Function at 0x41bea0
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4e6603
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6341d4]
xor eax, esp
push eax
lea eax, [esp + 0x280]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x298]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x20]
lea ebx, [ecx + 0xc]
push edx
push ebx
mov dword [esp + 0xa4], 0
mov dword [esp + 0x20], ebx
call fcn.0040e9f0
cmp dword [0x6362c0], 0
mov esi, eax
jne 0x41bf47
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x6361a0]
cmp eax, 0x2bf20
jmp 0x41bf47
xor eax, eax
jmp 0x41ece2
mov ebp, dword [esp + 0x290]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
cmp dword [ebp + 0xc], eax
jbe 0x41bf5f
call fcn.004b0692
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp]
mov dword [esp + 0x28], eax
cmp edi, dword [ebp + 0x10]
jbe 0x41bf73
call fcn.004b0692
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov eax, dword [ebp]
push ecx
push edx
push edi
push eax
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call fcn.0040e250
cmp dword [esi + 0x14], 0
jne 0x41bf40
mov eax, dword [esi + 8]
dec eax
mov dword [0x6361a8], 0x4f81bc
cmp eax, 0x38
ja case.0x41bfab.21
jmp dword [eax*4 + 0x41ecfc]
cmp dword [esi + 0x20], 0
jne 0x41bfc7
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x4f5a28
push ecx
jmp 0x41c032
lea ebx, [esi + 0x28]
push str.normal
push ebx
mov edi, 5
call fcn.004027c0
add esp, 8
test al, al
jne 0x41c027
push 0x4f81a4
push ebx
call fcn.004027c0
add esp, 8
test al, al
je 0x41bffa
mov edi, 3
jmp 0x41c027
push 0x4f819c
push ebx
call fcn.004027c0
add esp, 8
test al, al
je 0x41c013
mov edi, 2
jmp 0x41c027
push str.hidden
push ebx
call fcn.004027c0
add esp, 8
test al, al
je 0x41c027
xor edi, edi
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
push edi
push 0
push edx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41c056
mov ecx, dword [0x6361a8]
push ecx
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x4f5a28
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41c0a7
mov edx, dword [0x6361a8]
push edx
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x1c]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x41c090
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x41c0f3
cmp dword [esi + 0x10], 0
jbe 0x41c0a7
push str.Fild_not_found_
jmp 0x41c09d
cmp dword [esi + 0x10], 0
jbe 0x41c0a7
push str.Failed_
jmp 0x41c09d
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x41c0d7
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6311a8
call dword [sym.imp.USER32.dll_SetRect]
lea ecx, [esp + 0x1c]
call fcn.00405cf0
xor ebx, ebx
mov dword [esp + 0x288], ebx
call fcn.00418b90
mov edi, eax
mov dword [esp + 0x20], edi
cmp edi, ebx
je 0x41c167
mov eax, dword [edi + 0x20]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41c167
mov eax, dword [edi + 0x20]
lea edx, [esp + 0xe8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ebx, [esp + 0xe8]
xor eax, eax
lea edi, [esi + 0x4c]
push 0x4f8148
push edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.004027c0
add esp, 8
test al, al
je 0x41c1a7
lea ecx, [esp + 0x6c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea edx, [esp + 0x6c]
mov dword [esp + 0x34], edx
jmp 0x41c1ec
push 0x4f8140
push edi
call fcn.004027c0
add esp, 8
test al, al
je 0x41c1ec
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x58]
mov dword [esp + 0xc8], eax
mov eax, dword [esi + 0x5c]
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0xc8]
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], eax
mov dword [esp + 0x38], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
xor ebp, ebp
mov ecx, esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], ebp
call fcn.0040fbc0
mov dword [esp + 0x28], eax
add eax, edi
mov dword [esp + 0x60], eax
mov eax, edx
adc eax, ebp
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x34]
push edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
mov dword [esp + 0x28], 1
call fcn.00403960
mov ebp, eax
test ebp, ebp
jne 0x41c48f
cmp dword [esp + 0x2c], 0
ja 0x41c259
cmp dword [esp + 0x28], 0x64
jbe 0x41c48f
mov edi, dword [esp + 0x20]
test edi, edi
je 0x41c2af
test ebx, ebx
je 0x41c2af
cmp dword [esp + 0x24], 0
jne 0x41c2af
lea edx, [esp + 0x88]
push edx
push ebx
lea eax, [esp + 0x100]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41c2af
cmp dword [ebx], 0
mov dword [esp + 0x24], 1
push edi
je 0x41c29c
call fcn.00405340
jmp 0x41c2a1
call fcn.004053b0
mov ecx, dword [edi + 0x20]
add esp, 4
push ebx
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov edi, eax
sub eax, dword [esp + 0x74]
sbb ecx, dword [esp + 0x78]
mov dword [esp + 0x80], ecx
jne 0x41c2d5
cmp eax, 0x1388
jb 0x41c3e6
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
sub eax, edi
mov ecx, 0
sbb edx, ecx
mov dword [esp + 0x80], edx
jne 0x41c2fa
cmp eax, 0x3e8
jbe 0x41c3e6
cmp dword [esi + 0x44], ecx
je 0x41c370
lea eax, [esp + 0x3c]
xor ebp, ebp
push eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
push ebp
push ebp
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [esp + 0x294]
push 0x636188
push 0x32
push ecx
push 0x3e8
call fcn.0041b8b0
add esp, 0x10
cmp dword [0x636188], ebp
jne 0x41c505
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403960
mov edx, dword [esp + 0x40]
mov ebp, eax
mov eax, dword [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
test ebp, ebp
jne 0x41c48f
cmp dword [esp + 0x20], ebp
je 0x41c3d4
test ebx, ebx
je 0x41c3d4
cmp dword [esp + 0x24], ebp
jne 0x41c3d4
lea ecx, [esp + 0x88]
push ecx
push ebx
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41c3d4
mov dword [esp + 0x24], 1
cmp dword [ebx], ebp
je 0x41c3b8
mov eax, dword [esp + 0x20]
push eax
call fcn.00405340
jmp 0x41c3c2
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004053b0
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x20]
add esp, 4
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 0
cmp dword [esp + 0x18], 0
je 0x41c404
push str.Waiting_for_the_picture_appear
push 0
call fcn.0041a300
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x636188], 0
jne 0x41c505
xor eax, eax
cmp eax, dword [esp + 0x64]
ja 0x41c498
jb 0x41c421
cmp edi, dword [esp + 0x60]
jae 0x41c498
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
sub ecx, edi
mov ebp, 0
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41c447
jb 0x41c441
cmp ecx, edx
jae 0x41c447
mov edx, dword [esp + 0x60]
sub edx, edi
mov ecx, dword [esp + 0x294]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
cmp dword [0x636188], ebp
jne 0x41c505
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403960
mov ebp, eax
test ebp, ebp
je 0x41c247
cmp dword [0x636188], 0
jne 0x41c505
test ebp, ebp
jne 0x41c5b8
cmp dword [esi + 0x40], ebp
je 0x41c513
push str.Search_the_picture_timeout
push ebp
call fcn.0041a300
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2a0]
add esp, 8
push ebp
push 0x4f80c0
push edi
call fcn.0041a360
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
cmp dword [0x636188], ebp
jne 0x41c505
mov esi, dword [esp + 0x290]
push edi
mov ecx, esi
call fcn.00416240
mov ecx, esi
call fcn.0040e0b0
inc dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00401850
jmp case.0x41bfab.21
lea edi, [esi + 0x3c]
push str.stop_no_tip
push edi
call fcn.004027c0
add esp, 8
test al, al
je 0x41c567
push str.Search_the_picture_timeout
push 0
call fcn.0041a300
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x18
lea ecx, [esp + 0x1c]
mov dword [0x636188], 1
call fcn.00401850
jmp case.0x41bfab.21
push str.continue
push edi
call fcn.004027c0
add esp, 8
push str.Search_the_picture_timeout
push 0
test al, al
je 0x41c5ae
call fcn.0041a300
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x18
lea ecx, [esp + 0x1c]
call fcn.00401850
jmp case.0x41bfab.21
call fcn.0041a300
add esp, 8
jmp 0x41c54f
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov dword [0x6311a8], edx
mov edx, dword [esp + 0x94]
mov dword [0x6311ac], eax
mov dword [0x6311b0], ecx
mov dword [0x6311b4], edx
cmp dword [esi + 0x40], 0
je 0x41c609
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 1
push 0x4f80c0
push eax
call fcn.0041a360
lea edi, [esi + 0x38]
push 0x4f807c
push edi
call fcn.004027c0
add esp, 8
test al, al
je 0x41c6ae
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00403910
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push edx
push eax
call ebx
mov edi, dword [esp + 0x294]
push 0x636188
push 0x32
push edi
push 0xa
call fcn.0041b8b0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x10
push ecx
push edx
call ebx
push 0x636188
push 0x32
push edi
push 0x32
call fcn.0041b8b0
mov eax, dword [0x631198]
mov edi, dword [sym.imp.USER32.dll_mouse_event]
add esp, 0x10
push 0
push 0
push 0
push 0
push eax
call edi
mov ecx, dword [0x63119c]
push 0
push 0
push 0
push 0
push ecx
call edi
jmp 0x41c7aa
push 0x4f8070
push edi
call fcn.004027c0
add esp, 8
test al, al
je 0x41c6e6
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x8c]
call fcn.00403910
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41c7aa
push str.click_no_move
push edi
call fcn.004027c0
add esp, 8
test al, al
je 0x41c7aa
xor eax, eax
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edi, eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x8c]
call fcn.00403910
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push ecx
push edx
call ebx
mov ebp, dword [esp + 0x294]
push 0x636188
push 0x32
push ebp
push 0xa
call fcn.0041b8b0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
add esp, 0x10
push eax
push ecx
call ebx
push 0x636188
push 0x32
push ebp
push 0x32
call fcn.0041b8b0
mov edx, dword [0x631198]
mov ebp, dword [sym.imp.USER32.dll_mouse_event]
add esp, 0x10
push 0
push 0
push 0
push 0
push edx
call ebp
mov eax, dword [0x63119c]
push 0
push 0
push 0
push 0
push eax
call ebp
test edi, edi
je 0x41c7aa
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
call ebx
cmp dword [esi + 0x10], 0
jbe 0x41c7c0
mov eax, dword [0x6361a8]
push eax
push 0
call fcn.0041a300
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00401850
jmp case.0x41bfab.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00416160
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 1
call fcn.0040e0b0
dec dword [eax]
mov ecx, dword [esp + 0x298]
push 0x4f80c0
lea eax, [esp + 0x48]
push eax
call fcn.0041a520
cmp eax, 1
jne 0x41c85a
mov edx, dword [esi]
mov eax, dword [edx + 0x28]
mov ecx, esi
call eax
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
test ecx, 0xfffffffc
je 0x41c84c
push ebx
mov ecx, ebp
call fcn.00416240
mov ecx, ebp
call fcn.0040e0b0
inc dword [eax]
lea ecx, [esp + 0x44]
call fcn.0040b3c0
jmp case.0x41bfab.21
cmp dword [esi + 0x10], 0
jbe 0x41c871
mov edx, dword [0x6361a8]
push edx
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b3c0
jmp case.0x41bfab.21
mov edx, dword [0x636494]
mov eax, dword [esi + 0x1c]
push 0x50040
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x41c03f
push ebx
mov ecx, ebp
call fcn.00416240
push 0
mov ecx, ebp
call fcn.00404560
inc dword [eax]
jmp case.0x41bfab.21
lea ecx, [esp + 0x44]
call fcn.00453310
mov eax, dword [esp + 0x298]
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [eax + 4]
lea edx, [esi + 0x1c]
push edx
mov dword [esp + 0x290], 2
call fcn.00418bc0
test eax, eax
je 0x41c91a
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebp
call fcn.00416240
cmp dword [esi + 0x10], 0
jbe 0x41c92f
mov edx, dword [0x6361a8]
push edx
jmp 0x41c925
cmp dword [esi + 0x10], 0
jbe 0x41c92f
push str.Label_not_found
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b3c0
jmp case.0x41bfab.21
cmp dword [esi + 0x10], 0
jbe 0x41c056
push str.Step_Complete
jmp 0x41c04c
lea ecx, [esp + 0x1c]
call fcn.00405cf0
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 3
call fcn.00405cf0
mov ecx, dword [ebx + 0x10]
sub ecx, dword [ebx + 0xc]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 4
test ecx, ecx
jbe 0x41c9d9
push edi
mov ecx, ebx
call fcn.00404560
mov edx, dword [eax]
push edx
lea eax, [esp + 0x20]
push 0x4f7b30
push eax
call fcn.00401e50
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x24]
call fcn.00412e10
mov edx, dword [ebx + 0x10]
sub edx, dword [ebx + 0xc]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41c9a0
lea ecx, [esp + 0x24]
call fcn.00405cf0
mov edi, dword [esp + 0x20]
push edi
lea eax, [esp + 0x28]
push str._idx_s
push eax
mov byte [esp + 0x294], 5
call fcn.00401e50
mov ecx, dword [esp + 0x30]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.00419e10
lea ecx, [esp + 0x34]
mov ebp, eax
call fcn.00405cf0
push edi
lea edx, [esp + 0x38]
push str._startT_s
push edx
mov byte [esp + 0x294], 6
call fcn.00401e50
mov eax, dword [esp + 0x40]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.00419e10
lea ecx, [esp + 0x38]
mov ebx, eax
call fcn.00405cf0
push edi
lea ecx, [esp + 0x3c]
push str._endT_s
push ecx
mov byte [esp + 0x294], 7
call fcn.00401e50
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
call fcn.00419e10
fild dword [ebp + 8]
add ebp, 8
sub esp, 8
fstp qword [esp]
push str._CurLoopIndex
mov edi, eax
call fcn.004593c0
mov eax, dword [esp + 0x20]
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
call fcn.00416160
lea ecx, [esp + 0x44]
mov byte [esp + 0x288], 8
call fcn.0040e0b0
add dword [eax], 2
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41cb9d
cmp dword [ebp], eax
jne 0x41cb27
lea ecx, [esp + 0xd8]
push ecx
call fcn.00405150
mov edx, dword [eax]
mov dword [ebx + 8], edx
mov eax, dword [eax + 4]
mov ecx, esi
mov dword [ebx + 0xc], eax
call fcn.0040f8c0
push 0
push 0x3e8
push edx
push eax
call fcn.004b1170
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x38]
call fcn.00403750
mov eax, dword [esp + 0x28]
add eax, dword [ebx + 8]
mov ecx, dword [esp + 0x2c]
adc ecx, dword [ebx + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
jmp 0x41ce28
lea ecx, [esp + 0x28]
push ecx
call fcn.00405150
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
push edx
push eax
lea ecx, [esp + 0x30]
call fcn.00403860
test al, al
je 0x41ce28
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x294]
call fcn.00416240
mov dword [ebp], 1
lea ecx, [esp + 0x44]
call fcn.0040b3c0
lea ecx, [esp + 0x38]
call fcn.00401850
lea ecx, [esp + 0x34]
call fcn.00401850
lea ecx, [esp + 0x24]
call fcn.00401850
lea ecx, [esp + 0x20]
call fcn.00401850
lea ecx, [esp + 0x1c]
call fcn.00401850
jmp case.0x41bfab.21
test eax, eax
jne 0x41cbb4
mov edx, dword [ebp]
cmp edx, dword [esi + 0x20]
jle 0x41ce28
lea eax, [esp + 0x44]
push eax
jmp 0x41cb4f
cmp eax, 3
jne 0x41cbf3
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
lea edx, [esi + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00401360
push edi
call fcn.00439420
add esp, 8
call fcn.00439360
add esp, 4
test eax, eax
jne 0x41ce28
lea eax, [esp + 0x44]
push eax
jmp 0x41cb4f
cmp eax, 4
jne 0x41ccf5
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41cc8d
test eax, eax
jne 0x41cc11
xor ecx, ecx
jmp 0x41cc14
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 9
call fcn.00401360
call fcn.0043d7b0
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.004593c0
mov edx, dword [esp + 0x20]
push edx
call fcn.0044b520
call fcn.004af7a0
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401360
call fcn.0043d7b0
add esp, 4
call fcn.004af7a0
cmp edi, eax
jle 0x41ce17
lea ecx, [esp + 0x44]
push ecx
jmp 0x41cdf6
test eax, eax
jne 0x41cc95
xor ecx, ecx
jmp 0x41cc98
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xa
mov edi, eax
call fcn.0044b520
fadd qword [0x4f5b60]
push ecx
fstp qword [esp]
push edi
call fcn.004593c0
mov eax, dword [esp + 0x20]
push eax
call fcn.0044b520
call fcn.004af7a0
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401360
call fcn.0043d7b0
jmp 0x41cde5
cmp eax, 5
jne 0x41ce28
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41cd7c
test eax, eax
jne 0x41cd0f
xor ecx, ecx
jmp 0x41cd12
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 0xb
call fcn.00401360
call fcn.0043d7b0
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.004593c0
mov edx, dword [esp + 0x20]
push edx
call fcn.0044b520
call fcn.004af7a0
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401360
call fcn.0043d7b0
fsub qword [0x4f5b60]
jmp 0x41cc73
test eax, eax
jne 0x41cd84
xor ecx, ecx
jmp 0x41cd87
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xc
mov edi, eax
call fcn.0044b520
fadd qword [0x4f5b60]
push ecx
fstp qword [esp]
push edi
call fcn.004593c0
mov eax, dword [esp + 0x20]
push eax
call fcn.0044b520
call fcn.004af7a0
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401360
call fcn.0043d7b0
fsub qword [0x4f5b60]
add esp, 4
call fcn.004af7a0
cmp edi, eax
jle 0x41ce17
lea eax, [esp + 0x44]
push eax
mov ecx, dword [esp + 0x294]
call fcn.00416240
lea ecx, [esp + 0x14]
mov dword [ebp], 1
call fcn.00401850
jmp 0x41cb62
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.00401850
cmp dword [esi + 0x10], 0
jbe 0x41ced1
lea ecx, [esp + 0x14]
call fcn.00405cf0
mov eax, dword [esi + 0x1c]
mov byte [esp + 0x288], 0xd
cmp eax, 1
je 0x41ce80
cmp eax, 3
jne 0x41ce68
mov ecx, dword [ebp]
push ecx
lea edx, [esp + 0x18]
push str.While_Loop__d
push edx
call fcn.00401e50
add esp, 0xc
jmp 0x41ceb1
mov eax, dword [ebp]
push eax
lea ecx, [esp + 0x18]
push str.For_Loop__d
push ecx
call fcn.00401e50
add esp, 0xc
jmp 0x41ceb1
add ebx, 8
mov ecx, ebx
call fcn.004038e0
push eax
mov ecx, ebx
call fcn.004038b0
push eax
mov ecx, ebx
call fcn.00403880
mov edx, dword [ebp]
push eax
push edx
lea eax, [esp + 0x24]
push str.For_Loop__d__started_at__02d:_02d:_02d
push eax
call fcn.00401e50
add esp, 0x18
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.0041a300
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.00401850
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
jmp 0x41cb62
push ebx
lea ecx, [esp + 0x48]
call fcn.00416160
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 0xe
call fcn.0040e0b0
dec dword [eax]
lea ecx, [esp + 0x24]
call fcn.00405cf0
lea ecx, [esp + 0x20]
call fcn.00405cf0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x10
test ecx, ecx
jbe 0x41cf7d
lea esp, [esp]
push edi
lea ecx, [esp + 0x48]
call fcn.00404560
mov edx, dword [eax]
push edx
lea eax, [esp + 0x28]
push 0x4f7b30
push eax
call fcn.00401e50
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x24]
call fcn.00412e10
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41cf40
lea ecx, [esp + 0x1c]
call fcn.00405cf0
mov ebp, dword [esp + 0x20]
push ebp
lea eax, [esp + 0x20]
push str._idx_s
push eax
mov byte [esp + 0x294], 0x11
call fcn.00401e50
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.00419e10
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.00405cf0
push ebp
lea edx, [esp + 0x18]
push str._endT_s
push edx
mov byte [esp + 0x294], 0x12
call fcn.00401e50
mov eax, dword [esp + 0x20]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.00419e10
push 0
push 0
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebx
call fcn.0040e9f0
mov ecx, dword [esp + 0x290]
inc dword [edi + 8]
lea edx, [esp + 0x44]
push edx
call fcn.00416240
cmp dword [esi + 0x10], 0
jbe 0x41d028
mov eax, dword [0x6361a8]
push eax
push 0
call fcn.0041a300
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00401850
lea ecx, [esp + 0x1c]
call fcn.00401850
lea ecx, [esp + 0x20]
call fcn.00401850
lea ecx, [esp + 0x24]
call fcn.00401850
lea ecx, [esp + 0x44]
call fcn.0040b3c0
jmp case.0x41bfab.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00416160
mov ebx, 0x13
mov dword [esp + 0x288], ebx
lea edi, [ebx - 0xb]
mov edi, edi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41d0ab
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41d1ef
mov ecx, dword [esp + 0x298]
push 0
push 0
lea eax, [esp + 0x4c]
push eax
call fcn.0040e9f0
test eax, eax
je 0x41d1ef
cmp dword [eax + 8], edi
jne 0x41d090
lea ecx, [esp + 0x20]
call fcn.00405cf0
lea ecx, [esp + 0x1c]
call fcn.00405cf0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x15
test ecx, ecx
jbe 0x41d142
push edi
lea ecx, [esp + 0x48]
call fcn.00404560
mov edx, dword [eax]
push edx
lea eax, [esp + 0x24]
push 0x4f7b30
push eax
call fcn.00401e50
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x20]
call fcn.00412e10
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41d105
lea ecx, [esp + 0x14]
call fcn.00405cf0
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push str._idx_s
push ecx
mov byte [esp + 0x294], 0x16
call fcn.00401e50
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
mov ecx, edi
call fcn.00419e10
lea ecx, [esp + 0x14]
mov dword [eax + 8], 1
call fcn.00401850
lea ecx, [esp + 0x1c]
call fcn.00401850
lea ecx, [esp + 0x20]
mov byte [esp + 0x288], bl
call fcn.00401850
lea ecx, [esp + 0x44]
call fcn.0040e0b0
inc dword [eax]
lea eax, [esp + 0x44]
push eax
mov ecx, edi
call fcn.0041a200
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
test ecx, 0xfffffffc
mov ecx, ebp
je 0x41d1dd
lea edx, [esp + 0x44]
push edx
call fcn.00416240
jmp 0x41d1ef
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], 0xffffffff
call fcn.00453c30
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
test ecx, 0xfffffffc
jne 0x41c85a
push 0
push 0
push str.Action_Script_Error:_Invalid_Exit_For_statement.
call fcn.0049847f
lea ecx, [esp + 0x44]
call fcn.0040b3c0
jmp case.0x41bfab.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00416160
mov edi, dword [esp + 0x298]
mov dword [esp + 0x288], 0x17
mov ebx, 8
mov edi, edi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41d25b
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41d294
push 0
push 0
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call fcn.0040e9f0
test eax, eax
je 0x41d294
cmp dword [eax + 8], ebx
jne 0x41d240
lea ecx, [esp + 0x44]
call fcn.0040e0b0
inc dword [eax]
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebp
call fcn.00416240
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41d2be
push 0
push 0
push str.Action_Script_Error:_Invalid_Continue_For_statement.
call fcn.0049847f
lea ecx, [esp + 0x44]
call fcn.0040b3c0
jmp case.0x41bfab.21
cmp dword [esi + 0x10], 0
jbe 0x41d2d4
mov eax, dword [0x6361a8]
push eax
push 0
call fcn.0041a300
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
jmp 0x41c884
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401360
lea ecx, [esp + 0x20]
push ecx
call fcn.00439420
mov edx, dword [esp + 0x24]
add esp, 4
mov eax, esp
mov dword [eax], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28c], 0x18
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41d32b
inc dword [eax + 4]
lea eax, [esp + 0x18]
push eax
call fcn.0044fe80
add esp, 8
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
mov byte [esp + 0x288], 0x19
jne 0x41d353
lea edx, [esi + 0x8c]
push edx
jmp 0x41d3ac
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xe4]
lea edi, [esi + 0x6c]
push ecx
mov ecx, edi
call fcn.0040e030
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
mov edx, dword [edi]
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], ecx
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x70], edx
call fcn.004398e0
test al, al
je 0x41d3a5
lea ecx, [esp + 0x28]
call fcn.0040b420
add eax, 4
push eax
jmp 0x41d3ac
lea ecx, [esi + 0x8c]
push ecx
mov ecx, ebp
call fcn.00416240
cmp dword [esi + 0x10], 0
jbe 0x41d3ca
mov edx, dword [0x6361a8]
push edx
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00401850
lea ecx, [esp + 0x1c]
jmp 0x41eccb
push ebx
mov ecx, ebp
call fcn.00416240
mov ecx, ebp
call fcn.0040b400
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41d427
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Case_Command.
call fcn.0049847f
jmp case.0x41bfab.21
mov ecx, ebp
call fcn.0040e0b0
inc dword [eax]
cmp dword [esi + 0x10], 0
jbe 0x41d446
mov eax, dword [0x6361a8]
push eax
push 0
call fcn.0041a300
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
push ebx
mov ecx, ebp
call fcn.00416240
mov ecx, ebp
call fcn.0040b400
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
test eax, 0xfffffffc
jne 0x41d495
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Defalult_Command.
call fcn.0049847f
jmp case.0x41bfab.21
mov ecx, ebp
call fcn.0040e0b0
inc dword [eax]
jmp 0x41c03f
cmp dword [esi + 0x10], 0
jbe 0x41d446
push str.Step_Complete
push 0
call fcn.0041a300
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
add esp, 8
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401360
push edi
call fcn.00439420
add esp, 8
call fcn.004392a0
call fcn.004af7a0
fldz
mov dword [esp + 0x20], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov edi, eax
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov dword [esp + 0x2c], edi
call fcn.00401360
push ebx
call fcn.00439420
add esp, 8
call fcn.004392a0
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x60]
xor ebp, ebp
push eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004af7a0
mov ecx, dword [esp + 0x60]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
lea edx, [ecx + edi]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x70], eax
push edx
add eax, edx
push ecx
mov dword [esp + 0x34], eax
call ebx
mov ecx, dword [0x631198]
push ebp
push ebp
push ebp
push ebp
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
mov edi, dword [esp + 0x294]
push ebp
push 0x32
push edi
push 0x64
call fcn.0041b8b0
add esp, 0x10
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], ebp
call fcn.00405860
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00405890
test eax, eax
je 0x41d624
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x48]
call fcn.00405890
test eax, eax
je 0x41d624
inc ebp
mov eax, 0xcccccccd
mul ebp
shr edx, 2
lea eax, [edx + edx*4]
mov ecx, ebp
sub ecx, eax
jne 0x41d612
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
push edx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00405890
test eax, eax
jne 0x41d5e3
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x64]
add eax, edx
mov edx, dword [esp + 0x70]
add ecx, edx
push ecx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041b8b0
mov eax, dword [0x63119c]
add esp, 0x10
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0x32
push edi
push 0xa
call fcn.0041b8b0
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41d685
mov ecx, dword [0x6361a8]
push ecx
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push edi
push edx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401360
push edi
call fcn.00439420
add esp, 8
call fcn.004392a0
call fcn.004af7a0
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401360
push ebx
call fcn.00439420
add esp, 8
call fcn.004392a0
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x3c]
xor ebx, ebx
push eax
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004af7a0
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add eax, edx
add ecx, edi
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [esi + 0x10], ebx
jbe 0x41d446
mov eax, dword [0x6361a8]
push eax
push ebx
jmp 0x41d43e
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401360
push edi
call fcn.00439420
add esp, 8
call fcn.004392a0
call fcn.004af7a0
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401360
push ebx
call fcn.00439420
add esp, 8
call fcn.004392a0
add esp, 0xc
call fcn.004af7a0
cmp dword [0x636074], 6
jne 0x41d7ee
cmp dword [0x636078], 2
jne 0x41d7ee
shl eax, 0x10
cdq
idiv dword [0x63618c]
push 0
push 0
push eax
mov eax, edi
shl eax, 0x10
cdq
idiv dword [0x636190]
push eax
push 0x8001
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
push eax
push edi
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41d430
mov ebp, dword [esi + 0x1c]
mov edi, dword [esi + 0x24]
mov ebx, dword [esi + 0x20]
sub edi, ebp
call fcn.004b01ab
cdq
idiv edi
mov edi, dword [esi + 0x28]
sub edi, dword [esi + 0x20]
add ebp, edx
call fcn.004b01ab
cdq
idiv edi
add ebx, edx
push ebx
push ebp
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41d430
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41d84e
mov eax, dword [0x631198]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 2
jne 0x41d86d
mov ecx, dword [0x63119c]
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 3
jne 0x41d88c
mov edx, dword [0x6311a0]
push 0
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 4
jne 0x41d8aa
mov eax, dword [0x6311a4]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 5
jne 0x41d8c4
push 0
push 0
push 0
push 0
push 0x20
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 6
jne 0x41d8de
push 0
push 0
push 0
push 0
push 0x40
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 7
jne 0x41d8ff
mov ecx, dword [esi + 0x20]
push 0
neg ecx
push ecx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
cmp eax, 8
jne 0x41d430
mov edx, dword [esi + 0x20]
push 0
push edx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d430
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x41d937
mov ebp, dword [0x631198]
mov ebx, dword [0x63119c]
jmp 0x41d959
cmp eax, 1
jne 0x41d944
lea ebp, [eax + 0x1f]
lea ebx, [eax + 0x3f]
jmp 0x41d962
cmp eax, 2
jne 0x41c03f
mov ebp, dword [0x6311a0]
mov ebx, dword [0x6311a4]
cmp ebp, 0xffffffff
je 0x41c03f
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41d987
mov edi, dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d9b4
cmp eax, 1
jne 0x41c03f
mov edi, dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
jmp 0x41c03f
cmp byte [esi + 0x1c], 0
je 0x41d9e1
push 0
push 0x11
call fcn.00432a90
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41d9f3
push 0
push 0x10
call fcn.00432a90
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41da05
push 0
push 0x12
call fcn.00432a90
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41da17
push 0
push 0x5b
call fcn.00432a90
add esp, 8
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41da36
mov edi, edi
movzx ecx, byte [esi + edi + 0x24]
push 0
push ecx
call fcn.00432a90
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41da20
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41da5b
movzx edx, byte [esi + edi + 0x24]
push 2
push edx
call fcn.00432a90
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41da45
cmp byte [esi + 0x1c], 0
je 0x41da6d
push 2
push 0x11
call fcn.00432a90
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41da7f
push 2
push 0x10
call fcn.00432a90
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41da91
push 2
push 0x12
call fcn.00432a90
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41d430
push 2
push 0x5b
call fcn.00432a90
add esp, 8
jmp 0x41d430
cmp dword [esi + 0x20], 0
je 0x41dae7
mov eax, dword [esi + 0x1c]
push eax
call fcn.00403f40
push 0
push 0x11
call fcn.00432a90
push 0
push 0x56
call fcn.00432a90
push 2
push 0x56
call fcn.00432a90
push 2
push 0x11
call fcn.00432a90
add esp, 0x24
jmp 0x41c056
mov ecx, dword [esi + 0x1c]
push ecx
call fcn.00432ad0
add esp, 4
jmp 0x41c056
movzx ecx, byte [esi + 0x1c]
push 0
push ecx
call fcn.00432a90
mov edx, dword [esp + 0x29c]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x18
jmp case.0x41bfab.21
movzx ecx, byte [esi + 0x1c]
push 2
push ecx
call fcn.00432a90
mov edx, dword [esp + 0x29c]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x18
jmp case.0x41bfab.21
or ebx, 0xffffffff
xor eax, eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
cmp dword [esi + 0x34], eax
je 0x41dc25
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41dc25
mov edi, edi
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax], 8
je 0x41dbd8
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax], 9
je 0x41dbd8
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax], 0xa
je 0x41dbd8
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax + 2], bx
jne 0x41dbf5
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x41dba0
jmp 0x41dc25
push ebp
mov ecx, edi
call fcn.00404590
movsx ebx, word [eax + 2]
push ebp
mov ecx, edi
mov dword [esp + 0x2c], ebx
call fcn.00404590
mov ecx, dword [esp + 0x3c]
movsx eax, word [eax + 4]
sub ecx, ebx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
sub ecx, eax
mov dword [esp + 0x14], ecx
push str.Playing...
push 0
call fcn.0041a300
fld1
fst qword [esp + 0x7c]
add esp, 8
fld qword [0x4f5a38]
fcom qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41dc55
fdivr qword [esi + 0x38]
fdivp st(1)
fstp qword [esp + 0x74]
jmp 0x41dc6e
fstp st(1)
fldz
fcomp qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41dc6c
fdiv qword [esi + 0x38]
fstp qword [esp + 0x74]
jmp 0x41dc6e
fstp st(0)
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
mov ebx, dword [esp + 0x294]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41dd76
cmp dword [0x636188], 0
jne 0x41dd76
cmp dword [esp + 0x28], 0xffffffff
mov ecx, edi
je 0x41dd3d
push ebp
call fcn.00404590
cmp word [eax], 8
je 0x41dd3b
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax], 9
je 0x41dd3b
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax], 0xa
je 0x41dd3b
push ebp
mov ecx, edi
call fcn.00404590
cmp word [eax + 2], 0xffff
je 0x41dd3b
push ebp
mov ecx, edi
call fcn.00404590
fld qword [esp + 0x74]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x7c], ecx
shr ecx, 0x10
add ecx, dword [esp + 0x18]
mov dword [esp + 0x80], edx
mov word [esp + 0x7e], cx
mov cx, word [esp + 0x14]
add word [esp + 0x80], cx
sub esp, 8
fstp qword [esp]
push ebx
lea edx, [esp + 0x88]
mov dword [esp + 0x90], eax
push edx
jmp 0x41dd4f
mov ecx, edi
fld qword [esp + 0x74]
sub esp, 8
fstp qword [esp]
push ebx
push ebp
call fcn.00404590
push eax
call fcn.0041b9c0
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add esp, 0x10
cmp ebp, eax
jb 0x41dc96
cmp dword [esi + 0x10], 0
jbe 0x41dd8d
mov ecx, dword [0x6361a8]
push ecx
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ebx
push edx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
cmp dword [esi + 0x20], 0
je 0x41de07
push 0
lea ecx, [esp + 0x10c]
call fcn.00402c20
lea eax, [esi + 0x1c]
push eax
lea ecx, [esp + 0x180]
mov dword [esp + 0x28c], 0x1a
call fcn.00401d90
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x180], ecx
lea ecx, [esp + 0x108]
call fcn.00490ec9
lea ecx, [esp + 0x108]
mov dword [esp + 0x288], 0xffffffff
call fcn.004028b0
jmp 0x41c056
lea edi, [esi + 0x1c]
push str.Logoff
push edi
call fcn.004027c0
add esp, 8
test al, al
je 0x41de37
push str.Logging_off...
push 0
call fcn.0041a300
push 0
call fcn.00402690
add esp, 0xc
jmp 0x41c056
push 0x4f4ff0
push edi
call fcn.004027c0
add esp, 8
push str.Shutting_down...
push 0
test al, al
je 0x41de64
call fcn.0041a300
push 2
call fcn.00402690
add esp, 0xc
jmp 0x41c056
call fcn.0041a300
push 1
call fcn.00402690
add esp, 0xc
jmp 0x41c056
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00405cf0
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0x1b
call fcn.00405cf0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x290], 0x1c
call fcn.0041a320
xor edi, edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov bl, 0x1d
push 0x14
mov byte [esp + 0x294], bl
call fcn.004906f4
add esp, 0xc
mov dword [esp + 0x18], eax
mov byte [esp + 0x288], 0x1e
cmp eax, edi
je 0x41df0e
mov ecx, dword [esi + 0x1c]
push ecx
mov ecx, eax
call fcn.0040f080
jmp 0x41df10
xor eax, eax
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x290], bl
call fcn.0040b990
add esp, 8
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x1f
call fcn.00405b40
lea ecx, [esp + 0xc0]
mov byte [esp + 0x288], bl
call fcn.00401380
mov eax, dword [esi + 0x30]
sub eax, dword [esi + 0x2c]
lea edi, [esi + 0x20]
sar eax, 2
xor ebp, ebp
test eax, eax
jbe 0x41dfbb
push ebp
mov ecx, edi
call fcn.00404560
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00401360
lea ecx, [esp + 0x1c]
push ecx
call fcn.00439420
add esp, 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x20
call fcn.00405b40
lea ecx, [esp + 0x18]
mov byte [esp + 0x288], bl
call fcn.00401380
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
inc ebp
sar eax, 2
cmp ebp, eax
jb 0x41df62
mov edx, dword [esi + 0x40]
push 0
push 0
lea ecx, [esp + 0x84]
push ecx
push edx
call fcn.00426270
mov eax, dword [esi + 0x38]
add esp, 0x10
test eax, eax
je 0x41e048
cmp dword [eax + 8], 0
je 0x41e048
test eax, eax
jne 0x41dfe8
xor ecx, ecx
jmp 0x41dfeb
mov ecx, dword [eax + 8]
mov edx, dword [0x6361f0]
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41e003
inc dword [eax + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
lea edx, [esp + 0xbc]
push edx
mov byte [esp + 0x290], 0x21
call eax
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x22
push eax
mov byte [esp + 0x290], 0x23
call fcn.004592d0
add esp, 8
lea ecx, [esp + 0xb8]
mov byte [esp + 0x288], bl
call fcn.00401850
cmp dword [esi + 0x10], 0
jbe 0x41e062
mov ecx, dword [0x6361a8]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x7c]
mov byte [esp + 0x288], 0x1c
call fcn.0040c600
lea ecx, [esp + 0x14]
call fcn.00401850
lea ecx, [esp + 0x1c]
call fcn.00401850
jmp case.0x41bfab.21
push 0
push 0x631a28
push 0x631280
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401360
lea eax, [esp + 0xbc]
push eax
call fcn.00439420
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x24
test eax, eax
je 0x41e0e5
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004b0ffd
add esp, 0x14
lea ecx, [esp + 0xac]
mov edi, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00401380
test edi, edi
je case.0x41bfab.21
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41bfab.21
mov edx, dword [esi + 0x28]
mov eax, dword [esi + 0x20]
push edx
push eax
mov ecx, edi
call fcn.004892f0
jmp 0x41c03f
push 0
push 0x631a28
push 0x631280
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401360
lea eax, [esp + 0xcc]
push eax
call fcn.00439420
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x25
test eax, eax
je 0x41e177
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004b0ffd
add esp, 0x14
lea ecx, [esp + 0xbc]
mov ebp, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00401380
test ebp, ebp
je case.0x41bfab.21
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41bfab.21
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00401360
lea eax, [esp + 0x18]
push eax
call fcn.00439420
add esp, 8
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x288], 0x26
test eax, eax
je 0x41e211
mov edi, dword [eax + 8]
test edi, edi
je 0x41e211
cmp dword [edi + 8], 0x80f
jne 0x41e211
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41e23c
mov edx, dword [edi + 0x10]
push edx
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
jmp 0x41e23a
fldz
sub esp, 0xc
mov ecx, esp
fstp qword [esp + 4]
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], esp
test eax, eax
je 0x41e22d
inc dword [eax + 4]
call fcn.004392a0
add esp, 0xc
call fcn.004af7a0
mov ebx, eax
mov eax, dword [esi + 0x28]
push eax
push ebx
mov ecx, ebp
call fcn.00489360
cmp dword [esi + 0x10], 0
jbe 0x41e25f
mov ecx, dword [0x6361a8]
push ecx
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41eccb
cmp dword [esi + 0x34], 0
jne 0x41e29d
cmp dword [esi + 0x10], 0
jbe 0x41d446
push str.Nothing_to_play_
jmp 0x41d43c
call fcn.00403f20
xor edx, edx
div dword [esi + 0x34]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], edx
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x41e316
lea ebx, [ebx]
cmp dword [esp + 0x18], ebx
jb 0x41e2e9
push ebp
mov ecx, edi
call fcn.00404590
mov ecx, dword [eax + 4]
add ecx, ebx
cmp dword [esp + 0x18], ecx
jb 0x41e311
push ebp
mov ecx, edi
call fcn.00404590
add ebx, dword [eax + 4]
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41e2d0
jmp 0x41e316
cmp ebp, 0xffffffff
jne 0x41e32a
cmp dword [esi + 0x10], 0
jbe 0x41d446
push str.Just_do_nothing.
jmp 0x41d43c
cmp dword [esi + 0x10], 0
jbe 0x41e39d
push ebp
mov ecx, edi
call fcn.00404590
mov ebx, dword [eax]
push ebp
mov ecx, edi
call fcn.00404590
mov eax, dword [eax]
push 0x5c
push eax
call fcn.004aedc7
add esp, 8
test eax, eax
je 0x41e356
lea ebx, [eax + 2]
lea ecx, [esp + 0x14]
call fcn.00405cf0
push ebx
lea eax, [esp + 0x18]
push str.Play___s_
push eax
mov dword [esp + 0x294], 0x27
call fcn.00401e50
mov ecx, dword [esp + 0x20]
push ecx
push 0
call fcn.0041a300
add esp, 0x14
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0xffffffff
call fcn.00401850
mov ebx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ebx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00405cf0
lea ecx, [esp + 0x24]
mov dword [esp + 0x288], 0x28
call fcn.00405cf0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x290], 0x29
call fcn.0041a320
add esp, 8
push 0
push 0
push 0
push ebp
mov ecx, edi
call fcn.00404590
mov edx, dword [eax + 8]
push edx
call fcn.00426270
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41e422
mov eax, dword [0x6361a8]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.0041a300
add esp, 8
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ebx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.00401850
lea ecx, [esp + 0x1c]
call fcn.00401850
jmp case.0x41bfab.21
lea ecx, [esp + 0x14]
call fcn.00405cf0
cmp dword [esi + 0x28], 0
mov edi, dword [esi + 0x20]
mov ebp, dword [esi + 0x24]
mov dword [esp + 0x288], 0x2a
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
je 0x41e49f
call fcn.004b01ab
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
fdiv qword [0x4f7d30]
fild qword [esp + 0x28]
fmulp st(1)
call fcn.004af7d6
mov edi, eax
mov ebp, edx
mov ebx, dword [esp + 0x294]
test ebp, ebp
jl 0x41e575
jg 0x41e4b8
test edi, edi
jbe 0x41e575
test ebp, ebp
jl 0x41e50e
jg 0x41e4c6
cmp edi, 0x3e8
jbe 0x41e50e
push 0
push 0x3e8
push ebp
push edi
call fcn.004afe10
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
call fcn.00403830
push eax
lea ecx, [esp + 0x40]
call fcn.004037f0
push eax
lea ecx, [esp + 0x44]
call fcn.004037b0
push eax
lea edx, [esp + 0x20]
push str.Wait__02d:_02d:_02d
push edx
call fcn.00401e50
add esp, 0x14
jmp 0x41e522
push ebp
push edi
lea eax, [esp + 0x1c]
push str.Wait__I64d_ms
push eax
call fcn.00401e50
add esp, 0x10
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.0041a300
add esp, 8
test ebp, ebp
jl 0x41e564
jg 0x41e53f
cmp edi, 0x3e8
jbe 0x41e564
push 0x636188
push 0x32
push ebx
push 0x3e8
call fcn.0041b8b0
add esp, 0x10
add edi, 0xfffffc18
adc ebp, 0xffffffff
js 0x41e575
jmp 0x41e4ae
push 0x636188
push 0x32
push ebx
push edi
call fcn.0041b8b0
add esp, 0x10
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ebx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00401850
jmp case.0x41bfab.21
mov eax, dword [esi + 0x1c]
push eax
call fcn.00414990
add esp, 4
test eax, eax
je 0x41e5b9
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x41d430
cmp dword [esi + 0x10], 0
jbe 0x41d446
push str.Can_not_find_the_window
jmp 0x41d43c
mov eax, dword [esi + 0x1c]
push eax
call fcn.00414990
mov edi, eax
add esp, 4
test edi, edi
je 0x41e5b9
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41e5f3
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x41d430
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
mov edi, eax
xor ebp, ebp
call fcn.00411430
mov ebx, eax
mov eax, edx
mov dword [esp + 0x28], ebx
add ebx, edi
mov dword [esp + 0x2c], eax
adc eax, ebp
mov dword [esp + 0x70], eax
mov dword [esp + 0x18], 1
lea esp, [esp]
mov eax, dword [esi + 0x20]
push eax
call fcn.00414990
mov edi, eax
xor eax, eax
add esp, 4
cmp dword [esi + 0x1c], eax
je 0x41e64c
test edi, edi
setne al
jmp 0x41e651
test edi, edi
sete al
test eax, eax
jne 0x41e774
cmp dword [esp + 0x2c], eax
ja 0x41e66a
cmp dword [esp + 0x28], 0x64
jbe 0x41e6f4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebp, ebp
mov edi, eax
cmp dword [esp + 0x18], ebp
je 0x41e69d
cmp dword [esi + 0x1c], ebp
je 0x41e686
push str.Waiting_for_the_window_appear
jmp 0x41e68b
push str.Waiting_for_the_window_disappear
push 0
call fcn.0041a300
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x636188], 0
jne 0x41e6f4
cmp ebp, dword [esp + 0x70]
ja 0x41e6f4
jb 0x41e6b2
cmp edi, ebx
jae 0x41e6f4
mov eax, dword [esp + 0x70]
mov ecx, ebx
sub ecx, edi
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41e6cf
jb 0x41e6cb
cmp ecx, edx
jae 0x41e6cf
mov edx, ebx
sub edx, edi
mov eax, dword [esp + 0x294]
push 0x636188
push 0x32
push eax
push edx
call fcn.0041b8b0
add esp, 0x10
cmp dword [0x636188], 0
je 0x41e630
cmp dword [esi + 0x10], 0
jbe 0x41e709
push str.Wait_for_the_window_timeout
push 0
call fcn.0041a300
add esp, 8
cmp dword [esi + 0x30], 0
je 0x41d446
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 0
push 0x4f80c0
push eax
call fcn.0041a360
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
cmp dword [0x636188], 0
jne case.0x41bfab.21
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x290]
push eax
mov ecx, esi
call fcn.00416240
mov ecx, esi
call fcn.0040e0b0
inc dword [eax]
jmp case.0x41bfab.21
cmp dword [esi + 0x30], 0
je 0x41e792
mov ecx, dword [esp + 0x14]
push 1
push 0x4f80c0
push ecx
mov ecx, dword [esp + 0x2a4]
call fcn.0041a360
cmp dword [esi + 0x2c], 0
je 0x41e7b7
test edi, edi
je 0x41e7b7
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41e7b0
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp dword [esi + 0x10], 0
jbe 0x41d446
mov edx, dword [0x6361a8]
push edx
jmp 0x41d43c
mov dword [0x63619c], 1
cmp dword [esi + 0x10], 0
jbe 0x41e7ec
push str.Step_Complete
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
cmp dword [esi + 0x10], 0
jbe 0x41e821
push str.Step_Complete
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
mov dword [0x636188], 1
jmp case.0x41bfab.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xb8]
push eax
call fcn.00439420
add esp, 8
push eax
mov ecx, 0x6361f0
mov dword [esp + 0x28c], 0x2b
call fcn.00404f30
or edi, 0xffffffff
lea ecx, [esp + 0xb4]
mov dword [esp + 0x288], edi
call fcn.00401380
cmp dword [esi + 0x10], 0
jbe 0x41e8ae
mov ecx, dword [0x6361a8]
push ecx
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
mov dword [esp + 0x98], edi
jmp case.0x41bfab.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xa8]
push eax
call fcn.00439420
add esp, 8
lea ecx, [esp + 0xa4]
call fcn.00401380
jmp 0x41c03f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xac]
push eax
call fcn.00439420
add esp, 8
lea ecx, [esp + 0xa8]
call fcn.00401380
jmp 0x41c03f
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41e942
xor ecx, ecx
jmp 0x41e945
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
call fcn.004af7a0
xor ebp, ebp
mov edi, eax
mov dword [esp + 0x14], ebp
mov ebx, 0x2c
mov dword [esp + 0x288], ebx
call fcn.00418ba0
test eax, eax
je 0x41e991
mov eax, dword [eax + 8]
test eax, eax
je 0x41e991
test edi, edi
jl 0x41e991
cmp edi, dword [eax + 8]
jge 0x41e991
mov ecx, dword [eax]
lea edx, [ecx + edi*4]
push edx
lea ecx, [esp + 0x18]
call fcn.00404f30
mov ebp, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x41e99b
mov eax, dword [eax + 8]
push 0
push 0x631a0c
push 0x631280
push 0
push eax
call fcn.004b0ffd
add esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], ebp
test ebp, ebp
je 0x41e9c1
inc dword [ebp + 4]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0xa4]
push ecx
mov ecx, eax
mov byte [esp + 0x290], 0x2d
call edx
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x2e
push eax
mov byte [esp + 0x290], 0x2f
call fcn.004592d0
add esp, 8
lea ecx, [esp + 0xa0]
mov byte [esp + 0x288], bl
call fcn.00401850
cmp dword [esi + 0x10], 0
jbe 0x41ea1e
mov eax, dword [0x6361a8]
push eax
push 0
call fcn.0041a300
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x636188
push 0x32
push ecx
push edx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41eccb
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401360
lea ecx, [esp + 0xa0]
push ecx
call fcn.00439420
add esp, 8
lea ecx, [esp + 0x9c]
call fcn.00401380
cmp dword [esi + 0x10], 0
jbe 0x41e7ec
mov edx, dword [0x6361a8]
push edx
push 0
call fcn.0041a300
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
add esp, 8
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
jmp case.0x41bfab.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xc8]
push eax
call fcn.00439420
add esp, 8
lea ecx, [esp + 0xc4]
call fcn.00401380
jmp 0x41c03f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xb4]
push eax
call fcn.00439420
add esp, 8
lea ecx, [esp + 0xb0]
call fcn.00401380
jmp 0x41c03f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0x18]
push eax
call fcn.00439420
mov ecx, dword [esp + 0x1c]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28c], 0x30
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41eb4a
inc dword [eax + 4]
call fcn.00439360
mov ecx, dword [esp + 0x29c]
add esp, 4
test eax, eax
jne 0x41ebb3
push eax
push 0x4f80c0
push ebx
call fcn.0041a360
cmp dword [esi + 0x10], 0
jbe 0x41eb7e
push str.The_condition_is_false
push 0
call fcn.0041a300
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x636188
push 0x32
push edx
push eax
call fcn.0041b8b0
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.00416240
mov ecx, ebp
call fcn.0040e0b0
inc dword [eax]
lea ecx, [esp + 0x14]
jmp 0x41eccb
push 1
push 0x4f80c0
push ebx
call fcn.0041a360
jmp 0x41e248
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0x24]
push eax
call fcn.00439420
mov ecx, dword [esp + 0x28]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28c], 0x31
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41ec04
inc dword [eax + 4]
lea edx, [esp + 0x34]
push edx
call fcn.0044fe80
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea ecx, [esp + 0x30]
sete byte [esp + 0x6b]
call fcn.00401850
cmp byte [esp + 0x6b], 0
mov ecx, dword [esp + 0x298]
je 0x41ec88
push 0
push 0x4f80c0
push ebx
call fcn.0041a360
cmp dword [esi + 0x10], 0
jbe 0x41ec5a
push str.The_file_is_not_exist
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.00416240
mov ecx, ebp
call fcn.0040e0b0
inc dword [eax]
jmp 0x41ecc7
push 1
push 0x4f80c0
push ebx
call fcn.0041a360
cmp dword [esi + 0x10], 0
jbe 0x41ecac
mov edx, dword [0x6361a8]
push edx
push 0
call fcn.0041a300
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x636188
push 0x32
push eax
push ecx
call fcn.0041b8b0
add esp, 0x10
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 0xffffffff
call fcn.00401380
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x280]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x278
ret