Function at 0x409890
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6319ab
mov eax, dword fs:[0]
push eax
sub esp, 0x180
mov eax, dword [0x6ce8d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x17c], esi
cmp dword [esi], 0
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x174], edx
je 0x40b251
cmp dword [esi + 0x1f8], 0
jle 0x4099f1
mov eax, dword [esi + 0x1f4]
mov edi, dword [eax]
mov dword [ebp - 0x15c], edi
test edi, edi
je 0x4099f1
mov eax, dword [esi + 0x1f8]
test eax, eax
jle 0x40992f
dec eax
mov dword [esi + 0x1f8], eax
test eax, eax
jle 0x40992f
mov ecx, dword [esi + 0x1f4]
shl eax, 2
push eax
lea eax, [ecx + 4]
push eax
push ecx
call fcn.005d7410
add esp, 0xc
mov eax, dword [edi + 0x108]
mov dword [ebp - 0x160], eax
test eax, eax
je 0x409980
cmp dword [eax + 0x38], 0
jle 0x409980
xor edi, edi
cmp dword [eax + 0x38], edi
jle 0x40997a
mov esi, dword [ebp - 0x15c]
mov eax, dword [eax + 0x34]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x409968
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 8]
call eax
test al, al
je 0x409974
mov eax, dword [ebp - 0x160]
inc edi
cmp edi, dword [eax + 0x38]
jl 0x409952
mov esi, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x15c]
xor ecx, ecx
mov dword [ebp - 0x15c], ecx
cmp dword [esi + 0x1b0], ecx
jle 0x4099b3
mov eax, dword [esi + 0x1ac]
push edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x15c]
inc ecx
mov dword [ebp - 0x15c], ecx
cmp ecx, dword [esi + 0x1b0]
jl 0x409990
mov ecx, dword [edi + 0x84]
lea eax, [edi + 0x88]
cmp ecx, eax
je 0x4099cc
push ecx
call fcn.005e0510
add esp, 4
mov ecx, dword [edi]
lea eax, [edi + 4]
cmp ecx, eax
je 0x4099de
push ecx
call fcn.005e0510
add esp, 4
push 0x120
push edi
call fcn.005bcca3
add esp, 8
jmp 0x4098e0
mov edi, dword [ebp - 0x158]
xor ecx, ecx
mov dword [ebp - 0x15c], ecx
cmp dword [esi + 0x1d4], ecx
jle 0x409a56
nop word [eax + eax]
mov eax, dword [esi + 0x1d0]
lea edx, [ebp - 0x165]
mov byte [ebp - 0x165], 0
push edx
push edi
mov ecx, dword [eax + ecx*4]
push dword [ebp + 0xc]
push dword [ebp + 8]
mov eax, dword [ecx]
mov eax, dword [eax]
call eax
cmp byte [ebp - 0x165], 0
jne 0x40a590
mov ecx, dword [ebp - 0x15c]
inc ecx
mov dword [ebp - 0x15c], ecx
cmp ecx, dword [esi + 0x1d4]
jl 0x409a10
mov ecx, dword [ebp + 8]
cmp ecx, 0x111
ja 0x40a5c6
je 0x40a59f
lea eax, [ecx - 5]
cmp eax, 0xfd
ja case.0x40a5f0.276
movzx eax, byte [eax + 0x40b2a0]
jmp dword [eax*4 + 0x40b270]
mov eax, dword [esi + 0x158]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xe4], 0
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x14c]
mov dword [ebp - 0xdc], eax
test ecx, ecx
je 0x409afa
mov dword [ebp - 0xe4], 0xa
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
mov ecx, dword [esi + 0x150]
test ecx, ecx
je 0x409b23
mov dword [ebp - 0xe4], 0xe
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
push 0
mov ecx, esi
call fcn.0040b960
push 4
push dword [esi]
call dword [sym.imp.USER32.dll_GetWindow]
test eax, eax
je case.0x40a5f0.276
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp case.0x40a5f0.276
mov ecx, dword [ebp - 0x174]
mov al, 1
mov dword [ecx], 1
jmp 0x40b253
push 0
lea eax, [ebp - 0x114]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0x114], xmm0
call dword [sym.imp.USER32.dll_GetUpdateRect]
test eax, eax
je 0x40a598
cmp dword [esi + 0x144], 0
push 0x40
push 0
jne 0x409bc1
lea eax, [ebp - 0x104]
push eax
call fcn.005d7990
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x104]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_EndPaint]
mov al, 1
jmp 0x40b253
lea eax, [ebp - 0x154]
push eax
call fcn.005d7990
add esp, 0xc
lea eax, [ebp - 0x154]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_BeginPaint]
cmp byte [esi + 0x1a5], 0
mov edi, dword [sym.imp.USER32.dll_GetClientRect]
je 0x409d2b
lea eax, [ebp - 0xd4]
mov byte [esi + 0x1a5], 0
push eax
push dword [esi]
xorps xmm0, xmm0
movups xmmword [ebp - 0xd4], xmm0
call edi
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.USER32.dll_IsRectEmpty]
test eax, eax
jne 0x409d2b
mov ecx, dword [esi + 0x144]
cmp byte [ecx + 0x150], al
je 0x409c8a
push dword [esi]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
jne 0x409c57
mov ecx, dword [esi + 0x144]
sub esp, 0x10
movups xmm0, xmmword [ebp - 0xd4]
mov eax, esp
mov edx, dword [ecx]
movups xmmword [eax], xmm0
call dword [edx + 0x34]
mov eax, dword [esi + 0xc]
test eax, eax
je 0x409c65
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov eax, dword [esi + 0x10]
test eax, eax
je 0x409c73
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
jmp 0x409cf9
mov eax, dword [ecx]
push reloc.WS2_32.dll_accept
push 0
push 0x40d1b0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x158], eax
test eax, eax
je 0x409cf9
nop word [eax + eax]
mov edi, dword [eax]
mov ecx, eax
mov edx, dword [edi + 0x30]
call edx
sub esp, 0x10
mov ecx, esp
movups xmm0, xmmword [eax]
movups xmmword [ecx], xmm0
mov ecx, dword [ebp - 0x158]
call dword [edi + 0x34]
mov ecx, dword [esi + 0x144]
push reloc.WS2_32.dll_accept
push 0
push 0x40d1b0
mov eax, dword [ecx]
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x158], eax
test eax, eax
jne 0x409cb0
mov edi, dword [sym.imp.USER32.dll_GetClientRect]
cmp byte [esi + 0x1a4], 0
movups xmm0, xmmword [ebp - 0xd4]
movups xmmword [esi + 0x1c], xmm0
je 0x409d2b
push ecx
push 0
push 0
push 0x6b3230
push dword [esi + 0x144]
mov ecx, esi
mov byte [esi + 0x1a4], 0
call fcn.0040c3b0
cmp byte [esi + 0x1a6], 0
je 0x409d3d
push 1
mov ecx, esi
call fcn.0040bea0
cmp byte [esi + 0x18], 0
je 0x40a030
push 0xffffffffffffffec
push dword [esi]
call dword [sym.imp.USER32.dll_GetWindowLongW]
test eax, 0x80000
jne 0x409d68
or eax, 0x80000
push eax
push 0xffffffffffffffec
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea eax, [ebp - 0x20]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0x20], xmm0
call edi
cmp byte [esi + 0x3c], 0
je 0x409d8e
movups xmm0, xmmword [ebp - 0x20]
mov byte [esi + 0x3c], 0
movups xmmword [ebp - 0x114], xmm0
jmp 0x409da6
lea edi, [esi + 0x1c]
push edi
lea eax, [ebp - 0x114]
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov edi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
sub edi, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1c]
cmp dword [esi + 0x10], 0
mov dword [ebp - 0x174], edi
mov dword [ebp - 0x160], eax
jne 0x409dea
push dword [esi + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov ecx, dword [esi + 8]
mov edx, edi
mov dword [esi + 0xc], eax
lea eax, [esi + 0x14]
push eax
push dword [ebp - 0x160]
call fcn.00416640
add esp, 8
mov dword [esi + 0x10], eax
push dword [esi + 0x10]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esi + 0xc]
mov dword [ebp - 0x17c], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov edi, dword [ebp - 0x110]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x158], edi
cmp edi, dword [ebp - 0x108]
jge 0x409e70
imul edi, dword [ebp - 0x174]
nop word [eax + eax]
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x114]
sub eax, ecx
shl eax, 2
add ecx, edi
push eax
mov eax, dword [esi + 0x14]
push 0
lea eax, [eax + ecx*4]
push eax
call fcn.005d7990
mov eax, dword [ebp - 0x158]
add esp, 0xc
add edi, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x158], eax
cmp eax, dword [ebp - 0x108]
jl 0x409e30
mov ecx, dword [esi + 0x144]
lea edx, [ebp - 0x114]
push edx
push dword [esi + 0xc]
mov eax, dword [ecx]
call dword [eax + 0x118]
lea eax, [ebp - 0x114]
mov ecx, esi
push eax
push dword [esi + 0xc]
call fcn.00409590
xor edi, edi
cmp dword [esi + 0x1e0], edi
jle 0x409ec7
mov eax, dword [esi + 0x1dc]
lea edx, [ebp - 0x14c]
push edx
push dword [esi + 0xc]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x130]
inc edi
cmp edi, dword [esi + 0x1e0]
jl 0x409ea3
mov ecx, dword [esi + 0x2c]
test ecx, ecx
jg 0x409ee4
cmp dword [esi + 0x30], 0
jg 0x409ee4
cmp dword [esi + 0x34], 0
jg 0x409ee4
cmp dword [esi + 0x38], 0
jle 0x409f7e
mov eax, dword [ebp - 0x20]
add eax, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 0x30]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [esi + 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [esi + 0x38]
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x30]
push eax
push eax
call dword [sym.imp.USER32.dll_IntersectRect]
test eax, eax
je 0x409f7e
mov edi, dword [ebp - 0x2c]
cmp edi, dword [ebp - 0x24]
jge 0x409f7e
mov eax, dword [ebp - 0x28]
mov edx, edi
imul edx, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x158], edx
nop word [eax + eax]
cmp ecx, eax
jge 0x409f6c
add edx, ecx
shl edx, 2
nop dword [eax]
mov eax, dword [esi + 0x14]
lea edx, [edx + 4]
inc ecx
mov byte [edx + eax - 1], 0xff
mov eax, dword [ebp - 0x28]
cmp ecx, eax
jl 0x409f50
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x158]
add edx, dword [ebp - 0x174]
inc edi
mov dword [ebp - 0x158], edx
cmp edi, dword [ebp - 0x24]
jl 0x409f40
push dword [ebp - 0x160]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
lea eax, [ebp - 0xd4]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0xd4], xmm0
call dword [sym.imp.USER32.dll_GetWindowRect]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xd0]
sub eax, ecx
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0xc8]
sub eax, edx
mov dword [ebp - 0x170], ecx
push 2
mov dword [ebp - 0x188], eax
lea eax, [ebp - 0x15c]
push eax
push 0
lea eax, [ebp - 0x184]
mov dword [ebp - 0x16c], edx
push eax
push dword [esi + 0xc]
lea eax, [ebp - 0x18c]
mov dword [ebp - 0x184], 0
push eax
lea eax, [ebp - 0x170]
mov dword [ebp - 0x180], 0
push eax
push 0
push dword [esi]
mov dword [ebp - 0x15c], 0x1ff0000
call dword [sym.imp.USER32.dll_UpdateLayeredWindow]
push dword [ebp - 0x17c]
jmp 0x40a12f
cmp dword [esi + 0x10], 0
jne 0x40a07d
lea eax, [ebp - 0xd4]
xorps xmm0, xmm0
push eax
push dword [esi]
movups xmmword [ebp - 0xd4], xmm0
call edi
push dword [esi + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0xd0]
push eax
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0xd4]
push eax
push dword [esi + 8]
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [esi + 0x10], eax
push dword [esi + 0x10]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
push dword [esi + 0xc]
mov dword [ebp - 0x158], eax
call dword [sym.imp.GDI32.dll_SaveDC]
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x14c]
push eax
push dword [esi + 0xc]
mov edx, dword [ecx]
call dword [edx + 0x118]
xor edi, edi
cmp dword [esi + 0x1e0], edi
jle 0x40a0e4
mov eax, dword [esi + 0x1dc]
lea edx, [ebp - 0x14c]
push edx
push dword [esi + 0xc]
mov ecx, dword [eax + edi*4]
mov eax, dword [ecx]
call dword [eax + 0x130]
inc edi
cmp edi, dword [esi + 0x1e0]
jl 0x40a0c0
push dword [ebp - 0x160]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_RestoreDC]
mov edx, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x140]
push 0xcc0020
push edx
push ecx
push dword [esi + 0xc]
sub eax, edx
push eax
mov eax, dword [ebp - 0x144]
sub eax, ecx
push eax
push edx
push ecx
push dword [ebp - 0x154]
call dword [sym.imp.GDI32.dll_BitBlt]
push dword [ebp - 0x158]
push dword [esi + 0xc]
call dword [sym.imp.GDI32.dll_SelectObject]
lea eax, [ebp - 0x154]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_EndPaint]
cmp byte [esi + 0x1a5], 0
je 0x40a598
push 0
push 0
push dword [esi]
call dword [sym.imp.USER32.dll_InvalidateRect]
mov al, 1
jmp 0x40b253
mov eax, dword [esi + 0x160]
test eax, eax
jle 0x40a174
mov dword [edi + 0x18], eax
mov eax, dword [esi + 0x164]
test eax, eax
jle 0x40a181
mov dword [edi + 0x1c], eax
mov eax, dword [esi + 0x168]
test eax, eax
jle 0x40a18e
mov dword [edi + 0x20], eax
mov eax, dword [esi + 0x16c]
test eax, eax
jle case.0x40a5f0.276
mov dword [edi + 0x24], eax
jmp case.0x40a5f0.276
mov eax, dword [esi + 0x148]
test eax, eax
je 0x40a1fb
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe4], 0x16
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x148]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov ecx, dword [esi + 0x144]
test ecx, ecx
je 0x40a598
call fcn.00413bc0
mov al, 1
jmp 0x40b253
movsx eax, di
mov dword [ebp - 0x164], eax
shr edi, 0x10
movsx eax, di
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x164]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [esi + 0x150], 0
mov eax, dword [ebp - 0x164]
mov dword [esi + 0x158], eax
mov eax, dword [ebp - 0x160]
mov dword [esi + 0x15c], eax
je case.0x40a5f0.276
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x164]
xorps xmm0, xmm0
mov ecx, dword [esi + 0x150]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 0
mov dword [ebp - 0xe4], 0x11
mov dword [ebp - 0xe0], ecx
mov word [ebp - 0xce], ax
mov dword [ebp - 0xc8], ecx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x150]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov dword [esi + 0x150], 0
jmp case.0x40a5f0.276
cmp dword [esi + 0x148], 0
je case.0x40a5f0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xd0], ax
mov eax, dword [esi + 0x158]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 5
mov dword [ebp - 0xd4], eax
call fcn.00408630
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x148]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
jmp case.0x40a5f0.276
cmp dword [esi + 0x148], 0
je case.0x40a5f0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xd0], ax
mov eax, dword [esi + 0x158]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 3
mov dword [ebp - 0xd4], eax
call fcn.00408630
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x148]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [esi + 0x148]
mov dword [esi + 0x154], eax
jmp case.0x40a5f0.276
cmp dword [esi + 0x154], 0
je case.0x40a5f0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0xd0], xmm0
mov word [ebp - 0xd0], ax
mov eax, dword [esi + 0x158]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [esi + 0x15c]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 4
mov dword [ebp - 0xd4], eax
call fcn.00408630
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x154]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov dword [esi + 0x154], 0
jmp case.0x40a5f0.276
cmp di, 1
jne case.0x40a5f0.276
cmp byte [esi + 0x1a8], 0
jne 0x40a598
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0
push eax
mov dword [ebp - 0x174], 0
call dword [sym.imp.USER32.dll_GetCursorPos]
lea eax, [ebp - 0x178]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_ScreenToClient]
push dword [ebp - 0x174]
mov ecx, esi
push dword [ebp - 0x178]
call fcn.0040cfc0
mov dword [ebp - 0x160], eax
test eax, eax
je case.0x40a5f0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x14]
call edx
test al, 2
je case.0x40a5f0.276
mov eax, dword [ebp + 0xc]
xorps xmm0, xmm0
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x178]
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x40], 0x17
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x30], eax
call fcn.00408630
mov word [ebp - 0x2a], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x160]
lea edx, [ebp - 0x40]
mov dword [ebp - 0x38], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov al, 1
jmp 0x40b253
test edi, edi
je 0x40a598
push edi
push dword [ebp + 0xc]
lea eax, [ecx + 0x2000]
push eax
push dword [edi]
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov al, 1
jmp 0x40b253
test edi, edi
je case.0x40a5f0.276
push edi
push dword [ebp + 0xc]
push 0x2111
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov al, 1
jmp 0x40b253
cmp ecx, 0x2a1
ja 0x40b08c
je 0x40ae21
lea eax, [ecx - 0x112]
cmp eax, 0xf8
ja case.0x40a5f0.276
movzx eax, byte [eax + 0x40b3c8]
jmp dword [eax*4 + 0x40b3a0]
mov eax, dword [ebp + 0xc]
and eax, 0xfff0
cmp eax, 0xf120
jne 0x40a60a
mov byte [esi + 0x3c], 1
mov al, 1
jmp 0x40b253
mov eax, dword [ebp + 0xc]
mov ecx, 0xf1
cmp cx, ax
jne 0x40a641
lea eax, [esi + 0xf8]
mov ecx, esi
push eax
call fcn.0040b4d0
cmp byte [esi + 0x108], 0
sete al
mov byte [esi + 0x108], al
jmp case.0x40a5f0.276
xor ecx, ecx
cmp dword [esi + 0x1bc], ecx
jle case.0x40a5f0.276
mov edx, dword [esi]
mov dword [ebp - 0x160], edx
mov edx, dword [esi + 0x1b8]
nop dword [eax]
mov edi, dword [edx]
mov esi, dword [ebp - 0x160]
cmp dword [edi + 8], esi
mov esi, dword [ebp - 0x17c]
jne 0x40a684
movzx eax, ax
cmp dword [edi + 0xc], eax
jne 0x40a681
cmp byte [edi + 0x10], 0
je 0x40a695
mov eax, dword [ebp + 0xc]
inc ecx
add edx, 4
cmp ecx, dword [esi + 0x1bc]
jl 0x40a660
jmp case.0x40a5f0.276
mov eax, dword [edi]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [edi + 4]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x18
mov dword [ebp - 0xcc], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [edi]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
jmp case.0x40a5f0.276
cmp byte [esi + 0x1a7], 0
jne 0x40a750
mov eax, dword [esi]
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x18], eax
mov eax, dword [esi + 0x110]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 3
test eax, eax
jne 0x40a72c
mov dword [ebp - 0x14], 0x190
jmp 0x40a73f
push 0
push 3
push 0x415
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.COMCTL32.dll__TrackMouseEvent]
mov byte [esi + 0x1a7], 1
movsx eax, di
lea edx, [ebp - 0x170]
shr edi, 0x10
movsx ecx, di
mov dword [esi + 0x15c], ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x160], eax
mov dword [esi + 0x158], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40d0a0
mov eax, dword [eax + 0xfc]
call eax
mov edi, eax
test edi, edi
je 0x40a7b2
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40a5f0.276
mov eax, dword [ebp - 0x160]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xe4], 0
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd4], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x14c]
mov dword [ebp - 0xdc], eax
cmp edi, ecx
je 0x40a852
test ecx, ecx
je 0x40a852
mov dword [ebp - 0xe4], 0xa
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
mov ecx, dword [esi + 0x110]
mov dword [esi + 0x14c], 0
test ecx, ecx
je 0x40a852
lea eax, [esi + 0x114]
push eax
push 0
push 0x411
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
cmp edi, dword [esi + 0x14c]
je 0x40a885
test edi, edi
je 0x40a885
mov dword [ebp - 0xe4], 0xb
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe0], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x108]
mov dword [esi + 0x14c], edi
mov ecx, dword [esi + 0x150]
test ecx, ecx
je 0x40a8b3
mov dword [ebp - 0xe4], 9
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ecx]
push edx
call dword [eax + 0x108]
jmp case.0x40a5f0.276
test edi, edi
je case.0x40a5f0.276
mov dword [ebp - 0xe4], 9
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xe0], edi
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x108]
jmp case.0x40a5f0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetFocus]
movsx ecx, di
lea edx, [ebp - 0x170]
mov dword [esi + 0x158], ecx
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x160], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x158], eax
mov dword [esi + 0x15c], eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40d0a0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x15c], eax
test eax, eax
je case.0x40a5f0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40a5f0.276
mov ecx, dword [ebp - 0x15c]
mov dword [esi + 0x150], ecx
mov eax, dword [ecx]
call dword [eax + 0xf0]
push dword [esi]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 1
mov dword [ebp - 0xe4], 0xd
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd4], ecx
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x15c]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
jmp case.0x40a5f0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetFocus]
movsx eax, di
lea edx, [ebp - 0x170]
shr edi, 0x10
movsx ecx, di
mov dword [esi + 0x15c], ecx
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x160], eax
mov dword [esi + 0x158], eax
mov dword [ebp - 0x170], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40d0a0
mov eax, dword [eax + 0xfc]
call eax
mov edi, eax
test edi, edi
je case.0x40a5f0.276
mov edx, dword [edi]
mov ecx, edi
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40a5f0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x160]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov byte [esi + 0x1a8], 1
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x10
mov dword [ebp - 0xe0], edi
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0xdc], eax
lea ecx, [ebp - 0xe4]
mov eax, dword [edi]
push ecx
mov ecx, edi
call dword [eax + 0x108]
mov dword [esi + 0x150], edi
jmp case.0x40a5f0.276
mov eax, edi
movsx ecx, di
shr eax, 0x10
cmp dword [esi + 0x150], 0
cwde
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x158], eax
mov dword [esi + 0x158], ecx
mov dword [esi + 0x15c], eax
je case.0x40a5f0.276
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [esi + 0x150]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 0
mov dword [ebp - 0xe4], 0xe
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd4], ecx
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x150]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov dword [esi + 0x150], 0
jmp case.0x40a5f0.276
push dword [esi]
call dword [sym.imp.USER32.dll_SetFocus]
movsx ecx, di
lea edx, [ebp - 0x170]
mov dword [esi + 0x158], ecx
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x160], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x158], eax
mov dword [esi + 0x15c], eax
mov dword [ebp - 0x16c], eax
mov eax, dword [ecx]
push 0xd
push edx
push 0x40d0a0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x15c], eax
test eax, eax
je case.0x40a5f0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40a5f0.276
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ecx]
call dword [eax + 0xf0]
push dword [esi]
call dword [sym.imp.USER32.dll_SetCapture]
mov eax, dword [ebp - 0x15c]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x160]
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
mov dword [ebp - 0xc8], 0
mov byte [esi + 0x1a8], 1
mov dword [ebp - 0xe4], 0xf
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xd4], ecx
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, dword [ebp - 0x15c]
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push ecx
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x108]
mov dword [esi + 0x150], edi
jmp case.0x40a5f0.276
movsx eax, di
mov dword [ebp - 0x164], eax
mov eax, edi
shr eax, 0x10
cwde
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x164]
push eax
push dword [esi]
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x164]
lea edx, [ebp - 0x170]
mov eax, dword [ebp - 0x160]
mov dword [esi + 0x158], ecx
mov dword [ebp - 0x170], ecx
mov ecx, dword [esi + 0x144]
mov dword [esi + 0x15c], eax
mov dword [ebp - 0x16c], eax
push 0xd
mov eax, dword [ecx]
push edx
push 0x40d0a0
mov eax, dword [eax + 0xfc]
call eax
mov dword [ebp - 0x158], eax
test eax, eax
je case.0x40a5f0.276
mov edx, dword [eax]
mov ecx, eax
mov edx, dword [edx + 0x1c]
call edx
cmp eax, esi
jne case.0x40a5f0.276
mov eax, dword [ebp - 0x158]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0xc]
shr eax, 0x10
shr eax, 0xf
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xe4], 0x12
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], edi
call fcn.00408630
mov word [ebp - 0xce], ax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [ebp - 0x158]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
movzx ecx, word [esi + 0x15c]
movzx eax, word [esi + 0x158]
shl ecx, 0x10
or ecx, eax
push ecx
push 0
push 0x200
push dword [esi]
call dword [sym.imp.USER32.dll_SendMessageW]
jmp case.0x40a5f0.276
test edi, edi
je case.0x40a5f0.276
push edi
push dword [ebp + 0xc]
lea eax, [ecx + 0x2000]
push eax
push edi
call dword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [ebp - 0x174]
mov dword [ecx], eax
mov al, 1
jmp 0x40b253
movsx eax, di
lea edx, [ebp - 0x170]
shr edi, 0x10
movsx ecx, di
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x158], ecx
mov ecx, dword [esi + 0x144]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x170], eax
mov byte [esi + 0x1a7], 0
mov eax, dword [ecx]
push 0xd
push edx
push 0x40d0a0
mov eax, dword [eax + 0xfc]
call eax
mov edi, eax
mov dword [ebp - 0x160], edi
test edi, edi
je case.0x40a5f0.276
mov eax, dword [esi + 0x14c]
test eax, eax
je 0x40aee6
mov ecx, dword [ebp - 0x15c]
xorps xmm0, xmm0
movups xmmword [ebp - 0xe0], xmm0
mov dword [ebp - 0xd8], ecx
mov ecx, dword [ebp - 0x158]
movq qword [ebp - 0xd0], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xe4], 0xc
mov dword [ebp - 0xe0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esi + 0x14c]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0xdc], eax
push edx
mov eax, dword [ecx]
call dword [eax + 0x108]
mov eax, dword [edi]
lea ecx, [ebp - 0xc4]
push ecx
mov ecx, edi
call dword [eax + 0x98]
mov dword [ebp - 4], 0
mov edi, dword [ebp - 0xc4]
cmp word [edi], 0
jne 0x40af24
lea eax, [ebp - 0xc0]
cmp edi, eax
je 0x40af1d
push edi
call fcn.005e0510
add esp, 4
mov al, 1
jmp 0x40b253
push 0x30
lea eax, [esi + 0x114]
push 0
push eax
call fcn.005d7990
mov eax, dword [esi]
add esp, 0xc
mov dword [esi + 0x138], edi
mov edi, dword [ebp - 0x160]
mov ecx, edi
mov dword [esi + 0x11c], eax
mov dword [esi + 0x120], eax
mov eax, dword [0x6dc40c]
mov dword [esi + 0x134], eax
mov dword [esi + 0x114], 0x30
mov dword [esi + 0x118], 1
mov eax, dword [edi]
mov eax, dword [eax + 0x30]
call eax
cmp dword [esi + 0x110], 0
movups xmm0, xmmword [eax]
movups xmmword [esi + 0x124], xmm0
jne 0x40afff
push 0
push dword [0x6dc40c]
push 0
push dword [esi]
push bind
push bind
push bind
push bind
push reloc.WS2_32.dll_closesocket
push 0
push 0x6b3248
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
lea ecx, [esi + 0x114]
mov dword [esi + 0x110], eax
push ecx
push 0
push 0x432
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [edi]
mov ecx, edi
mov eax, dword [eax + 0xa4]
call eax
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push eax
push 0
push 0x418
push dword [esi + 0x110]
call edi
jmp 0x40b005
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push dword [esi + 0x110]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
jne 0x40b041
lea eax, [esi + 0x114]
push eax
push 0
push 0x436
push dword [esi + 0x110]
call edi
lea eax, [esi + 0x114]
push eax
push 1
push 0x411
push dword [esi + 0x110]
call edi
mov eax, dword [ebp - 0x158]
movzx ecx, ax
mov eax, dword [ebp - 0x15c]
shl ecx, 0x10
movzx eax, ax
or ecx, eax
push ecx
push 0
push 0x412
push dword [esi + 0x110]
call edi
mov eax, dword [ebp - 0xc4]
lea ecx, [ebp - 0xc0]
cmp eax, ecx
je 0x40af1d
push eax
call fcn.005e0510
add esp, 4
mov al, 1
jmp 0x40b253
cmp ecx, 0x2a3
je 0x40b0ff
cmp ecx, 0x8001
jne case.0x40a5f0.276
xor edi, edi
cmp dword [esi + 0x1ec], edi
jle 0x40b0cc
nop word [eax + eax]
mov eax, dword [esi + 0x1e8]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x40b0c3
mov eax, dword [ecx]
push 1
call dword [eax]
inc edi
cmp edi, dword [esi + 0x1ec]
jl 0x40b0b0
mov eax, dword [esi + 0x1e8]
test eax, eax
je 0x40b0df
push eax
call fcn.005e0510
add esp, 4
mov dword [esi + 0x1e8], 0
mov dword [esi + 0x1f0], 0
mov dword [esi + 0x1ec], 0
jmp case.0x40a5f0.276
mov ecx, dword [esi + 0x110]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
test ecx, ecx
je 0x40b120
lea eax, [esi + 0x114]
push eax
push 0
push 0x411
push ecx
call edi
cmp byte [esi + 0x1a7], 0
je 0x40b136
push 0xffffffffffffffff
push 0
push 0x200
push dword [esi]
call edi
mov byte [esi + 0x1a7], 0
nop dword [eax]
cmp dword [esi + 0x1f8], 0
jle 0x40b251
mov eax, dword [esi + 0x1f4]
mov edi, dword [eax]
mov dword [ebp - 0x15c], edi
test edi, edi
je 0x40b251
mov eax, dword [esi + 0x1f8]
test eax, eax
jle 0x40b18f
dec eax
mov dword [esi + 0x1f8], eax
test eax, eax
jle 0x40b18f
mov ecx, dword [esi + 0x1f4]
shl eax, 2
push eax
lea eax, [ecx + 4]
push eax
push ecx
call fcn.005d7410
add esp, 0xc
mov eax, dword [edi + 0x108]
mov dword [ebp - 0x160], eax
test eax, eax
je 0x40b1e0
cmp dword [eax + 0x38], 0
jle 0x40b1e0
xor edi, edi
cmp dword [eax + 0x38], edi
jle 0x40b1da
mov esi, dword [ebp - 0x15c]
mov eax, dword [eax + 0x34]
mov ecx, dword [eax + edi*4]
test ecx, ecx
je 0x40b1c8
mov eax, dword [ecx]
push esi
mov eax, dword [eax + 8]
call eax
test al, al
je 0x40b1d4
mov eax, dword [ebp - 0x160]
inc edi
cmp edi, dword [eax + 0x38]
jl 0x40b1b2
mov esi, dword [ebp - 0x17c]
mov edi, dword [ebp - 0x15c]
xor ecx, ecx
mov dword [ebp - 0x158], ecx
cmp dword [esi + 0x1b0], ecx
jle 0x40b213
mov eax, dword [esi + 0x1ac]
push edi
mov ecx, dword [eax + ecx*4]
mov eax, dword [ecx]
call dword [eax]
mov ecx, dword [ebp - 0x158]
inc ecx
mov dword [ebp - 0x158], ecx
cmp ecx, dword [esi + 0x1b0]
jl 0x40b1f0
mov ecx, dword [edi + 0x84]
lea eax, [edi + 0x88]
cmp ecx, eax
je 0x40b22c
push ecx
call fcn.005e0510
add esp, 4
mov ecx, dword [edi]
lea eax, [edi + 4]
cmp ecx, eax
je 0x40b23e
push ecx
call fcn.005e0510
add esp, 4
push 0x120
push edi
call fcn.005bcca3
add esp, 8
jmp case.0x40a5f0.276
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005bcf27
mov esp, ebp
pop ebp
ret 0x10