Function at 0x41cca7
Capabilities:
Create thread

Disassembly:
push ebp
lea ebp, [esp - 0x1a8]
sub esp, 0x228
mov eax, dword [0x4a4b60]
xor eax, ebp
mov dword [ebp + 0x1a4], eax
mov eax, dword [ebp + 0x1b4]
push ebx
mov ebx, dword [ebp + 0x1b0]
push esi
mov esi, 0x100
push edi
mov dword [ebp + 0x1c], ebx
cmp eax, esi
ja 0x41d733
je 0x41d30f
dec eax
je 0x41cf52
dec eax
je 0x41ce21
sub eax, 4
je 0x41ce11
sub eax, 9
je 0x41cd57
dec eax
je 0x41cd47
sub eax, 0xc
je 0x41cd24
sub eax, 0x6a
jne 0x41daa9
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_NCACTIVATE
jmp 0x41da9e
cmp dword [ebp + 0x1b8], 0
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
je 0x41cd3d
push str.ScreenSaverProc:WM_ACTIVATEAPP:wParam__TRUE
jmp 0x41da9e
push str.ScreenSaverProc:WM_ACTIVATEAPP:wParam__FALSE
jmp 0x41da9e
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_CLOSE
jmp 0x41da9e
xor edi, edi
cmp dword [0x4a8e58], edi
je 0x41ce02
cmp dword [0x4a8d18], edi
je 0x41ce02
mov eax, dword [0x4a8d24]
cmp eax, edi
je 0x41daa9
cmp dword [0x4a9804], edi
jne 0x41cdaa
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov ecx, dword [eax + 4]
mov eax, dword [eax + 8]
push dword [0x4a8d24]
mov dword [0x4a9804], ecx
mov dword [0x4a9800], eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [ebp + 0x64]
push eax
push ebx
call dword [sym.imp.USER32.dll_BeginPaint]
mov esi, eax
mov eax, dword [0x4a9804]
dec eax
mov dword [ebp + 0x14], eax
mov eax, dword [0x4a9800]
dec eax
mov dword [ebp + 0x18], eax
lea eax, [ebp - 4]
push eax
push ebx
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x10], edi
call dword [sym.imp.USER32.dll_GetClientRect]
push edi
lea eax, [ebp + 0xc]
push eax
push dword [0x4a8d24]
lea eax, [ebp - 4]
push eax
push esi
call fcn.004072d4
add esp, 0x14
lea eax, [ebp + 0x64]
push eax
push ebx
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x41daa9
mov ecx, 0x4a9368
call fcn.00420ffe
jmp 0x41daa9
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_ACTIVATE
jmp 0x41da9e
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_DESTROY
call fcn.00403303
call fcn.00418a32
cmp dword [0x4a8e58], 0
pop ecx
jne 0x41ce75
mov eax, dword [0x4a8a10]
xor ebx, ebx
inc ebx
cmp eax, ebx
jle 0x41ce75
mov edi, ebx
lea esi, [edi*4 + 0x4a97f0]
mov ecx, dword [esi]
test ecx, ecx
je 0x41ce6c
mov eax, dword [ecx]
call dword [eax + 0x60]
mov ecx, dword [esi]
test ecx, ecx
je 0x41ce6c
mov eax, dword [ecx]
push ebx
call dword [eax + 4]
inc edi
cmp edi, dword [0x4a8a10]
jl 0x41ce4e
call fcn.00402052
mov eax, dword [0x4a97ec]
xor esi, esi
cmp eax, esi
je 0x41ce94
cmp dword [0x4a97e8], esi
jne 0x41ce94
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [0x4a9934], esi
jne 0x41ceae
push dword [0x4a9588]
push dword [0x4a9584]
call dword [sym.imp.USER32.dll_SetCursorPos]
call fcn.004183de
cmp dword [0x4a8e58], esi
je 0x41cecb
cmp dword [0x4a8d18], esi
je 0x41cecb
call fcn.00419dcc
push esi
jmp 0x41cf3c
cmp dword [0x4a9934], esi
jne 0x41ceef
mov ecx, 0x4a96a0
call fcn.0044843b
cmp dword [0x4a9934], esi
jne 0x41ceef
mov ecx, 0x4a9708
call fcn.0044843b
push dword [0x4a97d8]
push dword [ebp + 0x1c]
call dword [sym.imp.USER32.dll_KillTimer]
mov esi, 0x4a9368
mov ecx, esi
call fcn.00448276
mov ecx, esi
call fcn.0042512c
call fcn.00419dcc
xor edi, edi
cmp dword [0x4a8e44], edi
je 0x41cf3b
cmp dword [0x4a8e58], edi
jne 0x41cf3b
mov esi, 0x4a9538
mov ecx, esi
call fcn.00402361
mov ecx, esi
call fcn.00401c3c
push edi
call dword [sym.imp.USER32.dll_PostQuitMessage]
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_DESTROY__finished_
jmp 0x41da9e
call fcn.004148fb
mov eax, dword [0x4a9934]
xor edi, edi
mov dword [0x4a8e58], eax
cmp eax, edi
je 0x41cf79
push dword [0x4a9588]
push dword [0x4a9584]
call dword [sym.imp.USER32.dll_SetCursorPos]
mov eax, dword [0x4a992c]
push 5
push 0x482be8
push edi
push eax
mov dword [0x4a8e50], eax
call fcn.00455a8e
call fcn.0041b28f
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
test eax, eax
jne 0x41cfb7
push str._InitTheApp___FAILED_
call fcn.00403303
call fcn.00418a32
pop ecx
xor eax, eax
jmp 0x41dac3
push str.ScreenSaverProc:WM_CREATE
call fcn.00403303
call fcn.00418a32
xor ebx, ebx
inc ebx
pop ecx
cmp dword [0x4a8e58], edi
je 0x41cfee
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.IsInPreview_Mode__
call fcn.00403303
call fcn.00418a32
pop ecx
mov dword [0x4a8d2c], ebx
cmp dword [0x4a8e44], edi
je 0x41d018
cmp dword [0x4a8e58], edi
jne 0x41d018
mov esi, 0x4a9538
mov ecx, esi
call fcn.0040370e
mov ecx, esi
call fcn.00401c5b
mov ecx, esi
call fcn.00402371
push dword [ebp + 0x1bc]
push dword [ebp + 0x1b8]
push ebx
push dword [ebp + 0x1c]
call fcn.00443e8d
mov dword [ebp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00463511
mov eax, dword [0x4a8e54]
add eax, 0xa4
push 2
push eax
call fcn.004113cd
add esp, 0xc
cmp dword [0x4a8e58], edi
je 0x41d06b
cmp dword [0x4a8d18], edi
je 0x41d06b
call fcn.0041995d
jmp 0x41d307
push dword [ebp + 0x1c]
mov esi, 0x4a9368
mov ecx, esi
call fcn.0044823d
cmp dword [0x4a8e58], edi
je 0x41d093
push 0x4a94d4
push dword [0x4a9388]
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [sym.imp.USER32.dll_CopyRect]
mov ebx, 0x4a8a18
push ebx
push 0x4a94f8
call edi
push ebx
push 0x4a94e8
call edi
mov eax, dword [0x4a94f4]
sub eax, dword [0x4a94ec]
mov edi, dword [0x4a94f0]
sub edi, dword [0x4a94e8]
mov ebx, 0x4a91b0
mov ecx, ebx
mov dword [ebp + 0x28], eax
call fcn.0041e76f
cmp dword [0x4a8e20], 0
jne 0x41cfb0
cmp dword [0x4a8e58], 0
jne 0x41d0ef
call fcn.0041995d
push 0xffffffffffffffff
push dword [ebp + 0x28]
mov ecx, esi
push edi
push ebx
call fcn.004249b7
cmp dword [0x4a8e58], 0
jne 0x41d243
mov eax, dword [0x4a8d4c]
or dword [0x4a8be8], 0xffffffff
xor edx, edx
mov dword [0x4a97dc], edx
cmp eax, edx
je 0x41d174
cmp byte [eax], dl
je 0x41d174
cmp dword [0x4a8bcc], edx
je 0x41d174
mov ecx, dword [0x4a8d48]
mov dword [0x4a97e0], ecx
cmp ecx, edx
jne 0x41d143
mov dword [0x4a97e0], eax
push 0x4a97d4
push edx
push 0x4a97dc
push 0x419612
push edx
push edx
mov dword [0x4a97e4], 0x4a950c
mov dword [0x4a97e8], edx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x4a97ec], eax
xor edx, edx
jmp 0x41d17a
mov dword [0x4a97ec], edx
xor edi, edi
inc edi
cmp dword [0x4a8a10], edi
push edx
jle 0x41d21b
mov eax, dword [0x4a8a1c]
mov ecx, dword [0x4a8a24]
mov edx, dword [0x4a8a20]
sub ecx, eax
push ecx
mov ecx, dword [0x4a8a18]
sub edx, ecx
push edx
push eax
push ecx
push dword [ebp + 0x1c]
call dword [sym.imp.USER32.dll_MoveWindow]
cmp dword [0x4a8a10], edi
mov dword [ebp + 0x20], edi
jle 0x41d243
mov dword [ebp + 0x28], 0x4a8a28
push 0x7c
call fcn.004445a6
pop ecx
test eax, eax
je 0x41d1dd
mov ecx, eax
call fcn.00403dd8
jmp 0x41d1df
xor eax, eax
push dword [ebp + 0x28]
mov edi, dword [ebp + 0x20]
lea edi, [edi*4 + 0x4a97f0]
push esi
mov ecx, eax
mov dword [edi], eax
call fcn.00403f1c
mov ecx, dword [edi]
push ebx
call fcn.00403cf8
mov ecx, dword [edi]
push 5
call fcn.0044c4f3
inc dword [ebp + 0x20]
mov eax, dword [ebp + 0x20]
add dword [ebp + 0x28], 0x10
cmp eax, dword [0x4a8a10]
jl 0x41d1c8
jmp 0x41d243
mov eax, dword [0x4a94ec]
mov ecx, dword [0x4a94f4]
mov edx, dword [0x4a94f0]
sub ecx, eax
push ecx
mov ecx, dword [0x4a94e8]
sub edx, ecx
push edx
push eax
push ecx
push dword [ebp + 0x1c]
call dword [sym.imp.USER32.dll_MoveWindow]
mov ecx, esi
call fcn.004212a8
xor ebx, ebx
push ebx
push ebx
push dword [0x4a9388]
call dword [sym.imp.USER32.dll_InvalidateRect]
push dword [0x4a9388]
mov edi, dword [sym.imp.USER32.dll_UpdateWindow]
call edi
cmp dword [0x4a8d2c], ebx
jne 0x41d28e
mov ebx, 0x4a9640
push esi
mov ecx, ebx
call fcn.00413c17
push 5
mov ecx, ebx
call fcn.0044c4f3
push dword [0x4a9660]
call edi
cmp dword [0x4a9934], 0
jne 0x41d2ec
mov ebx, 0x4a96a0
push esi
mov ecx, ebx
call fcn.00413d94
push 5
mov ecx, ebx
call fcn.0044c4f3
push dword [0x4a96c0]
call edi
cmp dword [0x4a9934], 0
jne 0x41d2ec
cmp dword [0x4a8d14], 0
je 0x41d2ec
push esi
mov esi, 0x4a9708
mov ecx, esi
call fcn.00413e92
mov ecx, esi
call fcn.004138b5
push 5
mov ecx, esi
call fcn.0044c4f3
push dword [0x4a9728]
call edi
and dword [0x4a97d0], 0
push 0
push 0x32
push 1
push dword [ebp + 0x1c]
call dword [sym.imp.USER32.dll_SetTimer]
mov dword [0x4a97d8], eax
mov eax, dword [ebp + 0x24]
jmp 0x41dac3
xor ebx, ebx
cmp dword [0x4a8e58], ebx
jne 0x41d723
mov edi, dword [ebp + 0x1b8]
cmp edi, 0x26
ja 0x41d402
cmp edi, 0x25
jae 0x41d3d1
mov eax, edi
sub eax, 0x20
je 0x41d3af
sub eax, 3
je 0x41d37d
dec eax
jne 0x41d559
cmp dword [0x4a8be8], 0xffffffff
je 0x41d36e
cmp dword [0x4a8bd8], ebx
jne 0x41d36e
mov dword [0x4a8be4], ebx
mov dword [0x4a8bdc], 1
jmp 0x41cfb0
mov ecx, 0x4a9368
call fcn.00424cf9
jmp 0x41cfb0
cmp dword [0x4a8be8], 0xffffffff
je 0x41d3a0
cmp dword [0x4a8bd8], ebx
jne 0x41d3a0
mov ecx, 0x4a950c
call fcn.00459dd2
dec eax
mov dword [0x4a8be4], eax
jmp 0x41d35f
mov ecx, 0x4a9368
call fcn.00424d31
jmp 0x41cfb0
cmp dword [0x4a8be8], 0xffffffff
je 0x41d559
xor eax, eax
cmp dword [0x4a8bd4], ebx
sete al
mov dword [0x4a8bd4], eax
jmp 0x41cfb0
mov eax, dword [0x4a8be8]
cmp eax, 0xffffffff
je 0x41d3f3
cmp dword [0x4a8bd8], ebx
jne 0x41d3f3
dec eax
cmp eax, ebx
mov dword [0x4a8be4], eax
jge 0x41d35f
jmp 0x41d38e
mov ecx, 0x4a9368
call fcn.00424dea
jmp 0x41cfb0
cmp edi, 0x27
jb 0x41d559
cmp edi, 0x28
jbe 0x41d591
cmp edi, 0x6f
jbe 0x41d559
cmp edi, 0x71
ja 0x41d559
cmp dword [0x4a8be8], 0xffffffff
je 0x41d4d4
call fcn.004459aa
push eax
lea ecx, [ebp + 0x20]
call fcn.00402668
push dword [0x4a8be8]
mov ecx, 0x4a950c
call fcn.0041568d
mov esi, eax
cmp esi, ebx
je 0x41d4c4
lea eax, [esi + 0x18]
push eax
lea ecx, [ebp + 0x28]
call fcn.004027d8
mov edi, dword [ebp + 0x28]
cmp dword [edi - 0xc], ebx
jne 0x41d47f
add esi, 0x1c
push esi
lea ecx, [ebp + 0x28]
call fcn.00402d89
mov edi, dword [ebp + 0x28]
cmp dword [edi - 0xc], ebx
je 0x41d4bc
push edi
lea eax, [ebp + 0x20]
push str.explorer.exe___s_
push eax
call fcn.00402dfb
push dword [ebp + 0x20]
lea eax, [ebp + 0xa4]
push eax
call fcn.00461a10
lea eax, [ebp + 0xa4]
push eax
call fcn.00418533
add esp, 0x18
test eax, eax
jne 0x41d4bc
push ebx
push ebx
push str.Unspecified_error_when_trying_to_open_Internet_browser.
call fcn.0044b2a9
lea ecx, [edi - 0x10]
call fcn.0040112d
mov ecx, dword [ebp + 0x20]
add ecx, 0xfffffff0
call fcn.0040112d
jmp 0x41cfb0
push dword [0x4a8d50]
lea ecx, [ebp + 0x28]
call fcn.00403303
mov eax, dword [ebp + 0x28]
cmp dword [eax - 0xc], ebx
je 0x41d545
call fcn.004459aa
push eax
lea ecx, [ebp + 0x20]
call fcn.00402668
push dword [ebp + 0x28]
lea eax, [ebp + 0x20]
push str.explorer.exe___s_
push eax
call fcn.00402dfb
mov esi, dword [ebp + 0x20]
lea eax, [ebp + 0xa4]
push esi
push eax
call fcn.00461a10
lea eax, [ebp + 0xa4]
push eax
call fcn.00418533
add esp, 0x18
test eax, eax
jne 0x41d538
push ebx
push ebx
push str.Unspecified_error_when_trying_to_open_Internet_browser.
call fcn.0044b2a9
lea ecx, [esi - 0x10]
call fcn.0040112d
mov ecx, dword [ebp + 0x28]
jmp 0x41d4c7
lea ecx, [eax - 0x10]
call fcn.0040112d
cmp dword [0x4a8e58], ebx
jne 0x41d723
cmp dword [0x4a8d14], ebx
je 0x41d723
cmp edi, 0x41
je 0x41d621
cmp edi, 0x52
jne 0x41d723
call fcn.004459aa
push eax
lea ecx, [ebp + 0x28]
call fcn.00402668
mov eax, dword [0x4a8d64]
cmp byte [eax], bl
je 0x41d5d3
push eax
jmp 0x41d5d9
mov eax, dword [0x4a8be8]
cmp eax, 0xffffffff
je 0x41d5c4
cmp dword [0x4a8bd8], ebx
jne 0x41d5c4
inc eax
mov ecx, 0x4a950c
mov dword [0x4a8be4], eax
call fcn.00459dd2
cmp dword [0x4a8be4], eax
jl 0x41d35f
jmp 0x41d359
mov ecx, 0x4a9368
call fcn.00424d61
jmp 0x41cfb0
push dword [0x4a8d50]
lea eax, [ebp + 0x28]
push str.explorer.exe___s_
push eax
call fcn.00402dfb
mov esi, dword [ebp + 0x28]
add esp, 0xc
lea eax, [ebp + 0xa4]
push esi
push eax
call fcn.00461a10
lea eax, [ebp + 0xa4]
push eax
call fcn.00418533
add esp, 0xc
test eax, eax
jne 0x41d619
push ebx
push ebx
push str.Unspecified_error_when_trying_to_open_Internet_browser.
call fcn.0044b2a9
lea ecx, [esi - 0x10]
jmp 0x41d4ca
push ebx
lea ecx, [ebp + 0x2c]
call fcn.00404c43
push ebx
lea ecx, [ebp - 0x80]
call fcn.00404dce
call fcn.004459aa
push eax
lea ecx, [ebp + 0x28]
call fcn.00402668
call fcn.004459aa
push eax
lea ecx, [ebp + 0x20]
call fcn.00402668
cmp dword [0x4a8e10], ebx
je 0x41d675
lea ecx, [ebp - 0x80]
call fcn.0044f418
cmp eax, 1
jne 0x41d691
lea eax, [ebp - 8]
push eax
lea ecx, [ebp + 0x28]
call fcn.00402d89
lea eax, [ebp - 0xc]
jmp 0x41d688
lea ecx, [ebp + 0x2c]
call fcn.0044f418
cmp eax, 1
jne 0x41d691
lea eax, [ebp + 0xa0]
push eax
lea ecx, [ebp + 0x20]
call fcn.00402d89
mov edi, dword [ebp + 0x20]
cmp dword [edi - 0xc], ebx
je 0x41d71f
push ecx
lea eax, [ebp + 0x20]
mov dword [ebp + 0x24], esp
mov ecx, esp
push eax
call fcn.004027d8
push ecx
lea eax, [ebp + 0x28]
mov dword [ebp + 0x24], esp
mov ecx, esp
push eax
call fcn.004027d8
call fcn.00418d3a
pop ecx
pop ecx
push ebx
mov ecx, 0x4a9708
call fcn.0044c4f3
push 0xffffffffffffffff
push 0x40
push 0x1f4f
call fcn.00418588
pop ecx
push eax
call fcn.0044b2f2
push dword [ebp + 0x1bc]
push 0x41
push esi
push dword [ebp + 0x1c]
call fcn.00443e8d
mov esi, eax
lea ecx, [edi - 0x10]
call fcn.0040112d
mov ecx, dword [ebp + 0x28]
add ecx, 0xfffffff0
call fcn.0040112d
lea ecx, [ebp - 0x80]
call fcn.00404e35
lea ecx, [ebp + 0x2c]
call fcn.00404caa
mov eax, esi
jmp 0x41dac3
xor esi, esi
jmp 0x41d6f5
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_KEYDOWN
jmp 0x41da9e
sub eax, 0x104
je 0x41da93
sub eax, 0xf
je 0x41d7c2
sub eax, 0xed
je 0x41d7a1
dec eax
je 0x41d791
sub eax, 3
je 0x41d781
sub eax, 3
je 0x41d771
sub eax, 0x108
jne 0x41daa9
mov ecx, 0x4a9368
call fcn.00403d3e
jmp 0x41daa9
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_MBUTTONDOWN
jmp 0x41da9e
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_RBUTTONDOWN
jmp 0x41da9e
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_LBUTTONDOWN
jmp 0x41da9e
cmp dword [0x4a8e58], 0
jne 0x41daa9
movzx eax, word [ebp + 0x1bc]
test eax, eax
jne 0x41daa9
jmp 0x41cfb0
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_TIMER
call fcn.00403303
call fcn.00418a32
xor edi, edi
pop ecx
cmp dword [0x4a8e58], edi
je 0x41d812
cmp dword [0x4a8d18], edi
je 0x41d812
inc dword [0x4a97d0]
mov eax, dword [0x4a97d0]
push 0x14
xor edx, edx
pop ecx
div ecx
test edx, edx
jne 0x41daa9
push edi
push edi
push ebx
call dword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x41daa9
xor ebx, ebx
inc ebx
cmp dword [0x4a9934], edi
jne 0x41d8ad
cmp dword [0x4a8d14], edi
je 0x41d8ad
cmp dword [0x4a8d10], edi
jne 0x41d8ad
cmp dword [0x49f514], edi
je 0x41d8ad
xor eax, eax
cmp dword [0x4a8d2c], edi
jne 0x41d84f
mov eax, dword [0x4a8d28]
imul eax, eax, 0x14
inc dword [0x49f514]
add eax, 0x190
cmp dword [0x49f514], eax
jbe 0x41d8ad
lea eax, [ebp + 0xc]
push eax
push dword [0x4a9728]
mov dword [0x4a97cc], ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
push 0xfffffffffffffffe
push edi
lea eax, [ebp + 0xc]
push eax
call dword [sym.imp.USER32.dll_OffsetRect]
cmp dword [ebp + 0x18], edi
mov ecx, 0x4a9708
jl 0x41d89b
push ebx
lea eax, [ebp + 0xc]
push eax
call fcn.0041878a
jmp 0x41d8ad
push edi
call fcn.0044c4f3
mov dword [0x49f514], edi
mov dword [0x4a97cc], edi
cmp dword [0x4a8e58], edi
jne 0x41d8e3
mov esi, dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [0x49f484], edi
call esi
cmp eax, dword [ebp + 0x1c]
jne 0x41d8ce
mov dword [0x49f484], ebx
cmp dword [0x4a9454], edi
je 0x41d8e9
call esi
mov ecx, dword [0x4a9454]
cmp eax, dword [ecx + 0x20]
jne 0x41d8e9
mov dword [0x49f484], ebx
cmp dword [0x49f484], edi
je 0x41da3c
inc dword [0x4a97d0]
mov esi, 0x4a9368
cmp dword [0x4a8d2c], edi
jne 0x41d98c
mov eax, dword [0x4a8d28]
imul eax, eax, 0x14
cmp dword [0x4a97d0], eax
jne 0x41d9c3
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_TIMER:LaunchMediaFiles___After_Splash
call fcn.00403303
call fcn.00418a32
pop ecx
mov ecx, 0x4a9640
call fcn.0044843b
push edi
push edi
push dword [0x4a9388]
call dword [sym.imp.USER32.dll_InvalidateRect]
push dword [0x4a9388]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, esi
call fcn.00425332
mov ecx, dword [0x4a9454]
cmp ecx, edi
je 0x41d972
push 5
call fcn.0044c4f3
push dword [0x4a9388]
call dword [sym.imp.USER32.dll_SetActiveWindow]
push eax
call fcn.004481fc
cmp dword [0x4a8d2c], edi
je 0x41d9c3
cmp dword [0x4a97d0], 4
jne 0x41d9c3
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_TIMER:LaunchMediaFiles___No_Splash
call fcn.00403303
call fcn.00418a32
pop ecx
mov ecx, esi
call fcn.00425332
mov ecx, dword [0x4a9454]
cmp ecx, edi
je 0x41d9d4
push 5
call fcn.0044c4f3
mov eax, dword [0x4a9454]
cmp eax, edi
je 0x41d9d4
cmp dword [eax + 0x104], edi
je 0x41da2d
cmp dword [0x4a8d2c], edi
je 0x41d9e5
cmp dword [0x4a97d0], 0xa
jmp 0x41d9f3
mov eax, dword [0x4a8d28]
imul eax, eax, 0x19
cmp dword [0x4a97d0], eax
jbe 0x41da2d
cmp dword [0x4a97dc], ebx
jne 0x41da2d
or dword [0x4a8be4], 0xffffffff
push edi
push 0x4a950c
mov ecx, esi
mov dword [0x4a97dc], 2
mov dword [0x4a8be8], edi
mov dword [0x4a8bdc], edi
mov dword [0x4a8bd4], edi
call fcn.004214c1
cmp dword [0x4a97cc], edi
jne 0x41da3c
mov ecx, esi
call fcn.00424e2c
mov eax, dword [0x49f484]
cmp dword [0x49f488], eax
je 0x41daa9
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_TIMER:_oldWinActivated___WinActivated_
call fcn.00403303
call fcn.00418a32
mov eax, dword [0x49f484]
pop ecx
mov ecx, dword [0x4a9454]
mov dword [0x49f488], eax
cmp eax, edi
je 0x41da87
cmp ecx, edi
je 0x41da7e
push 5
call fcn.0044c4f3
push edi
call dword [sym.imp.USER32.dll_SetCursor]
jmp 0x41daa9
cmp ecx, edi
je 0x41daa9
push edi
call fcn.0044c4f3
jmp 0x41daa9
push ecx
mov ecx, esp
mov dword [ebp + 0x24], esp
push str.ScreenSaverProc:WM_SYSKEYDOWN
call fcn.00403303
call fcn.00418a32
pop ecx
push dword [ebp + 0x1bc]
push dword [ebp + 0x1b8]
push dword [ebp + 0x1b4]
push dword [ebp + 0x1c]
call fcn.00443e8d
mov ecx, dword [ebp + 0x1a4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00461b8a
add ebp, 0x1a8
leave
ret 0x10