Function at 0x411f36
Capabilities:
Print debug messages

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x210
mov eax, dword [0x4ab000]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
mov edi, dword [ebp + 8]
push edi
push str._SetWinEventFinalHand_:__d_n
lea eax, [ebp - 0x204]
push 0x100
push eax
call fcn.0045e09f
add esp, 0x10
lea ecx, [ebp - 0x204]
push ecx
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
lea edx, [ebp - 0x204]
push edx
mov esi, 1
push esi
call fcn.004095b0
add esp, 8
cmp edi, 0x2f
ja case.default.0x411e65
movzx eax, byte [edi + 0x412364]
push ebx
jmp dword [eax*4 + 0x41234c]
xor ebx, ebx
mov dword [0x4a9f28], ebx
mov byte [0x4af506], bl
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045d691
mov esp, ebp
pop ebp
ret
mov eax, dword [0x4af468]
xor ebx, ebx
cmp eax, ebx
jne 0x411e9c
push ebx
push ebx
push 5
jmp 0x411ea4
cmp eax, esi
jne 0x411eac
push ebx
push ebx
push 6
call fcn.00409d80
add esp, 0xc
push ebx
push esi
push 0x16
mov byte [0x4af505], 1
mov byte [0x4af506], 1
call fcn.00409d80
push esi
push esi
push 0x17
call fcn.00409d80
mov ecx, dword [0x4acc30]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add esp, 0x18
push 0x46f
push ecx
call esi
mov edx, dword [0x4acc30]
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0x3e8
push 0x46f
push edx
call edi
mov eax, dword [0x4acc30]
push 0x479
push eax
call esi
mov ecx, dword [0x4acc30]
push ebx
push 0xbb8
push 0x479
push ecx
call edi
pop ebx
pop edi
mov byte [0x4af73b], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045d691
mov esp, ebp
pop ebp
ret
xor ebx, ebx
cmp dword [0x4af4e4], ebx
jg 0x411f5e
mov byte [0x4af506], bl
pop ebx
pop edi
mov byte [0x4af505], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045d691
mov esp, ebp
pop ebp
ret
mov eax, dword [0x4af468]
cmp eax, ebx
jne 0x411f6d
push ebx
push ebx
push 5
jmp 0x411f75
cmp eax, esi
jne 0x411f7d
push ebx
push ebx
push 6
call fcn.00409d80
add esp, 0xc
push ebx
push esi
push 0x30
mov byte [0x4af505], 1
mov byte [0x4af506], 1
mov dword [0x4af4e0], ebx
mov dword [0x4a9f14], esi
mov dword [0x4a9f18], esi
mov byte [0x4a9ef1], 1
mov byte [0x4af4d9], bl
mov byte [0x4af507], 1
mov dword [0x4a9ff0], 0xa
call fcn.00409d80
mov edx, dword [0x4acc30]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add esp, 0xc
push 0x46a
push edx
call esi
mov eax, dword [0x4acc30]
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0x1e
push 0x46a
push eax
call edi
mov ecx, dword [0x4be440]
mov dword [0x4aa124], 0x64
mov byte [ecx + 0xf4], bl
mov edx, dword [0x4acc30]
push 0x49c
push edx
call esi
mov eax, dword [0x4acc30]
push ebx
push 0x1e
push 0x49c
push eax
call edi
mov ecx, dword [ebp + 8]
push ecx
push str._SetWinEventFinalHand_:_CLAM__d__n
lea edx, [ebp - 0x204]
push 0x100
push edx
mov byte [0x4af4a9], bl
call fcn.0045e09f
add esp, 0x10
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045d691
mov esp, ebp
pop ebp
ret
xor ebx, ebx
cmp dword [0x4af4e4], ebx
jle case.0x411e65.5
mov eax, dword [0x4af468]
cmp eax, ebx
jne 0x412083
push ebx
push ebx
push 5
jmp 0x41208b
cmp eax, esi
jne 0x412093
push ebx
push ebx
push 6
call fcn.00409d80
add esp, 0xc
xor eax, eax
mov ecx, dword [0x4acc30]
push 0x4b9
push ecx
mov byte [0x4af505], 1
mov byte [0x4af506], 1
mov byte [0x4a2392], 1
mov byte [0x4aca62], bl
mov dword [0x4acb54], ebx
mov dword [0x4a2618], 0x28
mov byte [0x4af4da], bl
mov dword [0x4acaa8], ebx
mov dword [0x4acaac], ebx
mov dword [0x4acab0], eax
mov dword [0x4acab4], eax
mov dword [0x4acab8], eax
mov dword [0x4acabc], eax
mov dword [0x4acac0], eax
mov dword [0x4acac4], eax
mov dword [0x4acac8], eax
mov dword [0x4acacc], eax
mov dword [0x4acad0], eax
mov dword [0x4acad4], eax
mov dword [0x4acad8], eax
mov dword [0x4acadc], eax
mov dword [0x4acae0], eax
mov dword [0x4acae4], eax
mov dword [0x4acae8], eax
mov dword [0x4acaec], eax
mov dword [0x4acaf0], eax
mov dword [0x4acaf4], eax
mov dword [0x4acaf8], eax
mov dword [0x4acafc], eax
mov dword [0x4acb00], eax
mov dword [0x4acb04], eax
mov dword [0x4acb08], eax
mov dword [0x4acb0c], eax
mov dword [0x4acb10], eax
mov dword [0x4acb14], eax
mov dword [0x4acb18], eax
mov dword [0x4acb1c], eax
mov dword [0x4acb20], eax
mov dword [0x4acb24], eax
mov dword [0x4acb28], eax
mov dword [0x4acb2c], eax
mov dword [0x4acb30], eax
mov dword [0x4acb34], eax
mov dword [0x4acb38], eax
mov dword [0x4acb3c], eax
mov dword [0x4acb40], eax
mov dword [0x4acb44], eax
mov dword [0x4acb48], eax
mov dword [0x4acb4c], eax
mov dword [0x4aca98], ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x4acc30]
push ebx
push 0x1e
push 0x4b9
push edx
call dword [sym.imp.USER32.dll_SetTimer]
pop ebx
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0045d691
mov esp, ebp
pop ebp
ret
mov eax, dword [0x4af468]
xor ebx, ebx
cmp eax, ebx
jne 0x4121e9
push ebx
push ebx
push 5
jmp 0x4121f1
cmp eax, esi
jne 0x4121f9
push ebx
push ebx
push 6
call fcn.00409d80
add esp, 0xc
mov byte [0x4af505], 1
mov byte [0x4af506], 1
mov byte [0x4af494], bl
mov dword [0x4af4c8], ebx
mov byte [0x4af495], bl
mov dword [0x4af4d4], ebx
mov byte [0x4af4cd], bl
mov dword [0x4a9f00], esi
mov byte [0x4af4ce], bl
mov byte [0x4af4cf], bl
mov byte [0x4acb51], bl
mov dword [0x4af4dc], ebx
mov dword [0x4a9f08], esi
mov dword [0x4a9f0c], esi
mov dword [0x4a9f10], esi
mov dword [0x4a9f2c], ebx
mov byte [0x4af4b7], bl
mov byte [0x4af4db], bl
call fcn.0045dc7c
mov dword [ebp - 0x208], eax
fild dword [ebp - 0x208]
push ebx
fnstcw word [ebp - 0x206]
push esi
movzx eax, word [ebp - 0x206]
fmul qword [0x492570]
or eax, 0xc00
mov dword [ebp - 0x20c], eax
push 0x30
fmul qword [0x492588]
mov byte [0x4af507], 1
fldcw word [ebp - 0x20c]
mov dword [0x4a9ff0], 0xa
fistp qword [ebp - 0x210]
mov eax, dword [ebp - 0x210]
add eax, 2
mov dword [0x4a9f1c], eax
fldcw word [ebp - 0x206]
call fcn.00409d80
mov ecx, dword [0x4acc30]
mov esi, dword [sym.imp.USER32.dll_KillTimer]
add esp, 0xc
push 0x46a
push ecx
call esi
mov edx, dword [0x4acc30]
mov edi, dword [sym.imp.USER32.dll_SetTimer]
push ebx
push 0x1e
push 0x46a
push edx
call edi
mov eax, dword [0x4be440]
mov dword [0x4aa124], 0x64
mov byte [eax + 0xf4], bl
mov ecx, dword [0x4acc30]
push 0x49c
push ecx
call esi
mov edx, dword [0x4acc30]
push ebx
push 0x1e
push 0x49c
push edx
call edi
pop ebx
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0045d691
mov esp, ebp
pop ebp
ret