Function at 0x40b860
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7aaffb
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x8aa514]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x17c], esi
cmp dword [esi], 0
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x174], edx
je 0x40d221
cmp dword [esi + 0x1f8], 0
jle 0x40b9c1
mov eax, dword [esi + 0x1f4]
mov edi, dword [eax]
mov dword [ebp - 0x15c], edi
test edi, edi
je 0x40b9c1
mov eax, dword [esi + 0x1f8]
test eax, eax
jle 0x40b8ff
dec eax
mov dword [esi + 0x1f8], eax
test eax, eax
jle 0x40b8ff
mov ecx, dword [esi + 0x1f4]
shl eax, 2
push eax
lea eax, [ecx + 4]
push eax
push ecx
call fcn.00734c50
add esp, 0xc
mov eax, dword [edi + 0x108]
mov dword [ebp - 0x160], eax
test eax, eax
je 0x40b950
cmp dword [eax + 0x38], 0
jle 0x40b950
xor edi, edi
cmp dword [eax + 0x38], edi
jle 0x40b94a
mov esi, dword [ebp - 0x15c]
mov eax, dword [eax + 0x34]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x40b938
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 8]
call eax
test al, al
je 0x40b944
mov eax, dword [ebp - 0x160]
inc edi
cmp edi, dword [eax + 0x38]
jl 0x40b922
mov esi, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x15c]
xor ecx, ecx
mov dword [ebp - 0x15c], ecx
cmp dword [esi + 0x1b0], ecx
jle 0x40b983
mov eax, dword [esi + 0x1ac]
push edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x15c]
inc ecx
mov dword [ebp - 0x15c], ecx
cmp ecx, dword [esi + 0x1b0]
jl 0x40b960
mov ecx, dword [edi + 0x84]
lea eax, [edi + 0x88]
cmp ecx, eax
je 0x40b99c
push ecx
call fcn.0073bf11
add esp, 4
mov ecx, dword [edi]
lea eax, [edi + 4]
cmp ecx, eax
je 0x40b9ae
push ecx
call fcn.0073bf11
add esp, 4
push 0x120
push edi
call fcn.005b9107
add esp, 8
jmp 0x40b8b0
mov edi, dword [ebp - 0x158]
xor ecx, ecx
mov dword [ebp - 0x15c], ecx
cmp dword [esi + 0x1d4], ecx
jle 0x40ba26
nop word [eax + eax]
mov eax, dword [esi + 0x1d0]
lea edx, [ebp - 0x165]
mov byte [ebp - 0x165], 0
push edx
push edi
mov ecx, dword [eax + ecx*4]
push dword [ebp + 0xc]
push dword [ebp + 8]
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
cmp byte [ebp - 0x165], 0
jne 0x40c560
mov ecx, dword [ebp - 0x15c]
inc ecx
mov dword [ebp - 0x15c], ecx
cmp ecx, dword [esi + 0x1d4]
jl 0x40b9e0
mov ecx, dword [ebp + 8]
cmp ecx, 0x111
ja 0x40c596
je 0x40c56f
lea eax, [ecx - 5]
cmp eax, 0xfd
ja case.0x40c5c0.276
movzx eax, byte [eax + 0x40d270]
jmp dword [eax*4 + 0x40d240]
mov eax, dword [esi + 0x158]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xe4], 0
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x14c]
mov dword [ebp - 0xdc], eax
test ecx, ecx
je 0x40baca
mov dword [ebp - 0xe4], 0xa
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
mov ecx, dword [esi + 0x150]
test ecx, ecx
je 0x40baf3
mov dword [ebp - 0xe4], 0xe
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
push 0
mov ecx, esi
call fcn.0040d940
push 4
push dword [esi]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je case.0x40c5c0.276
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.0x40c5c0.276
mov ecx, dword [ebp - 0x174]
mov al, 1
mov dword [ecx], 1
jmp 0x40d223
push 0
lea eax, [ebp - 0x114]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0x114], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x40c568
cmp dword [esi + 0x144], 0
push 0x40
push 0
jne 0x40bb91
lea eax, [ebp - 0x104]
push eax
call fcn.007351d0
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x104]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_EndPaint]
mov al, 1
jmp 0x40d223
lea eax, [ebp - 0x154]
push eax
call fcn.007351d0
add esp, 0xc
lea eax, [ebp - 0x154]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [esi + 0x1a5], 0
mov edi, dword [sym.imp.USER32.dll_GetClientRect]
je 0x40bcfb
lea eax, [ebp - 0xd4]
mov byte [esi + 0x1a5], 0
push eax
push dword [esi]
xorps xmm0, xmm0
movups xmmword [ebp - 0xd4], xmm0
call edi
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x40bcfb
mov ecx, dword [esi + 0x144]
cmp byte [ecx + 0x150], al
je 0x40bc5a
push dword [esi]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x40bc27
mov ecx, dword [esi + 0x144]
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd4]
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x34]
mov eax, dword [esi + 0xc]
test eax, eax
je 0x40bc35
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esi + 0x10]
test eax, eax
je 0x40bc43
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
jmp 0x40bcc9
mov eax, dword [ecx]
push reloc.WS2_32.dll_accept
push 0
push 0x40f1c0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x158], eax
test eax, eax
je 0x40bcc9
nop word [eax + eax]
mov edi, dword [eax]
mov ecx, eax
mov edx, dword [edi + 0x30]
call edx
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov ecx, dword [ebp - 0x158]
call dword [edi + 0x34]
mov ecx, dword [esi + 0x144]
push reloc.WS2_32.dll_accept
push 0
push 0x40f1c0
mov eax, dword [ecx]
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x158], eax
test eax, eax
jne 0x40bc80
mov edi, dword [sym.imp.USER32.dll_GetClientRect]
cmp byte [esi + 0x1a4], 0
movups xmm0, xmmword [ebp - 0xd4]
movups xmmword [esi + 0x1c], xmm0
je 0x40bcfb
push ecx
push 0
push 0
push str.windowinit
push dword [esi + 0x144]
mov ecx, esi
mov byte [esi + 0x1a4], 0
call fcn.0040e390
cmp byte [esi + 0x1a6], 0
je 0x40bd0d
push 1
mov ecx, esi
call fcn.0040de80
cmp byte [esi + 0x18], 0
je 0x40c000
push 0xffffffffffffffec
push dword [esi]
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x80000
jne 0x40bd38
or eax, 0x80000
push eax
push 0xffffffffffffffec
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0x20], xmm0
call edi
cmp byte [esi + 0x3c], 0
je 0x40bd5e
movups xmm0, xmmword [ebp - 0x20]
mov byte [esi + 0x3c], 0
movups xmmword [ebp - 0x114], xmm0
jmp 0x40bd76
lea edi, [esi + 0x1c]
push edi
lea eax, [ebp - 0x114]
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
sub edi, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
cmp dword [esi + 0x10], 0
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x160], eax
jne 0x40bdba
push dword [esi + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [esi + 8]
mov edx, edi
mov dword [esi + 0xc], eax
lea eax, [esi + 0x14]
push eax
push dword [ebp - 0x160]
call fcn.004262a0
add esp, 8
mov dword [esi + 0x10], eax
push dword [esi + 0x10]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esi + 0xc]
mov dword [ebp - 0x17c], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov edi, dword [ebp - 0x110]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x158], edi
cmp edi, dword [ebp - 0x108]
jge 0x40be40
imul edi, dword [ebp - 0x174]
nop word [eax + eax]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x114]
sub eax, ecx
shl eax, 2
add ecx, edi
push eax
mov eax, dword [esi + 0x14]
push 0
lea eax, [eax + ecx*4]
push eax
call fcn.007351d0
mov eax, dword [ebp - 0x158]
add esp, 0xc
add edi, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x158], eax
cmp eax, dword [ebp - 0x108]
jl 0x40be00
mov ecx, dword [esi + 0x144]
lea edx, [ebp - 0x114]
push edx
push dword [esi + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x118]
lea eax, [ebp - 0x114]
mov ecx, esi
push eax
push dword [esi + 0xc]
call fcn.0040b560
xor edi, edi
cmp dword [esi + 0x1e0], edi
jle 0x40be97
mov eax, dword [esi + 0x1dc]
lea edx, [ebp - 0x14c]
push edx
push dword [esi + 0xc]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x130]
inc edi
cmp edi, dword [esi + 0x1e0]
jl 0x40be73
mov ecx, dword [esi + 0x2c]
test ecx, ecx
jg 0x40beb4
cmp dword [esi + 0x30], 0
jg 0x40beb4
cmp dword [esi + 0x34], 0
jg 0x40beb4
cmp dword [esi + 0x38], 0
jle 0x40bf4e
mov eax, dword [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x30]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [esi + 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [esi + 0x38]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x30]
push eax
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x40bf4e
mov edi, dword [ebp - 0x2c]
cmp edi, dword [ebp - 0x24]
jge 0x40bf4e
mov eax, dword [ebp - 0x28]
mov edx, edi
imul edx, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x158], edx
nop word [eax + eax]
cmp ecx, eax
jge 0x40bf3c
add edx, ecx
shl edx, 2
nop dword [eax]
mov eax, dword [esi + 0x14]
lea edx, [edx + 4]
inc ecx
mov byte [edx + eax - 1], 0xff
mov eax, dword [ebp - 0x28]
cmp ecx, eax
jl 0x40bf20
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x158]
add edx, dword [ebp - 0x174]
inc edi
mov dword [ebp - 0x158], edx
cmp edi, dword [ebp - 0x24]
jl 0x40bf10
push dword [ebp - 0x160]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0xd4]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0xd4], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xd0]
sub eax, ecx
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0xc8]
sub eax, edx
mov dword [ebp - 0x170], ecx
push 2
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x15c]
push eax
push 0
lea eax, [ebp - 0x184]
mov dword [ebp - 0x16c], edx
push eax
push dword [esi + 0xc]
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x184], 0
push eax
lea eax, [ebp - 0x170]
mov dword [ebp - 0x180], 0
push eax
push 0
push dword [esi]
mov dword [ebp - 0x15c], 0x1ff0000
call dword [sym.imp.USER32.dll_UpdateLayeredWindow]
push dword [ebp - 0x17c]
jmp 0x40c0ff
cmp dword [esi + 0x10], 0
jne 0x40c04d
lea eax, [ebp - 0xd4]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0xd4], xmm0
call edi
push dword [esi + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0xd4]
push eax
push dword [esi + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esi + 0x10], eax
push dword [esi + 0x10]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esi + 0xc]
mov dword [ebp - 0x158], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x14c]
push eax
push dword [esi + 0xc]
mov edx, dword [ecx]
call dword [edx + 0x118]
xor edi, edi
cmp dword [esi + 0x1e0], edi
jle 0x40c0b4
mov eax, dword [esi + 0x1dc]
lea edx, [ebp - 0x14c]
push edx
push dword [esi + 0xc]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x130]
inc edi
cmp edi, dword [esi + 0x1e0]
jl 0x40c090
push dword [ebp - 0x160]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov edx, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x140]
push 0xcc0020
push edx
push ecx
push dword [esi + 0xc]
sub eax, edx
push eax
mov eax, dword [ebp - 0x144]
sub eax, ecx
push eax
push edx
push ecx
push dword [ebp - 0x154]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x158]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
lea eax, [ebp - 0x154]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [esi + 0x1a5], 0
je 0x40c568
push 0
push 0
push dword [esi]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov al, 1
jmp 0x40d223
mov eax, dword [esi + 0x160]
test eax, eax
jle 0x40c144
mov dword [edi + 0x18], eax
mov eax, dword [esi + 0x164]
test eax, eax
jle 0x40c151
mov dword [edi + 0x1c], eax
mov eax, dword [esi + 0x168]
test eax, eax
jle 0x40c15e
mov dword [edi + 0x20], eax
mov eax, dword [esi + 0x16c]
test eax, eax
jle case.0x40c5c0.276
mov dword [edi + 0x24], eax
jmp case.0x40c5c0.276
mov eax, dword [esi + 0x148]
test eax, eax
je 0x40c1cb
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe4], 0x16
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x148]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov ecx, dword [esi + 0x144]
test ecx, ecx
je 0x40c568
call fcn.00418910
mov al, 1
jmp 0x40d223
movsx eax, di
mov dword [ebp - 0x164], eax
shr edi, 0x10
movsx eax, di
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x164]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [esi + 0x150], 0
mov eax, dword [ebp - 0x164]
mov dword [esi + 0x158], eax
mov eax, dword [ebp - 0x160]
mov dword [esi + 0x15c], eax
je case.0x40c5c0.276
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x164]
xorps xmm0, xmm0
mov ecx, dword [esi + 0x150]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 0
mov dword [ebp - 0xe4], 0x11
mov dword [ebp - 0xe0], ecx
mov word [ebp - 0xce], ax
mov dword [ebp - 0xc8], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x150]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov dword [esi + 0x150], 0
jmp case.0x40c5c0.276
cmp dword [esi + 0x148], 0
je case.0x40c5c0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xd0], ax
mov eax, dword [esi + 0x158]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 5
mov dword [ebp - 0xd4], eax
call fcn.0040a5f0
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x148]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
jmp case.0x40c5c0.276
cmp dword [esi + 0x148], 0
je case.0x40c5c0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xd0], ax
mov eax, dword [esi + 0x158]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 3
mov dword [ebp - 0xd4], eax
call fcn.0040a5f0
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x148]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [esi + 0x148]
mov dword [esi + 0x154], eax
jmp case.0x40c5c0.276
cmp dword [esi + 0x154], 0
je case.0x40c5c0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xd0], ax
mov eax, dword [esi + 0x158]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 4
mov dword [ebp - 0xd4], eax
call fcn.0040a5f0
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x154]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov dword [esi + 0x154], 0
jmp case.0x40c5c0.276
cmp di, 1
jne case.0x40c5c0.276
cmp byte [esi + 0x1a8], 0
jne 0x40c568
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0
push eax
mov dword [ebp - 0x174], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x178]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x174]
mov ecx, esi
push dword [ebp - 0x178]
call fcn.0040efa0
mov dword [ebp - 0x160], eax
test eax, eax
je case.0x40c5c0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x14]
call edx
test al, 2
je case.0x40c5c0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x178]
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x40], 0x17
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x30], eax
call fcn.0040a5f0
mov word [ebp - 0x2a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x160]
lea edx, [ebp - 0x40]
mov dword [ebp - 0x38], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov al, 1
jmp 0x40d223
test edi, edi
je 0x40c568
push edi
push dword [ebp + 0xc]
lea eax, [ecx + 0x2000]
push eax
push dword [edi]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov al, 1
jmp 0x40d223
test edi, edi
je case.0x40c5c0.276
push edi
push dword [ebp + 0xc]
push 0x2111
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov al, 1
jmp 0x40d223
cmp ecx, 0x2a1
ja 0x40d05c
je 0x40cdf1
lea eax, [ecx - 0x112]
cmp eax, 0xf8
ja case.0x40c5c0.276
movzx eax, byte [eax + 0x40d398]
jmp dword [eax*4 + 0x40d370]
mov eax, dword [ebp + 0xc]
and eax, 0xfff0
cmp eax, 0xf120
jne 0x40c5da
mov byte [esi + 0x3c], 1
mov al, 1
jmp 0x40d223
mov eax, dword [ebp + 0xc]
mov ecx, 0xf1
cmp cx, ax
jne 0x40c611
lea eax, [esi + 0xf8]
mov ecx, esi
push eax
call fcn.0040d4a0
cmp byte [esi + 0x108], 0
sete al
mov byte [esi + 0x108], al
jmp case.0x40c5c0.276
xor ecx, ecx
cmp dword [esi + 0x1bc], ecx
jle case.0x40c5c0.276
mov edx, dword [esi]
mov dword [ebp - 0x160], edx
mov edx, dword [esi + 0x1b8]
nop dword [eax]
mov edi, dword [edx]
mov esi, dword [ebp - 0x160]
cmp dword [edi + 8], esi
mov esi, dword [ebp - 0x17c]
jne 0x40c654
movzx eax, ax
cmp dword [edi + 0xc], eax
jne 0x40c651
cmp byte [edi + 0x10], 0
je 0x40c665
mov eax, dword [ebp + 0xc]
inc ecx
add edx, 4
cmp ecx, dword [esi + 0x1bc]
jl 0x40c630
jmp case.0x40c5c0.276
mov eax, dword [edi]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [edi + 4]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x18
mov dword [ebp - 0xcc], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
jmp case.0x40c5c0.276
cmp byte [esi + 0x1a7], 0
jne 0x40c720
mov eax, dword [esi]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x110]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 3
test eax, eax
jne 0x40c6fc
mov dword [ebp - 0x14], 0x190
jmp 0x40c70f
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [esi + 0x1a7], 1
movsx eax, di
lea edx, [ebp - 0x170]
shr edi, 0x10
movsx ecx, di
mov dword [esi + 0x15c], ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x160], eax
mov dword [esi + 0x158], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40f0b0
mov eax, dword [eax + 0xfc]
call eax
mov edi, eax
test edi, edi
je 0x40c782
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40c5c0.276
mov eax, dword [ebp - 0x160]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xe4], 0
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x14c]
mov dword [ebp - 0xdc], eax
cmp edi, ecx
je 0x40c822
test ecx, ecx
je 0x40c822
mov dword [ebp - 0xe4], 0xa
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
mov ecx, dword [esi + 0x110]
mov dword [esi + 0x14c], 0
test ecx, ecx
je 0x40c822
lea eax, [esi + 0x114]
push eax
push 0
push 0x411
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp edi, dword [esi + 0x14c]
je 0x40c855
test edi, edi
je 0x40c855
mov dword [ebp - 0xe4], 0xb
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe0], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x108]
mov dword [esi + 0x14c], edi
mov ecx, dword [esi + 0x150]
test ecx, ecx
je 0x40c883
mov dword [ebp - 0xe4], 9
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
jmp case.0x40c5c0.276
test edi, edi
je case.0x40c5c0.276
mov dword [ebp - 0xe4], 9
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe0], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x108]
jmp case.0x40c5c0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetFocus]
movsx ecx, di
lea edx, [ebp - 0x170]
mov dword [esi + 0x158], ecx
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x160], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x158], eax
mov dword [esi + 0x15c], eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40f0b0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x15c], eax
test eax, eax
je case.0x40c5c0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40c5c0.276
mov ecx, dword [ebp - 0x15c]
mov dword [esi + 0x150], ecx
mov eax, dword [ecx]
call dword [eax + 0xf0]
push dword [esi]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 1
mov dword [ebp - 0xe4], 0xd
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd4], ecx
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x15c]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
jmp case.0x40c5c0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetFocus]
movsx eax, di
lea edx, [ebp - 0x170]
shr edi, 0x10
movsx ecx, di
mov dword [esi + 0x15c], ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x160], eax
mov dword [esi + 0x158], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40f0b0
mov eax, dword [eax + 0xfc]
call eax
mov edi, eax
test edi, edi
je case.0x40c5c0.276
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40c5c0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x160]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov byte [esi + 0x1a8], 1
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x10
mov dword [ebp - 0xe0], edi
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0xe4]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x108]
mov dword [esi + 0x150], edi
jmp case.0x40c5c0.276
mov eax, edi
movsx ecx, di
shr eax, 0x10
cmp dword [esi + 0x150], 0
cwde
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x158], eax
mov dword [esi + 0x158], ecx
mov dword [esi + 0x15c], eax
je case.0x40c5c0.276
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [esi + 0x150]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 0
mov dword [ebp - 0xe4], 0xe
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd4], ecx
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x150]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov dword [esi + 0x150], 0
jmp case.0x40c5c0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetFocus]
movsx ecx, di
lea edx, [ebp - 0x170]
mov dword [esi + 0x158], ecx
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x160], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x158], eax
mov dword [esi + 0x15c], eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40f0b0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x15c], eax
test eax, eax
je case.0x40c5c0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40c5c0.276
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ecx]
call dword [eax + 0xf0]
push dword [esi]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 1
mov dword [ebp - 0xe4], 0xf
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd4], ecx
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [ebp - 0x15c]
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push ecx
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x108]
mov dword [esi + 0x150], edi
jmp case.0x40c5c0.276
movsx eax, di
mov dword [ebp - 0x164], eax
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x164]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x164]
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0x160]
mov dword [esi + 0x158], ecx
mov dword [ebp - 0x170], ecx
mov ecx, dword [esi + 0x144]
mov dword [esi + 0x15c], eax
mov dword [ebp - 0x16c], eax
push 0xd
mov eax, dword [ecx]
push edx
push 0x40f0b0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x158], eax
test eax, eax
je case.0x40c5c0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40c5c0.276
mov eax, dword [ebp - 0x158]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
shr eax, 0x10
shr eax, 0xf
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x12
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
call fcn.0040a5f0
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x158]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
movzx ecx, word [esi + 0x15c]
movzx eax, word [esi + 0x158]
shl ecx, 0x10
or ecx, eax
push ecx
push 0
push 0x200
push dword [esi]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x40c5c0.276
test edi, edi
je case.0x40c5c0.276
push edi
push dword [ebp + 0xc]
lea eax, [ecx + 0x2000]
push eax
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov al, 1
jmp 0x40d223
movsx eax, di
lea edx, [ebp - 0x170]
shr edi, 0x10
movsx ecx, di
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x170], eax
mov byte [esi + 0x1a7], 0
mov eax, dword [ecx]
push 0xd
push edx
push 0x40f0b0
mov eax, dword [eax + 0xfc]
call eax
mov edi, eax
mov dword [ebp - 0x160], edi
test edi, edi
je case.0x40c5c0.276
mov eax, dword [esi + 0x14c]
test eax, eax
je 0x40ceb6
mov ecx, dword [ebp - 0x15c]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xe4], 0xc
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x14c]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [edi]
lea ecx, [ebp - 0xc4]
push ecx
mov ecx, edi
call dword [eax + 0x98]
mov dword [ebp - 4], 0
mov edi, dword [ebp - 0xc4]
cmp word [edi], 0
jne 0x40cef4
lea eax, [ebp - 0xc0]
cmp edi, eax
je 0x40ceed
push edi
call fcn.0073bf11
add esp, 4
mov al, 1
jmp 0x40d223
push 0x30
lea eax, [esi + 0x114]
push 0
push eax
call fcn.007351d0
mov eax, dword [esi]
add esp, 0xc
mov dword [esi + 0x138], edi
mov edi, dword [ebp - 0x160]
mov ecx, edi
mov dword [esi + 0x11c], eax
mov dword [esi + 0x120], eax
mov eax, dword [0x8c9204]
mov dword [esi + 0x134], eax
mov dword [esi + 0x114], 0x30
mov dword [esi + 0x118], 1
mov eax, dword [edi]
mov eax, dword [eax + 0x30]
call eax
cmp dword [esi + 0x110], 0
movups xmm0, xmmword [eax]
movups xmmword [esi + 0x124], xmm0
jne 0x40cfcf
push 0
push dword [0x8c9204]
push 0
push dword [esi]
push SysReAllocStringLen
push SysReAllocStringLen
push SysReAllocStringLen
push SysReAllocStringLen
push reloc.WS2_32.dll_closesocket
push 0
push str.tooltips_class32
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [esi + 0x114]
mov dword [esi + 0x110], eax
push ecx
push 0
push 0x432
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0xa4]
call eax
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0x418
push dword [esi + 0x110]
call edi
jmp 0x40cfd5
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push dword [esi + 0x110]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x40d011
lea eax, [esi + 0x114]
push eax
push 0
push 0x436
push dword [esi + 0x110]
call edi
lea eax, [esi + 0x114]
push eax
push 1
push 0x411
push dword [esi + 0x110]
call edi
mov eax, dword [ebp - 0x158]
movzx ecx, ax
mov eax, dword [ebp - 0x15c]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push 0
push 0x412
push dword [esi + 0x110]
call edi
mov eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0xc0]
cmp eax, ecx
je 0x40ceed
push eax
call fcn.0073bf11
add esp, 4
mov al, 1
jmp 0x40d223
cmp ecx, 0x2a3
je 0x40d0cf
cmp ecx, 0x8001
jne case.0x40c5c0.276
xor edi, edi
cmp dword [esi + 0x1ec], edi
jle 0x40d09c
nop word [eax + eax]
mov eax, dword [esi + 0x1e8]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x40d093
mov eax, dword [ecx]
push 1
call dword [eax]
inc edi
cmp edi, dword [esi + 0x1ec]
jl 0x40d080
mov eax, dword [esi + 0x1e8]
test eax, eax
je 0x40d0af
push eax
call fcn.0073bf11
add esp, 4
mov dword [esi + 0x1e8], 0
mov dword [esi + 0x1f0], 0
mov dword [esi + 0x1ec], 0
jmp case.0x40c5c0.276
mov ecx, dword [esi + 0x110]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test ecx, ecx
je 0x40d0f0
lea eax, [esi + 0x114]
push eax
push 0
push 0x411
push ecx
call edi
cmp byte [esi + 0x1a7], 0
je 0x40d106
push 0xffffffffffffffff
push 0
push 0x200
push dword [esi]
call edi
mov byte [esi + 0x1a7], 0
nop dword [eax]
cmp dword [esi + 0x1f8], 0
jle 0x40d221
mov eax, dword [esi + 0x1f4]
mov edi, dword [eax]
mov dword [ebp - 0x15c], edi
test edi, edi
je 0x40d221
mov eax, dword [esi + 0x1f8]
test eax, eax
jle 0x40d15f
dec eax
mov dword [esi + 0x1f8], eax
test eax, eax
jle 0x40d15f
mov ecx, dword [esi + 0x1f4]
shl eax, 2
push eax
lea eax, [ecx + 4]
push eax
push ecx
call fcn.00734c50
add esp, 0xc
mov eax, dword [edi + 0x108]
mov dword [ebp - 0x160], eax
test eax, eax
je 0x40d1b0
cmp dword [eax + 0x38], 0
jle 0x40d1b0
xor edi, edi
cmp dword [eax + 0x38], edi
jle 0x40d1aa
mov esi, dword [ebp - 0x15c]
mov eax, dword [eax + 0x34]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x40d198
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 8]
call eax
test al, al
je 0x40d1a4
mov eax, dword [ebp - 0x160]
inc edi
cmp edi, dword [eax + 0x38]
jl 0x40d182
mov esi, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x15c]
xor ecx, ecx
mov dword [ebp - 0x158], ecx
cmp dword [esi + 0x1b0], ecx
jle 0x40d1e3
mov eax, dword [esi + 0x1ac]
push edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x158]
inc ecx
mov dword [ebp - 0x158], ecx
cmp ecx, dword [esi + 0x1b0]
jl 0x40d1c0
mov ecx, dword [edi + 0x84]
lea eax, [edi + 0x88]
cmp ecx, eax
je 0x40d1fc
push ecx
call fcn.0073bf11
add esp, 4
mov ecx, dword [edi]
lea eax, [edi + 4]
cmp ecx, eax
je 0x40d20e
push ecx
call fcn.0073bf11
add esp, 4
push 0x120
push edi
call fcn.005b9107
add esp, 8
jmp case.0x40c5c0.276
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b937d
mov esp, ebp
pop ebp
ret 0x10