Function at 0x4170b0
Capabilities:
Extract resource via kernel32 functions
Get keyboard layout

Disassembly:
push 0xffffffffffffffff
push 0x49eeab
mov eax, dword fs:[0]
push eax
mov eax, 0x1a4e4
mov dword fs:[0], esp
call fcn.00499d50
push ebx
push ebp
mov ebp, dword [esp + 0x1a4fc]
mov ebx, ecx
push esi
push edi
test ebx, ebx
je 0x4191e8
cmp word [ebx], 0
je 0x4191e8
mov eax, dword [0x4cb5bc]
mov dword [esp + 0xb4], eax
test eax, eax
jne 0x417109
mov eax, dword [ebp + 0xab4]
mov dword [0x4c94a0], eax
mov edi, dword [sym.imp.KERNEL32.DLL_FindResourceW]
lea eax, [esp + 0x124e4]
push 0xa
mov dword [esp + 0x24], eax
xor eax, eax
push 0x4a74a8
xor ecx, ecx
lea edx, [esp + 0x85a4]
push eax
mov word [esp + 0x5a0], cx
mov dword [esp + 0x24], edx
mov dword [esp + 0xdc], eax
mov dword [esp + 0xe0], eax
mov byte [esp + 0xe4], al
call edi
mov esi, eax
test esi, esi
jne 0x41716a
push 0xa
push 0x4a74d0
push eax
call edi
mov esi, eax
test esi, esi
je 0x4191ce
push esi
xor edi, edi
push edi
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [esp + 0xd4], eax
cmp eax, edi
je 0x4191ce
push esi
push edi
call dword [sym.imp.KERNEL32.DLL_LoadResource]
cmp eax, edi
je 0x4191ce
push eax
call dword [sym.imp.KERNEL32.DLL_LockResource]
mov dword [esp + 0xd0], eax
cmp eax, edi
je 0x4191ce
lea esi, [esp + 0x5c]
call fcn.00415830
push 0xc
mov eax, 0xfde9
lea edx, [esp + 0xd4]
mov ecx, esi
mov dword [esp + 0x1a500], edi
call fcn.00472ba0
mov eax, dword [esp + 0xb4]
inc dword [0x4cb5bc]
xor edx, edx
xor ecx, ecx
mov word [esp + 0x58], dx
mov dword [ebp + 0x26c], eax
mov eax, esi
lea edx, [esp + 0x859c]
mov byte [esp + 0x1f], 0
mov word [esp + 0x52], cx
mov dword [esp + 0xbc], 0xffffffff
call fcn.00419460
push 2
lea ecx, [esp + 0x85a0]
push 0x4a7538
push ecx
mov dword [esp + 0x3c], eax
call fcn.0049028b
add esp, 0xc
test eax, eax
sete al
mov byte [esp + 0x27], al
test al, al
je 0x417243
xor edx, edx
mov word [esp + 0x859c], dx
mov dword [esp + 0x30], edi
cmp dword [esp + 0x30], 0xffffffff
je 0x419129
mov eax, dword [esp + 0xbc]
mov esi, dword [esp + 0x18]
push 0xc
inc eax
push 0x4a7540
xor edi, edi
push esi
mov dword [ebp + 0x270], eax
mov dword [ebp + 0x630], edi
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x41728b
push esi
push ebp
call fcn.00419600
test eax, eax
je 0x417b89
mov byte [esp + 0xc8], 0
mov dword [esp + 0x28], edi
mov ebp, dword [esp + 0xa8]
mov edi, dword [esp + 0x20]
mov ebx, dword [esp + 0x18]
inc dword [esp + 0xbc]
test edi, edi
je 0x417345
mov ebx, dword [esp + 0x28]
lea eax, [esp + 0x5c]
mov ecx, ebx
mov edx, edi
call fcn.00419460
mov esi, eax
mov dword [esp + 0x38], esi
test esi, esi
je 0x417382
cmp esi, 0xffffffff
je 0x417382
test ebx, ebx
jne 0x417382
push 2
push 0x4a755c
push edi
call fcn.0049028b
add esp, 0xc
test eax, eax
jne 0x41734e
cmp byte [esp + 0x27], al
jne 0x417310
mov eax, 0x3a
cmp word [edi + 4], ax
jne 0x417310
cmp word [edi + 6], ax
je 0x417360
mov edi, dword [esp + 0x20]
sub esi, 2
lea ecx, [esi + esi + 2]
push ecx
lea edx, [edi + 4]
push edx
push edi
mov byte [esp + 0x33], 0
call fcn.0048efd0
add esp, 0xc
mov eax, esi
call fcn.00413840
cmp word [edi], 0
mov dword [esp + 0x38], eax
je 0x417297
jmp 0x417360
or ecx, 0xffffffff
mov dword [esp + 0x38], ecx
jmp 0x41738e
cmp byte [esp + 0x27], 0
jne 0x417297
mov ebp, dword [esp + 0xa8]
mov eax, dword [esp + 0x20]
push 2
push 0x4a7538
push eax
call fcn.0049028b
add esp, 0xc
test eax, eax
jne 0x417382
mov byte [esp + 0x27], 1
jmp 0x41729e
mov ecx, dword [esp + 0x38]
mov ebx, dword [esp + 0x18]
mov edi, dword [esp + 0x20]
cmp byte [esp + 0x27], 0
je 0x4173a3
cmp ecx, 0xffffffff
jne 0x4172a6
jmp 0x417ad8
cmp dword [esp + 0x28], 0
jne 0x4178e1
cmp ecx, 0xffffffff
je 0x417512
cmp word [edi], 0x28
jne 0x417512
cmp word [edi + 2], 0x3a
lea eax, [edi + 2]
je 0x417512
cmp word [edi + ecx*2 - 2], 0x3a
je 0x417512
mov cl, byte [0x4c9d06]
mov edx, 0xa
mov dword [esp + 0x28], 1
mov dword [esp + 0xc0], 0
mov byte [esp + 0x40], cl
mov byte [esp + 0x3e], 1
mov byte [esp + 0x42], 0
mov byte [esp + 0x3d], 0
mov byte [esp + 0x3f], 1
mov dword [esp + 0xec], edx
mov dword [esp + 0xa8], 1
call fcn.00409620
mov esi, eax
cmp word [esi], 0
je 0x4178d4
mov ebx, 0x4a5734
mov eax, esi
call fcn.004095d0
mov ebp, eax
test ebp, ebp
jne 0x417462
mov eax, esi
lea edx, [eax + 2]
jmp 0x417450
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x417450
sub eax, edx
sar eax, 1
lea ebp, [esi + eax*2]
movzx edi, word [ebp]
push 4
xor edx, edx
push 0x4a75f8
push esi
mov dword [esp + 0xb8], edi
mov word [ebp], dx
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x417825
push 0xf
add esi, 8
lea eax, [esp + 0xf0]
push esi
push eax
call fcn.00491254
movzx ebx, word [0x4c5904]
add esp, 0xc
xor ecx, ecx
mov word [esp + 0x10a], cx
lea ecx, [esp + 0xec]
lea esp, [esp]
movzx eax, word [ecx]
test ax, ax
je 0x4174e5
jmp 0x4174d0
cmp ax, bx
je 0x41778a
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x4174d0
lea eax, [esp + 0xec]
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4174f0
mov edi, dword [esp + 0xac]
sub eax, edx
sar eax, 1
mov dword [esp + 0xa8], eax
jmp 0x4178b2
mov dword [esp + 0x28], 0
cmp ecx, 0xffffffff
je 0x417ad8
test ecx, ecx
je 0x4172a6
cmp word [edi + ecx*2 - 2], 0x3a
jne 0x41753d
cmp word [edi], 0x2c
jne 0x417ad8
mov ax, word [edi]
call fcn.004095a0
movzx eax, ax
cmp eax, 0x41
je 0x4176f2
cmp eax, 0x4f
je 0x4176a6
movzx eax, word [edi]
cmp eax, 0x3a
je 0x41756c
cmp eax, 0x2b
je 0x41756c
cmp eax, 0x2d
jne 0x417576
cmp word [edi + 2], ax
je 0x417ad8
push eax
push 0x4a7580
call fcn.0048f331
add esp, 8
test eax, eax
je 0x417ad8
mov ecx, dword [esp + 0x20]
push 0x4a75a4
push ecx
call fcn.0048f358
mov edi, eax
add esp, 8
test edi, edi
je 0x41773d
mov eax, dword [esp + 0x20]
cmp word [eax], 0x3a
jne 0x417607
mov esi, eax
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
je 0x4175f9
cmp ax, 0x3a
je 0x417ad8
mov ecx, 0x107
call fcn.00409580
test eax, eax
jne 0x4175ed
movzx edx, word [esi]
push edx
push 0x4a75ac
call fcn.0048f331
add esp, 8
test eax, eax
je 0x417603
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x4175c0
cmp word [esi], 0x3a
je 0x417ad8
mov eax, dword [esp + 0x20]
cmp word [eax], 0x2c
jne 0x417653
mov eax, dword [esp + 0x20]
add eax, 2
call fcn.00409620
push 2
mov esi, eax
push 0x4a75a4
push esi
call fcn.0049028b
add esp, 0xc
test eax, eax
je 0x417ad8
push 3
push 0x4a5724
add esi, 0xfffffffe
push esi
call fcn.0049028b
add esp, 0xc
test eax, eax
je 0x417ad8
jmp 0x41773d
cmp eax, edi
jae 0x417666
cmp word [eax], 0x22
je 0x417664
add eax, 2
cmp eax, edi
jb 0x417657
cmp eax, edi
je 0x417ad8
movzx eax, word [edi + 4]
lea ecx, [edi + 4]
test ax, ax
je 0x417ad8
lea esp, [esp]
cmp ax, 0x22
je 0x417697
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x417680
jmp 0x417ad8
cmp word [ecx], 0
je 0x417ad8
jmp 0x41773d
mov ax, word [edi + 2]
call fcn.004095a0
cmp ax, 0x52
jne 0x417ad8
mov edi, dword [esp + 0x20]
movzx ecx, word [edi + 4]
lea eax, [edi + 4]
cmp ecx, 0x20
je 0x4176d2
cmp ecx, 9
jne 0x417ad8
call fcn.00409620
movzx eax, word [eax]
push eax
push 0x4a756c
call fcn.0048f331
add esp, 8
test eax, eax
jne 0x417ad8
jmp 0x417741
push 3
push 0x4a7564
push edi
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x417ad8
movzx ecx, word [edi + 6]
lea eax, [edi + 6]
cmp ecx, 0x20
je 0x41771f
cmp ecx, 9
jne 0x417ad8
call fcn.00409620
movzx ecx, word [eax]
push ecx
push 0x4a756c
call fcn.0048f331
add esp, 8
test eax, eax
jne 0x417ad8
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x30]
mov edx, dword [esp + 0x38]
add edx, esi
cmp edx, 0x4000
jae 0x418ef1
cmp word [edi], 0x2c
je 0x417767
mov eax, 0x20
mov word [ebx + esi*2], ax
inc esi
mov ecx, dword [esp + 0x38]
lea edx, [ecx + ecx + 2]
push edx
lea eax, [ebx + esi*2]
push edi
push eax
call fcn.004968e0
add esp, 0xc
add esi, dword [esp + 0x38]
mov dword [esp + 0x30], esi
jmp 0x4172a6
cmp word [ecx], 0
je 0x4174e5
movzx eax, word [ecx + 2]
lea esi, [ecx + 2]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x4177aa.99
movzx edx, byte [eax + 0x41922c]
jmp dword [edx*4 + 0x419208]
mov eax, 7
mov word [esi], ax
jmp case.0x4177aa.99
mov edx, 8
jmp 0x4177f3
mov eax, 0xc
mov word [esi], ax
jmp case.0x4177aa.99
mov edx, 0xa
jmp 0x4177f3
mov eax, 0xd
mov word [esi], ax
jmp case.0x4177aa.99
mov edx, 9
jmp 0x4177f3
mov eax, 0xb
mov word [esi], ax
jmp case.0x4177aa.99
mov edx, 0x20
mov word [esi], dx
mov eax, esi
lea edi, [eax + 2]
jmp 0x417800
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x417800
sub eax, edi
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push esi
push ecx
call fcn.0048efd0
add esp, 0xc
mov ecx, esi
jmp 0x4174c0
push 5
push 0x4a7604
push esi
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x417845
cmp word [esi + 0xa], 0x30
setne byte [esp + 0x40]
jmp 0x4178b2
push 5
push 0x4a7610
push esi
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x417865
cmp word [esi + 0xa], 0x30
setne byte [esp + 0x3e]
jmp 0x4178b2
movzx eax, word [esi]
test ax, ax
je 0x4178b2
lea ecx, [ecx]
movzx eax, ax
add eax, 0xffffffdb
cmp eax, 0x3e
ja case.0x417882.38
movzx ecx, byte [eax + 0x41925c]
jmp dword [ecx*4 + 0x419244]
mov byte [esp + 0x42], 1
jmp case.0x417882.38
mov byte [esp + 0x3d], 1
jmp case.0x417882.38
mov byte [esp + 0x3f], 0
jmp case.0x417882.38
mov dword [esp + 0x28], 2
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x417870
mov word [ebp], di
mov esi, ebp
movzx eax, word [esi]
cmp eax, 0x20
je 0x4178c5
cmp eax, 9
jne 0x4178ca
add esi, 2
jmp 0x4178b8
cmp word [esi], 0
jne 0x417434
mov byte [esp + 0xc8], 1
jmp 0x417297
cmp ecx, 0xffffffff
je 0x4190ff
cmp ecx, 0xfffffffe
je 0x4172a6
cmp word [edi], 0x29
jne 0x41791c
mov esi, dword [esp + 0x20]
or eax, 0xffffffff
mov dword [esp + 0x28], 0
lea ebx, [esi + 2]
call fcn.00413920
dec eax
mov dword [esp + 0x38], eax
mov edi, eax
jmp 0x417a51
cmp byte [esp + 0x3e], 0
mov ebx, dword [esp + 0x20]
je 0x41793a
mov eax, dword [esp + 0x38]
mov esi, ebx
call fcn.00413920
mov edi, eax
mov dword [esp + 0x38], edi
jmp 0x41793e
mov edi, dword [esp + 0x38]
cmp byte [esp + 0x40], 0
je 0x417958
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x20]
call fcn.00413840
mov dword [esp + 0x38], eax
mov edi, eax
xor esi, esi
cmp byte [esp + 0x42], 0
je 0x41799b
mov ax, word [0x4c5904]
mov ecx, dword [esp + 0x20]
push esi
push 0x4001
push 0xffffffffffffffff
push 1
mov word [esp + 0x60], ax
mov word [esp + 0x64], ax
mov word [esp + 0x66], ax
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x64]
push eax
push ecx
xor eax, eax
call fcn.004757b0
add esp, 0x1c
mov esi, eax
cmp byte [esp + 0x3d], 0
je 0x4179e4
mov ax, word [0x4c5900]
mov dx, word [0x4c5904]
push 0
push 0x4001
push 0xffffffffffffffff
mov word [esp + 0x5c], ax
mov word [esp + 0x62], ax
push 1
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x64]
mov word [esp + 0x68], dx
mov edx, dword [esp + 0x34]
push ecx
push edx
xor eax, eax
call fcn.004757b0
add esp, 0x1c
add esi, eax
cmp byte [esp + 0x3f], 0
je 0x417a2d
mov ax, word [0x4c58fc]
mov cx, word [0x4c5904]
push 0
push 0x4001
push 0xffffffffffffffff
push 1
mov word [esp + 0x60], ax
mov word [esp + 0x66], ax
lea edx, [esp + 0x64]
push edx
lea eax, [esp + 0x64]
mov word [esp + 0x68], cx
mov ecx, dword [esp + 0x34]
push eax
push ecx
xor eax, eax
call fcn.004757b0
add esp, 0x1c
add esi, eax
test esi, esi
je 0x417a51
mov eax, dword [esp + 0x20]
lea edx, [eax + 2]
jmp 0x417a40
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x417a40
sub eax, edx
sar eax, 1
mov edi, eax
mov esi, dword [esp + 0x30]
lea edx, [edi + ebp]
add edx, esi
cmp edx, 0x4001
jae 0x419123
mov eax, dword [esp + 0xc0]
inc eax
mov dword [esp + 0xc0], eax
cmp eax, 1
jle 0x417aa7
test ebp, ebp
je 0x417aa7
cmp ebx, dword [esp + 0x20]
jne 0x417aa7
mov edx, dword [esp + 0x18]
lea eax, [ebp + ebp + 2]
push eax
lea ecx, [esp + 0xf0]
push ecx
lea eax, [edx + esi*2]
push eax
call fcn.004968e0
add esp, 0xc
add esi, ebp
mov dword [esp + 0x30], esi
test edi, edi
je 0x41729e
mov edx, dword [esp + 0x18]
lea ecx, [edi + edi + 2]
push ecx
lea eax, [edx + esi*2]
push ebx
push eax
call fcn.004968e0
add esp, 0xc
add esi, edi
mov dword [esp + 0x30], esi
jmp 0x41729e
mov ebx, dword [esp + 0x18]
mov word [ebp], di
mov ebp, dword [esp + 0x1a504]
nop
cmp dword [esp + 0x30], 0
je 0x418c7a
cmp word [esp + 0x594], 0
je 0x417c6e
mov esi, dword [esp + 0x1a504]
mov ecx, dword [esp + 0xa4]
mov ebp, dword [esi + 0x270]
mov edx, dword [esp + 0x18]
mov bl, byte [esp + 0x26]
mov dword [esi + 0x270], ecx
cmp word [edx], 0x7b
je 0x417b69
test bl, bl
jne 0x417b69
cmp dword [esp + 0x48], 0
jne 0x418f15
cmp dword [esi + 0x48], 0
je 0x417b49
mov eax, dword [0x4c590c]
cmp dword [eax + 0xb4], 0
je 0x418f26
push 0
push 0
push 0
push 0
push 0
push 3
lea ecx, [esp + 0x5ac]
push ecx
mov ecx, esi
call fcn.0041adb0
jmp 0x417be9
mov eax, dword [esp + 0x48]
sub eax, 0
je 0x417bab
dec eax
je 0x417b97
dec eax
jne 0x417bf7
push esi
lea edi, [esp + 0x598]
call fcn.0041f9f0
test eax, eax
jne 0x417bf7
lea ecx, [esp + 0x5c]
call fcn.00415890
jmp 0x4191e8
lea edx, [esp + 0x594]
push edx
push esi
call fcn.0041f510
test eax, eax
je 0x417b89
jmp 0x417bf7
mov eax, dword [0x4c590c]
cmp dword [eax + 0xb4], 0
lea edx, [esp + 0x594]
jne 0x418f46
lea ecx, [esp + 0x105a4]
push ecx
push edx
push esi
call fcn.0041eaa0
test eax, eax
je 0x417b89
test bl, bl
je 0x417bf7
push 0
push 0
push 0
push 0x73
push esi
call fcn.0041d0f0
test eax, eax
je 0x417b89
mov dword [esi + 0x630], 0
xor eax, eax
mov word [esp + 0x594], ax
cmp dword [esp + 0x48], eax
je 0x417c5d
test bl, bl
jne 0x417c5d
mov eax, dword [esp + 0x18]
add eax, 2
call fcn.00409620
cmp word [eax], 0
jne 0x417c2a
mov dword [esi + 0x270], ebp
mov ebp, esi
jmp 0x418c76
mov ecx, eax
lea esi, [ecx + 2]
nop
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x417c30
mov edx, dword [esp + 0x18]
sub ecx, esi
sar ecx, 1
mov dword [esp + 0x30], ecx
lea ecx, [ecx + ecx + 2]
push ecx
push eax
push edx
call fcn.0048efd0
mov esi, dword [esp + 0x1a510]
add esp, 0xc
mov ebx, dword [esp + 0x18]
mov dword [esi + 0x270], ebp
mov ebp, dword [esp + 0x1a504]
xor edi, edi
cmp word [ebx], 0x7d
jne 0x417d47
mov eax, dword [ebp + 0x48]
cmp eax, edi
je 0x417d47
mov ecx, dword [0x4c590c]
cmp dword [ecx + 0xb4], edi
jne 0x417d47
cmp dword [ebp + 0x264], edi
je 0x417cc0
mov eax, dword [ebp + 0x268]
mov dword [ebp + 0x264], edi
cmp eax, edi
je 0x417cfa
push eax
call fcn.0048f817
add esp, 4
mov dword [ebp + 0x268], edi
jmp 0x417cfa
dec eax
mov dword [ebp + 0x48], eax
mov edi, dword [ebp + eax*4 + 0x4c]
call fcn.0046e990
mov edx, dword [ebp + 0x48]
mov eax, dword [ebp + edx*4 + 0x4c]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
lea esi, [ebp + 0x60]
push 0x2e
push esi
call fcn.004902c4
add esp, 8
test eax, eax
je 0x417cf5
xor ecx, ecx
mov word [eax], cx
jmp 0x417cfa
xor edx, edx
mov word [esi], dx
lea eax, [ebx + 2]
lea ecx, [ecx]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x417d0d
cmp ecx, 9
jne 0x417d12
add eax, 2
jmp 0x417d00
cmp word [eax], 0
mov ebx, eax
mov dword [esp + 0x18], ebx
je 0x418c7a
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x417d25
sub eax, edx
sar eax, 1
mov dword [esp + 0x30], eax
mov dword [ebp + 0x630], 0
jmp 0x417ae0
cmp dword [ebp + 0x264], edi
je 0x417e17
mov eax, dword [0x4c590c]
cmp dword [eax + 0xb4], edi
jne 0x417e17
push 3
push 0x4a76fc
push ebx
call fcn.0048eda7
add esp, 0xc
test eax, eax
je 0x417d90
push 3
push 0x4a7704
push ebx
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x418f50
lea esi, [ebx + 6]
movzx eax, word [esi]
cmp eax, 0x20
je 0x417da0
cmp eax, 9
jne 0x417da5
add esi, 2
jmp 0x417d93
movzx eax, word [esi]
cmp ax, di
je 0x417dc0
cmp eax, 0x7b
jne 0x418f50
cmp word [esi + 2], di
jne 0x418f50
mov eax, dword [ebp + 0x268]
lea edx, [esp + 0x594]
sub edx, eax
nop
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x417dd0
lea ecx, [esp + 0x594]
push 0x2e
push ecx
call fcn.0048f331
mov dx, word [ebx]
mov word [eax + 2], dx
mov eax, dword [ebp + 0x270]
add esp, 8
cmp word [esi], 0x7b
mov dword [esp + 0xa4], eax
sete byte [esp + 0x26]
mov dword [esp + 0x48], edi
jmp 0x418c7a
lea ecx, [esp + 0x26]
push ecx
mov eax, ebx
call fcn.00416f50
add esp, 4
test al, al
je 0x417e5a
lea edx, [esp + 0x594]
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x417e35
mov edx, dword [ebp + 0x270]
mov dword [esp + 0xa4], edx
mov dword [esp + 0x48], edi
jmp 0x418c7a
mov eax, dword [0x4c590c]
cmp dword [eax + 0xb4], edi
jne 0x418024
lea ecx, [esp + 0x26]
push ecx
mov eax, ebx
call fcn.00417010
add esp, 4
cmp eax, edi
je 0x417eb9
lea edx, [esp + 0x594]
sub edx, eax
jmp 0x417e90
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x417e90
mov edx, dword [ebp + 0x270]
mov dword [esp + 0xa4], edx
mov dword [esp + 0x48], 1
jmp 0x418c7a
cmp dword [ebp + 0x48], edi
je 0x418024
mov esi, ebx
movzx eax, word [esi]
test eax, 0xffffff80
jne 0x417ee0
push 0x107
push eax
call fcn.0048f7ae
add esp, 8
cmp eax, edi
jne 0x417ef2
movzx eax, word [esi]
cmp eax, 0x5f
je 0x417ef2
cmp eax, 0x7f
ja 0x417ef2
cmp eax, 0x2e
jne 0x417ef7
add esi, 2
jmp 0x417ec4
cmp esi, ebx
jbe 0x417fa9
mov eax, esi
call fcn.00409620
movzx ecx, word [eax]
cmp ecx, 0x3a
jne 0x417f2a
cmp word [eax + 2], 0x3d
jne 0x417f2a
push edi
push ebx
push ebp
call fcn.0041fb80
test eax, eax
je 0x417b89
jmp 0x418c7a
cmp cx, di
je 0x417f3f
cmp ecx, 0x5b
je 0x417f3f
cmp ecx, 0x7b
jne 0x417fa9
cmp word [eax + 2], di
jne 0x417fa9
mov eax, ebx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x417f44
sub eax, edx
sar eax, 1
cmp word [ebx + eax*2 - 2], 0x7b
sete cl
mov byte [esp + 0x26], cl
test cl, cl
je 0x417f6c
dec eax
mov esi, ebx
call fcn.00413920
lea edx, [esp + 0x594]
mov eax, ebx
sub edx, ebx
jmp 0x417f80
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
cmp cx, di
jne 0x417f80
mov eax, dword [ebp + 0x270]
mov dword [esp + 0xa4], eax
mov dword [esp + 0x48], 2
jmp 0x418c7a
push 6
push 0x4a47d8
push ebx
call fcn.0048eda7
add esp, 0xc
test eax, eax
jne 0x417fe4
movzx eax, word [ebx + 0xc]
cmp eax, 0x20
je 0x417fcb
cmp eax, 9
jne 0x417fe4
push 1
lea ecx, [ebx + 0xe]
push ecx
push ebp
call fcn.0041fb80
test eax, eax
je 0x417b89
jmp 0x418c7a
cmp word [ebx], 0x23
jne 0x418f5a
mov esi, dword [ebp + 0x270]
push ebx
push ebp
call fcn.00419600
cmp eax, edi
je 0x417b89
cmp eax, 3
jne 0x418f5a
mov edx, dword [esp + 0xb4]
mov dword [ebp + 0x26c], edx
mov dword [ebp + 0x270], esi
jmp 0x418c7a
xor ebp, ebp
cmp word [ebx], 0x3a
mov dword [esp + 0x4c], ebp
mov dword [esp + 0xac], ebp
mov dword [esp + 0x28], ebp
jne 0x4180c2
movzx ecx, word [ebx + 2]
lea eax, [ebx + 2]
cmp cx, bp
je 0x4180c2
cmp ecx, 0x3a
je 0x418071
push 0x3a
push eax
mov dword [esp + 0xb4], eax
call fcn.0048f331
add esp, 8
cmp eax, ebp
jne 0x41806c
mov dword [esp + 0x4c], ebp
jmp 0x4180c2
add eax, 2
jmp 0x41807a
cmp word [ebx + 4], bp
lea eax, [ebx + 4]
je 0x4180c2
mov dword [esp + 0x4c], eax
cmp eax, ebp
je 0x4180c2
mov edi, eax
movzx eax, word [edi]
test ax, ax
je 0x4180b2
mov cx, word [0x4c5904]
cmp ax, cx
je 0x418136
cmp ax, 0x3a
je 0x418136
movzx eax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x418093
test ebp, ebp
jne 0x418273
mov ebx, dword [esp + 0x18]
mov dword [esp + 0x4c], ebp
push 0x4a75a4
push ebx
call fcn.0048f358
mov ebp, eax
add esp, 8
mov dword [esp + 0x28], ebp
test ebp, ebp
je 0x41893f
mov ecx, dword [esp + 0x18]
cmp ebp, ecx
jne 0x4180f4
cmp word [ebp + 4], 0x3a
jne 0x4180f4
add ebp, 2
mov dword [esp + 0x28], ebp
mov esi, ebp
cmp ebp, ecx
jbe 0x418114
lea ebx, [ebx]
movzx eax, word [esi]
cmp eax, 0x20
je 0x41810d
cmp eax, 9
jne 0x418114
sub esi, 2
cmp esi, ecx
ja 0x418100
movzx edi, word [esi]
xor eax, eax
mov word [esi], ax
lea esp, [esp]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x418131
cmp eax, 9
jne 0x4181f4
add ecx, 2
jmp 0x418120
movzx eax, word [edi]
test ax, ax
je 0x4180b2
lea esi, [edi + 2]
cmp eax, 0x3a
jne 0x418163
cmp word [esi], ax
jne 0x4181ec
mov ebp, edi
mov edi, esi
mov dword [esp + 0x28], ebp
add edi, 2
jmp 0x418084
movzx eax, word [esi]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x418175.99
movzx eax, byte [eax + 0x4192bc]
jmp dword [eax*4 + 0x41929c]
mov ecx, 7
jmp 0x4181b7
mov edx, 8
mov word [esi], dx
jmp case.0x418175.99
mov eax, 0xc
mov word [esi], ax
jmp case.0x418175.99
mov ecx, 0xa
jmp 0x4181b7
mov edx, 0xd
mov word [esi], dx
jmp case.0x418175.99
mov eax, 9
mov word [esi], ax
jmp case.0x418175.99
mov ecx, 0xb
mov word [esi], cx
mov eax, esi
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4181c0
sub eax, edx
sar eax, 1
lea edx, [eax + eax + 2]
push edx
push esi
push edi
call fcn.0048efd0
add esp, 0xc
cmp word [edi], 0x3a
jne 0x4181ec
cmp word [esi], 0x3a
jne 0x4181ec
mov edi, esi
add edi, 2
jmp 0x418084
push 0
push ecx
xor ebx, ebx
call fcn.0040ba50
add esp, 8
mov dword [esp + 0xcc], eax
test eax, eax
je 0x418262
cmp eax, 4
jne 0x418268
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], vtable.TextMem.0
test eax, eax
je 0x41823d
cmp byte [esp + 0x98], bl
je 0x418236
push eax
call fcn.0048f817
add esp, 4
mov dword [esp + 0x90], ebx
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x5c], vtable.TextStream.0
test eax, eax
je 0x4191e8
push eax
call fcn.0048f817
add esp, 4
jmp 0x4191e8
xor ebp, ebp
mov dword [esp + 0x28], ebp
mov word [esi], di
test ebp, ebp
je 0x41893f
mov ebp, dword [esp + 0x18]
cmp dword [esp + 0x28], ebp
jbe 0x418943
mov ecx, dword [0x4c590c]
cmp dword [ecx + 0xb4], 0
jne 0x418f64
mov ebx, dword [esp + 0x1a504]
mov eax, dword [ebx + 4]
test eax, eax
je 0x4182ab
cmp byte [eax], 0x1a
je 0x418fd0
mov edi, dword [esp + 0x28]
xor edx, edx
mov word [edi], dx
add edi, 4
mov dword [esp + 0x28], edi
cmp dword [esp + 0x4c], edx
jne 0x4186fd
cmp word [edi], dx
je 0x41830e
mov edx, edi
lea esp, [esp]
movzx eax, word [edx]
cmp eax, 0x20
je 0x4182dd
cmp eax, 9
jne 0x4182e2
add edx, 2
jmp 0x4182d0
mov eax, edx
sub eax, edi
sar eax, 1
je 0x41830e
mov eax, edx
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4182f0
sub eax, esi
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
push edx
push edi
call fcn.0048efd0
add esp, 0xc
mov eax, dword [esp + 0x28]
cmp word [eax], 0
mov ebp, eax
je 0x4186f5
movzx edi, word [eax + 2]
test di, di
je 0x41848a
mov esi, eax
lea ebx, [eax + 2]
xor dl, dl
mov eax, edi
mov edi, dword [esp + 0xb8]
xor cl, cl
lea ecx, [ecx]
cmp ax, 0x20
je case.0x418360.34
movzx eax, word [esi]
add eax, 0xffffffdf
cmp eax, 0x5d
ja case.0x418360.34
movzx eax, byte [eax + 0x4192f4]
jmp dword [eax*4 + 0x4192d4]
mov cl, 1
jmp case.0x418360.36
mov dl, 1
jmp case.0x418360.36
test cl, cl
jne 0x418382
test dl, dl
jne 0x418386
or edi, 1
jmp case.0x418360.36
test dl, dl
je 0x41838d
or byte [esp + 0x17], 4
xor dl, dl
test cl, cl
je case.0x418360.36
or byte [esp + 0x17], 8
jmp 0x4183ff
test cl, cl
jne 0x4183a5
test dl, dl
jne 0x4183a9
or edi, 2
jmp case.0x418360.36
test dl, dl
je 0x4183b0
or byte [esp + 0x17], 1
xor dl, dl
test cl, cl
je case.0x418360.36
or byte [esp + 0x17], 2
jmp 0x4183ff
test cl, cl
jne 0x4183c8
test dl, dl
jne 0x4183cc
or edi, 4
jmp case.0x418360.36
test dl, dl
je 0x4183d3
or byte [esp + 0x17], 0x10
xor dl, dl
test cl, cl
je case.0x418360.36
or byte [esp + 0x17], 0x20
jmp 0x4183ff
test cl, cl
jne 0x4183eb
test dl, dl
jne 0x4183ef
or edi, 8
jmp case.0x418360.36
test dl, dl
je 0x4183f6
or byte [esp + 0x17], 0x40
xor dl, dl
test cl, cl
je case.0x418360.36
or byte [esp + 0x17], 0x80
xor cl, cl
mov esi, ebx
movzx eax, word [esi + 2]
lea ebx, [esi + 2]
test ax, ax
jne 0x418340
push 0
mov dword [esp + 0xbc], edi
mov ebp, esi
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push 0
xor ecx, ecx
mov eax, esi
call fcn.00412980
add esp, 8
mov byte [esp + 0x1f], al
test al, al
je 0x4186ee
mov eax, dword [esp + 0x18]
cmp word [eax], 0
je case.0x418483.34
movzx esi, word [eax + 2]
xor bl, bl
xor dl, dl
test si, si
je case.0x418483.34
lea edi, [eax + 2]
mov ecx, esi
cmp cx, 0x20
je case.0x418483.34
movzx ecx, word [eax]
add ecx, 0xffffffdf
cmp ecx, 0x5d
ja case.0x418483.34
movzx ecx, byte [ecx + 0x419374]
jmp dword [ecx*4 + 0x419354]
mov byte [esp + 0x1f], 0xff
jmp 0x41843f
mov dl, 1
jmp case.0x418483.36
mov bl, 1
jmp case.0x418483.36
test dl, dl
jne 0x4184b1
test bl, bl
jne 0x4184b5
or dword [esp + 0x44], 1
jmp case.0x418483.36
test bl, bl
je 0x4184bc
or byte [esp + 0x16], 4
xor bl, bl
test dl, dl
je case.0x418483.36
or byte [esp + 0x16], 8
jmp 0x418534
test dl, dl
jne 0x4184d6
test bl, bl
jne 0x4184da
or dword [esp + 0x44], 2
jmp case.0x418483.36
test bl, bl
je 0x4184e1
or byte [esp + 0x16], 1
xor bl, bl
test dl, dl
je case.0x418483.36
or byte [esp + 0x16], 2
jmp 0x418534
test dl, dl
jne 0x4184fb
test bl, bl
jne 0x4184ff
or dword [esp + 0x44], 4
jmp case.0x418483.36
test bl, bl
je 0x418506
or byte [esp + 0x16], 0x10
xor bl, bl
test dl, dl
je case.0x418483.36
or byte [esp + 0x16], 0x20
jmp 0x418534
test dl, dl
jne 0x418520
test bl, bl
jne 0x418524
or dword [esp + 0x44], 8
jmp case.0x418483.36
test bl, bl
je 0x41852b
or byte [esp + 0x16], 0x40
xor bl, bl
test dl, dl
je case.0x418483.36
or byte [esp + 0x16], 0x80
xor dl, dl
mov eax, edi
movzx ecx, word [eax + 2]
lea edi, [eax + 2]
test cx, cx
jne 0x418463
push 0
mov esi, eax
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push 0
xor ecx, ecx
mov eax, esi
call fcn.00412980
push 0x4a5724
push esi
mov byte [esp + 0x3f], al
call fcn.0048f358
mov dl, byte [esp + 0x3f]
add esp, 0x10
test eax, eax
setne bl
dec dl
cmp dl, 5
ja 0x418587
cmp byte [esp + 0x2f], 3
jne 0x418591
mov al, byte [esp + 0x2f]
add al, 0x66
cmp al, 5
ja 0x418595
mov cl, 1
jmp 0x418597
xor cl, cl
mov al, byte [esp + 0x1f]
lea edx, [eax - 1]
cmp dl, 5
ja 0x4185a7
cmp al, 3
jne 0x4185ad
add al, 0x66
cmp al, 5
ja 0x4185b4
mov byte [esp + 0x37], 1
jmp 0x4185b9
mov byte [esp + 0x37], 0
test cl, cl
jne 0x4185c8
mov byte [esp + 0x41], 1
cmp byte [esp + 0x37], cl
jne 0x4185cd
mov byte [esp + 0x41], 0
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4185d2
sub eax, edx
sar eax, 1
cmp eax, 1
jne 0x4185f9
movzx eax, word [esi]
push eax
call dword [sym.imp.USER32.dll_IsCharUpperW]
mov ecx, 0x4a77f4
test eax, eax
jne 0x4185fe
mov ecx, 0x4a2868
mov eax, 0x4a2868
test bl, bl
jne 0x41860c
mov eax, 0x4a7430
mov edx, dword [esp + 0x18]
push edx
push ecx
push eax
push 0x4a77f8
mov esi, 0x20
lea edi, [esp + 0x15c]
call fcn.00474fc0
push 0x1f
lea eax, [esp + 0x120]
push ebp
push eax
call fcn.00491254
mov esi, dword [esp + 0x44]
add esp, 0x1c
push 7
lea edx, [esp + 0xe0]
xor ecx, ecx
push esi
push edx
mov word [esp + 0x156], cx
call fcn.00491254
xor eax, eax
sub ebp, esi
mov word [esp + 0xf6], ax
mov eax, ebp
sar eax, 1
add esp, 0xc
cmp eax, 8
jae 0x41867c
xor ecx, ecx
mov word [esp + eax*2 + 0xdc], cx
cmp word [esp + 0xdc], 0
mov dword [esp + 0xb0], 0
jne case.0x4186ae.14
movzx eax, byte [esp + 0x1f]
add eax, 0xfffffff3
cmp eax, 0x52
ja case.0x4186ae.14
movzx edx, byte [eax + 0x4193e4]
jmp dword [edx*4 + 0x4193d4]
mov eax, dword [esp + 0x28]
mov ebx, 0x4a5be4
call fcn.004095d0
test eax, eax
jne case.0x4186ae.19
jmp case.0x4186ae.14
lea eax, [esp + 0x10c]
push 0x4a40c4
push eax
call fcn.0048e559
add esp, 8
test eax, eax
jne case.0x4186ae.14
mov byte [esp + 0x1f], 0
mov ebx, dword [esp + 0x1a504]
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0x28]
cmp byte [ebx + 0x274], 0
je 0x41872c
xor esi, esi
push esi
push 0xff
push esi
push 0x67
push ebx
mov byte [ebx + 0x274], 0
call fcn.0041d0f0
test eax, eax
je 0x418fe0
mov dword [ebx + 0x630], esi
push 1
mov eax, ebp
mov esi, ebx
call fcn.0041ac70
test eax, eax
je 0x419032
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x418804
cmp word [ecx], 0
je 0x419088
mov eax, dword [esp + 0xac]
test eax, eax
jne 0x418765
mov eax, 0x4a2868
mov edx, dword [esp + 0xc8]
push 0
push edx
mov edx, dword [ebx + 0x14]
push edi
push eax
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, dword [ebx + 0x14]
mov edx, dword [eax + 4]
mov dword [esp + 0xc0], esp
push edx
mov edi, ecx
call fcn.0040cc10
add esp, 0x18
test eax, eax
je 0x419032
mov eax, dword [esp + 0x28]
cmp word [eax], 0
je case.0x4186ae.14
mov ecx, dword [0x4caf0c]
mov edx, dword [0x4caf10]
mov eax, dword [ecx + edx*4 - 4]
cmp byte [eax + 0x2d], 0
je 0x4187e2
mov ecx, dword [esp + 0x28]
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
mov ecx, dword [esp + 0x1a520]
call fcn.0041adb0
test eax, eax
je 0x417b89
mov edx, dword [esp + 0x1a504]
push 0
push 0
push 0
push 0x67
push edx
call fcn.0041d0f0
test eax, eax
je 0x417b89
jmp case.0x4186ae.14
xor esi, esi
cmp word [edi], si
je 0x418850
push esi
mov esi, edi
call fcn.004097f0
movzx esi, ax
add esp, 4
test si, si
jne 0x41883a
push 0
push 0
push 0
push 0
push 0
push 0
push edi
mov ecx, ebx
call fcn.0041adb0
test eax, eax
je 0x417b89
push 0
push 0
push 0
push 0x67
push ebx
call fcn.0041d0f0
test eax, eax
je 0x417b89
lea eax, [esp + 0x43]
push eax
lea ecx, [esp + 0xc8]
push ecx
push ebp
call fcn.0040c1b0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4188cc
test si, si
je 0x41887a
mov word [edi + 2], si
jmp case.0x4186ae.14
mov eax, dword [edi + 0x20]
test eax, eax
je 0x418897
mov ecx, dword [0x4c9680]
cmp dword [eax + 4], ecx
je 0x419095
mov eax, dword [eax + 8]
test eax, eax
jne 0x418887
mov edx, dword [esp + 0xc4]
mov eax, dword [ebx + 0x14]
push edx
call fcn.0040b930
test eax, eax
je 0x4190ac
cmp byte [esp + 0x43], 0
jne 0x4188c3
cmp byte [0x4c9d07], 0
je case.0x4186ae.14
mov byte [edi + 0x16], 1
jmp case.0x4186ae.14
mov eax, dword [esp + 0x1a504]
mov eax, dword [eax + 0x14]
mov ecx, dword [esp + 0xc4]
mov edx, dword [eax + 4]
push ecx
push edx
push esi
push eax
xor bl, bl
call fcn.0040b230
add esp, 0x10
test eax, eax
jne case.0x4186ae.14
cmp dword [esp + 0xcc], 3
jne 0x417b89
push ebp
push 0x4a7888
mov esi, 0x204
lea edi, [esp + 0x194]
call fcn.00474fc0
fldz
add esp, 8
push 0
sub esp, 8
fstp qword [esp]
push 0
mov eax, edi
push 0x10000
push eax
call fcn.00479a00
add esp, 0x18
jmp case.0x4186ae.14
mov ebp, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
cmp word [ebp + eax*2 - 2], 0x3a
jne 0x418bc7
cmp eax, 1
je 0x4190b9
mov edi, dword [esp + 0x18]
movzx eax, word [edi]
xor ebp, ebp
mov ecx, edi
cmp ax, bp
je 0x4189b6
mov dx, word [0x4c58fc]
mov si, word [0x4c5904]
lea ebx, [ebx]
cmp ax, 0x20
je 0x418bc9
cmp ax, 9
je 0x418bc9
cmp ax, dx
je 0x418bc9
cmp ax, si
je 0x418bc9
movzx eax, word [ecx + 2]
add ecx, 2
cmp ax, bp
jne 0x418980
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x30]
cmp word [edi + eax*2 - 4], 0x3a
jne 0x4189cf
cmp eax, 2
ja 0x418bc9
mov edi, dword [esp + 0x18]
dec eax
xor ecx, ecx
mov word [edi + eax*2], cx
cmp word [edi], bp
je 0x418acc
cmp eax, 0xffffffff
jne 0x4189ff
mov eax, edi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x4189f0
sub eax, edx
sar eax, 1
lea eax, [edi + eax*2 - 2]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x418a10
cmp ecx, 9
jne 0x418a19
cmp eax, edi
je 0x418a21
sub eax, 2
jmp 0x418a03
xor edx, edx
mov word [eax + 2], dx
jmp 0x418a33
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x418a2e
cmp ecx, 9
jne 0x418a33
xor ecx, ecx
mov word [eax], cx
cmp word [edi], bp
je 0x418acc
mov ebx, dword [esp + 0x1a504]
mov esi, dword [ebx + 0x10]
cmp esi, ebp
je 0x418a68
lea ebx, [ebx]
mov edx, dword [esi + 4]
push edi
push edx
call fcn.0048e559
add esp, 8
test eax, eax
je 0x418ab7
mov esi, dword [esi + 0x10]
cmp esi, ebp
jne 0x418a50
cmp word [edi], bp
je 0x418b07
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x418a76
sub eax, edx
sar eax, 1
mov ebx, eax
lea edi, [ebx + ebx]
lea eax, [edi + 2]
call fcn.004723e0
mov esi, eax
cmp esi, ebp
je 0x418ed8
cmp ebx, ebp
je 0x418aaf
mov eax, dword [esp + 0x18]
push edi
push eax
push esi
call fcn.004968e0
add esp, 0xc
xor ecx, ecx
mov word [edi + esi], cx
jmp 0x418b0c
push edi
push 0x4a7eb0
mov ecx, ebx
call fcn.0042ece0
cmp eax, ebp
jne case.0x4186ae.14
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], vtable.TextMem.0
cmp eax, ebp
je 0x418af9
cmp byte [esp + 0x98], 0
je 0x418af2
push eax
call fcn.0048f817
add esp, 4
mov dword [esp + 0x90], ebp
mov eax, dword [esp + 0x8c]
cmp eax, ebp
jmp 0x41906c
mov esi, 0x4a2868
cmp dword [0x4cb5d8], ebp
jne 0x418b26
call fcn.00472450
mov dword [0x4cb5d8], eax
cmp eax, ebp
je 0x418bb1
mov ecx, dword [0x4cb5dc]
cmp dword [ecx + 8], 0x14
jae 0x418b44
call fcn.00472450
mov ecx, dword [0x4cb5dc]
mov dword [ecx + 0xc], eax
cmp eax, ebp
je 0x418bb1
mov eax, dword [ecx + 4]
add dword [ecx + 8], 0xffffffec
lea edx, [eax + 0x14]
mov dword [0x4cb5e0], eax
mov dword [ecx + 4], edx
cmp eax, ebp
je 0x418bb1
mov ecx, dword [esp + 0x1a504]
mov dword [eax], vtable.Label.0
mov dword [eax + 4], esi
mov dword [eax + 8], ebp
mov dword [eax + 0xc], ebp
mov dword [eax + 0x10], ebp
mov edx, dword [ecx + 0x14]
mov dword [eax + 0xc], edx
mov edi, eax
cmp dword [ecx + 0x10], ebp
je 0x418b83
mov ecx, dword [ecx + 0x14]
mov ebx, dword [esp + 0x1a504]
push 0x4a7ed4
mov dword [ecx + 0x10], eax
push esi
mov dword [ebx + 0x14], eax
call fcn.0048e559
add esp, 8
test eax, eax
jne case.0x4186ae.14
mov dword [ebx + 0xa78], edi
jmp case.0x4186ae.14
mov ecx, dword [esp + 0x1a504]
push 0x4a2868
push 0x4a55e8
jmp 0x418abf
xor ebp, ebp
mov ebx, dword [esp + 0x18]
cmp word [ebx], 0x23
mov edi, dword [esp + 0x1a504]
jne 0x418c0b
mov esi, dword [edi + 0x270]
push ebx
push edi
call fcn.00419600
cmp eax, ebp
je 0x418acc
cmp eax, 3
jne 0x418c0b
mov edx, dword [esp + 0xb4]
mov dword [edi + 0x26c], edx
mov dword [edi + 0x270], esi
mov ebp, edi
jmp 0x418c76
movzx eax, word [ebx]
cmp eax, 0x7b
je 0x418c30
cmp eax, 0x7d
je 0x418c30
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebx
mov ecx, edi
call fcn.0041adb0
test eax, eax
je 0x418acc
jmp case.0x4186ae.14
cmp eax, 0x7b
push ebp
setne al
push ebp
add al, 0x73
movzx ecx, al
push ebp
push ecx
push edi
call fcn.0041d0f0
test eax, eax
je 0x418acc
lea eax, [ebx + 2]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x418c5d
cmp ecx, 9
jne 0x418c62
add eax, 2
jmp 0x418c50
mov dword [esp + 0x18], eax
cmp word [eax], bp
jne 0x418df0
mov ebp, dword [esp + 0x1a504]
mov ebx, dword [esp + 0x18]
mov dl, byte [esp + 0x1f]
test dl, dl
je case.0x418ca6.4
mov eax, dword [esp + 0xb0]
inc eax
mov dword [esp + 0xb0], eax
dec eax
cmp eax, 9
ja case.0x418ca6.4
movzx eax, byte [eax + 0x41944c]
jmp dword [eax*4 + 0x419438]
lea ecx, [esp + 0x14c]
push ecx
push 0x4a79b0
push ebx
call fcn.0048e963
add esp, 0xc
mov dword [esp + 0x30], eax
jmp 0x418024
mov eax, 0x4a79bc
mov edx, ebx
sub edx, eax
xor esi, esi
jmp 0x418ce0
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
cmp cx, si
jne 0x418ce0
cmp byte [esp + 0x37], 0
push esi
setne al
push 1
add al, 0xc1
lea edx, [esp + 0x20]
movzx ecx, al
push edx
push ecx
push ebp
call fcn.0041d0f0
cmp byte [esp + 0x41], 0
je 0x418d3c
lea edx, [esp + 0x10c]
push edx
push 0x4a79c4
push ebx
call fcn.0048e963
add esp, 0xc
mov dword [esp + 0x30], eax
mov dword [esp + 0xb0], 9
jmp 0x418024
mov dl, byte [esp + 0x1f]
jmp 0x418d44
xor esi, esi
mov ecx, 0x4a2868
cmp dl, 0x12
je 0x418d58
cmp dl, 0xa3
jbe 0x418d78
cmp dl, 0xa5
ja 0x418d78
movzx eax, byte [esp + 0x2f]
sub eax, 0x11
je 0x418d73
sub eax, 0x91
je 0x418d73
dec eax
jne 0x418d78
mov ecx, 0x4a7a10
jmp 0x418d78
mov ecx, 0x4a79f8
lea eax, [esp + 0x10c]
push eax
lea edx, [esp + 0xe0]
push edx
push ecx
push str.Blind_s_s_s_DownR
push ebx
mov dword [ebp + 0x630], esi
call fcn.0048e963
add esp, 0x14
push esi
push 1
lea eax, [esp + 0x20]
push eax
push 0x41
push ebp
call fcn.0041d0f0
test eax, eax
je 0x4190c4
push esi
push esi
push esi
push 0x67
push ebp
call fcn.0041d0f0
lea ecx, [esp + 0x14c]
push ecx
push 0x4a7a54
push ebx
mov dword [ebp + 0x630], esi
call fcn.0048e963
add esp, 0xc
mov dword [esp + 0x30], eax
mov dword [esp + 0xb0], 2
jmp 0x418024
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bp
jne 0x418df3
mov ebx, dword [esp + 0x18]
sub eax, edx
mov edx, dword [esp + 0x1a504]
sar eax, 1
mov dword [edx + 0x630], ebp
mov dword [esp + 0x30], eax
mov ebp, edx
jmp 0x417ae0
mov eax, 0x4a79bc
mov edx, ebx
sub edx, eax
jmp 0x418e30
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x418e30
cmp byte [esp + 0x37], cl
push 0
setne cl
push 1
add cl, 0xc1
lea eax, [esp + 0x20]
movzx edx, cl
push eax
push edx
push ebp
call fcn.0041d0f0
lea eax, [esp + 0x10c]
push eax
push 0x4a7a64
push ebx
call fcn.0048e963
add esp, 0xc
push 0
push 1
lea ecx, [esp + 0x20]
push ecx
push 0x41
push ebp
call fcn.0041d0f0
push 0
push 0
push 0
push 0x67
push ebp
call fcn.0041d0f0
mov byte [esp + 0x1f], 0
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x38]
mov ebp, dword [esp + 0x1a504]
lea ecx, [esp + 0x859c]
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], edx
cmp eax, ecx
jne 0x418ec8
lea edx, [esp + 0x124e4]
mov dword [esp + 0x20], edx
jmp 0x417243
lea eax, [esp + 0x859c]
mov dword [esp + 0x20], eax
jmp 0x417243
mov ecx, dword [esp + 0x18]
push ecx
push 0x4a55e8
mov ecx, 0x4cb680
call fcn.0042ece0
jmp 0x418acc
push edi
mov ecx, dword [esp + 0x1a508]
push 0x4a75b8
call fcn.0042ece0
lea ecx, [esp + 0x5c]
mov esi, eax
call fcn.00415890
mov eax, esi
jmp 0x4191ea
lea edx, [esp + 0x594]
push edx
push 0x4a7680
mov ecx, esi
jmp 0x418efe
cmp dword [esi + 0x264], 0
mov eax, 0x4a7680
jne 0x418f39
mov eax, 0x4a7698
lea ecx, [esp + 0x594]
push ecx
push eax
mov ecx, esi
jmp 0x418efe
push edx
push 0x4a7638
mov ecx, esi
jmp 0x418efe
push ebx
push 0x4a7710
mov ecx, ebp
jmp 0x418efe
push ebx
push 0x4a7698
mov ecx, ebp
jmp 0x418efe
push ebp
push 0x4a7758
mov ecx, dword [esp + 0x1a50c]
call fcn.0042ece0
mov esi, eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], vtable.TextMem.0
test eax, eax
je 0x418fa9
cmp byte [esp + 0x98], 0
je 0x418f9e
push eax
call fcn.0048f817
add esp, 4
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x5c], vtable.TextStream.0
test eax, eax
je 0x418f0e
push eax
call fcn.0048f817
add esp, 4
mov eax, esi
jmp 0x4191ea
push ebp
mov dword [ebx + 0x630], eax
push 0x4a77c4
mov ecx, ebx
jmp 0x418f71
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], vtable.TextMem.0
cmp eax, esi
je 0x41900d
cmp byte [esp + 0x98], 0
je 0x419006
push eax
call fcn.0048f817
add esp, 4
mov dword [esp + 0x90], esi
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x5c], vtable.TextStream.0
cmp eax, esi
je 0x4191e8
push eax
call fcn.0048f817
add esp, 4
jmp 0x4191e8
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], vtable.TextMem.0
test eax, eax
je 0x419063
cmp byte [esp + 0x98], 0
je 0x419058
push eax
call fcn.0048f817
add esp, 4
mov dword [esp + 0x90], 0
mov eax, dword [esp + 0x8c]
test eax, eax
mov dword [esp + 0x5c], vtable.TextStream.0
je 0x4191e8
push eax
call fcn.0048f817
add esp, 4
jmp 0x4191e8
push ebp
push 0x4a7808
mov ecx, ebx
jmp 0x418f71
push ebp
mov dword [ebx + 0x630], 0
push 0x4a7860
mov ecx, ebx
jmp 0x418efe
push ebp
push 0x4a55e8
mov ecx, ebx
jmp 0x418efe
push ebp
push 0x4a7950
jmp 0x418f6a
mov eax, dword [esp + 0x90]
mov dword [esp + 0x5c], vtable.TextMem.0
cmp eax, esi
je 0x4190f1
cmp byte [esp + 0x98], 0
je 0x4190ea
push eax
call fcn.0048f817
add esp, 4
mov dword [esp + 0x90], esi
mov eax, dword [esp + 0x8c]
cmp eax, esi
jmp 0x41906c
mov ecx, dword [esp + 0x1a504]
push ebx
push 0x4a761c
call fcn.0042ece0
lea ecx, [esp + 0x5c]
mov esi, eax
call fcn.00415890
mov eax, esi
jmp 0x4191ea
push ebx
jmp 0x418ef2
cmp word [esp + 0x594], 0
je 0x419198
cmp dword [esp + 0x48], 0
mov ecx, dword [esp + 0xa4]
mov esi, dword [ebp + 0x270]
mov dword [ebp + 0x270], ecx
je 0x41916f
cmp byte [esp + 0x26], 0
mov eax, 0x4a7a84
jne 0x41915f
mov eax, 0x4a7680
lea edx, [esp + 0x594]
push edx
push eax
mov ecx, ebp
jmp 0x418efe
push 0
push 0
push 0
push 0
push 0
push 3
lea eax, [esp + 0x5ac]
push eax
mov ecx, ebp
call fcn.0041adb0
test eax, eax
je 0x417b89
mov dword [ebp + 0x270], esi
cmp dword [ebp + 0x48], 0
je 0x4191b8
cmp dword [esp + 0xb4], 0
jne 0x4191b8
lea ecx, [ebp + 0x60]
push ecx
push 0x4a7a84
mov ecx, ebp
jmp 0x418efe
inc dword [ebp + 0x270]
lea ecx, [esp + 0x5c]
call fcn.00415890
mov eax, 1
jmp 0x4191ea
fldz
push 0
sub esp, 8
fstp qword [esp]
push ebx
push 0
push 0x4a74f0
call fcn.00479a00
add esp, 0x18
xor eax, eax
mov ecx, dword [esp + 0x1a4f4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1a4f0
ret 4