Function at 0x41ba30
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4ba673
mov eax, dword fs:[0]
push eax
sub esp, 0xd18
push ebx
push esi
push edi
mov eax, dword [0x4e88d0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp + 0xc], 0
mov dword [ebp - 0x24], 0
mov eax, dword [ebp + 0x10]
add eax, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x18]
mov edx, dword [ebp + 0x10]
call fcn.00418ed0
mov dword [ebp - 0x20], eax
cmp dword [0x4f3e14], 0
jne 0x41bb75
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
sub edx, dword [0x4f4158]
cmp edx, 0x2bf20
jbe 0x41bb75
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x20]
call fcn.00408130
mov dword [ebp - 0xb74], eax
cmp dword [ebp - 0xb74], 0xe
jl 0x41baf0
cmp dword [ebp - 0xb74], 0x12
jle 0x41bae9
jmp 0x41baf0
mov dword [ebp - 0x2c], 0
cmp dword [ebp - 0x2c], 0
je 0x41bb75
push 0
push 0
lea ecx, [ebp - 0x34]
call fcn.00431280
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
call dword [sym.imp.USER32.dll_GetForegroundWindow]
push eax
call fcn.00475a76
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.00432260
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x15c]
call fcn.00472dfc
mov edx, dword [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
mov dword [0x4f4140], 1
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x6f0], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x15c]
call fcn.004323a0
mov eax, dword [ebp - 0x6f0]
jmp 0x420511
mov eax, dword [ebp + 8]
call fcn.0042a450
mov edx, dword [ebp - 0x20]
cmp dword [edx + 0x14], 0
je 0x41bb8e
mov eax, dword [ebp - 0x24]
jmp 0x420511
mov eax, dword [ebp - 0x20]
call fcn.00408130
mov dword [ebp - 0x10], eax
mov dword [0x4f415c], 0x4c7b00
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb78], eax
mov ecx, dword [ebp - 0xb78]
sub ecx, 1
mov dword [ebp - 0xb78], ecx
cmp dword [ebp - 0xb78], 0x2d
ja case.0x41bbce.20
mov edx, dword [ebp - 0xb78]
jmp dword [edx*4 + 0x420524]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x164], 0
mov ecx, dword [ebp - 0x160]
cmp dword [ecx + 0x20], 0
jne 0x41bc24
push 5
push 0
push 0x4c6054
mov ecx, dword [ebp - 0x160]
add ecx, 0x1c
call fcn.00402210
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x164], eax
jmp 0x41bd0e
mov dword [ebp - 0x168], 5
push str.normal
mov edx, dword [ebp - 0x160]
add edx, 0x28
push edx
call fcn.00401b80
add esp, 8
movzx eax, al
test eax, eax
je 0x41bc58
mov dword [ebp - 0x168], 5
jmp 0x41bcd4
push 0x4c7b2c
mov ecx, dword [ebp - 0x160]
add ecx, 0x28
push ecx
call fcn.00401b80
add esp, 8
movzx edx, al
test edx, edx
je 0x41bc82
mov dword [ebp - 0x168], 3
jmp 0x41bcd4
push 0x4c7b34
mov eax, dword [ebp - 0x160]
add eax, 0x28
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41bcac
mov dword [ebp - 0x168], 2
jmp 0x41bcd4
push str.hidden
mov edx, dword [ebp - 0x160]
add edx, 0x28
push edx
call fcn.00401b80
add esp, 8
movzx eax, al
test eax, eax
je 0x41bcd4
mov dword [ebp - 0x168], 0
mov ecx, dword [ebp - 0x168]
push ecx
push 0
mov ecx, dword [ebp - 0x160]
add ecx, 0x24
call fcn.00402210
push eax
mov ecx, dword [ebp - 0x160]
add ecx, 0x1c
call fcn.00402210
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x160]
cmp dword [edx + 0x10], 0
jbe 0x41bd27
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x160]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x16c], eax
push 5
push 0
push 0x4c6054
mov ecx, dword [ebp - 0x16c]
add ecx, 0x1c
call fcn.00402210
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
mov ecx, dword [ebp - 0x16c]
cmp dword [ecx + 0x10], 0
jbe 0x41bd8f
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x16c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x170], eax
push 0
mov ecx, dword [ebp - 0x170]
add ecx, 0x20
call fcn.00402210
push eax
mov ecx, dword [ebp - 0x170]
add ecx, 0x1c
call fcn.00402210
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jne 0x41be36
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jne 0x41be1c
mov ecx, dword [ebp - 0x170]
cmp dword [ecx + 0x10], 0
jbe 0x41be1a
push str.Fild_not_found_
xor eax, eax
call fcn.004013f0
jmp 0x41be34
mov edx, dword [ebp - 0x170]
cmp dword [edx + 0x10], 0
jbe 0x41be34
push str.Failed_
xor eax, eax
call fcn.004013f0
jmp 0x41be50
mov eax, dword [ebp - 0x170]
cmp dword [eax + 0x10], 0
jbe 0x41be50
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x170]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x17c], eax
mov ecx, dword [ebp - 0x17c]
add ecx, 0x1c
call fcn.00402210
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jne 0x41bee6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jne 0x41becc
mov ecx, dword [ebp - 0x17c]
cmp dword [ecx + 0x10], 0
jbe 0x41beca
push str.Fild_not_found_
xor eax, eax
call fcn.004013f0
jmp 0x41bee4
mov edx, dword [ebp - 0x17c]
cmp dword [edx + 0x10], 0
jbe 0x41bee4
push str.Failed_
xor eax, eax
call fcn.004013f0
jmp 0x41bf00
mov eax, dword [ebp - 0x17c]
cmp dword [eax + 0x10], 0
jbe 0x41bf00
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x17c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18c], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
mov ecx, 0x4efdf4
call fcn.004312e0
lea ecx, [ebp - 0x1a4]
call fcn.00401f70
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1d8]
call fcn.00431140
mov dword [ebp - 0x1fc], 0
lea ecx, [ebp - 0x1f8]
call fcn.00431140
cmp dword [0x4f3e0c], 0
je 0x41bfaa
mov ecx, dword [0x4f3e0c]
call fcn.00431270
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41bfaa
lea ecx, [ebp - 0x1f8]
push ecx
mov ecx, dword [0x4f3e0c]
call fcn.00401c10
lea edx, [ebp - 0x1f8]
mov dword [ebp - 0x1fc], edx
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x204], 0
lea ecx, [ebp - 0x1c8]
call fcn.00431140
mov dword [ebp - 0x188], 0
push 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.00431280
push 0x4c6920
mov eax, dword [ebp - 0x18c]
add eax, 0x4c
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c01b
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x1b4]
mov dword [ebp - 0x188], eax
jmp 0x41c071
push 0x4c6964
mov ecx, dword [ebp - 0x18c]
add ecx, 0x4c
push ecx
call fcn.00401b80
add esp, 8
movzx edx, al
test edx, edx
je 0x41c071
mov eax, dword [ebp - 0x18c]
add eax, 0x50
mov ecx, dword [eax]
mov dword [ebp - 0x1c8], ecx
mov edx, dword [eax + 4]
mov dword [ebp - 0x1c4], edx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x1c0], ecx
mov edx, dword [eax + 0xc]
mov dword [ebp - 0x1bc], edx
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x204], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x19c]
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x18c]
call fcn.0040d310
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], edx
mov ecx, dword [ebp - 0x19c]
add ecx, dword [ebp - 0x194]
mov edx, dword [ebp - 0x198]
adc edx, dword [ebp - 0x190]
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x1e0], edx
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x200], 0
mov eax, 1
test eax, eax
je 0x41c4ab
mov ecx, dword [ebp - 0x188]
push ecx
mov edx, dword [ebp - 0x204]
push edx
mov eax, dword [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
mov eax, dword [ebp - 0x18c]
call fcn.0040d4f0
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jne 0x41c143
cmp dword [ebp - 0x190], 0
ja 0x41c148
jb 0x41c143
cmp dword [ebp - 0x194], 0x64
ja 0x41c148
jmp 0x41c4ab
cmp dword [0x4f3e0c], 0
je 0x41c1d8
cmp dword [ebp - 0x1fc], 0
je 0x41c1d8
cmp dword [ebp - 0x1e8], 0
jne 0x41c1d8
lea ecx, [ebp - 0x218]
call fcn.00431140
lea ecx, [ebp - 0x1d8]
call fcn.00431140
push eax
mov ecx, dword [ebp - 0x1fc]
call fcn.00431140
push eax
lea ecx, [ebp - 0x218]
call fcn.00431250
test eax, eax
je 0x41c1d8
mov dword [ebp - 0x1e8], 1
mov edx, dword [ebp - 0x1fc]
cmp dword [edx], 0
je 0x41c1bb
mov edi, dword [0x4f3e0c]
call fcn.00403ca0
jmp 0x41c1c6
mov ebx, dword [0x4f3e0c]
call fcn.00403d10
mov eax, dword [ebp - 0x1fc]
push eax
mov ecx, dword [0x4f3e0c]
call fcn.00401c10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x19c]
sub edx, dword [ebp - 0x1ac]
mov eax, dword [ebp - 0x198]
sbb eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xb80], edx
mov dword [ebp - 0xb7c], eax
jne 0x41c222
cmp dword [ebp - 0xb80], 0x1388
jb 0x41c3a6
mov ecx, dword [ebp - 0x1e4]
sub ecx, dword [ebp - 0x19c]
mov edx, dword [ebp - 0x1e0]
sbb edx, dword [ebp - 0x198]
mov dword [ebp - 0xb88], ecx
mov dword [ebp - 0xb84], edx
jne 0x41c258
cmp dword [ebp - 0xb88], 0x3e8
jbe 0x41c3a6
mov eax, dword [ebp - 0x18c]
cmp dword [eax + 0x44], 0
je 0x41c2f4
push 0
push 0
lea ecx, [ebp - 0x220]
call fcn.00431280
lea ecx, [ebp - 0x220]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0
push 0
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, 0x3e8
call fcn.0041a0c0
add esp, 4
cmp dword [0x4f4140], 0
je 0x41c2b3
jmp 0x41c4ab
mov edx, dword [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x204]
push eax
mov ecx, dword [ebp - 0x1fc]
push ecx
lea edx, [ebp - 0x1d8]
push edx
mov eax, dword [ebp - 0x18c]
call fcn.0040d4f0
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x21c]
push eax
mov ecx, dword [ebp - 0x220]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [ebp - 0x1b8], 0
je 0x41c302
jmp 0x41c4ab
cmp dword [0x4f3e0c], 0
je 0x41c392
cmp dword [ebp - 0x1fc], 0
je 0x41c392
cmp dword [ebp - 0x1e8], 0
jne 0x41c392
lea ecx, [ebp - 0x230]
call fcn.00431140
lea ecx, [ebp - 0x1d8]
call fcn.00431140
push eax
mov ecx, dword [ebp - 0x1fc]
call fcn.00431140
push eax
lea ecx, [ebp - 0x230]
call fcn.00431250
test eax, eax
je 0x41c392
mov dword [ebp - 0x1e8], 1
mov edx, dword [ebp - 0x1fc]
cmp dword [edx], 0
je 0x41c375
mov edi, dword [0x4f3e0c]
call fcn.00403ca0
jmp 0x41c380
mov ebx, dword [0x4f3e0c]
call fcn.00403d10
mov eax, dword [ebp - 0x1fc]
push eax
mov ecx, dword [0x4f3e0c]
call fcn.00401c10
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], ecx
cmp dword [ebp - 0x1a0], 0
je 0x41c3c5
push str.Waiting_for_the_picture_appear
xor eax, eax
call fcn.004013f0
mov dword [ebp - 0x1a0], 0
cmp dword [0x4f4140], 0
je 0x41c3d3
jmp 0x41c4ab
mov edx, dword [ebp - 0x198]
cmp edx, dword [ebp - 0x1e0]
jb 0x41c3f6
ja 0x41c3f1
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x1e4]
jb 0x41c3f6
jmp 0x41c4ab
mov dword [ebp - 0x208], 0x64
mov ecx, dword [ebp - 0x1e4]
sub ecx, dword [ebp - 0x19c]
mov edx, dword [ebp - 0x1e0]
sbb edx, dword [ebp - 0x198]
mov eax, dword [ebp - 0x208]
xor esi, esi
mov dword [ebp - 0xb90], ecx
mov dword [ebp - 0xb8c], edx
mov dword [ebp - 0xb98], eax
mov dword [ebp - 0xb94], esi
mov ecx, dword [ebp - 0xb8c]
cmp ecx, dword [ebp - 0xb94]
ja 0x41c474
jb 0x41c456
mov edx, dword [ebp - 0xb90]
cmp edx, dword [ebp - 0xb98]
jae 0x41c474
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1e0]
sbb ecx, dword [ebp - 0x198]
mov dword [ebp - 0x208], eax
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp - 0x208]
call fcn.0041a0c0
add esp, 4
mov edx, dword [ebp - 0x200]
add edx, 0x64
mov dword [ebp - 0x200], edx
cmp dword [0x4f4140], 0
je 0x41c4a6
jmp 0x41c4ab
jmp 0x41c0ec
cmp dword [0x4f4140], 0
je 0x41c4cb
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
cmp dword [ebp - 0x1b8], 0
jne 0x41c77f
mov eax, dword [ebp - 0x18c]
cmp dword [eax + 0x40], 0
je 0x41c689
cmp dword [0x4f3e14], 0
jne 0x41c580
push str.Search_the_picture_timeout
xor eax, eax
call fcn.004013f0
push 0
push 0x4c7bf4
mov ecx, dword [ebp + 0x10]
push ecx
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x18c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
cmp dword [0x4f4140], 0
je 0x41c54f
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov eax, dword [ebp + 8]
call fcn.0042a360
mov dword [ebp - 0xb9c], eax
mov eax, dword [ebp - 0xb9c]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0xb9c]
mov dword [edx], ecx
jmp 0x41c66d
lea eax, [0x41c58d]
cmp byte [eax], 0x90
je 0x41c5d7
jmp 0x41c58e
push 0x41c58d
push 0x41c65d
push 0x41c5d7
call fcn.00404230
cmp eax, 1
je 0x41c5d7
mov dword [ebp - 0x6f4], 0
push 0x4dad8c
lea eax, [ebp - 0x6f4]
push eax
call fcn.004952f3
jmp 0x41c65d
xor byte [eax - 0x2764f98a], dh
outsb dx, byte [esi]
sub byte [edi + 0x69776e4e], bl
and bh, bl
sbb esp, edi
sbb eax, 0xbd4769c4
cmp dword [ebx + 0x58915ef9], edx
inc ebx
push ecx
sal byte [ecx - 0x44], 0xba
inc esi
cmp dword [eax*2 - 0x5d002558], 0x6123dcdb
fbstp tbyte [ebx]
mov ah, 0x14
dec ebp
inc ecx
pop edx
mov ah, 0x22
inc esp
adc dword [edx - 0x19d64dc7], esp
push es
bound edx, qword [esi]
or eax, 0x3fde8217
out 0xed, al
inc esi
mov ds, eax
stosb byte es:[edi], al
dec ebx
cmp byte [eax - 0x6af1d1c3], dh
leave
adc al, 0xe9
sbb al, 0x96
mov dl, 0x5a
invalid
jmp 0x41c66d
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
push str.stop_no_tip
mov eax, dword [ebp - 0x18c]
add eax, 0x3c
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c6f4
push str.Search_the_picture_timeout
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x18c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [0x4f4140], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
push str.continue
mov eax, dword [ebp - 0x18c]
add eax, 0x3c
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c752
push str.Search_the_picture_timeout
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x18c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
push str.Search_the_picture_timeout
xor eax, eax
call fcn.004013f0
mov dword [0x4f4140], 1
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
cmp dword [0x4f4140], 0
je 0x41c79f
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x1d8]
mov dword [0x4efdf4], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [0x4efdf8], ecx
mov edx, dword [ebp - 0x1d0]
mov dword [0x4efdfc], edx
mov eax, dword [ebp - 0x1cc]
mov dword [0x4efe00], eax
mov ecx, dword [ebp - 0x18c]
cmp dword [ecx + 0x40], 0
je 0x41c7ec
push 1
push 0x4c7bf4
mov edx, dword [ebp + 0x10]
push edx
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
push 0x4c6808
mov eax, dword [ebp - 0x18c]
add eax, 0x38
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c8a3
lea esi, [ebp - 0x238]
lea ecx, [ebp - 0x1d8]
call fcn.00431230
mov edx, dword [ebp - 0x1d4]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, 0xa
call fcn.0041a0c0
add esp, 4
mov ecx, dword [ebp - 0x234]
push ecx
mov edx, dword [ebp - 0x238]
push edx
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, 0x32
call fcn.0041a0c0
add esp, 4
push 0
push 0
push 0
push 0
mov eax, dword [0x4ed834]
push eax
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
mov ecx, dword [0x4ed838]
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41c9dd
push str.move
mov edx, dword [ebp - 0x18c]
add edx, 0x38
push edx
call fcn.00401b80
add esp, 8
movzx eax, al
test eax, eax
je 0x41c8eb
lea esi, [ebp - 0x240]
lea ecx, [ebp - 0x1d8]
call fcn.00431230
mov ecx, dword [ebp - 0x23c]
push ecx
mov edx, dword [ebp - 0x240]
push edx
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41c9dd
push str.click_no_move
mov eax, dword [ebp - 0x18c]
add eax, 0x38
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41c9dd
push 0
push 0
lea ecx, [ebp - 0x254]
call fcn.00431280
lea edx, [ebp - 0x254]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x24c], eax
lea esi, [ebp - 0x248]
lea ecx, [ebp - 0x1d8]
call fcn.00431230
mov eax, dword [ebp - 0x1d4]
push eax
mov ecx, dword [ebp - 0x1d8]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, 0xa
call fcn.0041a0c0
add esp, 4
mov edx, dword [ebp - 0x244]
push edx
mov eax, dword [ebp - 0x248]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, 0x32
call fcn.0041a0c0
add esp, 4
push 0
push 0
push 0
push 0
mov ecx, dword [0x4ed834]
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
mov edx, dword [0x4ed838]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
cmp dword [ebp - 0x24c], 0
je 0x41c9dd
mov eax, dword [ebp - 0x250]
push eax
mov ecx, dword [ebp - 0x254]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
mov edx, dword [ebp - 0x18c]
cmp dword [edx + 0x10], 0
jbe 0x41c9f6
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x18c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.00401fa0
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x258], eax
lea ecx, [ebp - 0x270]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0042a150
mov dword [ebp - 4], 2
lea eax, [ebp - 0x270]
call fcn.0042a360
mov dword [ebp - 0xba4], eax
mov edx, dword [ebp - 0xba4]
mov eax, dword [edx]
sub eax, 1
mov ecx, dword [ebp - 0xba4]
mov dword [ecx], eax
push 0x4c7bf4
mov edx, dword [ebp + 0x10]
push edx
lea ecx, [ebp - 0x270]
call fcn.0041b810
cmp eax, 1
jne 0x41caf2
mov eax, dword [ebp - 0x258]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x258]
mov eax, dword [edx + 0x28]
call eax
mov dword [ebp - 0x274], eax
mov ecx, dword [ebp - 0x274]
call fcn.0042a350
movzx ecx, al
test ecx, ecx
jne 0x41cadb
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov eax, dword [ebp + 8]
call fcn.0042a360
mov dword [ebp - 0xba8], eax
mov edx, dword [ebp - 0xba8]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0xba8]
mov dword [ecx], eax
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x270]
call fcn.0042a230
jmp case.0x41bbce.20
mov edx, dword [ebp - 0x258]
cmp dword [edx + 0x10], 0
jbe 0x41cb0b
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x258]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x270]
call fcn.0042a230
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x278], eax
push 0x50040
mov ecx, 0x4f45f0
call fcn.00402210
push eax
mov ecx, dword [ebp - 0x278]
add ecx, 0x1c
call fcn.00402210
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov ecx, dword [ebp - 0x278]
cmp dword [ecx + 0x10], 0
jbe 0x41cb87
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x278]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.0042a260
xor edi, edi
mov esi, dword [ebp + 8]
call fcn.0042abc0
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xbac]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0xbac]
mov dword [edx], ecx
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x27c]
cmp dword [ecx + 0x10], 0
jbe 0x41cc02
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x27c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x280], eax
lea ecx, [ebp - 0x288]
call fcn.00401f70
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401f70
mov byte [ebp - 4], 4
mov dword [ebp - 0x2bc], 0
jmp 0x41cc67
mov ecx, dword [ebp - 0x2bc]
add ecx, 1
mov dword [ebp - 0x2bc], ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0042a340
cmp dword [ebp - 0x2bc], eax
jae 0x41ccb0
mov edi, dword [ebp - 0x2bc]
mov esi, dword [ebp - 0x1c]
call fcn.0042abc0
mov edx, dword [eax]
push edx
push 0x4c7aec
lea eax, [ebp - 0x288]
push eax
call fcn.004021f0
add esp, 0xc
lea ecx, [ebp - 0x288]
push ecx
lea ecx, [ebp - 0x284]
call fcn.00404b10
jmp 0x41cc58
lea ecx, [ebp - 0x2b0]
call fcn.00401f70
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x284]
push edx
push str._idx_s
lea eax, [ebp - 0x2b0]
push eax
call fcn.004021f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x2b0]
call fcn.00402210
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00418920
mov dword [ebp - 0x2ac], eax
lea ecx, [ebp - 0x2a4]
call fcn.00401f70
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x284]
push edx
push str._startT_s
lea eax, [ebp - 0x2a4]
push eax
call fcn.004021f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x2a4]
call fcn.00402210
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00418920
mov dword [ebp - 0x2a8], eax
lea ecx, [ebp - 0x2b8]
call fcn.00401f70
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x284]
push edx
push str._endT_s
lea eax, [ebp - 0x2b8]
push eax
call fcn.004021f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x2b8]
call fcn.00402210
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00418920
mov dword [ebp - 0x2b4], eax
mov edx, dword [ebp - 0x2ac]
fild dword [edx + 8]
sub esp, 8
fstp qword [esp]
mov esi, str.CurLoopIndex
call fcn.00442ed0
add esp, 8
lea eax, [ebp - 0x2a0]
push eax
mov ecx, dword [ebp - 0x1c]
call fcn.0042a150
mov byte [ebp - 4], 8
lea eax, [ebp - 0x2a0]
call fcn.0042a360
mov dword [ebp - 0xbb0], eax
mov ecx, dword [ebp - 0xbb0]
mov edx, dword [ecx]
add edx, 2
mov eax, dword [ebp - 0xbb0]
mov dword [eax], edx
mov ecx, dword [ebp - 0x280]
cmp dword [ecx + 0x1c], 1
jne 0x41cf3c
mov edx, dword [ebp - 0x2ac]
cmp dword [edx + 8], 1
jne 0x41ce8f
lea esi, [ebp - 0x6fc]
call fcn.00431210
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [ebp - 0x2a8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov ecx, dword [ebp - 0x280]
call fcn.0040a5b0
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push 0
push 0x3e8
mov ecx, dword [ebp - 0x2c8]
push ecx
mov edx, dword [ebp - 0x2cc]
push edx
call fcn.0049d540
push eax
push 0
push 0
xor eax, eax
lea esi, [ebp - 0x2c4]
call fcn.004311b0
mov eax, dword [ebp - 0x2c0]
push eax
mov ecx, dword [ebp - 0x2c4]
push ecx
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
lea eax, [ebp - 0x704]
call fcn.00431190
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x2b4]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
jmp 0x41cf37
lea esi, [ebp - 0x2d4]
call fcn.00431210
mov edx, dword [ebp - 0x2b4]
mov eax, dword [edx + 0xc]
push eax
mov ecx, dword [edx + 8]
push ecx
lea eax, [ebp - 0x2d4]
call fcn.00431170
movzx edx, al
test edx, edx
je 0x41cf37
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov eax, dword [ebp - 0x2ac]
mov dword [eax + 8], 1
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
jmp 0x41d705
mov ecx, dword [ebp - 0x280]
cmp dword [ecx + 0x1c], 0
jne 0x41cfe2
mov edx, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x280]
mov ecx, dword [edx + 8]
cmp ecx, dword [eax + 0x20]
jle 0x41cfdd
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 8], 1
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
jmp 0x41d705
mov eax, dword [ebp - 0x280]
cmp dword [eax + 0x1c], 3
jne 0x41d0cc
mov ecx, dword [ebp - 0x280]
add ecx, 0x28
push ecx
mov esi, esp
mov dword [ebp - 0x708], esp
push ecx
mov eax, esp
mov dword [ebp - 0x70c], esp
call fcn.00429960
mov dword [ebp - 0xbb4], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xbb8], eax
mov ecx, dword [ebp - 0xbb8]
mov dword [ebp - 0xbbc], ecx
call fcn.0045f620
add esp, 4
mov dword [ebp - 0xbc0], eax
cmp dword [ebp - 0xbc0], 0
jne 0x41d0c7
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 8], 1
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
jmp 0x41d705
mov eax, dword [ebp - 0x280]
cmp dword [eax + 0x1c], 4
jne 0x41d3e5
mov ecx, dword [ebp - 0x2ac]
cmp dword [ecx + 8], 1
jne 0x41d275
mov eax, dword [ebp - 0x280]
add eax, 0x2c
call fcn.004299f0
mov dword [ebp - 0xbc4], eax
lea edx, [ebp - 0x2e0]
push edx
mov eax, dword [ebp - 0xbc4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xbc4]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x280]
add ecx, 0x30
push ecx
mov eax, esp
mov dword [ebp - 0x710], esp
call fcn.00429960
mov dword [ebp - 0xbc8], eax
call fcn.0045f4f0
add esp, 4
fstp qword [ebp - 0xbd0]
sub esp, 8
fld qword [ebp - 0xbd0]
fstp qword [esp]
lea ecx, [ebp - 0x2e0]
call fcn.00402210
mov esi, eax
call fcn.00442ed0
add esp, 8
lea ecx, [ebp - 0x2e0]
call fcn.00402210
mov ecx, eax
call fcn.00442e60
call fcn.00497580
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x34
push ecx
mov eax, esp
mov dword [ebp - 0x714], esp
call fcn.00429960
mov dword [ebp - 0xbd4], eax
call fcn.0045f4f0
add esp, 4
fstp qword [ebp - 0xbdc]
fld qword [ebp - 0xbdc]
call fcn.00497580
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [ebp - 0x2d8]
jle 0x41d261
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2e0]
call fcn.00401fa0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2e0]
call fcn.00401fa0
jmp 0x41d3e0
mov eax, dword [ebp - 0x280]
add eax, 0x2c
call fcn.004299f0
mov dword [ebp - 0xbe0], eax
lea eax, [ebp - 0x2ec]
push eax
mov ecx, dword [ebp - 0xbe0]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xbe0]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x2ec]
call fcn.00402210
mov ecx, eax
call fcn.00442e60
fadd qword [0x4ceb50]
sub esp, 8
fstp qword [esp]
lea ecx, [ebp - 0x2ec]
call fcn.00402210
mov esi, eax
call fcn.00442ed0
add esp, 8
lea ecx, [ebp - 0x2ec]
call fcn.00402210
mov ecx, eax
call fcn.00442e60
call fcn.00497580
mov dword [ebp - 0x2e8], eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x34
push ecx
mov eax, esp
mov dword [ebp - 0x718], esp
call fcn.00429960
mov dword [ebp - 0xbe4], eax
call fcn.0045f4f0
add esp, 4
fstp qword [ebp - 0xbec]
fld qword [ebp - 0xbec]
call fcn.00497580
mov dword [ebp - 0x2e4], eax
mov ecx, dword [ebp - 0x2e8]
cmp ecx, dword [ebp - 0x2e4]
jle 0x41d3d1
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2ec]
call fcn.00401fa0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2ec]
call fcn.00401fa0
jmp 0x41d705
mov eax, dword [ebp - 0x280]
cmp dword [eax + 0x1c], 5
jne 0x41d705
mov ecx, dword [ebp - 0x2ac]
cmp dword [ecx + 8], 1
jne 0x41d594
mov eax, dword [ebp - 0x280]
add eax, 0x2c
call fcn.004299f0
mov dword [ebp - 0xbf0], eax
lea edx, [ebp - 0x2f8]
push edx
mov eax, dword [ebp - 0xbf0]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xbf0]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x280]
add ecx, 0x30
push ecx
mov eax, esp
mov dword [ebp - 0x71c], esp
call fcn.00429960
mov dword [ebp - 0xbf4], eax
call fcn.0045f4f0
add esp, 4
fstp qword [ebp - 0xbfc]
sub esp, 8
fld qword [ebp - 0xbfc]
fstp qword [esp]
lea ecx, [ebp - 0x2f8]
call fcn.00402210
mov esi, eax
call fcn.00442ed0
add esp, 8
lea ecx, [ebp - 0x2f8]
call fcn.00402210
mov ecx, eax
call fcn.00442e60
call fcn.00497580
mov dword [ebp - 0x2f4], eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x34
push ecx
mov eax, esp
mov dword [ebp - 0x720], esp
call fcn.00429960
mov dword [ebp - 0xc00], eax
call fcn.0045f4f0
add esp, 4
fstp qword [ebp - 0xc08]
fld qword [ebp - 0xc08]
fsub qword [0x4ceb50]
call fcn.00497580
mov dword [ebp - 0x2f0], eax
mov ecx, dword [ebp - 0x2f4]
cmp ecx, dword [ebp - 0x2f0]
jle 0x41d580
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2f8]
call fcn.00401fa0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2f8]
call fcn.00401fa0
jmp 0x41d705
mov eax, dword [ebp - 0x280]
add eax, 0x2c
call fcn.004299f0
mov dword [ebp - 0xc0c], eax
lea eax, [ebp - 0x304]
push eax
mov ecx, dword [ebp - 0xc0c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xc0c]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x304]
call fcn.00402210
mov ecx, eax
call fcn.00442e60
fadd qword [0x4ceb50]
sub esp, 8
fstp qword [esp]
lea ecx, [ebp - 0x304]
call fcn.00402210
mov esi, eax
call fcn.00442ed0
add esp, 8
lea ecx, [ebp - 0x304]
call fcn.00402210
mov ecx, eax
call fcn.00442e60
call fcn.00497580
mov dword [ebp - 0x300], eax
mov ecx, dword [ebp - 0x280]
add ecx, 0x34
push ecx
mov eax, esp
mov dword [ebp - 0x724], esp
call fcn.00429960
mov dword [ebp - 0xc10], eax
call fcn.0045f4f0
add esp, 4
fstp qword [ebp - 0xc18]
fld qword [ebp - 0xc18]
fsub qword [0x4ceb50]
call fcn.00497580
mov dword [ebp - 0x2fc], eax
mov ecx, dword [ebp - 0x300]
cmp ecx, dword [ebp - 0x2fc]
jle 0x41d6f6
lea ebx, [ebp - 0x2a0]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov edx, dword [ebp - 0x2ac]
mov dword [edx + 8], 1
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x304]
call fcn.00401fa0
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x304]
call fcn.00401fa0
mov eax, dword [ebp - 0x280]
cmp dword [eax + 0x10], 0
jbe 0x41d7e9
lea ecx, [ebp - 0x308]
call fcn.00401f70
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x280]
cmp dword [ecx + 0x1c], 1
je 0x41d77c
mov edx, dword [ebp - 0x280]
cmp dword [edx + 0x1c], 3
jne 0x41d75c
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax + 8]
push ecx
push str.While_Loop__d
lea edx, [ebp - 0x308]
push edx
call fcn.004021f0
add esp, 0xc
jmp 0x41d77a
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax + 8]
push ecx
push str.For_Loop__d
lea edx, [ebp - 0x308]
push edx
call fcn.004021f0
add esp, 0xc
jmp 0x41d7c7
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
call fcn.004314c0
push eax
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
call fcn.00431490
push eax
mov ecx, dword [ebp - 0x2a8]
add ecx, 8
call fcn.00431460
push eax
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [eax + 8]
push ecx
push str.For_Loop__d__started_at__02d:_02d:_02d
lea edx, [ebp - 0x308]
push edx
call fcn.004021f0
add esp, 0x18
lea ecx, [ebp - 0x308]
call fcn.00402210
push eax
xor eax, eax
call fcn.004013f0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x308]
call fcn.00401fa0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x280]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov byte [ebp - 4], 7
lea esi, [ebp - 0x2a0]
call fcn.0042a230
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b8]
call fcn.00401fa0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2a4]
call fcn.00401fa0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2b0]
call fcn.00401fa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x284]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.00401fa0
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30c], eax
lea ecx, [ebp - 0x32c]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0042a150
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x32c]
call fcn.0042a360
mov dword [ebp - 0xc1c], eax
mov edx, dword [ebp - 0xc1c]
mov eax, dword [edx]
sub eax, 1
mov ecx, dword [ebp - 0xc1c]
mov dword [ecx], eax
lea ecx, [ebp - 0x314]
call fcn.00401f70
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x310]
call fcn.00401f70
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x344], 0
jmp 0x41d8e2
mov edx, dword [ebp - 0x344]
add edx, 1
mov dword [ebp - 0x344], edx
lea ecx, [ebp - 0x32c]
call fcn.0042a340
cmp dword [ebp - 0x344], eax
jae 0x41d931
mov edi, dword [ebp - 0x344]
lea esi, [ebp - 0x32c]
call fcn.0042abc0
mov eax, dword [eax]
push eax
push 0x4c7aec
lea ecx, [ebp - 0x314]
push ecx
call fcn.004021f0
add esp, 0xc
lea edx, [ebp - 0x314]
push edx
lea ecx, [ebp - 0x310]
call fcn.00404b10
jmp 0x41d8d3
lea ecx, [ebp - 0x338]
call fcn.00401f70
mov byte [ebp - 4], 0x11
mov eax, dword [ebp - 0x310]
push eax
push str._idx_s
lea ecx, [ebp - 0x338]
push ecx
call fcn.004021f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x338]
call fcn.00402210
push eax
mov edx, dword [ebp + 0x10]
push edx
call fcn.00418920
mov dword [ebp - 0x334], eax
lea ecx, [ebp - 0x340]
call fcn.00401f70
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x310]
push eax
push str._endT_s
lea ecx, [ebp - 0x340]
push ecx
call fcn.004021f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x340]
call fcn.00402210
push eax
mov edx, dword [ebp + 0x10]
push edx
call fcn.00418920
mov dword [ebp - 0x33c], eax
lea eax, [ebp - 0x32c]
push eax
xor eax, eax
xor ecx, ecx
mov edx, dword [ebp + 0x10]
call fcn.00418ed0
mov dword [ebp - 0x330], eax
mov ecx, dword [ebp - 0x334]
mov edx, dword [ecx + 8]
add edx, 1
mov eax, dword [ebp - 0x334]
mov dword [eax + 8], edx
lea ebx, [ebp - 0x32c]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov ecx, dword [ebp - 0x30c]
cmp dword [ecx + 0x10], 0
jbe 0x41da15
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x30c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x340]
call fcn.00401fa0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x338]
call fcn.00401fa0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x310]
call fcn.00401fa0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x314]
call fcn.00401fa0
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x32c]
call fcn.0042a230
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0x360]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0042a150
mov dword [ebp - 4], 0x13
mov edx, 1
test edx, edx
je 0x41dc88
lea eax, [ebp - 0x360]
call fcn.0042a430
lea ecx, [ebp - 0x360]
call fcn.0042a350
movzx eax, al
test eax, eax
je 0x41dad1
jmp 0x41dc88
lea ecx, [ebp - 0x360]
push ecx
xor eax, eax
xor ecx, ecx
mov edx, dword [ebp + 0x10]
call fcn.00418ed0
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
jne 0x41daf8
jmp 0x41dc88
mov eax, dword [ebp - 0x364]
call fcn.00408130
cmp eax, 8
jne 0x41dc83
lea ecx, [ebp - 0x36c]
call fcn.00401f70
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x368]
call fcn.00401f70
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x378], 0
jmp 0x41db45
mov edx, dword [ebp - 0x378]
add edx, 1
mov dword [ebp - 0x378], edx
lea ecx, [ebp - 0x360]
call fcn.0042a340
cmp dword [ebp - 0x378], eax
jae 0x41db94
mov edi, dword [ebp - 0x378]
lea esi, [ebp - 0x360]
call fcn.0042abc0
mov eax, dword [eax]
push eax
push 0x4c7aec
lea ecx, [ebp - 0x36c]
push ecx
call fcn.004021f0
add esp, 0xc
lea edx, [ebp - 0x36c]
push edx
lea ecx, [ebp - 0x368]
call fcn.00404b10
jmp 0x41db36
lea ecx, [ebp - 0x374]
call fcn.00401f70
mov byte [ebp - 4], 0x16
mov eax, dword [ebp - 0x368]
push eax
push str._idx_s
lea ecx, [ebp - 0x374]
push ecx
call fcn.004021f0
add esp, 0xc
push 0
lea ecx, [ebp - 0x374]
call fcn.00402210
push eax
mov edx, dword [ebp + 0x10]
push edx
call fcn.00418920
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
mov dword [eax + 8], 1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x374]
call fcn.00401fa0
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x368]
call fcn.00401fa0
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x36c]
call fcn.00401fa0
lea eax, [ebp - 0x360]
call fcn.0042a360
mov dword [ebp - 0xc20], eax
mov ecx, dword [ebp - 0xc20]
mov edx, dword [ecx]
add edx, 1
mov eax, dword [ebp - 0xc20]
mov dword [eax], edx
lea eax, [ebp - 0x360]
mov ecx, dword [ebp + 0x10]
call fcn.00418ec0
lea ecx, [ebp - 0x360]
call fcn.0042a350
movzx ecx, al
test ecx, ecx
jne 0x41dc69
lea ebx, [ebp - 0x360]
mov eax, dword [ebp + 8]
call fcn.0042a260
jmp 0x41dc81
mov dword [ebp - 0x728], 0xffffffff
lea ebx, [ebp - 0x728]
mov edi, dword [ebp + 8]
call fcn.0042a3d0
jmp 0x41dc88
jmp 0x41daa2
mov ecx, dword [ebp + 8]
call fcn.0042a350
movzx edx, al
test edx, edx
je 0x41dcbc
push 0
push 0
push str.Action_Script_Error:_Invalid_Exit_For_statement.
call fcn.0047ad92
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x360]
call fcn.0042a230
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x348]
cmp dword [eax + 0x10], 0
jbe 0x41dcd6
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x348]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x360]
call fcn.0042a230
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x37c], eax
lea ecx, [ebp - 0x394]
push ecx
mov ecx, dword [ebp - 0x1c]
call fcn.0042a150
mov dword [ebp - 4], 0x17
mov edx, 1
test edx, edx
je 0x41ddc0
lea eax, [ebp - 0x394]
call fcn.0042a430
lea ecx, [ebp - 0x394]
call fcn.0042a350
movzx eax, al
test eax, eax
je 0x41dd53
jmp 0x41ddc0
lea ecx, [ebp - 0x394]
push ecx
xor eax, eax
xor ecx, ecx
mov edx, dword [ebp + 0x10]
call fcn.00418ed0
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 0
jne 0x41dd77
jmp 0x41ddc0
mov eax, dword [ebp - 0x398]
call fcn.00408130
cmp eax, 8
jne 0x41ddbb
lea eax, [ebp - 0x394]
call fcn.0042a360
mov dword [ebp - 0xc24], eax
mov edx, dword [ebp - 0xc24]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0xc24]
mov dword [ecx], eax
lea ebx, [ebp - 0x394]
mov eax, dword [ebp + 8]
call fcn.0042a260
jmp 0x41ddc0
jmp 0x41dd27
mov ecx, dword [ebp + 8]
call fcn.0042a350
movzx edx, al
test edx, edx
je 0x41ddf4
push 0
push 0
push str.Action_Script_Error:_Invalid_Continue_For_statement.
call fcn.0047ad92
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x394]
call fcn.0042a230
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x37c]
cmp dword [eax + 0x10], 0
jbe 0x41de0e
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x37c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea esi, [ebp - 0x394]
call fcn.0042a230
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x1c
push ecx
mov esi, esp
mov dword [ebp - 0x72c], esp
push ecx
mov eax, esp
mov dword [ebp - 0x730], esp
call fcn.00429960
mov dword [ebp - 0xc28], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xc2c], eax
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0xc30], ecx
call fcn.0045f590
add esp, 4
fstp qword [ebp - 0xc38]
fld qword [ebp - 0xc38]
call fcn.00497580
mov dword [ebp - 0x3a0], eax
mov ecx, dword [ebp - 0x39c]
add ecx, 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x734], esp
push ecx
mov eax, esp
mov dword [ebp - 0x738], esp
call fcn.00429960
mov dword [ebp - 0xc3c], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xc40], eax
mov edx, dword [ebp - 0xc40]
mov dword [ebp - 0xc44], edx
call fcn.0045f590
add esp, 4
fstp qword [ebp - 0xc4c]
fld qword [ebp - 0xc4c]
call fcn.00497580
mov dword [ebp - 0x3ac], eax
push 0
push 0
lea ecx, [ebp - 0x3a8]
call fcn.00431280
lea eax, [ebp - 0x3a8]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebp - 0x3ac]
push ecx
mov edx, dword [ebp - 0x3a0]
push edx
lea ecx, [ebp - 0x3e4]
call fcn.00431280
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x740], eax
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x73c], ecx
mov edx, dword [ebp - 0x73c]
push edx
mov eax, dword [ebp - 0x740]
push eax
lea ecx, [ebp - 0x3c0]
push ecx
lea ecx, [ebp - 0x3a8]
call fcn.00431150
mov edx, dword [ebp - 0x3a4]
push edx
mov eax, dword [ebp - 0x3a8]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0
push 0
push 0
push 0
mov ecx, dword [0x4ed834]
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
push 0x32
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov ebx, 0x64
call fcn.0041a0c0
add esp, 4
lea eax, [ebp - 0x3dc]
call fcn.0042b4d0
lea eax, [ebp - 0x3c0]
lea edx, [ebp - 0x3a8]
lea ecx, [ebp - 0x3dc]
call fcn.0042fb50
mov dword [ebp - 0x3b8], 0
lea ecx, [ebp - 0x3b4]
call fcn.00431140
lea eax, [ebp - 0x3b4]
lea ecx, [ebp - 0x3dc]
call fcn.0042fb70
test eax, eax
je 0x41e060
lea eax, [ebp - 0x3b4]
lea ecx, [ebp - 0x3dc]
call fcn.0042fb70
test eax, eax
je 0x41e060
mov edx, dword [ebp - 0x3b8]
add edx, 1
mov dword [ebp - 0x3b8], edx
mov eax, dword [ebp - 0x3b8]
xor edx, edx
mov ecx, 5
div ecx
test edx, edx
jne 0x41e05e
mov edx, dword [ebp - 0x3b0]
push edx
mov eax, dword [ebp - 0x3b4]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov ebx, 0xa
call fcn.0041a0c0
add esp, 4
jmp 0x41dfff
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp - 0x748], ecx
mov edx, dword [ebp - 0x3e0]
mov dword [ebp - 0x744], edx
mov eax, dword [ebp - 0x744]
push eax
mov ecx, dword [ebp - 0x748]
push ecx
lea edx, [ebp - 0x750]
push edx
lea ecx, [ebp - 0x3a8]
call fcn.00431150
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3b0], edx
mov eax, dword [ebp - 0x3b0]
push eax
mov ecx, dword [ebp - 0x3b4]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
push 0x32
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov ebx, 0xa
call fcn.0041a0c0
add esp, 4
push 0
push 0
push 0
push 0
mov edx, dword [0x4ed838]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
push 0x32
xor ecx, ecx
mov eax, dword [ebp + 0xc]
mov ebx, 0xa
call fcn.0041a0c0
add esp, 4
mov eax, dword [ebp - 0x39c]
cmp dword [eax + 0x10], 0
jbe 0x41e114
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x39c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 0x1c
push ecx
mov esi, esp
mov dword [ebp - 0x754], esp
push ecx
mov eax, esp
mov dword [ebp - 0x758], esp
call fcn.00429960
mov dword [ebp - 0xc50], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0xc54]
mov dword [ebp - 0xc58], ecx
call fcn.0045f590
add esp, 4
fstp qword [ebp - 0xc60]
fld qword [ebp - 0xc60]
call fcn.00497580
mov dword [ebp - 0x3ec], eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x75c], esp
push ecx
mov eax, esp
mov dword [ebp - 0x760], esp
call fcn.00429960
mov dword [ebp - 0xc64], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xc68], eax
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0xc6c], edx
call fcn.0045f590
add esp, 4
fstp qword [ebp - 0xc74]
fld qword [ebp - 0xc74]
call fcn.00497580
mov dword [ebp - 0x3f8], eax
push 0
push 0
lea ecx, [ebp - 0x3f4]
call fcn.00431280
lea eax, [ebp - 0x3f4]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebp - 0x3f8]
push ecx
mov edx, dword [ebp - 0x3ec]
push edx
lea ecx, [ebp - 0x770]
call fcn.00431280
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x768], ecx
mov dword [ebp - 0x764], edx
mov eax, dword [ebp - 0x764]
push eax
mov ecx, dword [ebp - 0x768]
push ecx
lea edx, [ebp - 0x400]
push edx
lea ecx, [ebp - 0x3f4]
call fcn.00431150
mov eax, dword [ebp - 0x3fc]
push eax
mov ecx, dword [ebp - 0x400]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
mov edx, dword [ebp - 0x3e8]
cmp dword [edx + 0x10], 0
jbe 0x41e290
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x3e8]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x404], eax
mov ecx, dword [ebp - 0x404]
add ecx, 0x1c
push ecx
mov esi, esp
mov dword [ebp - 0x774], esp
push ecx
mov eax, esp
mov dword [ebp - 0x778], esp
call fcn.00429960
mov dword [ebp - 0xc78], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xc7c], eax
mov ecx, dword [ebp - 0xc7c]
mov dword [ebp - 0xc80], ecx
call fcn.0045f590
add esp, 4
fstp qword [ebp - 0xc88]
fld qword [ebp - 0xc88]
call fcn.00497580
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x404]
add ecx, 0x20
push ecx
mov esi, esp
mov dword [ebp - 0x77c], esp
push ecx
mov eax, esp
mov dword [ebp - 0x780], esp
call fcn.00429960
mov dword [ebp - 0xc8c], eax
push esi
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xc90], eax
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0xc94], edx
call fcn.0045f590
add esp, 4
fstp qword [ebp - 0xc9c]
fld qword [ebp - 0xc9c]
call fcn.00497580
mov dword [ebp - 0x408], eax
cmp dword [0x4f3e1c], 6
ja 0x41e394
cmp dword [0x4f3e1c], 6
jne 0x41e3c7
cmp dword [0x4f3e20], 1
jbe 0x41e3c7
push 0
push 0
mov eax, dword [ebp - 0x408]
shl eax, 0x10
cdq
idiv dword [0x4f4144]
push eax
mov eax, dword [ebp - 0x40c]
shl eax, 0x10
cdq
idiv dword [0x4f4148]
push eax
push 0x8001
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e3db
mov eax, dword [ebp - 0x408]
push eax
mov ecx, dword [ebp - 0x40c]
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
mov edx, dword [ebp - 0x404]
cmp dword [edx + 0x10], 0
jbe 0x41e3f4
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x404]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x410]
add ecx, 0x1c
call fcn.00431140
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x414], edx
call fcn.00491cef
mov esi, eax
mov ecx, dword [ebp - 0x410]
add ecx, 0x1c
call fcn.00402b10
mov ecx, eax
mov eax, esi
cdq
idiv ecx
add edx, dword [ebp - 0x418]
mov dword [ebp - 0x418], edx
call fcn.00491cef
mov esi, eax
mov ecx, dword [ebp - 0x410]
add ecx, 0x1c
call fcn.00402b20
mov ecx, eax
mov eax, esi
cdq
idiv ecx
add edx, dword [ebp - 0x414]
mov dword [ebp - 0x414], edx
mov edx, dword [ebp - 0x414]
push edx
mov eax, dword [ebp - 0x418]
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [ebp - 0x410]
cmp dword [ecx + 0x10], 0
jbe 0x41e4ba
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x410]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x41c]
cmp dword [ecx + 0x1c], 1
jne 0x41e509
push 0
push 0
push 0
push 0
mov edx, dword [0x4ed834]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov eax, dword [ebp - 0x41c]
cmp dword [eax + 0x1c], 2
jne 0x41e52f
push 0
push 0
push 0
push 0
mov ecx, dword [0x4ed838]
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 0x1c], 3
jne 0x41e554
push 0
push 0
push 0
push 0
mov eax, dword [0x4ed83c]
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov ecx, dword [ebp - 0x41c]
cmp dword [ecx + 0x1c], 4
jne 0x41e57a
push 0
push 0
push 0
push 0
mov edx, dword [0x4ed840]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov eax, dword [ebp - 0x41c]
cmp dword [eax + 0x1c], 5
jne 0x41e598
push 0
push 0
push 0
push 0
push 0x20
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov ecx, dword [ebp - 0x41c]
cmp dword [ecx + 0x1c], 6
jne 0x41e5b6
push 0
push 0
push 0
push 0
push 0x40
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 0x1c], 7
jne 0x41e5e1
push 0
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x20]
neg ecx
push ecx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e608
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 0x1c], 8
jne 0x41e608
push 0
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x20]
push ecx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
mov edx, dword [ebp - 0x41c]
cmp dword [edx + 0x10], 0
jbe 0x41e621
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x41c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x428], 0xffffffff
cmp dword [0x4f3e14], 0
jne 0x41e6d6
mov ecx, dword [ebp - 0x420]
cmp dword [ecx + 0x1c], 0
jne 0x41e68c
mov edx, dword [0x4ed834]
mov dword [ebp - 0x424], edx
mov eax, dword [0x4ed838]
mov dword [ebp - 0x428], eax
jmp 0x41e6d1
mov ecx, dword [ebp - 0x420]
cmp dword [ecx + 0x1c], 1
jne 0x41e6ae
mov dword [ebp - 0x424], 0x20
mov dword [ebp - 0x428], 0x40
jmp 0x41e6d1
mov edx, dword [ebp - 0x420]
cmp dword [edx + 0x1c], 2
jne 0x41e6d1
mov eax, dword [0x4ed83c]
mov dword [ebp - 0x424], eax
mov ecx, dword [0x4ed840]
mov dword [ebp - 0x428], ecx
jmp 0x41e799
lea eax, [0x41e6e3]
cmp byte [eax], 0x90
je 0x41e71e
jmp 0x41e6e4
push 0x41e6e3
push 0x41e789
push 0x41e71e
call fcn.00404230
cmp eax, 1
je 0x41e71e
mov eax, 1
call fcn.004027f0
jmp 0x420511
rcr dword [ecx + 0x1464b1ed], cl
sub eax, 0xe5008eba
xchg ecx, eax
mov byte [0x87a34b16], al
fadd dword [ecx + 0x3e]
int1
push edx
xchg edi, eax
xchg ebx, eax
mov dword [edx + 0x27b34ca1], eax
mov dl, 0xc3
jne 0x41e73c
stc
sub esi, dword [0x87fb6ce]
salc
mov cl, 0x2b
cmpsd dword [esi], dword es:[edi]
and byte [ecx], 0xcd
clc
ret
cmp dword [ebp - 0x424], 0xffffffff
je 0x41e862
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x430]
call fcn.00431280
lea eax, [ebp - 0x430]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [ebp - 0x420]
cmp dword [ecx + 0x20], 0
jne 0x41e7fa
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x424]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x428]
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41e862
mov ecx, dword [ebp - 0x420]
cmp dword [ecx + 0x20], 1
jne 0x41e862
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x424]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x428]
push eax
call dword [sym.imp.USER32.dll_mouse_event]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x424]
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x428]
push edx
call dword [sym.imp.USER32.dll_mouse_event]
mov eax, dword [ebp - 0x420]
cmp dword [eax + 0x10], 0
jbe 0x41e87c
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x420]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x434], eax
cmp dword [0x4f3e14], 0
jne 0x41e9b2
mov ecx, dword [ebp - 0x434]
movzx edx, byte [ecx + 0x1c]
test edx, edx
je 0x41e8c9
xor ecx, ecx
mov bl, 0x11
call fcn.00445de0
mov eax, dword [ebp - 0x434]
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x41e8e0
xor ecx, ecx
mov bl, 0x10
call fcn.00445de0
mov edx, dword [ebp - 0x434]
movzx eax, byte [edx + 0x1e]
test eax, eax
je 0x41e8f7
xor ecx, ecx
mov bl, 0x12
call fcn.00445de0
mov ecx, dword [ebp - 0x434]
movzx edx, byte [ecx + 0x1f]
test edx, edx
je 0x41e90e
xor ecx, ecx
mov bl, 0x5b
call fcn.00445de0
mov dword [ebp - 0x438], 0
jmp 0x41e929
mov eax, dword [ebp - 0x438]
add eax, 1
mov dword [ebp - 0x438], eax
mov ecx, dword [ebp - 0x434]
mov edx, dword [ebp - 0x438]
cmp edx, dword [ecx + 0x20]
jae 0x41e952
mov eax, dword [ebp - 0x434]
add eax, dword [ebp - 0x438]
xor ecx, ecx
mov bl, byte [eax + 0x24]
call fcn.00445de0
jmp 0x41e91a
push 0
mov eax, 0x32
mov ebx, 0x32
call fcn.00403a90
add esp, 4
mov dword [ebp - 0x438], 0
jmp 0x41e981
mov ecx, dword [ebp - 0x438]
add ecx, 1
mov dword [ebp - 0x438], ecx
mov edx, dword [ebp - 0x434]
mov eax, dword [ebp - 0x438]
cmp eax, dword [edx + 0x20]
jae 0x41e9ad
mov edx, dword [ebp - 0x434]
add edx, dword [ebp - 0x438]
mov ecx, 2
mov bl, byte [edx + 0x24]
call fcn.00445de0
jmp 0x41e972
jmp 0x41eb08
lea eax, [0x41e9bf]
cmp byte [eax], 0x90
je 0x41e9fd
jmp 0x41e9c0
push 0x41e9bf
push 0x41eaf8
push 0x41e9fd
call fcn.00404230
cmp eax, 1
je 0x41e9fd
jmp 0xf8a9ea08
mov eax, 1
call fcn.004027f0
jmp 0x420511
ror dword [ecx + 0x1464b1c1], cl
mov eax, dword [0x151cda76]
sbb al, 0x15
inc ecx
ja 0x41ea36
mov al, byte [0x2c403424]
jns 0x41e9c2
push 0x82761193
std
dec esp
mov eax, dword [0x86935989]
invalid
je 0x41ea06
xchg byte [edx + 0x6e], bl
cli
jo 0x41ea3c
out 0x73, eax
inc edi
wait
dec eax
pushfd
fiadd word [edx - 0x72]
stosb byte es:[edi], al
sub byte [ecx + 0xf47508e], ah
push cs
lds eax, [edx]
mov bl, 0xb8
retf 0xc111
mov ecx, dword [ebp - 0x434]
movzx edx, byte [ecx + 0x1c]
test edx, edx
je 0x41eb22
mov ecx, 2
mov bl, 0x11
call fcn.00445de0
mov eax, dword [ebp - 0x434]
movzx ecx, byte [eax + 0x1d]
test ecx, ecx
je 0x41eb3c
mov ecx, 2
mov bl, 0x10
call fcn.00445de0
mov edx, dword [ebp - 0x434]
movzx eax, byte [edx + 0x1e]
test eax, eax
je 0x41eb56
mov ecx, 2
mov bl, 0x12
call fcn.00445de0
mov ecx, dword [ebp - 0x434]
movzx edx, byte [ecx + 0x1f]
test edx, edx
je 0x41eb70
mov ecx, 2
mov bl, 0x5b
call fcn.00445de0
mov eax, dword [ebp - 0x434]
cmp dword [eax + 0x10], 0
jbe 0x41eb8a
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x434]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x444], eax
mov ecx, dword [ebp - 0x444]
cmp dword [ecx + 0x20], 0
je 0x41ec02
mov ecx, dword [ebp - 0x444]
add ecx, 0x1c
call fcn.00402210
push eax
call fcn.00419ae0
add esp, 4
xor ecx, ecx
mov bl, 0x11
call fcn.00445de0
xor ecx, ecx
mov bl, 0x56
call fcn.00445de0
mov ecx, 2
mov bl, 0x56
call fcn.00445de0
mov ecx, 2
mov bl, 0x11
call fcn.00445de0
jmp 0x41ec17
mov ecx, dword [ebp - 0x444]
add ecx, 0x1c
call fcn.00402210
mov edx, eax
call fcn.00446350
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x444]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x448], eax
xor ecx, ecx
mov edx, dword [ebp - 0x448]
mov bl, byte [edx + 0x1c]
call fcn.00445de0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x448]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44c], eax
mov ecx, 2
mov edx, dword [ebp - 0x44c]
mov bl, byte [edx + 0x1c]
call fcn.00445de0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x44c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x450], eax
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x45c]
call fcn.00431280
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0x468]
call fcn.00431280
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x460], 0
mov ecx, dword [ebp - 0x450]
cmp dword [ecx + 0x34], 0
je 0x41ee18
lea edx, [ebp - 0x45c]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov dword [ebp - 0x478], 0
jmp 0x41ed1f
mov eax, dword [ebp - 0x478]
add eax, 1
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x450]
add eax, 0x1c
call fcn.0042a9b0
cmp dword [ebp - 0x478], eax
jae 0x41ee18
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x478]
call fcn.0042add0
movzx ecx, word [eax]
cmp ecx, 8
je 0x41ed8d
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x478]
call fcn.0042add0
movzx edx, word [eax]
cmp edx, 9
je 0x41ed8d
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x478]
call fcn.0042add0
movzx eax, word [eax]
cmp eax, 0xa
jne 0x41ed8f
jmp 0x41ed10
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x478]
call fcn.0042add0
movsx ecx, word [eax + 2]
cmp ecx, 0xffffffff
jne 0x41edb1
jmp 0x41ed10
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x478]
call fcn.0042add0
movsx edx, word [eax + 2]
mov dword [ebp - 0x468], edx
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x478]
call fcn.0042add0
movsx eax, word [eax + 4]
mov dword [ebp - 0x464], eax
mov ecx, dword [ebp - 0x45c]
sub ecx, dword [ebp - 0x468]
mov dword [ebp - 0x454], ecx
mov edx, dword [ebp - 0x458]
sub edx, dword [ebp - 0x464]
mov dword [ebp - 0x460], edx
jmp 0x41ee18
push str.Playing...
xor eax, eax
call fcn.004013f0
fld1
fstp qword [ebp - 0x474]
mov eax, dword [ebp - 0x450]
fld qword [0x4cebb8]
fcomp qword [eax + 0x38]
fnstsw ax
test ah, 5
jp 0x41ee5d
mov ecx, dword [ebp - 0x450]
fld qword [ecx + 0x38]
fdiv qword [0x4cebb8]
fld1
fdivrp st(1)
fstp qword [ebp - 0x474]
jmp 0x41ee88
mov edx, dword [ebp - 0x450]
fldz
fcomp qword [edx + 0x38]
fnstsw ax
test ah, 5
jp 0x41ee88
mov eax, dword [ebp - 0x450]
fld qword [0x4cebb8]
fdiv qword [eax + 0x38]
fld1
fmulp st(1)
fstp qword [ebp - 0x474]
cmp dword [0x4f3e14], 0
jne 0x41f02f
mov dword [ebp - 0x47c], 0
jmp 0x41eeb0
mov ecx, dword [ebp - 0x47c]
add ecx, 1
mov dword [ebp - 0x47c], ecx
mov eax, dword [ebp - 0x450]
add eax, 0x1c
call fcn.0042a9b0
cmp dword [ebp - 0x47c], eax
jae 0x41f02a
cmp dword [0x4f4140], 0
je 0x41eed8
jmp 0x41f02a
cmp dword [ebp - 0x468], 0xffffffff
jne 0x41ef12
sub esp, 8
fld qword [ebp - 0x474]
fstp qword [esp]
mov edx, dword [ebp + 0xc]
push edx
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
call fcn.0041aed0
add esp, 0xc
jmp 0x41f025
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
movzx eax, word [eax]
cmp eax, 8
je 0x41ef83
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
movzx ecx, word [eax]
cmp ecx, 9
je 0x41ef83
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
movzx edx, word [eax]
cmp edx, 0xa
je 0x41ef83
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
movsx eax, word [eax + 2]
cmp eax, 0xffffffff
jne 0x41efb1
sub esp, 8
fld qword [ebp - 0x474]
fstp qword [esp]
mov ecx, dword [ebp + 0xc]
push ecx
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
call fcn.0041aed0
add esp, 0xc
jmp 0x41f025
mov esi, dword [ebp - 0x450]
add esi, 0x1c
mov edi, dword [ebp - 0x47c]
call fcn.0042add0
mov edx, dword [eax]
mov dword [ebp - 0x488], edx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x484], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x480], edx
movsx eax, word [ebp - 0x486]
add eax, dword [ebp - 0x454]
mov word [ebp - 0x486], ax
movsx ecx, word [ebp - 0x484]
add ecx, dword [ebp - 0x460]
mov word [ebp - 0x484], cx
sub esp, 8
fld qword [ebp - 0x474]
fstp qword [esp]
mov edx, dword [ebp + 0xc]
push edx
lea eax, [ebp - 0x488]
call fcn.0041aed0
add esp, 0xc
sti
invalid
jmp 0x41eea1
jmp 0x41f210
loope 0x41f02e
add byte [eax], al
add byte [ebp + 0x41f03c05], cl
add byte [eax + 0x31749038], al
lea eax, [0x41f03c]
cmp byte [eax], 0x90
je 0x41f06b
jmp 0x41f03d
push 0x41f03c
push 0x41f200
push 0x41f06b
call fcn.00404230
cmp eax, 1
je 0x41f06b
jmp 0x41f200
lahf
mov dword [ecx - 0x4f], edi
adc al, 0xae
rcl byte [edx - 0x77788500], 0xa7
out 0x16, eax
js 0x41f02b
inc edi
and cl, byte [ebx]
and al, 0xed
insb byte es:[edi], dx
jg 0x41f0ca
xchg byte [ecx - 0x1b3be1ca], cl
jno 0x41f00d
invalid
movsb byte es:[edi], byte fs:[esi]
or al, 0xe0
xchg dword [ecx + ebp*8 - 0x5de27046], edx
mov al, byte [0x791730]
invalid
invalid
jg 0x41f0c4
out dx, eax
cdq
xor dword [esi + 7], 0x7724d21b
xor al, 0xd3
xchg edi, eax
lodsb al, byte [esi]
rol bl, cl
inc ebp
xchg esi, eax
or al, 0x7f
loop 0x41f09c
jmp 0x1c9e867a
jmp 0x41f210
mov ecx, dword [ebp - 0x450]
cmp dword [ecx + 0x10], 0
jbe 0x41f22a
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x450]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
cmp dword [ecx + 0x20], 0
je 0x41f2b7
push 0
lea edx, [ebp - 0x614]
push edx
call fcn.004023e0
mov dword [ebp - 4], 0x18
mov eax, dword [ebp - 0x49c]
add eax, 0x1c
push eax
lea ecx, [ebp - 0x5a0]
call fcn.00401e90
mov ecx, dword [ebp - 0x49c]
mov edx, dword [ecx + 0x24]
mov dword [ebp - 0x59c], edx
lea ecx, [ebp - 0x614]
call fcn.00472dfc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x614]
call fcn.004024f0
jmp 0x41f336
push str.Logoff
mov eax, dword [ebp - 0x49c]
add eax, 0x1c
push eax
call fcn.00401b80
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x41f2ea
push str.Logging_off...
xor eax, eax
call fcn.004013f0
xor eax, eax
call fcn.004027f0
jmp 0x41f336
push str.Reboot
mov edx, dword [ebp - 0x49c]
add edx, 0x1c
push edx
call fcn.00401b80
add esp, 8
movzx eax, al
test eax, eax
je 0x41f320
push str.Shutting_down...
xor eax, eax
call fcn.004013f0
mov eax, 2
call fcn.004027f0
jmp 0x41f336
push str.Shutting_down...
xor eax, eax
call fcn.004013f0
mov eax, 1
call fcn.004027f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x49c]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x618], eax
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x618]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
lea ecx, [ebp - 0x638]
call fcn.00401f70
mov dword [ebp - 4], 0x19
call fcn.00418b50
lea ecx, [ebp - 0x638]
call fcn.00437080
lea eax, [ebp - 0x630]
push eax
call fcn.00429ff0
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x634], 0
mov ecx, dword [ebp - 0x618]
add ecx, 0x20
call fcn.0042a350
movzx ecx, al
test ecx, ecx
jne 0x41f47b
lea edx, [ebp - 0x630]
mov dword [ebp - 0x634], edx
mov dword [ebp - 0x63c], 0
jmp 0x41f3fb
mov eax, dword [ebp - 0x63c]
add eax, 1
mov dword [ebp - 0x63c], eax
mov ecx, dword [ebp - 0x618]
add ecx, 0x20
call fcn.0042a340
cmp dword [ebp - 0x63c], eax
jae 0x41f47b
mov esi, dword [ebp - 0x618]
add esi, 0x20
mov edi, dword [ebp - 0x63c]
call fcn.0042abc0
push ecx
mov edx, esp
mov dword [ebp - 0x784], esp
mov ecx, eax
mov eax, edx
call fcn.00429960
mov dword [ebp - 0xca0], eax
lea eax, [ebp - 0x640]
push eax
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xca4], eax
mov byte [ebp - 4], 0x1b
lea eax, [ebp - 0x640]
mov ebx, dword [ebp - 0x634]
call fcn.0042abe0
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x640]
call fcn.00402cd0
jmp 0x41f3ec
push 0
push 0
push 1
mov ecx, dword [ebp - 0x634]
push ecx
mov edx, dword [ebp - 0x618]
mov eax, dword [edx + 0x3c]
push eax
call fcn.00420990
add esp, 0x14
mov eax, dword [ebp - 0x618]
add eax, 0x38
call fcn.004299f0
test eax, eax
je 0x41f545
mov eax, dword [ebp - 0x618]
add eax, 0x38
call fcn.004299f0
mov dword [ebp - 0xca8], eax
push ecx
mov eax, esp
mov dword [ebp - 0x788], esp
mov ecx, 0x4f43d0
call fcn.00429960
mov dword [ebp - 0xcac], eax
mov ecx, dword [ebp - 0xcac]
mov dword [ebp - 0xcb0], ecx
mov byte [ebp - 4], 0x1c
lea edx, [ebp - 0x78c]
push edx
mov eax, dword [ebp - 0xca8]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xca8]
mov eax, dword [edx + 0x14]
call eax
mov dword [ebp - 0xcb4], eax
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0xcb8], ecx
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xcb8]
call fcn.00402210
mov byte [ebp - 4], 0x1e
mov esi, eax
call fcn.00442be0
add esp, 4
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x78c]
call fcn.00401fa0
mov edx, dword [ebp - 0x618]
cmp dword [edx + 0x10], 0
jbe 0x41f567
mov eax, dword [0x4f415c]
push eax
lea ecx, [ebp - 0x638]
call fcn.00402210
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x618]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x630]
push eax
call fcn.0042a050
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x638]
call fcn.00401fa0
jmp case.0x41bbce.20
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x644], ecx
mov edx, dword [ebp - 0x644]
cmp dword [edx + 0x34], 0
jne 0x41f5f6
mov eax, dword [ebp - 0x644]
cmp dword [eax + 0x10], 0
jbe 0x41f5d6
push str.Nothing_to_play_
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x644]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov dword [ebp - 0x648], 0xffffffff
call fcn.00419760
mov ecx, dword [ebp - 0x644]
xor edx, edx
div dword [ecx + 0x34]
mov dword [ebp - 0x654], edx
mov dword [ebp - 0x64c], 0
mov dword [ebp - 0x658], 0
jmp 0x41f63b
mov edx, dword [ebp - 0x658]
add edx, 1
mov dword [ebp - 0x658], edx
mov eax, dword [ebp - 0x644]
add eax, 0x1c
call fcn.0042a9b0
cmp dword [ebp - 0x658], eax
jae 0x41f6ba
mov eax, dword [ebp - 0x654]
cmp eax, dword [ebp - 0x64c]
jb 0x41f692
mov esi, dword [ebp - 0x644]
add esi, 0x1c
mov edi, dword [ebp - 0x658]
call fcn.0042add0
mov ecx, dword [ebp - 0x64c]
add ecx, dword [eax + 4]
cmp dword [ebp - 0x654], ecx
jae 0x41f692
mov edx, dword [ebp - 0x658]
mov dword [ebp - 0x648], edx
jmp 0x41f6ba
mov esi, dword [ebp - 0x644]
add esi, 0x1c
mov edi, dword [ebp - 0x658]
call fcn.0042add0
mov ecx, dword [ebp - 0x64c]
add ecx, dword [eax + 4]
mov dword [ebp - 0x64c], ecx
jmp 0x41f62c
cmp dword [ebp - 0x648], 0xffffffff
jne 0x41f6fb
mov edx, dword [ebp - 0x644]
cmp dword [edx + 0x10], 0
jbe 0x41f6db
push str.Just_do_nothing.
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x644]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x644]
cmp dword [eax + 0x10], 0
jbe 0x41f7c2
mov esi, dword [ebp - 0x644]
add esi, 0x1c
mov edi, dword [ebp - 0x648]
call fcn.0042add0
mov ecx, eax
call fcn.00402210
mov dword [ebp - 0x660], eax
push 0x5c
mov esi, dword [ebp - 0x644]
add esi, 0x1c
mov edi, dword [ebp - 0x648]
call fcn.0042add0
mov ecx, eax
call fcn.00402210
push eax
call fcn.00492b3a
add esp, 8
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 0
je 0x41f770
mov ecx, dword [ebp - 0x664]
add ecx, 2
mov dword [ebp - 0x660], ecx
lea ecx, [ebp - 0x65c]
call fcn.00401f70
mov dword [ebp - 4], 0x1f
mov edx, dword [ebp - 0x660]
push edx
push str.Play___s_
lea eax, [ebp - 0x65c]
push eax
call fcn.004021f0
add esp, 0xc
lea ecx, [ebp - 0x65c]
call fcn.00402210
push eax
xor eax, eax
call fcn.004013f0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x65c]
call fcn.00401fa0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x644]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
lea ecx, [ebp - 0x650]
call fcn.00401f70
mov dword [ebp - 4], 0x20
call fcn.00418b50
lea ecx, [ebp - 0x650]
call fcn.00437080
push 0
push 0
push 1
push 0
mov esi, dword [ebp - 0x644]
add esi, 0x1c
mov edi, dword [ebp - 0x648]
call fcn.0042add0
mov eax, dword [eax + 8]
push eax
call fcn.00420990
add esp, 0x14
mov ecx, dword [ebp - 0x644]
cmp dword [ecx + 0x10], 0
jbe 0x41f84a
mov edx, dword [0x4f415c]
push edx
lea ecx, [ebp - 0x650]
call fcn.00402210
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x644]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x650]
call fcn.00401fa0
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x668], eax
lea ecx, [ebp - 0x66c]
call fcn.00401f70
mov dword [ebp - 4], 0x21
mov ecx, dword [ebp - 0x668]
mov edx, dword [ecx + 0x20]
mov dword [ebp - 0x674], edx
mov eax, dword [ecx + 0x24]
mov dword [ebp - 0x670], eax
mov ecx, dword [ebp - 0x668]
cmp dword [ecx + 0x28], 0
je 0x41f8f3
call fcn.00491cef
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [ebp - 0xcbc], edx
fild dword [ebp - 0xcbc]
fdiv qword [0x4cebd8]
fild qword [ebp - 0x674]
fmulp st(1)
call fcn.004975b6
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x670], edx
cmp dword [ebp - 0x670], 0
jl 0x41fa3e
jg 0x41f90f
cmp dword [ebp - 0x674], 0
jbe 0x41fa3e
cmp dword [ebp - 0x670], 0
jl 0x41f987
jg 0x41f926
cmp dword [ebp - 0x674], 0x3e8
jbe 0x41f987
push 0
push 0x3e8
mov edx, dword [ebp - 0x670]
push edx
mov eax, dword [ebp - 0x674]
push eax
call fcn.00497670
push edx
push eax
lea eax, [ebp - 0x67c]
call fcn.004313a0
lea eax, [ebp - 0x67c]
call fcn.00431430
push eax
lea eax, [ebp - 0x67c]
call fcn.004313f0
push eax
lea eax, [ebp - 0x67c]
call fcn.004313b0
push eax
push str.Wait__02d:_02d:_02d
lea ecx, [ebp - 0x66c]
push ecx
call fcn.004021f0
add esp, 0x14
jmp 0x41f9a9
mov edx, dword [ebp - 0x670]
push edx
mov eax, dword [ebp - 0x674]
push eax
push str.Wait__I64d_ms
lea ecx, [ebp - 0x66c]
push ecx
call fcn.004021f0
add esp, 0x10
lea ecx, [ebp - 0x66c]
call fcn.00402210
push eax
xor eax, eax
call fcn.004013f0
cmp dword [ebp - 0x670], 0
jl 0x41fa0d
jg 0x41f9d3
cmp dword [ebp - 0x674], 0x3e8
jbe 0x41fa0d
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, 0x3e8
call fcn.0041a0c0
add esp, 4
mov edx, dword [ebp - 0x674]
sub edx, 0x3e8
mov eax, dword [ebp - 0x670]
sbb eax, 0
mov dword [ebp - 0x674], edx
mov dword [ebp - 0x670], eax
jmp 0x41fa39
push 0x32
mov ebx, dword [ebp - 0x674]
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 0x674], 0
mov dword [ebp - 0x670], 0
jmp 0x41f8f3
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x668]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x66c]
call fcn.00401fa0
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x680]
add ecx, 0x1c
call fcn.00402210
push eax
call fcn.004199f0
add esp, 4
mov dword [ebp - 0x684], eax
cmp dword [ebp - 0x684], 0
je 0x41facd
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x684]
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
mov edx, dword [ebp - 0x680]
cmp dword [edx + 0x10], 0
jbe 0x41facb
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
jmp 0x41fae5
mov ecx, dword [ebp - 0x680]
cmp dword [ecx + 0x10], 0
jbe 0x41fae5
push str.Can_not_find_the_window
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x680]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x688], eax
mov ecx, dword [ebp - 0x688]
add ecx, 0x1c
call fcn.00402210
push eax
call fcn.004199f0
add esp, 4
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x68c], 0
je 0x41fb7d
mov ecx, dword [ebp - 0x68c]
push ecx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41fb54
push 9
mov edx, dword [ebp - 0x68c]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x68c]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0x688]
cmp dword [ecx + 0x10], 0
jbe 0x41fb7b
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
jmp 0x41fb95
mov eax, dword [ebp - 0x688]
cmp dword [eax + 0x10], 0
jbe 0x41fb95
push str.Can_not_find_the_window
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x688]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x690], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x6a0], ecx
mov eax, dword [ebp - 0x690]
call fcn.00413af0
mov dword [ebp - 0x69c], eax
mov dword [ebp - 0x698], edx
mov edx, dword [ebp - 0x6a4]
add edx, dword [ebp - 0x69c]
mov eax, dword [ebp - 0x6a0]
adc eax, dword [ebp - 0x698]
mov dword [ebp - 0x6bc], edx
mov dword [ebp - 0x6b8], eax
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0x6a8], 1
mov dword [ebp - 0x6c0], 0
mov ecx, 1
test ecx, ecx
je 0x41fdf2
mov ecx, dword [ebp - 0x690]
add ecx, 0x20
call fcn.00402210
push eax
call fcn.004199f0
add esp, 4
mov dword [ebp - 0x6ac], eax
mov edx, dword [ebp - 0x690]
cmp dword [edx + 0x1c], 0
je 0x41fc7f
xor eax, eax
cmp dword [ebp - 0x6ac], 0
setne al
mov dword [ebp - 0xcc0], eax
jmp 0x41fc91
xor ecx, ecx
cmp dword [ebp - 0x6ac], 0
sete cl
mov dword [ebp - 0xcc0], ecx
mov edx, dword [ebp - 0xcc0]
mov dword [ebp - 0x6b0], edx
cmp dword [ebp - 0x6b0], 0
jne 0x41fcba
cmp dword [ebp - 0x698], 0
ja 0x41fcbf
jb 0x41fcba
cmp dword [ebp - 0x69c], 0x64
ja 0x41fcbf
jmp 0x41fdf2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x6a0], ecx
cmp dword [ebp - 0x6a8], 0
je 0x41fd0c
mov edx, dword [ebp - 0x690]
cmp dword [edx + 0x1c], 0
je 0x41fcf6
push str.Waiting_for_the_window_appear
xor eax, eax
call fcn.004013f0
jmp 0x41fd02
push str.Waiting_for_the_window_disappear
xor eax, eax
call fcn.004013f0
mov dword [ebp - 0x6a8], 0
cmp dword [0x4f4140], 0
je 0x41fd1a
jmp 0x41fdf2
mov eax, dword [ebp - 0x6a0]
cmp eax, dword [ebp - 0x6b8]
jb 0x41fd3d
ja 0x41fd38
mov ecx, dword [ebp - 0x6a4]
cmp ecx, dword [ebp - 0x6bc]
jb 0x41fd3d
jmp 0x41fdf2
mov dword [ebp - 0x6c4], 0x64
mov edx, dword [ebp - 0x6bc]
sub edx, dword [ebp - 0x6a4]
mov eax, dword [ebp - 0x6b8]
sbb eax, dword [ebp - 0x6a0]
mov ecx, dword [ebp - 0x6c4]
xor esi, esi
mov dword [ebp - 0xcc8], edx
mov dword [ebp - 0xcc4], eax
mov dword [ebp - 0xcd0], ecx
mov dword [ebp - 0xccc], esi
mov edx, dword [ebp - 0xcc4]
cmp edx, dword [ebp - 0xccc]
ja 0x41fdbb
jb 0x41fd9d
mov eax, dword [ebp - 0xcc8]
cmp eax, dword [ebp - 0xcd0]
jae 0x41fdbb
mov ecx, dword [ebp - 0x6bc]
sub ecx, dword [ebp - 0x6a4]
mov edx, dword [ebp - 0x6b8]
sbb edx, dword [ebp - 0x6a0]
mov dword [ebp - 0x6c4], ecx
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov ebx, dword [ebp - 0x6c4]
call fcn.0041a0c0
add esp, 4
mov eax, dword [ebp - 0x6c0]
add eax, 0x64
mov dword [ebp - 0x6c0], eax
cmp dword [0x4f4140], 0
je 0x41fded
jmp 0x41fdf2
jmp 0x41fc35
cmp dword [ebp - 0x6b0], 0
je 0x41fe7f
mov ecx, dword [ebp - 0x690]
cmp dword [ecx + 0x30], 0
je 0x41fe1e
push 1
push 0x4c7bf4
mov edx, dword [ebp + 0x10]
push edx
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
mov eax, dword [ebp - 0x690]
cmp dword [eax + 0x2c], 0
je 0x41fe60
cmp dword [ebp - 0x6ac], 0
je 0x41fe60
mov ecx, dword [ebp - 0x6ac]
push ecx
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41fe53
push 9
mov edx, dword [ebp - 0x6ac]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [ebp - 0x6ac]
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, dword [ebp - 0x690]
cmp dword [ecx + 0x10], 0
jbe 0x41fe7a
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
jmp 0x41ff10
mov eax, dword [ebp - 0x690]
cmp dword [eax + 0x10], 0
jbe 0x41fe97
push str.Wait_for_the_window_timeout
xor eax, eax
call fcn.004013f0
mov ecx, dword [ebp - 0x690]
cmp dword [ecx + 0x30], 0
je 0x41ff10
push 0
push 0x4c7bf4
mov edx, dword [ebp + 0x10]
push edx
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x690]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
cmp dword [0x4f4140], 0
je 0x41fedf
jmp case.0x41bbce.20
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov eax, dword [ebp + 8]
call fcn.0042a360
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0xcd4]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0xcd4]
mov dword [edx], ecx
jmp case.0x41bbce.20
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x690]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6c8], eax
mov dword [0x4f4154], 1
mov ecx, dword [ebp - 0x6c8]
cmp dword [ecx + 0x10], 0
jbe 0x41ff5d
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6c8]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6cc], eax
mov ecx, dword [ebp - 0x6cc]
cmp dword [ecx + 0x10], 0
jbe 0x41ffa0
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6cc]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [0x4f4140], 1
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x6d0]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x790], esp
call fcn.00429960
mov dword [ebp - 0xcd8], eax
lea ecx, [ebp - 0x794]
push ecx
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xcdc], eax
mov edx, dword [ebp - 0xcdc]
mov dword [ebp - 0xce0], edx
mov dword [ebp - 4], 0x22
mov eax, dword [ebp - 0xce0]
mov edx, 0x4f43d0
call fcn.00429970
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x794]
call fcn.00402cd0
mov eax, dword [ebp - 0x6d0]
cmp dword [eax + 0x10], 0
jbe 0x420054
mov ecx, dword [0x4f415c]
push ecx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6d0]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 0x24], 0xffffffff
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6d4], eax
mov ecx, dword [ebp - 0x6d4]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x798], esp
call fcn.00429960
mov dword [ebp - 0xce4], eax
lea ecx, [ebp - 0x79c]
push ecx
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xce8], eax
lea ecx, [ebp - 0x79c]
call fcn.00402cd0
mov edx, dword [ebp - 0x6d4]
cmp dword [edx + 0x10], 0
jbe 0x4200da
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6d4]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6d8], eax
mov ecx, dword [ebp - 0x6d8]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x7a0], esp
call fcn.00429960
mov dword [ebp - 0xcec], eax
lea ecx, [ebp - 0x7a4]
push ecx
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xcf0], eax
lea ecx, [ebp - 0x7a4]
call fcn.00402cd0
mov edx, dword [ebp - 0x6d8]
cmp dword [edx + 0x10], 0
jbe 0x42015e
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6d8]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x7a8], esp
call fcn.00429960
mov dword [ebp - 0xcf4], eax
lea ecx, [ebp - 0x7ac]
push ecx
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xcf8], eax
lea ecx, [ebp - 0x7ac]
call fcn.00402cd0
mov edx, dword [ebp - 0x6dc]
cmp dword [edx + 0x10], 0
jbe 0x4201e2
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6dc]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x6e0]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x7b0], esp
call fcn.00429960
mov dword [ebp - 0xcfc], eax
lea ecx, [ebp - 0x7b4]
push ecx
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xd00], eax
lea ecx, [ebp - 0x7b4]
call fcn.00402cd0
mov edx, dword [ebp - 0x6e0]
cmp dword [edx + 0x10], 0
jbe 0x420266
mov eax, dword [0x4f415c]
push eax
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6e0]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6e4], eax
mov ecx, dword [ebp - 0x6e4]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x7b8], esp
call fcn.00429960
mov dword [ebp - 0xd04], eax
lea ecx, [ebp - 0x6e8]
push ecx
call fcn.0045f6b0
add esp, 8
mov dword [ebp - 0xd08], eax
mov dword [ebp - 4], 0x23
push ecx
mov eax, esp
mov dword [ebp - 0x7bc], esp
lea ecx, [ebp - 0x6e8]
call fcn.00429960
mov dword [ebp - 0xd0c], eax
call fcn.0045f620
add esp, 4
mov dword [ebp - 0xd10], eax
cmp dword [ebp - 0xd10], 0
jne 0x420372
push 0
push 0x4c7bf4
mov edx, dword [ebp + 0x10]
push edx
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
mov eax, dword [ebp - 0x6e4]
cmp dword [eax + 0x10], 0
jbe 0x420329
push str.The_condition_is_false
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6e4]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov eax, dword [ebp + 8]
call fcn.0042a360
mov dword [ebp - 0xd14], eax
mov eax, dword [ebp - 0xd14]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0xd14]
mov dword [edx], ecx
jmp 0x4203ba
push 1
push 0x4c7bf4
mov eax, dword [ebp + 0x10]
push eax
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
mov ecx, dword [ebp - 0x6e4]
cmp dword [ecx + 0x10], 0
jbe 0x42039f
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6e4]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e8]
call fcn.00402cd0
jmp case.0x41bbce.20
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6ec], eax
mov ecx, dword [ebp - 0x6ec]
add ecx, 0x1c
push ecx
mov eax, esp
mov dword [ebp - 0x7c4], esp
call fcn.00429960
mov dword [ebp - 0xd18], eax
lea ecx, [ebp - 0x7c8]
push ecx
call fcn.0045f450
add esp, 8
mov dword [ebp - 0xd1c], eax
mov edx, dword [ebp - 0xd1c]
mov dword [ebp - 0xd20], edx
mov ecx, dword [ebp - 0xd20]
call fcn.00402210
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
neg eax
sbb eax, eax
add eax, 1
mov byte [ebp - 0x7bd], al
lea ecx, [ebp - 0x7c8]
call fcn.00401fa0
movzx eax, byte [ebp - 0x7bd]
test eax, eax
je 0x4204c6
push 0
push 0x4c7bf4
mov ecx, dword [ebp + 0x10]
push ecx
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
mov edx, dword [ebp - 0x6ec]
cmp dword [edx + 0x10], 0
jbe 0x42047d
push str.The_file_is_not_exist
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6ec]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
call fcn.0042a260
mov eax, dword [ebp + 8]
call fcn.0042a360
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0xd24]
mov ecx, dword [eax]
add ecx, 1
mov edx, dword [ebp - 0xd24]
mov dword [edx], ecx
jmp case.0x41bbce.20
push 1
push 0x4c7bf4
mov eax, dword [ebp + 0x10]
push eax
mov edi, dword [ebp - 0x1c]
call fcn.0041b650
mov ecx, dword [ebp - 0x6ec]
cmp dword [ecx + 0x10], 0
jbe 0x4204f3
mov edx, dword [0x4f415c]
push edx
xor eax, eax
call fcn.004013f0
push 0x32
mov ecx, 0x4f4140
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 0x6ec]
mov ebx, dword [edx + 0x10]
call fcn.0041a0c0
add esp, 4
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret