Function at 0x41b3a0
Capabilities:
Check for time delay via gettickcount
Check for unmoving mouse cursor
Create process on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4f6c83
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x646274]
xor eax, esp
push eax
lea eax, [esp + 0x280]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x298]
lea eax, [esp + 0x18]
push eax
lea edx, [esp + 0x20]
lea ebx, [ecx + 0xc]
push edx
push ebx
mov dword [esp + 0xa4], 0
mov dword [esp + 0x20], ebx
call fcn.0040ea80
cmp dword [0x648388], 0
mov esi, eax
jne 0x41b447
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x648244]
cmp eax, 0x2bf20
jmp 0x41b447
xor eax, eax
jmp 0x41e242
mov ebp, dword [esp + 0x290]
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x18], eax
cmp dword [ebp + 0xc], eax
jbe 0x41b45f
call fcn.004bf882
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp]
mov dword [esp + 0x28], eax
cmp edi, dword [ebp + 0x10]
jbe 0x41b473
call fcn.004bf882
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x28]
mov eax, dword [ebp]
push ecx
push edx
push edi
push eax
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call fcn.0040e230
cmp dword [esi + 0x14], 0
jne 0x41b440
mov eax, dword [esi + 8]
dec eax
mov dword [0x64824c], 0x50935c
cmp eax, 0x38
ja case.0x41b4ab.21
jmp dword [eax*4 + 0x41e25c]
cmp dword [esi + 0x20], 0
jne 0x41b4c7
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x506ad0
push ecx
jmp 0x41b532
lea ebx, [esi + 0x28]
push str.normal
push ebx
mov edi, 5
call fcn.004027a0
add esp, 8
test al, al
jne 0x41b527
push 0x509344
push ebx
call fcn.004027a0
add esp, 8
test al, al
je 0x41b4fa
mov edi, 3
jmp 0x41b527
push 0x50933c
push ebx
call fcn.004027a0
add esp, 8
test al, al
je 0x41b513
mov edi, 2
jmp 0x41b527
push str.hidden
push ebx
call fcn.004027a0
add esp, 8
test al, al
je 0x41b527
xor edi, edi
mov edx, dword [esi + 0x24]
mov eax, dword [esi + 0x1c]
push edi
push 0
push edx
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41b556
mov ecx, dword [0x64824c]
push ecx
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
mov ecx, dword [esi + 0x1c]
push 5
push 0
push 0x506ad0
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
cmp dword [esi + 0x10], 0
jbe 0x41b5a7
mov edx, dword [0x64824c]
push edx
push 0
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x1c]
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x41b590
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 2
jne 0x41b5f3
cmp dword [esi + 0x10], 0
jbe 0x41b5a7
push str.Fild_not_found_
jmp 0x41b59d
cmp dword [esi + 0x10], 0
jbe 0x41b5a7
push str.Failed_
jmp 0x41b59d
mov eax, dword [esi + 0x1c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x41b5d7
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0x6431a8
call dword [sym.imp.USER32.dll_SetRect]
lea ecx, [esp + 0x1c]
call fcn.00401980
xor ebx, ebx
mov dword [esp + 0x288], ebx
call fcn.004183f0
mov edi, eax
mov dword [esp + 0x20], edi
cmp edi, ebx
je 0x41b667
mov eax, dword [edi + 0x20]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41b667
mov eax, dword [edi + 0x20]
lea edx, [esp + 0xe8]
push edx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ebx, [esp + 0xe8]
xor eax, eax
lea edi, [esi + 0x4c]
push 0x5092e8
push edi
mov dword [esp + 0x2c], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
call fcn.004027a0
add esp, 8
test al, al
je 0x41b6a7
lea ecx, [esp + 0x6c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
lea edx, [esp + 0x6c]
mov dword [esp + 0x34], edx
jmp 0x41b6ec
push 0x5092e0
push edi
call fcn.004027a0
add esp, 8
test al, al
je 0x41b6ec
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x54]
mov edx, dword [esi + 0x58]
mov dword [esp + 0xc8], eax
mov eax, dword [esi + 0x5c]
mov dword [esp + 0xcc], ecx
lea ecx, [esp + 0xc8]
mov dword [esp + 0xd0], edx
mov dword [esp + 0xd4], eax
mov dword [esp + 0x38], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
xor ebp, ebp
mov ecx, esi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], ebp
call fcn.0040fb00
mov dword [esp + 0x28], eax
add eax, edi
mov dword [esp + 0x60], eax
mov eax, edx
adc eax, ebp
mov dword [esp + 0x2c], edx
mov edx, dword [esp + 0x34]
push edx
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x3c]
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
mov dword [esp + 0x28], 1
call fcn.00403cc0
mov ebp, eax
test ebp, ebp
jne 0x41b98f
cmp dword [esp + 0x2c], 0
ja 0x41b759
cmp dword [esp + 0x28], 0x64
jbe 0x41b98f
mov edi, dword [esp + 0x20]
test edi, edi
je 0x41b7af
test ebx, ebx
je 0x41b7af
cmp dword [esp + 0x24], 0
jne 0x41b7af
lea edx, [esp + 0x88]
push edx
push ebx
lea eax, [esp + 0x100]
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41b7af
cmp dword [ebx], 0
mov dword [esp + 0x24], 1
push edi
je 0x41b79c
call fcn.004056e0
jmp 0x41b7a1
call fcn.00405750
mov ecx, dword [edi + 0x20]
add esp, 4
push ebx
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ecx, ecx
mov edi, eax
sub eax, dword [esp + 0x74]
sbb ecx, dword [esp + 0x78]
mov dword [esp + 0x80], ecx
jne 0x41b7d5
cmp eax, 0x1388
jb 0x41b8e6
mov eax, dword [esp + 0x60]
mov edx, dword [esp + 0x64]
sub eax, edi
mov ecx, 0
sbb edx, ecx
mov dword [esp + 0x80], edx
jne 0x41b7fa
cmp eax, 0x3e8
jbe 0x41b8e6
cmp dword [esi + 0x44], ecx
je 0x41b870
lea eax, [esp + 0x3c]
xor ebp, ebp
push eax
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
push ebp
push ebp
call dword [sym.imp.USER32.dll_SetCursorPos]
mov ecx, dword [esp + 0x294]
push 0x64822c
push 0x32
push ecx
push 0x3e8
call fcn.0041adb0
add esp, 0x10
cmp dword [0x64822c], ebp
jne 0x41ba05
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403cc0
mov edx, dword [esp + 0x40]
mov ebp, eax
mov eax, dword [esp + 0x3c]
push edx
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
test ebp, ebp
jne 0x41b98f
cmp dword [esp + 0x20], ebp
je 0x41b8d4
test ebx, ebx
je 0x41b8d4
cmp dword [esp + 0x24], ebp
jne 0x41b8d4
lea ecx, [esp + 0x88]
push ecx
push ebx
lea edx, [esp + 0x4c]
push edx
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x41b8d4
mov dword [esp + 0x24], 1
cmp dword [ebx], ebp
je 0x41b8b8
mov eax, dword [esp + 0x20]
push eax
call fcn.004056e0
jmp 0x41b8c2
mov ecx, dword [esp + 0x20]
push ecx
call fcn.00405750
mov edx, dword [esp + 0x24]
mov eax, dword [edx + 0x20]
add esp, 4
push ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], 0
cmp dword [esp + 0x18], 0
je 0x41b904
push str.Waiting_for_the_picture_appear
push 0
call fcn.00419880
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x64822c], 0
jne 0x41ba05
xor eax, eax
cmp eax, dword [esp + 0x64]
ja 0x41b998
jb 0x41b921
cmp edi, dword [esp + 0x60]
jae 0x41b998
mov ecx, dword [esp + 0x60]
mov eax, dword [esp + 0x64]
sub ecx, edi
mov ebp, 0
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41b947
jb 0x41b941
cmp ecx, edx
jae 0x41b947
mov edx, dword [esp + 0x60]
sub edx, edi
mov ecx, dword [esp + 0x294]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
cmp dword [0x64822c], ebp
jne 0x41ba05
mov edx, dword [esp + 0x34]
mov eax, dword [esp + 0x38]
push edx
push eax
push ebx
lea ecx, [esp + 0x94]
push ecx
mov ecx, esi
call fcn.00403cc0
mov ebp, eax
test ebp, ebp
je 0x41b747
cmp dword [0x64822c], 0
jne 0x41ba05
test ebp, ebp
jne 0x41bab8
cmp dword [esi + 0x40], ebp
je 0x41ba13
push str.Search_the_picture_timeout
push ebp
call fcn.00419880
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2a0]
add esp, 8
push ebp
push 0x509260
push edi
call fcn.004198e0
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
cmp dword [0x64822c], ebp
jne 0x41ba05
mov esi, dword [esp + 0x290]
push edi
mov ecx, esi
call fcn.00415b00
mov ecx, esi
call fcn.0040e090
inc dword [eax]
lea ecx, [esp + 0x1c]
call fcn.004801b0
jmp case.0x41b4ab.21
lea edi, [esi + 0x3c]
push str.stop_no_tip
push edi
call fcn.004027a0
add esp, 8
test al, al
je 0x41ba67
push str.Search_the_picture_timeout
push 0
call fcn.00419880
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x18
lea ecx, [esp + 0x1c]
mov dword [0x64822c], 1
call fcn.004801b0
jmp case.0x41b4ab.21
push 0x509234
push edi
call fcn.004027a0
add esp, 8
push str.Search_the_picture_timeout
push 0
test al, al
je 0x41baae
call fcn.00419880
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x18
lea ecx, [esp + 0x1c]
call fcn.004801b0
jmp case.0x41b4ab.21
call fcn.00419880
add esp, 8
jmp 0x41ba4f
mov edx, dword [esp + 0x88]
mov eax, dword [esp + 0x8c]
mov ecx, dword [esp + 0x90]
mov dword [0x6431a8], edx
mov edx, dword [esp + 0x94]
mov dword [0x6431ac], eax
mov dword [0x6431b0], ecx
mov dword [0x6431b4], edx
cmp dword [esi + 0x40], 0
je 0x41bb09
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 1
push 0x509260
push eax
call fcn.004198e0
lea edi, [esi + 0x38]
push 0x50921c
push edi
call fcn.004027a0
add esp, 8
test al, al
je 0x41bbae
lea ecx, [esp + 0x28]
push ecx
lea ecx, [esp + 0x8c]
call fcn.00403190
mov edx, dword [esp + 0x8c]
mov eax, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push edx
push eax
call ebx
mov edi, dword [esp + 0x294]
push 0x64822c
push 0x32
push edi
push 0xa
call fcn.0041adb0
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x38]
add esp, 0x10
push ecx
push edx
call ebx
push 0x64822c
push 0x32
push edi
push 0x32
call fcn.0041adb0
mov eax, dword [0x643198]
mov edi, dword [sym.imp.USER32.dll_mouse_event]
add esp, 0x10
push 0
push 0
push 0
push 0
push eax
call edi
mov ecx, dword [0x64319c]
push 0
push 0
push 0
push 0
push ecx
call edi
jmp 0x41bcaa
push str.move
push edi
call fcn.004027a0
add esp, 8
test al, al
je 0x41bbe6
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x8c]
call fcn.00403190
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
jmp 0x41bcaa
push str.click_no_move
push edi
call fcn.004027a0
add esp, 8
test al, al
je 0x41bcaa
xor eax, eax
lea edx, [esp + 0x3c]
push edx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov edi, eax
lea eax, [esp + 0x28]
push eax
lea ecx, [esp + 0x8c]
call fcn.00403190
mov ecx, dword [esp + 0x8c]
mov edx, dword [esp + 0x88]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
push ecx
push edx
call ebx
mov ebp, dword [esp + 0x294]
push 0x64822c
push 0x32
push ebp
push 0xa
call fcn.0041adb0
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x38]
add esp, 0x10
push eax
push ecx
call ebx
push 0x64822c
push 0x32
push ebp
push 0x32
call fcn.0041adb0
mov edx, dword [0x643198]
mov ebp, dword [sym.imp.USER32.dll_mouse_event]
add esp, 0x10
push 0
push 0
push 0
push 0
push edx
call ebp
mov eax, dword [0x64319c]
push 0
push 0
push 0
push 0
push eax
call ebp
test edi, edi
je 0x41bcaa
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x3c]
push ecx
push edx
call ebx
cmp dword [esi + 0x10], 0
jbe 0x41bcc0
mov eax, dword [0x64824c]
push eax
push 0
call fcn.00419880
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.004801b0
jmp case.0x41b4ab.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00415a20
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 1
call fcn.0040e090
dec dword [eax]
mov ecx, dword [esp + 0x298]
push 0x509260
lea eax, [esp + 0x48]
push eax
call fcn.00419aa0
cmp eax, 1
jne 0x41bd52
mov edx, dword [esi]
mov eax, dword [edx + 0x30]
mov ecx, esi
call eax
cmp dword [eax + 8], 0
jbe 0x41bd44
push ebx
mov ecx, ebp
call fcn.00415b00
mov ecx, ebp
call fcn.0040e090
inc dword [eax]
lea ecx, [esp + 0x44]
call fcn.0040b180
jmp case.0x41b4ab.21
cmp dword [esi + 0x10], 0
jbe 0x41bd69
mov ecx, dword [0x64824c]
push ecx
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b180
jmp case.0x41b4ab.21
mov ecx, dword [0x6485b8]
mov edx, dword [esi + 0x1c]
push 0x50040
push ecx
push edx
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp dword [esi + 0x10], 0
jbe 0x41bdc0
mov eax, dword [0x64824c]
push eax
push 0
call fcn.00419880
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
push ebx
mov ecx, ebp
call fcn.00415b00
push 0
mov ecx, ebp
call fcn.004048c0
inc dword [eax]
jmp case.0x41b4ab.21
lea ecx, [esp + 0x44]
call fcn.00415c70
mov edx, dword [esp + 0x298]
lea eax, [esp + 0x44]
push eax
lea ecx, [esi + 0x1c]
push ecx
mov ecx, dword [edx + 4]
mov dword [esp + 0x290], 2
call fcn.00418420
test eax, eax
je 0x41be43
lea eax, [esp + 0x44]
push eax
mov ecx, ebp
call fcn.00415b00
cmp dword [esi + 0x10], 0
jbe 0x41be58
mov ecx, dword [0x64824c]
push ecx
jmp 0x41be4e
cmp dword [esi + 0x10], 0
jbe 0x41be58
push str.Label_not_found
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x44]
call fcn.0040b180
jmp case.0x41b4ab.21
cmp dword [esi + 0x10], 0
jbe 0x41bdc0
push str.Step_Complete
push 0
call fcn.00419880
mov ecx, dword [esp + 0x29c]
mov edx, dword [esi + 0x10]
add esp, 8
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
lea ecx, [esp + 0x1c]
call fcn.00401980
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 3
call fcn.00401980
mov eax, dword [ebx + 0x10]
sub eax, dword [ebx + 0xc]
xor edi, edi
sar eax, 2
mov byte [esp + 0x288], 4
test eax, eax
jbe 0x41bf29
mov edi, edi
push edi
mov ecx, ebx
call fcn.004048c0
mov ecx, dword [eax]
push ecx
lea edx, [esp + 0x20]
push 0x508cd4
push edx
call fcn.00401e60
add esp, 0xc
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x24]
call fcn.00412c70
mov ecx, dword [ebx + 0x10]
sub ecx, dword [ebx + 0xc]
inc edi
sar ecx, 2
cmp edi, ecx
jb 0x41bef0
lea ecx, [esp + 0x24]
call fcn.00401980
mov edi, dword [esp + 0x20]
push edi
lea edx, [esp + 0x28]
push str._idx_s
push edx
mov byte [esp + 0x294], 5
call fcn.00401e60
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.00419410
lea ecx, [esp + 0x34]
mov ebp, eax
call fcn.00401980
push edi
lea ecx, [esp + 0x38]
push str._startT_s
push ecx
mov byte [esp + 0x294], 6
call fcn.00401e60
mov edx, dword [esp + 0x40]
add esp, 0xc
push 0
push edx
mov ecx, ebx
call fcn.00419410
lea ecx, [esp + 0x38]
mov ebx, eax
call fcn.00401980
push edi
lea eax, [esp + 0x3c]
push str._endT_s
push eax
mov byte [esp + 0x294], 7
call fcn.00401e60
mov ecx, dword [esp + 0x44]
add esp, 0xc
push 0
push ecx
mov ecx, dword [esp + 0x2a0]
call fcn.00419410
fild dword [ebp + 8]
add ebp, 8
sub esp, 8
fstp qword [esp]
push str._CurLoopIndex
mov edi, eax
call fcn.0045e740
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
lea ecx, [esp + 0x48]
call fcn.00415a20
lea ecx, [esp + 0x44]
mov byte [esp + 0x288], 8
call fcn.0040e090
add dword [eax], 2
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41c0ed
cmp dword [ebp], eax
jne 0x41c077
lea eax, [esp + 0xd8]
push eax
call fcn.004054f0
mov ecx, dword [eax]
mov dword [ebx + 8], ecx
mov edx, dword [eax + 4]
mov ecx, esi
mov dword [ebx + 0xc], edx
call fcn.0040f800
push 0
push 0x3e8
push edx
push eax
call fcn.004c0360
push eax
push 0
push 0
push 0
lea ecx, [esp + 0x38]
call fcn.00403ae0
mov eax, dword [esp + 0x28]
add eax, dword [ebx + 8]
mov ecx, dword [esp + 0x2c]
adc ecx, dword [ebx + 0xc]
mov dword [edi + 8], eax
mov dword [edi + 0xc], ecx
jmp 0x41c378
lea eax, [esp + 0x28]
push eax
call fcn.004054f0
mov ecx, dword [edi + 0xc]
mov edx, dword [edi + 8]
push ecx
push edx
lea ecx, [esp + 0x30]
call fcn.00403bf0
test al, al
je 0x41c378
lea eax, [esp + 0x44]
push eax
mov ecx, dword [esp + 0x294]
call fcn.00415b00
mov dword [ebp], 1
lea ecx, [esp + 0x44]
call fcn.0040b180
lea ecx, [esp + 0x38]
call fcn.004801b0
lea ecx, [esp + 0x34]
call fcn.004801b0
lea ecx, [esp + 0x24]
call fcn.004801b0
lea ecx, [esp + 0x20]
call fcn.004801b0
lea ecx, [esp + 0x1c]
call fcn.004801b0
jmp case.0x41b4ab.21
test eax, eax
jne 0x41c104
mov ecx, dword [ebp]
cmp ecx, dword [esi + 0x20]
jle 0x41c378
lea edx, [esp + 0x44]
push edx
jmp 0x41c09f
cmp eax, 3
jne 0x41c143
push ecx
mov dword [esp + 0x1c], esp
mov edi, esp
push ecx
lea eax, [esi + 0x28]
mov ecx, esp
mov dword [esp + 0x20], esp
push eax
call fcn.00401360
push edi
call fcn.0043d2c0
add esp, 8
call fcn.0043d200
add esp, 4
test eax, eax
jne 0x41c378
lea ecx, [esp + 0x44]
push ecx
jmp 0x41c09f
cmp eax, 4
jne 0x41c245
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41c1dd
test eax, eax
jne 0x41c161
xor ecx, ecx
jmp 0x41c164
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 9
call fcn.00401360
call fcn.004411e0
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.0045e740
mov edx, dword [esp + 0x20]
push edx
call fcn.00450580
call fcn.004be990
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401360
call fcn.004411e0
add esp, 4
call fcn.004be990
cmp edi, eax
jle 0x41c367
lea ecx, [esp + 0x44]
push ecx
jmp 0x41c346
test eax, eax
jne 0x41c1e5
xor ecx, ecx
jmp 0x41c1e8
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xa
mov edi, eax
call fcn.00450580
fadd qword [0x506c08]
push ecx
fstp qword [esp]
push edi
call fcn.0045e740
mov eax, dword [esp + 0x20]
push eax
call fcn.00450580
call fcn.004be990
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401360
call fcn.004411e0
jmp 0x41c335
cmp eax, 5
jne 0x41c378
cmp dword [ebp], 1
mov eax, dword [esi + 0x2c]
jne 0x41c2cc
test eax, eax
jne 0x41c25f
xor ecx, ecx
jmp 0x41c262
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
push ecx
lea eax, [esi + 0x30]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
mov byte [esp + 0x290], 0xb
call fcn.00401360
call fcn.004411e0
push ecx
mov ecx, dword [esp + 0x1c]
fstp qword [esp]
push ecx
call fcn.0045e740
mov edx, dword [esp + 0x20]
push edx
call fcn.00450580
call fcn.004be990
add esp, 0xc
mov edi, eax
lea eax, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push eax
call fcn.00401360
call fcn.004411e0
fsub qword [0x506c08]
jmp 0x41c1c3
test eax, eax
jne 0x41c2d4
xor ecx, ecx
jmp 0x41c2d7
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov edx, dword [edx + 0x24]
lea eax, [esp + 0x14]
push eax
call edx
mov eax, dword [esp + 0x14]
push eax
mov byte [esp + 0x28c], 0xc
mov edi, eax
call fcn.00450580
fadd qword [0x506c08]
push ecx
fstp qword [esp]
push edi
call fcn.0045e740
mov eax, dword [esp + 0x20]
push eax
call fcn.00450580
call fcn.004be990
add esp, 0xc
lea edx, [esi + 0x34]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
mov edi, eax
call fcn.00401360
call fcn.004411e0
fsub qword [0x506c08]
add esp, 4
call fcn.004be990
cmp edi, eax
jle 0x41c367
lea eax, [esp + 0x44]
push eax
mov ecx, dword [esp + 0x294]
call fcn.00415b00
lea ecx, [esp + 0x14]
mov dword [ebp], 1
call fcn.004801b0
jmp 0x41c0b2
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.004801b0
cmp dword [esi + 0x10], 0
jbe 0x41c421
lea ecx, [esp + 0x14]
call fcn.00401980
mov eax, dword [esi + 0x1c]
mov byte [esp + 0x288], 0xd
cmp eax, 1
je 0x41c3d0
cmp eax, 3
jne 0x41c3b8
mov ecx, dword [ebp]
push ecx
lea edx, [esp + 0x18]
push str.While_Loop__d
push edx
call fcn.00401e60
add esp, 0xc
jmp 0x41c401
mov eax, dword [ebp]
push eax
lea ecx, [esp + 0x18]
push str.For_Loop__d
push ecx
call fcn.00401e60
add esp, 0xc
jmp 0x41c401
add ebx, 8
mov ecx, ebx
call fcn.00403c70
push eax
mov ecx, ebx
call fcn.00403c40
push eax
mov ecx, ebx
call fcn.00403c10
mov edx, dword [ebp]
push eax
push edx
lea eax, [esp + 0x24]
push str.For_Loop__d__started_at__02d:_02d:_02d
push eax
call fcn.00401e60
add esp, 0x18
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.00419880
add esp, 8
lea ecx, [esp + 0x14]
mov byte [esp + 0x288], 8
call fcn.004801b0
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
jmp 0x41c0b2
push ebx
lea ecx, [esp + 0x48]
call fcn.00415a20
lea ecx, [esp + 0x44]
mov dword [esp + 0x288], 0xe
call fcn.0040e090
dec dword [eax]
lea ecx, [esp + 0x24]
call fcn.00401980
lea ecx, [esp + 0x20]
call fcn.00401980
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x10
test ecx, ecx
jbe 0x41c4cd
lea esp, [esp]
push edi
lea ecx, [esp + 0x48]
call fcn.004048c0
mov edx, dword [eax]
push edx
lea eax, [esp + 0x28]
push 0x508cd4
push eax
call fcn.00401e60
add esp, 0xc
lea ecx, [esp + 0x24]
push ecx
lea ecx, [esp + 0x24]
call fcn.00412c70
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41c490
lea ecx, [esp + 0x1c]
call fcn.00401980
mov ebp, dword [esp + 0x20]
push ebp
lea eax, [esp + 0x20]
push str._idx_s
push eax
mov byte [esp + 0x294], 0x11
call fcn.00401e60
mov ecx, dword [esp + 0x28]
mov ebx, dword [esp + 0x2a4]
add esp, 0xc
push 0
push ecx
mov ecx, ebx
call fcn.00419410
lea ecx, [esp + 0x14]
mov edi, eax
call fcn.00401980
push ebp
lea edx, [esp + 0x18]
push str._endT_s
push edx
mov byte [esp + 0x294], 0x12
call fcn.00401e60
mov eax, dword [esp + 0x20]
add esp, 0xc
push 0
push eax
mov ecx, ebx
call fcn.00419410
push 0
push 0
lea ecx, [esp + 0x4c]
push ecx
mov ecx, ebx
call fcn.0040ea80
mov ecx, dword [esp + 0x290]
inc dword [edi + 8]
lea edx, [esp + 0x44]
push edx
call fcn.00415b00
cmp dword [esi + 0x10], 0
jbe 0x41c578
mov eax, dword [0x64824c]
push eax
push 0
call fcn.00419880
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.004801b0
lea ecx, [esp + 0x1c]
call fcn.004801b0
lea ecx, [esp + 0x20]
call fcn.004801b0
lea ecx, [esp + 0x24]
call fcn.004801b0
lea ecx, [esp + 0x44]
call fcn.0040b180
jmp case.0x41b4ab.21
push ebx
lea ecx, [esp + 0x48]
call fcn.00415a20
mov ebx, 0x13
mov dword [esp + 0x288], ebx
lea edi, [ebx - 0xb]
mov edi, edi
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41c5fb
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41c73f
mov ecx, dword [esp + 0x298]
push 0
push 0
lea eax, [esp + 0x4c]
push eax
call fcn.0040ea80
test eax, eax
je 0x41c73f
cmp dword [eax + 8], edi
jne 0x41c5e0
lea ecx, [esp + 0x20]
call fcn.00401980
lea ecx, [esp + 0x1c]
call fcn.00401980
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
xor edi, edi
sar ecx, 2
mov byte [esp + 0x288], 0x15
test ecx, ecx
jbe 0x41c692
push edi
lea ecx, [esp + 0x48]
call fcn.004048c0
mov edx, dword [eax]
push edx
lea eax, [esp + 0x24]
push 0x508cd4
push eax
call fcn.00401e60
add esp, 0xc
lea ecx, [esp + 0x20]
push ecx
lea ecx, [esp + 0x20]
call fcn.00412c70
mov edx, dword [esp + 0x54]
sub edx, dword [esp + 0x50]
inc edi
sar edx, 2
cmp edi, edx
jb 0x41c655
lea ecx, [esp + 0x14]
call fcn.00401980
mov eax, dword [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push str._idx_s
push ecx
mov byte [esp + 0x294], 0x16
call fcn.00401e60
mov edx, dword [esp + 0x20]
mov edi, dword [esp + 0x2a4]
add esp, 0xc
push 0
push edx
mov ecx, edi
call fcn.00419410
lea ecx, [esp + 0x14]
mov dword [eax + 8], 1
call fcn.004801b0
lea ecx, [esp + 0x1c]
call fcn.004801b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x288], bl
call fcn.004801b0
lea ecx, [esp + 0x44]
call fcn.0040e090
inc dword [eax]
lea eax, [esp + 0x44]
push eax
mov ecx, edi
call fcn.004197d0
mov ecx, dword [esp + 0x54]
sub ecx, dword [esp + 0x50]
test ecx, 0xfffffffc
mov ecx, ebp
je 0x41c72d
lea edx, [esp + 0x44]
push edx
call fcn.00415b00
jmp 0x41c73f
lea eax, [esp + 0x18]
push eax
mov dword [esp + 0x1c], 0xffffffff
call fcn.00418680
mov ecx, dword [ebp + 0x10]
sub ecx, dword [ebp + 0xc]
test ecx, 0xfffffffc
jne 0x41c769
push 0
push 0
push str.Action_Script_Error:_Invalid_Exit_For_statement.
call fcn.004a76b4
lea ecx, [esp + 0x44]
call fcn.0040b180
jmp case.0x41b4ab.21
cmp dword [esi + 0x10], 0
jbe 0x41c780
mov edx, dword [0x64824c]
push edx
push 0
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
jmp 0x41bd7c
push ebx
lea ecx, [esp + 0x48]
call fcn.00415a20
mov edi, dword [esp + 0x298]
mov dword [esp + 0x288], 0x17
mov ebx, 8
lea esp, [esp]
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
mov edx, eax
sub edx, ecx
test edx, 0xfffffffc
je 0x41c7db
sub eax, 4
mov dword [esp + 0x54], eax
sub eax, ecx
test eax, 0xfffffffc
je 0x41c814
push 0
push 0
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call fcn.0040ea80
test eax, eax
je 0x41c814
cmp dword [eax + 8], ebx
jne 0x41c7c0
lea ecx, [esp + 0x44]
call fcn.0040e090
inc dword [eax]
lea ecx, [esp + 0x44]
push ecx
mov ecx, ebp
call fcn.00415b00
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41c83e
push 0
push 0
push str.Action_Script_Error:_Invalid_Continue_For_statement.
call fcn.004a76b4
lea ecx, [esp + 0x44]
call fcn.0040b180
jmp case.0x41b4ab.21
cmp dword [esi + 0x10], 0
jbe 0x41c854
mov eax, dword [0x64824c]
push eax
push 0
call fcn.00419880
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
jmp 0x41bd7c
push ecx
lea eax, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401360
lea ecx, [esp + 0x20]
push ecx
call fcn.0043d2c0
mov edx, dword [esp + 0x24]
add esp, 4
mov eax, esp
mov dword [eax], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x28c], 0x18
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41c8ab
inc dword [eax + 4]
lea eax, [esp + 0x18]
push eax
call fcn.004555e0
add esp, 8
mov ecx, dword [esp + 0x14]
cmp dword [ecx - 0xc], 0
mov byte [esp + 0x288], 0x19
jne 0x41c8d3
lea edx, [esi + 0x80]
push edx
jmp 0x41c92c
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0xe4]
lea edi, [esi + 0x60]
push ecx
mov ecx, edi
call fcn.0040e010
mov edx, dword [eax]
mov eax, dword [eax + 4]
mov ecx, dword [edi + 0x18]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x28], edx
mov edx, dword [edi]
lea eax, [esp + 0x6c]
mov dword [esp + 0x70], ecx
push eax
lea ecx, [esp + 0x2c]
mov dword [esp + 0x70], edx
call fcn.00405ca0
test al, al
je 0x41c925
lea ecx, [esp + 0x28]
call fcn.00405cd0
add eax, 4
push eax
jmp 0x41c92c
lea ecx, [esi + 0x80]
push ecx
mov ecx, ebp
call fcn.00415b00
cmp dword [esi + 0x10], 0
jbe 0x41c94a
mov edx, dword [0x64824c]
push edx
push 0
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.004801b0
lea ecx, [esp + 0x1c]
jmp 0x41e22b
push ebx
mov ecx, ebp
call fcn.00415b00
mov ecx, ebp
call fcn.0040b1c0
mov edx, dword [ebp + 0x10]
sub edx, dword [ebp + 0xc]
test edx, 0xfffffffc
jne 0x41c9a7
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Case_Command.
call fcn.004a76b4
jmp case.0x41b4ab.21
mov ecx, ebp
call fcn.0040e090
inc dword [eax]
jmp 0x41bdaa
push ebx
mov ecx, ebp
call fcn.00415b00
mov ecx, ebp
call fcn.0040b1c0
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
test eax, 0xfffffffc
jne 0x41c9e4
push 0
push 0
push str.Action_Script_Error:_Invalid_Switch_Defalult_Command.
call fcn.004a76b4
jmp case.0x41b4ab.21
mov ecx, ebp
call fcn.0040e090
inc dword [eax]
jmp 0x41b53f
cmp dword [esi + 0x10], 0
jbe 0x41ca07
push str.Step_Complete
push 0
call fcn.00419880
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401360
push edi
call fcn.0043d2c0
add esp, 8
call fcn.0043d140
call fcn.004be990
fldz
mov dword [esp + 0x20], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov edi, eax
mov ecx, esp
mov dword [esp + 0x24], esp
push edx
mov dword [esp + 0x2c], edi
call fcn.00401360
push ebx
call fcn.0043d2c0
add esp, 8
call fcn.0043d140
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x60]
xor ebp, ebp
push eax
mov dword [esp + 0x64], ebp
mov dword [esp + 0x68], ebp
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004be990
mov ecx, dword [esp + 0x60]
mov ebx, dword [sym.imp.USER32.dll_SetCursorPos]
lea edx, [ecx + edi]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x64]
mov dword [esp + 0x70], eax
push edx
add eax, edx
push ecx
mov dword [esp + 0x34], eax
call ebx
mov ecx, dword [0x643198]
push ebp
push ebp
push ebp
push ebp
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
mov edi, dword [esp + 0x294]
push ebp
push 0x32
push edi
push 0x64
call fcn.0041adb0
add esp, 0x10
lea edx, [esp + 0x28]
push edx
lea eax, [esp + 0x64]
push eax
lea ecx, [esp + 0x4c]
mov dword [esp + 0x64], ebp
call fcn.00405990
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.004059c0
test eax, eax
je 0x41cb73
lea edx, [esp + 0x3c]
push edx
lea ecx, [esp + 0x48]
call fcn.004059c0
test eax, eax
je 0x41cb73
inc ebp
mov eax, 0xcccccccd
mul ebp
shr edx, 2
lea eax, [edx + edx*4]
mov ecx, ebp
sub ecx, eax
jne 0x41cb61
mov edx, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
push edx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x3c]
push ecx
lea ecx, [esp + 0x48]
call fcn.004059c0
test eax, eax
jne 0x41cb32
mov edx, dword [esp + 0x60]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x64]
add eax, edx
mov edx, dword [esp + 0x70]
add ecx, edx
push ecx
push eax
call ebx
push 0
push 0x32
push edi
push 0xa
call fcn.0041adb0
mov eax, dword [0x64319c]
add esp, 0x10
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0x32
push edi
push 0xa
call fcn.0041adb0
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41cbd4
mov ecx, dword [0x64824c]
push ecx
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push edi
push edx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401360
push edi
call fcn.0043d2c0
add esp, 8
call fcn.0043d140
call fcn.004be990
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401360
push ebx
call fcn.0043d2c0
add esp, 8
call fcn.0043d140
fstp qword [esp + 0x34]
add esp, 0xc
lea eax, [esp + 0x3c]
xor ebx, ebx
push eax
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
call dword [sym.imp.USER32.dll_GetCursorPos]
fld qword [esp + 0x28]
call fcn.004be990
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x3c]
add eax, edx
add ecx, edi
push eax
push ecx
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [esi + 0x10], ebx
jbe 0x41ca07
mov eax, dword [0x64824c]
push eax
push ebx
jmp 0x41c9ff
fldz
sub esp, 0xc
mov dword [esp + 0x3c], esp
fstp qword [esp + 4]
mov edi, esp
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push eax
call fcn.00401360
push edi
call fcn.0043d2c0
add esp, 8
call fcn.0043d140
call fcn.004be990
fldz
mov dword [esp + 0x24], esp
fstp qword [esp + 4]
mov ebx, esp
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x28], esp
push edx
mov edi, eax
call fcn.00401360
push ebx
call fcn.0043d2c0
add esp, 8
call fcn.0043d140
add esp, 0xc
call fcn.004be990
cmp dword [0x648114], 6
jne 0x41cd3a
cmp dword [0x648118], 2
jne 0x41cd3a
shl eax, 0x10
cdq
idiv dword [0x648230]
push 0
push 0
push eax
mov eax, edi
shl eax, 0x10
cdq
idiv dword [0x648234]
push eax
push 0x8001
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
push eax
push edi
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp dword [esi + 0x10], 0
jbe 0x41ca07
mov eax, dword [0x64824c]
push eax
jmp 0x41c9fd
mov ebp, dword [esi + 0x1c]
mov edi, dword [esi + 0x24]
mov ebx, dword [esi + 0x20]
sub edi, ebp
call fcn.004bf39b
cdq
idiv edi
mov edi, dword [esi + 0x28]
sub edi, dword [esi + 0x20]
add ebp, edx
call fcn.004bf39b
cdq
idiv edi
add ebx, edx
push ebx
push ebp
jmp 0x41cd3c
mov eax, dword [esi + 0x1c]
cmp eax, 1
jne 0x41cd9e
mov eax, dword [0x643198]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 2
jne 0x41cdba
mov ecx, dword [0x64319c]
push 0
push 0
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 3
jne 0x41cdd9
mov edx, dword [0x6431a0]
push 0
push 0
push 0
push 0
push edx
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 4
jne 0x41cdf7
mov eax, dword [0x6431a4]
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 5
jne 0x41ce11
push 0
push 0
push 0
push 0
push 0x20
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 6
jne 0x41ce2b
push 0
push 0
push 0
push 0
push 0x40
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 7
jne 0x41ce4c
mov ecx, dword [esi + 0x20]
push 0
neg ecx
push ecx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
cmp eax, 8
jne 0x41cd42
mov edx, dword [esi + 0x20]
push 0
push edx
push 0
push 0
push 0x800
call dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cd42
mov eax, dword [esi + 0x1c]
test eax, eax
jne 0x41ce84
mov ebp, dword [0x643198]
mov ebx, dword [0x64319c]
jmp 0x41cea6
cmp eax, 1
jne 0x41ce91
lea ebp, [eax + 0x1f]
lea ebx, [eax + 0x3f]
jmp 0x41ceaf
cmp eax, 2
jne 0x41b53f
mov ebp, dword [0x6431a0]
mov ebx, dword [0x6431a4]
cmp ebp, 0xffffffff
je 0x41b53f
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x28]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41ced4
mov edi, dword [sym.imp.USER32.dll_mouse_event]
jmp 0x41cf01
cmp eax, 1
jne 0x41b53f
mov edi, dword [sym.imp.USER32.dll_mouse_event]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
push 0
push 0
push 0
push ebp
call edi
push 0
push 0
push 0
push 0
push ebx
call edi
jmp 0x41b53f
cmp byte [esi + 0x1c], 0
je 0x41cf2e
push 0
push 0x11
call fcn.00436770
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41cf40
push 0
push 0x10
call fcn.00436770
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41cf52
push 0
push 0x12
call fcn.00436770
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41cf64
push 0
push 0x5b
call fcn.00436770
add esp, 8
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41cf86
jmp 0x41cf70
movzx ecx, byte [esi + edi + 0x24]
push 0
push ecx
call fcn.00436770
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41cf70
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
xor edi, edi
cmp dword [esi + 0x20], edi
jbe 0x41cfab
movzx edx, byte [esi + edi + 0x24]
push 2
push edx
call fcn.00436770
inc edi
add esp, 8
cmp edi, dword [esi + 0x20]
jb 0x41cf95
cmp byte [esi + 0x1c], 0
je 0x41cfbd
push 2
push 0x11
call fcn.00436770
add esp, 8
cmp byte [esi + 0x1d], 0
je 0x41cfcf
push 2
push 0x10
call fcn.00436770
add esp, 8
cmp byte [esi + 0x1e], 0
je 0x41cfe1
push 2
push 0x12
call fcn.00436770
add esp, 8
cmp byte [esi + 0x1f], 0
je 0x41cd42
push 2
push 0x5b
call fcn.00436770
add esp, 8
jmp 0x41cd42
cmp dword [esi + 0x20], 0
je 0x41d037
mov eax, dword [esi + 0x1c]
push eax
call fcn.004042a0
push 0
push 0x11
call fcn.00436770
push 0
push 0x56
call fcn.00436770
push 2
push 0x56
call fcn.00436770
push 2
push 0x11
call fcn.00436770
add esp, 0x24
jmp 0x41b556
mov ecx, dword [esi + 0x1c]
push ecx
call fcn.004367b0
add esp, 4
jmp 0x41b556
movzx ecx, byte [esi + 0x1c]
push 0
push ecx
call fcn.00436770
mov edx, dword [esp + 0x29c]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x18
jmp case.0x41b4ab.21
movzx ecx, byte [esi + 0x1c]
push 2
push ecx
call fcn.00436770
mov edx, dword [esp + 0x29c]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x18
jmp case.0x41b4ab.21
or ebx, 0xffffffff
xor eax, eax
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
cmp dword [esi + 0x34], eax
je 0x41d175
lea ecx, [esp + 0x3c]
push ecx
call dword [sym.imp.USER32.dll_GetCursorPos]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41d175
mov edi, edi
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax], 8
je 0x41d128
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax], 9
je 0x41d128
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax], 0xa
je 0x41d128
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax + 2], bx
jne 0x41d145
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov ecx, edx
shr ecx, 0x1f
inc ebp
add ecx, edx
cmp ebp, ecx
jb 0x41d0f0
jmp 0x41d175
push ebp
mov ecx, edi
call fcn.004048f0
movsx ebx, word [eax + 2]
push ebp
mov ecx, edi
mov dword [esp + 0x2c], ebx
call fcn.004048f0
mov ecx, dword [esp + 0x3c]
movsx eax, word [eax + 4]
sub ecx, ebx
mov dword [esp + 0x18], ecx
mov ecx, dword [esp + 0x40]
sub ecx, eax
mov dword [esp + 0x14], ecx
push str.Playing...
push 0
call fcn.00419880
fld1
fst qword [esp + 0x7c]
add esp, 8
fld qword [0x506ae0]
fcom qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41d1a5
fdivr qword [esi + 0x38]
fdivp st(1)
fstp qword [esp + 0x74]
jmp 0x41d1be
fstp st(1)
fldz
fcomp qword [esi + 0x38]
fnstsw ax
test ah, 5
jp 0x41d1bc
fdiv qword [esi + 0x38]
fstp qword [esp + 0x74]
jmp 0x41d1be
fstp st(0)
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
mov ebx, dword [esp + 0x294]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
xor ebp, ebp
add eax, edx
je 0x41d2c2
cmp dword [0x64822c], 0
jne 0x41d2c2
cmp dword [esp + 0x28], 0xffffffff
mov ecx, edi
je 0x41d289
push ebp
call fcn.004048f0
cmp word [eax], 8
je 0x41d287
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax], 9
je 0x41d287
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax], 0xa
je 0x41d287
push ebp
mov ecx, edi
call fcn.004048f0
cmp word [eax + 2], 0xffff
je 0x41d287
push ebp
mov ecx, edi
call fcn.004048f0
fld qword [esp + 0x74]
mov ecx, dword [eax]
mov edx, dword [eax + 4]
mov eax, dword [eax + 8]
mov dword [esp + 0x7c], ecx
shr ecx, 0x10
add ecx, dword [esp + 0x18]
mov dword [esp + 0x80], edx
mov word [esp + 0x7e], cx
mov cx, word [esp + 0x14]
add word [esp + 0x80], cx
sub esp, 8
fstp qword [esp]
push ebx
lea edx, [esp + 0x88]
mov dword [esp + 0x90], eax
push edx
jmp 0x41d29b
mov ecx, edi
fld qword [esp + 0x74]
sub esp, 8
fstp qword [esp]
push ebx
push ebp
call fcn.004048f0
push eax
call fcn.0041aec0
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
add esp, 0x10
cmp ebp, eax
jb 0x41d1e6
cmp dword [esi + 0x10], 0
jbe 0x41d2d9
mov ecx, dword [0x64824c]
push ecx
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ebx
push edx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
cmp dword [esi + 0x20], 0
je 0x41d353
push 0
lea ecx, [esp + 0x10c]
call fcn.00402c00
lea eax, [esi + 0x1c]
push eax
lea ecx, [esp + 0x180]
mov dword [esp + 0x28c], 0x1a
call fcn.00401da0
mov ecx, dword [esi + 0x24]
mov dword [esp + 0x180], ecx
lea ecx, [esp + 0x108]
call fcn.004a00db
lea ecx, [esp + 0x108]
mov dword [esp + 0x288], 0xffffffff
call fcn.00402890
jmp 0x41b556
lea edi, [esi + 0x1c]
push str.Logoff
push edi
call fcn.004027a0
add esp, 8
test al, al
je 0x41d383
push str.Logging_off...
push 0
call fcn.00419880
push 0
call fcn.004026a0
add esp, 0xc
jmp 0x41b556
push 0x506030
push edi
call fcn.004027a0
add esp, 8
push str.Shutting_down...
push 0
test al, al
je 0x41d3b0
call fcn.00419880
push 2
call fcn.004026a0
add esp, 0xc
jmp 0x41b556
call fcn.00419880
push 1
call fcn.004026a0
add esp, 0xc
jmp 0x41b556
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00401980
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0x1b
call fcn.00401980
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0x18]
push ecx
mov byte [esp + 0x290], 0x1c
call fcn.004198a0
xor edi, edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov bl, 0x1d
push 0x14
mov byte [esp + 0x294], bl
call fcn.0049f906
add esp, 0xc
mov dword [esp + 0x18], eax
mov byte [esp + 0x288], 0x1e
cmp eax, edi
je 0x41d45a
mov ecx, dword [esi + 0x1c]
push ecx
mov ecx, eax
call fcn.0040f100
jmp 0x41d45c
xor eax, eax
push eax
lea edx, [esp + 0xc4]
push edx
mov byte [esp + 0x290], bl
call fcn.0040b690
add esp, 8
push eax
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x1f
call fcn.00405c50
lea ecx, [esp + 0xc0]
mov byte [esp + 0x288], bl
call fcn.00401950
mov eax, dword [esi + 0x30]
sub eax, dword [esi + 0x2c]
lea edi, [esi + 0x20]
sar eax, 2
xor ebp, ebp
test eax, eax
jbe 0x41d509
mov edi, edi
push ebp
mov ecx, edi
call fcn.004048c0
push ecx
mov ecx, esp
mov dword [esp + 0x24], esp
push eax
call fcn.00401360
lea ecx, [esp + 0x1c]
push ecx
call fcn.0043d2c0
add esp, 8
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x80]
mov byte [esp + 0x28c], 0x20
call fcn.00405c50
lea ecx, [esp + 0x18]
mov byte [esp + 0x288], bl
call fcn.00401950
mov eax, dword [edi + 0x10]
sub eax, dword [edi + 0xc]
inc ebp
sar eax, 2
cmp ebp, eax
jb 0x41d4b0
mov edx, dword [esi + 0x40]
push 0
push 0
lea ecx, [esp + 0x84]
push ecx
push edx
call fcn.004254b0
mov eax, dword [esi + 0x38]
add esp, 0x10
test eax, eax
je 0x41d596
cmp dword [eax + 8], 0
je 0x41d596
test eax, eax
jne 0x41d536
xor ecx, ecx
jmp 0x41d539
mov ecx, dword [eax + 8]
mov edx, dword [0x648294]
push ecx
mov eax, esp
mov dword [eax], edx
mov eax, edx
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41d551
inc dword [eax + 4]
mov eax, dword [ecx]
mov eax, dword [eax + 0x24]
lea edx, [esp + 0xbc]
push edx
mov byte [esp + 0x290], 0x21
call eax
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x22
push eax
mov byte [esp + 0x290], 0x23
call fcn.0045e650
add esp, 8
lea ecx, [esp + 0xb8]
mov byte [esp + 0x288], bl
call fcn.004801b0
cmp dword [esi + 0x10], 0
jbe 0x41d5b0
mov ecx, dword [0x64824c]
mov edx, dword [esp + 0x14]
push ecx
push edx
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x7c]
mov byte [esp + 0x288], 0x1c
call fcn.00405c20
lea ecx, [esp + 0x14]
call fcn.004801b0
lea ecx, [esp + 0x1c]
call fcn.004801b0
jmp case.0x41b4ab.21
cmp dword [esi + 0x10], 0
jbe 0x41b556
push str.Step_Complete
jmp 0x41b54c
push 0
push 0x643a28
push 0x643280
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401360
lea eax, [esp + 0xbc]
push eax
call fcn.0043d2c0
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x24
test eax, eax
je 0x41d647
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004c01ed
add esp, 0x14
lea ecx, [esp + 0xac]
mov edi, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00401950
test edi, edi
je case.0x41b4ab.21
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41b4ab.21
mov edx, dword [esi + 0x28]
mov eax, dword [esi + 0x20]
push edx
push eax
mov ecx, edi
call fcn.004975c0
jmp 0x41b53f
push 0
push 0x643a28
push 0x643280
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call fcn.00401360
lea eax, [esp + 0xcc]
push eax
call fcn.0043d2c0
add esp, 8
mov eax, dword [eax]
mov dword [esp + 0x294], 0x25
test eax, eax
je 0x41d6d9
mov eax, dword [eax + 8]
push 0
push eax
call fcn.004c01ed
add esp, 0x14
lea ecx, [esp + 0xbc]
mov ebp, eax
mov dword [esp + 0x288], 0xffffffff
call fcn.00401950
test ebp, ebp
je case.0x41b4ab.21
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je case.0x41b4ab.21
push ecx
lea edx, [esi + 0x20]
mov ecx, esp
mov dword [esp + 0x1c], esp
push edx
call fcn.00401360
lea eax, [esp + 0x18]
push eax
call fcn.0043d2c0
add esp, 8
mov eax, dword [esp + 0x14]
xor ebx, ebx
mov dword [esp + 0x288], 0x26
test eax, eax
je 0x41d773
mov edi, dword [eax + 8]
test edi, edi
je 0x41d773
cmp dword [edi + 8], 0x80f
jne 0x41d773
mov ecx, dword [edi + 0x10]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41d79e
mov edx, dword [edi + 0x10]
push edx
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
jmp 0x41d79c
fldz
sub esp, 0xc
mov ecx, esp
fstp qword [esp + 4]
mov dword [ecx], eax
mov eax, dword [esp + 0x20]
mov dword [esp + 0x24], esp
test eax, eax
je 0x41d78f
inc dword [eax + 4]
call fcn.0043d140
add esp, 0xc
call fcn.004be990
mov ebx, eax
mov eax, dword [esi + 0x28]
push eax
push ebx
mov ecx, ebp
call fcn.00497630
cmp dword [esi + 0x10], 0
jbe 0x41d7c1
mov ecx, dword [0x64824c]
push ecx
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41e22b
cmp dword [esi + 0x34], 0
jne 0x41d7ff
cmp dword [esi + 0x10], 0
jbe 0x41ca07
push str.Nothing_to_play_
jmp 0x41c9fd
call fcn.00404280
xor edx, edx
div dword [esi + 0x34]
mov ecx, dword [esi + 0x2c]
sub ecx, dword [esi + 0x28]
lea edi, [esi + 0x1c]
mov eax, 0x2aaaaaab
xor ebx, ebx
xor ebp, ebp
mov dword [esp + 0x18], edx
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x41d876
lea esp, [esp]
cmp dword [esp + 0x18], ebx
jb 0x41d849
push ebp
mov ecx, edi
call fcn.004048f0
mov ecx, dword [eax + 4]
add ecx, ebx
cmp dword [esp + 0x18], ecx
jb 0x41d871
push ebp
mov ecx, edi
call fcn.004048f0
add ebx, dword [eax + 4]
mov ecx, dword [edi + 0x10]
sub ecx, dword [edi + 0xc]
mov eax, 0x2aaaaaab
imul ecx
sar edx, 1
mov eax, edx
shr eax, 0x1f
inc ebp
add eax, edx
cmp ebp, eax
jb 0x41d830
jmp 0x41d876
cmp ebp, 0xffffffff
jne 0x41d88a
cmp dword [esi + 0x10], 0
jbe 0x41ca07
push str.Just_do_nothing.
jmp 0x41c9fd
cmp dword [esi + 0x10], 0
jbe 0x41d8fd
push ebp
mov ecx, edi
call fcn.004048f0
mov ebx, dword [eax]
push ebp
mov ecx, edi
call fcn.004048f0
mov eax, dword [eax]
push 0x5c
push eax
call fcn.004bdfc0
add esp, 8
test eax, eax
je 0x41d8b6
lea ebx, [eax + 2]
lea ecx, [esp + 0x14]
call fcn.00401980
push ebx
lea eax, [esp + 0x18]
push str.Play___s_
push eax
mov dword [esp + 0x294], 0x27
call fcn.00401e60
mov ecx, dword [esp + 0x20]
push ecx
push 0
call fcn.00419880
add esp, 0x14
lea ecx, [esp + 0x14]
mov dword [esp + 0x288], 0xffffffff
call fcn.004801b0
mov ebx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ebx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x1c]
call fcn.00401980
lea ecx, [esp + 0x24]
mov dword [esp + 0x288], 0x28
call fcn.00401980
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x20]
push ecx
mov byte [esp + 0x290], 0x29
call fcn.004198a0
add esp, 8
push 0
push 0
push 0
push ebp
mov ecx, edi
call fcn.004048f0
mov edx, dword [eax + 8]
push edx
call fcn.004254b0
add esp, 0x10
cmp dword [esi + 0x10], 0
jbe 0x41d982
mov eax, dword [0x64824c]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
call fcn.00419880
add esp, 8
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ebx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x24]
call fcn.004801b0
lea ecx, [esp + 0x1c]
call fcn.004801b0
jmp case.0x41b4ab.21
lea ecx, [esp + 0x14]
call fcn.00401980
cmp dword [esi + 0x24], 0
mov edi, dword [esi + 0x1c]
mov ebp, dword [esi + 0x20]
mov dword [esp + 0x288], 0x2a
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], ebp
je 0x41d9ff
call fcn.004bf39b
cdq
mov ecx, 0x3e8
idiv ecx
mov dword [esp + 0x18], edx
fild dword [esp + 0x18]
fdiv qword [0x508ed0]
fild qword [esp + 0x28]
fmulp st(1)
call fcn.004be9c6
mov edi, eax
mov ebp, edx
mov ebx, dword [esp + 0x294]
test ebp, ebp
jl 0x41dad5
jg 0x41da18
test edi, edi
jbe 0x41dad5
test ebp, ebp
jl 0x41da6e
jg 0x41da26
cmp edi, 0x3e8
jbe 0x41da6e
push 0
push 0x3e8
push ebp
push edi
call fcn.004bf000
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], edx
call fcn.00403bc0
push eax
lea ecx, [esp + 0x40]
call fcn.00403b80
push eax
lea ecx, [esp + 0x44]
call fcn.00403b40
push eax
lea edx, [esp + 0x20]
push str.Wait__02d:_02d:_02d
push edx
call fcn.00401e60
add esp, 0x14
jmp 0x41da82
push ebp
push edi
lea eax, [esp + 0x1c]
push str.Wait__I64d_ms
push eax
call fcn.00401e60
add esp, 0x10
mov ecx, dword [esp + 0x14]
push ecx
push 0
call fcn.00419880
add esp, 8
test ebp, ebp
jl 0x41dac4
jg 0x41da9f
cmp edi, 0x3e8
jbe 0x41dac4
push 0x64822c
push 0x32
push ebx
push 0x3e8
call fcn.0041adb0
add esp, 0x10
add edi, 0xfffffc18
adc ebp, 0xffffffff
js 0x41dad5
jmp 0x41da0e
push 0x64822c
push 0x32
push ebx
push edi
call fcn.0041adb0
add esp, 0x10
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ebx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x14]
call fcn.004801b0
jmp case.0x41b4ab.21
mov eax, dword [esi + 0x1c]
push eax
call fcn.00414290
add esp, 4
test eax, eax
je 0x41db19
push 0
push 0
push 0x10
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x41cd42
cmp dword [esi + 0x10], 0
jbe 0x41ca07
push str.Can_not_find_the_window
jmp 0x41c9fd
mov eax, dword [esi + 0x1c]
push eax
call fcn.00414290
mov edi, eax
add esp, 4
test edi, edi
je 0x41db19
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41db53
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x41cd42
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, esi
mov edi, eax
xor ebp, ebp
call fcn.00411370
mov ebx, eax
mov eax, edx
mov dword [esp + 0x28], ebx
add ebx, edi
mov dword [esp + 0x2c], eax
adc eax, ebp
mov dword [esp + 0x70], eax
mov dword [esp + 0x18], 1
lea esp, [esp]
mov eax, dword [esi + 0x20]
push eax
call fcn.00414290
mov edi, eax
xor eax, eax
add esp, 4
cmp dword [esi + 0x1c], eax
je 0x41dbac
test edi, edi
setne al
jmp 0x41dbb1
test edi, edi
sete al
test eax, eax
jne 0x41dcd4
cmp dword [esp + 0x2c], eax
ja 0x41dbca
cmp dword [esp + 0x28], 0x64
jbe 0x41dc54
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor ebp, ebp
mov edi, eax
cmp dword [esp + 0x18], ebp
je 0x41dbfd
cmp dword [esi + 0x1c], ebp
je 0x41dbe6
push str.Waiting_for_the_window_appear
jmp 0x41dbeb
push str.Waiting_for_the_window_disappear
push 0
call fcn.00419880
add esp, 8
mov dword [esp + 0x18], 0
cmp dword [0x64822c], 0
jne 0x41dc54
cmp ebp, dword [esp + 0x70]
ja 0x41dc54
jb 0x41dc12
cmp edi, ebx
jae 0x41dc54
mov eax, dword [esp + 0x70]
mov ecx, ebx
sub ecx, edi
sbb eax, ebp
mov edx, 0x64
test eax, eax
ja 0x41dc2f
jb 0x41dc2b
cmp ecx, edx
jae 0x41dc2f
mov edx, ebx
sub edx, edi
mov eax, dword [esp + 0x294]
push 0x64822c
push 0x32
push eax
push edx
call fcn.0041adb0
add esp, 0x10
cmp dword [0x64822c], 0
je 0x41db90
cmp dword [esi + 0x10], 0
jbe 0x41dc69
push str.Wait_for_the_window_timeout
push 0
call fcn.00419880
add esp, 8
cmp dword [esi + 0x30], 0
je 0x41ca07
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x298]
push 0
push 0x509260
push eax
call fcn.004198e0
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
cmp dword [0x64822c], 0
jne case.0x41b4ab.21
mov eax, dword [esp + 0x14]
mov esi, dword [esp + 0x290]
push eax
mov ecx, esi
call fcn.00415b00
mov ecx, esi
call fcn.0040e090
inc dword [eax]
jmp case.0x41b4ab.21
cmp dword [esi + 0x30], 0
je 0x41dcf2
mov ecx, dword [esp + 0x14]
push 1
push 0x509260
push ecx
mov ecx, dword [esp + 0x2a4]
call fcn.004198e0
cmp dword [esi + 0x2c], 0
je 0x41dd17
test edi, edi
je 0x41dd17
push edi
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x41dd10
push 9
push edi
call dword [sym.imp.USER32.dll_ShowWindow]
push edi
call dword [sym.imp.USER32.dll_SetForegroundWindow]
cmp dword [esi + 0x10], 0
jbe 0x41ca07
mov edx, dword [0x64824c]
push edx
jmp 0x41c9fd
mov dword [0x648240], 1
cmp dword [esi + 0x10], 0
jbe 0x41dd4c
push str.Step_Complete
push 0
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
cmp dword [esi + 0x10], 0
jbe 0x41dd81
push str.Step_Complete
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
mov dword [0x64822c], 1
jmp case.0x41b4ab.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xb8]
push eax
call fcn.0043d2c0
add esp, 8
push eax
mov ecx, 0x648294
mov dword [esp + 0x28c], 0x2b
call fcn.004052c0
or edi, 0xffffffff
lea ecx, [esp + 0xb4]
mov dword [esp + 0x288], edi
call fcn.00401950
cmp dword [esi + 0x10], 0
jbe 0x41de0e
mov ecx, dword [0x64824c]
push ecx
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
mov dword [esp + 0x98], edi
jmp case.0x41b4ab.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xa8]
push eax
call fcn.0043d2c0
add esp, 8
lea ecx, [esp + 0xa4]
call fcn.00401950
jmp 0x41b53f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xac]
push eax
call fcn.0043d2c0
add esp, 8
lea ecx, [esp + 0xa8]
call fcn.00401950
jmp 0x41b53f
mov eax, dword [esi + 0x20]
test eax, eax
jne 0x41dea2
xor ecx, ecx
jmp 0x41dea5
mov ecx, dword [eax + 8]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
call fcn.004be990
xor ebp, ebp
mov edi, eax
mov dword [esp + 0x14], ebp
mov ebx, 0x2c
mov dword [esp + 0x288], ebx
call fcn.00418400
test eax, eax
je 0x41def1
mov eax, dword [eax + 8]
test eax, eax
je 0x41def1
test edi, edi
jl 0x41def1
cmp edi, dword [eax + 8]
jge 0x41def1
mov ecx, dword [eax]
lea edx, [ecx + edi*4]
push edx
lea ecx, [esp + 0x18]
call fcn.004052c0
mov ebp, dword [esp + 0x14]
mov eax, dword [esi + 0x1c]
test eax, eax
je 0x41defb
mov eax, dword [eax + 8]
push 0
push 0x643a0c
push 0x643280
push 0
push eax
call fcn.004c01ed
add esp, 0x10
mov ecx, esp
mov dword [esp + 0x1c], esp
mov dword [ecx], ebp
test ebp, ebp
je 0x41df21
inc dword [ebp + 4]
mov edx, dword [eax]
mov edx, dword [edx + 0x24]
lea ecx, [esp + 0xa4]
push ecx
mov ecx, eax
mov byte [esp + 0x290], 0x2d
call edx
mov eax, dword [eax]
mov byte [esp + 0x28c], 0x2e
push eax
mov byte [esp + 0x290], 0x2f
call fcn.0045e650
add esp, 8
lea ecx, [esp + 0xa0]
mov byte [esp + 0x288], bl
call fcn.004801b0
cmp dword [esi + 0x10], 0
jbe 0x41df7e
mov eax, dword [0x64824c]
push eax
push 0
call fcn.00419880
add esp, 8
mov ecx, dword [esp + 0x294]
mov edx, dword [esi + 0x10]
push 0x64822c
push 0x32
push ecx
push edx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x14]
jmp 0x41e22b
push ecx
lea eax, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push eax
call fcn.00401360
lea ecx, [esp + 0xa0]
push ecx
call fcn.0043d2c0
add esp, 8
lea ecx, [esp + 0x9c]
call fcn.00401950
cmp dword [esi + 0x10], 0
jbe 0x41dd4c
mov edx, dword [0x64824c]
push edx
push 0
call fcn.00419880
mov eax, dword [esp + 0x29c]
mov ecx, dword [esi + 0x10]
add esp, 8
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
jmp case.0x41b4ab.21
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xc8]
push eax
call fcn.0043d2c0
add esp, 8
lea ecx, [esp + 0xc4]
call fcn.00401950
jmp 0x41b53f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0xb4]
push eax
call fcn.0043d2c0
add esp, 8
lea ecx, [esp + 0xb0]
call fcn.00401950
jmp 0x41b53f
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0x18]
push eax
call fcn.0043d2c0
mov ecx, dword [esp + 0x1c]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x18]
mov dword [esp + 0x28c], 0x30
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41e0aa
inc dword [eax + 4]
call fcn.0043d200
mov ecx, dword [esp + 0x29c]
add esp, 4
test eax, eax
jne 0x41e113
push eax
push 0x509260
push ebx
call fcn.004198e0
cmp dword [esi + 0x10], 0
jbe 0x41e0de
push str.The_condition_is_false
push 0
call fcn.00419880
add esp, 8
mov edx, dword [esp + 0x294]
mov eax, dword [esi + 0x10]
push 0x64822c
push 0x32
push edx
push eax
call fcn.0041adb0
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.00415b00
mov ecx, ebp
call fcn.0040e090
inc dword [eax]
lea ecx, [esp + 0x14]
jmp 0x41e22b
push 1
push 0x509260
push ebx
call fcn.004198e0
jmp 0x41d7aa
push ecx
lea edx, [esi + 0x1c]
mov ecx, esp
mov dword [esp + 0x34], esp
push edx
call fcn.00401360
lea eax, [esp + 0x24]
push eax
call fcn.0043d2c0
mov ecx, dword [esp + 0x28]
add esp, 4
mov eax, esp
mov dword [eax], ecx
mov eax, dword [esp + 0x24]
mov dword [esp + 0x28c], 0x31
mov dword [esp + 0x1c], esp
test eax, eax
je 0x41e164
inc dword [eax + 4]
lea edx, [esp + 0x34]
push edx
call fcn.004555e0
mov eax, dword [eax]
add esp, 8
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
lea ecx, [esp + 0x30]
sete byte [esp + 0x6b]
call fcn.004801b0
cmp byte [esp + 0x6b], 0
mov ecx, dword [esp + 0x298]
je 0x41e1e8
push 0
push 0x509260
push ebx
call fcn.004198e0
cmp dword [esi + 0x10], 0
jbe 0x41e1ba
push str.The_file_is_not_exist
push 0
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
push ebx
mov ecx, ebp
call fcn.00415b00
mov ecx, ebp
call fcn.0040e090
inc dword [eax]
jmp 0x41e227
push 1
push 0x509260
push ebx
call fcn.004198e0
cmp dword [esi + 0x10], 0
jbe 0x41e20c
mov edx, dword [0x64824c]
push edx
push 0
call fcn.00419880
add esp, 8
mov eax, dword [esp + 0x294]
mov ecx, dword [esi + 0x10]
push 0x64822c
push 0x32
push eax
push ecx
call fcn.0041adb0
add esp, 0x10
lea ecx, [esp + 0x20]
mov dword [esp + 0x288], 0xffffffff
call fcn.00401950
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x280]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x278
ret