Function at 0x41c780
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4f2b93
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x64222c]
xor eax, esp
push eax
lea eax, [esp + 0x280]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x298]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x20]
lea ebx, [ecx + 0xc]
push edx
push ebx
mov dword [esp + 0xa4], 0
mov dword [esp + 0x20], ebx
call fcn.0040e720
cmp dword [0x644320], 0
mov esi, eax
jmp 0x41c827
xor eax, eax
jmp 0x41f5c2
mov ebp, dword [esp + 0x290]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
cmp dword [ebp + 0xc], eax
jbe 0x41c83f
call fcn.004bb632
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp]
mov dword [esp + 0x28], eax
cmp edi, dword [ebp + 0x10]
jbe 0x41c853
call fcn.004bb632
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov eax, dword [ebp]
push ecx
push edx
push edi
push eax
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call fcn.0040c9a0
cmp dword [esi + 0x14], 0
jne 0x41c820
mov eax, dword [esi + 8]
dec eax
mov dword [0x644208], 0x50529c
cmp eax, 0x38
ja case.0x41c88b.21
jmp dword [eax*4 + 0x41f5dc]
cmp dword [esi + 0x20], 0
jne 0x41c8a7
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x502a78
push ecx
jmp 0x41c912
lea ebx, [esi + 0x28]
push str.normal
push ebx
mov edi, 5
call fcn.00402780
add esp, 8
test al, al
jne 0x41c907
push 0x505284
push ebx
call fcn.00402780
add esp, 8
test al, al
je 0x41c8da
mov edi, 3
jmp 0x41c907
push 0x50527c
push ebx
call fcn.00402780
add esp, 8
test al, al
je 0x41c8f3
mov edi, 2
jmp 0x41c907
push str.hidden
push ebx
call fcn.00402780
add esp, 8
test al, al
je 0x41c907
xor edi, edi
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
push edi
push 0
push edx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41c936
mov ecx, dword [0x644208]
push ecx
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x502a78
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41c987
mov edx, dword [0x644208]
push edx
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x1c]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x41c970
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x41c9d3
cmp dword [esi + 0x10], 0
jbe 0x41c987
push str.Fild_not_found_
jmp 0x41c97d
cmp dword [esi + 0x10], 0
jbe 0x41c987
push str.Failed_
jmp 0x41c97d
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x41c9b7
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x63f1a8
call dword [sym.imp.USER32.dll_SetRect]
lea ecx, [esp + 0x1c]
call fcn.00401960
xor ebx, ebx
mov dword [esp + 0x288], ebx
call fcn.00419400
mov edi, eax
mov dword [esp + 0x20], edi
cmp edi, ebx
je 0x41ca47
mov eax, dword [edi + 0x20]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41ca47
mov eax, dword [edi + 0x20]
lea edx, [esp + 0xe8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ebx, [esp + 0xe8]
xor eax, eax
lea edi, [esi + 0x4c]
push 0x505228
push edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.00402780
add esp, 8
test al, al
je 0x41ca87
lea ecx, [esp + 0x6c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea edx, [esp + 0x6c]
mov dword [esp + 0x34], edx
jmp 0x41cacc
push 0x505220
push edi
call fcn.00402780
add esp, 8
test al, al
je 0x41cacc
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x58]
mov dword [esp + 0xc8], eax
mov eax, dword [esi + 0x5c]
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0xc8]
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], eax
mov dword [esp + 0x38], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
xor ebp, ebp
mov ecx, esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], ebp
call fcn.004106b0
mov dword [esp + 0x28], eax
add eax, edi
mov dword [esp + 0x60], eax
mov eax, edx
adc eax, ebp
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x34]
push edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
mov dword [esp + 0x28], 1
call fcn.00403cb0
mov ebp, eax
test ebp, ebp
jne 0x41cd6f
cmp dword [esp + 0x2c], 0
ja 0x41cb39
cmp dword [esp + 0x28], 0x64
jbe 0x41cd6f
mov edi, dword [esp + 0x20]
test edi, edi
je 0x41cb8f
test ebx, ebx
je 0x41cb8f
cmp dword [esp + 0x24], 0
jne 0x41cb8f
lea edx, [esp + 0x88]
push edx
push ebx
lea eax, [esp + 0x100]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41cb8f
cmp dword [ebx], 0
mov dword [esp + 0x24], 1
push edi
je 0x41cb7c
call fcn.004046b0
jmp 0x41cb81
call fcn.00404720
mov ecx, dword [edi + 0x20]
add esp, 4
push ebx
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov edi, eax
sub eax, dword [esp + 0x74]
sbb ecx, dword [esp + 0x78]
mov dword [esp + 0x80], ecx
jne 0x41cbb5
cmp eax, 0x1388
jb 0x41ccc6
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
sub eax, edi
mov ecx, 0
sbb edx, ecx
mov dword [esp + 0x80], edx
jne 0x41cbda
cmp eax, 0x3e8
jbe 0x41ccc6
cmp dword [esi + 0x44], ecx
je 0x41cc50
lea eax, [esp + 0x3c]
xor ebp, ebp
push eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
push ebp
push ebp
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [esp + 0x294]
push 0x6441e8
push 0x32
push ecx
push 0x3e8
call fcn.0041c190
add esp, 0x10
cmp dword [0x6441e8], ebp
jne 0x41cde5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403cb0
mov edx, dword [esp + 0x40]
mov ebp, eax
mov eax, dword [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
test ebp, ebp
jne 0x41cd6f
cmp dword [esp + 0x20], ebp
je 0x41ccb4
test ebx, ebx
je 0x41ccb4
cmp dword [esp + 0x24], ebp
jne 0x41ccb4
lea ecx, [esp + 0x88]
push ecx
push ebx
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41ccb4
mov dword [esp + 0x24], 1
cmp dword [ebx], ebp
je 0x41cc98
mov eax, dword [esp + 0x20]
push eax
call fcn.004046b0
jmp 0x41cca2
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00404720
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x20]
add esp, 4
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 0
cmp dword [esp + 0x18], 0
je 0x41cce4
push str.Waiting_for_the_picture_appear
push 0
call fcn.0041abe0
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x6441e8], 0
jne 0x41cde5
xor eax, eax
cmp eax, dword [esp + 0x64]
ja 0x41cd78
jb 0x41cd01
cmp edi, dword [esp + 0x60]
jae 0x41cd78
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
sub ecx, edi
mov ebp, 0
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41cd27
jb 0x41cd21
cmp ecx, edx
jae 0x41cd27
mov edx, dword [esp + 0x60]
sub edx, edi
mov ecx, dword [esp + 0x294]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
cmp dword [0x6441e8], ebp
jne 0x41cde5
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403cb0
mov ebp, eax
test ebp, ebp
je 0x41cb27
cmp dword [0x6441e8], 0
jne 0x41cde5
test ebp, ebp
jne 0x41ce98
cmp dword [esi + 0x40], ebp
je 0x41cdf3
push str.Search_the_picture_timeout
push ebp
call fcn.0041abe0
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2a0]
add esp, 8
push ebp
push 0x5051a0
push edi
call fcn.0041ac40
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
cmp dword [0x6441e8], ebp
jne 0x41cde5
mov esi, dword [esp + 0x290]
push edi
mov ecx, esi
call fcn.004170b0
mov ecx, esi
call fcn.0040c830
inc dword [eax]
lea ecx, [esp + 0x1c]
call fcn.0040b800
jmp case.0x41c88b.21
lea edi, [esi + 0x3c]
push str.stop_no_tip
push edi
call fcn.00402780
add esp, 8
test al, al
je 0x41ce47
push str.Search_the_picture_timeout
push 0
call fcn.0041abe0
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x18
lea ecx, [esp + 0x1c]
mov dword [0x6441e8], 1
call fcn.0040b800
jmp case.0x41c88b.21
push 0x505174
push edi
call fcn.00402780
add esp, 8
push str.Search_the_picture_timeout
push 0
test al, al
je 0x41ce8e
call fcn.0041abe0
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x18
lea ecx, [esp + 0x1c]
call fcn.0040b800
jmp case.0x41c88b.21
call fcn.0041abe0
add esp, 8
jmp 0x41ce2f
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov dword [0x63f1a8], edx
mov edx, dword [esp + 0x94]
mov dword [0x63f1ac], eax
mov dword [0x63f1b0], ecx
mov dword [0x63f1b4], edx
cmp dword [esi + 0x40], 0
je 0x41cee9
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 1
push 0x5051a0
push eax
call fcn.0041ac40
lea edi, [esi + 0x38]
push 0x50515c
push edi
call fcn.00402780
add esp, 8
test al, al
je 0x41cf8e
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00403170
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push edx
push eax
call ebx
mov edi, dword [esp + 0x294]
push 0x6441e8
push 0x32
push edi
push 0xa
call fcn.0041c190
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x10
push ecx
push edx
call ebx
push 0x6441e8
push 0x32
push edi
push 0x32
call fcn.0041c190
mov eax, dword [0x63f198]
mov edi, dword [sym.imp.USER32.dll_mouse_event]
add esp, 0x10
push 0
push 0
push 0
push 0
push eax
call edi
mov ecx, dword [0x63f19c]
push 0
push 0
push 0
push 0
push ecx
call edi
jmp 0x41d08a
push str.move
push edi
call fcn.00402780
add esp, 8
test al, al
je 0x41cfc6
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x8c]
call fcn.00403170
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41d08a
push str.click_no_move
push edi
call fcn.00402780
add esp, 8
test al, al
je 0x41d08a
xor eax, eax
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edi, eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x8c]
call fcn.00403170
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push ecx
push edx
call ebx
mov ebp, dword [esp + 0x294]
push 0x6441e8
push 0x32
push ebp
push 0xa
call fcn.0041c190
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
add esp, 0x10
push eax
push ecx
call ebx
push 0x6441e8
push 0x32
push ebp
push 0x32
call fcn.0041c190
mov edx, dword [0x63f198]
mov ebp, dword [sym.imp.USER32.dll_mouse_event]
add esp, 0x10
push 0
push 0
push 0
push 0
push edx
call ebp
mov eax, dword [0x63f19c]
push 0
push 0
push 0
push 0
push eax
call ebp
test edi, edi
je 0x41d08a
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
call ebx
cmp dword [esi + 0x10], 0
jbe 0x41d0a0
mov eax, dword [0x644208]
push eax
push 0
call fcn.0041abe0
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.0040b800
jmp case.0x41c88b.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00416fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 1
call fcn.0040c830
dec dword [eax]
mov ecx, dword [esp + 0x298]
push 0x5051a0
lea eax, [esp + 0x48]
push eax
call fcn.0041ae00
cmp eax, 1
jne 0x41d13a
mov edx, dword [esi]
mov eax, dword [edx + 0x2c]
mov ecx, esi
call eax
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
test ecx, 0xfffffffc
je 0x41d12c
push ebx
mov ecx, ebp
call fcn.004170b0
mov ecx, ebp
call fcn.0040c830
inc dword [eax]
lea ecx, [esp + 0x44]
call fcn.0040b6b0
jmp case.0x41c88b.21
cmp dword [esi + 0x10], 0
jbe 0x41d151
mov edx, dword [0x644208]
push edx
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b6b0
jmp case.0x41c88b.21
mov edx, dword [0x6444f4]
mov eax, dword [esi + 0x1c]
push 0x50040
push edx
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x41c91f
push ebx
mov ecx, ebp
call fcn.004170b0
push 0
mov ecx, ebp
call fcn.00404990
inc dword [eax]
jmp case.0x41c88b.21
lea ecx, [esp + 0x44]
call fcn.00416eb0
mov eax, dword [esp + 0x298]
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [eax + 4]
lea edx, [esi + 0x1c]
push edx
mov dword [esp + 0x290], 2
call fcn.00419430
test eax, eax
je 0x41d1fa
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebp
call fcn.004170b0
cmp dword [esi + 0x10], 0
jbe 0x41d20f
mov edx, dword [0x644208]
push edx
jmp 0x41d205
cmp dword [esi + 0x10], 0
jbe 0x41d20f
push str.Label_not_found
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b6b0
jmp case.0x41c88b.21
cmp dword [esi + 0x10], 0
jbe 0x41c936
push 0x50529c
jmp 0x41c92c
lea ecx, [esp + 0x1c]
call fcn.00401960
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 3
call fcn.00401960
mov ecx, dword [ebx + 0x10]
sub ecx, dword [ebx + 0xc]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 4
test ecx, ecx
jbe 0x41d2b9
push edi
mov ecx, ebx
call fcn.00404990
mov edx, dword [eax]
push edx
lea eax, [esp + 0x20]
push 0x504c14
push eax
call fcn.00401e40
add esp, 0xc
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x24]
call fcn.004138f0
mov edx, dword [ebx + 0x10]
sub edx, dword [ebx + 0xc]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41d280
lea ecx, [esp + 0x24]
call fcn.00401960
mov edi, dword [esp + 0x20]
push edi
lea eax, [esp + 0x28]
push str._idx_s
push eax
mov byte [esp + 0x294], 5
call fcn.00401e40
mov ecx, dword [esp + 0x30]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.0041a6f0
lea ecx, [esp + 0x34]
mov ebp, eax
call fcn.00401960
push edi
lea edx, [esp + 0x38]
push str._startT_s
push edx
mov byte [esp + 0x294], 6
call fcn.00401e40
mov eax, dword [esp + 0x40]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.0041a6f0
lea ecx, [esp + 0x38]
mov ebx, eax
call fcn.00401960
push edi
lea ecx, [esp + 0x3c]
push str._endT_s
push ecx
mov byte [esp + 0x294], 7
call fcn.00401e40
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
call fcn.0041a6f0
fild dword [ebp + 8]
add ebp, 8
sub esp, 8
fstp qword [esp]
push str._CurLoopIndex
mov edi, eax
call fcn.0045b310
mov eax, dword [esp + 0x20]
add esp, 0xc
push eax
lea ecx, [esp + 0x48]
call fcn.00416fd0
lea ecx, [esp + 0x44]
mov byte [esp + 0x288], 8
call fcn.0040c830
add dword [eax], 2
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41d47d
cmp dword [ebp], eax
jne 0x41d407
lea ecx, [esp + 0xd8]
push ecx
call fcn.004055a0
mov edx, dword [eax]
mov dword [ebx + 8], edx
mov eax, dword [eax + 4]
mov ecx, esi
mov dword [ebx + 0xc], eax
call fcn.004103b0
push 0
push 0x3e8
push edx
push eax
call fcn.004bc110
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x38]
call fcn.00403ad0
mov eax, dword [esp + 0x28]
add eax, dword [ebx + 8]
mov ecx, dword [esp + 0x2c]
adc ecx, dword [ebx + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
jmp 0x41d708
lea ecx, [esp + 0x28]
push ecx
call fcn.004055a0
mov edx, dword [edi + 0xc]
mov eax, dword [edi + 8]
push edx
push eax
lea ecx, [esp + 0x30]
call fcn.00403be0
test al, al
je 0x41d708
lea ecx, [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x294]
call fcn.004170b0
mov dword [ebp], 1
lea ecx, [esp + 0x44]
call fcn.0040b6b0
lea ecx, [esp + 0x38]
call fcn.0040b800
lea ecx, [esp + 0x34]
call fcn.0040b800
lea ecx, [esp + 0x24]
call fcn.0040b800
lea ecx, [esp + 0x20]
call fcn.0040b800
lea ecx, [esp + 0x1c]
call fcn.0040b800
jmp case.0x41c88b.21
test eax, eax
jne 0x41d494
mov edx, dword [ebp]
cmp edx, dword [esi + 0x20]
jle 0x41d708
lea eax, [esp + 0x44]
push eax
jmp 0x41d42f
cmp eax, 3
jne 0x41d4d3
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
lea edx, [esi + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push edx
call fcn.00401370
push edi
call fcn.0043af50
add esp, 8
call fcn.0043ae90
add esp, 4
test eax, eax
jne 0x41d708
lea eax, [esp + 0x44]
push eax
jmp 0x41d42f
cmp eax, 4
jne 0x41d5d5
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41d56d
test eax, eax
jne 0x41d4f1
xor ecx, ecx
jmp 0x41d4f4
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 9
call fcn.00401370
call fcn.0043ee90
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.0045b310
mov edx, dword [esp + 0x20]
push edx
call fcn.0044d650
call fcn.004ba740
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401370
call fcn.0043ee90
add esp, 4
call fcn.004ba740
cmp edi, eax
jle 0x41d6f7
lea ecx, [esp + 0x44]
push ecx
jmp 0x41d6d6
test eax, eax
jne 0x41d575
xor ecx, ecx
jmp 0x41d578
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xa
mov edi, eax
call fcn.0044d650
fadd qword [0x502bb0]
push ecx
fstp qword [esp]
push edi
call fcn.0045b310
mov eax, dword [esp + 0x20]
push eax
call fcn.0044d650
call fcn.004ba740
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401370
call fcn.0043ee90
jmp 0x41d6c5
cmp eax, 5
jne 0x41d708
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41d65c
test eax, eax
jne 0x41d5ef
xor ecx, ecx
jmp 0x41d5f2
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 0xb
call fcn.00401370
call fcn.0043ee90
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.0045b310
mov edx, dword [esp + 0x20]
push edx
call fcn.0044d650
call fcn.004ba740
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401370
call fcn.0043ee90
fsub qword [0x502bb0]
jmp 0x41d553
test eax, eax
jne 0x41d664
xor ecx, ecx
jmp 0x41d667
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xc
mov edi, eax
call fcn.0044d650
fadd qword [0x502bb0]
push ecx
fstp qword [esp]
push edi
call fcn.0045b310
mov eax, dword [esp + 0x20]
push eax
call fcn.0044d650
call fcn.004ba740
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401370
call fcn.0043ee90
fsub qword [0x502bb0]
add esp, 4
call fcn.004ba740
cmp edi, eax
jle 0x41d6f7
lea eax, [esp + 0x44]
push eax
mov ecx, dword [esp + 0x294]
call fcn.004170b0
lea ecx, [esp + 0x14]
mov dword [ebp], 1
call fcn.0040b800
jmp 0x41d442
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.0040b800
cmp dword [esi + 0x10], 0
jbe 0x41d7b1
lea ecx, [esp + 0x14]
call fcn.00401960
mov eax, dword [esi + 0x1c]
mov byte [esp + 0x288], 0xd
cmp eax, 1
je 0x41d760
cmp eax, 3
jne 0x41d748
mov ecx, dword [ebp]
push ecx
lea edx, [esp + 0x18]
push str.While_Loop__d
push edx
call fcn.00401e40
add esp, 0xc
jmp 0x41d791
mov eax, dword [ebp]
push eax
lea ecx, [esp + 0x18]
push str.For_Loop__d
push ecx
call fcn.00401e40
add esp, 0xc
jmp 0x41d791
add ebx, 8
mov ecx, ebx
call fcn.00403c60
push eax
mov ecx, ebx
call fcn.00403c30
push eax
mov ecx, ebx
call fcn.00403c00
mov edx, dword [ebp]
push eax
push edx
lea eax, [esp + 0x24]
push str.For_Loop__d__started_at__02d:_02d:_02d
push eax
call fcn.00401e40
add esp, 0x18
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.0041abe0
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.0040b800
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
jmp 0x41d442
push ebx
lea ecx, [esp + 0x48]
call fcn.00416fd0
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 0xe
call fcn.0040c830
dec dword [eax]
lea ecx, [esp + 0x24]
call fcn.00401960
lea ecx, [esp + 0x20]
call fcn.00401960
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x10
test ecx, ecx
jbe 0x41d85d
lea esp, [esp]
push edi
lea ecx, [esp + 0x48]
call fcn.00404990
mov edx, dword [eax]
push edx
lea eax, [esp + 0x28]
push 0x504c14
push eax
call fcn.00401e40
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x24]
call fcn.004138f0
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41d820
lea ecx, [esp + 0x1c]
call fcn.00401960
mov ebp, dword [esp + 0x20]
push ebp
lea eax, [esp + 0x20]
push str._idx_s
push eax
mov byte [esp + 0x294], 0x11
call fcn.00401e40
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.0041a6f0
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.00401960
push ebp
lea edx, [esp + 0x18]
push str._endT_s
push edx
mov byte [esp + 0x294], 0x12
call fcn.00401e40
mov eax, dword [esp + 0x20]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.0041a6f0
push 0
push 0
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebx
call fcn.0040e720
mov ecx, dword [esp + 0x290]
inc dword [edi + 8]
lea edx, [esp + 0x44]
push edx
call fcn.004170b0
cmp dword [esi + 0x10], 0
jbe 0x41d908
mov eax, dword [0x644208]
push eax
push 0
call fcn.0041abe0
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.0040b800
lea ecx, [esp + 0x1c]
call fcn.0040b800
lea ecx, [esp + 0x20]
call fcn.0040b800
lea ecx, [esp + 0x24]
call fcn.0040b800
lea ecx, [esp + 0x44]
call fcn.0040b6b0
jmp case.0x41c88b.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00416fd0
mov ebx, 0x13
mov dword [esp + 0x288], ebx
lea edi, [ebx - 0xb]
mov edi, edi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41d98b
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41dacf
mov ecx, dword [esp + 0x298]
push 0
push 0
lea eax, [esp + 0x4c]
push eax
call fcn.0040e720
test eax, eax
je 0x41dacf
cmp dword [eax + 8], edi
jne 0x41d970
lea ecx, [esp + 0x20]
call fcn.00401960
lea ecx, [esp + 0x1c]
call fcn.00401960
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x15
test ecx, ecx
jbe 0x41da22
push edi
lea ecx, [esp + 0x48]
call fcn.00404990
mov edx, dword [eax]
push edx
lea eax, [esp + 0x24]
push 0x504c14
push eax
call fcn.00401e40
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x20]
call fcn.004138f0
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41d9e5
lea ecx, [esp + 0x14]
call fcn.00401960
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push str._idx_s
push ecx
mov byte [esp + 0x294], 0x16
call fcn.00401e40
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
mov ecx, edi
call fcn.0041a6f0
lea ecx, [esp + 0x14]
mov dword [eax + 8], 1
call fcn.0040b800
lea ecx, [esp + 0x1c]
call fcn.0040b800
lea ecx, [esp + 0x20]
mov byte [esp + 0x288], bl
call fcn.0040b800
lea ecx, [esp + 0x44]
call fcn.0040c830
inc dword [eax]
lea eax, [esp + 0x44]
push eax
mov ecx, edi
call fcn.0041aae0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
test ecx, 0xfffffffc
mov ecx, ebp
je 0x41dabd
lea edx, [esp + 0x44]
push edx
call fcn.004170b0
jmp 0x41dacf
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], 0xffffffff
call fcn.004197f0
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
test ecx, 0xfffffffc
jne 0x41d13a
push 0
push 0
push str.Action_Script_Error:_Invalid_Exit_For_statement.
call fcn.004a346e
lea ecx, [esp + 0x44]
call fcn.0040b6b0
jmp case.0x41c88b.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00416fd0
mov edi, dword [esp + 0x298]
mov dword [esp + 0x288], 0x17
mov ebx, 8
mov edi, edi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41db3b
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41db74
push 0
push 0
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call fcn.0040e720
test eax, eax
je 0x41db74
cmp dword [eax + 8], ebx
jne 0x41db20
lea ecx, [esp + 0x44]
call fcn.0040c830
inc dword [eax]
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebp
call fcn.004170b0
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41db9e
push 0
push 0
push str.Action_Script_Error:_Invalid_Continue_For_statement.
call fcn.004a346e
lea ecx, [esp + 0x44]
call fcn.0040b6b0
jmp case.0x41c88b.21
cmp dword [esi + 0x10], 0
jbe 0x41dbb4
mov eax, dword [0x644208]
push eax
push 0
call fcn.0041abe0
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
jmp 0x41d164
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401370
lea ecx, [esp + 0x20]
push ecx
call fcn.0043af50
mov edx, dword [esp + 0x24]
add esp, 4
mov eax, esp
mov dword [eax], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28c], 0x18
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41dc0b
inc dword [eax + 4]
lea eax, [esp + 0x18]
push eax
call fcn.00452730
add esp, 8
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
mov byte [esp + 0x288], 0x19
jne 0x41dc33
lea edx, [esi + 0x8c]
push edx
jmp 0x41dc8c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xe4]
lea edi, [esi + 0x6c]
push ecx
mov ecx, edi
call fcn.0040e9a0
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
mov edx, dword [edi]
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], ecx
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x70], edx
call fcn.00470630
test al, al
je 0x41dc85
lea ecx, [esp + 0x28]
call fcn.00441910
add eax, 4
push eax
jmp 0x41dc8c
lea ecx, [esi + 0x8c]
push ecx
mov ecx, ebp
call fcn.004170b0
cmp dword [esi + 0x10], 0
jbe 0x41dcaa
mov edx, dword [0x644208]
push edx
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.0040b800
lea ecx, [esp + 0x1c]
jmp 0x41f5ab
push ebx
mov ecx, ebp
call fcn.004170b0
mov ecx, ebp
call fcn.0040b6f0
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41dd07
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Case_Command.
call fcn.004a346e
jmp case.0x41c88b.21
mov ecx, ebp
call fcn.0040c830
inc dword [eax]
cmp dword [esi + 0x10], 0
jbe 0x41dd26
mov eax, dword [0x644208]
push eax
push 0
call fcn.0041abe0
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
push ebx
mov ecx, ebp
call fcn.004170b0
mov ecx, ebp
call fcn.0040b6f0
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
test eax, 0xfffffffc
jne 0x41dd75
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Defalult_Command.
call fcn.004a346e
jmp case.0x41c88b.21
mov ecx, ebp
call fcn.0040c830
inc dword [eax]
jmp 0x41c91f
cmp dword [esi + 0x10], 0
jbe 0x41dd26
push 0x50529c
push 0
call fcn.0041abe0
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
add esp, 8
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401370
push edi
call fcn.0043af50
add esp, 8
call fcn.0043add0
call fcn.004ba740
fldz
mov dword [esp + 0x20], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov edi, eax
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov dword [esp + 0x2c], edi
call fcn.00401370
push ebx
call fcn.0043af50
add esp, 8
call fcn.0043add0
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x60]
xor ebp, ebp
push eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004ba740
mov ecx, dword [esp + 0x60]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
lea edx, [ecx + edi]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x70], eax
push edx
add eax, edx
push ecx
mov dword [esp + 0x34], eax
call ebx
mov ecx, dword [0x63f198]
push ebp
push ebp
push ebp
push ebp
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
mov edi, dword [esp + 0x294]
push ebp
push 0x32
push edi
push 0x64
call fcn.0041c190
add esp, 0x10
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], ebp
call fcn.00405ba0
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00405bd0
test eax, eax
je 0x41df04
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x48]
call fcn.00405bd0
test eax, eax
je 0x41df04
inc ebp
mov eax, 0xcccccccd
mul ebp
shr edx, 2
lea eax, [edx + edx*4]
mov ecx, ebp
sub ecx, eax
jne 0x41def2
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
push edx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00405bd0
test eax, eax
jne 0x41dec3
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x64]
add eax, edx
mov edx, dword [esp + 0x70]
add ecx, edx
push ecx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041c190
mov eax, dword [0x63f19c]
add esp, 0x10
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0x32
push edi
push 0xa
call fcn.0041c190
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41df65
mov ecx, dword [0x644208]
push ecx
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edi
push edx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401370
push edi
call fcn.0043af50
add esp, 8
call fcn.0043add0
call fcn.004ba740
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401370
push ebx
call fcn.0043af50
add esp, 8
call fcn.0043add0
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x3c]
xor ebx, ebx
push eax
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004ba740
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add eax, edx
add ecx, edi
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [esi + 0x10], ebx
jbe 0x41dd26
mov eax, dword [0x644208]
push eax
push ebx
jmp 0x41dd1e
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401370
push edi
call fcn.0043af50
add esp, 8
call fcn.0043add0
call fcn.004ba740
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401370
push ebx
call fcn.0043af50
add esp, 8
call fcn.0043add0
add esp, 0xc
call fcn.004ba740
cmp dword [0x6440d4], 6
jne 0x41e0ce
cmp dword [0x6440d8], 2
jne 0x41e0ce
shl eax, 0x10
cdq
idiv dword [0x6441ec]
push 0
push 0
push eax
mov eax, edi
shl eax, 0x10
cdq
idiv dword [0x6441f0]
push eax
push 0x8001
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
push eax
push edi
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41dd10
mov ebp, dword [esi + 0x1c]
mov edi, dword [esi + 0x24]
mov ebx, dword [esi + 0x20]
sub edi, ebp
call fcn.004bb14b
cdq
idiv edi
mov edi, dword [esi + 0x28]
sub edi, dword [esi + 0x20]
add ebp, edx
call fcn.004bb14b
cdq
idiv edi
add ebx, edx
push ebx
push ebp
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41dd10
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41e12e
mov eax, dword [0x63f198]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 2
jne 0x41e14d
mov ecx, dword [0x63f19c]
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 3
jne 0x41e16c
mov edx, dword [0x63f1a0]
push 0
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 4
jne 0x41e18a
mov eax, dword [0x63f1a4]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 5
jne 0x41e1a4
push 0
push 0
push 0
push 0
push 0x20
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 6
jne 0x41e1be
push 0
push 0
push 0
push 0
push 0x40
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 7
jne 0x41e1df
mov ecx, dword [esi + 0x20]
push 0
neg ecx
push ecx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
cmp eax, 8
jne 0x41dd10
mov edx, dword [esi + 0x20]
push 0
push edx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41dd10
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x41e217
mov ebp, dword [0x63f198]
mov ebx, dword [0x63f19c]
jmp 0x41e239
cmp eax, 1
jne 0x41e224
lea ebp, [eax + 0x1f]
lea ebx, [eax + 0x3f]
jmp 0x41e242
cmp eax, 2
jne 0x41c91f
mov ebp, dword [0x63f1a0]
mov ebx, dword [0x63f1a4]
cmp ebp, 0xffffffff
je 0x41c91f
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41e267
mov edi, dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e294
cmp eax, 1
jne 0x41c91f
mov edi, dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
jmp 0x41c91f
cmp byte [esi + 0x1c], 0
je 0x41e2c1
push 0
push 0x11
call fcn.004345b0
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41e2d3
push 0
push 0x10
call fcn.004345b0
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41e2e5
push 0
push 0x12
call fcn.004345b0
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41e2f7
push 0
push 0x5b
call fcn.004345b0
add esp, 8
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41e316
mov edi, edi
movzx ecx, byte [esi + edi + 0x24]
push 0
push ecx
call fcn.004345b0
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41e300
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41e33b
movzx edx, byte [esi + edi + 0x24]
push 2
push edx
call fcn.004345b0
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41e325
cmp byte [esi + 0x1c], 0
je 0x41e34d
push 2
push 0x11
call fcn.004345b0
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41e35f
push 2
push 0x10
call fcn.004345b0
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41e371
push 2
push 0x12
call fcn.004345b0
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41dd10
push 2
push 0x5b
call fcn.004345b0
add esp, 8
jmp 0x41dd10
cmp dword [esi + 0x20], 0
je 0x41e3c7
mov eax, dword [esi + 0x1c]
push eax
call fcn.00404290
push 0
push 0x11
call fcn.004345b0
push 0
push 0x56
call fcn.004345b0
push 2
push 0x56
call fcn.004345b0
push 2
push 0x11
call fcn.004345b0
add esp, 0x24
jmp 0x41c936
mov ecx, dword [esi + 0x1c]
push ecx
call fcn.004345f0
add esp, 4
jmp 0x41c936
movzx ecx, byte [esi + 0x1c]
push 0
push ecx
call fcn.004345b0
mov edx, dword [esp + 0x29c]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x18
jmp case.0x41c88b.21
movzx ecx, byte [esi + 0x1c]
push 2
push ecx
call fcn.004345b0
mov edx, dword [esp + 0x29c]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x18
jmp case.0x41c88b.21
or ebx, 0xffffffff
xor eax, eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
cmp dword [esi + 0x34], eax
je 0x41e505
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41e505
mov edi, edi
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax], 8
je 0x41e4b8
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax], 9
je 0x41e4b8
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax], 0xa
je 0x41e4b8
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax + 2], bx
jne 0x41e4d5
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x41e480
jmp 0x41e505
push ebp
mov ecx, edi
call fcn.004049c0
movsx ebx, word [eax + 2]
push ebp
mov ecx, edi
mov dword [esp + 0x2c], ebx
call fcn.004049c0
mov ecx, dword [esp + 0x3c]
movsx eax, word [eax + 4]
sub ecx, ebx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
sub ecx, eax
mov dword [esp + 0x14], ecx
push 0x504e74
push 0
call fcn.0041abe0
fld1
fst qword [esp + 0x7c]
add esp, 8
fld qword [0x502a88]
fcom qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41e535
fdivr qword [esi + 0x38]
fdivp st(1)
fstp qword [esp + 0x74]
jmp 0x41e54e
fstp st(1)
fldz
fcomp qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41e54c
fdiv qword [esi + 0x38]
fstp qword [esp + 0x74]
jmp 0x41e54e
fstp st(0)
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
mov ebx, dword [esp + 0x294]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41e656
cmp dword [0x6441e8], 0
jne 0x41e656
cmp dword [esp + 0x28], 0xffffffff
mov ecx, edi
je 0x41e61d
push ebp
call fcn.004049c0
cmp word [eax], 8
je 0x41e61b
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax], 9
je 0x41e61b
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax], 0xa
je 0x41e61b
push ebp
mov ecx, edi
call fcn.004049c0
cmp word [eax + 2], 0xffff
je 0x41e61b
push ebp
mov ecx, edi
call fcn.004049c0
fld qword [esp + 0x74]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x7c], ecx
shr ecx, 0x10
add ecx, dword [esp + 0x18]
mov dword [esp + 0x80], edx
mov word [esp + 0x7e], cx
mov cx, word [esp + 0x14]
add word [esp + 0x80], cx
sub esp, 8
fstp qword [esp]
push ebx
lea edx, [esp + 0x88]
mov dword [esp + 0x90], eax
push edx
jmp 0x41e62f
mov ecx, edi
fld qword [esp + 0x74]
sub esp, 8
fstp qword [esp]
push ebx
push ebp
call fcn.004049c0
push eax
call fcn.0041c2a0
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add esp, 0x10
cmp ebp, eax
jb 0x41e576
cmp dword [esi + 0x10], 0
jbe 0x41e66d
mov ecx, dword [0x644208]
push ecx
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ebx
push edx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
cmp dword [esi + 0x20], 0
je 0x41e6e7
push 0
lea ecx, [esp + 0x10c]
call fcn.00402be0
lea eax, [esi + 0x1c]
push eax
lea ecx, [esp + 0x180]
mov dword [esp + 0x28c], 0x1a
call fcn.00401d80
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x180], ecx
lea ecx, [esp + 0x108]
call fcn.0049be6a
lea ecx, [esp + 0x108]
mov dword [esp + 0x288], 0xffffffff
call fcn.00402870
jmp 0x41c936
lea edi, [esi + 0x1c]
push str.Logoff
push edi
call fcn.00402780
add esp, 8
test al, al
je 0x41e717
push str.Logging_off...
push 0
call fcn.0041abe0
push 0
call fcn.00402680
add esp, 0xc
jmp 0x41c936
push 0x502020
push edi
call fcn.00402780
add esp, 8
push str.Shutting_down...
push 0
test al, al
je 0x41e744
call fcn.0041abe0
push 2
call fcn.00402680
add esp, 0xc
jmp 0x41c936
call fcn.0041abe0
push 1
call fcn.00402680
add esp, 0xc
jmp 0x41c936
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00401960
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0x1b
call fcn.00401960
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x290], 0x1c
call fcn.0041ac00
xor edi, edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov bl, 0x1d
push 0x14
mov byte [esp + 0x294], bl
call fcn.0049b694
add esp, 0xc
mov dword [esp + 0x18], eax
mov byte [esp + 0x288], 0x1e
cmp eax, edi
je 0x41e7ee
mov ecx, dword [esi + 0x1c]
push ecx
mov ecx, eax
call fcn.0040fa90
jmp 0x41e7f0
xor eax, eax
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x290], bl
call fcn.0040bbc0
add esp, 8
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x1f
call fcn.00405ed0
lea ecx, [esp + 0xc0]
mov byte [esp + 0x288], bl
call fcn.00405f20
mov eax, dword [esi + 0x30]
sub eax, dword [esi + 0x2c]
lea edi, [esi + 0x20]
sar eax, 2
xor ebp, ebp
test eax, eax
jbe 0x41e89b
push ebp
mov ecx, edi
call fcn.00404990
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00401370
lea ecx, [esp + 0x1c]
push ecx
call fcn.0043af50
add esp, 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x20
call fcn.00405ed0
lea ecx, [esp + 0x18]
mov byte [esp + 0x288], bl
call fcn.00405f20
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
inc ebp
sar eax, 2
cmp ebp, eax
jb 0x41e842
mov edx, dword [esi + 0x40]
push 0
push 0
lea ecx, [esp + 0x84]
push ecx
push edx
call fcn.00426db0
mov eax, dword [esi + 0x38]
add esp, 0x10
test eax, eax
je 0x41e928
cmp dword [eax + 8], 0
je 0x41e928
test eax, eax
jne 0x41e8c8
xor ecx, ecx
jmp 0x41e8cb
mov ecx, dword [eax + 8]
mov edx, dword [0x644250]
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41e8e3
inc dword [eax + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
lea edx, [esp + 0xbc]
push edx
mov byte [esp + 0x290], 0x21
call eax
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x22
push eax
mov byte [esp + 0x290], 0x23
call fcn.0045b220
add esp, 8
lea ecx, [esp + 0xb8]
mov byte [esp + 0x288], bl
call fcn.0040b800
cmp dword [esi + 0x10], 0
jbe 0x41e942
mov ecx, dword [0x644208]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x7c]
mov byte [esp + 0x288], 0x1c
call fcn.0040c8a0
lea ecx, [esp + 0x14]
call fcn.0040b800
lea ecx, [esp + 0x1c]
call fcn.0040b800
jmp case.0x41c88b.21
push 0
push 0x63fa28
push 0x63f280
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401370
lea eax, [esp + 0xbc]
push eax
call fcn.0043af50
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x24
test eax, eax
je 0x41e9c5
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004bbf9d
add esp, 0x14
lea ecx, [esp + 0xac]
mov edi, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00405f20
test edi, edi
je case.0x41c88b.21
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41c88b.21
mov edx, dword [esi + 0x28]
mov eax, dword [esi + 0x20]
push edx
push eax
mov ecx, edi
call fcn.00490cc0
jmp 0x41c91f
push 0
push 0x63fa28
push 0x63f280
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401370
lea eax, [esp + 0xcc]
push eax
call fcn.0043af50
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x25
test eax, eax
je 0x41ea57
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004bbf9d
add esp, 0x14
lea ecx, [esp + 0xbc]
mov ebp, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00405f20
test ebp, ebp
je case.0x41c88b.21
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41c88b.21
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00401370
lea eax, [esp + 0x18]
push eax
call fcn.0043af50
add esp, 8
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x288], 0x26
test eax, eax
je 0x41eaf1
mov edi, dword [eax + 8]
test edi, edi
je 0x41eaf1
cmp dword [edi + 8], 0x80f
jne 0x41eaf1
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41eb1c
mov edx, dword [edi + 0x10]
push edx
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
jmp 0x41eb1a
fldz
sub esp, 0xc
mov ecx, esp
fstp qword [esp + 4]
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], esp
test eax, eax
je 0x41eb0d
inc dword [eax + 4]
call fcn.0043add0
add esp, 0xc
call fcn.004ba740
mov ebx, eax
mov eax, dword [esi + 0x28]
push eax
push ebx
mov ecx, ebp
call fcn.00490d30
cmp dword [esi + 0x10], 0
jbe 0x41eb3f
mov ecx, dword [0x644208]
push ecx
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41f5ab
cmp dword [esi + 0x34], 0
jne 0x41eb7d
cmp dword [esi + 0x10], 0
jbe 0x41dd26
push 0x504e50
jmp 0x41dd1c
call fcn.00404270
xor edx, edx
div dword [esi + 0x34]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], edx
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x41ebf6
lea ebx, [ebx]
cmp dword [esp + 0x18], ebx
jb 0x41ebc9
push ebp
mov ecx, edi
call fcn.004049c0
mov ecx, dword [eax + 4]
add ecx, ebx
cmp dword [esp + 0x18], ecx
jb 0x41ebf1
push ebp
mov ecx, edi
call fcn.004049c0
add ebx, dword [eax + 4]
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41ebb0
jmp 0x41ebf6
cmp ebp, 0xffffffff
jne 0x41ec0a
cmp dword [esi + 0x10], 0
jbe 0x41dd26
push str.Just_do_nothing.
jmp 0x41dd1c
cmp dword [esi + 0x10], 0
jbe 0x41ec7d
push ebp
mov ecx, edi
call fcn.004049c0
mov ebx, dword [eax]
push ebp
mov ecx, edi
call fcn.004049c0
mov eax, dword [eax]
push 0x5c
push eax
call fcn.004b9d68
add esp, 8
test eax, eax
je 0x41ec36
lea ebx, [eax + 2]
lea ecx, [esp + 0x14]
call fcn.00401960
push ebx
lea eax, [esp + 0x18]
push 0x504e18
push eax
mov dword [esp + 0x294], 0x27
call fcn.00401e40
mov ecx, dword [esp + 0x20]
push ecx
push 0
call fcn.0041abe0
add esp, 0x14
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0xffffffff
call fcn.0040b800
mov ebx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ebx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00401960
lea ecx, [esp + 0x24]
mov dword [esp + 0x288], 0x28
call fcn.00401960
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x290], 0x29
call fcn.0041ac00
add esp, 8
push 0
push 0
push 0
push ebp
mov ecx, edi
call fcn.004049c0
mov edx, dword [eax + 8]
push edx
call fcn.00426db0
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41ed02
mov eax, dword [0x644208]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.0041abe0
add esp, 8
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ebx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.0040b800
lea ecx, [esp + 0x1c]
call fcn.0040b800
jmp case.0x41c88b.21
lea ecx, [esp + 0x14]
call fcn.00401960
cmp dword [esi + 0x28], 0
mov edi, dword [esi + 0x20]
mov ebp, dword [esi + 0x24]
mov dword [esp + 0x288], 0x2a
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
je 0x41ed7f
call fcn.004bb14b
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
fdiv qword [0x504e10]
fild qword [esp + 0x28]
fmulp st(1)
call fcn.004ba776
mov edi, eax
mov ebp, edx
mov ebx, dword [esp + 0x294]
test ebp, ebp
jl 0x41ee55
jg 0x41ed98
test edi, edi
jbe 0x41ee55
test ebp, ebp
jl 0x41edee
jg 0x41eda6
cmp edi, 0x3e8
jbe 0x41edee
push 0
push 0x3e8
push ebp
push edi
call fcn.004badb0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
call fcn.00403bb0
push eax
lea ecx, [esp + 0x40]
call fcn.00403b70
push eax
lea ecx, [esp + 0x44]
call fcn.00403b30
push eax
lea edx, [esp + 0x20]
push str.Wait__02d:_02d:_02d
push edx
call fcn.00401e40
add esp, 0x14
jmp 0x41ee02
push ebp
push edi
lea eax, [esp + 0x1c]
push str.Wait__I64d_ms
push eax
call fcn.00401e40
add esp, 0x10
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.0041abe0
add esp, 8
test ebp, ebp
jl 0x41ee44
jg 0x41ee1f
cmp edi, 0x3e8
jbe 0x41ee44
push 0x6441e8
push 0x32
push ebx
push 0x3e8
call fcn.0041c190
add esp, 0x10
add edi, 0xfffffc18
adc ebp, 0xffffffff
js 0x41ee55
jmp 0x41ed8e
push 0x6441e8
push 0x32
push ebx
push edi
call fcn.0041c190
add esp, 0x10
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ebx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.0040b800
jmp case.0x41c88b.21
mov eax, dword [esi + 0x1c]
push eax
call fcn.004155a0
add esp, 4
test eax, eax
je 0x41ee99
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x41dd10
cmp dword [esi + 0x10], 0
jbe 0x41dd26
push str.Can_not_find_the_window
jmp 0x41dd1c
mov eax, dword [esi + 0x1c]
push eax
call fcn.004155a0
mov edi, eax
add esp, 4
test edi, edi
je 0x41ee99
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41eed3
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x41dd10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
mov edi, eax
xor ebp, ebp
call fcn.00411f20
mov ebx, eax
mov eax, edx
mov dword [esp + 0x28], ebx
add ebx, edi
mov dword [esp + 0x2c], eax
adc eax, ebp
mov dword [esp + 0x70], eax
mov dword [esp + 0x18], 1
lea esp, [esp]
mov eax, dword [esi + 0x20]
push eax
call fcn.004155a0
mov edi, eax
xor eax, eax
add esp, 4
cmp dword [esi + 0x1c], eax
je 0x41ef2c
test edi, edi
setne al
jmp 0x41ef31
test edi, edi
sete al
test eax, eax
jne 0x41f054
cmp dword [esp + 0x2c], eax
ja 0x41ef4a
cmp dword [esp + 0x28], 0x64
jbe 0x41efd4
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebp, ebp
mov edi, eax
cmp dword [esp + 0x18], ebp
je 0x41ef7d
cmp dword [esi + 0x1c], ebp
je 0x41ef66
push str.Waiting_for_the_window_appear
jmp 0x41ef6b
push str.Waiting_for_the_window_disappear
push 0
call fcn.0041abe0
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x6441e8], 0
jne 0x41efd4
cmp ebp, dword [esp + 0x70]
ja 0x41efd4
jb 0x41ef92
cmp edi, ebx
jae 0x41efd4
mov eax, dword [esp + 0x70]
mov ecx, ebx
sub ecx, edi
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41efaf
jb 0x41efab
cmp ecx, edx
jae 0x41efaf
mov edx, ebx
sub edx, edi
mov eax, dword [esp + 0x294]
push 0x6441e8
push 0x32
push eax
push edx
call fcn.0041c190
add esp, 0x10
cmp dword [0x6441e8], 0
je 0x41ef10
cmp dword [esi + 0x10], 0
jbe 0x41efe9
push str.Wait_for_the_window_timeout
push 0
call fcn.0041abe0
add esp, 8
cmp dword [esi + 0x30], 0
je 0x41dd26
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 0
push 0x5051a0
push eax
call fcn.0041ac40
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
cmp dword [0x6441e8], 0
jne case.0x41c88b.21
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x290]
push eax
mov ecx, esi
call fcn.004170b0
mov ecx, esi
call fcn.0040c830
inc dword [eax]
jmp case.0x41c88b.21
cmp dword [esi + 0x30], 0
je 0x41f072
mov ecx, dword [esp + 0x14]
push 1
push 0x5051a0
push ecx
mov ecx, dword [esp + 0x2a4]
call fcn.0041ac40
cmp dword [esi + 0x2c], 0
je 0x41f097
test edi, edi
je 0x41f097
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41f090
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp dword [esi + 0x10], 0
jbe 0x41dd26
mov edx, dword [0x644208]
push edx
jmp 0x41dd1c
mov dword [0x6441fc], 1
cmp dword [esi + 0x10], 0
jbe 0x41f0cc
push 0x50529c
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
cmp dword [esi + 0x10], 0
jbe 0x41f101
push 0x50529c
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
mov dword [0x6441e8], 1
jmp case.0x41c88b.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0xb8]
push eax
call fcn.0043af50
add esp, 8
push eax
mov ecx, 0x644250
mov dword [esp + 0x28c], 0x2b
call fcn.00405380
or edi, 0xffffffff
lea ecx, [esp + 0xb4]
mov dword [esp + 0x288], edi
call fcn.00405f20
cmp dword [esi + 0x10], 0
jbe 0x41f18e
mov ecx, dword [0x644208]
push ecx
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
mov dword [esp + 0x98], edi
jmp case.0x41c88b.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0xa8]
push eax
call fcn.0043af50
add esp, 8
lea ecx, [esp + 0xa4]
call fcn.00405f20
jmp 0x41c91f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0xac]
push eax
call fcn.0043af50
add esp, 8
lea ecx, [esp + 0xa8]
call fcn.00405f20
jmp 0x41c91f
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41f222
xor ecx, ecx
jmp 0x41f225
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
call fcn.004ba740
xor ebp, ebp
mov edi, eax
mov dword [esp + 0x14], ebp
mov ebx, 0x2c
mov dword [esp + 0x288], ebx
call fcn.00419410
test eax, eax
je 0x41f271
mov eax, dword [eax + 8]
test eax, eax
je 0x41f271
test edi, edi
jl 0x41f271
cmp edi, dword [eax + 8]
jge 0x41f271
mov ecx, dword [eax]
lea edx, [ecx + edi*4]
push edx
lea ecx, [esp + 0x18]
call fcn.00405380
mov ebp, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x41f27b
mov eax, dword [eax + 8]
push 0
push 0x63fa0c
push 0x63f280
push 0
push eax
call fcn.004bbf9d
add esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], ebp
test ebp, ebp
je 0x41f2a1
inc dword [ebp + 4]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0xa4]
push ecx
mov ecx, eax
mov byte [esp + 0x290], 0x2d
call edx
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x2e
push eax
mov byte [esp + 0x290], 0x2f
call fcn.0045b220
add esp, 8
lea ecx, [esp + 0xa0]
mov byte [esp + 0x288], bl
call fcn.0040b800
cmp dword [esi + 0x10], 0
jbe 0x41f2fe
mov eax, dword [0x644208]
push eax
push 0
call fcn.0041abe0
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push ecx
push edx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41f5ab
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401370
lea ecx, [esp + 0xa0]
push ecx
call fcn.0043af50
add esp, 8
lea ecx, [esp + 0x9c]
call fcn.00405f20
cmp dword [esi + 0x10], 0
jbe 0x41f0cc
mov edx, dword [0x644208]
push edx
push 0
call fcn.0041abe0
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
add esp, 8
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
jmp case.0x41c88b.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0xc8]
push eax
call fcn.0043af50
add esp, 8
lea ecx, [esp + 0xc4]
call fcn.00405f20
jmp 0x41c91f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0xb4]
push eax
call fcn.0043af50
add esp, 8
lea ecx, [esp + 0xb0]
call fcn.00405f20
jmp 0x41c91f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0x18]
push eax
call fcn.0043af50
mov ecx, dword [esp + 0x1c]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28c], 0x30
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41f42a
inc dword [eax + 4]
call fcn.0043ae90
mov ecx, dword [esp + 0x29c]
add esp, 4
test eax, eax
jne 0x41f493
push eax
push 0x5051a0
push ebx
call fcn.0041ac40
cmp dword [esi + 0x10], 0
jbe 0x41f45e
push str.The_condition_is_false
push 0
call fcn.0041abe0
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x6441e8
push 0x32
push edx
push eax
call fcn.0041c190
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.004170b0
mov ecx, ebp
call fcn.0040c830
inc dword [eax]
lea ecx, [esp + 0x14]
jmp 0x41f5ab
push 1
push 0x5051a0
push ebx
call fcn.0041ac40
jmp 0x41eb28
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401370
lea eax, [esp + 0x24]
push eax
call fcn.0043af50
mov ecx, dword [esp + 0x28]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28c], 0x31
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41f4e4
inc dword [eax + 4]
lea edx, [esp + 0x34]
push edx
call fcn.00452730
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea ecx, [esp + 0x30]
sete byte [esp + 0x6b]
call fcn.0040b800
cmp byte [esp + 0x6b], 0
mov ecx, dword [esp + 0x298]
je 0x41f568
push 0
push 0x5051a0
push ebx
call fcn.0041ac40
cmp dword [esi + 0x10], 0
jbe 0x41f53a
push str.The_file_is_not_exist
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.004170b0
mov ecx, ebp
call fcn.0040c830
inc dword [eax]
jmp 0x41f5a7
push 1
push 0x5051a0
push ebx
call fcn.0041ac40
cmp dword [esi + 0x10], 0
jbe 0x41f58c
mov edx, dword [0x644208]
push edx
push 0
call fcn.0041abe0
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x6441e8
push 0x32
push eax
push ecx
call fcn.0041c190
add esp, 0x10
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 0xffffffff
call fcn.00405f20
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x280]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x278
ret