
push edx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x2e4]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e4]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x2e8]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x2e4]
push ecx
mov eax, dword [ebp - 0x2e8]
push eax
mov edx, dword [ebp - 0x2e0]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x2e0]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x2e8]
push eax
push 0x681504
mov edx, dword [ebp - 0x200]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x98]
add esp, 8
mov edi, eax
test edi, edi
je 0x446f63
mov word [ebp - 0x1ec], 0x414
xor eax, eax
lea edx, [ebp - 0x180]
mov dword [ebp - 0x180], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x180]
xor ecx, ecx
mov dword [ebp - 0x184], ecx
lea ecx, [ebp - 0x184]
inc dword [ebp - 0x1e0]
mov eax, 0x681509
call fcn.0065ff98
cmp dword [ebp - 0x184], 0
je 0x446efe
mov edx, dword [ebp - 0x184]
jmp 0x446f03
mov edx, 0x681520
lea eax, [ebp - 0x188]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x188]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x184]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x180]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x2e8]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x17c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x420
mov edx, 0x681522
lea eax, [ebp - 0x18c]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov dword [ebp - 0x2ec], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x18c]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
cmp dword [ebp - 0x2ec], 0
je 0x4473a5
mov word [ebp - 0x1ec], 0x438
mov eax, dword [ebp - 0x2ec]
call fcn.0062b734
mov dword [ebp - 0x2f0], eax
xor edx, edx
mov dword [ebp - 0x190], edx
lea edx, [ebp - 0x190]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [eax]
call dword [ecx]
mov word [ebp - 0x1ec], 0x42c
cmp dword [ebp - 0x190], 0
je 0x44703b
mov ecx, dword [ebp - 0x190]
jmp 0x447040
mov ecx, 0x68152e
mov dword [ebp - 0x2f4], ecx
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x2f4]
push eax
call fcn.00650304
pop ecx
push eax
mov edx, dword [ebp - 0x2f4]
push edx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x2f8], eax
mov ecx, dword [ebp - 0x2f8]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2f8]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x2fc]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x2f8]
push ecx
mov eax, dword [ebp - 0x2fc]
push eax
mov edx, dword [ebp - 0x2f4]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x2f4]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x2fc]
push eax
mov edx, dword [ebp - 0x200]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0xb4]
pop ecx
mov edi, eax
test edi, edi
je 0x4471b1
mov word [ebp - 0x1ec], 0x444
xor eax, eax
lea edx, [ebp - 0x194]
mov dword [ebp - 0x194], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x194]
xor ecx, ecx
mov dword [ebp - 0x198], ecx
lea ecx, [ebp - 0x198]
inc dword [ebp - 0x1e0]
mov eax, 0x681530
call fcn.0065ff98
cmp dword [ebp - 0x198], 0
je 0x44714c
mov edx, dword [ebp - 0x198]
jmp 0x447151
mov edx, 0x68154e
lea eax, [ebp - 0x19c]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x198]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x194]
mov edx, 2
call fcn.0065fb9c
push 0x681550
mov ecx, dword [ebp - 0x200]
mov ecx, dword [ecx + 0x4e8]
call dword [ecx + 0xa0]
pop ecx
mov edi, eax
test edi, edi
je 0x447291
mov word [ebp - 0x1ec], 0x450
xor eax, eax
lea edx, [ebp - 0x1a0]
mov dword [ebp - 0x1a0], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x1a0]
xor ecx, ecx
mov dword [ebp - 0x1a4], ecx
lea ecx, [ebp - 0x1a4]
inc dword [ebp - 0x1e0]
mov eax, 0x68155f
call fcn.0065ff98
cmp dword [ebp - 0x1a4], 0
je 0x44722c
mov edx, dword [ebp - 0x1a4]
jmp 0x447231
mov edx, 0x68157c
lea eax, [ebp - 0x1a8]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1a8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1a4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1a0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x2fc]
push ecx
mov ecx, dword [ebp - 0x200]
mov eax, dword [ecx + 0x4e8]
call dword [eax + 0xfc]
pop ecx
mov edi, eax
and edi, 0xff
test edi, edi
je 0x447379
mov word [ebp - 0x1ec], 0x45c
xor eax, eax
lea edx, [ebp - 0x1ac]
mov dword [ebp - 0x1ac], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x1ac]
xor ecx, ecx
mov dword [ebp - 0x1b0], ecx
lea ecx, [ebp - 0x1b0]
inc dword [ebp - 0x1e0]
mov eax, 0x68157e
call fcn.0065ff98
cmp dword [ebp - 0x1b0], 0
je 0x447314
mov edx, dword [ebp - 0x1b0]
jmp 0x447319
mov edx, 0x6815a4
lea eax, [ebp - 0x1b4]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1b4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1b0]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1ac]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x2fc]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x190]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov word [ebp - 0x1ec], 0x468
mov edx, 0x6815a6
lea eax, [ebp - 0x1b8]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, esi
call fcn.0062c490
mov dword [ebp - 0x300], eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1b8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
cmp dword [ebp - 0x300], 0
je 0x4475fb
mov word [ebp - 0x1ec], 0x480
mov eax, dword [ebp - 0x300]
call fcn.0062b734
mov dword [ebp - 0x304], eax
xor edx, edx
mov dword [ebp - 0x1bc], edx
lea edx, [ebp - 0x1bc]
inc dword [ebp - 0x1e0]
mov eax, dword [ebp - 0x304]
mov ecx, dword [eax]
call dword [ecx - 0x24]
mov word [ebp - 0x1ec], 0x474
cmp dword [ebp - 0x1bc], 0
je 0x447452
mov ecx, dword [ebp - 0x1bc]
jmp 0x447457
mov ecx, 0x6815ae
mov dword [ebp - 0x308], ecx
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x308]
push eax
call fcn.00650304
pop ecx
push eax
mov edx, dword [ebp - 0x308]
push edx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov dword [ebp - 0x30c], eax
mov ecx, dword [ebp - 0x30c]
inc ecx
push ecx
call fcn.0064630c
pop ecx
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x30c]
inc eax
push eax
push 0
mov edx, dword [ebp - 0x310]
push edx
call fcn.0064fec3
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x30c]
push ecx
mov eax, dword [ebp - 0x310]
push eax
mov edx, dword [ebp - 0x308]
push edx
call fcn.00650304
pop ecx
push eax
mov ecx, dword [ebp - 0x308]
push ecx
push 0
push 0
call sub.KERNEL32.DLL_WideCharToMultiByte
mov eax, dword [ebp - 0x310]
push eax
push 0x6815b0
mov edx, dword [ebp - 0x200]
mov ecx, dword [edx + 0x4e8]
call dword [ecx + 0x8c]
add esp, 8
mov edi, eax
test edi, edi
je 0x4475cf
mov word [ebp - 0x1ec], 0x48c
xor eax, eax
lea edx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], eax
mov eax, edi
inc dword [ebp - 0x1e0]
call fcn.004bdbe8
lea edx, [ebp - 0x1c0]
xor ecx, ecx
mov dword [ebp - 0x1c4], ecx
lea ecx, [ebp - 0x1c4]
inc dword [ebp - 0x1e0]
mov eax, 0x6815b8
call fcn.0065ff98
cmp dword [ebp - 0x1c4], 0
je 0x44756a
mov edx, dword [ebp - 0x1c4]
jmp 0x44756f
mov edx, 0x6815d2
lea eax, [ebp - 0x1c8]
call fcn.0065fb38
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1c8]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1c4]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1c0]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x310]
push ecx
call fcn.00639dfc
pop ecx
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1bc]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x204
mov eax, esi
call fcn.004d8320
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.0065fb9c
mov word [ebp - 0x1ec], 0x1bc
jmp 0x447625
xor ebx, ebx
mov word [ebp - 0x1ec], 0x1b0
mov word [ebp - 0x1ec], 0xc
jmp 0x447724
mov eax, dword [ebp - 0x248]
call fcn.004d8320
jmp 0x447775
mov word [ebp - 0x1ec], 0x4c8
xor ebx, ebx
mov edx, 0x68160f
lea eax, [ebp - 0x1d8]
call fcn.0065fa0c
inc dword [ebp - 0x1e0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x200]
call fcn.00421160
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x1d8]
mov edx, 2
call fcn.0065fb9c
mov ecx, dword [ebp - 0x208]
push ecx
call fcn.00639dfc
pop ecx
mov eax, ebx
xor ecx, ecx
mov edx, 2
mov dword [ebp - 0x208], ecx
push eax
dec dword [ebp - 0x1e0]
lea eax, [ebp - 0x10]
call fcn.0065fb9c
sub dword [ebp - 0x1e0], 2
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0040a464
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x30]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x34]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x38]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x3c]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp + 0x40]
mov edx, 2
call fcn.0065fb9c
dec dword [ebp - 0x1e0]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0065fb9c
sub dword [ebp - 0x1e0], 2
lea eax, [ebp - 4]
mov edx, 2
call fcn.0040a464
pop eax
mov edx, dword [ebp - 0x1fc]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x3c