Function at 0x6ab22c
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff24
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xac], edx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x6acc40
push dword fs:[eax]
mov dword fs:[eax], esp
xor edx, edx
push ebp
push 0x6acc12
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ad30], 0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad34], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x38c], edx
xor eax, eax
mov dword [ebp - 0x94], eax
mov byte [ebp - 0x9d], 1
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad44], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad48], edx
push 0x12c
call sub.kernel32.dll_Sleep_1
xor eax, eax
mov dword [ebp - 0x18], eax
mov dl, 1
mov eax, dword [0x429134]
call fcn.0042b0b8
mov dword [ebp - 0x60], eax
call sub.user32.dll_GetDesktopWindow
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.user32.dll_GetWindowDC
mov edx, eax
mov eax, dword [ebp - 0x60]
call fcn.0042baac
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adc0], 0
jne 0x6ab315
mov dl, 1
mov eax, dword [0x62b544]
call fcn.00633ab4
mov ebx, eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x3adc0], ebx
mov eax, ebx
mov dl, 5
call fcn.0063485c
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ae15], 1
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3ae30]
mov eax, dword [ebp - 8]
sub edx, dword [eax + 0x3ae28]
inc edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.00634124
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3ae34]
mov eax, dword [ebp - 8]
sub edx, dword [eax + 0x3ae2c]
inc edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
mov eax, dword [ebp - 8]
mov dword [eax + 0x3adb8], 0xffffffff
xor eax, eax
push ebp
push 0x6ab40c
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.00811b94
test al, al
je 0x6ab402
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3ae2c]
mov eax, dword [ebp - 8]
add edx, dword [eax + 0x3ae34]
sar edx, 1
jns 0x6ab39e
adc edx, 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae28]
mov ecx, dword [ebp - 8]
add eax, dword [ecx + 0x3ae30]
sar eax, 1
jns 0x6ab3b7
adc eax, 0
call fcn.0081fdb0
mov ebx, eax
test ebx, ebx
je 0x6ab402
lea edx, [ebp - 0xdc]
mov eax, dword [ebx + 4]
call fcn.00817fe4
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xac]
call fcn.0040ab0c
mov edx, dword [ebp - 0xac]
mov eax, 0x6acc58
call fcn.004051c0
test eax, eax
jle 0x6ab402
mov eax, dword [ebp - 8]
mov dword [eax + 0x3adb8], 6
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ab416
xor eax, eax
mov dword [ebp - 0x8c], eax
xor eax, eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 0x60]
call fcn.0042b4e0
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 8]
add eax, dword [edx + 0x3ae2c]
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 8]
add eax, dword [edx + 0x3ae28]
push eax
mov eax, dword [ebp - 0x60]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 0x8c]
push eax
mov eax, dword [ebp - 0x90]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x60]
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
xor eax, eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3adf4], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ae00], edx
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x80], 0xffffffff
mov eax, dword [0x83f380]
mov eax, dword [eax]
mov eax, dword [eax + 0x740]
mov eax, dword [eax + 0x54]
cmp eax, 0xc
ja case.default.0x6ab546
jmp dword [eax*4 + 0x6ab54d]
mov dword [ebp - 0x98], 0x19
jmp 0x6ab630
mov dword [ebp - 0x98], 0x32
jmp 0x6ab630
mov dword [ebp - 0x98], 0x64
jmp 0x6ab630
mov dword [ebp - 0x98], 0x96
jmp 0x6ab630
mov dword [ebp - 0x98], 0xc8
jmp 0x6ab630
mov dword [ebp - 0x98], 0xfa
jmp 0x6ab630
mov dword [ebp - 0x98], 0x12c
jmp 0x6ab630
mov dword [ebp - 0x98], 0x1f4
jmp 0x6ab630
mov dword [ebp - 0x98], 0x3e8
jmp 0x6ab630
mov dword [ebp - 0x98], 0x5dc
jmp 0x6ab630
mov dword [ebp - 0x98], 0x7d0
jmp 0x6ab630
mov dword [ebp - 0x98], 0xbb8
jmp 0x6ab630
mov dword [ebp - 0x98], 0x1388
jmp 0x6ab630
mov dword [ebp - 0x98], 0x32
mov dword [ebp - 0x14], 1
mov byte [ebp - 9], 0
cmp dword [ebp - 0x18], 1
je 0x6ab735
cmp dword [ebp - 0x18], 2
je 0x6ab735
cmp dword [ebp - 0x90], 0
jne 0x6ab698
cmp byte [ebp - 0x9d], 0
je 0x6ab67d
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0069b9cc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0069bb8c
jmp 0x6ab68b
cmp dword [ebp - 0x18], 3
je 0x6ab68b
mov eax, dword [ebp - 8]
call fcn.0069bd10
mov eax, dword [ebp - 8]
mov dword [eax + 0x3adec], 0xffffffff
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
cmp byte [ebp - 0x9d], 0
jne 0x6ab6b6
cmp dword [ebp - 0x90], 0
je 0x6ab6e5
push ebp
call fcn.006ab0f0
pop ecx
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
cmp byte [ebp - 0x9d], 0
je 0x6ab6de
push 0xc8
call sub.kernel32.dll_Sleep_1
jmp 0x6ab6e5
push 0x64
call sub.kernel32.dll_Sleep_1
xor eax, eax
push ebp
push 0x6ab72b
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
mov edx, dword [ebp - 0x98]
mov eax, 0x64
call fcn.0043280c
push eax
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6ab735
mov byte [ebp - 0x9d], 0
cmp dword [ebp - 0x90], 0
jne 0x6aba1d
xor eax, eax
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 8]
mov dword [eax + 0x3adf0], 0xffffffff
cmp dword [ebp - 0x18], 1
je 0x6ab794
cmp dword [ebp - 0x18], 2
je 0x6ab794
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0069b9cc
push ebp
call fcn.006ab0f0
pop ecx
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0069bb8c
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0x70], 0
jg 0x6ab8f1
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.0069bd88
cmp dword [ebp - 4], 2
jle 0x6ab7c8
cmp dword [ebp - 0x10], 0
jg 0x6ab7da
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069bf3c
mov dword [ebp - 0x74], eax
jmp 0x6ab7eb
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0069bf3c
mov dword [ebp - 0x74], eax
or ebx, 0xffffffff
or esi, 0xffffffff
or edi, 0xffffffff
cmp dword [ebp - 4], 3
jg 0x6ab844
mov eax, dword [ebp - 8]
call fcn.0069c694
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069c828
mov ebx, eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.0069cd30
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069d0d4
mov esi, eax
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.0069dc34
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069dfe8
mov edi, eax
jmp 0x6ab8a0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x10]
jge 0x6ab8a0
mov eax, dword [ebp - 8]
call fcn.0069c694
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069c828
mov ebx, eax
cmp ebx, dword [ebp - 0x10]
jge 0x6ab8a0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.0069cd30
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0069d0d4
mov esi, eax
cmp esi, dword [ebp - 0x10]
jge 0x6ab8a0
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
call fcn.0069dc34
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
call fcn.0069dfe8
mov edi, eax
mov edx, dword [ebp - 0x74]
mov eax, ebx
call fcn.0043280c
mov edx, eax
mov eax, esi
call fcn.0043280c
mov edx, eax
mov eax, edi
call fcn.0043280c
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x6ab8f1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0x3adec]
jle 0x6ab8f1
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adf4], 0
jle 0x6ab8f1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf4]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x10], 0
jle 0x6ab93c
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x10]
jge 0x6ab93c
cmp dword [ebp - 0x7c], 0
jle 0x6ab93c
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adf0], 0
jle 0x6ab93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
cmp eax, dword [ebp - 0x80]
jge 0x6ab93c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
cmp eax, dword [ebp - 0x7c]
jne 0x6ab93c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jle 0x6ab983
inc dword [ebp - 4]
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ad30], 1
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x70]
mov dword [eax + 0x3adf4], edx
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x10]
jle 0x6ab983
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
cmp eax, dword [ebp - 0x7c]
jle 0x6ab983
mov dword [ebp - 0x7c], eax
call sub.kernel32.dll_GetTickCount
xor edx, edx
sub eax, dword [ebp - 0xa8]
sbb edx, dword [ebp - 0xa4]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0x18], 4
jle 0x6ab9ae
cmp dword [ebp - 0x70], 0
jle 0x6aba1d
cmp dword [ebp - 0xa4], 0
jne 0x6ab9c2
cmp dword [ebp - 0xa8], 0
jb 0x6aba1d
jmp 0x6ab9c4
jl 0x6aba1d
mov edx, dword [ebp - 0x18]
mov eax, 1
call fcn.0043280c
mov edx, eax
mov eax, 4
call fcn.00432720
imul eax, eax, 0x4b
cdq
cmp edx, dword [ebp - 0xa4]
jne 0x6ab9f3
cmp eax, dword [ebp - 0xa8]
jbe 0x6aba1d
jmp 0x6ab9f5
jle 0x6aba1d
mov edx, dword [ebp - 0x18]
mov eax, 1
call fcn.0043280c
mov edx, eax
mov eax, 4
call fcn.00432720
imul eax, eax, 0x4b
sub eax, dword [ebp - 0xa8]
push eax
call sub.kernel32.dll_Sleep_1
cmp dword [ebp - 0x70], 0
jle 0x6ac00e
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x70]
add dword [ebp - 0x8c], eax
cmp dword [ebp - 0x90], 0
jne 0x6aba5a
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x3adc0]
mov eax, ebx
mov edx, dword [eax]
call dword [edx + 8]
mov edx, eax
add edx, dword [ebp - 0x70]
mov eax, ebx
call fcn.006342e4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
cmp eax, 0x578
jl 0x6abb1d
push 0xcc0020
push 0x258
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x4b0
jl 0x6abba8
push 0xcc0020
push 0x1f4
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x3e8
jl 0x6abc33
push 0xcc0020
push 0x1c2
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x320
jl 0x6abcbe
push 0xcc0020
push 0x190
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x2bc
jl 0x6abd49
push 0xcc0020
push 0x15e
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x258
jl 0x6abdd4
push 0xcc0020
push 0x12c
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x1f4
jl 0x6abe5f
push 0xcc0020
push 0xfa
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x12c
jl 0x6abeea
push 0xcc0020
push 0x96
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
cmp eax, 0x96
jl 0x6abf69
push 0xcc0020
push 0x32
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x1e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6abfdf
push 0xcc0020
push 0x1e
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x10]
add eax, eax
add eax, 0x14
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1e
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
cmp dword [ebp - 0x90], 0
jmp 0x6ac011
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
jl 0x6ac5cc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
cmp eax, 0x578
jl 0x6ac0ed
push 0xcc0020
push 0x258
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x258
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x4b0
jl 0x6ac187
push 0xcc0020
push 0x1f4
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x3e8
jl 0x6ac221
push 0xcc0020
push 0x1c2
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x320
jl 0x6ac2bb
push 0xcc0020
push 0x190
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x190
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x2bc
jl 0x6ac355
push 0xcc0020
push 0x15e
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x258
jl 0x6ac3ef
push 0xcc0020
push 0x12c
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x1f4
jl 0x6ac489
push 0xcc0020
push 0xfa
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
cmp eax, 0x12c
jl 0x6ac523
push 0xcc0020
push 0x96
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x96
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6ac5a6
push 0xcc0020
push 0x32
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
cmp dword [ebp - 0x18], 5
jge 0x6ac5e2
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3ade0], 0
je 0x6ab63b
xor edx, edx
push ebp
push 0x6acbbb
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3ade0], 0
je 0x6acbb1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
cmp eax, 0x578
jl 0x6ac6d2
push 0xcc0020
push 0x258
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x258
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x4b0
jl 0x6ac76c
push 0xcc0020
push 0x1f4
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x3e8
jl 0x6ac806
push 0xcc0020
push 0x1c2
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x320
jl 0x6ac8a0
push 0xcc0020
push 0x190
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x190
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x2bc
jl 0x6ac93a
push 0xcc0020
push 0x15e
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x258
jl 0x6ac9d4
push 0xcc0020
push 0x12c
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x1f4
jl 0x6aca6e
push 0xcc0020
push 0xfa
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
cmp eax, 0x12c
jl 0x6acb08
push 0xcc0020
push 0x96
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x96
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6acb8b
push 0xcc0020
push 0x32
mov eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ae34]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ae2c]
sub eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 0x8c]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x94]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6acbc5
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x3ad90]
test ebx, ebx
je 0x6acbe4
cmp byte [ebx + 0x57], 0
je 0x6acbe4
mov eax, ebx
call fcn.00455ff8
call fcn.00811f08
push 0
call sub.user32.dll_ClipCursor
mov eax, dword [ebp - 0x60]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x9c]
push eax
call sub.user32.dll_ReleaseDC
lea eax, [ebp - 0x60]
call fcn.004114e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6acc1c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6acc47
lea eax, [ebp - 0xdc]
call fcn.00404bbc
lea eax, [ebp - 0xac]
call fcn.00404bbc
ret