Function at 0x445faf
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
lea ebp, [esp - 0x34c]
sub esp, 0x34c
push 0xffffffffffffffff
push 0x50175f
mov eax, dword fs:[0]
push eax
sub esp, 0xcb0
mov eax, dword [0x551bc0]
xor eax, ebp
mov dword [ebp + 0x348], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x354]
and dword [ebp - 0x20], 0
mov ebx, ecx
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x358]
inc ecx
mov dword [ebp - 0x28], eax
cmp dword [0x55327c], ecx
jne 0x44796c
mov ecx, dword [ebp - 0x10]
lea esi, [ebx + 0x40]
lea edi, [ebp - 0x94]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x348]
movsd dword es:[edi], dword [esi]
sub dword [ebp - 0x90], 0x514
sub dword [ebp - 0x88], 0x12c
push eax
call fcn.004b6a25
push dword [ebp - 0x88]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x8c]
push dword [ebp - 0x90]
push dword [ebp - 0x94]
call fcn.004386dc
cmp dword [0x553214], 0
lea esi, [ebp - 0x94]
lea edi, [ebp - 0x444]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x4461f4
lea ecx, [ebp - 0xa2c]
call fcn.00438279
push dword [0x5536b8]
and dword [ebp - 4], 0
lea ecx, [ebp - 0xa2c]
call fcn.0043a087
and dword [ebp - 0x270], 0
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
mov ecx, dword [ebp - 0x10]
push 8
mov byte [ebp - 4], 1
call fcn.004386cc
mov ecx, dword [ebp - 0x10]
push 0xa
call fcn.004386cc
lea ecx, [ebp - 0xa2c]
call fcn.004382b7
push eax
lea ecx, [ebp - 0x274]
call fcn.004b68ea
lea eax, [ebp - 0x954]
push eax
lea ecx, [ebp - 0x274]
call fcn.00401d80
mov eax, dword [ebp - 0x94c]
mov ecx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x950]
mov esi, 0x190
push esi
push esi
push dword [ebp - 0x440]
add ecx, 0x24
push dword [ebp - 0x444]
mov dword [ebp - 0x24], eax
call fcn.00437fad
lea ecx, [ebp - 0x714]
call fcn.004b6089
push dword [ebp - 0x10]
lea ecx, [ebp - 0x714]
mov byte [ebp - 4], 2
call fcn.004346f5
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x714]
call fcn.00434716
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x10]
push dword [eax + 8]
call dword [sym.imp.GDI32.dll_GetMapMode]
push eax
lea ecx, [ebp - 0x714]
call fcn.004b5e42
mov ecx, dword [ebp - 0x10]
push 4
call fcn.004b5ddd
push 0x64
push 0x64
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push 0xcc0020
push dword [ebp - 0x24]
lea eax, [ebp - 0x714]
push edi
push 0
push 0
push eax
push esi
push esi
push dword [ebp - 0x440]
push dword [ebp - 0x444]
call fcn.00438713
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x714]
call fcn.00434716
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x714]
call fcn.004b6697
lea ecx, [ebp - 0x274]
mov byte [ebp - 4], 0
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.004023a8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa2c]
call fcn.004395e1
jmp 0x446205
push 0
push 0x64
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push 0x64
push 0x64
lea eax, [ebp - 0x444]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push 0
mov edi, 0x190
push edi
push 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
mov esi, 0x510e2c
push esi
call fcn.004018fe
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0043aa50
push 0
push edi
push 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push esi
mov dword [ebp - 0x1c], eax
call fcn.004018fe
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.0043aa50
push dword [ebp - 0x438]
lea esi, [ebp - 0x444]
lea edi, [ebp - 0x474]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x8c]
movsd dword es:[edi], dword [esi]
add eax, 0xffffff9c
push eax
mov eax, dword [ebp - 0x94]
push dword [ebp - 0x440]
movsd dword es:[edi], dword [esi]
add eax, 0x64
push eax
lea ecx, [ebp - 0x474]
movsd dword es:[edi], dword [esi]
call fcn.00437fad
cmp dword [0x553210], 0
jne 0x4462e6
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x1c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
push 0x190
push 0
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov edi, 0x811
push edi
lea eax, [ebp - 0x474]
push eax
push 0x5536b0
mov ecx, esi
call fcn.00402075
push dword [ebp - 0x1c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
jmp 0x446302
push 0x190
push 0
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov esi, dword [ebp - 0x10]
mov edi, 0x811
push 0x12c
push 0
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push dword [ebp - 0x1c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [0x553228]
test eax, eax
jne 0x44635e
push str.Tour_Pass
lea ecx, [ebp - 0x41c]
call fcn.004018fe
push edi
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x41c]
push eax
mov ecx, esi
mov dword [ebp - 4], 3
call fcn.00402075
mov ecx, dword [ebp - 0x41c]
jmp 0x446396
cmp eax, 1
jne 0x4463a2
push str.Training_Pass
lea ecx, [ebp - 0x320]
call fcn.004018fe
push edi
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x320]
push eax
mov ecx, esi
mov dword [ebp - 4], 4
call fcn.00402075
mov ecx, dword [ebp - 0x320]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x1c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
push 0x190
push 0x64
lea eax, [ebp - 0x474]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
lea ecx, [ebp - 0x2c]
call fcn.0042a380
lea eax, [ebp - 0x824]
push eax
mov dword [ebp - 4], 5
call fcn.0040465c
push str._B__d___Y
lea eax, [ebp - 0x66c]
push eax
lea ecx, [ebp - 0x824]
call fcn.00404a50
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 6
call fcn.00401c5e
mov ecx, dword [ebp - 0x66c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.00401285
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x5d0]
push str.Date_:
push eax
call fcn.004048c3
add esp, 0xc
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 7
call fcn.00401c5e
mov ecx, dword [ebp - 0x5d0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.00401285
push dword [ebp - 0x14]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
push 0x810
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x2c]
push eax
mov ecx, esi
call fcn.00402075
lea esi, [ebx + 0x40]
lea edi, [ebp - 0x94]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, 0xc8
movsd dword es:[edi], dword [esi]
add dword [ebp - 0x94], eax
sub dword [ebp - 0x8c], eax
push 0x478
call fcn.004ae134
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x4464ad
push 0
mov ecx, eax
call fcn.0042d70b
mov esi, eax
jmp 0x4464af
xor esi, esi
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.004bc813
test eax, eax
jne 0x4464cb
mov eax, dword [esi]
push 0
push 0
push 0xffffffffffffffff
mov ecx, esi
call dword [eax + 0xc]
mov eax, dword [esi + 0xc8]
test eax, eax
jne 0x44665a
lea edi, [esi + 0x12c]
push dword [0x5536f0]
lea ecx, [ebp - 0x6b8]
call fcn.0040719a
push eax
push edi
call fcn.00406b7c
pop ecx
pop ecx
mov ecx, dword [ebp - 0x6b8]
add ecx, 0xfffffff0
mov byte [ebp - 0x31], al
call fcn.00401285
cmp byte [ebp - 0x31], 0
jne 0x446529
mov eax, dword [esi]
push 1
push 1
mov ecx, esi
call dword [eax + 0x14]
cmp dword [esi + 0xc8], 0
je 0x4464df
jmp 0x44665a
push 0x5119e8
lea ecx, [ebp - 0x24]
call fcn.004069d6
lea eax, [esi + 0x134]
push eax
lea ecx, [esi + 0x130]
mov byte [ebp - 4], 9
call fcn.004049bc
push eax
lea eax, [ebp - 0x6e0]
push eax
call fcn.00406c6d
mov eax, dword [eax]
lea ecx, [ebp - 0x24]
push ecx
push eax
lea eax, [ebp - 0x5e0]
push eax
mov byte [ebp - 4], 0xa
call fcn.00406f30
add esp, 0x18
lea ecx, [esi + 0x138]
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xb
call fcn.00406a70
push eax
lea eax, [ebp - 0x670]
push eax
call fcn.00406cc4
add esp, 0xc
push dword [eax]
lea ecx, [ebp - 0x5d8]
mov byte [ebp - 4], 0xc
call fcn.00403636
push eax
mov ecx, 0x5533a0
mov byte [ebp - 4], 0xd
call fcn.00401c5e
mov ecx, dword [ebp - 0x5d8]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x670]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x5e0]
call fcn.00406dc8
mov ecx, dword [ebp - 0x6e0]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.00406dc8
push dword [esi + 0x14c]
lea ecx, [ebp - 0x5e8]
call fcn.00403636
push eax
mov ecx, 0x5533a8
mov byte [ebp - 4], 0xe
call fcn.00401c5e
mov ecx, dword [ebp - 0x5e8]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.00401285
push dword [esi + 0x150]
lea ecx, [ebp - 0x678]
call fcn.00403636
push eax
mov ecx, 0x5533ac
mov byte [ebp - 4], 0xf
call fcn.00401c5e
mov ecx, dword [ebp - 0x678]
mov byte [ebp - 4], 5
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.004bc813
test eax, eax
je 0x44666c
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
push 0x184
call fcn.004ae134
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x10
test eax, eax
je 0x44669b
push 0
mov ecx, eax
call fcn.00432c3f
mov edi, eax
mov dword [ebp - 0x44], eax
jmp 0x4466a0
xor edi, edi
mov dword [ebp - 0x44], edi
push 0x1b4
mov byte [ebp - 4], 5
call fcn.004ae134
pop ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 4], 0x11
test eax, eax
je 0x4466ca
push 0
mov ecx, eax
call fcn.0042b4bf
mov esi, eax
mov dword [ebp - 0x18], eax
jmp 0x4466cf
xor esi, esi
mov dword [ebp - 0x18], esi
mov ecx, edi
mov byte [ebp - 4], 5
call fcn.004bc813
test eax, eax
jne 0x4466eb
mov eax, dword [edi]
push 0
push 0
push 0xffffffffffffffff
mov ecx, edi
call dword [eax + 0xc]
mov ecx, esi
call fcn.004bc813
test eax, eax
jne 0x446703
mov eax, dword [esi]
push 0
push 0
push 0xffffffffffffffff
mov ecx, esi
call dword [eax + 0xc]
mov eax, dword [0x553228]
test eax, eax
jne 0x446ffd
cmp dword [edi + 0xc8], eax
jne 0x447926
mov edi, str._b__d___Y
mov esi, 0x5536f4
mov ecx, dword [ebp - 0x44]
push edi
lea eax, [ebp - 0x208]
push eax
add ecx, 0x124
call fcn.00407a47
mov ecx, dword [ebp - 0x44]
push edi
lea eax, [ebp - 0x214]
push eax
add ecx, 0x130
mov byte [ebp - 4], 0x12
call fcn.00407a47
push str._to
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x5f0]
push eax
mov byte [ebp - 4], 0x13
call fcn.00402344
lea ecx, [ebp - 0x214]
push ecx
push eax
lea eax, [ebp - 0x244]
push eax
mov byte [ebp - 4], 0x14
call fcn.004022ed
add esp, 0x18
mov ecx, dword [ebp - 0x5f0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x16
call fcn.00401285
push dword [0x5536f0]
lea ecx, [ebp - 0x6c0]
call fcn.0040719a
or dword [ebp - 0x20], 1
push eax
mov eax, dword [ebp - 0x44]
add eax, 0x114
push eax
call fcn.00406b7c
pop ecx
pop ecx
test al, al
je 0x4467e0
lea eax, [ebp - 0x244]
push esi
push eax
call fcn.00406b67
pop ecx
pop ecx
mov byte [ebp - 0x31], 1
test al, al
jne 0x4467e4
mov byte [ebp - 0x31], 0
test byte [ebp - 0x20], 1
je 0x4467fc
mov ecx, dword [ebp - 0x6c0]
and dword [ebp - 0x20], 0xfffffffe
add ecx, 0xfffffff0
call fcn.00401285
cmp byte [ebp - 0x31], 0
jne 0x446851
mov ecx, dword [ebp - 0x44]
mov eax, dword [ecx]
push 1
push 1
call dword [eax + 0x14]
mov ecx, dword [ebp - 0x244]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x214]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x208]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.00401285
mov eax, dword [ebp - 0x44]
cmp dword [eax + 0xc8], 0
je 0x446726
jmp 0x447920
lea ecx, [ebp - 0xa5c]
call fcn.00438279
push dword [0x5537f4]
lea ecx, [ebp - 0xa5c]
call fcn.0043a087
and dword [ebp - 0x258], 0
mov dword [ebp - 0x1c], eax
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
mov ecx, dword [ebp - 0x10]
push 8
mov byte [ebp - 4], 0x18
call fcn.004386cc
mov ecx, dword [ebp - 0x10]
push 0xa
call fcn.004386cc
lea ecx, [ebp - 0xa5c]
call fcn.004382b7
push eax
lea ecx, [ebp - 0x25c]
call fcn.004b68ea
lea eax, [ebp - 0x90c]
push eax
lea ecx, [ebp - 0x25c]
call fcn.00401d80
cmp dword [ebp - 0x1c], 0x80004005
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x24], eax
je 0x446907
mov eax, dword [ebp - 0x90]
lea ecx, [eax + 0x352]
push ecx
mov ecx, dword [ebp - 0x8c]
lea edx, [ecx + 0x32]
push edx
add eax, 0xffffffce
add ecx, 0xfffffcae
push eax
push ecx
mov ecx, dword [ebp - 0x10]
call fcn.004386dc
mov ecx, dword [ebp - 0x28]
mov edi, 0x320
push edi
push edi
push dword [ebp - 0x90]
add ecx, 0x24
push dword [ebp - 0x8c]
call fcn.00437fad
lea ecx, [ebp - 0x744]
call fcn.004b6089
push dword [ebp - 0x10]
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], 0x19
call fcn.004346f5
lea eax, [ebp - 0x25c]
push eax
lea ecx, [ebp - 0x744]
call fcn.00434716
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10]
push dword [eax + 8]
call dword [sym.imp.GDI32.dll_GetMapMode]
push eax
lea ecx, [ebp - 0x744]
call fcn.004b5e42
mov ecx, dword [ebp - 0x10]
push 4
call fcn.004b5ddd
push 0xcc0020
push dword [ebp - 0x24]
lea eax, [ebp - 0x744]
push dword [ebp - 0x3c]
push 0
push 0
push eax
mov eax, dword [ebp - 0x8c]
push edi
push edi
push dword [ebp - 0x90]
mov edi, dword [ebp - 0x10]
add eax, 0xfffffce0
push eax
mov ecx, edi
call fcn.00438713
push dword [ebp - 0x80]
lea ecx, [ebp - 0x744]
call fcn.00434716
lea ecx, [ebp - 0x30]
call fcn.0042a380
lea ecx, [ebp - 0x40]
call fcn.0042a380
push 0xc
lea eax, [ebp - 0x5f8]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x1b
call fcn.00402255
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x1c
call fcn.00401c5e
mov ecx, dword [ebp - 0x5f8]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1b
call fcn.00401285
push 0xc
lea eax, [ebp - 0x680]
push eax
mov ecx, esi
call fcn.0040220f
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
call fcn.00401c5e
mov ecx, dword [ebp - 0x680]
mov byte [ebp - 4], 0x1b
add ecx, 0xfffffff0
call fcn.00401285
push dword [ebp - 0x14]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
lea ecx, [ebp - 0x14]
call fcn.0042a380
push 0x5533a0
lea eax, [ebp - 0x6a0]
push str.This_is_to_certify_that
push eax
mov byte [ebp - 4], 0x1e
call fcn.004048c3
push str.__Employee_ID
push eax
lea eax, [ebp - 0x638]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00402344
push 0x5536f0
push eax
lea eax, [ebp - 0x6d0]
push eax
mov byte [ebp - 4], 0x20
call fcn.004022ed
push str.__is_working_with_company
push eax
lea eax, [ebp - 0x630]
push eax
mov byte [ebp - 4], 0x21
call fcn.00402344
push 0x5536b0
push eax
lea eax, [ebp - 0x698]
push eax
mov byte [ebp - 4], 0x22
call fcn.004022ed
push str._as_a
push eax
lea eax, [ebp - 0x628]
push eax
mov byte [ebp - 4], 0x23
call fcn.00402344
add esp, 0x48
push 0x5533a8
push eax
lea eax, [ebp - 0x6e8]
push eax
mov byte [ebp - 4], 0x24
call fcn.004022ed
push str._in
push eax
lea eax, [ebp - 0x620]
push eax
mov byte [ebp - 4], 0x25
call fcn.00402344
push 0x5533ac
push eax
lea eax, [ebp - 0x690]
push eax
mov byte [ebp - 4], 0x26
call fcn.004022ed
push str._Department_is_on_Tour_to
push eax
lea eax, [ebp - 0x618]
push eax
mov byte [ebp - 4], 0x27
call fcn.00402344
mov byte [ebp - 4], 0x28
push 0x5536f8
push eax
lea eax, [ebp - 0x6c8]
push eax
call fcn.004022ed
push str._from
push eax
lea eax, [ebp - 0x610]
push eax
mov byte [ebp - 4], 0x29
call fcn.00402344
add esp, 0x48
lea ecx, [ebp - 0x30]
push ecx
push eax
lea eax, [ebp - 0x688]
push eax
mov byte [ebp - 4], 0x2a
call fcn.004022ed
push str._to
push eax
lea eax, [ebp - 0x608]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00402344
lea ecx, [ebp - 0x40]
push ecx
push eax
lea eax, [ebp - 0x700]
push eax
mov byte [ebp - 4], 0x2c
call fcn.004022ed
push 0x51b264
push eax
lea eax, [ebp - 0x600]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00402344
add esp, 0x30
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x2e
call fcn.00401c5e
mov ecx, dword [ebp - 0x600]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x700]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x608]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x688]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x610]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6c8]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x618]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x690]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x620]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6e8]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x628]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x698]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x630]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6d0]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x638]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6a0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1e
call fcn.00401285
cmp dword [ebp - 0x1c], 0x80004005
mov esi, dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x94]
je 0x446cbd
push 0x3e8
xor edi, edi
push edi
push eax
call esi
jmp 0x446cc9
push 0x190
push 0
push eax
call esi
xor edi, edi
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402075
cmp byte [0x55330c], 0
lea eax, [ebp - 0x94]
je 0x446d07
cmp dword [ebp - 0x1c], 0x80004005
je 0x446d00
push 0x258
jmp 0x446d15
push 0x4b0
jmp 0x446d15
cmp dword [ebp - 0x1c], 0x80004005
jne 0x446d00
push 0x708
push edi
push eax
call esi
push str._Holder_Name__Signature_
lea ecx, [ebp - 0x32c]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x32c]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00402075
mov ecx, dword [ebp - 0x32c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1e
call fcn.00401285
push str._Signature_of_Authorized_Signatory_
lea ecx, [ebp - 0x338]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push 0x812
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x338]
push eax
mov byte [ebp - 4], 0x30
call fcn.00402075
mov ecx, dword [ebp - 0x338]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x1e
call fcn.00401285
lea esi, [ebx + 0x30]
lea edi, [ebp - 0x180]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub dword [ebp - 0x17c], 0xfa
mov eax, 0xc8
add dword [ebp - 0x180], eax
sub dword [ebp - 0x178], eax
mov eax, dword [0x5536b4]
cmp dword [eax - 0xc], 0xdc
mov eax, dword [0x553208]
jg 0x446ebd
test eax, eax
jne 0x446e66
cmp byte [0x55330c], 0
lea eax, [ebp - 0x180]
je 0x446e42
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0xffffffffffffff9c
push 0
push eax
call ebx
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x180]
push eax
push 0x5536b4
call fcn.00402075
lea esi, [ebp - 0x180]
lea edi, [ebp - 0x8e4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x8e4]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x8e4]
jmp 0x446f6f
push 0x96
push 0
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push 0x810
lea eax, [ebp - 0x180]
push eax
push 0x5536b4
jmp 0x446f7a
cmp eax, 1
jne 0x446f82
cmp byte [0x55330c], 0
je 0x446f82
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0x96
push 0
lea eax, [ebp - 0x180]
push eax
call ebx
lea esi, [ebp - 0x180]
lea edi, [ebp - 0x874]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x874]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x874]
jmp 0x446f6f
test eax, eax
jne 0x446f28
cmp byte [0x55330c], 0
lea eax, [ebp - 0x180]
je 0x446f21
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0xfffffdda
push 0
push eax
call ebx
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x180]
push eax
push 0x5536b4
call fcn.00402075
lea esi, [ebp - 0x180]
lea edi, [ebp - 0x864]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x320
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x864]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x864]
jmp 0x446f6f
push 0x64
jmp 0x446e47
cmp eax, 1
jne 0x446f82
cmp byte [0x55330c], 0
je 0x446f82
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0x64
push 0
lea eax, [ebp - 0x180]
push eax
call ebx
lea esi, [ebp - 0x180]
lea edi, [ebp - 0x884]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x884]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x884]
push 0x810
push eax
push 0x553378
mov ecx, dword [ebp - 0x10]
call fcn.00402075
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], 0x18
call fcn.004b6697
lea ecx, [ebp - 0x25c]
mov byte [ebp - 4], 0x17
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.004023a8
lea ecx, [ebp - 0xa5c]
call fcn.004395e1
mov ecx, dword [ebp - 0x244]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x214]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x208]
jmp 0x447914
cmp eax, 1
jne 0x447926
cmp dword [esi + 0xc8], 0
jne 0x447926
mov edi, str._b__d___Y
mov esi, 0x5536f4
mov ecx, dword [ebp - 0x18]
push edi
lea eax, [ebp - 0x224]
push eax
add ecx, 0x134
call fcn.00407a47
mov ecx, dword [ebp - 0x18]
push edi
lea eax, [ebp - 0x218]
push eax
add ecx, 0x140
mov byte [ebp - 4], 0x31
call fcn.00407a47
push str._to
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x640]
push eax
mov byte [ebp - 4], 0x32
call fcn.00402344
lea ecx, [ebp - 0x218]
push ecx
push eax
lea eax, [ebp - 0x210]
push eax
mov byte [ebp - 4], 0x33
call fcn.004022ed
add esp, 0x18
mov ecx, dword [ebp - 0x640]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x30]
call fcn.0042a380
lea ecx, [ebp - 0x40]
call fcn.0042a380
push 0xc
lea eax, [ebp - 0x6f8]
push eax
mov ecx, esi
mov byte [ebp - 4], 0x37
call fcn.00402255
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x38
call fcn.00401c5e
mov ecx, dword [ebp - 0x6f8]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x37
call fcn.00401285
push 0xc
lea eax, [ebp - 0x648]
push eax
mov ecx, esi
call fcn.0040220f
push eax
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x39
call fcn.00401c5e
mov ecx, dword [ebp - 0x648]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x37
call fcn.00401285
push dword [0x5536f0]
lea ecx, [ebp - 0x58c]
call fcn.0040719a
or dword [ebp - 0x20], 2
push eax
mov eax, dword [ebp - 0x18]
add eax, 0x120
push eax
call fcn.00406b7c
pop ecx
pop ecx
test al, al
je 0x447145
lea eax, [ebp - 0x210]
push esi
push eax
call fcn.00406b67
pop ecx
pop ecx
mov byte [ebp - 0x31], 1
test al, al
jne 0x447149
mov byte [ebp - 0x31], 0
test byte [ebp - 0x20], 2
je 0x447161
mov ecx, dword [ebp - 0x58c]
and dword [ebp - 0x20], 0xfffffffd
add ecx, 0xfffffff0
call fcn.00401285
cmp byte [ebp - 0x31], 0
jne 0x4471cc
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx]
push 1
push 1
call dword [eax + 0x14]
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x210]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x218]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.00401285
mov eax, dword [ebp - 0x18]
cmp dword [eax + 0xc8], 0
je 0x44701d
jmp 0x447920
lea ecx, [ebp - 0x99c]
call fcn.00438279
push dword [0x5537f4]
lea ecx, [ebp - 0x99c]
call fcn.0043a087
and dword [ebp - 0x268], 0
mov dword [ebp - 0x1c], eax
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
mov edi, dword [ebp - 0x10]
push 8
mov ecx, edi
mov byte [ebp - 4], 0x3b
call fcn.004386cc
push 0xa
mov ecx, edi
call fcn.004386cc
lea ecx, [ebp - 0x99c]
call fcn.004382b7
push eax
lea ecx, [ebp - 0x26c]
call fcn.004b68ea
lea eax, [ebp - 0x924]
push eax
lea ecx, [ebp - 0x26c]
call fcn.00401d80
cmp dword [ebp - 0x1c], 0x80004005
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x24], eax
je 0x447282
mov eax, dword [ebp - 0x90]
lea ecx, [eax + 0x352]
push ecx
mov ecx, dword [ebp - 0x8c]
lea edx, [ecx + 0x32]
push edx
add eax, 0xffffffce
add ecx, 0xfffffcae
push eax
push ecx
mov ecx, edi
call fcn.004386dc
mov ecx, dword [ebp - 0x28]
mov esi, 0x320
push esi
push esi
push dword [ebp - 0x90]
add ecx, 0x24
push dword [ebp - 0x8c]
call fcn.00437fad
lea ecx, [ebp - 0x724]
call fcn.004b6089
push edi
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 0x3c
call fcn.004346f5
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x724]
call fcn.00434716
push dword [edi + 8]
mov dword [ebp - 0x80], eax
call dword [sym.imp.GDI32.dll_GetMapMode]
push eax
lea ecx, [ebp - 0x724]
call fcn.004b5e42
push 4
mov ecx, edi
call fcn.004b5ddd
push 0xcc0020
push dword [ebp - 0x24]
lea eax, [ebp - 0x724]
push dword [ebp - 0x3c]
mov ecx, edi
push 0
push 0
push eax
mov eax, dword [ebp - 0x8c]
push esi
push esi
push dword [ebp - 0x90]
add eax, 0xfffffce0
push eax
call fcn.00438713
push dword [ebp - 0x80]
lea ecx, [ebp - 0x724]
call fcn.00434716
push dword [ebp - 0x14]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
lea ecx, [ebp - 0x14]
call fcn.0042a380
push 0x5533a0
lea eax, [ebp - 0x614]
push str.This_is_to_certify_that
push eax
mov byte [ebp - 4], 0x3d
call fcn.004048c3
push str.__Employee_ID
push eax
lea eax, [ebp - 0x60c]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00402344
push 0x5536f0
push eax
lea eax, [ebp - 0x604]
push eax
mov byte [ebp - 4], 0x3f
call fcn.004022ed
push str.__is_working_with_company
push eax
lea eax, [ebp - 0x5fc]
push eax
mov byte [ebp - 4], 0x40
call fcn.00402344
push 0x5536b0
push eax
lea eax, [ebp - 0x5f4]
push eax
mov byte [ebp - 4], 0x41
call fcn.004022ed
push str._as_a
push eax
lea eax, [ebp - 0x5ec]
push eax
mov byte [ebp - 4], 0x42
call fcn.00402344
add esp, 0x48
push 0x5533a8
push eax
lea eax, [ebp - 0x5e4]
push eax
mov byte [ebp - 4], 0x43
call fcn.004022ed
push str._in
push eax
lea eax, [ebp - 0x5dc]
push eax
mov byte [ebp - 4], 0x44
call fcn.00402344
push 0x5533ac
push eax
lea eax, [ebp - 0x5d4]
push eax
mov byte [ebp - 4], 0x45
call fcn.004022ed
push str._Department_is_on
push eax
lea eax, [ebp - 0x5cc]
push eax
mov byte [ebp - 4], 0x46
call fcn.00402344
push 0x5536f8
push eax
lea eax, [ebp - 0x5c4]
push eax
mov byte [ebp - 4], 0x47
call fcn.004022ed
push str._Training
push eax
lea eax, [ebp - 0x5bc]
push eax
mov byte [ebp - 4], 0x48
call fcn.00402344
add esp, 0x48
push str._from
push eax
lea eax, [ebp - 0x5b4]
push eax
mov byte [ebp - 4], 0x49
call fcn.00402344
lea ecx, [ebp - 0x30]
push ecx
push eax
lea eax, [ebp - 0x5ac]
push eax
mov byte [ebp - 4], 0x4a
call fcn.004022ed
push str._to
push eax
lea eax, [ebp - 0x5a4]
push eax
mov byte [ebp - 4], 0x4b
call fcn.00402344
mov byte [ebp - 4], 0x4c
lea ecx, [ebp - 0x40]
push ecx
push eax
lea eax, [ebp - 0x59c]
push eax
call fcn.004022ed
push 0x51b264
push eax
lea eax, [ebp - 0x594]
push eax
mov byte [ebp - 4], 0x4d
call fcn.00402344
add esp, 0x3c
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 0x4e
call fcn.00401c5e
mov ecx, dword [ebp - 0x594]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x59c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5a4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5ac]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5b4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5bc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5c4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5cc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5d4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5dc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5e4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5ec]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5f4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5fc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x604]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x60c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x614]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3d
call fcn.00401285
cmp dword [ebp - 0x1c], 0x80004005
mov esi, dword [sym.imp.USER32.dll_OffsetRect]
lea eax, [ebp - 0x94]
je 0x4475db
push 0x3e8
jmp 0x4475e0
push 0x190
push 0
push eax
call esi
push 0x810
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x14]
push eax
mov ecx, edi
call fcn.00402075
cmp byte [0x55330c], 0
lea eax, [ebp - 0x94]
je 0x447622
cmp dword [ebp - 0x1c], 0x80004005
je 0x44761b
push 0x258
jmp 0x447630
push 0x4b0
jmp 0x447630
cmp dword [ebp - 0x1c], 0x80004005
jne 0x44761b
push 0x708
push 0
push eax
call esi
push str._Holder_Name__Signature_
lea ecx, [ebp - 0x344]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x344]
push eax
mov byte [ebp - 4], 0x4f
call fcn.00402075
mov ecx, dword [ebp - 0x344]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3d
call fcn.00401285
push str._Signature_of_Authorized_Signatory_
lea ecx, [ebp - 0x350]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push 0x812
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x350]
push eax
mov byte [ebp - 4], 0x50
call fcn.00402075
mov ecx, dword [ebp - 0x350]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x3d
call fcn.00401285
lea esi, [ebx + 0x30]
lea edi, [ebp - 0x170]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub dword [ebp - 0x16c], 0xfa
mov eax, 0xc8
add dword [ebp - 0x170], eax
sub dword [ebp - 0x168], eax
mov eax, dword [0x5536b4]
cmp dword [eax - 0xc], 0xdc
mov eax, dword [0x553208]
jg 0x4477d9
test eax, eax
jne 0x447782
cmp byte [0x55330c], 0
lea eax, [ebp - 0x170]
je 0x44775e
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0xffffffffffffff9c
push 0
push eax
call ebx
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x170]
push eax
push 0x5536b4
call fcn.00402075
lea esi, [ebp - 0x170]
lea edi, [ebp - 0x8c4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x8c4]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x8c4]
jmp 0x44788b
push 0x96
push 0
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push 0x810
lea eax, [ebp - 0x170]
push eax
push 0x5536b4
jmp 0x447896
cmp eax, 1
jne 0x44789e
cmp byte [0x55330c], 0
je 0x44789e
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0x96
push 0
lea eax, [ebp - 0x170]
push eax
call ebx
lea esi, [ebp - 0x170]
lea edi, [ebp - 0x894]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x894]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x894]
jmp 0x44788b
test eax, eax
jne 0x447844
cmp byte [0x55330c], 0
lea eax, [ebp - 0x170]
je 0x44783d
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0xfffffdda
push 0
push eax
call ebx
mov ecx, dword [ebp - 0x10]
push 0x810
lea eax, [ebp - 0x170]
push eax
push 0x5536b4
call fcn.00402075
lea esi, [ebp - 0x170]
lea edi, [ebp - 0x8b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x320
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x8b4]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x8b4]
jmp 0x44788b
push 0x64
jmp 0x447763
cmp eax, 1
jne 0x44789e
cmp byte [0x55330c], 0
je 0x44789e
mov ebx, dword [sym.imp.USER32.dll_OffsetRect]
push 0x64
push 0
lea eax, [ebp - 0x170]
push eax
call ebx
lea esi, [ebp - 0x170]
lea edi, [ebp - 0x8d4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x8d4]
push eax
movsd dword es:[edi], dword [esi]
call ebx
lea eax, [ebp - 0x8d4]
push 0x810
push eax
push 0x553378
mov ecx, dword [ebp - 0x10]
call fcn.00402075
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x724]
mov byte [ebp - 4], 0x3b
call fcn.004b6697
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x3a
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.004023a8
lea ecx, [ebp - 0x99c]
call fcn.004395e1
mov ecx, dword [ebp - 0x40]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x30]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x210]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x218]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
mov byte [ebp - 4], 5
call fcn.00401285
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x44]
mov ecx, esi
call fcn.004bc813
test eax, eax
je 0x447938
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
test esi, esi
je 0x447945
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
mov ecx, edi
call fcn.004bc813
test eax, eax
je 0x447957
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x10]
test edi, edi
je 0x447964
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0x2c]
jmp 0x44f5e8
cmp dword [0x553274], ecx
je 0x44d446
cmp dword [0x55326c], ecx
je 0x44d446
cmp dword [0x553270], ecx
je 0x44c9e2
cmp dword [0x553268], ecx
je 0x44c9e2
cmp dword [0x553280], ecx
jne 0x448c34
lea esi, [ebx + 0x40]
lea edi, [ebp - 0x28c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp dword [eax + 0x14], ecx
jne 0x447e1a
push 0x478
call fcn.004012ac
mov dword [ebp - 0x24], eax
xor edi, edi
mov dword [ebp - 4], 0xbc
cmp eax, edi
je 0x4479e7
push edi
mov ecx, eax
call fcn.0042d70b
mov esi, eax
mov dword [ebp - 0x14], eax
jmp 0x4479ec
xor esi, esi
mov dword [ebp - 0x14], esi
or dword [ebp - 4], 0xffffffff
mov ecx, esi
call fcn.004bc813
test eax, eax
jne 0x447a06
mov eax, dword [esi]
push edi
push edi
push 0xffffffffffffffff
mov ecx, esi
call dword [eax + 0xc]
cmp dword [esi + 0xc8], edi
jne 0x447dfc
lea eax, [esi + 0x12c]
mov dword [ebp - 0x24], eax
push dword [0x5536f0]
lea ecx, [ebp - 0x4ec]
call fcn.0040719a
push eax
push dword [ebp - 0x24]
call fcn.00406b7c
pop ecx
pop ecx
mov ecx, dword [ebp - 0x4ec]
add ecx, 0xfffffff0
mov byte [ebp - 0x31], al
call fcn.00401285
cmp byte [ebp - 0x31], 0
jne 0x447a66
mov eax, dword [esi]
push 1
push 1
mov ecx, esi
call dword [eax + 0x14]
cmp dword [esi + 0xc8], edi
je 0x447a1b
jmp 0x447dfc
push 0x510f7c
lea ecx, [ebp - 0x130]
call fcn.004018fe
mov esi, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [esi]
mov ecx, esi
mov dword [ebp - 4], 0xbd
call dword [eax + 0x28]
push 0
push 0x32
lea ecx, [ebp - 0x28c]
call fcn.004346bf
push str.Employee_ID__:
lea ecx, [ebp - 0x35c]
call fcn.004018fe
mov edi, 0x810
push edi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x35c]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xbe
call fcn.00402075
mov ecx, dword [ebp - 0x35c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xbd
call fcn.00401285
push 0
mov esi, 0x3e8
push esi
lea ecx, [ebp - 0x28c]
call fcn.004346bf
mov eax, dword [ebp - 0x24]
push dword [eax]
lea ecx, [ebp - 0x4f4]
call fcn.00403636
push edi
lea ecx, [ebp - 0x28c]
push ecx
mov ecx, dword [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xbf
call fcn.00402075
mov ecx, dword [ebp - 0x4f4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xbd
call fcn.00401285
push 0x78
push 0xfffffc18
lea ecx, [ebp - 0x28c]
call fcn.004346bf
push str.Employee_Name__:
lea ecx, [ebp - 0x364]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x364]
push eax
mov byte [ebp - 4], 0xc0
call fcn.00402075
mov ecx, dword [ebp - 0x364]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xbd
call fcn.00401285
push 0
push esi
lea ecx, [ebp - 0x28c]
call fcn.004346bf
push 0x5119e8
lea ecx, [ebp - 0x24]
call fcn.004069d6
mov byte [ebp - 4], 0xc1
mov esi, dword [ebp - 0x14]
lea eax, [esi + 0x134]
push eax
lea ecx, [esi + 0x130]
call fcn.004049bc
push eax
lea eax, [ebp - 0x514]
push eax
call fcn.00406c6d
mov eax, dword [eax]
lea ecx, [ebp - 0x24]
push ecx
push eax
lea eax, [ebp - 0x50c]
push eax
mov byte [ebp - 4], 0xc2
call fcn.00406f30
add esp, 0x18
add esi, 0x138
push esi
mov ecx, eax
mov byte [ebp - 4], 0xc3
call fcn.00406a70
push eax
lea eax, [ebp - 0x504]
push eax
call fcn.00406cc4
add esp, 0xc
push dword [eax]
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 0xc4
call fcn.00403636
push edi
lea ecx, [ebp - 0x28c]
push ecx
mov ecx, dword [ebp - 0x10]
push eax
mov byte [ebp - 4], 0xc5
call fcn.00402075
mov ecx, dword [ebp - 0x4fc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x504]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x50c]
call fcn.00406dc8
mov ecx, dword [ebp - 0x514]
add ecx, 0xfffffff0
call fcn.00401285
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0xbd
call fcn.00406dc8
mov esi, 0x5536f4
mov ecx, esi
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
mov ecx, esi
je 0x447d27
push 0
push 0x5119b4
call fcn.00401b0f
cmp eax, 0xffffffff
je 0x447cd6
push str._to
lea eax, [ebp - 0x524]
push esi
push eax
call fcn.00402344
push 0x5536f8
push eax
lea eax, [ebp - 0x51c]
push eax
mov byte [ebp - 4], 0xc6
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xc7
call fcn.00401c5e
mov ecx, dword [ebp - 0x51c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x524]
jmp 0x447d63
push 0x5119f0
lea eax, [ebp - 0x534]
push esi
push eax
call fcn.00402344
push 0x5536f8
push eax
lea eax, [ebp - 0x52c]
push eax
mov byte [ebp - 4], 0xc8
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xc9
call fcn.00401c5e
mov ecx, dword [ebp - 0x52c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x534]
jmp 0x447d63
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
jne 0x447d6f
push 0x5536f8
lea eax, [ebp - 0x53c]
push str.1_January_to_31_December_
push eax
call fcn.004048c3
add esp, 0xc
push eax
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xca
call fcn.00401c5e
mov ecx, dword [ebp - 0x53c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xbd
call fcn.00401285
push 0x78
push 0xfffffc18
lea ecx, [ebp - 0x28c]
call fcn.004346bf
push str.Log_Period__:
lea ecx, [ebp - 0x36c]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x36c]
push eax
mov byte [ebp - 4], 0xcb
call fcn.00402075
mov ecx, dword [ebp - 0x36c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xbd
call fcn.00401285
push 0
push 0x3e8
lea ecx, [ebp - 0x28c]
call fcn.004346bf
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.00402075
mov ecx, dword [ebp - 0x130]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov esi, dword [ebp - 0x14]
mov ecx, esi
call fcn.004bc813
test eax, eax
je 0x447e0e
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
xor ecx, ecx
inc ecx
mov eax, dword [0x553224]
cmp eax, ecx
jne 0x448495
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x18], 0xffffffff
xor edi, edi
xor esi, esi
cmp dword [ebx + 0xb8], edi
mov dword [ebp - 0x14], edi
jle 0x447e69
push esi
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x447e60
push esi
mov ecx, ebx
call fcn.00439404
add dword [ebp - 0x14], eax
inc esi
cmp esi, dword [ebx + 0xb8]
jl 0x447e45
push edi
push edi
push edi
push edi
lea ecx, [ebp - 0xd4]
call fcn.004116e6
push edi
push edi
push edi
push edi
lea ecx, [ebp - 0x2bc]
call fcn.004116e6
cmp dword [ebx + 0xb8], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x2c], edi
jle 0x44848a
push edi
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44847a
mov eax, dword [ebx + 0x58]
fild dword [ebp - 0x14]
inc dword [ebp - 0x18]
sub eax, dword [ebx + 0x50]
push dword [ebp - 0x18]
fstp qword [ebp - 0x5c]
mov ecx, ebx
mov dword [ebp - 0x3c], eax
call fcn.00439404
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
and dword [ebp - 0x30], 0
mov esi, eax
inc esi
lea eax, [edi + 1]
cmp eax, dword [ebx + 0xb8]
mov dword [ebp - 0x24], esi
jge 0x447f23
mov dword [ebp - 0x1c], eax
push dword [ebp - 0x1c]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
je 0x447f1c
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0xb8]
jl 0x447efa
jmp 0x447f23
mov dword [ebp - 0x30], 1
test edi, edi
jne 0x447ff4
and dword [ebx + 0x328], edi
push edi
lea eax, [ebp - 0xc7c]
push eax
mov ecx, ebx
call fcn.004396d2
mov esi, eax
mov eax, dword [ebp - 0x28]
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp dword [eax + 0x14], 1
jne 0x447f67
push 0x190
push 0
lea ecx, [ebp - 0xd4]
call fcn.004346bf
cmp dword [ebp - 0x30], 0
push dword [ebp - 0xc8]
jne 0x447f84
push dword [ebx + 0x48]
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
jmp 0x447f97
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x24]
add ecx, eax
push ecx
push dword [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00437fad
cmp dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x2b8]
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x44811f
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
push 0
jmp 0x448097
cmp dword [ebp - 0x40], 0
jne 0x4480b7
push dword [ebp - 0x2c]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xc2c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x30], 0
mov esi, eax
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
jne 0x44803f
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0xd4]
jmp 0x448052
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x24]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00437fad
mov eax, dword [ebp - 0x2b8]
lea esi, [ebp - 0x2bc]
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
mov edi, esp
push dword [ebx + 0xb8]
push dword [ebp - 0x2c]
push dword [ebp - 0x28]
lea esi, [ebp - 0xd4]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043ed5b
mov dword [ebp - 0x40], 1
jmp 0x44811f
cmp dword [ebp - 0x30], 0
push dword [ebp - 0xc8]
jne 0x4480d4
push dword [ebx + 0x48]
push dword [ebp - 0xd0]
push dword [ebp - 0xcc]
jmp 0x4480e5
mov eax, dword [ebp - 0xcc]
lea ecx, [eax + esi]
push ecx
push dword [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x2bc]
call fcn.00437fad
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x2b4]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x2bc]
call fcn.00437fad
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
lea eax, [ebp - 0x544]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xcc
call fcn.00401c5e
mov ecx, dword [ebp - 0x544]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x1ac]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0x3c]
push 0
push eax
mov dword [ebp - 4], 0xcd
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0x3c]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0x3c], eax
lea eax, [ebp + 0x58]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x1ec]
call fcn.004018fe
and dword [ebp - 0x3dc], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0xcf
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x3e0]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x1ac]
call fcn.004018ec
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x84]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x1ac]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0xd0]
push dword [ebp - 0xcc]
add eax, 0x14
push eax
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x7d4]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x7d4]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x7d4]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x3cc], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x3d0]
mov byte [ebp - 4], 0xd0
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x7d4]
je 0x4482d2
push 0xa
jmp 0x4482d4
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x3d0]
push eax
lea eax, [ebp - 0x7d4]
push eax
call fcn.0043472d
and dword [ebp - 0x24], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0xd4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xd0]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x4483d6
lea esi, [ebx + 0x2cc]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jle 0x4483d6
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0xd4]
push edi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x24]
push eax
push esi
lea eax, [ebp - 0x54c]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x1ec]
mov byte [ebp - 4], 0xd1
call fcn.00401c5e
mov ecx, dword [ebp - 0x54c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xd0
call fcn.00401285
mov eax, dword [ebp - 0xd4]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x4483d6
push dword [ebx + 0x78]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
lea eax, [ebp - 0x1ec]
push eax
mov eax, dword [ebp - 0xd4]
push dword [ebx + 0x32c]
add eax, 0x14
push eax
mov ecx, edi
call fcn.0043415f
mov eax, dword [ebp - 0x80]
add dword [ebx + 0x32c], eax
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x24], eax
jl 0x448343
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x4483ec
mov dword [eax], ecx
jmp 0x4483f2
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0xd4]
push dword [ebp - 0xcc]
push dword [ebx + 0x330]
push dword [ebp - 0xd4]
call fcn.00437fad
lea esi, [ebp - 0xd4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x3d0]
mov byte [ebp - 4], 0xcf
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x3e0]
mov byte [ebp - 4], 0xce
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x1ec]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x1ac]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov edi, dword [ebp - 0x2c]
inc edi
cmp edi, dword [ebx + 0xb8]
mov dword [ebp - 0x2c], edi
jl 0x447e99
lea esi, [ebp - 0xd4]
jmp 0x44895e
test eax, eax
jne 0x44898b
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x30], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x124]
mov dword [ebx + 0x330], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], esi
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x2c], esi
jle 0x448958
push dword [ebp - 0x2c]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x448946
inc dword [ebp - 0x30]
push dword [ebp - 0x30]
mov ecx, ebx
cmp dword [ebp - 0x24], esi
jne 0x44856a
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xa7c]
push eax
call fcn.004396d2
mov esi, eax
mov eax, dword [ebp - 0x28]
lea edi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp dword [eax + 0x14], 1
jne 0x448535
push 0x190
push 0
lea ecx, [ebp - 0x124]
call fcn.004346bf
cmp dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x24], 1
jne 0x4485e3
lea esi, [ebp - 0x124]
jmp 0x4485bd
lea eax, [ebp - 0xa9c]
push eax
call fcn.004396d2
mov esi, eax
lea edi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x11c]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x124]
call fcn.00437fad
cmp dword [ebp - 0x1c], 0
lea edi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x4485e3
lea esi, [ebx + 0x318]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043ed5b
mov dword [ebp - 0x1c], 1
push dword [ebp - 0x2c]
lea eax, [ebp - 0x554]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xd2
call fcn.00401c5e
mov ecx, dword [ebp - 0x554]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x19c]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0x78]
push 0
push eax
mov dword [ebp - 4], 0xd3
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0x78]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0x78], eax
lea eax, [ebp + 0x94]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x23c]
call fcn.004018fe
and dword [ebp - 0x3f8], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0x78]
push eax
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xd5
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x3fc]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x19c]
call fcn.004018ec
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x5c]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x19c]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0x120]
push dword [ebp - 0x11c]
add eax, 0x14
push eax
push dword [ebp - 0x124]
lea ecx, [ebp - 0x784]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x784]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x784]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x3e8], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0xd6
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x784]
je 0x448796
push 0xa
jmp 0x448798
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x3ec]
push eax
lea eax, [ebp - 0x784]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0x124]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x120]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x4488a3
lea edi, [ebx + 0x2cc]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jle 0x4488a3
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x11c]
sub eax, dword [ebp - 0x124]
push esi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
lea eax, [ebp - 0x55c]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 0xd7
call fcn.00401c5e
mov ecx, dword [ebp - 0x55c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xd6
call fcn.00401285
mov eax, dword [ebp - 0x124]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x4488a3
push dword [ebx + 0x78]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebx + 0x32c]
cmp eax, dword [ebx + 0x340]
jge 0x448895
lea ecx, [ebp - 0x23c]
push ecx
push eax
mov eax, dword [ebp - 0x124]
add eax, 0x14
push eax
mov ecx, esi
call fcn.0043415f
mov eax, dword [ebp - 0x58]
add dword [ebx + 0x32c], eax
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x448807
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x4488b9
mov dword [eax], ecx
jmp 0x4488bf
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0x124]
push dword [ebp - 0x11c]
push dword [ebx + 0x330]
push dword [ebp - 0x124]
call fcn.00437fad
lea esi, [ebp - 0x124]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x3ec]
mov byte [ebp - 4], 0xd5
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x3fc]
mov byte [ebp - 4], 0xd4
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x23c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x19c]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebx + 0xb8]
jl 0x4484d8
lea esi, [ebp - 0x124]
lea eax, [ebx + 0x324]
mov ecx, dword [eax]
mov dword [ebx + 0x330], ecx
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x344], eax
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx]
push 0xffffff
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov edi, dword [ebp - 0x28]
xor esi, esi
inc esi
cmp dword [edi + 0x14], esi
jne 0x448af4
and dword [0x553314], 0
mov ecx, ebx
call fcn.00439be7
mov dword [ebx + 0xbc], eax
and dword [0x553318], 0
cmp dword [0x553324], 0
mov dword [0x553310], eax
jne 0x448b58
mov eax, dword [ebx + 0xc4]
and dword [ebp - 0x18], 0
mov dword [ebp - 0x14], eax
mov dword [ebx + 0xc0], esi
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x14]
jge 0x448a90
test eax, eax
jl 0x448a07
jne 0x448a44
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
jmp 0x448a44
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
cmp dword [ebx + 0x328], eax
mov eax, dword [ebp - 0x18]
jge 0x448a5a
mov ecx, dword [ebp - 0x14]
inc eax
cmp eax, ecx
jne 0x448a88
cmp dword [ebx + 0x334], 0
jne 0x448a88
cmp ecx, dword [ebx + 0xc4]
je 0x448a88
mov dword [ebp - 0x18], eax
push edi
push dword [ebp - 0x18]
mov ecx, ebx
push dword [ebp - 0x10]
call fcn.004425df
inc dword [ebx + 0xbc]
jmp 0x448a07
inc eax
cmp eax, dword [ebp - 0x14]
je 0x448a88
lea eax, [ebx + 0xbc]
mov dword [ebx + 0x334], esi
mov ecx, dword [eax]
cmp ecx, esi
jle 0x448a75
dec ecx
mov dword [eax], ecx
lea eax, [ebx + 0xc0]
inc dword [eax]
mov ecx, dword [edi]
mov eax, dword [eax]
mov ecx, dword [ecx + 0x74]
mov word [ecx + 0x1e], ax
inc dword [ebp - 0x18]
jmp 0x4489e5
and dword [ebp - 0x408], 0
mov dword [0x553324], esi
mov esi, vtable.CBrush.0
mov dword [ebp - 0x40c], esi
push 0xffffff
lea ecx, [ebp - 0x40c]
mov dword [ebp - 4], 0xd8
call fcn.004040d8
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x40c]
push eax
lea eax, [ebx + 0x60]
push eax
call fcn.0043472d
push edi
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.00440cbf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
mov dword [ebp - 0x40c], esi
call fcn.004023a8
jmp 0x448b58
lea ecx, [ebp - 0x24]
call fcn.0042a380
mov eax, dword [0x55331c]
test eax, eax
je 0x448b2a
mov ecx, dword [edi + 0x14]
cmp eax, ecx
jb 0x448b2a
jbe 0x448b4d
sub eax, ecx
cmp eax, esi
jbe 0x448b1d
imul eax, dword [0x553310]
jmp 0x448b22
mov eax, dword [0x553310]
sub dword [0x553318], eax
jmp 0x448b4d
mov ecx, dword [edi + 0x14]
sub ecx, eax
cmp ecx, esi
jbe 0x448b42
imul ecx, dword [0x553310]
add dword [0x553318], ecx
jmp 0x448b4d
mov eax, dword [0x553310]
add dword [0x553318], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401285
mov esi, dword [0x553318]
mov eax, dword [0x553310]
lea edi, [esi + eax]
mov eax, dword [ebx + 0xc4]
cmp edi, eax
mov dword [ebp - 0x24], esi
jle 0x448b75
mov edi, eax
mov dword [ebx + 0xbc], 1
cmp esi, edi
jge 0x448c00
test esi, esi
jl 0x448bab
jne 0x448b97
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
push dword [ebp - 0x28]
mov ecx, ebx
push esi
push dword [ebp - 0x10]
call fcn.004425df
inc dword [ebx + 0xbc]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
inc esi
cmp dword [ebx + 0x328], eax
jge 0x448be2
cmp esi, edi
jne 0x448b81
cmp dword [ebx + 0x334], 0
jne 0x448b7f
cmp edi, dword [ebx + 0xc4]
je 0x448b7f
inc edi
jmp 0x448b83
cmp esi, edi
je 0x448c00
xor ecx, ecx
inc ecx
mov dword [ebx + 0x334], ecx
mov eax, dword [ebx + 0xbc]
cmp eax, ecx
jle 0x448c00
dec eax
mov dword [ebx + 0xbc], eax
lea eax, [ebx + 0x334]
cmp dword [eax], 1
jne 0x448c17
mov ecx, dword [ebx + 0xbc]
mov dword [0x553310], ecx
cmp dword [ebp - 0x24], edi
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 0x14]
mov dword [0x55331c], ecx
jle 0x44f5f0
and dword [eax], 0
jmp 0x44f5f0
cmp dword [0x55325c], ecx
jne 0x449e43
mov eax, dword [0x553224]
cmp eax, ecx
jne 0x449865
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x1c], 0xffffffff
xor esi, esi
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], esi
mov edi, 0x553674
jle 0x448c92
push esi
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
jne 0x448c89
push esi
mov ecx, ebx
call fcn.00439404
add dword [ebp - 0x38], eax
inc esi
cmp esi, dword [ebx + 0xb8]
jl 0x448c71
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0xc4]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x1d4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], esi
jle 0x44985a
push dword [ebp - 0x2c]
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
jne 0x449848
mov eax, dword [ebx + 0x58]
fild dword [ebp - 0x38]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x1c]
push dword [ebp - 0x1c]
fstp qword [ebp - 0x5c]
mov ecx, ebx
mov dword [ebp - 0x80], eax
call fcn.00439404
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x80]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
and dword [ebp - 0x18], 0
mov esi, eax
mov eax, dword [ebp - 0x2c]
inc esi
inc eax
cmp eax, dword [ebx + 0xb8]
mov dword [ebp - 0x44], esi
jge 0x448d4b
mov dword [ebp - 0x40], eax
push dword [ebp - 0x40]
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
je 0x448d44
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebx + 0xb8]
jl 0x448d25
jmp 0x448d4b
mov dword [ebp - 0x18], 1
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x4490f2
and dword [ebx + 0x328], eax
push dword [ebp - 0x1c]
lea eax, [ebp - 0xabc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0xb8]
jne 0x448d96
push dword [ebx + 0x48]
push dword [ebp - 0xc0]
push dword [ebp - 0xc4]
jmp 0x448da9
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1d0]
lea esi, [ebp - 0x1d4]
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x4490e6
or dword [ebp - 0x40], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0x14], esi
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x2fc]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x494]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x30], esi
jle 0x4490aa
push dword [ebp - 0x30]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x449098
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x40]
push dword [ebp - 0x40]
mov ecx, ebx
mov dword [ebp - 0x3c], eax
call fcn.00439404
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x33c], esi
jne 0x448f06
push dword [ebp - 0x40]
lea eax, [ebp - 0xadc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x60]
jne 0x448eaf
push dword [ebx + 0x48]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
jmp 0x448ebc
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2fc]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x2f8]
lea esi, [ebp - 0x2fc]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x494]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x449033
jmp 0x448f8b
cmp dword [ebp - 0x20], esi
jne 0x448fb6
push dword [ebp - 0x40]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xafc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
push dword [ebp - 0x488]
mov esi, eax
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x448f4a
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0x6c]
jmp 0x448f5a
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x2fc]
call fcn.00437fad
mov eax, dword [ebp - 0x2f8]
lea esi, [ebp - 0x2fc]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x494]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x6c]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
mov dword [ebp - 0x20], 1
jmp 0x449033
push dword [ebp - 0x60]
cmp dword [ebp - 0x18], esi
jne 0x448fc9
push dword [ebx + 0x48]
push dword [ebp - 0x68]
push dword [ebp - 0x64]
jmp 0x448fd3
mov ecx, dword [ebp - 0x64]
add eax, ecx
push eax
push dword [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x2fc]
call fcn.00437fad
push dword [ebp - 0x488]
lea ecx, [ebp - 0x494]
push dword [ebp - 0x2f4]
push dword [ebx + 0x330]
push dword [ebp - 0x2fc]
call fcn.00437fad
lea esi, [ebp - 0x494]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x494]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
push 0x510f7c
lea ecx, [ebp - 0x1f0]
call fcn.004018fe
lea esi, [ebx + 0x340]
push dword [esi]
mov edi, 0x511a8c
lea eax, [ebp - 0x1f0]
push edi
push eax
mov dword [ebp - 4], 0xd9
call fcn.004022da
mov esi, dword [esi]
add esp, 0xc
cmp esi, dword [ebp - 0x14]
jl 0x449071
mov dword [ebp - 0x14], esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x1f0]
push edi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x1f0]
or dword [ebp - 4], 0xffffffff
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebx + 0xb8]
jl 0x448e2c
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x340], eax
mov eax, dword [ebp - 0x1d0]
lea esi, [ebp - 0x1d4]
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xc4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
jmp 0x4494e8
cmp dword [ebp - 0x20], eax
jne 0x449481
push dword [ebp - 0x1c]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xb1c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
jne 0x44913c
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0xc4]
jmp 0x44914f
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00437fad
mov eax, dword [ebp - 0x1d0]
lea esi, [ebp - 0x1d4]
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [ebp - 0x40], 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
xor eax, eax
movsd dword es:[edi], dword [esi]
push eax
push eax
movsd dword es:[edi], dword [esi]
push eax
push eax
lea ecx, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x14], eax
call fcn.004116e6
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x2dc]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x4d4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x30], esi
jle 0x449447
push dword [ebp - 0x30]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x449435
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x40]
push dword [ebp - 0x40]
mov ecx, ebx
mov dword [ebp - 0x80], eax
call fcn.00439404
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x80]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
xor ecx, ecx
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x33c], ecx
jne 0x4492a6
push dword [ebp - 0x40]
lea eax, [ebp - 0xb3c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x48]
jne 0x44924f
push dword [ebx + 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
jmp 0x44925c
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0x50]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x2d8]
lea esi, [ebp - 0x2dc]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x4d4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x4493d2
jmp 0x44932a
cmp dword [ebp - 0x20], ecx
jne 0x449355
push dword [ebp - 0x40]
and dword [ebx + 0x328], ecx
lea eax, [ebp - 0xb5c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
push dword [ebp - 0x4c8]
mov esi, eax
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x4492e9
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0x54]
jmp 0x4492f9
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x2dc]
call fcn.00437fad
mov eax, dword [ebp - 0x2d8]
lea esi, [ebp - 0x2dc]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x4d4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x54]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
mov dword [ebp - 0x20], 1
jmp 0x4493d2
push dword [ebp - 0x48]
cmp dword [ebp - 0x18], ecx
jne 0x449368
push dword [ebx + 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
jmp 0x449372
mov ecx, dword [ebp - 0x4c]
add eax, ecx
push eax
push dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x2dc]
call fcn.00437fad
push dword [ebp - 0x4c8]
lea ecx, [ebp - 0x4d4]
push dword [ebp - 0x2d4]
push dword [ebx + 0x330]
push dword [ebp - 0x2dc]
call fcn.00437fad
lea esi, [ebp - 0x4d4]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x4d4]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
push 0x510f7c
lea ecx, [ebp - 0x22c]
call fcn.004018fe
lea esi, [ebx + 0x340]
push dword [esi]
mov edi, 0x511a8c
lea eax, [ebp - 0x22c]
push edi
push eax
mov dword [ebp - 4], 0xda
call fcn.004022da
mov esi, dword [esi]
add esp, 0xc
cmp esi, dword [ebp - 0x14]
jl 0x449410
mov dword [ebp - 0x14], esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x22c]
push edi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x22c]
or dword [ebp - 4], 0xffffffff
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00401285
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebx + 0xb8]
jl 0x4491ca
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x340], eax
mov eax, dword [ebp - 0x1d0]
lea esi, [ebp - 0x1d4]
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xc4]
lea edi, [ebx + 0x318]
mov dword [ebp - 0x20], 1
jmp 0x4494e4
push dword [ebp - 0xb8]
cmp dword [ebp - 0x18], eax
jne 0x44949d
push dword [ebx + 0x48]
push dword [ebp - 0xc0]
push dword [ebp - 0xbc]
jmp 0x4494ae
mov eax, dword [ebp - 0xbc]
lea ecx, [eax + esi]
push ecx
push dword [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.00437fad
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x1cc]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x1d4]
call fcn.00437fad
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
lea eax, [ebp - 0x564]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xdb
call fcn.00401c5e
mov ecx, dword [ebp - 0x564]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x194]
call fcn.004018fe
push 0x3c
lea eax, [ebp]
push 0
push eax
mov dword [ebp - 4], 0xdc
call fcn.004e4cd0
push 0x3c
lea eax, [ebp]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp], eax
lea eax, [ebp + 0x1c]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x234]
call fcn.004018fe
and dword [ebp - 0x420], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0xde
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x424]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x194]
call fcn.004018ec
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x194]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0xc0]
push dword [ebp - 0xbc]
add eax, 0x14
push eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x7f4]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x7f4]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x7f4]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x414], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0xdf
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x7f4]
je 0x44969b
push 0xa
jmp 0x44969d
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x418]
push eax
lea eax, [ebp - 0x7f4]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0xc4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xc0]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x4497a2
lea esi, [ebx + 0x2cc]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jle 0x4497a2
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc4]
push edi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x56c]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x234]
mov byte [ebp - 4], 0xe0
call fcn.00401c5e
mov ecx, dword [ebp - 0x56c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xdf
call fcn.00401285
mov eax, dword [ebp - 0xc4]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x4497a2
push dword [ebx + 0x78]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0xc4]
push dword [ebx + 0x32c]
add eax, 0x14
push eax
mov ecx, edi
call fcn.0043415f
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x44970c
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x4497b8
mov dword [eax], ecx
jmp 0x4497be
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0xc4]
push dword [ebp - 0xbc]
push dword [ebx + 0x330]
push dword [ebp - 0xc4]
call fcn.00437fad
lea esi, [ebp - 0xc4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x418]
mov byte [ebp - 4], 0xde
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0xdd
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x234]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x194]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov edi, 0x553674
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebx + 0xb8]
jl 0x448cc4
lea esi, [ebp - 0xc4]
jmp 0x449d25
test eax, eax
jne 0x449d52
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x2c], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x140]
mov dword [ebx + 0x330], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], esi
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x1c], esi
jle 0x449d1f
push dword [ebp - 0x1c]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x449d0d
inc dword [ebp - 0x2c]
push dword [ebp - 0x2c]
mov ecx, ebx
cmp dword [ebp - 0x24], esi
jne 0x44991f
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xb7c]
push eax
call fcn.004396d2
cmp dword [ebp - 0x14], 0
mov esi, eax
lea edi, [ebp - 0x140]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x13c]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0x140]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x24], 1
jne 0x449998
lea esi, [ebp - 0x140]
jmp 0x449972
lea eax, [ebp - 0xb9c]
push eax
call fcn.004396d2
mov esi, eax
lea edi, [ebp - 0x140]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x138]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x140]
call fcn.00437fad
cmp dword [ebp - 0x14], 0
lea edi, [ebp - 0x140]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x449998
lea esi, [ebx + 0x318]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043ed5b
mov dword [ebp - 0x14], 1
push dword [ebp - 0x1c]
lea eax, [ebp - 0x574]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xe1
call fcn.00401c5e
mov ecx, dword [ebp - 0x574]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x1a4]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0xf0]
push 0
push eax
mov dword [ebp - 4], 0xe2
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0xf0]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0xf0], eax
lea eax, [ebp + 0x10c]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x1fc]
call fcn.004018fe
and dword [ebp - 0x3d4], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0xf0]
push eax
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 0xe4
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x3d8]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x1a4]
call fcn.004018ec
lea eax, [ebp - 0x1a4]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x1a4]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0x13c]
push dword [ebp - 0x138]
add eax, 0x14
push eax
push dword [ebp - 0x140]
lea ecx, [ebp - 0x794]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x794]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x794]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x430], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0xe5
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x794]
je 0x449b5a
push 0xa
jmp 0x449b5c
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x434]
push eax
lea eax, [ebp - 0x794]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0x140]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x13c]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x449c6a
lea edi, [ebx + 0x2cc]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jle 0x449c6a
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x138]
sub eax, dword [ebp - 0x140]
push esi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
lea eax, [ebp - 0x57c]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x1fc]
mov byte [ebp - 4], 0xe6
call fcn.00401c5e
mov ecx, dword [ebp - 0x57c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xe5
call fcn.00401285
mov eax, dword [ebp - 0x140]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x449c6a
push dword [ebx + 0x78]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebx + 0x32c]
cmp eax, dword [ebx + 0x340]
jge 0x449c5c
lea ecx, [ebp - 0x1fc]
push ecx
push eax
mov eax, dword [ebp - 0x140]
add eax, 0x14
push eax
mov ecx, esi
call fcn.0043415f
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x449bcb
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x449c80
mov dword [eax], ecx
jmp 0x449c86
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0x140]
push dword [ebp - 0x138]
push dword [ebx + 0x330]
push dword [ebp - 0x140]
call fcn.00437fad
lea esi, [ebp - 0x140]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0xe4
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 0xe3
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x1fc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x1a4]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0xb8]
jl 0x4498a8
lea esi, [ebp - 0x140]
lea eax, [ebx + 0x324]
mov ecx, dword [eax]
mov dword [ebx + 0x330], ecx
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x344], eax
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx]
push 0xffffff
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, dword [ebp - 0x28]
cmp dword [esi + 0x14], 1
jne 0x449d73
mov ecx, ebx
call fcn.00439be7
mov dword [ebx + 0xbc], eax
mov eax, dword [esi + 0x14]
mov ecx, dword [ebx + 0xbc]
dec eax
imul eax, ecx
lea esi, [eax + ecx]
mov ecx, dword [ebx + 0xc4]
cmp esi, ecx
jle 0x449d8f
mov esi, ecx
or dword [ebx + 0x284], 0xffffffff
cmp eax, esi
mov dword [ebx + 0xbc], 1
mov edi, eax
jge 0x44f5f0
test edi, edi
jl 0x449dd2
jne 0x449dbe
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
push dword [ebp - 0x28]
mov ecx, ebx
push edi
push dword [ebp - 0x10]
call fcn.004425df
inc dword [ebx + 0xbc]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
inc edi
cmp dword [ebx + 0x328], eax
jge 0x449dfa
cmp edi, esi
jl 0x449daa
jmp 0x44f5f0
cmp edi, esi
je 0x44f5f0
xor ecx, ecx
inc ecx
mov dword [ebx + 0x334], ecx
mov eax, dword [ebx + 0xbc]
cmp eax, ecx
jle 0x449e1c
dec eax
mov dword [ebx + 0xbc], eax
mov ecx, dword [ebx + 0xbc]
mov eax, dword [ebx + 0xc4]
lea eax, [eax + ecx - 1]
cdq
idiv ecx
mov ecx, dword [ebp - 0x28]
push eax
mov dword [ebx + 0xc0], eax
call fcn.00438790
jmp 0x44f5f0
cmp dword [0x5532ec], ecx
je 0x44b4d3
cmp dword [0x5532a4], ecx
je 0x44b4d3
cmp dword [0x5532a0], ecx
je 0x44b4d3
cmp dword [0x55329c], ecx
je 0x44b4d3
cmp dword [0x553298], ecx
je 0x44b4d3
cmp dword [0x553294], ecx
je 0x44b4d3
cmp dword [0x553290], ecx
je 0x44b4d3
cmp dword [0x55328c], ecx
je 0x44b4d3
cmp dword [0x553288], ecx
je 0x44b4d3
cmp dword [0x553264], ecx
je 0x44b4d3
cmp dword [0x553260], ecx
je 0x44b4d3
mov eax, dword [0x553224]
cmp eax, ecx
jne 0x44aafa
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x40], 0xffffffff
xor esi, esi
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], esi
mov edi, 0x553674
jle 0x449f19
push esi
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
jne 0x449f10
push esi
mov ecx, ebx
call fcn.00439404
add dword [ebp - 0x38], eax
inc esi
cmp esi, dword [ebx + 0xb8]
jl 0x449ef8
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0xb4]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x1e4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], esi
jle 0x44aaef
push dword [ebp - 0x2c]
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
jne 0x44aadd
mov eax, dword [ebx + 0x58]
fild dword [ebp - 0x38]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x40]
push dword [ebp - 0x40]
fstp qword [ebp - 0x5c]
mov ecx, ebx
mov dword [ebp - 0x80], eax
call fcn.00439404
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x80]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
and dword [ebp - 0x18], 0
mov esi, eax
mov eax, dword [ebp - 0x2c]
inc esi
inc eax
cmp eax, dword [ebx + 0xb8]
mov dword [ebp - 0x44], esi
jge 0x449fd2
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
je 0x449fcb
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebx + 0xb8]
jl 0x449fac
jmp 0x449fd2
mov dword [ebp - 0x18], 1
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x44a379
and dword [ebx + 0x328], eax
push dword [ebp - 0x40]
lea eax, [ebp - 0xbbc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0xa8]
jne 0x44a01d
push dword [ebx + 0x48]
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
jmp 0x44a030
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1e0]
lea esi, [ebp - 0x1e4]
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44a36d
or dword [ebp - 0x1c], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x14], esi
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x29c]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x4a4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x30], esi
jle 0x44a331
push dword [ebp - 0x30]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44a31f
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov ecx, ebx
mov dword [ebp - 0x3c], eax
call fcn.00439404
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x33c], esi
jne 0x44a18d
push dword [ebp - 0x1c]
lea eax, [ebp - 0xbdc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x48]
jne 0x44a136
push dword [ebx + 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
jmp 0x44a143
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0x50]
push eax
lea ecx, [ebp - 0x29c]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x298]
lea esi, [ebp - 0x29c]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x4a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x44a2ba
jmp 0x44a212
cmp dword [ebp - 0x20], esi
jne 0x44a23d
push dword [ebp - 0x1c]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xbfc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
push dword [ebp - 0x498]
mov esi, eax
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44a1d1
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0x54]
jmp 0x44a1e1
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x29c]
call fcn.00437fad
mov eax, dword [ebp - 0x298]
lea esi, [ebp - 0x29c]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x4a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x54]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
mov dword [ebp - 0x20], 1
jmp 0x44a2ba
push dword [ebp - 0x48]
cmp dword [ebp - 0x18], esi
jne 0x44a250
push dword [ebx + 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
jmp 0x44a25a
mov ecx, dword [ebp - 0x4c]
add eax, ecx
push eax
push dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x29c]
call fcn.00437fad
push dword [ebp - 0x498]
lea ecx, [ebp - 0x4a4]
push dword [ebp - 0x294]
push dword [ebx + 0x330]
push dword [ebp - 0x29c]
call fcn.00437fad
lea esi, [ebp - 0x4a4]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x4a4]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
push 0x510f7c
lea ecx, [ebp - 0x240]
call fcn.004018fe
lea esi, [ebx + 0x340]
push dword [esi]
mov edi, 0x511a8c
lea eax, [ebp - 0x240]
push edi
push eax
mov dword [ebp - 4], 0xf8
call fcn.004022da
mov esi, dword [esi]
add esp, 0xc
cmp esi, dword [ebp - 0x14]
jl 0x44a2f8
mov dword [ebp - 0x14], esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x240]
push edi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x240]
or dword [ebp - 4], 0xffffffff
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebx + 0xb8]
jl 0x44a0b3
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x340], eax
mov eax, dword [ebp - 0x1e0]
lea esi, [ebp - 0x1e4]
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xb4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
jmp 0x44a76e
cmp dword [ebp - 0x20], eax
jne 0x44a708
push dword [ebp - 0x40]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xc1c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
jne 0x44a3c3
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0xb4]
jmp 0x44a3d6
mov eax, dword [ebp - 0xb4]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x1e4]
call fcn.00437fad
mov eax, dword [ebp - 0x1e0]
lea esi, [ebp - 0x1e4]
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [ebp - 0x1c], 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
xor eax, eax
movsd dword es:[edi], dword [esi]
push eax
push eax
movsd dword es:[edi], dword [esi]
push eax
push eax
lea ecx, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x14], eax
call fcn.004116e6
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x2ac]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x4c4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x30], esi
jle 0x44a6ce
push dword [ebp - 0x30]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44a6bc
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov ecx, ebx
mov dword [ebp - 0x80], eax
call fcn.00439404
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x80]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
xor ecx, ecx
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x33c], ecx
jne 0x44a52d
push dword [ebp - 0x1c]
lea eax, [ebp - 0xc3c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x60]
jne 0x44a4d6
push dword [ebx + 0x48]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
jmp 0x44a4e3
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x2a8]
lea esi, [ebp - 0x2ac]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x4c4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x44a659
jmp 0x44a5b1
cmp dword [ebp - 0x20], ecx
jne 0x44a5dc
push dword [ebp - 0x1c]
and dword [ebx + 0x328], ecx
lea eax, [ebp - 0xc5c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
push dword [ebp - 0x4b8]
mov esi, eax
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44a570
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0x6c]
jmp 0x44a580
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00437fad
mov eax, dword [ebp - 0x2a8]
lea esi, [ebp - 0x2ac]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x4c4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x6c]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
mov dword [ebp - 0x20], 1
jmp 0x44a659
push dword [ebp - 0x60]
cmp dword [ebp - 0x18], ecx
jne 0x44a5ef
push dword [ebx + 0x48]
push dword [ebp - 0x68]
push dword [ebp - 0x64]
jmp 0x44a5f9
mov ecx, dword [ebp - 0x64]
add eax, ecx
push eax
push dword [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x2ac]
call fcn.00437fad
push dword [ebp - 0x4b8]
lea ecx, [ebp - 0x4c4]
push dword [ebp - 0x2a4]
push dword [ebx + 0x330]
push dword [ebp - 0x2ac]
call fcn.00437fad
lea esi, [ebp - 0x4c4]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x4c4]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
push 0x510f7c
lea ecx, [ebp - 0x204]
call fcn.004018fe
lea esi, [ebx + 0x340]
push dword [esi]
mov edi, 0x511a8c
lea eax, [ebp - 0x204]
push edi
push eax
mov dword [ebp - 4], 0xf9
call fcn.004022da
mov esi, dword [esi]
add esp, 0xc
cmp esi, dword [ebp - 0x14]
jl 0x44a697
mov dword [ebp - 0x14], esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x204]
push edi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x204]
or dword [ebp - 4], 0xffffffff
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00401285
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebx + 0xb8]
jl 0x44a451
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x340], eax
mov eax, dword [ebp - 0x1e0]
lea esi, [ebp - 0x1e4]
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xb4]
lea edi, [ebx + 0x318]
mov dword [ebp - 0x20], 1
jmp 0x44a76a
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x1e4]
cmp dword [ebp - 0x18], eax
jne 0x44a72a
push dword [ebx + 0x48]
push dword [ebp - 0xb0]
push dword [ebp - 0xac]
jmp 0x44a73a
mov eax, dword [ebp - 0xac]
add esi, eax
push esi
push dword [ebp - 0xb0]
push eax
call fcn.00437fad
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x1dc]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x1e4]
call fcn.00437fad
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
lea eax, [ebp - 0x584]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xfa
call fcn.00401c5e
mov ecx, dword [ebp - 0x584]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x188]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0x12c]
push 0
push eax
mov dword [ebp - 4], 0xfb
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0x12c]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0x12c], eax
lea eax, [ebp + 0x148]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x228]
call fcn.004018fe
and dword [ebp - 0x3f0], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0x12c]
push eax
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0xfd
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x3f4]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x188]
call fcn.004018ec
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x188]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0xb0]
push dword [ebp - 0xac]
add eax, 0x14
push eax
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x7a4]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x7a4]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x7a4]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x318], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0xfe
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x7a4]
je 0x44a930
push 0xa
jmp 0x44a932
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x7a4]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0xb4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xb0]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x44aa37
lea esi, [ebx + 0x2cc]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jle 0x44aa37
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xb4]
push edi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x6c4]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0xff
call fcn.00401c5e
mov ecx, dword [ebp - 0x6c4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xfe
call fcn.00401285
mov eax, dword [ebp - 0xb4]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x44aa37
push dword [ebx + 0x78]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0xb4]
push dword [ebx + 0x32c]
add eax, 0x14
push eax
mov ecx, edi
call fcn.0043415f
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x44a9a1
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x44aa4d
mov dword [eax], ecx
jmp 0x44aa53
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0xb4]
push dword [ebp - 0xac]
push dword [ebx + 0x330]
push dword [ebp - 0xb4]
call fcn.00437fad
lea esi, [ebp - 0xb4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x31c]
mov byte [ebp - 4], 0xfd
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x3f4]
mov byte [ebp - 4], 0xfc
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x188]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov edi, 0x553674
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebx + 0xb8]
jl 0x449f4b
lea esi, [ebp - 0xb4]
jmp 0x44afba
test eax, eax
jne 0x44afe7
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x2c], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x160]
mov dword [ebx + 0x330], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], esi
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x1c], esi
jle 0x44afb4
push dword [ebp - 0x1c]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44afa2
inc dword [ebp - 0x2c]
push dword [ebp - 0x2c]
mov ecx, ebx
cmp dword [ebp - 0x24], esi
jne 0x44abb4
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xa6c]
push eax
call fcn.004396d2
cmp dword [ebp - 0x14], 0
mov esi, eax
lea edi, [ebp - 0x160]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x15c]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0x160]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x24], 1
jne 0x44ac2d
lea esi, [ebp - 0x160]
jmp 0x44ac07
lea eax, [ebp - 0xc9c]
push eax
call fcn.004396d2
mov esi, eax
lea edi, [ebp - 0x160]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x158]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x160]
call fcn.00437fad
cmp dword [ebp - 0x14], 0
lea edi, [ebp - 0x160]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44ac2d
lea esi, [ebx + 0x318]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043ed5b
mov dword [ebp - 0x14], 1
push dword [ebp - 0x1c]
lea eax, [ebp - 0x6cc]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0x100
call fcn.00401c5e
mov ecx, dword [ebp - 0x6cc]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x190]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0x168]
push 0
push eax
mov dword [ebp - 4], 0x101
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0x168]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0x168], eax
lea eax, [ebp + 0x184]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x20c]
call fcn.004018fe
and dword [ebp - 0x3b8], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0x168]
push eax
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 3
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x3bc]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x190]
call fcn.004018ec
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x190]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0x15c]
push dword [ebp - 0x158]
add eax, 0x14
push eax
push dword [ebp - 0x160]
lea ecx, [ebp - 0x7c4]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x7c4]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x7c4]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x324], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 4
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x7c4]
je 0x44adef
push 0xa
jmp 0x44adf1
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x7c4]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0x160]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x15c]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x44aeff
lea edi, [ebx + 0x2cc]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jle 0x44aeff
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x160]
push esi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
lea eax, [ebp - 0x6d4]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x20c]
mov byte [ebp - 4], 5
call fcn.00401c5e
mov ecx, dword [ebp - 0x6d4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 4
call fcn.00401285
mov eax, dword [ebp - 0x160]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x44aeff
push dword [ebx + 0x78]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebx + 0x32c]
cmp eax, dword [ebx + 0x340]
jge 0x44aef1
lea ecx, [ebp - 0x20c]
push ecx
push eax
mov eax, dword [ebp - 0x160]
add eax, 0x14
push eax
mov ecx, esi
call fcn.0043415f
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x44ae60
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x44af15
mov dword [eax], ecx
jmp 0x44af1b
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0x160]
push dword [ebp - 0x158]
push dword [ebx + 0x330]
push dword [ebp - 0x160]
call fcn.00437fad
lea esi, [ebp - 0x160]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x328]
mov byte [ebp - 4], 3
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x3bc]
mov byte [ebp - 4], 2
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x20c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x190]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0xb8]
jl 0x44ab3d
lea esi, [ebp - 0x160]
lea eax, [ebx + 0x324]
mov ecx, dword [eax]
mov dword [ebx + 0x330], ecx
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x344], eax
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx]
push 0xffffff
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x14], 1
jne 0x44b26b
xor esi, esi
mov ecx, ebx
mov dword [0x553314], esi
call fcn.00439be7
mov dword [ebx + 0xbc], eax
mov dword [0x553310], eax
mov ecx, dword [ebx + 0x10]
call fcn.00411076
cmp dword [0x553310], eax
jle 0x44b079
push 0x510f7c
lea ecx, [ebp - 0x374]
call fcn.004018fe
push dword [0x553310]
lea eax, [ebp - 0x374]
push str.prev_page_cnt_::__d
push eax
mov dword [ebp - 4], 0x106
call fcn.004022da
mov ecx, dword [ebx + 0x10]
add esp, 0xc
call fcn.00411076
mov ecx, dword [ebp - 0x374]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
mov dword [0x553310], eax
call fcn.00401285
mov dword [0x553318], esi
cmp dword [0x553324], esi
jne 0x44b324
mov eax, dword [ebx + 0xc4]
xor esi, esi
inc esi
push 0x510f7c
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x1c], eax
mov dword [ebx + 0xc0], esi
call fcn.004018fe
push 0
mov edi, 0x511a8c
lea eax, [ebp - 0x108]
push edi
push eax
mov dword [ebp - 4], 0x107
call fcn.004022da
push dword [ebp - 0x1c]
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.004022da
mov eax, dword [ebx + 0x350]
add esp, 0x18
inc eax
cmp dword [ebx + 0x338], esi
jne 0x44b105
test eax, eax
jne 0x44b105
push eax
push eax
push 0xffffffffffffffff
push dword [ebp - 0x28]
mov ecx, ebx
push dword [ebp - 0x10]
mov dword [ebx + 0x334], esi
call fcn.0043f34b
xor esi, esi
cmp esi, dword [ebp - 0x1c]
mov dword [ebp - 0x38], esi
jge 0x44b1fb
test esi, esi
jl 0x44b129
jne 0x44b173
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
jmp 0x44b173
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
cmp dword [ebx + 0x328], eax
lea eax, [esi + 1]
jge 0x44b189
mov ecx, dword [ebp - 0x1c]
cmp eax, ecx
jne 0x44b1f5
cmp dword [ebx + 0x334], 0
jne 0x44b1f5
cmp ecx, dword [ebx + 0xc4]
je 0x44b1f5
mov esi, eax
mov dword [ebp - 0x38], esi
push dword [ebp - 0x28]
mov ecx, ebx
push esi
push dword [ebp - 0x10]
call fcn.00440d34
inc dword [ebx + 0xbc]
jmp 0x44b129
push eax
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.004022da
push dword [ebp - 0x1c]
lea eax, [ebp - 0x108]
push edi
push eax
call fcn.004022da
lea eax, [esi + 1]
add esp, 0x18
cmp eax, dword [ebp - 0x1c]
je 0x44b1f5
xor edx, edx
inc edx
lea eax, [ebx + 0xbc]
mov dword [ebx + 0x334], edx
mov ecx, dword [eax]
cmp ecx, edx
jle 0x44b1ca
dec ecx
mov dword [eax], ecx
lea esi, [ebx + 0xc0]
inc dword [esi]
push dword [esi]
lea eax, [ebp - 0x108]
push str._Increase_Page_First_Time_::__d
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push dword [esi]
call fcn.00438790
mov esi, dword [ebp - 0x38]
inc esi
jmp 0x44b107
and dword [ebp - 0x330], 0
mov esi, vtable.CBrush.0
mov dword [0x553324], 1
mov dword [ebp - 0x334], esi
push 0xffffff
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 8
call fcn.004040d8
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x334]
push eax
lea eax, [ebx + 0x60]
push eax
call fcn.0043472d
push dword [ebp - 0x28]
mov ecx, ebx
push dword [ebp - 0x10]
call fcn.00440cbf
lea ecx, [ebp - 0x334]
mov byte [ebp - 4], 7
mov dword [ebp - 0x334], esi
call fcn.004023a8
mov ecx, dword [ebp - 0x108]
jmp 0x44b318
lea ecx, [ebp - 0x1c]
call fcn.0042a380
push dword [0x55331c]
mov esi, 0x511a8c
lea eax, [ebp - 0x1c]
push esi
push eax
mov dword [ebp - 4], 0x109
call fcn.004022da
mov edi, dword [ebp - 0x28]
push dword [edi + 0x14]
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.004022da
push dword [0x553318]
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.004022da
push dword [0x553310]
lea eax, [ebp - 0x1c]
push esi
push eax
call fcn.004022da
mov eax, dword [0x55331c]
add esp, 0x30
test eax, eax
je 0x44b2f1
mov ecx, dword [edi + 0x14]
cmp eax, ecx
jb 0x44b2f1
jbe 0x44b315
sub eax, ecx
cmp eax, 1
jbe 0x44b2e4
imul eax, dword [0x553310]
jmp 0x44b2e9
mov eax, dword [0x553310]
sub dword [0x553318], eax
jmp 0x44b315
mov ecx, dword [edi + 0x14]
sub ecx, eax
cmp ecx, 1
jbe 0x44b30a
imul ecx, dword [0x553310]
add dword [0x553318], ecx
jmp 0x44b315
mov eax, dword [0x553310]
add dword [0x553318], eax
mov ecx, dword [ebp - 0x1c]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
push 0x510f7c
lea ecx, [ebp - 0x128]
call fcn.004018fe
push dword [ebx + 0xc0]
lea eax, [ebp - 0x128]
push str.Page_Count::__d
push eax
mov dword [ebp - 4], 0x10a
call fcn.004022da
mov eax, dword [ebp - 0x28]
mov esi, dword [eax + 0x14]
mov eax, dword [0x553310]
add esp, 0xc
dec esi
neg esi
sbb esi, esi
and esi, dword [0x553318]
lea ecx, [esi + eax]
mov eax, dword [ebx + 0xc4]
cmp ecx, eax
mov dword [ebp - 0x18], ecx
jle 0x44b37e
mov dword [ebp - 0x18], eax
push esi
lea eax, [ebp - 0x128]
push str.Start_Row_::__d
push eax
mov dword [ebx + 0xbc], 1
call fcn.004022da
push dword [ebp - 0x18]
lea eax, [ebp - 0x128]
push str.End_Row_::__d
push eax
call fcn.004022da
lea edi, [ebx + 0x350]
push dword [edi]
lea eax, [ebp - 0x128]
push str.Skip_Row_::__d
push eax
call fcn.004022da
mov eax, dword [edi]
add esp, 0x24
inc eax
cmp dword [ebx + 0x338], 1
jne 0x44b3f7
cmp eax, esi
jne 0x44b3f7
push 0
push 0
dec eax
push eax
push dword [ebp - 0x28]
mov ecx, ebx
push dword [ebp - 0x10]
mov dword [ebx + 0x334], 1
call fcn.0043f34b
cmp esi, dword [ebp - 0x18]
mov edi, esi
jge 0x44b48d
test edi, edi
jl 0x44b42a
jne 0x44b416
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
push dword [ebp - 0x28]
mov ecx, ebx
push edi
push dword [ebp - 0x10]
call fcn.00440d34
inc dword [ebx + 0xbc]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
inc edi
cmp dword [ebx + 0x328], eax
jge 0x44b46e
cmp edi, dword [ebp - 0x18]
jne 0x44b46a
cmp dword [ebx + 0x334], 0
jne 0x44b467
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebx + 0xc4]
je 0x44b467
inc dword [ebp - 0x18]
jmp 0x44b402
cmp edi, dword [ebp - 0x18]
jl 0x44b402
jmp 0x44b48d
cmp edi, dword [ebp - 0x18]
je 0x44b48d
xor ecx, ecx
inc ecx
mov dword [ebx + 0x334], ecx
mov eax, dword [ebx + 0xbc]
cmp eax, ecx
jle 0x44b48d
dec eax
mov dword [ebx + 0xbc], eax
lea eax, [ebx + 0x334]
cmp dword [eax], 1
jne 0x44b4a4
mov ecx, dword [ebx + 0xbc]
mov dword [0x553310], ecx
cmp esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ecx + 0x14]
mov dword [0x55331c], ecx
jle 0x44b4c8
mov ebx, dword [ebx + 0xc0]
and dword [eax], 0
mov ecx, dword [ebp - 0x28]
dec ebx
push ebx
call fcn.00438790
mov ecx, dword [ebp - 0x128]
jmp 0x44f5e8
mov eax, dword [0x553224]
cmp eax, ecx
jne 0x44c106
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x40], 0xffffffff
xor esi, esi
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], esi
mov edi, 0x553674
jle 0x44b525
push esi
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
jne 0x44b51c
push esi
mov ecx, ebx
call fcn.00439404
add dword [ebp - 0x38], eax
inc esi
cmp esi, dword [ebx + 0xb8]
jl 0x44b504
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0xa4]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x1c4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x2c], esi
jle 0x44c0fb
push dword [ebp - 0x2c]
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
jne 0x44c0e9
mov eax, dword [ebx + 0x58]
fild dword [ebp - 0x38]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x40]
push dword [ebp - 0x40]
fstp qword [ebp - 0x5c]
mov ecx, ebx
mov dword [ebp - 0x80], eax
call fcn.00439404
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x80]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
and dword [ebp - 0x18], 0
mov esi, eax
mov eax, dword [ebp - 0x2c]
inc esi
inc eax
cmp eax, dword [ebx + 0xb8]
mov dword [ebp - 0x44], esi
jge 0x44b5de
mov dword [ebp - 0x14], eax
push dword [ebp - 0x14]
mov ecx, edi
call fcn.0041d2a4
cmp eax, 1
je 0x44b5d7
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebx + 0xb8]
jl 0x44b5b8
jmp 0x44b5de
mov dword [ebp - 0x18], 1
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x44b985
and dword [ebx + 0x328], eax
push dword [ebp - 0x40]
lea eax, [ebp - 0xcbc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x98]
jne 0x44b629
push dword [ebx + 0x48]
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
jmp 0x44b63c
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x1c0]
lea esi, [ebp - 0x1c4]
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44b979
or dword [ebp - 0x1c], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x14], esi
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x2cc]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x4e4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x30], esi
jle 0x44b93d
push dword [ebp - 0x30]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44b92b
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov ecx, ebx
mov dword [ebp - 0x3c], eax
call fcn.00439404
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x33c], esi
jne 0x44b799
push dword [ebp - 0x1c]
lea eax, [ebp - 0xa8c]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x48]
jne 0x44b742
push dword [ebx + 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
jmp 0x44b74f
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0x50]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x2c8]
lea esi, [ebp - 0x2cc]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x4e4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x44b8c6
jmp 0x44b81e
cmp dword [ebp - 0x20], esi
jne 0x44b849
push dword [ebp - 0x1c]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xbac]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
push dword [ebp - 0x4d8]
mov esi, eax
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44b7dd
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0x54]
jmp 0x44b7ed
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.00437fad
mov eax, dword [ebp - 0x2c8]
lea esi, [ebp - 0x2cc]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x4e4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x54]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
mov dword [ebp - 0x20], 1
jmp 0x44b8c6
push dword [ebp - 0x48]
cmp dword [ebp - 0x18], esi
jne 0x44b85c
push dword [ebx + 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x4c]
jmp 0x44b866
mov ecx, dword [ebp - 0x4c]
add eax, ecx
push eax
push dword [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x2cc]
call fcn.00437fad
push dword [ebp - 0x4d8]
lea ecx, [ebp - 0x4e4]
push dword [ebp - 0x2c4]
push dword [ebx + 0x330]
push dword [ebp - 0x2cc]
call fcn.00437fad
lea esi, [ebp - 0x4e4]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x4e4]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
push 0x510f7c
lea ecx, [ebp - 0x238]
call fcn.004018fe
lea esi, [ebx + 0x340]
push dword [esi]
mov edi, 0x511a8c
lea eax, [ebp - 0x238]
push edi
push eax
mov dword [ebp - 4], 0xe7
call fcn.004022da
mov esi, dword [esi]
add esp, 0xc
cmp esi, dword [ebp - 0x14]
jl 0x44b904
mov dword [ebp - 0x14], esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x238]
push edi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x238]
or dword [ebp - 4], 0xffffffff
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebx + 0xb8]
jl 0x44b6bf
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x340], eax
mov eax, dword [ebp - 0x1c0]
lea esi, [ebp - 0x1c4]
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xa4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x24], 1
jmp 0x44bd7a
cmp dword [ebp - 0x20], eax
jne 0x44bd14
push dword [ebp - 0x40]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xaac]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
jne 0x44b9cf
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0xa4]
jmp 0x44b9e2
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x1c4]
call fcn.00437fad
mov eax, dword [ebp - 0x1c0]
lea esi, [ebp - 0x1c4]
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
or dword [ebp - 0x1c], 0xffffffff
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
xor eax, eax
movsd dword es:[edi], dword [esi]
push eax
push eax
movsd dword es:[edi], dword [esi]
push eax
push eax
lea ecx, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x14], eax
call fcn.004116e6
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x2ec]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x4b4]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x30], esi
jle 0x44bcda
push dword [ebp - 0x30]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44bcc8
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
inc dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov ecx, ebx
mov dword [ebp - 0x80], eax
call fcn.00439404
mov dword [ebp - 0x3c], eax
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x80]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
xor ecx, ecx
mov dword [ebp - 0x44], eax
cmp dword [ebx + 0x33c], ecx
jne 0x44bb39
push dword [ebp - 0x1c]
lea eax, [ebp - 0xcac]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
mov esi, eax
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x60]
jne 0x44bae2
push dword [ebx + 0x48]
push dword [ebp - 0x68]
push dword [ebp - 0x6c]
jmp 0x44baef
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebp - 0x68]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00437fad
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x2e8]
lea esi, [ebp - 0x2ec]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x4b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x44bc65
jmp 0x44bbbd
cmp dword [ebp - 0x20], ecx
jne 0x44bbe8
push dword [ebp - 0x1c]
and dword [ebx + 0x328], ecx
lea eax, [ebp - 0xacc]
push eax
mov ecx, ebx
call fcn.004396d2
cmp dword [ebp - 0x18], 0
push dword [ebp - 0x4a8]
mov esi, eax
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44bb7c
push dword [ebx + 0x48]
push dword [ebx + 0x330]
push dword [ebp - 0x6c]
jmp 0x44bb8c
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x44]
add ecx, eax
push ecx
push dword [ebx + 0x330]
push eax
lea ecx, [ebp - 0x2ec]
call fcn.00437fad
mov eax, dword [ebp - 0x2e8]
lea esi, [ebp - 0x2ec]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0x6c]
lea edi, [ebp - 0x4b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x6c]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
mov dword [ebp - 0x20], 1
jmp 0x44bc65
push dword [ebp - 0x60]
cmp dword [ebp - 0x18], ecx
jne 0x44bbfb
push dword [ebx + 0x48]
push dword [ebp - 0x68]
push dword [ebp - 0x64]
jmp 0x44bc05
mov ecx, dword [ebp - 0x64]
add eax, ecx
push eax
push dword [ebp - 0x68]
push ecx
lea ecx, [ebp - 0x2ec]
call fcn.00437fad
push dword [ebp - 0x4a8]
lea ecx, [ebp - 0x4b4]
push dword [ebp - 0x2e4]
push dword [ebx + 0x330]
push dword [ebp - 0x2ec]
call fcn.00437fad
lea esi, [ebp - 0x4b4]
lea edi, [ebp - 0x6c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
lea esi, [ebp - 0x4b4]
push dword [ebp - 0x30]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043eae2
push 0x510f7c
lea ecx, [ebp - 0x1e8]
call fcn.004018fe
lea esi, [ebx + 0x340]
push dword [esi]
mov edi, 0x511a8c
lea eax, [ebp - 0x1e8]
push edi
push eax
mov dword [ebp - 4], 0xe8
call fcn.004022da
mov esi, dword [esi]
add esp, 0xc
cmp esi, dword [ebp - 0x14]
jl 0x44bca3
mov dword [ebp - 0x14], esi
push dword [ebp - 0x14]
lea eax, [ebp - 0x1e8]
push edi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x1e8]
or dword [ebp - 4], 0xffffffff
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00401285
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebx + 0xb8]
jl 0x44ba5d
mov eax, dword [ebp - 0x14]
mov dword [ebx + 0x340], eax
mov eax, dword [ebp - 0x1c0]
lea esi, [ebp - 0x1c4]
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xa4]
lea edi, [ebx + 0x318]
mov dword [ebp - 0x20], 1
jmp 0x44bd76
push dword [ebp - 0x98]
lea ecx, [ebp - 0x1c4]
cmp dword [ebp - 0x18], eax
jne 0x44bd36
push dword [ebx + 0x48]
push dword [ebp - 0xa0]
push dword [ebp - 0x9c]
jmp 0x44bd46
mov eax, dword [ebp - 0x9c]
add esi, eax
push esi
push dword [ebp - 0xa0]
push eax
call fcn.00437fad
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x1bc]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x1c4]
call fcn.00437fad
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
lea eax, [ebp - 0x6dc]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xe9
call fcn.00401c5e
mov ecx, dword [ebp - 0x6dc]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x198]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0x1a4]
push 0
push eax
mov dword [ebp - 4], 0xea
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0x1a4]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0x1a4], eax
lea eax, [ebp + 0x1c0]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x230]
call fcn.004018fe
and dword [ebp - 0x33c], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0x1a4]
push eax
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0xec
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x340]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x198]
call fcn.004018ec
lea eax, [ebp - 0x198]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x198]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0xa0]
push dword [ebp - 0x9c]
add eax, 0x14
push eax
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x7e4]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x7e4]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x7e4]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x428], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xed
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x7e4]
je 0x44bf3c
push 0xa
jmp 0x44bf3e
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x7e4]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0xa4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xa0]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x44c043
lea esi, [ebx + 0x2cc]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jle 0x44c043
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa4]
push edi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push esi
lea eax, [ebp - 0x6e4]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 0xee
call fcn.00401c5e
mov ecx, dword [ebp - 0x6e4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xed
call fcn.00401285
mov eax, dword [ebp - 0xa4]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x44c043
push dword [ebx + 0x78]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
lea eax, [ebp - 0x230]
push eax
mov eax, dword [ebp - 0xa4]
push dword [ebx + 0x32c]
add eax, 0x14
push eax
mov ecx, edi
call fcn.0043415f
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x44bfad
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x44c059
mov dword [eax], ecx
jmp 0x44c05f
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0xa4]
push dword [ebp - 0x9c]
push dword [ebx + 0x330]
push dword [ebp - 0xa4]
call fcn.00437fad
lea esi, [ebp - 0xa4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xec
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x340]
mov byte [ebp - 4], 0xeb
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x198]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov edi, 0x553674
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebx + 0xb8]
jl 0x44b557
lea esi, [ebp - 0xa4]
jmp 0x44c5c6
test eax, eax
jne 0x44c5f3
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x78]
mov eax, dword [ecx]
call dword [eax + 0x28]
or dword [ebp - 0x2c], 0xffffffff
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x150]
mov dword [ebx + 0x330], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], esi
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x1c], esi
jle 0x44c5c0
push dword [ebp - 0x1c]
mov ecx, 0x553674
call fcn.0041d2a4
cmp eax, 1
jne 0x44c5ae
inc dword [ebp - 0x2c]
push dword [ebp - 0x2c]
mov ecx, ebx
cmp dword [ebp - 0x24], esi
jne 0x44c1c0
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xbcc]
push eax
call fcn.004396d2
cmp dword [ebp - 0x14], 0
mov esi, eax
lea edi, [ebp - 0x150]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14c]
mov dword [ebx + 0x330], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0x150]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x24], 1
jne 0x44c239
lea esi, [ebp - 0x150]
jmp 0x44c213
lea eax, [ebp - 0xaec]
push eax
call fcn.004396d2
mov esi, eax
lea edi, [ebp - 0x150]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x148]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x150]
call fcn.00437fad
cmp dword [ebp - 0x14], 0
lea edi, [ebp - 0x150]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44c239
lea esi, [ebx + 0x318]
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x28]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x10]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043ed5b
mov dword [ebp - 0x14], 1
push dword [ebp - 0x1c]
lea eax, [ebp - 0x6ec]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov dword [ebp - 4], 0xef
call fcn.00401c5e
mov ecx, dword [ebp - 0x6ec]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x1a0]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0xb4]
push 0
push eax
mov dword [ebp - 4], pe_nt_image_headers32
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0xb4]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0xb4], eax
lea eax, [ebp + 0xd0]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x1f4]
call fcn.004018fe
and dword [ebp - 0x348], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0xb4]
push eax
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0xf2
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x34c]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x1a0]
call fcn.004018ec
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x1a0]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0x14c]
push dword [ebp - 0x148]
add eax, 0x14
push eax
push dword [ebp - 0x150]
lea ecx, [ebp - 0x804]
call fcn.004116e6
push 0x14
push 0x14
push 0xa
push 0xa
lea ecx, [ebp - 0x804]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
lea eax, [ebp - 0x804]
push eax
mov ecx, esi
call fcn.004386f8
mov eax, dword [esi]
mov edi, 0xd2d2d2
push edi
mov ecx, esi
call dword [eax + 0x2c]
and dword [ebp - 0x3c4], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push edi
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0xf3
call fcn.004040d8
mov eax, dword [ebp - 0x28]
cmp dword [eax + 8], 0
lea ecx, [ebp - 0x804]
je 0x44c3fb
push 0xa
jmp 0x44c3fd
push 5
pop eax
push eax
push eax
push eax
push eax
call fcn.00437fe5
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x804]
push eax
call fcn.0043472d
and dword [ebp - 0x3c], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0x150]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0x14c]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x44c50b
lea edi, [ebx + 0x2cc]
mov eax, dword [edi]
cmp dword [eax - 0xc], 0
jle 0x44c50b
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0x150]
push esi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x3c]
push eax
push edi
lea eax, [ebp - 0x6f4]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x1f4]
mov byte [ebp - 4], 0xf4
call fcn.00401c5e
mov ecx, dword [ebp - 0x6f4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xf3
call fcn.00401285
mov eax, dword [ebp - 0x150]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x44c50b
push dword [ebx + 0x78]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
mov eax, dword [ebx + 0x32c]
cmp eax, dword [ebx + 0x340]
jge 0x44c4fd
lea ecx, [ebp - 0x1f4]
push ecx
push eax
mov eax, dword [ebp - 0x150]
add eax, 0x14
push eax
mov ecx, esi
call fcn.0043415f
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [edi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x3c], eax
jl 0x44c46c
mov ecx, dword [ebx + 0x32c]
lea eax, [ebx + 0x328]
mov edx, dword [eax]
cmp ecx, edx
jl 0x44c521
mov dword [eax], ecx
jmp 0x44c527
mov dword [ebx + 0x32c], edx
push dword [ebx + 0x340]
lea ecx, [ebp - 0x150]
push dword [ebp - 0x148]
push dword [ebx + 0x330]
push dword [ebp - 0x150]
call fcn.00437fad
lea esi, [ebp - 0x150]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x3c8]
mov byte [ebp - 4], 0xf2
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
lea ecx, [ebp - 0x34c]
mov byte [ebp - 4], 0xf1
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x1f4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x1a0]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
xor esi, esi
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebx + 0xb8]
jl 0x44c149
lea esi, [ebp - 0x150]
lea eax, [ebx + 0x324]
mov ecx, dword [eax]
mov dword [ebx + 0x330], ecx
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x344], eax
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ecx]
push 0xffffff
call dword [eax + 0x2c]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov esi, dword [ebp - 0x28]
cmp dword [esi + 0x14], 1
jne 0x44c7f9
xor esi, esi
mov ecx, ebx
mov dword [0x553314], esi
call fcn.00439be7
mov dword [ebx + 0xbc], eax
mov dword [0x553310], eax
mov dword [0x553318], esi
cmp dword [0x553324], esi
jne 0x44c85f
mov edi, dword [ebx + 0xc4]
push 0x510f7c
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x14], edi
mov dword [ebx + 0xc0], 1
call fcn.004018fe
push esi
mov esi, 0x511a8c
lea eax, [ebp - 0x110]
push esi
push eax
mov dword [ebp - 4], 0xf5
call fcn.004022da
push edi
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.004022da
add esp, 0x18
xor edi, edi
cmp edi, dword [ebp - 0x14]
mov dword [ebp - 0x38], edi
jge 0x44c780
test edi, edi
jl 0x44c6a9
jne 0x44c6f3
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
jmp 0x44c6f3
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
cmp dword [ebx + 0x328], eax
lea eax, [edi + 1]
jge 0x44c709
mov ecx, dword [ebp - 0x14]
cmp eax, ecx
jne 0x44c77a
cmp dword [ebx + 0x334], 0
jne 0x44c77a
cmp ecx, dword [ebx + 0xc4]
je 0x44c77a
mov edi, eax
mov dword [ebp - 0x38], edi
push dword [ebp - 0x28]
mov ecx, ebx
push edi
push dword [ebp - 0x10]
call fcn.00443c78
inc dword [ebx + 0xbc]
jmp 0x44c6a9
push eax
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.004022da
push dword [ebp - 0x14]
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.004022da
lea eax, [edi + 1]
add esp, 0x18
cmp eax, dword [ebp - 0x14]
je 0x44c773
xor edx, edx
inc edx
lea eax, [ebx + 0xbc]
mov dword [ebx + 0x334], edx
mov ecx, dword [eax]
cmp ecx, edx
jle 0x44c74a
dec ecx
mov dword [eax], ecx
lea edi, [ebx + 0xc0]
inc dword [edi]
push dword [edi]
lea eax, [ebp - 0x110]
push esi
push eax
call fcn.004022da
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push dword [edi]
call fcn.00438790
mov edi, dword [ebp - 0x38]
jmp 0x44c77a
and dword [ebx + 0x334], 0
inc edi
jmp 0x44c687
and dword [ebp - 0x400], 0
mov edi, vtable.CBrush.0
mov dword [0x553324], 1
mov dword [ebp - 0x404], edi
push 0xffffff
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0xf6
call fcn.004040d8
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x404]
push eax
lea eax, [ebx + 0x60]
push eax
call fcn.0043472d
push dword [ebp - 0x28]
mov ecx, ebx
push dword [ebp - 0x10]
call fcn.00440cbf
lea ecx, [ebp - 0x404]
mov byte [ebp - 4], 0xf5
mov dword [ebp - 0x404], edi
call fcn.004023a8
mov ecx, dword [ebp - 0x110]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.00401285
jmp 0x44c864
lea ecx, [ebp - 0x24]
call fcn.0042a380
mov eax, dword [0x55331c]
test eax, eax
je 0x44c830
mov ecx, dword [esi + 0x14]
cmp eax, ecx
jb 0x44c830
jbe 0x44c854
sub eax, ecx
cmp eax, 1
jbe 0x44c823
imul eax, dword [0x553310]
jmp 0x44c828
mov eax, dword [0x553310]
sub dword [0x553318], eax
jmp 0x44c854
mov ecx, dword [esi + 0x14]
sub ecx, eax
cmp ecx, 1
jbe 0x44c849
imul ecx, dword [0x553310]
add dword [0x553318], ecx
jmp 0x44c854
mov eax, dword [0x553310]
add dword [0x553318], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00401285
mov esi, 0x511a8c
mov eax, dword [0x553318]
mov ecx, dword [0x553310]
add ecx, eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebx + 0xc4]
cmp ecx, eax
mov dword [ebp - 0x20], ecx
jle 0x44c884
mov dword [ebp - 0x20], eax
push 0x510f7c
lea ecx, [ebp - 0xf4]
mov dword [ebx + 0xbc], 1
call fcn.004018fe
mov edi, dword [ebp - 0x38]
push edi
lea eax, [ebp - 0xf4]
push esi
push eax
mov dword [ebp - 4], 0xf7
call fcn.004022da
push dword [ebp - 0x20]
lea eax, [ebp - 0xf4]
push esi
push eax
call fcn.004022da
mov eax, dword [ebp - 0x20]
add esp, 0x18
cmp edi, eax
jge 0x44c989
test edi, edi
jl 0x44c8fc
jne 0x44c8e8
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
push dword [ebp - 0x28]
mov ecx, ebx
push edi
push dword [ebp - 0x10]
call fcn.00443c78
inc dword [ebx + 0xbc]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
inc edi
cmp dword [ebx + 0x328], eax
jge 0x44c940
cmp edi, dword [ebp - 0x20]
jne 0x44c93c
cmp dword [ebx + 0x334], 0
jne 0x44c939
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebx + 0xc4]
je 0x44c939
inc dword [ebp - 0x20]
jmp 0x44c8d4
cmp edi, dword [ebp - 0x20]
jl 0x44c8d4
jmp 0x44c989
push edi
lea eax, [ebp - 0xf4]
push esi
push eax
call fcn.004022da
push dword [ebp - 0x20]
lea eax, [ebp - 0xf4]
push esi
push eax
call fcn.004022da
add esp, 0x18
cmp edi, dword [ebp - 0x20]
je 0x44c982
xor ecx, ecx
inc ecx
mov dword [ebx + 0x334], ecx
mov eax, dword [ebx + 0xbc]
cmp eax, ecx
jle 0x44c989
dec eax
mov dword [ebx + 0xbc], eax
jmp 0x44c989
and dword [ebx + 0x334], 0
lea eax, [ebx + 0x334]
cmp dword [eax], 1
jne 0x44c9a0
mov ecx, dword [ebx + 0xbc]
mov dword [0x553310], ecx
mov edi, dword [ebp - 0x28]
mov ecx, dword [edi + 0x14]
mov dword [0x55331c], ecx
mov ecx, dword [ebp - 0x20]
cmp dword [ebp - 0x38], ecx
jle 0x44c9d7
mov ebx, dword [ebx + 0xc0]
and dword [eax], 0
dec ebx
push ebx
lea eax, [ebp - 0xf4]
push esi
push eax
call fcn.004022da
add esp, 0xc
push ebx
mov ecx, edi
call fcn.00438790
mov ecx, dword [ebp - 0xf4]
jmp 0x44f5e8
lea esi, [ebx + 0x40]
lea edi, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0xfffffed4
push 0
movsd dword es:[edi], dword [esi]
push 0x514
push 0
lea ecx, [ebp - 0x54]
movsd dword es:[edi], dword [esi]
call fcn.00437fc7
mov ecx, dword [ebp - 0x10]
lea eax, [ebx + 0x348]
push eax
call fcn.004b6a25
push dword [ebp - 0x48]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
call fcn.004386dc
cmp dword [0x553214], 0
lea esi, [ebp - 0x54]
lea edi, [ebp - 0x454]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44cbb7
lea ecx, [ebp - 0x9cc]
call fcn.00438279
push dword [0x5536b8]
lea ecx, [ebp - 0x9cc]
mov dword [ebp - 4], 0xb2
call fcn.0043a087
and dword [ebp - 0x278], 0
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
mov edi, dword [ebp - 0x10]
push 8
mov ecx, edi
mov byte [ebp - 4], 0xb3
call fcn.004386cc
push 0xa
mov ecx, edi
call fcn.004386cc
lea ecx, [ebp - 0x9cc]
call fcn.004382b7
push eax
lea ecx, [ebp - 0x27c]
call fcn.004b68ea
lea eax, [ebp - 0x96c]
push eax
lea ecx, [ebp - 0x27c]
call fcn.00401d80
mov eax, dword [ebp - 0x968]
mov ecx, dword [ebp - 0x28]
mov esi, 0x190
push esi
push esi
push dword [ebp - 0x450]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x964]
push dword [ebp - 0x454]
add ecx, 0x24
mov dword [ebp - 0x24], eax
call fcn.00437fad
lea ecx, [ebp - 0x734]
call fcn.004b6089
push edi
lea ecx, [ebp - 0x734]
mov byte [ebp - 4], 0xb4
call fcn.004346f5
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x734]
call fcn.00434716
push dword [edi + 8]
mov dword [ebp - 0x80], eax
call dword [sym.imp.GDI32.dll_GetMapMode]
push eax
lea ecx, [ebp - 0x734]
call fcn.004b5e42
push 4
mov ecx, edi
call fcn.004b5ddd
push 0xc8
push 0x32
lea ecx, [ebp - 0x454]
call fcn.004346bf
push 0xcc0020
push dword [ebp - 0x24]
lea eax, [ebp - 0x734]
push dword [ebp - 0x3c]
mov ecx, edi
push 0
push 0
push eax
push esi
push esi
push dword [ebp - 0x450]
push dword [ebp - 0x454]
call fcn.00438713
push dword [ebp - 0x80]
lea ecx, [ebp - 0x734]
call fcn.00434716
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x734]
call fcn.004b6697
lea ecx, [ebp - 0x27c]
mov byte [ebp - 4], 0xb2
mov dword [ebp - method.CBitmap.virtual_0], vtable.CBitmap.0
call fcn.004023a8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9cc]
call fcn.004395e1
jmp 0x44cbc9
push 0
push 0x32
lea ecx, [ebp - 0x454]
call fcn.004346bf
mov edi, dword [ebp - 0x10]
push 0
push 0x2bc
push 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.Times_New_Roman
call fcn.004018fe
push edi
mov ecx, ebx
call fcn.0043aa50
mov ecx, 0x5536ac
mov dword [ebp - 0x2c], eax
call fcn.00401c14
mov ecx, eax
call fcn.00401b45
mov eax, dword [eax]
mov eax, dword [eax - 0xc]
test eax, eax
je 0x44cc58
lea esi, [ebp - 0x454]
lea edi, [ebp - 0x8f4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
push 0
lea ecx, [ebp - 0x8f4]
movsd dword es:[edi], dword [esi]
call fcn.004346bf
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x2c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
push 0x811
lea eax, [ebp - 0x8f4]
push eax
push 0x5536ac
mov ecx, esi
call fcn.00402075
push dword [ebp - 0x2c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
cmp dword [0x553210], 0
lea esi, [ebp - 0x454]
lea edi, [ebp - 0x7b4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jne 0x44ccc8
mov esi, dword [ebp - 0x10]
push dword [ebp - 0x2c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
xor edi, edi
push edi
push 0x1f4
push edi
push edi
lea ecx, [ebp - 0x7b4]
call fcn.00437fe5
push 0x258
push edi
lea ecx, [ebp - 0x7b4]
call fcn.004346bf
push 0x811
lea eax, [ebp - 0x7b4]
push eax
push 0x5536b0
mov ecx, esi
call fcn.00402075
push dword [ebp - 0x2c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
jmp 0x44ccda
push 0x258
push 0
lea ecx, [ebp - 0x7b4]
call fcn.004346bf
and dword [ebp - 0x21c], 0
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
push 0
lea ecx, [ebp - 0x220]
mov dword [ebp - 4], 0xb5
call fcn.004040d8
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x220]
push eax
call fcn.004b6a25
lea esi, [ebp - 0x454]
lea edi, [ebp - 0x754]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x24], eax
movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x84]
add eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x450]
sub eax, ecx
mov dword [ebp - 0x750], eax
push 0x44c
add eax, 0xa
push 0xffffffffffffffce
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x748], eax
call fcn.004346bf
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x754]
push eax
call fcn.0043472d
push dword [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
call fcn.004b6a25
lea esi, [ebp - 0x7b4]
lea edi, [ebp - 0x8a4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x12c
xor edi, edi
push edi
lea ecx, [ebp - 0x8a4]
call fcn.004346bf
push 0x51b120
lea ecx, [ebp - 0x360]
call fcn.004018fe
push 0xc8
push edi
lea ecx, [ebp - 0x754]
mov byte [ebp - 4], 0xb6
call fcn.004346bf
mov esi, dword [ebp - 0x10]
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x754]
push eax
mov ecx, esi
call fcn.0043472d
push dword [ebp - 0x24]
mov ecx, esi
call fcn.004b6a25
push dword [ebp - 0x2c]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
push 0x811
lea eax, [ebp - 0x8a4]
push eax
lea eax, [ebp - 0x360]
push eax
mov ecx, esi
call fcn.00402075
mov eax, dword [esi]
push dword [ebp - 0x2c]
mov ecx, esi
call dword [eax + 0x28]
push dword [ebx + 0x78]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x28]
xor esi, esi
cmp dword [ebx + 0xb8], edi
mov dword [ebp - 0x38], edi
jle 0x44ce38
push esi
mov ecx, ebx
call fcn.00439404
add dword [ebp - 0x38], eax
inc esi
cmp esi, dword [ebx + 0xb8]
jl 0x44ce24
xor esi, esi
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0xe4]
call fcn.004116e6
push esi
push esi
push esi
push esi
lea ecx, [ebp - 0x484]
call fcn.004116e6
cmp dword [ebx + 0xb8], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
jle 0x44d306
fild dword [ebp - 0x38]
fstp qword [ebp - 0x5c]
jmp 0x44ce74
xor esi, esi
mov eax, dword [ebx + 0x58]
sub eax, dword [ebx + 0x50]
push dword [ebp - 0x18]
mov ecx, ebx
mov dword [ebp - 0x3c], eax
call fcn.00439404
mov dword [ebp - 0x24], eax
fild dword [ebp - 0x24]
fdiv qword [ebp - 0x5c]
fmul qword [ebp - 0x5c]
fild dword [ebp - 0x3c]
fdiv qword [ebp - 0x5c]
fmulp st(1)
call fcn.004e54d0
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x18], esi
jne 0x44cf48
and dword [ebx + 0x328], 0
push 0
lea eax, [ebp - 0xc4c]
push eax
mov ecx, ebx
call fcn.004396d2
mov ecx, dword [ebp - 0x24]
mov esi, eax
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0xd8]
mov eax, dword [ebp - 0xe4]
add eax, ecx
push eax
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x484]
push dword [ebx + 0x40]
call fcn.00437fad
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x480]
lea esi, [ebp - 0x484]
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xe4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x33c], 1
jne 0x44d044
sub esp, 0x10
mov edi, esp
push dword [ebx + 0xb8]
push 0
jmp 0x44cfd5
cmp dword [ebp - 0x14], esi
jne 0x44cff5
push dword [ebp - 0x18]
and dword [ebx + 0x328], 0
lea eax, [ebp - 0xb0c]
push eax
mov ecx, ebx
call fcn.004396d2
mov ecx, dword [ebp - 0x24]
mov esi, eax
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x324]
mov eax, dword [ebp - 0xe4]
add eax, ecx
push eax
push dword [ebx + 0x330]
lea ecx, [ebp - 0x484]
push dword [ebx + 0x40]
call fcn.00437fad
mov eax, dword [ebp - 0x480]
lea esi, [ebp - 0x484]
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebx + 0x330], eax
lea esi, [ebp - 0xe4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
movsd dword es:[edi], dword [esi]
mov edi, esp
push dword [ebx + 0xb8]
push dword [ebp - 0x18]
push dword [ebp - 0x28]
lea esi, [ebp - 0xe4]
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, ebx
movsd dword es:[edi], dword [esi]
call fcn.0043f081
mov dword [ebp - 0x14], 1
jmp 0x44d044
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x484]
push dword [ebx + 0x48]
push dword [ebp - 0xe0]
push dword [ebp - 0xdc]
call fcn.00437fad
push dword [ebx + 0x324]
lea esi, [ebx + 0x318]
push dword [ebp - 0x47c]
mov ecx, esi
push dword [ebx + 0x330]
push dword [ebp - 0x484]
call fcn.00437fad
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0x18]
lea eax, [ebp - 0x6fc]
push eax
mov ecx, ebx
call fcn.0043ae18
lea esi, [ebx + 0x2cc]
push eax
mov ecx, esi
mov byte [ebp - 4], 0xb7
call fcn.00401c5e
mov ecx, dword [ebp - 0x6fc]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb6
call fcn.00401285
mov ecx, esi
call fcn.00401c70
mov edi, 0x51af78
push edi
lea ecx, [ebp - 0x1a8]
call fcn.004018fe
push 0x3c
lea eax, [ebp + 0x1e0]
push 0
push eax
mov byte [ebp - 4], 0xb8
call fcn.004e4cd0
push 0x3c
lea eax, [ebp + 0x1e0]
push 0
push eax
call fcn.004e4cd0
mov esi, dword [ebp - 0x10]
add esp, 0x18
push 0x48
push 0x5a
mov ecx, esi
call fcn.004386cc
push eax
push 0xc
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
mov dword [ebp + 0x1e0], eax
lea eax, [ebp + 0x1fc]
push str.Times_New_Roman
push eax
call fcn.004e71b0
pop ecx
pop ecx
push 0x510f7c
lea ecx, [ebp - 0x390]
call fcn.004018fe
and dword [ebp - 0x354], 0
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
lea eax, [ebp + 0x1e0]
push eax
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0xba
call fcn.00433d92
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x1c]
mov eax, dword [esi]
lea ecx, [ebp - 0x358]
push ecx
mov ecx, esi
call dword [eax + 0x28]
push edi
lea ecx, [ebp - 0x1a8]
call fcn.004018ec
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0xf0]
push eax
mov ecx, esi
call fcn.00435af5
lea eax, [ebx + 0x2cc]
push eax
lea ecx, [ebp - 0x1a8]
call fcn.00401c5e
push dword [ebx + 0x340]
mov eax, dword [ebp - 0xe0]
push dword [ebp - 0xdc]
add eax, 0x14
push eax
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x54]
call fcn.004116e6
push 0x14
push 0
push 0xa
push 0
lea ecx, [ebp - 0x54]
call fcn.00437fc7
lea eax, [ebx + 0x348]
push eax
mov ecx, esi
call fcn.004b6a25
and dword [ebp - 0x24], 0
lea esi, [ebx + 0x318]
lea edi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp - 0xe0]
add eax, 0x14
lea ecx, [ebx + 0x2cc]
mov dword [ebx + 0x32c], eax
call fcn.00401c70
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
je 0x44d26a
lea esi, [ebx + 0x2cc]
mov eax, dword [esi]
cmp dword [eax - 0xc], 0
jle 0x44d26a
mov edi, dword [ebp - 0x10]
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 0xe4]
push edi
add eax, 0xffffffb0
push eax
lea eax, [ebp - 0x24]
push eax
push esi
lea eax, [ebp - 0x704]
push eax
mov ecx, ebx
call fcn.0043ab75
push eax
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], 0xbb
call fcn.00401c5e
mov ecx, dword [ebp - 0x704]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xba
call fcn.00401285
mov eax, dword [ebp - 0xe4]
add eax, 0x14
cmp eax, dword [ebx + 0x48]
jge 0x44d26a
push dword [ebx + 0x78]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
mov eax, dword [ebp - 0xec]
add dword [ebx + 0x32c], eax
mov eax, dword [esi]
mov eax, dword [eax - 0xc]
cmp dword [ebp - 0x24], eax
jl 0x44d1f6
mov eax, dword [ebx + 0x32c]
mov ecx, dword [ebx + 0x328]
cmp eax, ecx
jl 0x44d282
mov dword [ebx + 0x328], eax
jmp 0x44d288
mov dword [ebx + 0x32c], ecx
push dword [ebx + 0x340]
lea ecx, [ebp - 0xe4]
push dword [ebp - 0xdc]
push dword [ebx + 0x330]
push dword [ebp - 0xe4]
call fcn.00437fad
lea esi, [ebp - 0xe4]
lea edi, [ebx + 0x318]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x358]
mov byte [ebp - 4], 0xb9
mov dword [ebp - method.CFont.virtual_0], vtable.CFont.0
call fcn.004023a8
mov ecx, dword [ebp - 0x390]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x1a8]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0xb6
call fcn.00401285
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebx + 0xb8]
jl 0x44ce72
lea eax, [ebx + 0x324]
mov ecx, dword [eax]
mov dword [ebx + 0x330], ecx
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov dword [ebx + 0x344], eax
lea edi, [ebx + 0x318]
lea esi, [ebp - 0xe4]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebp - 0x28]
cmp dword [eax + 0x14], 1
jne 0x44d34d
mov ecx, ebx
call fcn.00439be7
mov dword [ebx + 0xbc], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebx + 0xbc]
dec eax
imul eax, ecx
lea esi, [ecx + eax]
mov ecx, dword [ebx + 0xc4]
cmp esi, ecx
jle 0x44d36c
mov esi, ecx
or dword [ebx + 0x284], 0xffffffff
cmp eax, esi
mov dword [ebx + 0xbc], 1
mov edi, eax
jge 0x44d41a
test edi, edi
jl 0x44d3af
jne 0x44d39b
and dword [ebx + 0x33c], 0
and dword [ebx + 0x334], 0
push dword [ebp - 0x28]
mov ecx, ebx
push edi
push dword [ebp - 0x10]
call fcn.0044537c
inc dword [ebx + 0xbc]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
mov eax, dword [ebx + 0x4c]
sub eax, dword [ebx + 0x44]
add eax, 0xc8
cmp dword [ebx + 0x328], eax
jge 0x44d3d4
inc edi
cmp edi, esi
jl 0x44d387
jmp 0x44d41a
lea eax, [edi + 1]
cmp eax, esi
je 0x44d41a
xor ecx, ecx
inc ecx
mov dword [ebx + 0x334], ecx
mov eax, dword [ebx + 0xbc]
cmp eax, ecx
jle 0x44d3f5
dec eax
mov dword [ebx + 0xbc], eax
mov ecx, dword [ebx + 0xbc]
mov eax, dword [ebx + 0xc4]
lea eax, [eax + ecx - 1]
cdq
idiv ecx
mov ecx, dword [ebp - 0x28]
mov dword [ebx + 0xc0], eax
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x74]
mov word [ecx + 0x1e], ax
mov ecx, dword [ebp - 0x360]
add ecx, 0xfffffff0
call fcn.00401285
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x220]
mov dword [ebp - method.CBrush.virtual_0], vtable.CBrush.0
call fcn.004023a8
jmp 0x44f5f0
mov ecx, dword [ebp - 0x10]
lea esi, [ebx + 0x40]
lea edi, [ebp - 0x7c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebx + 0x348]
movsd dword es:[edi], dword [esi]
sub dword [ebp - 0x78], 0x514
sub dword [ebp - 0x70], 0x12c
push eax
call fcn.004b6a25
push dword [ebp - 0x70]
mov ecx, dword [ebp - 0x10]
push dword [ebp - 0x74]
push dword [ebp - 0x78]
push dword [ebp - 0x7c]
call fcn.004386dc
lea esi, [ebp - 0x7c]
lea edi, [ebp - 0x388]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
call fcn.0042a380
lea ecx, [ebp - 0x3c]
mov dword [ebp - 4], 0x51
call fcn.0042a380
lea ecx, [ebp - 0x80]
call fcn.0042a380
lea ecx, [ebp - 0x2c]
call fcn.0042a380
lea ecx, [ebp - 0x100]
call fcn.0042a380
lea ecx, [ebp - 0xe8]
call fcn.0042a380
lea ecx, [ebp - 0xf8]
call fcn.0042a380
lea ecx, [ebp - 0x114]
call fcn.0042a380
lea ecx, [ebp - 0x10c]
call fcn.0042a380
lea ecx, [ebp - 0x12c]
call fcn.0042a380
lea ecx, [ebp - 0x184]
call fcn.0042a380
lea ecx, [ebp - 0x104]
call fcn.0042a380
push 0x510f7c
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x5c
call fcn.004018ec
push eax
lea ecx, [ebp - 0x184]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0x12c]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0x10c]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0x114]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0xf8]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0xe8]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0x100]
call fcn.00401c5e
push eax
lea ecx, [ebp - 0x2c]
call fcn.00401c5e
push 0x1a8
call fcn.004ae134
pop ecx
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 0x5d
test eax, eax
je 0x44d5a1
push 0
mov ecx, eax
call fcn.0042a942
mov esi, eax
jmp 0x44d5a3
xor esi, esi
mov ecx, esi
mov byte [ebp - 4], 0x5c
call fcn.004bc813
test eax, eax
jne 0x44d5bf
mov eax, dword [esi]
push 0
push 0
push 0xffffffffffffffff
mov ecx, esi
call dword [eax + 0xc]
mov eax, dword [esi + 0xc8]
mov edi, 0x810
test eax, eax
jne 0x44e526
cmp dword [0x553274], 1
jne 0x44dd64
push dword [0x5536f0]
lea ecx, [ebp - 0x61c]
call fcn.0040719a
or dword [ebp - 0x20], 4
push eax
lea eax, [esi + 0x120]
push eax
mov byte [ebp - 4], 0x5e
call fcn.00406b7c
pop ecx
pop ecx
test al, al
je 0x44d666
push dword [0x5536f4]
lea ecx, [ebp - 0x4f0]
call fcn.0040719a
or dword [ebp - 0x20], 8
push eax
lea eax, [esi + 0x134]
push eax
mov dword [ebp - 4], 0x5f
call fcn.00406b7c
pop ecx
pop ecx
test al, al
je 0x44d666
push dword [0x5536f8]
lea ecx, [ebp - 0x590]
call fcn.0040719a
or dword [ebp - 0x20], 0x10
push eax
lea eax, [esi + 0x138]
push eax
call fcn.00406b7c
pop ecx
pop ecx
mov byte [ebp - 0x31], 1
test al, al
jne 0x44d66a
mov byte [ebp - 0x31], 0
test byte [ebp - 0x20], 0x10
je 0x44d682
mov ecx, dword [ebp - 0x590]
and dword [ebp - 0x20], 0xffffffef
add ecx, 0xfffffff0
call fcn.00401285
test byte [ebp - 0x20], 8
je 0x44d69a
mov ecx, dword [ebp - 0x4f0]
and dword [ebp - 0x20], 0xfffffff7
add ecx, 0xfffffff0
call fcn.00401285
test byte [ebp - 0x20], 4
mov dword [ebp - 4], 0x5c
je 0x44d6b9
mov ecx, dword [ebp - 0x61c]
and dword [ebp - 0x20], 0xfffffffb
add ecx, 0xfffffff0
call fcn.00401285
cmp byte [ebp - 0x31], 0
je 0x44de57
push dword [esi + 0x144]
lea ecx, [ebp - 0x62c]
call fcn.00403636
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x60
call fcn.00401c5e
mov ecx, dword [ebp - 0x62c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x120]
lea ecx, [ebp - 0x508]
call fcn.00403636
push eax
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x61
call fcn.00401c5e
mov ecx, dword [ebp - 0x508]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x124]
lea ecx, [ebp - 0x634]
call fcn.00403636
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x62
call fcn.00401c5e
mov ecx, dword [ebp - 0x634]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x188]
lea ecx, [ebp - 0x510]
call fcn.00403636
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x63
call fcn.00401c5e
mov ecx, dword [ebp - 0x510]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x128]
lea ecx, [ebp - 0x63c]
call fcn.00403636
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x64
call fcn.00401c5e
mov ecx, dword [ebp - 0x63c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x12c]
lea ecx, [ebp - 0x520]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x644]
push 0x553720
push eax
mov byte [ebp - 4], 0x65
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x66
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.004022ed
add esp, 0x18
mov byte [ebp - 4], 0x67
push eax
lea ecx, [ebp - 0x10c]
call fcn.00401c5e
mov ecx, dword [ebp - 0x518]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x644]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x520]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x140]
lea ecx, [ebp - 0x64c]
call fcn.00403636
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x68
call fcn.00401c5e
mov ecx, dword [ebp - 0x64c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x134]
lea ecx, [ebp - 0x528]
call fcn.00403636
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x69
call fcn.00401c5e
mov ecx, dword [ebp - 0x528]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x13c]
lea ecx, [ebp - 0x654]
call fcn.00403636
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x6a
call fcn.00401c5e
mov ecx, dword [ebp - 0x654]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x1a0]
lea ecx, [ebp - 0x538]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x65c]
push 0x553720
push eax
mov byte [ebp - 4], 0x6b
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x6c
push eax
lea eax, [ebp - 0x530]
push eax
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x6d
call fcn.00401c5e
mov ecx, dword [ebp - 0x530]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x65c]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x538]
mov byte [ebp - 4], 0x5c
add ecx, 0xfffffff0
call fcn.00401285
push dword [esi + 0x1a4]
lea ecx, [ebp - 0x4e8]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x540]
push 0x553720
push eax
mov byte [ebp - 4], 0x6e
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x6f
push eax
lea eax, [ebp - 0x664]
push eax
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x70
call fcn.00401c5e
mov ecx, dword [ebp - 0x664]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x540]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x4e8]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x190]
lea ecx, [ebp - 0x550]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x674]
push 0x553720
push eax
mov byte [ebp - 4], 0x71
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x72
push eax
lea eax, [ebp - 0x548]
push eax
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x73
call fcn.00401c5e
mov ecx, dword [ebp - 0x548]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x674]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x550]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0x2ee
push 0x28
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
push str.Payslip_No.__:
lea ecx, [ebp - 0x394]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x394]
push eax
mov byte [ebp - 4], 0x74
call fcn.00402075
mov ecx, dword [ebp - 0x394]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Employee_ID__:
lea ecx, [ebp - 0x368]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x368]
push eax
mov byte [ebp - 4], 0x75
call fcn.00402075
mov ecx, dword [ebp - 0x368]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Employee_Name__:
lea ecx, [ebp - 0x39c]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x39c]
push eax
mov byte [ebp - 4], 0x76
call fcn.00402075
mov ecx, dword [ebp - 0x39c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Designation__:
lea ecx, [ebp - 0x370]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x370]
push eax
mov byte [ebp - 4], 0x77
call fcn.00402075
mov ecx, dword [ebp - 0x370]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Department__:
lea ecx, [ebp - 0x3a4]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3a4]
push eax
mov byte [ebp - 4], 0x78
call fcn.00402075
mov ecx, dword [ebp - 0x3a4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Basic_Salary__Per_Month___:
lea ecx, [ebp - 0x378]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x378]
push eax
mov byte [ebp - 4], 0x79
call fcn.00402075
mov ecx, dword [ebp - 0x378]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Paid_Days__:
lea ecx, [ebp - 0x3ac]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3ac]
push eax
mov byte [ebp - 4], 0x7a
call fcn.00402075
mov ecx, dword [ebp - 0x3ac]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
jmp 0x44e506
cmp dword [0x55326c], 1
jne 0x44de57
push dword [0x5536a0]
lea ecx, [ebp - 0x500]
call fcn.0040719a
or dword [ebp - 0x20], 0x20
push eax
lea eax, [esi + 0x120]
push eax
mov byte [ebp - 4], 0x7b
call fcn.00406b7c
pop ecx
pop ecx
test al, al
je 0x44ddfb
push dword [0x5536a4]
lea ecx, [ebp - 0x624]
call fcn.0040719a
or dword [ebp - 0x20], 0x40
push eax
lea eax, [esi + 0x134]
push eax
mov dword [ebp - 4], 0x7c
call fcn.00406b7c
pop ecx
pop ecx
test al, al
je 0x44ddfb
push dword [0x5536a8]
lea ecx, [ebp - 0x4f8]
call fcn.0040719a
or dword [ebp - 0x20], 0x80
push eax
lea eax, [esi + 0x138]
push eax
call fcn.00406b7c
pop ecx
pop ecx
mov byte [ebp - 0x31], 1
test al, al
jne 0x44ddff
mov byte [ebp - 0x31], 0
test byte [ebp - 0x20], 0x80
je 0x44de1a
mov ecx, dword [ebp - 0x4f8]
and dword [ebp - 0x20], 0xffffff7f
add ecx, 0xfffffff0
call fcn.00401285
test byte [ebp - 0x20], 0x40
je 0x44de32
mov ecx, dword [ebp - 0x624]
and dword [ebp - 0x20], 0xffffffbf
add ecx, 0xfffffff0
call fcn.00401285
test byte [ebp - 0x20], 0x20
mov dword [ebp - 4], 0x5c
je 0x44de51
mov ecx, dword [ebp - 0x500]
and dword [ebp - 0x20], 0xffffffdf
add ecx, 0xfffffff0
call fcn.00401285
cmp byte [ebp - 0x31], 0
jne 0x44de74
mov eax, dword [esi]
push 1
push 1
mov ecx, esi
call dword [eax + 0x14]
cmp dword [esi + 0xc8], 0
je 0x44d5d2
jmp 0x44e526
push dword [esi + 0x144]
lea ecx, [ebp - 0x67c]
call fcn.00403636
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x7d
call fcn.00401c5e
mov ecx, dword [ebp - 0x67c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x120]
lea ecx, [ebp - 0x558]
call fcn.00403636
push eax
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x7e
call fcn.00401c5e
mov ecx, dword [ebp - 0x558]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x124]
lea ecx, [ebp - 0x684]
call fcn.00403636
push eax
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x7f
call fcn.00401c5e
mov ecx, dword [ebp - 0x684]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x188]
lea ecx, [ebp - 0x560]
call fcn.00403636
push eax
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x80
call fcn.00401c5e
mov ecx, dword [ebp - 0x560]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x128]
lea ecx, [ebp - 0x68c]
call fcn.00403636
push eax
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 0x81
call fcn.00401c5e
mov ecx, dword [ebp - 0x68c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x12c]
lea ecx, [ebp - 0x570]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x694]
push 0x553720
push eax
mov byte [ebp - 4], 0x82
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x83
push eax
lea eax, [ebp - 0x568]
push eax
call fcn.004022ed
add esp, 0x18
mov byte [ebp - 4], 0x84
push eax
lea ecx, [ebp - 0x10c]
call fcn.00401c5e
mov ecx, dword [ebp - 0x568]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x694]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x570]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x140]
lea ecx, [ebp - 0x69c]
call fcn.00403636
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0x85
call fcn.00401c5e
mov ecx, dword [ebp - 0x69c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x134]
lea ecx, [ebp - 0x578]
call fcn.00403636
push eax
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0x86
call fcn.00401c5e
mov ecx, dword [ebp - 0x578]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x13c]
lea ecx, [ebp - 0x6a4]
call fcn.00403636
push eax
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 0x87
call fcn.00401c5e
mov ecx, dword [ebp - 0x6a4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x1a0]
lea ecx, [ebp - 0x588]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x6ac]
push 0x553720
push eax
mov byte [ebp - 4], 0x88
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x89
push eax
lea eax, [ebp - 0x580]
push eax
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 0x8a
call fcn.00401c5e
mov ecx, dword [ebp - 0x580]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6ac]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x588]
mov byte [ebp - 4], 0x5c
add ecx, 0xfffffff0
call fcn.00401285
push dword [esi + 0x1a4]
lea ecx, [ebp - 0x6a8]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x6bc]
push 0x553720
push eax
mov byte [ebp - 4], 0x8b
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x8c
push eax
lea eax, [ebp - 0x6b4]
push eax
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x8d
call fcn.00401c5e
mov ecx, dword [ebp - 0x6b4]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6bc]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x6a8]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push dword [esi + 0x190]
lea ecx, [ebp - 0x5a0]
call fcn.00403636
mov dword [ebp - 0x38], eax
push 0x5119e8
lea eax, [ebp - 0x650]
push 0x553720
push eax
mov byte [ebp - 4], 0x8e
call fcn.00402344
push dword [ebp - 0x38]
mov byte [ebp - 4], 0x8f
push eax
lea eax, [ebp - 0x598]
push eax
call fcn.004022ed
add esp, 0x18
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x90
call fcn.00401c5e
mov ecx, dword [ebp - 0x598]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x650]
add ecx, 0xfffffff0
call fcn.00401285
mov ecx, dword [ebp - 0x5a0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0x2ee
push 0x28
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push dword [ebx + 0x7c]
mov eax, dword [ecx]
call dword [eax + 0x28]
push str.Payslip_No.__:
lea ecx, [ebp - 0x38c]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x38c]
push eax
mov byte [ebp - 4], 0x91
call fcn.00402075
mov ecx, dword [ebp - 0x38c]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Employee_ID__:
lea ecx, [ebp - 0x3b4]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3b4]
push eax
mov byte [ebp - 4], 0x92
call fcn.00402075
mov ecx, dword [ebp - 0x3b4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Employee_Name__:
lea ecx, [ebp - 0x3c0]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3c0]
push eax
mov byte [ebp - 4], 0x93
call fcn.00402075
mov ecx, dword [ebp - 0x3c0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xe8]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Designation__:
lea ecx, [ebp - 0x398]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x398]
push eax
mov byte [ebp - 4], 0x94
call fcn.00402075
mov ecx, dword [ebp - 0x398]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
push str.Department__:
lea ecx, [ebp - 0x310]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x310]
push eax
mov byte [ebp - 4], 0x95
call fcn.00402075
mov ecx, dword [ebp - 0x310]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea ecx, [ebp - 0x7c]
call fcn.004346bf
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x114]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea ecx, [ebp - 0x7c]
call fcn.004346bf
push str.Basic_Salary__Per_Month___:
lea ecx, [ebp - 0x3a0]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3a0]
push eax
mov byte [ebp - 4], 0x96
call fcn.00402075
mov ecx, dword [ebp - 0x3a0]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea ecx, [ebp - 0x7c]
call fcn.004346bf
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00402075
push 0x78
push 0xfffffb50
lea ecx, [ebp - 0x7c]
call fcn.004346bf
push str.Paid_Days__:
lea ecx, [ebp - 0x3e4]
call fcn.004018fe
mov ecx, dword [ebp - 0x10]
push edi
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x3e4]
push eax
mov byte [ebp - 4], 0x97
call fcn.00402075
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xfffffff0
mov byte [ebp - 4], 0x5c
call fcn.00401285
push 0
push 0x4b0
lea ecx, [ebp - 0x7c]
call fcn.004346bf
push edi
mov edi, dword [ebp - 0x10]
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x104]
push eax
mov ecx, edi
call fcn.00402075
push dword [ebx + 0x7c]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x28]
mov ecx, esi
call fcn.004bc813
test eax, eax
je 0x44e538
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x10]
mov eax, dword [esi]
push 1
mov ecx, esi
call dword [eax + 4]
cmp dword [0x553214], 0
mov esi, 0x190
jne 0x44e6bf
lea ecx, [ebp - 0x9fc]
call fcn.00438279
push dword [0x5536b8]
lea ecx, [ebp - 0x9fc]
call fcn.0043a087
and dword [ebp - 0x260], 0
mov edi, vtable.CBitmap.0
mov dword [ebp - 0x264], edi
mov ecx, dword [ebp - 0x10]
push 8
mov byte [ebp - 4], 0x99
call fcn.004386cc
mov ecx, dword [ebp - 0x10]
push 0xa
call fcn.004386cc
lea ecx, [ebp - 0x9fc]
call fcn.004382b7
push eax
lea ecx, [ebp - 0x264]
call fcn.004b68ea
lea eax, [ebp - 0x93c]
push eax
lea ecx, [ebp - 0x264]
call fcn.00401d80
mov eax, dword [ebp - 0x938]
mov ecx, dword [ebp - 0x28]
push esi
push esi
push dword [ebp - 0x384]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x934]
push dword [ebp - 0x388]
add ecx, 0x24
mov dword [ebp - 0x38], eax
call fcn.00437fad
lea ecx, [ebp - 0x774]
call fcn.004b6089
push dword [ebp - 0x10]
lea ecx, [ebp - 0x774]
mov byte [ebp - 4], 0x9a
call fcn.004346f5
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x774]
call fcn.00434716
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
push dword [eax + 8]
call dword [sym.imp.GDI32.dll_GetMapMode]
push eax
lea ecx, [ebp - 0x774]
call fcn.004b5e42
mov ecx, dword [ebp - 0x10]
push 4
call fcn.004b5ddd
push 0x28
push 0x28
lea ecx, [ebp - 0x388]
call fcn.004346bf
mov ecx, dword [ebp - 0x10]
push 0xcc0020
push dword [ebp - 0x38]
lea eax, [ebp - 0x774]
push dword [ebp - 0x14]
push 0
push 0
push eax
push esi
push esi
push dword [ebp - 0x384]
push dword [ebp - 0x388]
call fcn.00438713
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x774]
call fcn.00434716
lea ecx, [ebp - 0x774]
mov byte [ebp - 4], 0x99
call fcn.004b6697
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x98
mov dword [ebp - 0x264], edi
call fcn.004023a8
lea ecx, [ebp - 0x9fc]
mov byte [ebp - 4], 0x5c
call fcn.004395e1
jmp 0x44e6ce
push 0
push 0x28
lea ecx, [ebp - 0x388]
call fcn.004346bf
push 0x3c
push 0x3c
lea ecx, [ebp - 0x388]
call fcn.004346bf
push 0
push 0x2bc
push 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push str.Times_New_Roman
call fcn.004018fe
push dword [ebp - 0x10]
mov ecx, ebx
invalid
push eax