Function at 0x6a79d0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffaf0
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x50c], edx
mov dword [ebp - 0x510], edx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x6a90ae
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
xor ecx, ecx
push ebp
push 0x6a907b
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov eax, dword [ebp - 4]
mov byte [eax + 0x3adbc], 0
xor eax, eax
mov dword [ebp - 0xa0], eax
mov bl, 1
mov eax, dword [ebp - 4]
mov byte [eax + 0x3ad30], 0
mov eax, dword [ebp - 4]
mov dword [eax + 0x36c], 0xffffffff
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3ad34], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x38c], edx
xor esi, esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x388]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x28]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x28]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3ad44], edx
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3ad48], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x3ad44]
dec eax
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x3ad48]
dec eax
mov edx, dword [ebp - 0x28]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 4]
call fcn.006a204c
lea edx, [ebp - 0x4f8]
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0047023c
mov eax, dword [ebp - 0x4ec]
add eax, 0xa
push eax
lea eax, [ebp - 0x4e8]
push eax
lea edx, [ebp - 0x508]
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0047023c
mov edx, dword [ebp - 0x4fc]
inc edx
mov ecx, 0xa
xor eax, eax
call fcn.0041d234
lea edx, [ebp - 0x4e8]
mov eax, dword [ebp - 4]
call fcn.0044f164
push 0x12c
call sub.kernel32.dll_Sleep_1
xor eax, eax
mov dword [ebp - 8], eax
mov dl, 1
mov eax, dword [0x429134]
call fcn.0042b0b8
mov dword [ebp - 0x7c], eax
call sub.user32.dll_GetDesktopWindow
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.user32.dll_GetWindowDC
mov edx, eax
mov eax, dword [ebp - 0x7c]
call fcn.0042baac
mov eax, dword [ebp - 4]
cmp dword [eax + 0x3adc0], 0
jne 0x6a7b95
mov dl, 1
mov eax, dword [0x62b544]
call fcn.00633ab4
mov edi, eax
mov eax, dword [ebp - 4]
mov dword [eax + 0x3adc0], edi
mov eax, edi
mov dl, 5
call fcn.0063485c
mov eax, dword [ebp - 4]
mov byte [eax + 0x3ae15], 1
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0x28]
sub edx, dword [eax + 8]
dec edx
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.00634124
mov eax, dword [ebp - 0x28]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 0x28]
sub edx, dword [eax + 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
xor eax, eax
mov dword [ebp - 0x94], eax
xor edi, edi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 0x7c]
call fcn.0042b4e0
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0x28]
add eax, dword [edx + 0xc]
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0x28]
add eax, dword [edx + 8]
push eax
mov eax, dword [ebp - 0x7c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
push eax
mov eax, dword [ebp - 0x94]
push eax
push edi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x7c]
call fcn.0042b900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
xor eax, eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
xor edx, edx
mov dword [eax + 0x3adf4], edx
mov dword [ebp - 0x10], 0xffffffff
mov eax, dword [0x83f380]
mov eax, dword [eax]
mov eax, dword [eax + 0x740]
mov eax, dword [eax + 0x54]
cmp eax, 0xc
ja case.default.0x6a7cd5
jmp dword [eax*4 + 0x6a7cdc]
mov dword [ebp - 0x98], 0x19
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x32
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x64
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x96
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0xc8
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0xfa
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x12c
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x1f4
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x3e8
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x5dc
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x7d0
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0xbb8
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x1388
jmp 0x6a7dbf
mov dword [ebp - 0x98], 0x32
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 4]
call fcn.00811f08
mov eax, dword [ebp - 4]
mov byte [eax + 0x3ad40], 0
mov eax, dword [ebp - 4]
call fcn.006ad018
cmp dword [ebp - 8], 1
je 0x6a7e5c
cmp dword [ebp - 8], 2
je 0x6a7e5c
test bl, bl
je 0x6a7e08
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0069b9cc
mov edx, 1
mov eax, dword [ebp - 4]
call fcn.0069bb8c
jmp 0x6a7e16
cmp dword [ebp - 8], 3
je 0x6a7e16
mov eax, dword [ebp - 4]
call fcn.0069bd10
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
test bl, bl
je 0x6a7e5c
mov eax, dword [ebp - 4]
call fcn.006a74e4
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
mov edx, 0x258
call fcn.0043280c
push eax
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
push 0x64
call sub.kernel32.dll_Sleep_1
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 8], 1
je 0x6a7eed
cmp dword [ebp - 8], 2
je 0x6a7eed
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.0069b9cc
test bl, bl
je 0x6a7ea6
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.0069bb8c
push ebp
call fcn.006a77d0
pop ecx
cmp dword [ebp - 0x24], 0
jg 0x6a7ea6
mov eax, dword [ebp - 4]
mov byte [eax + 0x3ad40], 1
mov eax, dword [ebp - 4]
call fcn.006a74e4
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
mov edx, 0x258
call fcn.0043280c
push eax
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
push 0x64
call sub.kernel32.dll_Sleep_1
test bl, bl
jne 0x6a7eed
mov edx, 2
mov eax, dword [ebp - 4]
call fcn.0069bb8c
test bl, bl
jne 0x6a7ef8
push ebp
call fcn.006a77d0
pop ecx
cmp dword [ebp - 0x24], 0
jle 0x6a7f25
inc dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov byte [eax + 0x3ad30], 1
mov eax, dword [ebp - 4]
mov edx, dword [ebp - 0x24]
mov dword [eax + 0x3adf4], edx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x10]
jle 0x6a7f25
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
xor ebx, ebx
cmp dword [ebp - 0x24], 0
jle 0x6a8491
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3adbc], 0
je 0x6a7fc1
test edi, edi
jne 0x6a7fc1
cmp dword [ebp - 0xa0], 0x64
jge 0x6a7fc1
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], edx
push ebp
mov eax, dword [ebp - 0x24]
call fcn.006a75b0
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp + edx*4 - 0x278], eax
inc dword [ebp - 0xa0]
call sub.kernel32.dll_GetTickCount
xor edx, edx
sub eax, dword [ebp - 0xb0]
sbb edx, dword [ebp - 0xac]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], edx
mov eax, dword [ebp - 0xb8]
mov edx, dword [ebp - 0xb4]
add eax, dword [ebp - 0xb0]
adc edx, dword [ebp - 0xac]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], edx
xor eax, eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x94], eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov edx, eax
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a8092
push 0xcc0020
push 0x258
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x258
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x4b0
jl 0x6a8102
push 0xcc0020
push 0x1f4
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1f4
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x3e8
jl 0x6a8172
push 0xcc0020
push 0x1c2
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1c2
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x320
jl 0x6a81e2
push 0xcc0020
push 0x190
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x190
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x2bc
jl 0x6a8252
push 0xcc0020
push 0x15e
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x15e
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x258
jl 0x6a82c2
push 0xcc0020
push 0x12c
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x12c
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x1f4
jl 0x6a8332
push 0xcc0020
push 0xfa
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0xfa
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x12c
jl 0x6a83a2
push 0xcc0020
push 0x96
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x96
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
cmp eax, 0x96
jl 0x6a840a
push 0xcc0020
push 0x32
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x1e
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x32
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8469
push 0xcc0020
push 0x1e
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x14
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1e
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
jmp 0x6a84b0
inc dword [ebp - 8]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3ad30], 0
je 0x6a84a6
cmp dword [ebp - 8], 3
jl 0x6a84b0
mov eax, dword [ebp - 4]
mov byte [eax + 0x3ad40], 1
cmp dword [ebp - 8], 5
jl 0x6a893d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a8565
push 0xcc0020
push 0x258
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x258
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x258
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x4b0
jl 0x6a85de
push 0xcc0020
push 0x1f4
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1f4
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x3e8
jl 0x6a8657
push 0xcc0020
push 0x1c2
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1c2
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x320
jl 0x6a86d0
push 0xcc0020
push 0x190
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x190
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x190
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x2bc
jl 0x6a8749
push 0xcc0020
push 0x15e
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x15e
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x258
jl 0x6a87c2
push 0xcc0020
push 0x12c
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x12c
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x1f4
jl 0x6a883b
push 0xcc0020
push 0xfa
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0xfa
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
cmp eax, 0x12c
jl 0x6a88b1
push 0xcc0020
push 0x96
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x96
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x96
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8917
push 0xcc0020
push 0x32
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x32
push eax
lea eax, [esi + edi]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
cmp dword [ebp - 8], 5
jge 0x6a8953
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3ade0], 0
je 0x6a7dd4
xor eax, eax
push ebp
push 0x6a8e49
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3ade0], 0
je 0x6a8e3f
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a8a1b
push 0xcc0020
push 0x258
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x258
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x258
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a8a9f
push 0xcc0020
push 0x1f4
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1f4
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a8b23
push 0xcc0020
push 0x1c2
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x1c2
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a8ba7
push 0xcc0020
push 0x190
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x190
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x190
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a8c2b
push 0xcc0020
push 0x15e
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x15e
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a8caf
push 0xcc0020
push 0x12c
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x12c
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a8d33
push 0xcc0020
push 0xfa
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0xfa
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a8db4
push 0xcc0020
push 0x96
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x96
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x96
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a8e19
push 0xcc0020
push 0x32
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x28]
sub eax, dword [edx + 0xc]
sub eax, 0x32
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, edi
sub eax, esi
push eax
mov eax, dword [ebp - 0x94]
add eax, 0x32
push eax
add esi, edi
push esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a8e53
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3ad90]
test ebx, ebx
je 0x6a8e72
cmp byte [ebx + 0x57], 0
je 0x6a8e72
mov eax, ebx
call fcn.00455ff8
call fcn.00811f08
push 0
call sub.user32.dll_ClipCursor
mov eax, dword [ebp - 0x7c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.user32.dll_ReleaseDC
lea eax, [ebp - 0x7c]
call fcn.004114e4
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3ad30], 0
je 0x6a8ed1
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 0x3adc0]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 0xc]
push eax
push 3
call sub.user32.dll_GetSystemMetrics
pop edx
sub edx, eax
inc edx
mov eax, 3
call fcn.0043280c
mov edx, eax
mov eax, ebx
call fcn.00634124
mov eax, dword [ebp - 4]
cmp byte [eax + 0x3adbc], 0
je 0x6a9071
cmp dword [ebp - 0xa0], 0
jle 0x6a9071
xor ecx, ecx
push ebp
push 0x6a9067
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov edi, 0x98
lea ebx, [ebp - 0x4d8]
xor eax, eax
mov dword [ebx], eax
add ebx, 4
dec edi
jne 0x6a8f07
mov edx, dword [ebp - 0xa0]
dec edx
test edx, edx
jl 0x6a8f3e
inc edx
lea ebx, [ebp - 0x278]
mov eax, dword [ebx]
cmp eax, 0xffffffff
jl 0x6a8f38
cmp eax, 0x96
jge 0x6a8f38
inc dword [ebp + eax*4 - 0x4d4]
add ebx, 4
dec edx
jne 0x6a8f23
lea eax, [ebp - 0xa4]
call fcn.00404bbc
or esi, 0xffffffff
xor eax, eax
mov dword [ebp - 0x34], eax
or edi, 0xffffffff
lea ebx, [ebp - 0x4d8]
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x34]
jle 0x6a8f66
mov esi, edi
mov dword [ebp - 0x34], eax
test eax, eax
jle 0x6a8fb0
push dword [ebp - 0xa4]
push 0x6a90c4
lea edx, [ebp - 0x50c]
mov eax, edi
call fcn.0040b208
push dword [ebp - 0x50c]
push 0x6a90d0
lea edx, [ebp - 0x510]
mov eax, dword [ebx]
call fcn.0040b208
push dword [ebp - 0x510]
lea eax, [ebp - 0xa4]
mov edx, 5
call fcn.00404f44
inc edi
add ebx, 4
cmp edi, 0x97
jne 0x6a8f5a
test esi, esi
jle 0x6a905d
cmp esi, 0x96
jge 0x6a905d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
cmp eax, 0x96
jle 0x6a905d
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp eax, 0x64
jle 0x6a905d
inc esi
push esi
push 0
push 0
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
sub eax, esi
push eax
mov eax, dword [ebp - 4]
mov edx, dword [eax + 0x3adc0]
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
xor ecx, ecx
call fcn.00637a00
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov edx, eax
sub edx, esi
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
mov eax, dword [ebp - 0x28]
add dword [eax + 0xc], esi
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a9071
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a9085
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a90b5
lea eax, [ebp - 0x510]
mov edx, 2
call fcn.00404be0
lea eax, [ebp - 0xa4]
call fcn.00404bbc
ret