Function at 0x420960
Capabilities:
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a16d0
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x4b2a8c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
cmp byte [0x4b800e], 0
je 0x4209a3
call fcn.0040c4a0
mov byte [0x4b800e], 0
cmp byte [0x2610d68], 0
jne 0x4209c1
mov byte [0x26112d1], 0
mov byte [0x26112d0], 0
mov byte [0x26112bb], 0
mov edi, dword [ebp + 8]
cmp edi, 0x77
ja case.0x4209d4.1
movzx eax, byte [edi + 0x422ac8]
jmp dword [eax*4 + 0x422a2c]
mov dword [ebp - 4], 0
mov ecx, dword [0x26112ac]
movzx edx, word [0x4b8be8]
and ecx, 0xff
push 1
or ecx, 0x200
push ecx
push edx
call fcn.0040b960
add esp, 0xc
push str.error:_division_by_zero_n
call fcn.00483d66
add eax, 0x40
push eax
call fcn.00485ba5
add esp, 8
jmp case.0x4209d4.1
call fcn.00483d66
add eax, 0x40
push eax
call fcn.00485ba5
add esp, 8
call fcn.00402430
push 1
call fcn.004898c9
mov dword [ebp - 4], 2
mov eax, dword [0x26112ac]
movzx ecx, word [0x4b8be8]
and eax, 0xff
push 1
or eax, 0x200
push eax
push ecx
call fcn.0040b960
add esp, 0xc
push str.error:_overflow_n
jmp 0x420a0c
cmp byte [0x26112d6], 0
jne 0x420ac4
mov dword [ebp - 4], 4
mov edx, dword [0x26112ac]
movzx eax, word [0x4b8be8]
and edx, 0xff
push 1
or edx, 0x200
push edx
push eax
call fcn.0040b960
add esp, 0xc
push str.error:_illegal_instruction_n
jmp 0x420a0c
mov ecx, dword [0x25f2478]
mov dword [0x260ddb0], ecx
jmp case.0x4209d4.1
cmp byte [0x26112d2], 0
je case.0x4209d4.8
push 1
mov esi, 0x1b
call fcn.004314d0
mov byte [0x26112d2], 0
lea ecx, [edi - 8]
mov dl, 1
shl dl, cl
not dl
and byte [0x25f2485], dl
jmp 0x4229f6
cmp byte [0x26112b2], 0
jne 0x420b21
mov eax, dword [0x4b8bdc]
push eax
mov eax, dword [0x4b802c]
call fcn.00404a90
add esp, 4
movzx eax, byte [0x260dd81]
mov ecx, 0xfffe
and word [0x260ddac], cx
cmp eax, 0xfe
jg 0x420d28
je 0x420d1e
cmp eax, 0xfa
ja case.0x420b57.4
movzx edx, byte [eax + 0x422bbc]
jmp dword [edx*4 + 0x422b40]
call fcn.0040c500
jmp case.0x4209d4.1
call fcn.0040c650
jmp case.0x4209d4.1
call fcn.0040c6b0
jmp case.0x4209d4.1
call fcn.0040c7b0
jmp case.0x4209d4.1
call fcn.0040c800
jmp case.0x4209d4.1
call fcn.0040ca60
jmp case.0x4209d4.1
call fcn.0040ccf0
jmp case.0x4209d4.1
call fcn.0040cfb0
jmp case.0x4209d4.1
call fcn.0040d080
jmp case.0x4209d4.1
call fcn.0040d190
jmp case.0x4209d4.1
call fcn.0040d280
jmp case.0x4209d4.1
call fcn.0040d350
jmp case.0x4209d4.1
call fcn.0040d3e0
jmp case.0x4209d4.1
mov al, byte [0x4b9449]
mov cl, byte [0x4b944a]
mov dl, byte [0x4b9462]
mov byte [0x260dd80], al
mov byte [0x260dd81], cl
mov byte [0x260dd8d], dl
jmp case.0x4209d4.1
call fcn.0040d5a0
jmp case.0x4209d4.1
cmp byte [0x260dd8c], 0x10
jne case.0x4209d4.1
mov eax, 3
mov ecx, 9
mov word [0x260dd8c], ax
mov word [0x260dd84], cx
jmp case.0x4209d4.1
call fcn.0040d8d0
jmp case.0x4209d4.1
mov eax, 1
cmp byte [0x260dd80], al
ja 0x421c4a
mov byte [0x260dd80], 0
jmp case.0x4209d4.1
cmp byte [0x260dd80], 0
je 0x420c77
or word [0x260ddac], 1
jmp case.0x4209d4.1
mov byte [0x260dd80], 0x1a
mov byte [0x260dd8c], 8
mov byte [0x260dd8d], 0
jmp case.0x4209d4.1
call fcn.0040ddf0
jmp case.0x4209d4.1
movzx eax, byte [0x260dd80]
sub eax, 0
je case.0x420b57.128
sub eax, 1
je case.0x4209d4.1
sub eax, 1
je 0x420cc6
or word [0x260ddac], 1
jmp case.0x4209d4.1
xor edx, edx
mov word [0x260dd8c], dx
jmp case.0x4209d4.1
call fcn.0040de50
jmp case.0x4209d4.1
call fcn.0040de80
jmp case.0x4209d4.1
call fcn.0040deb0
jmp case.0x4209d4.1
mov al, byte [0x4b9449]
mov byte [0x260dd80], al
jmp case.0x4209d4.1
mov byte [0x260dd80], 4
jmp case.0x4209d4.1
mov ecx, 0xffff
mov word [0x260dd88], cx
jmp case.0x4209d4.1
call fcn.0040def0
jmp case.0x4209d4.1
cmp eax, 0xff
je 0x420d3c
or word [0x260ddac], 1
jmp case.0x4209d4.1
call fcn.0040df30
jmp case.0x4209d4.1
call fcn.004208e0
mov word [0x260dd80], ax
jmp case.0x4209d4.1
mov dx, word [0x4b9413]
mov word [0x260dd80], dx
jmp case.0x4209d4.1
mov eax, dword [0x260dd80]
shr eax, 8
movzx eax, al
cmp eax, 0xa1
ja case.0x420d86.14
movzx ecx, byte [eax + 0x422cec]
jmp dword [ecx*4 + 0x422cb8]
call fcn.0040e0f0
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
mov dl, byte [0x261147a]
mov cl, dl
mov byte [0x260dd81], dl
mov byte [0x261147a], cl
jmp case.0x4209d4.1
call fcn.0040e150
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
call fcn.0040e300
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
call fcn.0040e4e0
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
call fcn.0040e720
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
call fcn.0040e8d0
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
call fcn.0040e930
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
mov eax, 0x55aa
cmp word [0x260dd8c], ax
mov eax, 1
or word [0x260ddac], ax
mov cl, al
mov byte [0x260dd81], al
mov byte [0x261147a], cl
jmp case.0x4209d4.1
or word [0x260ddac], 1
mov byte [0x260dd81], 0xc
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
mov byte [0x260dd81], 0
mov cl, byte [0x260dd81]
mov byte [0x261147a], cl
jmp case.0x4209d4.1
movzx eax, byte [0x260dd81]
cmp eax, 5
ja case.0x4209d4.1
jmp dword [eax*4 + 0x422d90]
call fcn.0040e980
jmp case.0x4209d4.1
call fcn.0040ea60
jmp case.0x4209d4.1
call fcn.0040eaf0
jmp case.0x4209d4.1
call fcn.0040eb80
jmp case.0x4209d4.1
call fcn.0040ebc0
jmp case.0x4209d4.1
call fcn.0040ed10
jmp case.0x4209d4.1
movzx eax, byte [0x260dd81]
mov edx, 0xfffe
and word [0x260ddac], dx
add eax, 0xffffffdd
cmp eax, 0xc5
ja case.0x420f1d.37
movzx eax, byte [eax + 0x422df8]
jmp dword [eax*4 + 0x422da8]
call fcn.0040ed90
jmp case.0x4209d4.1
call fcn.0040edf0
jmp case.0x4209d4.1
mov byte [0x260dd81], 0
mov byte [0x260dd8c], 0
jmp case.0x4209d4.1
call fcn.0040ee80
jmp case.0x4209d4.1
call fcn.0040ef70
jmp case.0x4209d4.1
call fcn.0040f050
jmp case.0x4209d4.1
call fcn.0040f0d0
jmp case.0x4209d4.1
cmp byte [0x26112f0], 0
je 0x420f8a
xor ecx, ecx
mov word [0x260dd80], cx
jmp case.0x4209d4.1
mov edx, 0x7c00
mov word [0x260dd80], dx
jmp case.0x4209d4.1
call fcn.0040f160
jmp case.0x4209d4.1
xor eax, eax
mov ecx, 0x1f0
mov word [0x260dd80], ax
mov word [0x260dd88], cx
jmp case.0x4209d4.1
mov byte [0x260dd81], 0
jmp case.0x4209d4.1
push 0xd
push 0x260de28
push 0x260dda0
push 0
mov ecx, 0x40
call fcn.00433fc0
mov edx, 0xac
mov word [0x260dd8c], dx
jmp case.0x4209d4.1
call fcn.0040f590
jmp case.0x4209d4.1
mov al, byte [0x24c21f0]
mov cl, byte [0x4b8014]
mov byte [0x260dd81], 0
mov byte [0x260dd85], al
mov byte [0x260dd84], cl
jmp case.0x4209d4.1
call fcn.0040f8a0
jmp case.0x4209d4.1
call fcn.0040f960
jmp case.0x4209d4.1
mov byte [0x260dd81], 0x86
or word [0x260ddac], 1
jmp case.0x4209d4.1
movzx eax, byte [0x260dd81]
mov edx, 0xfffe
and word [0x260ddac], dx
cmp eax, 0x6f
ja case.0x4209d4.1
movzx eax, byte [eax + 0x422efc]
jmp dword [eax*4 + 0x422ec0]
call fcn.0040fdb0
jmp case.0x4209d4.1
call fcn.0040fe30
jmp case.0x4209d4.1
call fcn.0040fec0
jmp case.0x4209d4.1
call fcn.0040ff50
jmp case.0x4209d4.1
call fcn.0040ff90
jmp case.0x4209d4.1
mov byte [0x260dd80], 0x3c
jmp case.0x4209d4.1
mov ecx, 0x83ab
mov word [0x260dd8c], cx
jmp case.0x4209d4.1
call fcn.0040ffe0
jmp case.0x4209d4.1
call fcn.00410050
jmp case.0x4209d4.1
call fcn.004100e0
jmp case.0x4209d4.1
mov al, byte [0x260dd80]
cmp al, 1
jbe 0x421100
cmp al, 2
jne case.0x420b57.128
mov dl, byte [0x261145a]
mov byte [0x260dd80], dl
jmp case.0x4209d4.1
mov byte [0x261145a], al
jmp case.0x4209d4.1
call fcn.0040fec0
push 0x15
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
shr eax, 0xe
and al, 2
mov byte [0x260dd81], al
jmp case.0x4209d4.1
movzx eax, byte [0x260dd80]
sub eax, 0
je case.0x4209d4.1
sub eax, 0xfe
je case.0x4209d4.1
sub eax, 1
je case.0x4209d4.1
or word [0x260ddac], 1
jmp case.0x4209d4.1
cmp byte [0x260dd80], 0
je case.0x4209d4.1
or word [0x260ddac], 1
jmp case.0x4209d4.1
mov eax, 0xfffe
and word [0x260ddac], ax
movzx eax, byte [0x260dd81]
cmp eax, 0x85
ja case.0x4209d4.1
movzx ecx, byte [eax + 0x422f90]
jmp dword [ecx*4 + 0x422f6c]
mov ax, word [0x260dd88]
cmp ax, 3
jae case.0x4209d4.1
movzx edx, byte [0x260dd80]
movzx edi, ax
push edx
call fcn.00410250
add esp, 4
mov byte [0x260dd81], 0xd0
jmp case.0x4209d4.1
cmp word [0x260dd88], 3
jae case.0x4209d4.1
mov byte [0x260dd81], 0xd0
jmp case.0x4209d4.1
call fcn.004106e0
jmp case.0x4209d4.1
call fcn.004107b0
jmp case.0x4209d4.1
call fcn.00410840
jmp case.0x4209d4.1
call fcn.00410880
jmp case.0x4209d4.1
call fcn.004108d0
jmp case.0x4209d4.1
cmp byte [0x260dd80], 0
sete al
mov byte [0x4b80e3], al
jmp case.0x4209d4.1
movzx eax, byte [0x260dd81]
mov ecx, 0xfffe
and word [0x260ddac], cx
cmp eax, 0xa
ja case.0x4209d4.1
movzx edx, byte [eax + 0x42302c]
jmp dword [edx*4 + 0x423018]
call fcn.00410950
jmp case.0x4209d4.1
call fcn.004109f0
jmp case.0x4209d4.1
call fcn.00410b10
jmp case.0x4209d4.1
call fcn.00410c90
jmp case.0x4209d4.1
mov byte [0x4b9471], 0
jmp case.0x4209d4.1
mov dword [ebp - 4], 6
mov eax, dword [0x26112ac]
movzx ecx, word [0x260dda2]
push 1
push eax
push ecx
call fcn.0040b960
add esp, 0xc
jmp case.0x4209d4.1
mov eax, 0xfffe
and word [0x260ddac], ax
mov dword [ebp - 4], 8
mov al, byte [0x260dd81]
cmp edi, 0x21
je 0x4212f3
mov al, byte [0x260dd84]
movzx eax, al
cmp eax, 0xdc
ja case.0x421308.100
movzx ecx, byte [eax + 0x4231e4]
jmp dword [ecx*4 + 0x423038]
mov edx, dword [0x26112ac]
movzx eax, word [0x260dda2]
push 1
push edx
push eax
call fcn.0040b960
add esp, 0xc
jmp case.0x421308.13
call fcn.00410d10
jmp case.0x421308.13
call fcn.00410dd0
jmp case.0x421308.13
call fcn.00409630
mov byte [0x260dd80], al
jmp case.0x421308.13
movzx ecx, byte [0x260dd88]
push ecx
call fcn.004096a0
add esp, 4
jmp case.0x421308.13
movzx edx, byte [0x260dd88]
push edx
call fcn.004096f0
add esp, 4
jmp case.0x421308.13
call fcn.00410e10
jmp case.0x421308.13
call fcn.00410eb0
jmp case.0x421308.13
call fcn.00410f70
jmp case.0x421308.13
call fcn.00411010
jmp case.0x421308.13
call fcn.004113b0
jmp case.0x421308.13
call fcn.00411460
jmp case.0x421308.13
call fcn.004114a0
jmp case.0x421308.13
call fcn.00411560
jmp case.0x421308.13
call fcn.004115a0
jmp case.0x421308.13
call fcn.00411620
jmp case.0x421308.13
call fcn.00411660
jmp case.0x421308.13
call fcn.004119b0
jmp case.0x421308.13
call fcn.00411c50
jmp case.0x421308.13
call fcn.00411c80
jmp case.0x421308.13
call fcn.00411d70
jmp case.0x421308.13
call fcn.00411e60
jmp case.0x421308.13
call fcn.00411ef0
jmp case.0x421308.13
mov byte [0x260dd80], 0
jmp case.0x421308.13
call fcn.004839f3
dec al
mov byte [0x260dd80], al
jmp case.0x421308.13
call fcn.00411fc0
jmp case.0x421308.13
call fcn.00411ff0
jmp case.0x421308.13
call fcn.00412080
jmp case.0x421308.13
call fcn.00412120
jmp case.0x421308.13
call fcn.00412380
jmp case.0x421308.13
call fcn.00412470
jmp case.0x421308.13
call fcn.00412550
jmp case.0x421308.13
call fcn.00412600
jmp case.0x421308.13
movzx eax, byte [0x260dd80]
mov cx, word [0x260dd88]
mov dx, word [0x260dda6]
add eax, eax
add eax, eax
mov word [eax + 0x4b9000], cx
mov word [eax + 0x4b9002], dx
jmp case.0x421308.13
call fcn.00412660
jmp case.0x421308.13
call fcn.004126c0
jmp case.0x421308.13
call fcn.00412830
jmp case.0x421308.13
call fcn.004129b0
jmp case.0x421308.13
call fcn.00412f50
jmp case.0x421308.13
mov byte [0x260dd80], 0xff
jmp case.0x421308.13
call fcn.00412f90
jmp case.0x421308.13
call fcn.00405680
mov cl, byte [0x260dd80]
mov byte [eax + 0x20f], cl
jmp case.0x421308.13
call fcn.00412fe0
jmp case.0x421308.13
call fcn.00413010
jmp case.0x421308.13
call fcn.00413060
jmp case.0x421308.13
call fcn.004131f0
jmp case.0x421308.13
call fcn.00413460
jmp case.0x421308.13
push 0xd
push 0x260de28
push 0x260dda0
push 0
mov ecx, 0x1cd
call fcn.00433fc0
mov edx, 0x23
mov word [0x260dd8c], dx
jmp case.0x421308.13
call fcn.00413620
jmp case.0x421308.13
call fcn.00413660
jmp case.0x421308.13
call fcn.00413700
jmp case.0x421308.13
call fcn.00413bd0
jmp case.0x421308.13
xor eax, eax
call fcn.00413ca0
jmp case.0x421308.13
xor eax, eax
call fcn.00413d00
jmp case.0x421308.13
xor eax, eax
call fcn.00413d60
jmp case.0x421308.13
call fcn.00413df0
jmp case.0x421308.13
call fcn.00413f40
jmp case.0x421308.13
call fcn.004140b0
jmp case.0x421308.13
call fcn.00414400
jmp case.0x421308.13
call fcn.00414610
jmp case.0x421308.13
xor eax, eax
call fcn.004147b0
jmp case.0x421308.13
call fcn.00414810
jmp case.0x421308.13
xor eax, eax
call fcn.004148d0
jmp case.0x421308.13
call fcn.00414c80
jmp case.0x421308.13
call fcn.00415d10
jmp case.0x421308.13
call fcn.00415dd0
jmp case.0x421308.13
push 0
call fcn.00415f00
add esp, 4
jmp case.0x421308.13
call fcn.00416030
jmp case.0x421308.13
call fcn.004161c0
jmp case.0x421308.13
call fcn.00416240
jmp case.0x421308.13
call fcn.004162e0
jmp case.0x421308.13
movzx eax, byte [0x260dd80]
movzx ecx, word [0x4b8be8]
push 1
push eax
push ecx
call fcn.0040b960
add esp, 0xc
jmp case.0x421308.13
mov dx, word [0x26112ac]
mov word [0x260dd80], dx
jmp case.0x421308.13
call fcn.004165e0
jmp case.0x421308.13
call fcn.00416830
jmp case.0x421308.13
call fcn.00416a00
jmp case.0x421308.13
mov ax, word [0x4b8be8]
mov word [0x260dd8c], ax
jmp case.0x421308.13
push 0xd
push 0x260de28
push 0x260dda0
push 0
mov ecx, 0x80
call fcn.00433fc0
mov ecx, 0x26
mov word [0x260dd8c], cx
jmp case.0x421308.13
call fcn.00416a40
jmp case.0x421308.13
call fcn.00405680
mov dl, byte [eax + 0x20f]
mov byte [0x260dd80], dl
jmp case.0x421308.13
call fcn.00416b30
jmp case.0x421308.13
xor esi, esi
call fcn.00416cd0
jmp case.0x421308.13
call fcn.00416dd0
jmp case.0x421308.13
call fcn.00416f30
jmp case.0x421308.13
call fcn.00417080
jmp case.0x421308.13
call fcn.00417120
jmp case.0x421308.13
call fcn.00417480
jmp case.0x421308.13
call fcn.004175c0
jmp case.0x421308.13
call fcn.004176e0
jmp case.0x421308.13
call fcn.00417c50
jmp case.0x421308.13
call fcn.00417d70
jmp case.0x421308.13
push 0
call fcn.00417f80
add esp, 4
jmp case.0x421308.13
call fcn.004180b0
jmp case.0x421308.13
call fcn.004184d0
jmp case.0x421308.13
call fcn.00418820
jmp case.0x421308.13
call fcn.00418910
jmp case.0x421308.13
call fcn.004189b0
jmp case.0x421308.13
mov byte [0x260dd81], 0x68
call fcn.00418950
jmp case.0x421308.13
xor edx, edx
call fcn.00418bd0
jmp case.0x421308.13
call fcn.00418f50
jmp case.0x421308.13
movzx eax, byte [0x260dd80]
add eax, 0xfffffff3
cmp eax, 0x9d
ja case.0x421809.14
movzx ecx, byte [eax + 0x423310]
jmp dword [ecx*4 + 0x4232c4]
mov eax, 1
call fcn.00413ca0
jmp case.0x421308.13
mov eax, 1
call fcn.00413d00
jmp case.0x421308.13
mov eax, 1
call fcn.00413d60
jmp case.0x421308.13
call fcn.00419010
jmp case.0x421308.13
mov eax, 1
call fcn.004148d0
jmp case.0x421308.13
push 1
call fcn.00415f00
add esp, 4
jmp case.0x421308.13
call fcn.004192a0
jmp case.0x421308.13
call fcn.00419580
jmp case.0x421308.13
mov esi, 1
call fcn.00416cd0
jmp case.0x421308.13
push 1
call fcn.00417f80
add esp, 4
jmp case.0x421308.13
mov edx, 1
call fcn.00418bd0
jmp case.0x421308.13
call fcn.004197d0
jmp case.0x421308.13
call fcn.004198a0
jmp case.0x421308.13
call fcn.004198f0
jmp case.0x421308.13
call fcn.00419a80
jmp case.0x421308.13
call fcn.00419b50
jmp case.0x421308.13
call fcn.00419ca0
jmp case.0x421308.13
or word [0x260ddac], 1
mov ecx, 0x7100
mov word [0x260dd80], cx
jmp case.0x421308.13
or word [0x260ddac], 1
mov edx, 0x7200
mov word [0x260dd80], dx
jmp case.0x421308.13
movzx eax, byte [0x260dd80]
sub eax, 0
je 0x42198b
sub eax, 2
je 0x421984
sub eax, 1
je 0x42197d
or word [0x260ddac], 1
mov eax, 0x7300
jmp 0x4219ba
call fcn.00419f30
jmp case.0x421308.13
call fcn.00419e90
jmp case.0x421308.13
mov cl, byte [0x260dd84]
mov byte [0x260dd80], cl
mov byte [0x260dd81], 0
jmp case.0x421308.13
mov dl, byte [0x4b9847]
mov byte [0x260dd80], dl
jmp case.0x421308.13
mov eax, 1
or word [0x260ddac], ax
mov word [0x260dd80], ax
mov dword [ebp - 4], 0xffffffff
mov ecx, 1
test byte [0x260ddac], cl
je 0x421a51
mov ax, word [0x260dd80]
mov word [0x4bacf6], ax
movzx eax, ax
add eax, 0xfffffffe
mov byte [0x4bacf1], 0
cmp eax, 0x4e
ja case.0x4219f9.6
movzx edx, byte [eax + 0x4233d0]
jmp dword [edx*4 + 0x4233b0]
mov byte [0x4bacf9], cl
jmp 0x421a45
mov byte [0x4bacf9], 3
jmp 0x421a45
mov byte [0x4bacf9], 4
jmp 0x421a45
mov byte [0x4bacf9], 8
jmp 0x421a45
mov byte [0x4bacf9], 0xa
jmp 0x421a45
mov byte [0x4bacf9], 0xb
jmp 0x421a45
mov byte [0x4bacf9], 0xc
jmp 0x421a45
mov byte [0x4bacf9], 0xd
mov byte [0x4bacf8], cl
mov byte [0x4bacf5], cl
cmp byte [0x26112ba], 0
je case.0x4209d4.1
cmp byte [0x26112bb], 0
je case.0x4209d4.1
push ecx
mov esi, 0x23
call fcn.004314d0
jmp case.0x4209d4.1
push str.int_22h__terminate_address__n
jmp 0x420a27
mov dword [ebp - 4], 0xa
mov eax, dword [0x26112ac]
movzx ecx, word [0x4b8be8]
and eax, 0xff
push 1
or eax, 0x100
push eax
push ecx
call fcn.0040b960
add esp, 0xc
jmp case.0x4209d4.1
call fcn.0041a000
jmp case.0x4209d4.1
call fcn.0041a2d0
jmp case.0x4209d4.1
call fcn.0041a480
jmp case.0x4209d4.1
mov dword [ebp - 4], 0xc
call fcn.0041a680
jmp case.0x4209d4.1
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [0x2611304], 0x3fff
jmp case.0x4209d4.1
call fcn.0041a820
jmp case.0x4209d4.1
call fcn.0041a870
jmp case.0x4209d4.1
mov cl, byte [0x260dd81]
movzx eax, cl
add eax, 0xfffffffb
cmp eax, 0xb2
ja case.0x421b58.7
movzx eax, byte [eax + 0x423480]
jmp dword [eax*4 + 0x423420]
call fcn.0041aa50
jmp case.0x4209d4.1
call fcn.0041ab20
jmp case.0x4209d4.1
call fcn.0041ab50
jmp case.0x4209d4.1
call fcn.0041aba0
jmp case.0x4209d4.1
call fcn.0041ba90
jmp case.0x4209d4.1
call fcn.0041bce0
jmp case.0x4209d4.1
call fcn.0041bdf0
jmp case.0x4209d4.1
call fcn.0041bed0
jmp case.0x4209d4.1
call fcn.0041c080
jmp case.0x4209d4.1
call fcn.0041c160
jmp case.0x4209d4.1
call fcn.0041c2c0
jmp case.0x4209d4.1
call fcn.0041c300
jmp case.0x4209d4.1
cmp byte [0x260dd80], 0x80
je case.0x4209d4.1
mov ecx, 1
or word [0x260ddac], cx
mov word [0x260dd80], cx
jmp case.0x4209d4.1
call fcn.0041c4c0
jmp case.0x4209d4.1
call fcn.0041c4f0
jmp case.0x4209d4.1
call fcn.0041c630
jmp case.0x4209d4.1
cmp byte [0x260dd80], 0
jmp 0x421d73
call fcn.0041c6b0
jmp case.0x4209d4.1
mov eax, 1
cmp byte [0x260dd80], al
jbe case.0x4209d4.1
mov ecx, eax
mov word [0x260dd80], cx
or word [0x260ddac], ax
jmp case.0x4209d4.1
movzx eax, byte [0x260dd80]
sub eax, 0
je case.0x4209d4.1
sub eax, 1
jmp 0x421d73
call fcn.0041c710
jmp case.0x4209d4.1
call fcn.0041c870
jmp case.0x4209d4.1
call fcn.0041ca10
jmp case.0x4209d4.1
movzx eax, byte [0x260dd80]
sub eax, 0
je case.0x4209d4.1
sub eax, 1
jne 0x421d2d
cmp cl, 0xd2
jne 0x421ce0
mov ax, word [0x260dd8c]
mov ecx, 0x5145
cmp ax, cx
jne 0x421d4a
mov edx, 0x4d4d
cmp word [0x260dd84], dx
jne 0x421d4a
mov ecx, 0x3432
cmp word [0x260dd88], cx
je case.0x4209d4.1
jmp 0x421d4a
cmp cl, 0xd7
jne 0x421cf6
mov ax, word [0x260dd8c]
test ax, ax
je case.0x4209d4.1
jmp 0x421d4a
cmp cl, 0xde
jne 0x421d2d
mov ax, word [0x260dd8c]
mov edx, 0x4450
cmp ax, dx
jne 0x421d4a
mov ecx, 0x4d49
cmp word [0x260dd84], cx
jne 0x421d4a
mov edx, 0x8f4f
cmp word [0x260dd88], dx
je case.0x4209d4.1
jmp 0x421d4a
cmp cl, 0xfe
jne 0x421d44
mov eax, 0x4e55
cmp word [0x260dd9c], ax
je case.0x4209d4.1
mov ax, word [0x260dd8c]
mov cx, word [0x260dd80]
mov edx, 0xfb42
cmp cx, dx
jne 0x421d61
cmp ax, 0x14
jmp 0x421d73
mov edx, 0xfb43
cmp cx, dx
jne 0x421d79
mov ecx, 0x100
cmp ax, cx
je case.0x4209d4.1
mov edx, 1
or word [0x260ddac], dx
mov word [0x260dd80], dx
jmp case.0x4209d4.1
mov eax, dword [0x260dd80]
shr eax, 8
test al, al
jne case.0x4209d4.1
movzx eax, word [0x260dd80]
cmp eax, 0x6d
ja case.0x4209d4.1
movzx ecx, byte [eax + 0x4235dc]
jmp dword [ecx*4 + 0x423534]
mov edx, 0xffff
mov eax, 2
mov word [0x260dd80], dx
mov word [0x260dd8c], ax
jmp case.0x4209d4.1
call fcn.0041ca70
jmp case.0x4209d4.1
call fcn.0041cab0
jmp case.0x4209d4.1
call fcn.0041cae0
jmp case.0x4209d4.1
movzx ecx, word [0x260dd88]
mov dword [0x25f24b4], ecx
jmp case.0x4209d4.1
call fcn.0041cbc0
jmp case.0x4209d4.1
call fcn.0041cd10
jmp case.0x4209d4.1
call fcn.0041ce60
jmp case.0x4209d4.1
call fcn.0041cea0
jmp case.0x4209d4.1
mov dx, word [0x260dd8c]
mov ax, word [0x260dd84]
mov word [0x25f2552], dx
mov word [0x25f2554], ax
jmp case.0x4209d4.1
mov cx, word [0x260dd84]
mov dx, word [0x260dd88]
mov word [0x25f2556], cx
mov word [0x25f2558], dx
jmp case.0x4209d4.1
call fcn.0041cee0
jmp case.0x4209d4.1
mov ax, word [0x260dd84]
mov cx, word [0x260dd88]
mov dx, word [0x260dda0]
mov word [0x25f251e], ax
mov word [0x25f2520], cx
mov word [0x25f2522], dx
jmp case.0x4209d4.1
movzx eax, word [0x260dd84]
movzx ecx, word [0x260dd88]
mov dword [0x25f24d4], eax
mov dword [0x25f24d8], ecx
jmp case.0x4209d4.1
mov ecx, 0xffff
mov word [0x260dd80], cx
jmp case.0x4209d4.1
call fcn.0041cf50
jmp case.0x4209d4.1
mov edx, 0xb4
mov word [0x260dd8c], dx
jmp case.0x4209d4.1
movzx eax, word [0x260dd88]
mov ecx, dword [0x260de28]
lea edi, [eax + ecx + 0x4b9000]
mov ecx, 0x2d
mov esi, 0x25f24a8
rep movsd dword es:[edi], dword [esi]
jmp case.0x4209d4.1
movzx edx, word [0x260dd88]
mov eax, dword [0x260de28]
lea esi, [edx + eax + 0x4b9000]
mov ecx, 0x2d
mov edi, 0x25f24a8
rep movsd dword es:[edi], dword [esi]
jmp case.0x4209d4.1
call fcn.0041cfc0
jmp case.0x4209d4.1
call fcn.0041d030
jmp case.0x4209d4.1
mov cx, word [0x260dd8c]
mov dx, word [0x260dd84]
mov ax, word [0x260dd88]
mov word [0x25f2548], cx
mov word [0x25f254a], dx
mov word [0x25f254c], ax
jmp case.0x4209d4.1
mov cx, word [0x25f2548]
mov dx, word [0x25f254a]
mov ax, word [0x25f254c]
mov word [0x260dd8c], cx
mov word [0x260dd84], dx
mov word [0x260dd88], ax
jmp case.0x4209d4.1
mov cx, word [0x260dd8c]
mov word [0x25f254e], cx
jmp case.0x4209d4.1
mov dx, word [0x25f254e]
mov word [0x260dd8c], dx
jmp case.0x4209d4.1
call fcn.0041d160
jmp case.0x4209d4.1
mov eax, dword [0x25f24b0]
mov byte [0x25f24a8], 1
mov dword [0x25f24ac], eax
jmp case.0x4209d4.1
mov ecx, 0xffff
mov edx, 2
mov word [0x260dd80], cx
mov word [0x260dd8c], dx
jmp case.0x4209d4.1
mov ax, word [0x260dd8c]
mov word [0x25f2550], ax
jmp case.0x4209d4.1
mov cx, word [0x25f2550]
mov word [0x260dd8c], cx
jmp case.0x4209d4.1
mov edx, 0x805
mov eax, 0x400
mov word [0x260dd8c], dx
mov word [0x260dd84], ax
jmp case.0x4209d4.1
mov ecx, 0x8000
mov word [0x260dd80], cx
jmp case.0x4209d4.1
mov ax, word [0x25f24c4]
mov cx, word [0x25f24c8]
xor edx, edx
mov word [0x260dd8c], dx
mov word [0x260dd84], ax
mov word [0x260dd88], cx
jmp case.0x4209d4.1
call fcn.0041d1a0
jmp case.0x4209d4.1
call fcn.0041d220
jmp case.0x4209d4.1
call fcn.0041d250
jmp case.0x4209d4.1
call fcn.0041d680
jmp case.0x4209d4.1
call fcn.0041d6c0
jmp case.0x4209d4.1
mov edx, 0xe42c
mov word [0x260dd80], dx
jmp case.0x4209d4.1
movzx eax, word [0x260dd9c]
mov ecx, dword [0x260de28]
lea edi, [eax + ecx + 0x4b9000]
mov ecx, 7
mov esi, str.Copyright_2017_MS_DOS_Player
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
jmp case.0x4209d4.1
movzx edx, word [0x260dd9c]
mov eax, dword [0x260de28]
add eax, edx
mov byte [eax + 0x4b9000], 8
mov byte [eax + 0x4b9001], 5
jmp case.0x4209d4.1
mov ecx, dword [0x260dd80]
shr ecx, 8
movzx eax, cl
add eax, 0xffffffc0
cmp eax, 0x9e
ja case.0x42212e.73
movzx edx, byte [eax + 0x4236c4]
jmp dword [edx*4 + 0x42364c]
cmp byte [0x26112f0], 0
setne al
dec al
and al, 0x84
mov byte [0x260dd81], al
jmp case.0x4209d4.1
cmp byte [0x26112f0], 0
jne 0x422162
mov byte [0x260dd81], 0x84
jmp case.0x4209d4.1
mov ecx, 0xc000
mov byte [0x260dd81], 0
mov word [0x260dd8c], cx
jmp case.0x4209d4.1
call fcn.0041d700
jmp case.0x4209d4.1
call fcn.0041d740
jmp case.0x4209d4.1
call fcn.0041d7d0
jmp case.0x4209d4.1
call fcn.0041d870
jmp case.0x4209d4.1
cmp byte [0x26112f0], 0
jne 0x4221b7
mov byte [0x260dd81], 0x84
jmp case.0x4209d4.1
mov edx, 0x40
mov word [0x260dd80], dx
jmp case.0x4209d4.1
call fcn.0041d8c0
jmp case.0x4209d4.1
call fcn.0041d9a0
jmp case.0x4209d4.1
call fcn.0041da20
jmp case.0x4209d4.1
call fcn.0041da80
jmp case.0x4209d4.1
call fcn.0041dae0
jmp case.0x4209d4.1
call fcn.0041db60
jmp case.0x4209d4.1
call fcn.0041dd10
jmp case.0x4209d4.1
call fcn.0041ded0
jmp case.0x4209d4.1
call fcn.0041dfe0
jmp case.0x4209d4.1
call fcn.0041e070
jmp case.0x4209d4.1
call fcn.0041e0c0
jmp case.0x4209d4.1
call fcn.0041e210
jmp case.0x4209d4.1
call fcn.0041e360
jmp case.0x4209d4.1
call fcn.0041e4c0
jmp case.0x4209d4.1
call fcn.0041ea10
jmp case.0x4209d4.1
call fcn.0041eac0
jmp case.0x4209d4.1
call fcn.0041eb50
jmp case.0x4209d4.1
call fcn.0041ebe0
jmp case.0x4209d4.1
call fcn.0041ec80
jmp case.0x4209d4.1
call fcn.0041eee0
jmp case.0x4209d4.1
call fcn.0041ef20
jmp case.0x4209d4.1
call fcn.0041ef60
jmp case.0x4209d4.1
mov dword [ebp - 4], 0xe
movzx eax, byte [0x260dd81]
cmp eax, 0x8f
ja case.0x4222c4.19
movzx eax, byte [eax + 0x4237c4]
jmp dword [eax*4 + 0x423764]
mov ecx, 0x300
mov edx, 0x395
mov eax, 1
mov word [0x260dd80], cx
mov word [0x260dd8c], dx
mov word [0x260dd88], ax
jmp case.0x4209d4.1
call fcn.004200c0
jmp case.0x4209d4.1
call fcn.00420110
jmp case.0x4209d4.1
mov ecx, 1
mov dword [0x260dee8], 0xffffffff
mov word [0x260dd80], cx
mov byte [0x260dd8c], 0
jmp case.0x4209d4.1
mov edx, 1
mov dword [0x260dee8], 0xffefffff
mov word [0x260dd80], dx
mov byte [0x260dd8c], 0
jmp case.0x4209d4.1
inc dword [0x4b80c4]
mov eax, 1
mov dword [0x260dee8], 0xffffffff
mov word [0x260dd80], ax
mov byte [0x260dd8c], 0
jmp case.0x4209d4.1
call fcn.00420150
jmp case.0x4209d4.1
mov ecx, dword [0x260dee8]
shr ecx, 0x14
and ecx, 1
mov word [0x260dd80], cx
mov byte [0x260dd8c], 0
jmp case.0x4209d4.1
call fcn.00420190
jmp case.0x4209d4.1
movzx edi, word [0x260dd88]
call fcn.00420200
jmp case.0x4209d4.1
call fcn.00420250
jmp case.0x4209d4.1
call fcn.004202a0
jmp case.0x4209d4.1
call fcn.004203f0
jmp case.0x4209d4.1
call fcn.00420450
jmp case.0x4209d4.1
call fcn.004204b0
jmp case.0x4209d4.1
movzx edx, word [0x260dd8c]
push edx
call fcn.00420530
add esp, 4
jmp case.0x4209d4.1
call fcn.00420680
jmp case.0x4209d4.1
call fcn.004206e0
jmp case.0x4209d4.1
call fcn.00420760
jmp case.0x4209d4.1
call fcn.004207e0
jmp case.0x4209d4.1
mov edi, dword [0x260dd88]
call fcn.00420200
jmp case.0x4209d4.1
call fcn.00420860
jmp case.0x4209d4.1
mov ecx, dword [0x260dd8c]
push ecx
call fcn.00420530
add esp, 4
jmp case.0x4209d4.1
xor edx, edx
mov word [0x260dd80], dx
mov byte [0x260dd8c], 0x80
jmp case.0x4209d4.1
movzx eax, word [0x260dd80]
movzx ecx, word [0x260dd8c]
movzx edx, word [0x260dd84]
mov word [0x4b8018], ax
movzx eax, word [0x260dd88]
mov word [0x25f2224], cx
movzx ecx, word [0x260dd98]
mov word [0x25f249c], dx
movzx edx, word [0x260dd9c]
mov word [0x25f247c], ax
mov ax, word [0x25f2518]
mov word [0x25f2218], cx
mov word [0x25f2480], dx
test ax, ax
je 0x4225f5
cmp dword [0x25f2520], 0
je 0x4225f5
mov ecx, 0x25f24a8
mov word [0x260dd80], ax
call fcn.00401110
mov esi, dword [0x25f24b4]
mov word [0x260dd8c], ax
mov eax, dword [0x25f24c4]
and eax, 0xfffffff8
cmp eax, esi
mov edx, eax
jl 0x42251c
mov edx, esi
mov ecx, dword [0x25f24cc]
and ecx, 0xfffffff8
cmp ecx, edx
jle 0x42252e
mov ax, cx
jmp 0x422538
cmp eax, esi
jl 0x422538
mov ax, word [0x25f24b4]
mov ecx, dword [0x25f24c8]
mov edi, dword [0x25f24b8]
and ecx, 0xfffffff8
cmp ecx, edi
mov word [0x260dd84], ax
mov esi, ecx
jl 0x422555
mov esi, edi
mov edx, dword [0x25f24d0]
and edx, 0xfffffff8
cmp edx, esi
jle 0x422567
mov cx, dx
jmp 0x422572
cmp ecx, edi
jl 0x422572
mov cx, word [0x25f24b8]
movzx eax, ax
imul eax, dword [0x25f24d4]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov word [0x260dd98], ax
movzx eax, cx
imul eax, dword [0x25f24d8]
cdq
and edx, 7
add eax, edx
mov dl, byte [0x25f2522]
sar eax, 3
mov word [0x260dd9c], ax
movzx eax, byte [0x25f2520]
mov byte [0x5b8fc3], al
movzx eax, byte [0x25f2523]
mov word [0x260dd88], cx
mov cl, byte [0x25f2521]
mov byte [0x5b8fc2], 0x9a
mov byte [0x5b8fc4], cl
mov byte [0x5b8fc5], dl
mov byte [0x5b8fc6], al
mov byte [0x5b8fc7], 0xcd
mov byte [0x5b8fc8], 0x6b
jmp case.0x4209d4.1
mov dx, word [0x25f251a]
xor esi, esi
movzx eax, dx
mov edi, 1
mov ecx, esi
shl edi, cl
test eax, edi
je 0x422618
cmp dword [esi*4 + 0x25f2524], 0
jne 0x422625
inc esi
cmp esi, 8
jl 0x422601
mov bl, 0xcd
jmp 0x42272d
mov ecx, 0x25f24a8
mov word [0x260dd80], dx
call fcn.00401110
mov edi, dword [0x25f24b4]
mov word [0x260dd8c], ax
mov eax, dword [0x25f24c4]
and eax, 0xfffffff8
cmp eax, edi
mov edx, eax
jl 0x422652
mov edx, edi
mov ecx, dword [0x25f24cc]
and ecx, 0xfffffff8
cmp ecx, edx
jle 0x422664
mov ax, cx
jmp 0x42266e
cmp eax, edi
jl 0x42266e
mov ax, word [0x25f24b4]
mov ecx, dword [0x25f24c8]
mov ebx, dword [0x25f24b8]
and ecx, 0xfffffff8
cmp ecx, ebx
mov word [0x260dd84], ax
mov edi, ecx
jl 0x42268b
mov edi, ebx
mov edx, dword [0x25f24d0]
and edx, 0xfffffff8
cmp edx, edi
jle 0x42269d
mov cx, dx
jmp 0x4226a8
cmp ecx, ebx
jl 0x4226a8
mov cx, word [0x25f24b8]
movzx eax, ax
imul eax, dword [0x25f24d4]
cdq
and edx, 7
add eax, edx
sar eax, 3
mov word [0x260dd98], ax
movzx eax, cx
imul eax, dword [0x25f24d8]
cdq
and edx, 7
add eax, edx
movzx edx, byte [esi*4 + 0x25f2525]
mov word [0x260dd88], cx
movzx ecx, byte [esi*4 + 0x25f2524]
sar eax, 3
mov word [0x260dd9c], ax
lea eax, [esi*4 + 0x25f2526]
mov byte [0x5b8fc3], cl
movzx ecx, byte [eax]
mov byte [0x5b8fc4], dl
movzx edx, byte [eax + 1]
mov bl, 0xcd
mov byte [0x5b8fc2], 0x9a
mov byte [0x5b8fc5], cl
mov byte [0x5b8fc6], dl
mov byte [0x5b8fc7], bl
mov byte [0x5b8fc8], 0x6b
cmp word [0x25f251c], 0
je 0x4227d1
cmp dword [0x25f2544], 0
je 0x4227d1
cmp byte [0x25f24a9], 0
je 0x4227d1
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.0040f460
mov eax, dword [ebp - 0x28]
add esp, 0xc
call fcn.004019b0
mov eax, dword [ebp - 0x18]
call fcn.004019b0
mov eax, dword [ebp - 0x20]
call fcn.004019b0
xor eax, eax
call fcn.004019b0
movzx eax, byte [0x25f2544]
mov cl, byte [0x25f2545]
mov dl, byte [0x25f2546]
mov byte [0x5b8fc3], al
movzx eax, byte [0x25f2547]
mov byte [0x5b8fc2], 0x9a
mov byte [0x5b8fc4], cl
mov byte [0x5b8fc5], dl
mov byte [0x5b8fc6], al
mov byte [0x5b8fc7], bl
mov byte [0x5b8fc8], 0x6a
jmp case.0x4209d4.1
mov al, 0x90
mov byte [0x5b8fc2], al
mov byte [0x5b8fc3], al
mov byte [0x5b8fc4], al
mov byte [0x5b8fc5], al
mov byte [0x5b8fc6], al
mov byte [0x5b8fc7], bl
mov byte [0x5b8fc8], 0x6b
jmp case.0x4209d4.1
call fcn.00401a00
call fcn.00401a00
call fcn.00401a00
call fcn.00401a00
movzx ecx, word [0x4b8018]
movzx edx, word [0x25f2224]
movzx eax, word [0x25f249c]
and byte [0x25f2491], 0xef
mov word [0x260dd80], cx
movzx ecx, word [0x25f247c]
mov word [0x260dd8c], dx
movzx edx, word [0x25f2218]
mov word [0x260dd84], ax
movzx eax, word [0x25f2480]
mov word [0x260dd88], cx
mov word [0x260dd98], dx
mov word [0x260dd9c], ax
jmp 0x4229ed
mov al, byte [0x260dd80]
cmp al, 0x80
jb case.0x4209d4.1
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0x27], 0
mov byte [ebp - 0x28], al
call fcn.00485f27
mov dl, byte [ebp - 0x28]
add esp, 4
mov byte [0x260dd80], dl
jmp case.0x4209d4.1
or word [0x260ddac], 1
mov byte [0x260dd80], 0x86
jmp case.0x4209d4.1
movzx edx, word [0x260dd80]
test dl, 0xf0
je 0x4228ca
mov eax, edx
shr eax, 1
and eax, 8
and edx, 7
or edx, eax
xor ecx, ecx
xor eax, eax
mov edi, edi
movzx esi, word [eax + 0x4a6960]
cmp si, dx
je 0x4228f6
mov edi, 0xffff
cmp si, di
je 0x4228f6
add eax, 0xc
inc ecx
cmp eax, 0x84
jb 0x4228d0
jmp case.0x4209d4.1
cmp dword [0x4b8000], 0x3a4
jne 0x422910
lea edx, [ecx + ecx*2]
mov eax, dword [edx*4 + 0x4a6968]
test eax, eax
jne 0x42291a
lea eax, [ecx + ecx*2]
mov eax, dword [eax*4 + 0x4a6964]
mov ecx, eax
lea esi, [ecx + 1]
nop
mov dl, byte [ecx]
inc ecx
test dl, dl
jne 0x422920
sub ecx, esi
mov edx, 0x4b9501
mov byte [0x4b9500], cl
sub edx, eax
mov cl, byte [eax]
mov byte [eax + edx], cl
inc eax
test cl, cl
jne 0x422936
push 0xd
push 0x260de28
push 0x260dda0
push 0
mov ecx, 0x50
call fcn.00433fc0
xor ecx, ecx
mov word [0x260dd9c], cx
jmp case.0x4209d4.1
xor esi, esi
call fcn.00401a00
mov word [ebp + esi - 0x16], ax
call fcn.00401a00
mov word [ebp + esi - 0x1e], ax
sub esi, 2
cmp esi, 0xfffffff8
jg 0x422968
xor esi, esi
jmp 0x422990
movzx eax, word [ebp + esi*2 - 0x24]
movzx edx, word [ebp + esi*2 - 0x1c]
lea ecx, [eax - 1]
cmp cx, 0xf
ja 0x4229cf
movzx ecx, ax
lea eax, [ecx + ecx*4]
add eax, eax
add eax, eax
cmp byte [eax + 0x26110c0], 0
je 0x4229cf
movzx edx, dx
cmp edx, dword [eax + 0x26110bc]
jge 0x4229cf
push edx
push ecx
mov eax, esi
call fcn.00425ec0
add esp, 8
jmp 0x4229d6
mov edx, esi
call fcn.00425f60
inc esi
cmp esi, 4
jl 0x422990
jmp case.0x4209d4.1
lea ecx, [edi - 0x70]
mov dl, 1
shl dl, cl
not dl
and byte [0x25f2491], dl
jne 0x4229f6
and byte [0x25f2485], 0xfb
call fcn.004265d0
cmp byte [0x4b800e], 0
je 0x422a10
call fcn.0040c4a0
mov byte [0x4b800e], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00482caa
mov esp, ebp
pop ebp
ret