Function at 0x41f800
Capabilities:
Get keyboard layout

Disassembly:
mov eax, 0x1a178
call fcn.004a7dd0
mov eax, dword [esp + 0x1a180]
xor ecx, ecx
push ebx
mov ebx, dword [esp + 0x1a180]
lea edx, [esp + 0x224]
mov word [esp + 0x822c], cx
mov dword [esp + 8], edx
xor edx, edx
lea ecx, [esp + 0x12174]
push ebp
mov dword [esp + 0x30], ecx
xor ecx, ecx
mov word [esp + 0x3e], dx
mov edx, dword [esp + 0x1a18c]
push esi
push edi
mov byte [esp + 0x1a], 0
mov word [esp + 0x4c], cx
mov dword [ebx + 0x270], edx
mov dword [esp + 0x60], ecx
test eax, eax
je 0x41f88b
push 1
push 0x4000
lea ecx, [esp + 0x238]
push ecx
push eax
call fcn.0047dba0
test eax, eax
jne 0x41f9bf
xor edx, edx
mov word [esp + 0x230], dx
mov dword [esp + 0x1c], 0xffffffff
push 2
lea eax, [esp + 0x234]
push 0x4b651c
push eax
call fcn.0049c305
add esp, 0xc
test eax, eax
sete al
mov byte [esp + 0x23], al
test al, al
je 0x41f8c5
xor ecx, ecx
mov word [esp + 0x230], cx
mov dword [esp + 0x1c], ecx
cmp dword [esp + 0x1c], 0xffffffff
je 0x421c09
mov edx, dword [esp + 0x60]
mov esi, dword [esp + 0x14]
push 0xc
inc edx
push 0x4b6524
xor edi, edi
push esi
mov dword [ebx + 0x274], edx
mov dword [ebx + 0x634], edi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x41f90a
push esi
push ebx
call fcn.004220a0
test eax, eax
je 0x421502
mov byte [esp + 0x68], 0
mov dword [esp + 0x24], edi
mov ebx, dword [esp + 0x38]
inc dword [esp + 0x60]
mov esi, dword [esp + 0x24]
test ebx, ebx
je 0x41fb44
mov eax, dword [esp + 0x1a190]
mov ecx, esi
mov edx, ebx
call fcn.00421ec0
mov ebp, eax
mov dword [esp + 0x64], ebp
test ebp, ebp
je 0x41fb4b
cmp ebp, 0xffffffff
je 0x41fb4b
test esi, esi
jne 0x41fb4b
push 2
push 0x4b6540
push ebx
call fcn.0049c305
add esp, 0xc
test eax, eax
jne 0x41fb60
cmp byte [esp + 0x23], al
jne 0x41f989
mov eax, 0x3a
cmp word [ebx + 4], ax
jne 0x41f989
cmp word [ebx + 6], ax
je 0x41fb6b
lea eax, [ebp + ebp - 2]
push eax
lea ecx, [ebx + 4]
push ecx
push ebx
mov byte [esp + 0x2f], 0
call fcn.0049ad10
add esp, 0xc
lea eax, [ebp - 2]
mov edi, ebx
call fcn.0041a280
cmp word [ebx], 0
mov ebp, eax
mov dword [esp + 0x64], ebp
je 0x41f913
jmp 0x41fb6b
cmp word [esp + eax*2 + 0x22e], 0xa
jne 0x41f9cb
dec eax
xor ecx, ecx
mov word [esp + eax*2 + 0x230], cx
or eax, 0xffffffff
lea edi, [esp + 0x230]
call fcn.0041a280
mov esi, edi
call fcn.0041a2f0
mov edx, dword [0x4d54c4]
push edx
mov ebp, eax
mov eax, edi
push 0x4d54d0
push eax
call fcn.0049c305
add esp, 0xc
test eax, eax
jne 0x41fa1b
xor ecx, ecx
mov word [esp + 0x230], cx
mov dword [esp + 0x1c], ecx
jmp 0x41f893
lea edx, [esp + 0x230]
push 0x4d54d0
push edx
call fcn.0049b9f3
mov ebx, eax
add esp, 8
test ebx, ebx
je 0x41fb34
lea ebx, [ebx]
lea eax, [ebx - 2]
lea ecx, [esp + 0x230]
cmp eax, ecx
jb 0x41fb01
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x41fb1b
cmp ecx, 9
je 0x41fb1b
lea edx, [esp + 0x230]
cmp eax, edx
mov dx, word [0x4d5a40]
mov ecx, eax
jbe 0x41fa99
jmp 0x41fa80
cmp word [ecx], dx
jne 0x41fa99
cmp word [ecx - 2], dx
jne 0x41fa99
sub ecx, 4
lea esi, [esp + 0x230]
cmp ecx, esi
ja 0x41fa80
lea esi, [esp + 0x230]
cmp ecx, esi
jb 0x41fad0
cmp word [ecx], dx
jne 0x41fad0
lea esi, [eax + 2]
mov ecx, esi
lea edi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x41fab1
sub ecx, edi
sar ecx, 1
lea ecx, [ecx + ecx + 2]
push ecx
push esi
push eax
call fcn.0049ad10
add esp, 0xc
dec ebp
mov edx, dword [0x4d54c4]
lea eax, [ebx + edx*2]
push 0x4d54d0
push eax
call fcn.0049b9f3
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x41fa40
mov ebx, dword [esp + 0x1a18c]
mov dword [esp + 0x1c], ebp
jmp 0x41f893
mov ebx, dword [esp + 0x1a18c]
xor eax, eax
mov word [esp + 0x230], ax
mov dword [esp + 0x1c], eax
jmp 0x41f893
xor ecx, ecx
lea edx, [esp + 0x230]
mov word [eax], cx
sub eax, edx
sar eax, 1
mov esi, edx
call fcn.0041a2f0
mov ebp, eax
mov ebx, dword [esp + 0x1a18c]
mov dword [esp + 0x1c], ebp
jmp 0x41f893
or ebp, 0xffffffff
mov dword [esp + 0x64], ebp
cmp byte [esp + 0x23], 0
je 0x41fb89
cmp ebp, 0xffffffff
jne 0x41f913
jmp 0x420338
cmp byte [esp + 0x23], 0
jne 0x41f913
push 2
push 0x4b651c
push ebx
call fcn.0049c305
add esp, 0xc
test eax, eax
jne 0x41fb4b
mov byte [esp + 0x23], 1
jmp 0x41f913
test esi, esi
jne 0x4200fe
cmp ebp, 0xffffffff
je 0x41fc06
cmp word [ebx], 0x28
jne 0x41fc06
cmp word [ebx + 2], 0x3a
lea esi, [ebx + 2]
je 0x41fc06
cmp word [ebx + ebp*2 - 2], 0x3a
je 0x41fc06
mov dl, byte [0x4d9f13]
mov eax, 1
mov dword [esp + 0x24], eax
mov dword [esp + 0x74], 0
mov byte [esp + 0x2f], dl
mov byte [esp + 0x31], al
mov byte [esp + 0x2e], 0
mov byte [esp + 0x33], 0
mov byte [esp + 0x30], al
mov dword [esp + 0x90], 0xa
mov dword [esp + 0x70], eax
lea ebx, [ebx]
movzx eax, word [esi]
cmp eax, 0x20
je 0x41fc01
cmp eax, 9
jne 0x41fea3
add esi, 2
jmp 0x41fbf0
mov dword [esp + 0x24], 0
cmp ebp, 0xffffffff
je 0x420338
test ebp, ebp
je 0x41f913
cmp word [ebx + ebp*2 - 2], 0x3a
jne 0x41fc31
cmp word [ebx], 0x2c
jne 0x420338
movzx esi, word [ebx]
test esi, 0xffffff80
jne 0x41fc4e
push 2
push esi
call fcn.0049b90c
add esp, 8
test eax, eax
je 0x41fc4e
and esi, 0xffffffdf
movzx eax, si
cmp eax, 0x41
je 0x41fe00
cmp eax, 0x4f
je 0x41fdab
movzx eax, word [ebx]
cmp eax, 0x3a
je 0x41fc75
cmp eax, 0x2b
je 0x41fc75
cmp eax, 0x2d
jne 0x41fc7f
cmp word [ebx + 2], ax
je 0x420338
push eax
push 0x4b6564
call fcn.0049a90e
add esp, 8
test eax, eax
je 0x420338
push 0x4b6588
push ebx
call fcn.0049b9f3
mov edi, eax
add esp, 8
test edi, edi
je 0x41fe5b
cmp word [ebx], 0x3a
jne 0x41fd11
movzx eax, word [ebx + 2]
lea esi, [ebx + 2]
test ax, ax
je 0x41fd07
nop
cmp ax, 0x3a
je 0x420338
movzx eax, ax
test eax, 0xffffff80
jne 0x41fce6
push 0x107
push eax
call fcn.0049b90c
add esp, 8
test eax, eax
jne 0x41fcfb
movzx edx, word [esi]
push edx
push 0x4b6590
call fcn.0049a90e
add esp, 8
test eax, eax
je 0x41fd11
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x41fcc0
cmp word [esi], 0x3a
je 0x420338
cmp word [ebx], 0x2c
jne 0x41fd59
lea eax, [ebx + 2]
call fcn.00403ff0
push 2
mov esi, eax
push 0x4b6588
push esi
call fcn.0049c305
add esp, 0xc
test eax, eax
je 0x420338
push 3
push 0x4b3abc
add esi, 0xfffffffe
push esi
call fcn.0049c305
add esp, 0xc
test eax, eax
je 0x420338
jmp 0x41fe5b
mov eax, ebx
cmp ebx, edi
jae 0x41fd6d
nop
cmp word [eax], 0x22
je 0x41fd6d
add eax, 2
cmp eax, edi
jb 0x41fd60
cmp eax, edi
je 0x420338
movzx eax, word [edi + 4]
lea ecx, [edi + 4]
test ax, ax
je 0x420338
cmp ax, 0x22
je 0x41fd9c
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x41fd85
jmp 0x420338
cmp word [ecx], 0
je 0x420338
jmp 0x41fe5b
movzx esi, word [ebx + 2]
test esi, 0xffffff80
jne 0x41fdc9
push 2
push esi
call fcn.0049b90c
add esp, 8
test eax, eax
je 0x41fdc9
and esi, 0xffffffdf
cmp si, 0x52
jne 0x420338
movzx eax, word [ebx + 4]
lea ecx, [ebx + 4]
cmp eax, 0x20
je 0x41fde8
cmp eax, 9
jne 0x420338
movzx eax, word [ecx]
cmp eax, 0x20
je 0x41fdf5
cmp eax, 9
jne 0x41fdfa
add ecx, 2
jmp 0x41fde8
movzx eax, word [ecx]
push eax
jmp 0x41fe46
push 3
push 0x4b6548
push ebx
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x420338
movzx eax, word [ebx + 6]
lea ecx, [ebx + 6]
cmp eax, 0x20
je 0x41fe30
cmp eax, 9
jne 0x420338
lea ecx, [ecx]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x41fe3d
cmp eax, 9
jne 0x41fe42
add ecx, 2
jmp 0x41fe30
movzx ecx, word [ecx]
push ecx
push 0x4b6550
call fcn.0049a90e
add esp, 8
test eax, eax
jne 0x420338
mov esi, dword [esp + 0x1c]
lea edx, [esi + ebp]
cmp edx, 0x4000
jae 0x421a2d
cmp word [ebx], 0x2c
je 0x41fe82
mov ecx, dword [esp + 0x14]
mov eax, 0x20
mov word [ecx + esi*2], ax
inc esi
mov eax, dword [esp + 0x14]
lea edx, [ebp + ebp + 2]
push edx
lea ecx, [eax + esi*2]
push ebx
push ecx
call fcn.004a3c00
add esp, 0xc
add esi, ebp
mov dword [esp + 0x1c], esi
jmp 0x41f913
cmp word [esi], 0
je 0x4200f4
mov ebx, 0x30
mov edi, esi
test esi, esi
je 0x41fef1
movzx eax, word [esi]
test ax, ax
je 0x41fef1
movzx edx, ax
mov ecx, 0x4b3acc
mov eax, 0x20
lea ecx, [ecx]
cmp dx, ax
je 0x41ffa4
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x41fed0
movzx eax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x41fec0
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41fef6
sub eax, edx
sar eax, 1
lea ebp, [esi + eax*2]
movzx edi, word [ebp]
push 4
xor eax, eax
push 0x4b65dc
push esi
mov dword [esp + 0x40], edi
mov word [ebp], ax
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x420045
push 0xf
add esi, 8
lea ecx, [esp + 0x94]
push esi
push ecx
call fcn.0049d054
movzx ebx, word [0x4d5a40]
add esp, 0xc
xor edx, edx
mov word [esp + 0xae], dx
lea ecx, [esp + 0x90]
lea esp, [esp]
movzx eax, word [ecx]
test ax, ax
je 0x41ff79
cmp ax, bx
je 0x41ffab
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x41ff68
lea eax, [esp + 0x90]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x41ff83
mov edi, dword [esp + 0x34]
sub eax, edx
sar eax, 1
mov dword [esp + 0x70], eax
mov ebx, 0x30
jmp 0x4200d2
mov ebp, edi
jmp 0x41ff08
cmp word [ecx], 0
je 0x41ff79
movzx eax, word [ecx + 2]
lea esi, [ecx + 2]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x41ffc7.99
movzx eax, byte [eax + 0x421cec]
jmp dword [eax*4 + 0x421cc8]
mov edx, 7
mov word [esi], dx
jmp case.0x41ffc7.99
mov eax, 8
jmp 0x420010
mov edx, 0xc
mov word [esi], dx
jmp case.0x41ffc7.99
mov eax, 0xa
jmp 0x420010
mov edx, 0xd
mov word [esi], dx
jmp case.0x41ffc7.99
mov eax, 9
jmp 0x420010
mov edx, 0xb
mov word [esi], dx
jmp case.0x41ffc7.99
mov eax, 0x20
mov word [esi], ax
mov eax, esi
lea edi, [eax + 2]
jmp 0x420020
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x420020
sub eax, edi
sar eax, 1
lea edx, [eax + eax + 2]
push edx
push esi
push ecx
call fcn.0049ad10
add esp, 0xc
mov ecx, esi
jmp 0x41ff60
push 5
push 0x4b65e8
push esi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x420064
cmp word [esi + 0xa], bx
setne byte [esp + 0x2f]
jmp 0x4200d2
push 5
push 0x4b65f4
push esi
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x420083
cmp word [esi + 0xa], bx
setne byte [esp + 0x31]
jmp 0x4200d2
movzx eax, word [esi]
test ax, ax
je 0x4200d2
jmp 0x420090
movzx eax, ax
add eax, 0xffffffdb
cmp eax, 0x3e
ja case.0x4200a2.38
movzx eax, byte [eax + 0x421d1c]
jmp dword [eax*4 + 0x421d04]
mov byte [esp + 0x2e], 1
jmp case.0x4200a2.38
mov byte [esp + 0x33], 1
jmp case.0x4200a2.38
mov byte [esp + 0x30], 0
jmp case.0x4200a2.38
mov dword [esp + 0x24], 2
movzx eax, word [esi + 2]
add esi, 2
test ax, ax
jne 0x420090
mov word [ebp], di
mov esi, ebp
movzx eax, word [esi]
cmp eax, 0x20
je 0x4200e5
cmp eax, 9
jne 0x4200ea
add esi, 2
jmp 0x4200d8
cmp word [esi], 0
jne 0x41feb2
mov byte [esp + 0x68], 1
jmp 0x41f913
cmp ebp, 0xffffffff
je 0x421be6
cmp ebp, 0xfffffffe
je 0x41f913
cmp word [ebx], 0x29
jne 0x4201a8
mov eax, ebx
mov dword [esp + 0x24], 0
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x420127
sub eax, edx
sar eax, 1
lea ecx, [ebx + eax*2 - 2]
lea ebx, [ebx]
movzx edx, word [ecx]
cmp edx, 0x20
je 0x42014d
cmp edx, 9
jne 0x420157
cmp ecx, ebx
je 0x420170
sub ecx, 2
dec eax
jmp 0x420140
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x38]
xor edx, edx
mov ebp, eax
add ebx, 2
mov word [ecx + 2], dx
dec ebp
jmp 0x4202b7
movzx edx, word [ecx]
cmp edx, 0x20
je 0x420190
cmp edx, 9
je 0x420190
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x38]
mov ebp, eax
add ebx, 2
dec ebp
jmp 0x4202b7
mov ebx, dword [esp + 0x38]
mov edi, dword [esp + 0x38]
xor eax, eax
xor ebp, ebp
add ebx, 2
mov word [ecx], ax
dec ebp
jmp 0x4202b7
cmp byte [esp + 0x31], 0
mov edi, dword [esp + 0x38]
mov ebx, edi
je 0x4201c0
mov eax, ebp
mov esi, edi
call fcn.0041a2f0
mov ebp, eax
cmp byte [esp + 0x2f], 0
je 0x4201d4
mov edi, dword [esp + 0x38]
mov eax, ebp
call fcn.0041a280
mov ebp, eax
xor esi, esi
cmp byte [esp + 0x2e], 0
je 0x420213
mov ax, word [0x4d5a40]
push esi
push 0x4001
push 0xffffffffffffffff
push 1
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0x58]
push edx
mov word [esp + 0x5c], ax
mov word [esp + 0x60], ax
mov word [esp + 0x62], ax
push edi
xor eax, eax
call fcn.00480750
add esp, 0x1c
mov esi, eax
cmp byte [esp + 0x33], 0
je 0x420258
mov ax, word [0x4d5a3c]
mov cx, word [0x4d5a40]
push 0
push 0x4001
push 0xffffffffffffffff
push 1
mov word [esp + 0x54], ax
mov word [esp + 0x5a], ax
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x58]
push eax
push edi
xor eax, eax
mov word [esp + 0x64], cx
call fcn.00480750
add esp, 0x1c
add esi, eax
cmp byte [esp + 0x30], 0
je 0x42029d
mov ax, word [0x4d5a38]
mov cx, word [0x4d5a40]
push 0
push 0x4001
push 0xffffffffffffffff
push 1
mov word [esp + 0x54], ax
mov word [esp + 0x5a], ax
lea edx, [esp + 0x58]
push edx
lea eax, [esp + 0x58]
push eax
push edi
xor eax, eax
mov word [esp + 0x64], cx
call fcn.00480750
add esp, 0x1c
add esi, eax
test esi, esi
je 0x4202b7
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4202a6
sub eax, edx
sar eax, 1
mov ebp, eax
mov esi, dword [esp + 0x70]
mov eax, dword [esp + 0x1c]
lea ecx, [esi + ebp]
add ecx, eax
cmp ecx, 0x4001
jae 0x421a2d
mov ecx, dword [esp + 0x74]
inc ecx
mov dword [esp + 0x74], ecx
cmp ecx, 1
jle 0x420307
test esi, esi
je 0x420307
cmp ebx, edi
jne 0x420307
lea edx, [esi + esi + 2]
push edx
mov edx, dword [esp + 0x18]
lea ecx, [esp + 0x94]
push ecx
lea eax, [edx + eax*2]
push eax
call fcn.004a3c00
add esp, 0xc
add dword [esp + 0x1c], esi
test ebp, ebp
je 0x41f913
mov edx, dword [esp + 0x14]
mov esi, dword [esp + 0x1c]
lea ecx, [ebp + ebp + 2]
push ecx
lea eax, [edx + esi*2]
push ebx
push eax
call fcn.004a3c00
add esp, 0xc
add esi, ebp
mov dword [esp + 0x1c], esi
jmp 0x41f913
mov word [ebp], di
mov esi, dword [esp + 0x1a18c]
mov ebp, dword [esp + 0x40]
cmp dword [esp + 0x1c], 0
je 0x4217e3
cmp word [esp + 0x8238], 0
mov ebx, dword [esp + 0x14]
je 0x4204ce
mov ecx, dword [esp + 0x50]
mov edi, dword [esi + 0x274]
mov dword [esi + 0x274], ecx
cmp word [ebx], 0x7b
je 0x4203bd
cmp byte [esp + 0x1b], 0
jne 0x4203bd
test ebp, ebp
jne 0x421a4c
cmp dword [esi + 0x4c], ebp
je 0x42039d
mov edx, dword [0x4d5b14]
cmp dword [edx + 0xb4], ebp
je 0x421a6d
push 0
push 0
push 0
push 0
push 0
push 3
lea eax, [esp + 0x8250]
push eax
mov ecx, esi
call fcn.00423b30
jmp 0x420447
mov eax, ebp
sub eax, 0
je 0x420401
dec eax
je 0x4203e9
dec eax
jne 0x420459
push esi
lea ebx, [esp + 0x823c]
call fcn.0042a8a0
test eax, eax
je 0x421502
mov ebx, dword [esp + 0x14]
jmp 0x420459
lea ecx, [esp + 0x8238]
push ecx
push esi
call fcn.0042a3c0
test eax, eax
je 0x421502
jmp 0x420459
mov edx, dword [0x4d5b14]
cmp dword [edx + 0xb4], 0
jne 0x421a9d
lea eax, [esp + 0x10240]
push eax
lea ecx, [esp + 0x823c]
push ecx
push esi
call fcn.00429800
test eax, eax
je 0x421502
cmp byte [esp + 0x1b], 0
je 0x420459
push 0
push 0
push 0
push 0x75
push esi
call fcn.004260f0
test eax, eax
je 0x421502
mov dword [esi + 0x634], 0
xor edx, edx
mov word [esp + 0x8238], dx
test ebp, ebp
je 0x4204c8
cmp byte [esp + 0x1b], dl
jne 0x4204c8
lea ecx, [ebx + 2]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x42047d
cmp eax, 9
jne 0x420482
add ecx, 2
jmp 0x420470
cmp word [ecx], dx
jne 0x420492
mov dword [esi + 0x274], edi
jmp 0x4217e3
mov eax, ecx
lea esi, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x420497
sub eax, esi
sar eax, 1
mov dword [esp + 0x1c], eax
lea eax, [eax + eax + 2]
push eax
push ecx
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0049ad10
mov esi, dword [esp + 0x1a198]
mov ebx, dword [esp + 0x20]
add esp, 0xc
mov dword [esi + 0x274], edi
cmp word [ebx], 0x7d
jne 0x4205c1
mov eax, dword [esi + 0x4c]
test eax, eax
je 0x4205c1
mov edx, dword [0x4d5b14]
cmp dword [edx + 0xb4], 0
jne 0x4205c1
cmp dword [esi + 0x268], 0
je 0x42052f
mov eax, dword [esi + 0x26c]
mov dword [esi + 0x268], 0
test eax, eax
je 0x420570
push eax
call fcn.0049a18d
mov eax, dword [esp + 0x1a190]
add esp, 4
mov dword [eax + 0x26c], 0
jmp 0x420570
mov esi, dword [esp + 0x1a18c]
dec eax
mov dword [esi + 0x4c], eax
mov edi, dword [esi + eax*4 + 0x50]
call fcn.00479140
mov ecx, dword [esi + 0x4c]
mov eax, dword [esi + ecx*4 + 0x50]
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
add esi, 0x64
push 0x2e
push esi
call fcn.0049a802
add esp, 8
test eax, eax
je 0x42056b
xor ecx, ecx
mov word [eax], cx
jmp 0x420570
xor edx, edx
mov word [esi], dx
mov eax, dword [esp + 0x14]
movzx ecx, word [eax + 2]
add eax, 2
cmp ecx, 0x20
je 0x420574
cmp ecx, 9
je 0x420574
cmp word [eax], 0
mov dword [esp + 0x14], eax
je 0x4217e3
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x420596
sub eax, edx
sar eax, 1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1a18c]
mov dword [eax + 0x634], 0
mov esi, eax
jmp 0x420343
cmp dword [esi + 0x268], 0
je 0x4206a8
mov ecx, dword [0x4d5b14]
cmp dword [ecx + 0xb4], 0
jne 0x4206a8
push 3
push 0x4b66dc
push ebx
call fcn.0049a3aa
add esp, 0xc
test eax, eax
je 0x42060d
push 3
push 0x4b66e4
push ebx
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x421abe
mov ebx, dword [esp + 0x14]
lea esi, [ebx + 6]
movzx eax, word [esi]
cmp eax, 0x20
je 0x420621
cmp eax, 9
jne 0x420626
add esi, 2
jmp 0x420614
movzx eax, word [esi]
test ax, ax
je 0x420642
cmp eax, 0x7b
jne 0x421ac2
cmp word [esi + 2], 0
jne 0x421ac2
mov edi, dword [esp + 0x1a18c]
mov eax, dword [edi + 0x26c]
lea edx, [esp + 0x8238]
sub edx, eax
jmp 0x420660
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x420660
lea edx, [esp + 0x8238]
push 0x2e
push edx
call fcn.0049a90e
mov cx, word [ebx]
mov word [eax + 2], cx
mov edx, dword [edi + 0x274]
add esp, 8
cmp word [esi], 0x7b
mov dword [esp + 0x50], edx
sete byte [esp + 0x1b]
mov dword [esp + 0x40], 0
jmp 0x4217e3
lea eax, [esp + 0x1b]
push eax
mov eax, ebx
call fcn.0041f280
add esp, 4
test al, al
je 0x4206ec
lea edx, [esp + 0x8238]
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x4206c6
mov ecx, dword [esi + 0x274]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x40], 0
jmp 0x4217e3
mov edx, dword [0x4d5b14]
cmp dword [edx + 0xb4], 0
jne 0x4208c7
lea eax, [esp + 0x1b]
push eax
mov eax, ebx
call fcn.0041f370
add esp, 4
test eax, eax
je 0x420746
lea edx, [esp + 0x8238]
sub edx, eax
jmp 0x420720
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x420720
mov ecx, dword [esi + 0x274]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x40], 1
jmp 0x4217e3
cmp dword [esi + 0x4c], 0
je 0x4208c7
mov ebx, dword [esp + 0x14]
mov esi, ebx
movzx eax, word [esi]
test eax, 0xffffff80
jne 0x420772
push 0x107
push eax
call fcn.0049b90c
add esp, 8
test eax, eax
jne 0x420784
movzx eax, word [esi]
cmp eax, 0x5f
je 0x420784
cmp eax, 0x7f
ja 0x420784
cmp eax, 0x2e
jne 0x420789
add esi, 2
jmp 0x420756
cmp esi, ebx
jbe 0x420850
movzx eax, word [esi]
cmp eax, 0x20
je 0x42079e
cmp eax, 9
jne 0x4207a3
add esi, 2
jmp 0x420791
movzx eax, word [esi]
cmp eax, 0x3a
jne 0x4207cf
cmp word [esi + 2], 0x3d
jne 0x4207cf
push 0
mov edx, dword [esp + 0x1a190]
push ebx
push edx
call fcn.0042aa30
test eax, eax
je 0x421502
jmp 0x4217e3
test ax, ax
je 0x4207e5
cmp eax, 0x5b
je 0x4207e5
cmp eax, 0x7b
jne 0x420850
cmp word [esi + 2], 0
jne 0x420850
mov eax, ebx
lea edx, [eax + 2]
lea ebx, [ebx]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4207f0
sub eax, edx
sar eax, 1
cmp word [ebx + eax*2 - 2], 0x7b
sete cl
mov byte [esp + 0x1b], cl
test cl, cl
je 0x420818
dec eax
mov esi, ebx
call fcn.0041a2f0
lea edx, [esp + 0x8238]
mov eax, ebx
sub edx, ebx
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x420823
mov eax, dword [esp + 0x1a18c]
mov ecx, dword [eax + 0x274]
mov dword [esp + 0x50], ecx
mov dword [esp + 0x40], 2
jmp 0x4217e3
push 6
push 0x4b2b70
push ebx
call fcn.0049a3aa
add esp, 0xc
test eax, eax
jne 0x42087c
movzx eax, word [ebx + 0xc]
cmp eax, 0x20
je 0x420872
cmp eax, 9
jne 0x42087c
push 1
add ebx, 0xe
jmp 0x4207b4
cmp word [ebx], 0x23
mov edi, dword [esp + 0x1a18c]
jne 0x421ae1
mov esi, dword [edi + 0x274]
push ebx
push edi
call fcn.004220a0
test eax, eax
je 0x421502
cmp eax, 3
jne 0x421ae1
mov eax, dword [esp + 0x1a194]
mov dword [edi + 0x270], eax
mov dword [edi + 0x274], esi
jmp 0x4217e3
mov ebx, dword [esp + 0x14]
xor edx, edx
cmp word [ebx], 0x3a
mov dword [esp + 0x34], edx
mov dword [esp + 0x24], edx
jne 0x4209c6
movzx ecx, word [ebx + 2]
cmp cx, dx
je 0x4209c6
lea edi, [ebx + 2]
mov dword [esp + 0x78], edi
cmp ecx, 0x3a
je 0x420912
push 0x3a
push edi
call fcn.0049a90e
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x4209be
add ebp, 2
mov dword [esp + 0x34], ebp
jmp 0x420925
cmp word [ebx + 4], dx
lea eax, [ebx + 4]
je 0x4209c6
mov ebp, eax
mov dword [esp + 0x34], eax
test ebp, ebp
je 0x4209c6
mov bl, byte [0x4d9f12]
mov byte [esp + 0x2b], bl
cmp edi, ebp
jae 0x42097a
jmp 0x420940
movzx esi, word [edi]
test esi, 0xffffff80
jne 0x42095d
push 2
push esi
call fcn.0049b90c
add esp, 8
test eax, eax
je 0x42095d
and esi, 0xffffffdf
cmp si, 0x58
je 0x42096c
add edi, 2
cmp edi, ebp
jb 0x420940
jmp 0x42097a
cmp word [edi + 2], 0x30
setne byte [esp + 0x2b]
mov bl, byte [esp + 0x2b]
mov edi, ebp
lea esp, [esp]
movzx eax, word [edi]
test ax, ax
je 0x4209af
mov cx, word [0x4d5a40]
nop
cmp ax, cx
je 0x420a36
cmp ax, 0x3a
je 0x420a36
movzx eax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x420990
cmp dword [esp + 0x24], 0
jne 0x420b30
mov ebx, dword [esp + 0x14]
mov dword [esp + 0x34], 0
push 0x4b6588
push ebx
call fcn.0049b9f3
mov ebp, eax
add esp, 8
mov dword [esp + 0x24], ebp
test ebp, ebp
je 0x421346
cmp ebp, ebx
jne 0x4209f4
cmp word [ebp + 4], 0x3a
jne 0x4209f4
add ebp, 2
mov dword [esp + 0x24], ebp
mov ecx, dword [esp + 0x14]
mov esi, ebp
cmp ebp, ecx
jbe 0x420a14
mov edi, edi
movzx eax, word [esi]
cmp eax, 0x20
je 0x420a0d
cmp eax, 9
jne 0x420a14
sub esi, 2
cmp esi, ecx
ja 0x420a00
movzx edi, word [esi]
xor edx, edx
mov word [esi], dx
lea esp, [esp]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x420a31
cmp eax, 9
jne 0x420af9
add ecx, 2
jmp 0x420a20
movzx eax, word [edi]
test ax, ax
je 0x4209af
lea esi, [edi + 2]
cmp eax, 0x3a
jne 0x420a69
cmp word [esi], ax
jne 0x420af1
mov dword [esp + 0x24], edi
mov edi, esi
test bl, bl
jne 0x4209af
add edi, 2
jmp 0x420980
movzx eax, word [esi]
add eax, 0xffffff9f
cmp eax, 0x15
ja case.0x420a7b.99
movzx ecx, byte [eax + 0x421d7c]
jmp dword [ecx*4 + 0x421d5c]
mov edx, 7
jmp 0x420abd
mov eax, 8
mov word [esi], ax
jmp case.0x420a7b.99
mov ecx, 0xc
mov word [esi], cx
jmp case.0x420a7b.99
mov edx, 0xa
jmp 0x420abd
mov eax, 0xd
mov word [esi], ax
jmp case.0x420a7b.99
mov ecx, 9
mov word [esi], cx
jmp case.0x420a7b.99
mov edx, 0xb
mov word [esi], dx
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x420ac5
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 2]
push eax
push esi
push edi
call fcn.0049ad10
add esp, 0xc
cmp word [edi], 0x3a
jne 0x420af1
cmp word [esi], 0x3a
jne 0x420af1
mov edi, esi
add edi, 2
jmp 0x420980
push 0
push 0
push ecx
call fcn.00411440
add esp, 0xc
mov dword [esp + 0x7c], eax
test eax, eax
je 0x420b19
cmp eax, 4
je 0x421502
jmp 0x420b25
mov dword [esp + 0x24], 0
mov ebp, dword [esp + 0x24]
mov word [esi], di
test ebp, ebp
je 0x421346
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x14]
jbe 0x421346
mov ecx, dword [0x4d5b14]
cmp dword [ecx + 0xb4], 0
jne 0x421afb
mov ebp, dword [esp + 0x1a18c]
mov eax, dword [ebp + 4]
test eax, eax
je 0x420b68
cmp byte [eax], 0x1a
je 0x421b1e
mov ebx, dword [esp + 0x24]
xor edx, edx
mov word [ebx], dx
add ebx, 4
mov dword [esp + 0x24], ebx
cmp dword [esp + 0x34], edx
jne 0x420ff8
cmp word [ebx], dx
je 0x420bce
mov edx, ebx
lea esp, [esp]
movzx eax, word [edx]
cmp eax, 0x20
je 0x420b9d
cmp eax, 9
jne 0x420ba2
add edx, 2
jmp 0x420b90
mov eax, edx
sub eax, ebx
sar eax, 1
je 0x420bce
mov eax, edx
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x420bb0
sub eax, esi
sar eax, 1
lea ecx, [eax + eax + 2]
push ecx
push edx
push ebx
call fcn.0049ad10
add esp, 0xc
mov esi, dword [esp + 0x24]
cmp word [esi], 0
mov ebp, esi
je 0x420fed
cmp word [esi + 2], 0
je 0x420d57
movzx eax, word [esi + 2]
xor dl, dl
xor cl, cl
test ax, ax
je 0x420cd8
mov edi, dword [esp + 0x54]
mov edi, edi
cmp ax, 0x20
je case.0x420c20.34
movzx eax, word [esi]
add eax, 0xffffffdf
cmp eax, 0x5d
ja case.0x420c20.34
movzx eax, byte [eax + 0x421db4]
jmp dword [eax*4 + 0x421d94]
mov cl, 1
jmp case.0x420c20.36
mov dl, 1
jmp case.0x420c20.36
test cl, cl
jne 0x420c45
test dl, dl
jne 0x420c49
or edi, 1
jmp case.0x420c20.36
test dl, dl
je 0x420c50
or byte [esp + 0x13], 4
xor dl, dl
test cl, cl
je case.0x420c20.36
or byte [esp + 0x13], 8
jmp 0x420cc2
test cl, cl
jne 0x420c68
test dl, dl
jne 0x420c6c
or edi, 2
jmp case.0x420c20.36
test dl, dl
je 0x420c73
or byte [esp + 0x13], 1
xor dl, dl
test cl, cl
je case.0x420c20.36
or byte [esp + 0x13], 2
jmp 0x420cc2
test cl, cl
jne 0x420c8b
test dl, dl
jne 0x420c8f
or edi, 4
jmp case.0x420c20.36
test dl, dl
je 0x420c96
or byte [esp + 0x13], 0x10
xor dl, dl
test cl, cl
je case.0x420c20.36
or byte [esp + 0x13], 0x20
jmp 0x420cc2
test cl, cl
jne 0x420cae
test dl, dl
jne 0x420cb2
or edi, 8
jmp case.0x420c20.36
test dl, dl
je 0x420cb9
or byte [esp + 0x13], 0x40
xor dl, dl
test cl, cl
je case.0x420c20.36
or byte [esp + 0x13], 0x80
xor cl, cl
movzx eax, word [esi + 4]
add esi, 2
test ax, ax
jne 0x420c00
mov dword [esp + 0x54], edi
push 0
mov ebp, esi
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push 0
push 0
mov eax, esi
call fcn.004193d0
add esp, 0xc
mov byte [esp + 0x1a], al
test al, al
je 0x420fed
mov bl, al
mov esi, dword [esp + 0x14]
cmp word [esi], 0
je 0x420e16
movzx ecx, word [esi + 2]
mov eax, esi
add esi, 2
xor bl, bl
xor dl, dl
test cx, cx
je 0x420e10
mov edi, dword [esp + 0x5c]
jmp 0x420d30
cmp cx, 0x20
je case.0x420d50.34
movzx ecx, word [eax]
add ecx, 0xffffffdf
cmp ecx, 0x5d
ja case.0x420d50.34
movzx ecx, byte [ecx + 0x421e34]
jmp dword [ecx*4 + 0x421e14]
or bl, 0xff
mov byte [esp + 0x1a], bl
jmp 0x420cff
mov dl, 1
jmp case.0x420d50.36
mov bl, 1
jmp case.0x420d50.36
test dl, dl
jne 0x420d7b
test bl, bl
jne 0x420d7f
or edi, 1
jmp case.0x420d50.36
test bl, bl
je 0x420d86
or byte [esp + 0x12], 4
xor bl, bl
test dl, dl
je case.0x420d50.36
or byte [esp + 0x12], 8
jmp 0x420df8
test dl, dl
jne 0x420d9e
test bl, bl
jne 0x420da2
or edi, 2
jmp case.0x420d50.36
test bl, bl
je 0x420da9
or byte [esp + 0x12], 1
xor bl, bl
test dl, dl
je case.0x420d50.36
or byte [esp + 0x12], 2
jmp 0x420df8
test dl, dl
jne 0x420dc1
test bl, bl
jne 0x420dc5
or edi, 4
jmp case.0x420d50.36
test bl, bl
je 0x420dcc
or byte [esp + 0x12], 0x10
xor bl, bl
test dl, dl
je case.0x420d50.36
or byte [esp + 0x12], 0x20
jmp 0x420df8
test dl, dl
jne 0x420de4
test bl, bl
jne 0x420de8
or edi, 8
jmp case.0x420d50.36
test bl, bl
je 0x420def
or byte [esp + 0x12], 0x40
xor bl, bl
test dl, dl
je case.0x420d50.36
or byte [esp + 0x12], 0x80
xor dl, dl
mov eax, esi
movzx ecx, word [eax + 2]
lea esi, [eax + 2]
test cx, cx
jne 0x420d30
mov dword [esp + 0x5c], edi
mov bl, byte [esp + 0x1a]
mov esi, eax
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
push 0
push 0
mov eax, esi
call fcn.004193d0
add esp, 0xc
push 0x4b3abc
push esi
mov byte [esp + 0x35], al
call fcn.0049b9f3
mov dl, byte [esp + 0x35]
add esp, 8
test eax, eax
setne byte [esp + 0x3e]
dec dl
cmp dl, 5
ja 0x420e58
cmp byte [esp + 0x2d], 3
jne 0x420e62
mov al, byte [esp + 0x2d]
add al, 0x66
cmp al, 5
ja 0x420e66
mov al, 1
jmp 0x420e68
xor al, al
lea ecx, [ebx - 1]
cmp cl, 5
ja 0x420e75
cmp bl, 3
jne 0x420e7d
add bl, 0x66
cmp bl, 5
ja 0x420e84
mov byte [esp + 0x2c], 1
jmp 0x420e89
mov byte [esp + 0x2c], 0
test al, al
jne 0x420e98
mov byte [esp + 0x32], 1
cmp byte [esp + 0x2c], al
jne 0x420e9d
mov byte [esp + 0x32], 0
mov eax, esi
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x420ea2
sub eax, edx
sar eax, 1
cmp eax, 1
jne 0x420ec9
movzx edx, word [esi]
push edx
call dword [sym.imp.USER32.dll_IsCharUpperW]
mov ecx, 0x4b67d4
test eax, eax
jne 0x420ece
mov ecx, 0x4b0cf8
cmp byte [esp + 0x3e], 0
mov eax, 0x4b0cf8
jne 0x420edf
mov eax, 0x4b6410
mov edx, dword [esp + 0x14]
push edx
push ecx
push eax
push 0x4b67d8
mov esi, 0x20
lea edi, [esp + 0x100]
call fcn.0047ffb0
push 0x1f
lea eax, [esp + 0xc4]
push ebp
push eax
call fcn.0049d054
mov esi, dword [esp + 0x40]
add esp, 0x1c
push 7
lea edx, [esp + 0x84]
xor ecx, ecx
push esi
push edx
mov word [esp + 0xfa], cx
call fcn.0049d054
xor eax, eax
sub ebp, esi
mov word [esp + 0x9a], ax
mov eax, ebp
sar eax, 1
add esp, 0xc
cmp eax, 8
jae 0x420f4f
xor ecx, ecx
mov word [esp + eax*2 + 0x80], cx
cmp word [esp + 0x80], 0
mov dword [esp + 0x58], 0
jne 0x4217e3
mov al, byte [esp + 0x1a]
cmp al, 0xd
je 0x420fcb
cmp al, 0x13
jne 0x4217e3
movzx esi, word [esp + 0xb0]
test esi, 0xffffff80
jne 0x420f98
push 2
push esi
call fcn.0049b90c
add esp, 8
test eax, eax
je 0x420f98
and esi, 0xffffffdf
cmp si, 0x50
je 0x420fe8
movzx esi, word [esp + 0xb0]
test esi, 0xffffff80
jne 0x420fc0
push 2
push esi
call fcn.0049b90c
add esp, 8
test eax, eax
je 0x420fc0
and esi, 0xffffffdf
cmp si, 0x42
je 0x420fe8
jmp 0x4217ee
lea edx, [esp + 0xb0]
push 0x4b245c
push edx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4217ee
mov byte [esp + 0x1a], 0
mov ebp, dword [esp + 0x1a18c]
mov ebx, dword [esp + 0x24]
cmp byte [ebp + 0x278], 0
je 0x421035
push 0
push 0xff
push 0
push 0x67
push ebp
mov byte [ebp + 0x278], 0
call fcn.004260f0
test eax, eax
je 0x421502
mov eax, dword [ebp + 4]
mov dword [eax + 0xc], 1
mov dword [ebp + 0x634], 0
mov edi, dword [esp + 0x14]
push 1
mov eax, edi
mov esi, ebp
call fcn.004239f0
test eax, eax
je 0x421502
mov ecx, dword [esp + 0x34]
test ecx, ecx
je 0x421169
cmp word [ecx], 0
je 0x421b44
cmp byte [esp + 0x2b], 0
mov eax, 0x4b0cf8
jne 0x421070
mov eax, ebx
mov edx, dword [esp + 0x68]
push 0
push edx
mov edx, dword [ebp + 0x14]
push eax
mov eax, dword [esp + 0x84]
push eax
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, dword [ebp + 0x14]
mov edx, dword [eax + 4]
push edx
mov edi, ecx
call fcn.004126a0
add esp, 0x18
test eax, eax
je 0x421502
cmp word [ebx], 0
je 0x4217e3
cmp byte [esp + 0x2b], 0
je 0x42113d
mov edi, dword [esp + 0x24]
mov ecx, edi
lea esp, [esp]
movzx eax, word [ecx]
cmp eax, 0x20
je 0x4210cd
cmp eax, 9
jne 0x4210d2
add ecx, 2
jmp 0x4210c0
mov esi, dword [esp + 0x1a18c]
push 0
push 0
push 0
push 0
push 0
push 0
push ecx
mov ecx, esi
call fcn.00423b30
test eax, eax
je 0x421502
mov eax, dword [esi + 4]
mov al, byte [eax]
cmp al, 9
jb 0x421102
cmp al, 0x20
jbe 0x421116
cmp al, 0x21
je 0x421116
cmp al, 0x69
jb 0x42110e
cmp al, 0x6b
jbe 0x421116
cmp al, 0x6f
jb 0x421144
cmp al, 0x71
ja 0x421144
mov ecx, dword [esp + 0x14]
push ecx
mov eax, 0x3a
push 0x4b6840
mov ecx, esi
mov word [edi - 4], ax
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov esi, dword [esp + 0x1a18c]
push 0
push 0
push 0
push 0x67
push esi
call fcn.004260f0
test eax, eax
je 0x421502
mov ecx, dword [esi + 4]
mov dword [ecx + 0xc], 1
jmp 0x4217e3
xor esi, esi
cmp word [ebx], si
je 0x421260
push 0x4b35f8
push ebx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x421190
mov esi, 0x7ffe
jmp 0x421240
push 0x4b3608
push ebx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4211ac
mov esi, 0x7ffd
jmp 0x421240
push 0x4b3620
push ebx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4211c5
mov esi, 0x7ffc
jmp 0x421240
push 0x4b3638
push ebx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4211de
mov esi, 0x7ffb
jmp 0x421240
push 0x4b3654
push ebx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4211f7
mov esi, 0x7ffa
jmp 0x421240
xor esi, esi
push esi
push esi
push esi
push esi
push esi
push esi
push ebx
mov ecx, ebp
call fcn.00423b30
test eax, eax
je 0x421502
mov edx, dword [ebp + 4]
mov al, byte [edx]
cmp al, 9
jb 0x421220
cmp al, 0x20
jbe 0x421b5e
cmp al, 0x21
je 0x421b5e
cmp al, 0x69
jb 0x421234
cmp al, 0x6b
jbe 0x421b5e
cmp al, 0x6f
jb 0x421240
cmp al, 0x71
jbe 0x421b5e
push 0
push 0
push 0
push 0x67
push ebp
call fcn.004260f0
test eax, eax
je 0x421502
mov eax, dword [ebp + 4]
mov dword [eax + 0xc], 1
lea ecx, [esp + 0x3f]
push ecx
lea edx, [esp + 0x70]
push edx
push edi
call fcn.00411bb0
mov edi, eax
add esp, 0xc
test edi, edi
je 0x4212d6
test si, si
je 0x421287
mov word [edi + 6], si
jmp 0x4217e3
mov eax, dword [edi + 0x20]
test eax, eax
je 0x4212a4
mov ecx, dword [0x4d9890]
cmp dword [eax + 4], ecx
je 0x421b81
mov eax, dword [eax + 8]
test eax, eax
jne 0x421294
mov eax, dword [ebp + 0x14]
mov bl, byte [esp + 0x6c]
push eax
call fcn.00411320
test eax, eax
je 0x421ba9
cmp byte [esp + 0x3f], 0
jne 0x4212cd
cmp byte [0x4d9f20], 0
je 0x4217e3
mov byte [edi + 0x14], 1
jmp 0x4217e3
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x6c]
mov edx, dword [eax + 4]
push ecx
push edx
push esi
push eax
xor bl, bl
call fcn.00410ca0
add esp, 0x10
test eax, eax
jne 0x4217e3
cmp dword [esp + 0x7c], 3
jne 0x421502
cmp dword [ebp + 0xaec], eax
jne 0x4217e3
mov eax, dword [esp + 0x14]
push eax
push 0x4b68b0
mov esi, 0x80
lea edi, [esp + 0x138]
call fcn.0047ffb0
fldz
fstp qword [esp]
mov ecx, edi
push 0
push 0
push 0x10000
push ecx
call fcn.00484f30
add esp, 0x18
jmp 0x4217e3
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x1c]
mov ebx, 0x3a
cmp word [esi + edi*2 - 2], bx
jne 0x421722
cmp edi, 1
je 0x421bc7
movzx eax, word [esi]
mov ecx, esi
test ax, ax
je 0x4213b1
mov dx, word [0x4d5a38]
mov bp, word [0x4d5a40]
cmp ax, 0x20
je 0x421722
cmp ax, 9
je 0x421722
cmp ax, dx
je 0x421722
cmp ax, bp
je 0x421722
movzx eax, word [ecx + 2]
add ecx, 2
test ax, ax
jne 0x42137f
cmp word [esi + edi*2 - 4], bx
jne 0x4213c1
cmp edi, 2
ja 0x421722
xor edx, edx
push 0x4b5340
push esi
mov word [esi + edi*2 - 2], dx
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x421407
mov ecx, dword [esp + 0x1a18c]
mov eax, dword [ecx + 0x40]
test eax, eax
je 0x421407
mov eax, dword [eax + 0x10]
test eax, eax
je 0x421407
cmp byte [eax], 0x73
jne 0x421407
push 0
push 0
push 0
push 0x74
push ecx
call fcn.004260f0
jmp 0x4207c2
cmp word [esi], 0
je 0x421502
mov ebx, dword [esp + 0x1a18c]
mov esi, dword [ebx + 0x10]
mov edi, dword [esp + 0x14]
test esi, esi
je 0x42143f
mov eax, dword [esi + 4]
push edi
push eax
call fcn.00499c29
add esp, 8
test eax, eax
je 0x4214be
mov esi, dword [esi + 0x10]
test esi, esi
jne 0x421423
cmp word [edi], 0
je 0x4215c0
mov eax, edi
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x421450
sub eax, edx
sar eax, 1
lea ebp, [eax + eax]
lea ebx, [ebp + 2]
lea ecx, [ebx - 1]
mov dword [esp + 0x34], eax
cmp ecx, 0xffff
ja 0x4214ee
xor edi, edi
cmp dword [0x4da650], edi
jne 0x421511
push 0x10
call fcn.0049a782
mov esi, eax
add esp, 4
cmp esi, edi
je 0x4214b4
push 0x10000
mov dword [esi + 0xc], edi
call fcn.0049a0ee
add esp, 4
mov dword [esi + 4], eax
mov dword [esi], eax
cmp eax, edi
jne 0x4214d0
push esi
call fcn.0049a182
add esp, 4
mov esi, dword [0x4da654]
xor eax, eax
jmp 0x4214e5
push edi
push 0x4b6fe8
mov ecx, ebx
call fcn.0043a420
jmp 0x4207c2
inc dword [0x4da65c]
mov dword [esi + 8], 0x10000
mov dword [0x4da654], esi
mov eax, esi
mov dword [0x4da650], eax
cmp eax, edi
jne 0x421517
mov edx, dword [esp + 0x14]
push edx
push 0x4b3980
mov ecx, 0x4da728
call fcn.0043a420
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov esi, dword [0x4da654]
cmp ebx, dword [esi + 8]
jbe 0x421578
push 0x10
call fcn.0049a782
mov esi, eax
add esp, 4
cmp esi, edi
je 0x42154e
push 0x10000
mov dword [esi + 0xc], edi
call fcn.0049a0ee
add esp, 4
mov dword [esi + 4], eax
mov dword [esi], eax
cmp eax, edi
jne 0x421558
push esi
call fcn.0049a182
add esp, 4
mov esi, dword [0x4da654]
xor eax, eax
jmp 0x42156d
inc dword [0x4da65c]
mov dword [esi + 8], 0x10000
mov dword [0x4da654], esi
mov eax, esi
mov dword [esi + 0xc], eax
cmp eax, edi
je 0x4214ee
mov edi, dword [esi + 4]
mov eax, ebx
and eax, 3
mov dword [0x4da658], edi
je 0x42158f
sub ebx, eax
lea eax, [ebx + 4]
jmp 0x421591
mov eax, ebx
sub dword [esi + 8], eax
lea edx, [edi + eax]
mov dword [esi + 4], edx
test edi, edi
je 0x4214ee
cmp dword [esp + 0x34], 0
je 0x4215b8
mov eax, dword [esp + 0x14]
push ebp
push eax
push edi
call fcn.004a3c00
add esp, 0xc
xor ecx, ecx
mov word [edi + ebp], cx
jmp 0x4215cb
mov esi, dword [0x4da654]
mov edi, 0x4b0cf8
cmp dword [0x4da650], 0
jne 0x421636
push 0x10
call fcn.0049a782
mov esi, eax
add esp, 4
test esi, esi
je 0x42160a
push 0x10000
mov dword [esi + 0xc], 0
call fcn.0049a0ee
add esp, 4
mov dword [esi + 4], eax
mov dword [esi], eax
test eax, eax
jne 0x421614
push esi
call fcn.0049a182
add esp, 4
mov esi, dword [0x4da654]
xor eax, eax
jmp 0x421629
inc dword [0x4da65c]
mov dword [esi + 8], 0x10000
mov dword [0x4da654], esi
mov eax, esi
mov dword [0x4da650], eax
test eax, eax
je 0x421707
cmp dword [esi + 8], 0x14
jae 0x421698
push 0x10
call fcn.0049a782
mov esi, eax
add esp, 4
test esi, esi
je 0x421672
push 0x10000
mov dword [esi + 0xc], 0
call fcn.0049a0ee
add esp, 4
mov dword [esi + 4], eax
mov dword [esi], eax
test eax, eax
jne 0x42167c
push esi
call fcn.0049a182
add esp, 4
mov esi, dword [0x4da654]
xor eax, eax
jmp 0x421691
inc dword [0x4da65c]
mov dword [esi + 8], 0x10000
mov dword [0x4da654], esi
mov eax, esi
mov dword [esi + 0xc], eax
test eax, eax
je 0x421707
mov eax, dword [esi + 4]
add dword [esi + 8], 0xffffffec
lea edx, [eax + 0x14]
mov dword [0x4da658], eax
mov dword [esi + 4], edx
test eax, eax
je 0x421707
mov ecx, dword [esp + 0x1a18c]
xor edx, edx
mov dword [eax], vtable.Label.0
mov dword [eax + 4], edi
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov ebx, dword [ecx + 0x14]
mov dword [eax + 0xc], ebx
mov esi, eax
cmp dword [ecx + 0x10], edx
je 0x4216d9
mov ecx, dword [ecx + 0x14]
mov ebx, dword [esp + 0x1a18c]
push 0x4af94c
mov dword [ecx + 0x10], eax
push edi
mov dword [ebx + 0x14], eax
call fcn.00499c29
add esp, 8
test eax, eax
jne 0x4217e3
mov dword [ebx + 0xa8c], esi
jmp 0x4217e3
mov ecx, dword [esp + 0x1a18c]
push 0x4b0cf8
push 0x4b3980
call fcn.0043a420
jmp 0x4207c2
cmp word [esi], 0x23
jne 0x421769
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x1a18c]
mov esi, dword [eax + 0x274]
push edx
push eax
call fcn.004220a0
test eax, eax
je 0x421502
cmp eax, 3
jne 0x421769
mov eax, dword [esp + 0x1a18c]
mov ecx, dword [esp + 0x1a194]
mov dword [eax + 0x270], ecx
mov dword [eax + 0x274], esi
jmp 0x4217e3
mov esi, dword [esp + 0x14]
movzx eax, word [esi]
cmp eax, 0x7b
je 0x421798
cmp eax, 0x7d
je 0x421798
mov ecx, dword [esp + 0x1a18c]
push 0
push 0
push 0
push 0
push 0
push 0
push esi
call fcn.00423b30
jmp 0x4207c2
mov ecx, dword [esp + 0x1a18c]
cmp eax, 0x7b
push 0
setne dl
push 0
add dl, 0x75
movzx eax, dl
push 0
push eax
push ecx
call fcn.004260f0
test eax, eax
je 0x421502
lea eax, [esi + 2]
movzx ecx, word [eax]
cmp ecx, 0x20
je 0x4217d0
cmp ecx, 9
jne 0x4217d5
add eax, 2
jmp 0x4217c3
cmp word [eax], 0
mov dword [esp + 0x14], eax
jne 0x421949
cmp byte [esp + 0x1a], 0
je case.0x421813.4
mov eax, dword [esp + 0x58]
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x1a18c]
inc eax
mov dword [esp + 0x58], eax
dec eax
cmp eax, 9
ja case.0x421813.4
movzx edx, byte [eax + 0x421ea8]
jmp dword [edx*4 + 0x421e94]
lea eax, [esp + 0xf0]
push eax
push 0x4b69d8
push edi
call fcn.0049a830
add esp, 0xc
mov dword [esp + 0x1c], eax
jmp 0x4208c3
mov eax, 0x4b35f0
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x421842
cmp byte [esp + 0x2c], 0
push 0
setne dl
push 1
add dl, 0xc3
lea ecx, [esp + 0x1c]
movzx eax, dl
push ecx
push eax
push esi
call fcn.004260f0
cmp byte [esp + 0x32], 0
je case.0x421813.10
lea ecx, [esp + 0xb0]
push ecx
push 0x4b69e4
push edi
call fcn.0049a830
add esp, 0xc
mov dword [esp + 0x1c], eax
mov dword [esp + 0x58], 9
jmp 0x4208c3
mov al, byte [esp + 0x1a]
mov ecx, 0x4b0cf8
cmp al, 0x12
je 0x4218b2
cmp al, 0xa3
jbe 0x4218d2
cmp al, 0xa5
ja 0x4218d2
movzx eax, byte [esp + 0x2d]
sub eax, 0x11
je 0x4218cd
sub eax, 0x91
je 0x4218cd
dec eax
jne 0x4218d2
mov ecx, 0x4b6a30
jmp 0x4218d2
mov ecx, 0x4b6a18
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x84]
push eax
push ecx
push 0x4b6a48
xor ebx, ebx
push edi
mov dword [esi + 0x634], ebx
call fcn.0049a830
add esp, 0x14
push ebx
push 1
lea ecx, [esp + 0x1c]
push ecx
push 0x41
push esi
call fcn.004260f0
test eax, eax
je 0x421502
push ebx
push ebx
push ebx
push 0x67
push esi
call fcn.004260f0
lea edx, [esp + 0xf0]
push edx
push 0x4b6a74
push edi
mov dword [esi + 0x634], ebx
call fcn.0049a830
add esp, 0xc
mov dword [esp + 0x1c], eax
mov dword [esp + 0x58], 2
jmp 0x4208c3
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x421950
sub eax, edx
sar eax, 1
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1a18c]
mov dword [eax + 0x634], 0
mov esi, eax
jmp 0x42033f
mov eax, 0x4b35f0
mov edx, edi
sub edx, eax
movzx ecx, word [eax]
mov word [eax + edx], cx
add eax, 2
test cx, cx
jne 0x421984
cmp byte [esp + 0x2c], 0
push 0
setne dl
push 1
add dl, 0xc3
lea ecx, [esp + 0x1c]
movzx eax, dl
push ecx
push eax
push esi
call fcn.004260f0
lea ecx, [esp + 0xb0]
push ecx
push 0x4b6a84
push edi
call fcn.0049a830
add esp, 0xc
push 0
push 1
lea edx, [esp + 0x1c]
push edx
push 0x41
push esi
call fcn.004260f0
push 0
push 0
push 0
push 0x67
push esi
call fcn.004260f0
mov byte [esp + 0x1a], 0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x64]
mov ebx, dword [esp + 0x1a18c]
lea edx, [esp + 0x230]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ecx
cmp eax, edx
jne 0x421a1d
lea eax, [esp + 0x12180]
mov dword [esp + 0x38], eax
jmp 0x41f8c5
lea ecx, [esp + 0x230]
mov dword [esp + 0x38], ecx
jmp 0x41f8c5
mov ecx, dword [esp + 0x1a18c]
push ebx
push 0x4b659c
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
lea eax, [esp + 0x8238]
push eax
push 0x4b6660
mov ecx, esi
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
cmp dword [esi + 0x268], 0
mov eax, 0x4b6660
jne 0x421a80
mov eax, 0x4b6678
lea ecx, [esp + 0x8238]
push ecx
push eax
mov ecx, esi
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
lea edx, [esp + 0x8238]
push edx
push 0x4b6618
mov ecx, esi
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov ebx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1a18c]
push ebx
push 0x4b66f0
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
push ebx
push 0x4b6678
mov ecx, edi
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x1a18c]
push eax
push 0x4b6738
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov edx, dword [esp + 0x14]
mov ecx, eax
push edx
mov dword [ebp + 0x634], ecx
push 0x4b67a4
mov ecx, ebp
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
push edi
push 0x4b67e8
mov ecx, ebp
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
push edi
mov edx, 0x3a
push 0x4b6840
mov ecx, ebp
mov word [ebx - 4], dx
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov eax, dword [esp + 0x14]
push eax
push 0x4b688c
mov ecx, ebp
mov dword [ebp + 0x634], 0
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov ecx, dword [esp + 0x14]
push ecx
push 0x4b3980
mov ecx, ebp
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov ecx, dword [esp + 0x1a18c]
push esi
push 0x4b6978
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
mov edx, dword [esp + 0x14]
mov ecx, dword [esp + 0x1a18c]
push edx
push 0x4b6600
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
cmp word [esp + 0x8238], 0
je 0x421c82
cmp dword [esp + 0x40], 0
mov eax, dword [esp + 0x50]
mov esi, dword [ebx + 0x274]
mov dword [ebx + 0x274], eax
je 0x421c59
cmp byte [esp + 0x1b], 0
mov eax, 0x4b6aa4
jne 0x421c3c
mov eax, 0x4b6660
lea ecx, [esp + 0x8238]
push ecx
push eax
mov ecx, ebx
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
push 0
push 0
push 0
push 0
push 0
push 3
lea edx, [esp + 0x8250]
push edx
mov ecx, ebx
call fcn.00423b30
test eax, eax
je 0x421502
mov dword [ebx + 0x274], esi
cmp dword [ebx + 0x4c], 0
je 0x421caf
cmp dword [esp + 0x1a194], 0
jne 0x421caf
lea eax, [ebx + 0x64]
push eax
push 0x4b6aa4
mov ecx, ebx
call fcn.0043a420
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc
pop edi
pop esi
mov eax, 1
add dword [ebx + 0x274], eax
pop ebp
pop ebx
add esp, 0x1a178
ret 0xc