Function at 0x6a38e4
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push eax
mov eax, 0xa
add esp, 0xfffff004
push eax
dec eax
jne 0x6a38ed
mov eax, dword [ebp - 4]
add esp, 0xfffffe88
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0xa178], edx
mov dword [ebp - 0xa17c], edx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x6a74bd
push dword fs:[eax]
mov dword fs:[eax], esp
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
xor ecx, ecx
push ebp
push 0x6a748d
push dword fs:[ecx]
mov dword fs:[ecx], esp
xor eax, eax
mov dword [ebp - 0xbc], eax
mov byte [ebp - 0xbd], 0
xor eax, eax
mov dword [ebp - 4], eax
mov byte [ebp - 0xbe], 1
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ad30], 0
mov byte [ebp - 0xb5], 0
mov byte [ebp - 0xb6], 0
mov eax, dword [ebp - 8]
mov dword [eax + 0x36c], 0xffffffff
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad34], edx
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ad38], 0
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad3c], edx
mov edi, 0x2710
lea ebx, [ebp - 0x9d50]
mov dword [ebx], 0xffffffff
add ebx, 4
dec edi
jne 0x6a39b5
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x38c], edx
xor eax, eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x388]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0xc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
jne 0x6a3a10
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
je 0x6a3a28
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad44], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ad48], edx
jmp 0x6a3a50
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.0069a55c
mov edx, dword [ebp - 8]
mov dword [edx + 0x3ad44], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.0069a538
mov edx, dword [ebp - 8]
mov dword [edx + 0x3ad48], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ad44]
dec eax
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x14], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3ad48]
dec eax
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x10], eax
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
jne 0x6a3a94
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
je 0x6a3a9c
mov eax, dword [ebp - 8]
call fcn.006a03d4
mov eax, dword [ebp - 8]
call fcn.006a204c
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ad48], 0
jne 0x6a3cdc
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ad44], 0
jne 0x6a3cdc
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 8]
cmp eax, 0x32
jl 0x6a3cdc
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x32
jl 0x6a3cdc
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0xc]
add edx, dword [eax + 0x14]
sar edx, 1
jns 0x6a3b01
adc edx, 0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
sub eax, 0xc
call fcn.0081fdb0
mov ebx, eax
push 2
call sub.user32.dll_GetSystemMetrics
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
pop edx
sub eax, edx
add eax, 2
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
mov ecx, dword [ebp - 0xc]
add edx, dword [ecx + 0x14]
sar edx, 1
jns 0x6a3b38
adc edx, 0
call fcn.0081fdb0
mov dword [ebp - 0x10], eax
cmp ebx, dword [ebp - 0xc]
je 0x6a3b96
test ebx, ebx
je 0x6a3b96
mov eax, dword [ebx + 8]
mov edx, dword [ebp - 0xc]
cmp eax, dword [edx + 0x10]
jge 0x6a3b96
push 2
call sub.user32.dll_GetSystemMetrics
add eax, 2
mov edx, dword [ebx + 0x10]
sub edx, dword [ebx + 8]
cmp eax, edx
jle 0x6a3b96
push 2
call sub.user32.dll_GetSystemMetrics
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x10]
sub edx, eax
dec edx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
inc eax
call fcn.0043280c
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x10], eax
mov byte [ebp - 0xb6], 1
jmp 0x6a3cdc
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x10]
je 0x6a3bfa
cmp dword [ebp - 0x10], 0
je 0x6a3bfa
mov eax, dword [ebp - 0x10]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0xc]
cmp eax, dword [edx + 0x10]
jg 0x6a3bfa
push 2
call sub.user32.dll_GetSystemMetrics
add eax, 2
mov edx, dword [ebp - 0x10]
mov edx, dword [edx + 0x10]
mov ecx, dword [ebp - 0x10]
sub edx, dword [ecx + 8]
cmp eax, edx
jle 0x6a3bfa
push 2
call sub.user32.dll_GetSystemMetrics
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x10]
sub edx, eax
dec edx
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
inc eax
call fcn.0043280c
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x10], eax
mov byte [ebp - 0xb6], 1
jmp 0x6a3cdc
push 2
call sub.user32.dll_GetSystemMetrics
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
pop edx
sub eax, edx
sub eax, 0x14
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
mov ecx, dword [ebp - 0xc]
add edx, dword [ecx + 0x14]
sar edx, 1
jns 0x6a3c21
adc edx, 0
call fcn.0081fdb0
mov ebx, eax
test ebx, ebx
je 0x6a3cdc
cmp ebx, dword [ebp - 0xc]
je 0x6a3cdc
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
cmp eax, dword [ebx + 0xc]
jne 0x6a3cdc
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
cmp eax, dword [ebx + 8]
jne 0x6a3cdc
push 2
call sub.user32.dll_GetSystemMetrics
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x10]
sub eax, dword [ebx + 0x10]
pop edx
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jg 0x6a3c9d
push 2
call sub.user32.dll_GetSystemMetrics
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x10]
sub edx, eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 8]
inc eax
call fcn.0043280c
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x10], eax
mov byte [ebp - 0xb6], 1
push 3
call sub.user32.dll_GetSystemMetrics
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
sub eax, dword [ebx + 0x14]
pop edx
sub eax, edx
cdq
xor eax, edx
sub eax, edx
cmp eax, 2
jg 0x6a3cdc
push 3
call sub.user32.dll_GetSystemMetrics
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x14]
sub edx, eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0xc]
inc eax
call fcn.0043280c
mov edx, dword [ebp - 0xc]
mov dword [edx + 0x14], eax
xor eax, eax
push ebp
push 0x6a3d69
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
call fcn.006983c4
test al, al
jne 0x6a3d5f
mov eax, dword [ebp - 8]
call fcn.006983dc
test al, al
jne 0x6a3d5f
mov eax, dword [ebp - 8]
call fcn.006983e8
test al, al
jne 0x6a3d5f
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
jne 0x6a3d5f
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
jne 0x6a3d5f
push 0
push 6
push 0x115
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.0069817c
test al, al
je 0x6a3d5f
push 0
push 6
push 0x114
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_SendMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a3d73
lea edx, [ebp - 0xa164]
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0047023c
mov eax, dword [ebp - 0xa158]
add eax, 0xa
push eax
lea eax, [ebp - 0xa154]
push eax
lea edx, [ebp - 0xa174]
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0047023c
mov edx, dword [ebp - 0xa168]
inc edx
mov ecx, 0xa
xor eax, eax
call fcn.0041d234
lea edx, [ebp - 0xa154]
mov eax, dword [ebp - 8]
call fcn.0044f164
xor eax, eax
push ebp
push 0x6a3ded
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_UpdateWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a3df7
push 0x12c
call sub.kernel32.dll_Sleep_1
xor eax, eax
mov dword [ebp - 0x84], eax
mov dl, 1
mov eax, dword [0x429134]
call fcn.0042b0b8
mov dword [ebp - 0x5c], eax
call sub.user32.dll_GetDesktopWindow
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
push eax
call sub.user32.dll_GetWindowDC
mov edx, eax
mov eax, dword [ebp - 0x5c]
call fcn.0042baac
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adc0], 0
jne 0x6a3e6a
mov dl, 1
mov eax, dword [0x62b544]
call fcn.00633ab4
mov edx, dword [ebp - 8]
mov dword [edx + 0x3adc0], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov dl, 5
call fcn.0063485c
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ae15], 1
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x10]
mov eax, dword [ebp - 0xc]
sub edx, dword [eax + 8]
dec edx
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.00634124
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 0x14]
mov eax, dword [ebp - 0xc]
sub edx, dword [eax + 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
xor eax, eax
mov dword [ebp - 0x98], eax
xor eax, eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 0x5c]
call fcn.0042b4e0
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 0xc]
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x9c]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x5c]
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
mov dword [ebp - 0x90], eax
xor eax, eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3adf4], edx
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [eax + 0x3ae00], edx
mov dword [ebp - 0x78], 0xffffffff
mov dword [ebp - 0x7c], 0xffffffff
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.006982bc
mov dword [ebp - 0x80], eax
mov eax, dword [0x83f380]
mov eax, dword [eax]
mov eax, dword [eax + 0x740]
mov eax, dword [eax + 0x54]
cmp eax, 0xc
ja case.default.0x6a3fe9
jmp dword [eax*4 + 0x6a3ff0]
mov dword [ebp - 0xa8], 0x19
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x32
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x64
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x96
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0xc8
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0xfa
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x12c
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x1f4
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x3e8
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x5dc
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x7d0
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0xbb8
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x1388
jmp 0x6a40d3
mov dword [ebp - 0xa8], 0x32
cmp dword [ebp - 0xa8], 0x3e8
jl 0x6a40eb
mov dword [ebp - 0xac], 2
jmp 0x6a40f5
mov dword [ebp - 0xac], 3
mov eax, dword [ebp - 8]
call fcn.006983c4
test al, al
jne 0x6a4119
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
jne 0x6a4119
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
je 0x6a4163
cmp dword [ebp - 0xa8], 0x12c
jg 0x6a4163
mov eax, dword [ebp - 8]
call fcn.006983c4
test al, al
je 0x6a4146
call fcn.00811bc4
test al, al
je 0x6a4146
add dword [ebp - 0xa8], 0xc8
jmp 0x6a414d
add dword [ebp - 0xa8], 0x64
mov edx, dword [ebp - 0xa8]
mov eax, 0x64
call fcn.0043280c
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ad48], 0
jg 0x6a4179
mov dword [ebp - 0xac], 1
mov byte [ebp - 0xad], 1
mov eax, dword [ebp - 8]
call fcn.006ad018
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x3ad90]
test ebx, ebx
je 0x6a41a7
cmp byte [ebx + 0x57], 0
je 0x6a41a7
mov eax, ebx
call fcn.00455ff8
call fcn.00811f08
cmp dword [ebp - 0x84], 1
je 0x6a433f
cmp dword [ebp - 0x84], 2
je 0x6a433f
cmp dword [ebp - 0x9c], 0
jne 0x6a4231
cmp byte [ebp - 0xbe], 0
je 0x6a41ef
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0069b9cc
mov edx, 1
mov eax, dword [ebp - 8]
call fcn.0069bb8c
jmp 0x6a4200
cmp dword [ebp - 0x84], 3
je 0x6a4200
mov eax, dword [ebp - 8]
call fcn.0069bd10
cmp byte [ebp - 0xbe], 0
je 0x6a421f
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.00698238
mov edx, dword [ebp - 8]
mov dword [edx + 0x3adec], eax
jmp 0x6a4231
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
mov dword [edx + 0x3adec], eax
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
cmp byte [ebp - 0xbe], 0
jne 0x6a424f
cmp dword [ebp - 0x9c], 0
je 0x6a42bb
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.006a044c
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_UpdateWindow
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
cmp byte [ebp - 0xbe], 0
je 0x6a429f
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adb8], 0
jle 0x6a4296
push 0xc8
call sub.kernel32.dll_Sleep_1
jmp 0x6a42bb
push 0x64
call sub.kernel32.dll_Sleep_1
jmp 0x6a42bb
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adb8], 0
jle 0x6a42b4
push 0x64
call sub.kernel32.dll_Sleep_1
jmp 0x6a42bb
push 0x19
call sub.kernel32.dll_Sleep_1
xor eax, eax
push ebp
push 0x6a4333
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
mov eax, dword [ebp - 8]
call fcn.006983c4
test al, al
jne 0x6a42f9
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
jne 0x6a42f9
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
je 0x6a4311
mov edx, dword [ebp - 0xa8]
mov eax, 0x64
call fcn.0043280c
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x6a431d
mov eax, dword [ebp - 0xa8]
push eax
call sub.kernel32.dll_Sleep_1
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a434b
mov eax, dword [ebp - 0xa8]
push eax
call sub.kernel32.dll_Sleep_1
mov byte [ebp - 0xbe], 0
cmp dword [ebp - 0x9c], 0
jne 0x6a4852
xor eax, eax
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.00698238
mov edx, dword [ebp - 8]
mov dword [edx + 0x3adf0], eax
cmp dword [ebp - 0xa4], 5
setge al
and al, byte [ebp - 0xad]
je 0x6a439f
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x84], 1
je 0x6a4413
cmp dword [ebp - 0x84], 2
je 0x6a4413
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0069b9cc
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.006a044c
xor eax, eax
push ebp
push 0x6a43fc
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_UpdateWindow
mov eax, dword [0x83fa38]
mov eax, dword [eax]
call main
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a4406
mov edx, 2
mov eax, dword [ebp - 8]
call fcn.0069bb8c
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0x6c], 0
jg 0x6a459e
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0069bd88
cmp dword [ebp - 0xa4], 3
jle 0x6a444d
cmp dword [ebp - 0x78], 0
jg 0x6a4462
mov ecx, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069bf3c
mov dword [ebp - 0x70], eax
jmp 0x6a4476
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 8]
call fcn.0069bf3c
mov dword [ebp - 0x70], eax
or ebx, 0xffffffff
or esi, 0xffffffff
mov dword [ebp - 0x74], 0xffffffff
cmp dword [ebp - 0xa4], 3
jg 0x6a44e3
mov eax, dword [ebp - 8]
call fcn.0069c694
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069c828
mov ebx, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0069cd30
mov ecx, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069d0d4
mov esi, eax
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0069dc34
mov ecx, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069dfe8
mov dword [ebp - 0x74], eax
jmp 0x6a454c
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x78]
jge 0x6a454c
mov eax, dword [ebp - 8]
call fcn.0069c694
xor edx, edx
mov eax, dword [ebp - 8]
call fcn.0069c828
mov ebx, eax
cmp ebx, dword [ebp - 0x78]
jge 0x6a454c
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0069cd30
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 8]
call fcn.0069d0d4
mov esi, eax
cmp esi, dword [ebp - 0x78]
jge 0x6a454c
mov edx, dword [ebp - 0x84]
mov eax, dword [ebp - 8]
call fcn.0069dc34
mov ecx, dword [ebp - 0x84]
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 8]
call fcn.0069dfe8
mov dword [ebp - 0x74], eax
mov edx, dword [ebp - 0x70]
mov eax, ebx
call fcn.0043280c
mov edx, eax
mov eax, esi
call fcn.0043280c
mov edx, eax
mov eax, dword [ebp - 0x74]
call fcn.0043280c
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jg 0x6a459e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
cmp eax, dword [edx + 0x3adec]
jle 0x6a459e
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adf4], 0
jle 0x6a459e
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf4]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ad48], 0
je 0x6a45d6
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
cmp eax, dword [ebp - 0x6c]
jne 0x6a45d6
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
dec eax
jg 0x6a45dd
mov byte [ebp - 0xad], 0
cmp dword [ebp - 0x78], 0
jle 0x6a4628
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x78]
jge 0x6a4628
cmp dword [ebp - 0x7c], 0
jle 0x6a4628
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adf0], 0
jle 0x6a4628
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
cmp eax, dword [ebp - 0x80]
jge 0x6a4628
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
cmp eax, dword [ebp - 0x7c]
jne 0x6a4628
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jle 0x6a46f2
inc dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x9d54], edx
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ad30], 1
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x6c]
mov dword [eax + 0x3adf4], edx
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x78]
jle 0x6a4698
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
cmp eax, dword [ebp - 0x7c]
jle 0x6a4698
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adf0]
mov edx, dword [ebp - 8]
sub eax, dword [edx + 0x3adec]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0xa4], 1
jne 0x6a46f2
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
je 0x6a46f2
cmp dword [ebp - 0x78], 5
jl 0x6a46f2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
mov ecx, 6
cdq
idiv ecx
cmp eax, dword [ebp - 0x78]
jle 0x6a46f2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jle 0x6a46f2
call fcn.00811bc4
test al, al
je 0x6a46f2
mov eax, dword [ebp - 8]
mov byte [eax + 0x3ad38], 1
call sub.kernel32.dll_GetTickCount
xor edx, edx
sub eax, dword [ebp - 0xc8]
sbb edx, dword [ebp - 0xc4]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3adb8], 0
jle 0x6a47be
cmp dword [ebp - 0x84], 4
jle 0x6a4734
cmp dword [ebp - 0x6c], 0
jle 0x6a4868
cmp dword [ebp - 0xc4], 0
jne 0x6a474c
cmp dword [ebp - 0xc8], 0
jb 0x6a4868
jmp 0x6a4752
jl 0x6a4868
mov edx, dword [ebp - 0x84]
mov eax, 1
call fcn.0043280c
mov edx, eax
mov eax, 4
call fcn.00432720
imul eax, eax, 0x4b
cdq
cmp edx, dword [ebp - 0xc4]
jne 0x6a4788
cmp eax, dword [ebp - 0xc8]
jbe 0x6a4868
jmp 0x6a478e
jle 0x6a4868
mov edx, dword [ebp - 0x84]
mov eax, 1
call fcn.0043280c
mov edx, eax
mov eax, 4
call fcn.00432720
imul eax, eax, 0x4b
sub eax, dword [ebp - 0xc8]
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x6a4868
cmp dword [ebp - 0x84], 4
jle 0x6a47d1
cmp dword [ebp - 0x6c], 0
jle 0x6a4868
cmp dword [ebp - 0xc4], 0
jne 0x6a47e9
cmp dword [ebp - 0xc8], 0
jb 0x6a4868
jmp 0x6a47eb
jl 0x6a4868
mov edx, dword [ebp - 0x84]
mov eax, 1
call fcn.0043280c
mov edx, eax
mov eax, 4
call fcn.00432720
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
cdq
cmp edx, dword [ebp - 0xc4]
jne 0x6a4820
cmp eax, dword [ebp - 0xc8]
jbe 0x6a4868
jmp 0x6a4822
jle 0x6a4868
mov edx, dword [ebp - 0x84]
mov eax, 1
call fcn.0043280c
mov edx, eax
mov eax, 4
call fcn.00432720
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
sub eax, dword [ebp - 0xc8]
push eax
call sub.kernel32.dll_Sleep_1
jmp 0x6a4868
inc dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp + eax*4 - 0x9d54]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jle 0x6a565f
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3adbc], 0
je 0x6a4907
cmp dword [ebp - 0x9c], 0
jne 0x6a4907
cmp dword [ebp - 0xbc], 0x64
jge 0x6a4907
call sub.kernel32.dll_GetTickCount
xor edx, edx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
push ebp
mov eax, dword [ebp - 0x6c]
call fcn.006a3614
pop ecx
mov edx, dword [ebp - 0xbc]
mov dword [ebp + edx*4 - 0x9ee4], eax
inc dword [ebp - 0xbc]
call sub.kernel32.dll_GetTickCount
xor edx, edx
sub eax, dword [ebp - 0xd8]
sbb edx, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xdc]
add eax, dword [ebp - 0xd8]
adc edx, dword [ebp - 0xd4]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], edx
xor eax, eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x6c]
add dword [ebp - 0x98], eax
cmp dword [ebp - 0x9c], 0
jne 0x6a4942
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov edx, eax
add edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
cmp dword [ebp - 0x9c], 0
jne 0x6a4f46
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a4a0c
push 0xcc0020
push 0x258
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a4aa3
push 0xcc0020
push 0x1f4
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a4b3a
push 0xcc0020
push 0x1c2
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a4bd1
push 0xcc0020
push 0x190
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a4c68
push 0xcc0020
push 0x15e
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a4cff
push 0xcc0020
push 0x12c
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a4d96
push 0xcc0020
push 0xfa
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a4e2d
push 0xcc0020
push 0x96
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x96
jl 0x6a4eb8
push 0xcc0020
push 0x32
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x1e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a4f2e
push 0xcc0020
push 0x1e
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x14
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
jmp 0x6a5638
mov eax, dword [ebp - 0x5c]
call fcn.0042b4e0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a5002
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x258
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a50b6
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1f4
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a516a
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1c2
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a521e
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x190
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a52d2
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x15e
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a5386
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x12c
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a543a
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0xfa
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a54ee
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x96
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x96
jl 0x6a559d
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x32
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x1e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5630
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1e
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0x78]
add eax, eax
add eax, 0x14
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x5c]
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
cmp dword [ebp - 0x9c], 0
jne 0x6a5665
mov eax, dword [ebp - 0x6c]
add dword [ebp - 0x94], eax
jmp 0x6a5665
inc dword [ebp - 0x84]
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3ad30], 0
jne 0x6a56e8
mov eax, dword [ebp - 8]
call fcn.006983c4
test al, al
jne 0x6a56e8
mov eax, dword [ebp - 8]
call fcn.006983dc
test al, al
jne 0x6a56e8
mov eax, dword [ebp - 8]
call fcn.006983e8
test al, al
jne 0x6a56e8
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
jne 0x6a56e8
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ad34], 0
jne 0x6a56e8
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0xac]
jl 0x6a56e8
mov eax, dword [ebp - 8]
mov dword [eax + 0x3ad34], 2
mov byte [ebp - 0xbe], 1
xor eax, eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x9c], 0
jne 0x6a56e8
xor eax, eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0x84], 5
jl 0x6a6500
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
cmp dword [ebp - 0x9c], 0
jne 0x6a5cba
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a57c8
push 0xcc0020
push 0x258
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x258
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a5868
push 0xcc0020
push 0x1f4
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a5908
push 0xcc0020
push 0x1c2
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a59a8
push 0xcc0020
push 0x190
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x190
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a5a48
push 0xcc0020
push 0x15e
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a5ae8
push 0xcc0020
push 0x12c
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a5b88
push 0xcc0020
push 0xfa
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a5c25
push 0xcc0020
push 0x96
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x96
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a5ca2
push 0xcc0020
push 0x32
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
jmp 0x6a634c
mov eax, dword [ebp - 0x5c]
call fcn.0042b4e0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a5d7f
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x258
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x258
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a5e3c
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1f4
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a5ef9
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1c2
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a5fb6
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x190
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x190
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a6073
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x15e
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a6130
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x12c
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a61ed
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0xfa
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a62aa
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x96
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x96
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6344
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x32
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x5c]
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
mov edx, dword [ebp - 0xa8]
mov eax, dword [ebp - 8]
call fcn.0069f900
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jle 0x6a6500
mov byte [ebp - 0xb5], 1
xor eax, eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x6c]
add dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], 3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
mov edx, eax
add edx, dword [ebp - 0x6c]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.00634124
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
call fcn.0069820c
test al, al
jne 0x6a642b
push 0
push 6
push 0x115
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_SendMessageA
push 0x78
mov eax, dword [ebp - 0xc]
mov edx, dword [eax + 4]
xor ecx, ecx
mov eax, dword [ebp - 8]
call fcn.006a26dc
xor eax, eax
push ebp
push 0x6a6417
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 4]
push eax
call sub.user32.dll_UpdateWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a6421
push 0x96
call sub.kernel32.dll_Sleep_1
xor eax, eax
mov dword [ebp - 0x98], eax
xor eax, eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
mov eax, dword [ebp - 0x5c]
call fcn.0042b4e0
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 0xc]
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x5c]
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
cmp dword [ebp - 0x84], 5
jge 0x6a6519
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3ade0], 0
je 0x6a4180
xor eax, eax
push ebp
push 0x6a71ab
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3ade0], 0
je 0x6a71a1
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b4e0
cmp dword [ebp - 0x9c], 0
jne 0x6a6afc
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b4e0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a660a
push 0xcc0020
push 0x258
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x258
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a66aa
push 0xcc0020
push 0x1f4
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a674a
push 0xcc0020
push 0x1c2
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a67ea
push 0xcc0020
push 0x190
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x190
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a688a
push 0xcc0020
push 0x15e
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a692a
push 0xcc0020
push 0x12c
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a69ca
push 0xcc0020
push 0xfa
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a6a67
push 0xcc0020
push 0x96
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x96
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a6ae4
push 0xcc0020
push 0x32
mov eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x37c]
call fcn.0043051c
call fcn.0042b900
jmp 0x6a718e
mov eax, dword [ebp - 0x5c]
call fcn.0042b4e0
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x578
jl 0x6a6bc1
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x258
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x258
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x258
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x4b0
jl 0x6a6c7e
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1f4
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1f4
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1f4
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x3e8
jl 0x6a6d3b
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x1c2
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x1c2
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x1c2
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x320
jl 0x6a6df8
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x190
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x190
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x190
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x2bc
jl 0x6a6eb5
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x15e
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x15e
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x15e
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x258
jl 0x6a6f72
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x12c
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x12c
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x12c
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x1f4
jl 0x6a702f
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0xfa
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0xfa
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0xfa
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
cmp eax, 0x12c
jl 0x6a70ec
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x96
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x96
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x96
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
jmp 0x6a7186
push 0xcc0020
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2c8
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0xc]
add edx, 0x32
add eax, edx
push eax
mov eax, dword [0x8400a8]
mov eax, dword [eax]
call fcn.0046f2d4
mov edx, dword [ebp - 0xc]
add eax, dword [edx + 8]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0xc]
sub eax, dword [edx + 0xc]
sub eax, 0x32
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
sub eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 0x98]
add eax, 0x32
push eax
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0xa0]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042ba2c
push eax
call sub.gdi32.dll_BitBlt
mov eax, dword [ebp - 0x5c]
call fcn.0042b900
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006399ec
call fcn.0042b900
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a71b5
mov eax, dword [ebp - 8]
cmp dword [eax + 0x3ad90], 0
je 0x6a71e3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ad90]
cmp byte [eax + 0x57], 0
je 0x6a71e3
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3ad90]
call fcn.00455ff8
call fcn.00811f08
push 0
call sub.user32.dll_ClipCursor
mov eax, dword [ebp - 0x5c]
call fcn.0042ba2c
push eax
mov eax, dword [ebp - 0xb4]
push eax
call sub.user32.dll_ReleaseDC
lea eax, [ebp - 0x5c]
call fcn.004114e4
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3ad30], 0
je 0x6a728f
cmp byte [ebp - 0xb6], 0
jne 0x6a728f
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.006a1e84
test al, al
jne 0x6a725b
mov eax, dword [ebp - 8]
call fcn.006983dc
test al, al
jne 0x6a725b
mov eax, dword [ebp - 8]
call fcn.006983e8
test al, al
jne 0x6a725b
mov eax, dword [ebp - 8]
call fcn.006983f4
test al, al
jne 0x6a725b
mov eax, dword [ebp - 8]
call fcn.006983d0
test al, al
je 0x6a728f
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
push eax
push 3
call sub.user32.dll_GetSystemMetrics
pop edx
sub edx, eax
inc edx
mov eax, 3
call fcn.0043280c
mov edx, eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.00634124
mov eax, dword [ebp - 8]
cmp byte [eax + 0x3adbc], 0
je 0x6a7440
cmp dword [ebp - 0xbc], 0
jle 0x6a7440
xor ecx, ecx
push ebp
push 0x6a7436
push dword fs:[ecx]
mov dword fs:[ecx], esp
mov edi, 0x98
lea ebx, [ebp - 0xa144]
xor eax, eax
mov dword [ebx], eax
add ebx, 4
dec edi
jne 0x6a72c5
mov edx, dword [ebp - 0xbc]
dec edx
test edx, edx
jl 0x6a72fc
inc edx
lea ebx, [ebp - 0x9ee4]
mov eax, dword [ebx]
cmp eax, 0xffffffff
jl 0x6a72f6
cmp eax, 0x96
jge 0x6a72f6
inc dword [ebp + eax*4 - 0xa140]
add ebx, 4
dec edx
jne 0x6a72e1
lea eax, [ebp - 0xcc]
call fcn.00404bbc
or esi, 0xffffffff
xor eax, eax
mov dword [ebp - 0x14], eax
or edi, 0xffffffff
lea ebx, [ebp - 0xa144]
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x14]
jle 0x6a7324
mov esi, edi
mov dword [ebp - 0x14], eax
test eax, eax
jle 0x6a736e
push dword [ebp - 0xcc]
push 0x6a74d4
lea edx, [ebp - 0xa178]
mov eax, edi
call fcn.0040b208
push dword [ebp - 0xa178]
push 0x6a74e0
lea edx, [ebp - 0xa17c]
mov eax, dword [ebx]
call fcn.0040b208
push dword [ebp - 0xa17c]
lea eax, [ebp - 0xcc]
mov edx, 5
call fcn.00404f44
inc edi
add ebx, 4
cmp edi, 0x97
jne 0x6a7318
test esi, esi
jle 0x6a742c
cmp esi, 0x96
jge 0x6a742c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
cmp eax, 0x96
jle 0x6a742c
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
cmp eax, 0x64
jle 0x6a742c
inc esi
push esi
push 0
push 0
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 0xc]
push eax
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
sub eax, esi
push eax
mov eax, dword [ebp - 8]
mov edx, dword [eax + 0x3adc0]
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
xor ecx, ecx
call fcn.00637a00
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
mov edx, dword [eax]
call dword [edx + 8]
mov edx, eax
sub edx, esi
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x3adc0]
call fcn.006342e4
mov eax, dword [ebp - 0xc]
add dword [eax + 0xc], esi
sub dword [ebp - 0x94], esi
mov byte [ebp - 0xbd], 1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a7440
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6a7494
xor eax, eax
push ebp
push 0x6a7482
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 8]
cmp dword [eax + 0x36c], 0
jle 0x6a7478
push 5
mov eax, dword [ebp - 8]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x6a748c
ret