Function at 0x41b730
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4fdd93
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x6503d0]
xor eax, esp
push eax
lea eax, [esp + 0x280]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x298]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x20]
lea ebx, [ecx + 0xc]
push edx
push ebx
mov dword [esp + 0xa4], 0
mov dword [esp + 0x20], ebx
call fcn.0040e970
cmp dword [0x6524ec], 0
mov esi, eax
jne 0x41b7d7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x6523a8]
cmp eax, 0x2bf20
jmp 0x41b7d7
xor eax, eax
jmp 0x41e50b
mov ebp, dword [esp + 0x290]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
cmp dword [ebp + 0xc], eax
jbe 0x41b7ef
call fcn.004c6952
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp]
mov dword [esp + 0x28], eax
cmp edi, dword [ebp + 0x10]
jbe 0x41b803
call fcn.004c6952
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov eax, dword [ebp]
push ecx
push edx
push edi
push eax
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call fcn.0040e120
cmp dword [esi + 0x14], 0
jne 0x41b7d0
mov eax, dword [esi + 8]
dec eax
mov dword [0x6523b0], 0x51137c
cmp eax, 0x38
ja case.0x41b83b.21
jmp dword [eax*4 + 0x41e528]
cmp dword [esi + 0x20], 0
jne 0x41b857
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x50eaa8
push ecx
jmp 0x41b8c2
lea ebx, [esi + 0x28]
push str.normal
push ebx
mov edi, 5
call fcn.00402730
add esp, 8
test al, al
jne 0x41b8b7
push 0x511364
push ebx
call fcn.00402730
add esp, 8
test al, al
je 0x41b88a
mov edi, 3
jmp 0x41b8b7
push 0x51135c
push ebx
call fcn.00402730
add esp, 8
test al, al
je 0x41b8a3
mov edi, 2
jmp 0x41b8b7
push str.hidden
push ebx
call fcn.00402730
add esp, 8
test al, al
je 0x41b8b7
xor edi, edi
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
push edi
push 0
push edx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41b8e6
mov ecx, dword [0x6523b0]
push ecx
push 0
call fcn.00419b80
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x50eaa8
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41b937
mov edx, dword [0x6523b0]
push edx
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x1c]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x41b920
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x41b983
cmp dword [esi + 0x10], 0
jbe 0x41b937
push str.Fild_not_found_
jmp 0x41b92d
cmp dword [esi + 0x10], 0
jbe 0x41b937
push str.Failed_
jmp 0x41b92d
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x41b967
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x64d1a8
call dword [sym.imp.USER32.dll_SetRect]
lea ecx, [esp + 0x1c]
call fcn.00405ed0
xor ebx, ebx
mov dword [esp + 0x288], ebx
call fcn.004186f0
mov edi, eax
mov dword [esp + 0x20], edi
cmp edi, ebx
je 0x41b9f7
mov eax, dword [edi + 0x20]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41b9f7
mov eax, dword [edi + 0x20]
lea edx, [esp + 0xe8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ebx, [esp + 0xe8]
xor eax, eax
lea edi, [esi + 0x4c]
push 0x511308
push edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.00402730
add esp, 8
test al, al
je 0x41ba37
lea ecx, [esp + 0x6c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea edx, [esp + 0x6c]
mov dword [esp + 0x34], edx
jmp 0x41ba7c
push 0x511300
push edi
call fcn.00402730
add esp, 8
test al, al
je 0x41ba7c
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x58]
mov dword [esp + 0xc8], eax
mov eax, dword [esi + 0x5c]
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0xc8]
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], eax
mov dword [esp + 0x38], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
xor ebp, ebp
mov ecx, esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], ebp
call fcn.0040fa20
mov dword [esp + 0x28], eax
add eax, edi
mov dword [esp + 0x60], eax
mov eax, edx
adc eax, ebp
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x34]
push edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
mov dword [esp + 0x28], 1
call fcn.00403c40
mov ebp, eax
test ebp, ebp
jne 0x41bd1f
cmp dword [esp + 0x2c], 0
ja 0x41bae9
cmp dword [esp + 0x28], 0x64
jbe 0x41bd1f
mov edi, dword [esp + 0x20]
test edi, edi
je 0x41bb3f
test ebx, ebx
je 0x41bb3f
cmp dword [esp + 0x24], 0
jne 0x41bb3f
lea edx, [esp + 0x88]
push edx
push ebx
lea eax, [esp + 0x100]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41bb3f
cmp dword [ebx], 0
mov dword [esp + 0x24], 1
push edi
je 0x41bb2c
call fcn.00405660
jmp 0x41bb31
call fcn.004056d0
mov ecx, dword [edi + 0x20]
add esp, 4
push ebx
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov edi, eax
sub eax, dword [esp + 0x74]
sbb ecx, dword [esp + 0x78]
mov dword [esp + 0x80], ecx
jne 0x41bb65
cmp eax, 0x1388
jb 0x41bc76
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
sub eax, edi
mov ecx, 0
sbb edx, ecx
mov dword [esp + 0x80], edx
jne 0x41bb8a
cmp eax, 0x3e8
jbe 0x41bc76
cmp dword [esi + 0x44], ecx
je 0x41bc00
lea eax, [esp + 0x3c]
xor ebp, ebp
push eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
push ebp
push ebp
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [esp + 0x294]
push 0x65238c
push 0x32
push ecx
push 0x3e8
call fcn.0041b1b0
add esp, 0x10
cmp dword [0x65238c], ebp
jne 0x41bd95
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403c40
mov edx, dword [esp + 0x40]
mov ebp, eax
mov eax, dword [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
test ebp, ebp
jne 0x41bd1f
cmp dword [esp + 0x20], ebp
je 0x41bc64
test ebx, ebx
je 0x41bc64
cmp dword [esp + 0x24], ebp
jne 0x41bc64
lea ecx, [esp + 0x88]
push ecx
push ebx
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41bc64
mov dword [esp + 0x24], 1
cmp dword [ebx], ebp
je 0x41bc48
mov eax, dword [esp + 0x20]
push eax
call fcn.00405660
jmp 0x41bc52
mov ecx, dword [esp + 0x20]
push ecx
call fcn.004056d0
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x20]
add esp, 4
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 0
cmp dword [esp + 0x18], 0
je 0x41bc94
push str.Waiting_for_the_picture_appear
push 0
call fcn.00419b80
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x65238c], 0
jne 0x41bd95
xor eax, eax
cmp eax, dword [esp + 0x64]
ja 0x41bd28
jb 0x41bcb1
cmp edi, dword [esp + 0x60]
jae 0x41bd28
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
sub ecx, edi
mov ebp, 0
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41bcd7
jb 0x41bcd1
cmp ecx, edx
jae 0x41bcd7
mov edx, dword [esp + 0x60]
sub edx, edi
mov ecx, dword [esp + 0x294]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
cmp dword [0x65238c], ebp
jne 0x41bd95
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403c40
mov ebp, eax
test ebp, ebp
je 0x41bad7
cmp dword [0x65238c], 0
jne 0x41bd95
test ebp, ebp
jne 0x41be48
cmp dword [esi + 0x40], ebp
je 0x41bda3
push str.Search_the_picture_timeout
push ebp
call fcn.00419b80
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2a0]
add esp, 8
push ebp
push 0x511280
push edi
call fcn.00419be0
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
cmp dword [0x65238c], ebp
jne 0x41bd95
mov esi, dword [esp + 0x290]
push edi
mov ecx, esi
call fcn.00415c40
mov ecx, esi
call fcn.0040df70
inc dword [eax]
lea ecx, [esp + 0x1c]
call fcn.00485000
jmp case.0x41b83b.21
lea edi, [esi + 0x3c]
push str.stop_no_tip
push edi
call fcn.00402730
add esp, 8
test al, al
je 0x41bdf7
push str.Search_the_picture_timeout
push 0
call fcn.00419b80
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x18
lea ecx, [esp + 0x1c]
mov dword [0x65238c], 1
call fcn.00485000
jmp case.0x41b83b.21
push str.continue
push edi
call fcn.00402730
add esp, 8
push str.Search_the_picture_timeout
push 0
test al, al
je 0x41be3e
call fcn.00419b80
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x18
lea ecx, [esp + 0x1c]
call fcn.00485000
jmp case.0x41b83b.21
call fcn.00419b80
add esp, 8
jmp 0x41bddf
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov dword [0x64d1a8], edx
mov edx, dword [esp + 0x94]
mov dword [0x64d1ac], eax
mov dword [0x64d1b0], ecx
mov dword [0x64d1b4], edx
cmp dword [esi + 0x40], 0
je 0x41be99
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 1
push 0x511280
push eax
call fcn.00419be0
lea edi, [esi + 0x38]
push 0x51123c
push edi
call fcn.00402730
add esp, 8
test al, al
je 0x41bf21
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x8c]
call fcn.004030f0
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push edx
push eax
call ebx
mov edi, dword [esp + 0x294]
push 0x65238c
push 0x32
push edi
push 0xa
call fcn.0041b1b0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x10
push ecx
push edx
call ebx
push 0x65238c
push 0x32
push edi
push 0x32
call fcn.0041b1b0
push 2
call fcn.00404450
push 4
call fcn.00404450
add esp, 0x18
jmp 0x41c004
push 0x511230
push edi
call fcn.00402730
add esp, 8
test al, al
je 0x41bf59
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x8c]
call fcn.004030f0
mov ecx, dword [esp + 0x2c]
mov edx, dword [esp + 0x28]
push ecx
push edx
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41c004
push str.click_no_move
push edi
call fcn.00402730
add esp, 8
test al, al
je 0x41c004
xor eax, eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x8c]
mov edi, eax
call fcn.004030f0
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push edx
push eax
call ebx
mov ebp, dword [esp + 0x294]
push 0x65238c
push 0x32
push ebp
push 0xa
call fcn.0041b1b0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x10
push ecx
push edx
call ebx
push 0x65238c
push 0x32
push ebp
push 0x32
call fcn.0041b1b0
push 2
call fcn.00404450
push 4
call fcn.00404450
add esp, 0x18
test edi, edi
je 0x41c004
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
push eax
push ecx
call ebx
cmp dword [esi + 0x10], 0
jbe 0x41c01b
mov edx, dword [0x6523b0]
push edx
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00485000
jmp case.0x41b83b.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00415b60
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 1
call fcn.0040df70
mov ecx, dword [esp + 0x298]
dec dword [eax]
push 0x511280
lea edx, [esp + 0x48]
push edx
call fcn.00419da0
cmp eax, 1
jne 0x41c0ad
mov eax, dword [esi]
mov edx, dword [eax + 0x30]
mov ecx, esi
call edx
cmp dword [eax + 8], 0
jbe 0x41c09f
push ebx
mov ecx, ebp
call fcn.00415c40
mov ecx, ebp
call fcn.0040df70
inc dword [eax]
lea ecx, [esp + 0x44]
call fcn.0040b130
jmp case.0x41b83b.21
cmp dword [esi + 0x10], 0
jbe 0x41c0c3
mov eax, dword [0x6523b0]
push eax
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b130
jmp case.0x41b83b.21
mov eax, dword [0x652780]
mov ecx, dword [esi + 0x1c]
push 0x50040
push eax
push ecx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x41b920
push ebx
mov ecx, ebp
call fcn.00415c40
push 0
mov ecx, ebp
call fcn.004048e0
inc dword [eax]
jmp case.0x41b83b.21
lea ecx, [esp + 0x44]
call fcn.00415d30
mov ecx, dword [esp + 0x298]
mov ecx, dword [ecx + 4]
lea edx, [esp + 0x44]
push edx
lea eax, [esi + 0x1c]
push eax
mov dword [esp + 0x290], 2
call fcn.00418720
test eax, eax
je 0x41c16a
lea edx, [esp + 0x44]
push edx
mov ecx, ebp
call fcn.00415c40
cmp dword [esi + 0x10], 0
jbe 0x41c17f
mov eax, dword [0x6523b0]
push eax
jmp 0x41c175
cmp dword [esi + 0x10], 0
jbe 0x41c17f
push str.Label_not_found
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b130
jmp case.0x41b83b.21
cmp dword [esi + 0x10], 0
jbe 0x41b937
push str.Step_Complete
jmp 0x41b92d
lea ecx, [esp + 0x1c]
call fcn.00405ed0
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 3
call fcn.00405ed0
mov edx, dword [ebx + 0x10]
sub edx, dword [ebx + 0xc]
xor edi, edi
sar edx, 2
mov byte [esp + 0x288], 4
test edx, edx
jbe 0x41c229
push edi
mov ecx, ebx
call fcn.004048e0
mov eax, dword [eax]
push eax
lea ecx, [esp + 0x20]
push 0x510cf4
push ecx
call fcn.00401df0
add esp, 0xc
lea edx, [esp + 0x1c]
push edx
lea ecx, [esp + 0x24]
call fcn.00412b80
mov eax, dword [ebx + 0x10]
sub eax, dword [ebx + 0xc]
inc edi
sar eax, 2
cmp edi, eax
jb 0x41c1f0
lea ecx, [esp + 0x24]
call fcn.00405ed0
mov edi, dword [esp + 0x20]
push edi
lea ecx, [esp + 0x28]
push str._idx_s
push ecx
mov byte [esp + 0x294], 5
call fcn.00401df0
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
mov ecx, ebx
call fcn.00419710
lea ecx, [esp + 0x34]
mov ebp, eax
call fcn.00405ed0
push edi
lea eax, [esp + 0x38]
push str._startT_s
push eax
mov byte [esp + 0x294], 6
call fcn.00401df0
mov ecx, dword [esp + 0x40]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.00419710
lea ecx, [esp + 0x38]
mov ebx, eax
call fcn.00405ed0
push edi
lea edx, [esp + 0x3c]
push str._endT_s
push edx
mov byte [esp + 0x294], 7
call fcn.00401df0
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push eax
call fcn.00419710
fild dword [ebp + 8]
add ebp, 8
sub esp, 8
fstp qword [esp]
push str._CurLoopIndex
mov edi, eax
call fcn.00461ac0
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
lea ecx, [esp + 0x48]
call fcn.00415b60
lea ecx, [esp + 0x44]
mov byte [esp + 0x288], 8
call fcn.0040df70
add dword [eax], 2
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41c3ed
cmp dword [ebp], eax
jne 0x41c377
lea edx, [esp + 0xd8]
push edx
call fcn.00405470
mov ecx, dword [eax]
mov dword [ebx + 8], ecx
mov edx, dword [eax + 4]
mov ecx, esi
mov dword [ebx + 0xc], edx
call fcn.0040f720
push 0
push 0x3e8
push edx
push eax
call fcn.004c7430
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x38]
call fcn.00403a60
mov eax, dword [esp + 0x28]
add eax, dword [ebx + 8]
mov ecx, dword [esp + 0x2c]
adc ecx, dword [ebx + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
jmp 0x41c678
lea eax, [esp + 0x28]
push eax
call fcn.00405470
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
push ecx
push edx
lea ecx, [esp + 0x30]
call fcn.00403b70
test al, al
je 0x41c678
lea eax, [esp + 0x44]
push eax
mov ecx, dword [esp + 0x294]
call fcn.00415c40
mov dword [ebp], 1
lea ecx, [esp + 0x44]
call fcn.0040b130
lea ecx, [esp + 0x38]
call fcn.00485000
lea ecx, [esp + 0x34]
call fcn.00485000
lea ecx, [esp + 0x24]
call fcn.00485000
lea ecx, [esp + 0x20]
call fcn.00485000
lea ecx, [esp + 0x1c]
call fcn.00485000
jmp case.0x41b83b.21
test eax, eax
jne 0x41c404
mov ecx, dword [ebp]
cmp ecx, dword [esi + 0x20]
jle 0x41c678
lea edx, [esp + 0x44]
push edx
jmp 0x41c39f
cmp eax, 3
jne 0x41c443
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
lea eax, [esi + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00401350
push edi
call fcn.0043fdd0
add esp, 8
call fcn.0043fd10
add esp, 4
test eax, eax
jne 0x41c678
lea ecx, [esp + 0x44]
push ecx
jmp 0x41c39f
cmp eax, 4
jne 0x41c545
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41c4dd
test eax, eax
jne 0x41c461
xor ecx, ecx
jmp 0x41c464
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 9
call fcn.00401350
call fcn.004441f0
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.00461ac0
mov edx, dword [esp + 0x20]
push edx
call fcn.00453ae0
call fcn.004c5a60
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401350
call fcn.004441f0
add esp, 4
call fcn.004c5a60
cmp edi, eax
jle 0x41c667
lea ecx, [esp + 0x44]
push ecx
jmp 0x41c646
test eax, eax
jne 0x41c4e5
xor ecx, ecx
jmp 0x41c4e8
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xa
mov edi, eax
call fcn.00453ae0
fadd qword [0x50ebe0]
push ecx
fstp qword [esp]
push edi
call fcn.00461ac0
mov eax, dword [esp + 0x20]
push eax
call fcn.00453ae0
call fcn.004c5a60
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401350
call fcn.004441f0
jmp 0x41c635
cmp eax, 5
jne 0x41c678
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41c5cc
test eax, eax
jne 0x41c55f
xor ecx, ecx
jmp 0x41c562
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 0xb
call fcn.00401350
call fcn.004441f0
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.00461ac0
mov edx, dword [esp + 0x20]
push edx
call fcn.00453ae0
call fcn.004c5a60
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401350
call fcn.004441f0
fsub qword [0x50ebe0]
jmp 0x41c4c3
test eax, eax
jne 0x41c5d4
xor ecx, ecx
jmp 0x41c5d7
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xc
mov edi, eax
call fcn.00453ae0
fadd qword [0x50ebe0]
push ecx
fstp qword [esp]
push edi
call fcn.00461ac0
mov eax, dword [esp + 0x20]
push eax
call fcn.00453ae0
call fcn.004c5a60
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401350
call fcn.004441f0
fsub qword [0x50ebe0]
add esp, 4
call fcn.004c5a60
cmp edi, eax
jle 0x41c667
lea eax, [esp + 0x44]
push eax
mov ecx, dword [esp + 0x294]
call fcn.00415c40
lea ecx, [esp + 0x14]
mov dword [ebp], 1
call fcn.00485000
jmp 0x41c3b2
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.00485000
cmp dword [esi + 0x10], 0
jbe 0x41c721
lea ecx, [esp + 0x14]
call fcn.00405ed0
mov eax, dword [esi + 0x1c]
mov byte [esp + 0x288], 0xd
cmp eax, 1
je 0x41c6d0
cmp eax, 3
jne 0x41c6b8
mov ecx, dword [ebp]
push ecx
lea edx, [esp + 0x18]
push str.While_Loop__d
push edx
call fcn.00401df0
add esp, 0xc
jmp 0x41c701
mov eax, dword [ebp]
push eax
lea ecx, [esp + 0x18]
push str.For_Loop__d
push ecx
call fcn.00401df0
add esp, 0xc
jmp 0x41c701
add ebx, 8
mov ecx, ebx
call fcn.00403bf0
push eax
mov ecx, ebx
call fcn.00403bc0
push eax
mov ecx, ebx
call fcn.00403b90
mov edx, dword [ebp]
push eax
push edx
lea eax, [esp + 0x24]
push str.For_Loop__d__started_at__02d:_02d:_02d
push eax
call fcn.00401df0
add esp, 0x18
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.00419b80
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.00485000
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
jmp 0x41c3b2
push ebx
lea ecx, [esp + 0x48]
call fcn.00415b60
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 0xe
call fcn.0040df70
dec dword [eax]
lea ecx, [esp + 0x24]
call fcn.00405ed0
lea ecx, [esp + 0x20]
call fcn.00405ed0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x10
test ecx, ecx
jbe 0x41c7cd
lea esp, [esp]
push edi
lea ecx, [esp + 0x48]
call fcn.004048e0
mov edx, dword [eax]
push edx
lea eax, [esp + 0x28]
push 0x510cf4
push eax
call fcn.00401df0
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x24]
call fcn.00412b80
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41c790
lea ecx, [esp + 0x1c]
call fcn.00405ed0
mov ebp, dword [esp + 0x20]
push ebp
lea eax, [esp + 0x20]
push str._idx_s
push eax
mov byte [esp + 0x294], 0x11
call fcn.00401df0
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.00419710
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.00405ed0
push ebp
lea edx, [esp + 0x18]
push str._endT_s
push edx
mov byte [esp + 0x294], 0x12
call fcn.00401df0
mov eax, dword [esp + 0x20]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.00419710
push 0
push 0
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebx
call fcn.0040e970
mov ecx, dword [esp + 0x290]
inc dword [edi + 8]
lea edx, [esp + 0x44]
push edx
call fcn.00415c40
cmp dword [esi + 0x10], 0
jbe 0x41c878
mov eax, dword [0x6523b0]
push eax
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00485000
lea ecx, [esp + 0x1c]
call fcn.00485000
lea ecx, [esp + 0x20]
call fcn.00485000
lea ecx, [esp + 0x24]
call fcn.00485000
lea ecx, [esp + 0x44]
call fcn.0040b130
jmp case.0x41b83b.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00415b60
mov ebx, 0x13
mov dword [esp + 0x288], ebx
lea edi, [ebx - 0xb]
mov edi, edi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41c8fb
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41ca3f
mov ecx, dword [esp + 0x298]
push 0
push 0
lea eax, [esp + 0x4c]
push eax
call fcn.0040e970
test eax, eax
je 0x41ca3f
cmp dword [eax + 8], edi
jne 0x41c8e0
lea ecx, [esp + 0x20]
call fcn.00405ed0
lea ecx, [esp + 0x1c]
call fcn.00405ed0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x15
test ecx, ecx
jbe 0x41c992
push edi
lea ecx, [esp + 0x48]
call fcn.004048e0
mov edx, dword [eax]
push edx
lea eax, [esp + 0x24]
push 0x510cf4
push eax
call fcn.00401df0
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x20]
call fcn.00412b80
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41c955
lea ecx, [esp + 0x14]
call fcn.00405ed0
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push str._idx_s
push ecx
mov byte [esp + 0x294], 0x16
call fcn.00401df0
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
mov ecx, edi
call fcn.00419710
lea ecx, [esp + 0x14]
mov dword [eax + 8], 1
call fcn.00485000
lea ecx, [esp + 0x1c]
call fcn.00485000
lea ecx, [esp + 0x20]
mov byte [esp + 0x288], bl
call fcn.00485000
lea ecx, [esp + 0x44]
call fcn.0040df70
inc dword [eax]
lea eax, [esp + 0x44]
push eax
mov ecx, edi
call fcn.00419ad0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
test ecx, 0xfffffffc
mov ecx, ebp
je 0x41ca2d
lea edx, [esp + 0x44]
push edx
call fcn.00415c40
jmp 0x41ca3f
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], 0xffffffff
call fcn.00418be0
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
test ecx, 0xfffffffc
jne 0x41ca69
push 0
push 0
push str.Action_Script_Error:_Invalid_Exit_For_statement.
call fcn.004acd6c
lea ecx, [esp + 0x44]
call fcn.0040b130
jmp case.0x41b83b.21
cmp dword [esi + 0x10], 0
jbe 0x41ca80
mov edx, dword [0x6523b0]
push edx
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
jmp 0x41c0d6
push ebx
lea ecx, [esp + 0x48]
call fcn.00415b60
mov edi, dword [esp + 0x298]
mov dword [esp + 0x288], 0x17
mov ebx, 8
lea esp, [esp]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41cadb
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41cb14
push 0
push 0
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call fcn.0040e970
test eax, eax
je 0x41cb14
cmp dword [eax + 8], ebx
jne 0x41cac0
lea ecx, [esp + 0x44]
call fcn.0040df70
inc dword [eax]
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebp
call fcn.00415c40
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41c0ad
push 0
push 0
push str.Action_Script_Error:_Invalid_Continue_For_statement.
call fcn.004acd6c
lea ecx, [esp + 0x44]
call fcn.0040b130
jmp case.0x41b83b.21
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401350
lea ecx, [esp + 0x20]
push ecx
call fcn.0043fdd0
mov edx, dword [esp + 0x24]
add esp, 4
mov eax, esp
mov dword [eax], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28c], 0x18
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41cb81
inc dword [eax + 4]
lea eax, [esp + 0x18]
push eax
call fcn.00458cc0
add esp, 8
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
mov byte [esp + 0x288], 0x19
jne 0x41cba9
lea edx, [esi + 0x80]
push edx
jmp 0x41cc02
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xe4]
lea edi, [esi + 0x60]
push ecx
mov ecx, edi
call fcn.0040def0
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
mov edx, dword [edi]
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], ecx
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x70], edx
call fcn.004403f0
test al, al
je 0x41cbfb
lea ecx, [esp + 0x28]
call fcn.00484fa0
add eax, 4
push eax
jmp 0x41cc02
lea ecx, [esi + 0x80]
push ecx
mov ecx, ebp
call fcn.00415c40
cmp dword [esi + 0x10], 0
jbe 0x41cc20
mov edx, dword [0x6523b0]
push edx
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00485000
lea ecx, [esp + 0x1c]
jmp 0x41e4f4
push ebx
mov ecx, ebp
call fcn.00415c40
mov ecx, ebp
call fcn.0040b170
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41cc7d
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Case_Command.
call fcn.004acd6c
jmp case.0x41b83b.21
mov ecx, ebp
call fcn.0040df70
inc dword [eax]
cmp dword [esi + 0x10], 0
jbe 0x41cc9c
mov eax, dword [0x6523b0]
push eax
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
push ebx
mov ecx, ebp
call fcn.00415c40
mov ecx, ebp
call fcn.0040b170
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
test eax, 0xfffffffc
jne 0x41cceb
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Defalult_Command.
call fcn.004acd6c
jmp case.0x41b83b.21
mov ecx, ebp
call fcn.0040df70
inc dword [eax]
jmp 0x41b8cf
cmp dword [esi + 0x10], 0
jbe 0x41cd0e
push str.Step_Complete
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401350
push edi
call fcn.0043fdd0
add esp, 8
call fcn.0043fc50
call fcn.004c5a60
fldz
mov dword [esp + 0x20], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov edi, eax
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov dword [esp + 0x2c], edi
call fcn.00401350
push ebx
call fcn.0043fdd0
add esp, 8
call fcn.0043fc50
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x60]
xor ebp, ebp
push eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004c5a60
mov ecx, dword [esp + 0x60]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
lea edx, [ecx + edi]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x70], eax
push edx
add eax, edx
push ecx
mov dword [esp + 0x34], eax
call ebx
push 2
call fcn.00404450
mov edi, dword [esp + 0x298]
push ebp
push 0x32
push edi
push 0x64
call fcn.0041b1b0
add esp, 0x14
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x64]
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], ebp
call fcn.00405a10
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x48]
call fcn.00405a40
test eax, eax
je 0x41ce71
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00405a40
test eax, eax
je 0x41ce71
nop
inc ebp
mov eax, 0xcccccccd
mul ebp
shr edx, 2
lea edx, [edx + edx*4]
mov eax, ebp
sub eax, edx
jne 0x41ce5f
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041b1b0
add esp, 0x10
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x48]
call fcn.00405a40
test eax, eax
jne 0x41ce30
mov ecx, dword [esp + 0x60]
mov edx, dword [esp + 0x18]
lea eax, [ecx + edx]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0x70]
add ecx, edx
push ecx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041b1b0
push 4
call fcn.00404450
push 0
push 0x32
push edi
push 0xa
call fcn.0041b1b0
add esp, 0x24
cmp dword [esi + 0x10], 0
jbe 0x41cec2
mov eax, dword [0x6523b0]
push eax
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push edi
push ecx
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401350
push edi
call fcn.0043fdd0
add esp, 8
call fcn.0043fc50
call fcn.004c5a60
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
mov edi, eax
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push eax
call fcn.00401350
push ebx
call fcn.0043fdd0
add esp, 8
call fcn.0043fc50
fstp qword [esp + 0x34]
add esp, 0xc
lea ecx, [esp + 0x3c]
xor ebx, ebx
push ecx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004c5a60
mov edx, dword [esp + 0x3c]
lea ecx, [edi + edx]
mov edx, dword [esp + 0x40]
add eax, edx
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [esi + 0x10], ebx
jbe 0x41cd0e
mov eax, dword [0x6523b0]
push eax
push ebx
jmp 0x41cd06
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401350
push edi
call fcn.0043fdd0
add esp, 8
call fcn.0043fc50
call fcn.004c5a60
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401350
push ebx
call fcn.0043fdd0
add esp, 8
call fcn.0043fc50
add esp, 0xc
call fcn.004c5a60
push eax
push edi
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [esi + 0x10], 0
jbe 0x41cd0e
mov eax, dword [0x6523b0]
push eax
jmp 0x41cd04
mov ebp, dword [esi + 0x1c]
mov edi, dword [esi + 0x24]
mov ebx, dword [esi + 0x20]
sub edi, ebp
call fcn.004c646b
cdq
idiv edi
mov edi, dword [esi + 0x28]
sub edi, dword [esi + 0x20]
add ebp, edx
call fcn.004c646b
cdq
idiv edi
add ebx, edx
push ebx
push ebp
jmp 0x41cff0
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41d04b
push 2
call fcn.00404450
add esp, 4
jmp 0x41d0c9
cmp eax, 2
jne 0x41d05c
push 4
call fcn.00404450
add esp, 4
jmp 0x41d0c9
cmp eax, 3
jne 0x41d06d
push 8
call fcn.00404450
add esp, 4
jmp 0x41d0c9
cmp eax, 4
jne 0x41d07e
push 0x10
call fcn.00404450
add esp, 4
jmp 0x41d0c9
cmp eax, 5
jne 0x41d08f
push 0
push 0
push 0
push 0
push 0x20
jmp 0x41d0c3
cmp eax, 6
jne 0x41d0a0
push 0
push 0
push 0
push 0
push 0x40
jmp 0x41d0c3
cmp eax, 7
jne 0x41d0af
mov eax, dword [esi + 0x20]
push 0
neg eax
push eax
jmp 0x41d0ba
cmp eax, 8
jne 0x41d0c9
mov ecx, dword [esi + 0x20]
push 0
push ecx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
cmp dword [esi + 0x10], 0
jbe 0x41d0e0
mov edx, dword [0x6523b0]
push edx
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x41d115
mov ebp, dword [0x64d198]
mov ebx, dword [0x64d19c]
jmp 0x41d137
cmp eax, 1
jne 0x41d122
lea ebp, [eax + 0x1f]
lea ebx, [eax + 0x3f]
jmp 0x41d140
cmp eax, 2
jne 0x41cff6
mov ebp, dword [0x64d1a0]
mov ebx, dword [0x64d1a4]
cmp ebp, 0xffffffff
je 0x41cff6
or eax, 0xffffffff
lea edx, [esp + 0x28]
push edx
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41d18a
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x41d17a
push 2
call fcn.00404450
push 4
call fcn.00404450
add esp, 8
jmp 0x41cff6
cmp eax, 2
je 0x41d1e7
mov edi, dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41d221
cmp eax, 1
jne 0x41cff6
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x41d1c9
push 2
call fcn.00404450
push 4
call fcn.00404450
add esp, 8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 2
call fcn.00404450
push 4
call fcn.00404450
add esp, 8
jmp 0x41cff6
cmp eax, 2
jne 0x41d1fd
push 8
call fcn.00404450
push 0x10
call fcn.00404450
add esp, 8
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 8
call fcn.00404450
push 0x10
call fcn.00404450
add esp, 8
jmp 0x41cff6
mov edi, dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
jmp 0x41cff6
cmp byte [esi + 0x1c], 0
je 0x41d24e
push 0
push 0x11
call fcn.004390c0
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41d260
push 0
push 0x10
call fcn.004390c0
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41d272
push 0
push 0x12
call fcn.004390c0
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41d284
push 0
push 0x5b
call fcn.004390c0
add esp, 8
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41d2a6
jmp 0x41d290
movzx eax, byte [esi + edi + 0x24]
push 0
push eax
call fcn.004390c0
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41d290
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41d2cb
movzx ecx, byte [esi + edi + 0x24]
push 2
push ecx
call fcn.004390c0
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41d2b5
cmp byte [esi + 0x1c], 0
je 0x41d2dd
push 2
push 0x11
call fcn.004390c0
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41d2ef
push 2
push 0x10
call fcn.004390c0
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41d301
push 2
push 0x12
call fcn.004390c0
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41d0c9
push 2
push 0x5b
call fcn.004390c0
add esp, 8
jmp 0x41d0c9
cmp dword [esi + 0x20], 0
je 0x41d357
mov edx, dword [esi + 0x1c]
push edx
call fcn.00404220
push 0
push 0x11
call fcn.004390c0
push 0
push 0x56
call fcn.004390c0
push 2
push 0x56
call fcn.004390c0
push 2
push 0x11
call fcn.004390c0
add esp, 0x24
jmp 0x41cd0e
mov eax, dword [esi + 0x1c]
push eax
call fcn.00439100
add esp, 4
jmp 0x41cd0e
movzx eax, byte [esi + 0x1c]
push 0
push eax
call fcn.004390c0
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x18
jmp case.0x41b83b.21
movzx eax, byte [esi + 0x1c]
push 2
push eax
call fcn.004390c0
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x18
jmp case.0x41b83b.21
or ebx, 0xffffffff
xor eax, eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
cmp dword [esi + 0x34], eax
je 0x41d495
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
xor ebp, ebp
add ecx, edx
je 0x41d495
mov edi, edi
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax], 8
je 0x41d448
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax], 9
je 0x41d448
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax], 0xa
je 0x41d448
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax + 2], bx
jne 0x41d465
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41d410
jmp 0x41d495
push ebp
mov ecx, edi
call fcn.004398e0
movsx ebx, word [eax + 2]
push ebp
mov ecx, edi
mov dword [esp + 0x2c], ebx
call fcn.004398e0
mov ecx, dword [esp + 0x3c]
movsx eax, word [eax + 4]
sub ecx, ebx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
sub ecx, eax
mov dword [esp + 0x14], ecx
push str.Playing...
push 0
call fcn.00419b80
fld1
fst qword [esp + 0x7c]
add esp, 8
fld qword [0x50eab8]
fcom qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41d4c5
fdivr qword [esi + 0x38]
fdivp st(1)
fstp qword [esp + 0x74]
jmp 0x41d4de
fstp st(1)
fldz
fcomp qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41d4dc
fdiv qword [esi + 0x38]
fstp qword [esp + 0x74]
jmp 0x41d4de
fstp st(0)
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
mov ebx, dword [esp + 0x294]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
xor ebp, ebp
add ecx, edx
je 0x41d5e2
cmp dword [0x65238c], 0
jne 0x41d5e2
cmp dword [esp + 0x28], 0xffffffff
mov ecx, edi
je 0x41d5a9
push ebp
call fcn.004398e0
cmp word [eax], 8
je 0x41d5a7
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax], 9
je 0x41d5a7
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax], 0xa
je 0x41d5a7
push ebp
mov ecx, edi
call fcn.004398e0
cmp word [eax + 2], 0xffff
je 0x41d5a7
push ebp
mov ecx, edi
call fcn.004398e0
fld qword [esp + 0x74]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x7c], ecx
shr ecx, 0x10
add ecx, dword [esp + 0x18]
mov dword [esp + 0x80], edx
mov word [esp + 0x7e], cx
mov cx, word [esp + 0x14]
add word [esp + 0x80], cx
sub esp, 8
fstp qword [esp]
push ebx
lea edx, [esp + 0x88]
mov dword [esp + 0x90], eax
push edx
jmp 0x41d5bb
mov ecx, edi
fld qword [esp + 0x74]
sub esp, 8
fstp qword [esp]
push ebx
push ebp
call fcn.004398e0
push eax
call fcn.0041b2c0
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add esp, 0x10
cmp ebp, eax
jb 0x41d506
cmp dword [esi + 0x10], 0
jbe 0x41d5f9
mov ecx, dword [0x6523b0]
push ecx
push 0
call fcn.00419b80
add esp, 8
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ebx
push edx
call fcn.0041b1b0
add esp, 0x10
jmp case.0x41b83b.21
cmp dword [esi + 0x20], 0
je 0x41d673
push 0
lea ecx, [esp + 0x10c]
call fcn.00402b90
lea eax, [esi + 0x1c]
push eax
lea ecx, [esp + 0x180]
mov dword [esp + 0x28c], 0x1a
call fcn.00401d30
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x180], ecx
lea ecx, [esp + 0x108]
call fcn.004a5789
lea ecx, [esp + 0x108]
mov dword [esp + 0x288], 0xffffffff
call fcn.00402820
jmp 0x41b8e6
lea edi, [esi + 0x1c]
push str.Logoff
push edi
call fcn.00402730
add esp, 8
test al, al
je 0x41d6a3
push str.Logging_off...
push 0
call fcn.00419b80
push 0
call fcn.00402630
add esp, 0xc
jmp 0x41b8e6
push 0x50e050
push edi
call fcn.00402730
add esp, 8
push str.Shutting_down...
push 0
test al, al
je 0x41d6d0
call fcn.00419b80
push 2
call fcn.00402630
add esp, 0xc
jmp 0x41b8e6
call fcn.00419b80
push 1
call fcn.00402630
add esp, 0xc
jmp 0x41b8e6
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00405ed0
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0x1b
call fcn.00405ed0
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x290], 0x1c
call fcn.00419ba0
xor edi, edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov bl, 0x1d
push 0x14
mov byte [esp + 0x294], bl
call fcn.004a4fb4
add esp, 0xc
mov dword [esp + 0x18], eax
mov byte [esp + 0x288], 0x1e
cmp eax, edi
je 0x41d77a
mov ecx, dword [esi + 0x1c]
push ecx
mov ecx, eax
call fcn.0040f010
jmp 0x41d77c
xor eax, eax
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x290], bl
call fcn.0040b6a0
add esp, 8
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x1f
call fcn.00405d00
lea ecx, [esp + 0xc0]
mov byte [esp + 0x288], bl
call fcn.00405ca0
mov eax, dword [esi + 0x30]
sub eax, dword [esi + 0x2c]
lea edi, [esi + 0x20]
sar eax, 2
xor ebp, ebp
test eax, eax
jbe 0x41d829
mov edi, edi
push ebp
mov ecx, edi
call fcn.004048e0
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00401350
lea ecx, [esp + 0x1c]
push ecx
call fcn.0043fdd0
add esp, 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x20
call fcn.00405d00
lea ecx, [esp + 0x18]
mov byte [esp + 0x288], bl
call fcn.00405ca0
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
inc ebp
sar eax, 2
cmp ebp, eax
jb 0x41d7d0
mov edx, dword [esi + 0x40]
push 0
push 0
lea ecx, [esp + 0x84]
push ecx
push edx
call fcn.00425860
mov eax, dword [esi + 0x38]
add esp, 0x10
test eax, eax
je 0x41d8b6
cmp dword [eax + 8], 0
je 0x41d8b6
test eax, eax
jne 0x41d856
xor ecx, ecx
jmp 0x41d859
mov ecx, dword [eax + 8]
mov edx, dword [0x6523f8]
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41d871
inc dword [eax + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
lea edx, [esp + 0xbc]
push edx
mov byte [esp + 0x290], 0x21
call eax
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x22
push eax
mov byte [esp + 0x290], 0x23
call fcn.004619d0
add esp, 8
lea ecx, [esp + 0xb8]
mov byte [esp + 0x288], bl
call fcn.00485000
cmp dword [esi + 0x10], 0
jbe 0x41d8d0
mov ecx, dword [0x6523b0]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x7c]
mov byte [esp + 0x288], 0x1c
call fcn.00405cd0
lea ecx, [esp + 0x14]
call fcn.00485000
lea ecx, [esp + 0x1c]
call fcn.00485000
jmp case.0x41b83b.21
cmp dword [esi + 0x10], 0
jbe 0x41b8e6
push str.Step_Complete
jmp 0x41b8dc
push 0
push 0x64da28
push 0x64d254
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401350
lea eax, [esp + 0xbc]
push eax
call fcn.0043fdd0
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x24
test eax, eax
je 0x41d967
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004c72bd
add esp, 0x14
lea ecx, [esp + 0xac]
mov edi, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00405ca0
test edi, edi
je case.0x41b83b.21
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41b83b.21
mov edx, dword [esi + 0x28]
mov eax, dword [esi + 0x20]
push edx
push eax
mov ecx, edi
call fcn.0049da20
jmp 0x41b8cf
push 0
push 0x64da28
push 0x64d254
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401350
lea eax, [esp + 0xcc]
push eax
call fcn.0043fdd0
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x25
test eax, eax
je 0x41d9f9
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004c72bd
add esp, 0x14
lea ecx, [esp + 0xbc]
mov ebp, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00405ca0
test ebp, ebp
je case.0x41b83b.21
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41b83b.21
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00401350
lea eax, [esp + 0x18]
push eax
call fcn.0043fdd0
add esp, 8
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x288], 0x26
test eax, eax
je 0x41da93
mov edi, dword [eax + 8]
test edi, edi
je 0x41da93
cmp dword [edi + 8], 0x80f
jne 0x41da93
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41dabe
mov edx, dword [edi + 0x10]
push edx
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
jmp 0x41dabc
fldz
sub esp, 0xc
mov ecx, esp
fstp qword [esp + 4]
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], esp
test eax, eax
je 0x41daaf
inc dword [eax + 4]
call fcn.0043fc50
add esp, 0xc
call fcn.004c5a60
mov ebx, eax
mov eax, dword [esi + 0x28]
push eax
push ebx
mov ecx, ebp
call fcn.0049da90
cmp dword [esi + 0x10], 0
jbe 0x41dae1
mov ecx, dword [0x6523b0]
push ecx
push 0
call fcn.00419b80
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41e4f4
cmp dword [esi + 0x34], 0
jne 0x41db1f
cmp dword [esi + 0x10], 0
jbe 0x41cd0e
push str.Nothing_to_play_
jmp 0x41cd04
call fcn.00404200
xor edx, edx
div dword [esi + 0x34]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], edx
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x41db96
lea esp, [esp]
cmp dword [esp + 0x18], ebx
jb 0x41db69
push ebp
mov ecx, edi
call fcn.004398e0
mov ecx, dword [eax + 4]
add ecx, ebx
cmp dword [esp + 0x18], ecx
jb 0x41db91
push ebp
mov ecx, edi
call fcn.004398e0
add ebx, dword [eax + 4]
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41db50
jmp 0x41db96
cmp ebp, 0xffffffff
jne 0x41dbaa
cmp dword [esi + 0x10], 0
jbe 0x41cd0e
push str.Just_do_nothing.
jmp 0x41cd04
cmp dword [esi + 0x10], 0
jbe 0x41dc1d
push ebp
mov ecx, edi
call fcn.004398e0
mov ebx, dword [eax]
push ebp
mov ecx, edi
call fcn.004398e0
mov eax, dword [eax]
push 0x5c
push eax
call fcn.004c5085
add esp, 8
test eax, eax
je 0x41dbd6
lea ebx, [eax + 2]
lea ecx, [esp + 0x14]
call fcn.00405ed0
push ebx
lea eax, [esp + 0x18]
push str.Play___s_
push eax
mov dword [esp + 0x294], 0x27
call fcn.00401df0
mov ecx, dword [esp + 0x20]
push ecx
push 0
call fcn.00419b80
add esp, 0x14
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0xffffffff
call fcn.00485000
mov ebx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ebx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00405ed0
lea ecx, [esp + 0x24]
mov dword [esp + 0x288], 0x28
call fcn.00405ed0
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x290], 0x29
call fcn.00419ba0
add esp, 8
push 0
push 0
push 0
push ebp
mov ecx, edi
call fcn.004398e0
mov edx, dword [eax + 8]
push edx
call fcn.00425860
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41dca2
mov eax, dword [0x6523b0]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.00419b80
add esp, 8
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ebx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.00485000
lea ecx, [esp + 0x1c]
call fcn.00485000
jmp case.0x41b83b.21
lea ecx, [esp + 0x14]
call fcn.00405ed0
cmp dword [esi + 0x24], 0
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x288], 0x2a
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
je 0x41dd1f
call fcn.004c646b
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
fdiv qword [0x510ef0]
fild qword [esp + 0x28]
fmulp st(1)
call fcn.004c5a96
mov edi, eax
mov ebp, edx
mov ebx, dword [esp + 0x294]
test ebp, ebp
jl 0x41ddf5
jg 0x41dd38
test edi, edi
jbe 0x41ddf5
test ebp, ebp
jl 0x41dd8e
jg 0x41dd46
cmp edi, 0x3e8
jbe 0x41dd8e
push 0
push 0x3e8
push ebp
push edi
call fcn.004c60d0
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
call fcn.00403b40
push eax
lea ecx, [esp + 0x40]
call fcn.00403b00
push eax
lea ecx, [esp + 0x44]
call fcn.00403ac0
push eax
lea edx, [esp + 0x20]
push str.Wait__02d:_02d:_02d
push edx
call fcn.00401df0
add esp, 0x14
jmp 0x41dda2
push ebp
push edi
lea eax, [esp + 0x1c]
push str.Wait__I64d_ms
push eax
call fcn.00401df0
add esp, 0x10
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.00419b80
add esp, 8
test ebp, ebp
jl 0x41dde4
jg 0x41ddbf
cmp edi, 0x3e8
jbe 0x41dde4
push 0x65238c
push 0x32
push ebx
push 0x3e8
call fcn.0041b1b0
add esp, 0x10
add edi, 0xfffffc18
adc ebp, 0xffffffff
js 0x41ddf5
jmp 0x41dd2e
push 0x65238c
push 0x32
push ebx
push edi
call fcn.0041b1b0
add esp, 0x10
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ebx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.00485000
jmp case.0x41b83b.21
mov eax, dword [esi + 0x1c]
push eax
call fcn.00414520
add esp, 4
test eax, eax
je 0x41de39
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x41cff6
cmp dword [esi + 0x10], 0
jbe 0x41cd0e
push str.Can_not_find_the_window
jmp 0x41cd04
mov eax, dword [esi + 0x1c]
push eax
call fcn.00414520
mov edi, eax
add esp, 4
test edi, edi
je 0x41de39
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41de73
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x41cff6
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
mov edi, eax
xor ebp, ebp
call fcn.00411290
mov ebx, eax
mov eax, edx
mov dword [esp + 0x28], ebx
add ebx, edi
mov dword [esp + 0x2c], eax
adc eax, ebp
mov dword [esp + 0x70], eax
mov dword [esp + 0x18], 1
lea esp, [esp]
mov eax, dword [esi + 0x20]
push eax
call fcn.00414520
mov edi, eax
xor eax, eax
add esp, 4
cmp dword [esi + 0x1c], eax
je 0x41decc
test edi, edi
setne al
jmp 0x41ded1
test edi, edi
sete al
test eax, eax
jne 0x41dff4
cmp dword [esp + 0x2c], eax
ja 0x41deea
cmp dword [esp + 0x28], 0x64
jbe 0x41df74
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebp, ebp
mov edi, eax
cmp dword [esp + 0x18], ebp
je 0x41df1d
cmp dword [esi + 0x1c], ebp
je 0x41df06
push str.Waiting_for_the_window_appear
jmp 0x41df0b
push str.Waiting_for_the_window_disappear
push 0
call fcn.00419b80
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x65238c], 0
jne 0x41df74
cmp ebp, dword [esp + 0x70]
ja 0x41df74
jb 0x41df32
cmp edi, ebx
jae 0x41df74
mov eax, dword [esp + 0x70]
mov ecx, ebx
sub ecx, edi
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41df4f
jb 0x41df4b
cmp ecx, edx
jae 0x41df4f
mov edx, ebx
sub edx, edi
mov eax, dword [esp + 0x294]
push 0x65238c
push 0x32
push eax
push edx
call fcn.0041b1b0
add esp, 0x10
cmp dword [0x65238c], 0
je 0x41deb0
cmp dword [esi + 0x10], 0
jbe 0x41df89
push str.Wait_for_the_window_timeout
push 0
call fcn.00419b80
add esp, 8
cmp dword [esi + 0x30], 0
je 0x41cd0e
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 0
push 0x511280
push eax
call fcn.00419be0
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
cmp dword [0x65238c], 0
jne case.0x41b83b.21
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x290]
push eax
mov ecx, esi
call fcn.00415c40
mov ecx, esi
call fcn.0040df70
inc dword [eax]
jmp case.0x41b83b.21
cmp dword [esi + 0x30], 0
je 0x41e012
mov ecx, dword [esp + 0x14]
push 1
push 0x511280
push ecx
mov ecx, dword [esp + 0x2a4]
call fcn.00419be0
cmp dword [esi + 0x2c], 0
je 0x41e037
test edi, edi
je 0x41e037
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41e030
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp dword [esi + 0x10], 0
jbe 0x41cd0e
mov edx, dword [0x6523b0]
push edx
jmp 0x41cd04
mov dword [0x6523a4], 1
cmp dword [esi + 0x10], 0
jbe 0x41d0e0
push str.Step_Complete
jmp 0x41d0d6
cmp dword [esi + 0x10], 0
jbe 0x41e080
push str.Step_Complete
push 0
call fcn.00419b80
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
mov dword [0x65238c], 1
jmp case.0x41b83b.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0xb8]
push eax
call fcn.0043fdd0
add esp, 8
push eax
mov ecx, 0x6523f8
mov dword [esp + 0x28c], 0x2b
call fcn.004052b0
or edi, 0xffffffff
lea ecx, [esp + 0xb4]
mov dword [esp + 0x288], edi
call fcn.00405ca0
cmp dword [esi + 0x10], 0
jbe 0x41e10d
mov ecx, dword [0x6523b0]
push ecx
push 0
call fcn.00419b80
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
mov dword [esp + 0x98], edi
jmp case.0x41b83b.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0xa8]
push eax
call fcn.0043fdd0
add esp, 8
lea ecx, [esp + 0xa4]
call fcn.00405ca0
jmp 0x41b8cf
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0xac]
push eax
call fcn.0043fdd0
add esp, 8
lea ecx, [esp + 0xa8]
call fcn.00405ca0
jmp 0x41b8cf
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41e1a1
xor ecx, ecx
jmp 0x41e1a4
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
call fcn.004c5a60
xor ebp, ebp
mov edi, eax
mov dword [esp + 0x14], ebp
mov ebx, 0x2c
mov dword [esp + 0x288], ebx
call fcn.00418700
test eax, eax
je 0x41e1f0
mov eax, dword [eax + 8]
test eax, eax
je 0x41e1f0
test edi, edi
jl 0x41e1f0
cmp edi, dword [eax + 8]
jge 0x41e1f0
mov ecx, dword [eax]
lea edx, [ecx + edi*4]
push edx
lea ecx, [esp + 0x18]
call fcn.004052b0
mov ebp, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x41e1fa
mov eax, dword [eax + 8]
push 0
push 0x64da0c
push 0x64d254
push 0
push eax
call fcn.004c72bd
add esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], ebp
test ebp, ebp
je 0x41e220
inc dword [ebp + 4]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0xa4]
push ecx
mov ecx, eax
mov byte [esp + 0x290], 0x2d
call edx
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x2e
push eax
mov byte [esp + 0x290], 0x2f
call fcn.004619d0
add esp, 8
lea ecx, [esp + 0xa0]
mov byte [esp + 0x288], bl
call fcn.00485000
cmp dword [esi + 0x10], 0
jbe 0x41e27d
mov eax, dword [0x6523b0]
push eax
push 0
call fcn.00419b80
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x65238c
push 0x32
push ecx
push edx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41e4f4
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401350
lea ecx, [esp + 0xa0]
push ecx
call fcn.0043fdd0
add esp, 8
lea ecx, [esp + 0x9c]
call fcn.00405ca0
jmp 0x41d0c9
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0xc8]
push eax
call fcn.0043fdd0
add esp, 8
lea ecx, [esp + 0xc4]
call fcn.00405ca0
jmp 0x41b8cf
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0xb4]
push eax
call fcn.0043fdd0
add esp, 8
lea ecx, [esp + 0xb0]
call fcn.00405ca0
jmp 0x41b8cf
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0x18]
push eax
call fcn.0043fdd0
mov ecx, dword [esp + 0x1c]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28c], 0x30
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41e373
inc dword [eax + 4]
call fcn.0043fd10
mov ecx, dword [esp + 0x29c]
add esp, 4
test eax, eax
jne 0x41e3dc
push eax
push 0x511280
push ebx
call fcn.00419be0
cmp dword [esi + 0x10], 0
jbe 0x41e3a7
push str.The_condition_is_false
push 0
call fcn.00419b80
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x65238c
push 0x32
push edx
push eax
call fcn.0041b1b0
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.00415c40
mov ecx, ebp
call fcn.0040df70
inc dword [eax]
lea ecx, [esp + 0x14]
jmp 0x41e4f4
push 1
push 0x511280
push ebx
call fcn.00419be0
jmp 0x41daca
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401350
lea eax, [esp + 0x24]
push eax
call fcn.0043fdd0
mov ecx, dword [esp + 0x28]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28c], 0x31
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41e42d
inc dword [eax + 4]
lea edx, [esp + 0x34]
push edx
call fcn.00458cc0
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea ecx, [esp + 0x30]
sete byte [esp + 0x6b]
call fcn.00485000
cmp byte [esp + 0x6b], 0
mov ecx, dword [esp + 0x298]
je 0x41e4b1
push 0
push 0x511280
push ebx
call fcn.00419be0
cmp dword [esi + 0x10], 0
jbe 0x41e483
push str.The_file_is_not_exist
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.00415c40
mov ecx, ebp
call fcn.0040df70
inc dword [eax]
jmp 0x41e4f0
push 1
push 0x511280
push ebx
call fcn.00419be0
cmp dword [esi + 0x10], 0
jbe 0x41e4d5
mov edx, dword [0x6523b0]
push edx
push 0
call fcn.00419b80
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x65238c
push 0x32
push eax
push ecx
call fcn.0041b1b0
add esp, 0x10
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 0xffffffff
call fcn.00405ca0
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x280]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x278
ret