Function at 0x6d96a8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push esi
push edi
add esp, 0xfffff760
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.kernel32.dll_GetProcessHeap
mov dword [esp + 0xc], eax
call sub.kernel32.dll_GetTickCount_1
mov edx, dword [esp + 4]
mov dword [edx + 0x120], eax
mov eax, dword [esp]
xor ecx, ecx
mov cl, byte [eax]
cmp ecx, 0x2c
ja case.default.0x6d96df
jmp dword [ecx*4 + 0x6d96e6]
mov word [esp + 0x10], 0
call fcn.006dd628
mov eax, dword [esp + 4]
mov edx, 4
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp]
add eax, 0x11
call fcn.006d9614
mov ecx, dword [esp + 4]
mov dword [ecx + 0x18], eax
push 0x10
mov eax, dword [esp + 4]
inc eax
push eax
mov edx, dword [esp + 0xc]
add edx, 0x44
push edx
call fcn.006cb33c
add esp, 0xc
push 0x14
mov ecx, dword [esp + 4]
add ecx, 0x11
push ecx
mov eax, dword [esp + 0xc]
add eax, 0x30
push eax
call fcn.006cb33c
add esp, 0xc
push 0xc8
mov edx, dword [esp + 4]
add edx, 0x25
push edx
mov ecx, dword [esp + 0xc]
add ecx, 0x54
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6d9844
mov word [esp + 0x12], 0
jmp 0x6d984b
mov word [esp + 0x12], 0xfbb5
push 2
lea edx, [esp + 0x14]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
lea edx, [esp + 0x16]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.006cb33c
add esp, 0xc
push 0
push 0
push 0x7e8
mov edx, dword [0x6f5944]
push edx
call sub.user32.dll_SendMessageA
jmp 0x6dbd07
mov word [esp + 0x14], 0
mov ecx, dword [esp + 4]
mov eax, 4
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x18]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
push 0x6f57c8
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov word [esp + 0x16], 0
call fcn.006d9434
mov word [esp + 0x18], ax
mov eax, dword [esp + 4]
mov edx, 4
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x1a]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
lea edx, [esp + 0x1c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 8
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6d99bb
mov ecx, 0x6f583c
lea edx, [esp + 0x20]
lea eax, [esp + 0x1c]
call fcn.006d2940
mov word [esp + 0x24], ax
jmp 0x6d99c2
mov word [esp + 0x24], 0xfbb5
push 2
lea ecx, [esp + 0x28]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 4
lea ecx, [esp + 0x20]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
push 2
lea ecx, [esp + 0x24]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 6
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov word [esp + 0x26], 0
call fcn.006d9080
mov word [esp + 0x28], ax
mov ecx, dword [esp + 4]
mov eax, 4
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x2a]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
lea edx, [esp + 0x2c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6eee67
lea edi, [esp + 0x110]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov esi, 0x6eef6c
lea edi, [esp + 0x214]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x34]
push ecx
call fcn.006cb33c
add esp, 0xc
push 0x104
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0x118]
push edx
call fcn.006cb33c
add esp, 0xc
push 2
mov ecx, dword [esp + 4]
add ecx, 0x107
push ecx
lea eax, [esp + 0x36]
push eax
call fcn.006cb33c
add esp, 0xc
mov edx, dword [esp + 4]
cmp dword [edx + 0x2c], 0
je 0x6d9b4e
lea ecx, [esp + 0x214]
push ecx
lea edx, [esp + 0x114]
movsx ecx, word [esp + 0x32]
movsx eax, word [esp + 0x30]
call fcn.006d4f00
mov word [esp + 0x2a], ax
jmp 0x6d9b55
mov word [esp + 0x2a], 0xfbb5
push 2
lea eax, [esp + 0x2e]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 0x104
lea eax, [esp + 0x218]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6ef071
lea edi, [esp + 0x318]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x3a]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6d9c0d
movsx edx, word [esp + 0x32]
mov eax, dword [esp]
lea ecx, [esp + 0x318]
inc eax
call fcn.006d1690
mov word [esp + 0x30], ax
jmp 0x6d9c14
mov word [esp + 0x30], 0xfbb5
push 2
lea edx, [esp + 0x34]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 0x104
lea edx, [esp + 0x31c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6ef176
lea edi, [esp + 0x41c]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x3e]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6d9ce2
mov edx, dword [esp]
add edx, 0x119
push edx
lea ecx, [esp + 0x420]
push ecx
movsx edx, word [esp + 0x3e]
mov ecx, dword [esp + 8]
mov eax, dword [esp + 8]
add ecx, 0x107
inc eax
call fcn.006d180c
mov word [esp + 0x34], ax
jmp 0x6d9ce9
mov word [esp + 0x34], 0xfbb5
push 2
lea eax, [esp + 0x38]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 0x104
lea eax, [esp + 0x420]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 6
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x46]
push ecx
call fcn.006cb33c
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 0x107
push eax
lea edx, [esp + 0x48]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x109
push ecx
lea eax, [esp + 0x42]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x10a
push edx
lea ecx, [esp + 0x43]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x10b
push eax
lea edx, [esp + 0x44]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x10c
push ecx
lea eax, [esp + 0x45]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 0x10d
push edx
lea ecx, [esp + 0x4a]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6d9e46
lea edx, [esp + 0x3a]
push edx
lea ecx, [esp + 0x3f]
push ecx
lea eax, [esp + 0x44]
push eax
lea edx, [esp + 0x49]
push edx
push 0x6f583c
movsx ecx, word [esp + 0x56]
push ecx
movsx ecx, word [esp + 0x58]
movsx edx, word [esp + 0x56]
mov eax, dword [esp + 0x18]
inc eax
call fcn.006d19a0
mov word [esp + 0x38], ax
jmp 0x6d9e4d
mov word [esp + 0x38], 0xfbb5
push 2
lea eax, [esp + 0x3c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x3e]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x3f]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x40]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x41]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 6
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x52]
push ecx
call fcn.006cb33c
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 0x107
push eax
lea edx, [esp + 0x54]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x109
push ecx
lea eax, [esp + 0x4e]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x10a
push edx
lea ecx, [esp + 0x4f]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x10b
push eax
lea edx, [esp + 0x50]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x10c
push ecx
lea eax, [esp + 0x51]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 0x10d
push edx
lea ecx, [esp + 0x56]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6d9ff2
lea edx, [esp + 0x46]
push edx
lea ecx, [esp + 0x4b]
push ecx
lea eax, [esp + 0x50]
push eax
lea edx, [esp + 0x55]
push edx
push 0x6f583c
movsx ecx, word [esp + 0x62]
push ecx
movsx ecx, word [esp + 0x64]
movsx edx, word [esp + 0x62]
mov eax, dword [esp + 0x18]
inc eax
call fcn.006d56f4
mov word [esp + 0x44], ax
jmp 0x6d9ff9
mov word [esp + 0x44], 0xfbb5
push 2
lea eax, [esp + 0x48]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x4a]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x4b]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x4c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x4d]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6da0df
mov ecx, dword [esp]
add ecx, 0x12d
push ecx
push 0x6f583c
mov ecx, dword [esp + 8]
add ecx, 0x29
mov edx, dword [esp + 8]
add edx, 0x15
mov eax, dword [esp + 8]
inc eax
call fcn.006d50b8
mov word [esp + 0x50], ax
jmp 0x6da0e6
mov word [esp + 0x50], 0xfbb5
push 2
lea eax, [esp + 0x54]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x5c]
push ecx
call fcn.006cb33c
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0x5e]
push edx
call fcn.006cb33c
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x6da17d
mov dx, word [esp + 0x56]
mov ecx, 0x6f583c
mov ax, word [esp + 0x54]
call fcn.006d3dd0
mov word [esp + 0x52], ax
jmp 0x6da184
mov word [esp + 0x52], 0xfbb5
push 2
lea eax, [esp + 0x56]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 3
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x62]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6da203
mov ecx, 0x6f583c
lea edx, [esp + 0x5c]
mov ax, word [esp + 0x5a]
call fcn.006d3988
mov word [esp + 0x58], ax
jmp 0x6da20a
mov word [esp + 0x58], 0xfbb5
push 2
lea edx, [esp + 0x5c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
lea edx, [esp + 0x60]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
push 2
mov edx, dword [esp + 4]
inc edx
push edx
lea ecx, [esp + 0x6c]
push ecx
call fcn.006cb33c
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0x6e]
push edx
call fcn.006cb33c
add esp, 0xc
movsx ecx, word [esp + 0x66]
inc ecx
push ecx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0x60], eax
movsx edx, word [esp + 0x66]
add edx, 2
mov ecx, dword [esp + 4]
mov dword [ecx + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6da2d9
push 0x6f583c
movsx ecx, word [esp + 0x6a]
mov dx, word [esp + 0x68]
mov eax, dword [esp + 0x64]
call fcn.006d5f28
mov word [esp + 0x5e], ax
jmp 0x6da2e0
mov word [esp + 0x5e], 0xfbb5
push 2
lea ecx, [esp + 0x62]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
movsx ecx, word [esp + 0x66]
push ecx
mov eax, dword [esp + 0x64]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 0x60]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapFree
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x72]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6da390
mov ecx, 0x6f583c
mov eax, dword [esp]
add eax, 3
mov dx, word [esp + 0x6a]
call fcn.006d60bc
mov word [esp + 0x68], ax
jmp 0x6da397
mov word [esp + 0x68], 0xfbb5
push 2
lea ecx, [esp + 0x6c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6da3fc
mov edx, 0x6f583c
lea eax, [esp + 0x70]
call fcn.006d6ff8
mov word [esp + 0x6c], ax
jmp 0x6da403
mov word [esp + 0x6c], 0xfbb5
push 2
lea ecx, [esp + 0x70]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 4
lea ecx, [esp + 0x74]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x82]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x107
push eax
lea edx, [esp + 0x7e]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x108
push ecx
lea eax, [esp + 0x7f]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x109
push edx
lea ecx, [esp + 0x80]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x10a
push eax
lea edx, [esp + 0x81]
push edx
call fcn.006cb33c
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x6da527
lea eax, [esp + 0x77]
push eax
lea edx, [esp + 0x7c]
push edx
lea ecx, [esp + 0x81]
push ecx
lea ecx, [esp + 0x82]
movsx edx, word [esp + 0x86]
mov eax, dword [esp + 0xc]
inc eax
call fcn.006d1330
mov word [esp + 0x74], ax
jmp 0x6da52e
mov word [esp + 0x74], 0xfbb5
push 2
lea eax, [esp + 0x78]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x7a]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x7b]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x7c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x7d]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 6
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 0x10
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x528]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x11
push eax
lea edx, [esp + 0x86]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x12
push ecx
lea eax, [esp + 0x87]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x13
push edx
lea ecx, [esp + 0x88]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x14
push eax
lea edx, [esp + 0x89]
push edx
call fcn.006cb33c
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x6da697
lea eax, [esp + 0x80]
push eax
lea edx, [esp + 0x85]
push edx
lea ecx, [esp + 0x87]
lea edx, [esp + 0x86]
lea eax, [esp + 0x528]
call fcn.006d1cd4
mov word [esp + 0x7c], ax
jmp 0x6da69e
mov word [esp + 0x7c], 0xfbb5
push 2
lea ecx, [esp + 0x80]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x82]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x83]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 3
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x84]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 4
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x85]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 5
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x8c]
push ecx
call fcn.006cb33c
add esp, 0xc
movsx eax, word [esp + 0x84]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0x8c], eax
movsx ecx, word [esp + 0x84]
push ecx
mov eax, dword [esp + 4]
add eax, 3
push eax
mov edx, dword [esp + 0x94]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
movsx ecx, word [esp + 0x88]
add ecx, dword [esp + 4]
add ecx, 3
push ecx
lea eax, [esp + 0x90]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
movsx edx, word [esp + 0x88]
add edx, dword [esp + 4]
add edx, 4
push edx
lea ecx, [esp + 0x91]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
movsx eax, word [esp + 0x88]
add eax, dword [esp + 4]
add eax, 5
push eax
lea edx, [esp + 0x92]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
movsx ecx, word [esp + 0x88]
add ecx, dword [esp + 4]
add ecx, 6
push ecx
lea eax, [esp + 0x93]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
movsx edx, word [esp + 0x88]
add edx, dword [esp + 4]
add edx, 7
push edx
lea ecx, [esp + 0x8e]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6da8af
lea edx, [esp + 0x8a]
push edx
lea ecx, [esp + 0x8f]
push ecx
push 0x6f583c
movsx eax, word [esp + 0x90]
push eax
movsx edx, word [esp + 0x96]
push edx
lea ecx, [esp + 0x9d]
lea edx, [esp + 0x9c]
mov eax, dword [esp + 0xa0]
call fcn.006d5554
mov word [esp + 0x82], ax
jmp 0x6da8b9
mov word [esp + 0x82], 0xfbb5
push 2
lea ecx, [esp + 0x86]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x8c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x8d]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 3
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x8e]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 4
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0x8f]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 5
push edx
call fcn.006cb33c
add esp, 0xc
mov ecx, dword [esp + 0x8c]
push ecx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapFree
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 6
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 1
mov eax, dword [esp + 4]
add eax, 0x105
push eax
lea ecx, [esp + 0x9a]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 0x106
push eax
lea edx, [esp + 0x9b]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 0x107
push ecx
lea eax, [esp + 0x9c]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 0x108
push edx
lea ecx, [esp + 0x9d]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6daa3d
lea edx, [esp + 0x94]
push edx
lea ecx, [esp + 0x99]
push ecx
push 0x6f583c
lea ecx, [esp + 0x9f]
lea edx, [esp + 0x9e]
mov eax, dword [esp + 0xc]
inc eax
call fcn.006d2ce4
mov word [esp + 0x90], ax
jmp 0x6daa47
mov word [esp + 0x90], 0xfbb5
push 2
lea eax, [esp + 0x94]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x96]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x97]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 3
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x98]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 4
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
lea eax, [esp + 0x99]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 5
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6ef27b
lea edi, [esp + 0x530]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dab3b
lea edx, [esp + 0x530]
mov eax, dword [esp]
inc eax
call fcn.006d2ed8
mov word [esp + 0x96], ax
jmp 0x6dab45
mov word [esp + 0x96], 0xfbb5
push 2
lea ecx, [esp + 0x9a]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 0x104
lea ecx, [esp + 0x534]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6ef380
lea edi, [esp + 0x634]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dabee
lea ecx, [esp + 0x634]
mov edx, dword [esp]
add edx, 0x105
mov eax, dword [esp]
inc eax
call fcn.006d3168
mov word [esp + 0x98], ax
jmp 0x6dabf8
mov word [esp + 0x98], 0xfbb5
push 2
lea ecx, [esp + 0x9c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 0x104
lea ecx, [esp + 0x638]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 0x12
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dac8b
lea ecx, [esp + 0x738]
mov edx, dword [esp]
add edx, 0x11
mov eax, dword [esp]
inc eax
call fcn.006d2a30
mov word [esp + 0x9a], ax
jmp 0x6dac95
mov word [esp + 0x9a], 0xfbb5
push 2
lea ecx, [esp + 0x9e]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 0x10
lea ecx, [esp + 0x73c]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 0x12
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dad2f
lea ecx, [esp + 0x748]
push ecx
mov ecx, dword [esp + 4]
add ecx, 0x29
mov edx, dword [esp + 4]
add edx, 0x15
mov eax, dword [esp + 4]
inc eax
call fcn.006d3530
mov word [esp + 0x9c], ax
jmp 0x6dad39
mov word [esp + 0x9c], 0xfbb5
push 2
lea eax, [esp + 0xa0]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
push 0x10
lea eax, [esp + 0x74c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dadc8
mov ecx, dword [esp]
add ecx, 0x15
mov edx, dword [esp]
add edx, 0x15
mov eax, dword [esp]
inc eax
call fcn.006d1e24
mov word [esp + 0x9e], ax
jmp 0x6dadd2
mov word [esp + 0x9e], 0xfbb5
push 2
lea ecx, [esp + 0xa2]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
push 2
mov ecx, dword [esp + 4]
add ecx, 0x29
push ecx
lea eax, [esp + 0xaa]
push eax
call fcn.006cb33c
add esp, 0xc
movsx edx, word [esp + 0xa2]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0xa4], eax
movsx eax, word [esp + 0xa2]
add eax, 2
mov edx, dword [esp + 4]
mov dword [edx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dae99
movsx ecx, word [esp + 0xa2]
push ecx
mov eax, dword [esp + 0xa8]
push eax
push 0x6f583c
mov ecx, dword [esp + 0xc]
add ecx, 0x2b
mov edx, dword [esp + 0xc]
add edx, 0x15
mov eax, dword [esp + 0xc]
inc eax
call fcn.006d6828
mov word [esp + 0xa0], ax
jmp 0x6daea3
mov word [esp + 0xa0], 0xfbb5
push 2
lea edx, [esp + 0xa4]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
movsx edx, word [esp + 0xa2]
push edx
mov ecx, dword [esp + 0xa8]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
mov ecx, dword [esp + 0xa4]
push ecx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapFree
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6daf55
push 0x6f583c
mov ecx, dword [esp + 4]
add ecx, 0x29
mov edx, dword [esp + 4]
add edx, 0x15
mov eax, dword [esp + 4]
inc eax
call fcn.006d435c
mov word [esp + 0xa8], ax
jmp 0x6daf5f
mov word [esp + 0xa8], 0xfbb5
push 2
lea ecx, [esp + 0xac]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xb4]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dafec
mov ecx, 0x6f583c
mov edx, dword [esp]
add edx, 3
mov ax, word [esp + 0xac]
call fcn.006d4150
mov word [esp + 0xaa], ax
jmp 0x6daff6
mov word [esp + 0xaa], 0xfbb5
push 2
lea edx, [esp + 0xae]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xb8]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db08e
push 0x6f583c
movsx eax, word [esp + 0xb4]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
add ecx, 0x107
add edx, 3
call fcn.006d5420
mov word [esp + 0xae], ax
jmp 0x6db098
mov word [esp + 0xae], 0xfbb5
push 2
lea edx, [esp + 0xb2]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db0ff
mov eax, 0x6f583c
call fcn.006d11e0
mov word [esp + 0xb2], ax
jmp 0x6db109
mov word [esp + 0xb2], 0xfbb5
push 2
lea edx, [esp + 0xb6]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 0xa
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db17e
mov ecx, 0x6f583c
lea edx, [esp + 0xbc]
lea eax, [esp + 0xb8]
call fcn.006d6f24
mov word [esp + 0xb4], ax
jmp 0x6db188
mov word [esp + 0xb4], 0xfbb5
push 2
lea ecx, [esp + 0xb8]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 4
lea ecx, [esp + 0xbc]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
push 4
lea ecx, [esp + 0xc0]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 6
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db230
mov edx, 0x6f583c
lea eax, [esp + 0xc4]
call fcn.006d6e6c
mov word [esp + 0xc0], ax
jmp 0x6db23a
mov word [esp + 0xc0], 0xfbb5
push 2
lea ecx, [esp + 0xc4]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 4
lea ecx, [esp + 0xc8]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 6
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 1
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xd2]
push ecx
call fcn.006cb33c
add esp, 0xc
push 1
mov eax, dword [esp + 4]
add eax, 2
push eax
lea edx, [esp + 0xd3]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
mov ecx, dword [esp + 4]
add ecx, 3
push ecx
lea eax, [esp + 0xd4]
push eax
call fcn.006cb33c
add esp, 0xc
push 1
mov edx, dword [esp + 4]
add edx, 4
push edx
lea ecx, [esp + 0xd5]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db341
lea edx, [esp + 0xcd]
push edx
push 0x6f583c
lea ecx, [esp + 0xd4]
lea edx, [esp + 0xd3]
lea eax, [esp + 0xd2]
call fcn.006d3a60
mov word [esp + 0xc8], ax
jmp 0x6db34b
mov word [esp + 0xc8], 0xfbb5
push 2
lea ecx, [esp + 0xcc]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0xce]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0xcf]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 3
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0xd0]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 4
push edx
call fcn.006cb33c
add esp, 0xc
push 1
lea ecx, [esp + 0xd1]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 5
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
push 2
mov ecx, dword [esp + 4]
inc ecx
push ecx
lea eax, [esp + 0xd8]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 3
push edx
lea ecx, [esp + 0xda]
push ecx
call fcn.006cb33c
add esp, 0xc
movsx eax, word [esp + 0xd2]
inc eax
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0xd4], eax
movsx ecx, word [esp + 0xd2]
add ecx, 2
mov eax, dword [esp + 4]
mov dword [eax + 0x28], ecx
mov word [esp + 8], cx
movsx edx, word [esp + 8]
push edx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x6db4a1
mov eax, dword [esp]
add eax, 5
push eax
mov edx, dword [esp + 4]
add edx, 0x19
push edx
push 0x6f583c
movsx ecx, word [esp + 0xde]
mov dx, word [esp + 0xdc]
mov eax, dword [esp + 0xe0]
call fcn.006d6258
mov word [esp + 0xce], ax
jmp 0x6db4ab
mov word [esp + 0xce], 0xfbb5
push 2
lea ecx, [esp + 0xd2]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
movsx ecx, word [esp + 0xd2]
push ecx
mov eax, dword [esp + 0xd8]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 0xd4]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapFree
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xe2]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db57f
mov edx, dword [esp]
add edx, 0x17
push edx
push 0x6f583c
mov dx, word [esp + 0xe2]
mov ecx, dword [esp + 8]
add ecx, 3
mov eax, dword [esp + 8]
add eax, 0x2b
call fcn.006d6394
mov word [esp + 0xd8], ax
jmp 0x6db589
mov word [esp + 0xd8], 0xfbb5
push 2
lea ecx, [esp + 0xdc]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
push 2
mov ecx, dword [esp + 4]
inc ecx
push ecx
lea eax, [esp + 0xe6]
push eax
call fcn.006cb33c
add esp, 0xc
push 2
mov edx, dword [esp + 4]
add edx, 3
push edx
lea ecx, [esp + 0xe8]
push ecx
call fcn.006cb33c
add esp, 0xc
movsx eax, word [esp + 0xe0]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov dword [esp + 0xe4], eax
movsx ecx, word [esp + 0xe0]
add ecx, 2
mov eax, dword [esp + 4]
mov dword [eax + 0x28], ecx
mov word [esp + 8], cx
movsx edx, word [esp + 8]
push edx
push 0
mov eax, dword [esp + 0x14]
push eax
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x6db66a
mov eax, dword [esp]
add eax, 5
push eax
mov edx, dword [esp + 4]
add edx, 0x19
push edx
push 0x6f583c
mov cx, word [esp + 0xec]
mov eax, dword [esp + 0xf0]
mov dx, word [esp + 0xea]
call fcn.006d3b98
mov word [esp + 0xdc], ax
jmp 0x6db674
mov word [esp + 0xdc], 0xfbb5
push 2
lea ecx, [esp + 0xe0]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
movsx ecx, word [esp + 0xe0]
push ecx
mov eax, dword [esp + 0xe8]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
add ecx, 2
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 0xe4]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapFree
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xf4]
push ecx
call fcn.006cb33c
add esp, 0xc
push 2
mov eax, dword [esp + 4]
add eax, 3
push eax
lea edx, [esp + 0xf2]
push edx
call fcn.006cb33c
add esp, 0xc
mov ecx, dword [esp + 4]
cmp dword [ecx + 0x2c], 0
je 0x6db76b
mov eax, dword [esp]
add eax, 5
push eax
mov edx, dword [esp + 4]
add edx, 0x19
push edx
push 0x6f583c
mov cx, word [esp + 0xf6]
mov eax, dword [esp + 0xc]
mov dx, word [esp + 0xf8]
add eax, 0x2d
call fcn.006d3ea8
mov word [esp + 0xe8], ax
jmp 0x6db775
mov word [esp + 0xe8], 0xfbb5
push 2
lea eax, [esp + 0xec]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db7d9
mov edx, dword [esp]
add edx, 0x15
mov eax, dword [esp]
inc eax
call fcn.006d64e4
jmp 0x6db7e3
mov word [esp + 0xee], 0xfbb5
push 2
lea ecx, [esp + 0xf2]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 4
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0xfc]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db877
push 0x6f583c
mov ecx, dword [esp + 4]
mov edx, dword [esp + 4]
add ecx, 0x19
add edx, 5
mov eax, dword [esp + 0xf8]
call fcn.006d7140
mov word [esp + 0xf0], ax
jmp 0x6db881
mov word [esp + 0xf0], 0xfbb5
push 2
lea edx, [esp + 0xf4]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
add eax, 0x51
push eax
lea ecx, [esp + 0x102]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db925
mov edx, dword [esp]
add edx, 0x3d
push edx
push 0x6f583c
mov cx, word [esp + 0x102]
push ecx
mov ecx, dword [esp + 0xc]
add ecx, 0x29
mov edx, dword [esp + 0xc]
add edx, 0x15
mov eax, dword [esp + 0xc]
inc eax
call fcn.006d7230
mov word [esp + 0xf8], ax
jmp 0x6db92f
mov word [esp + 0xf8], 0xfbb5
push 2
lea eax, [esp + 0xfc]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov eax, dword [esp + 4]
mov edx, 2
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6db9b2
mov ecx, dword [esp]
inc ecx
push ecx
push 0
push 0xc
mov eax, dword [0x6f5940]
push eax
call sub.user32.dll_SendMessageA
test eax, eax
je 0x6db9a6
mov word [esp + 0xfc], 0
jmp 0x6db9bc
mov word [esp + 0xfc], 0xf7c5
jmp 0x6db9bc
mov word [esp + 0xfc], 0xfbb5
push 2
lea edx, [esp + 0x100]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 4
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dba3c
mov edx, 0x6f583c
lea eax, [esp + 0x100]
call fcn.006d5ba8
test eax, eax
jne 0x6dba30
mov word [esp + 0xfe], 0
jmp 0x6dba46
mov word [esp + 0xfe], 0xf7c5
jmp 0x6dba46
mov word [esp + 0xfe], 0xfbb5
push 2
lea ecx, [esp + 0x102]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
push edx
call fcn.006cb33c
add esp, 0xc
push 2
lea ecx, [esp + 0x104]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6ef485
lea edi, [esp + 0x758]
mov ecx, 0x41
rep movsd dword es:[edi], dword [esi]
mov eax, dword [esp + 4]
mov edx, 0x106
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
mov eax, dword [esp + 4]
inc eax
push eax
lea ecx, [esp + 0x10e]
push ecx
call fcn.006cb33c
add esp, 0xc
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dbaff
movsx eax, word [esp + 0x106]
lea edx, [esp + 0x758]
call fcn.006d4e28
mov word [esp + 0x104], ax
jmp 0x6dbb09
mov word [esp + 0x104], 0xfbb5
push 2
lea edx, [esp + 0x108]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
push 0x104
lea edx, [esp + 0x75c]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
add eax, 2
push eax
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov edx, dword [esp + 4]
mov ecx, 2
mov dword [edx + 0x28], ecx
mov word [esp + 8], cx
movsx eax, word [esp + 8]
push eax
push 0
mov edx, dword [esp + 0x14]
push edx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dbb9d
push 4
mov ecx, dword [esp + 4]
inc ecx
push ecx
push 0x6ebf94
call fcn.006cb33c
add esp, 0xc
mov word [esp + 0x108], 0
jmp 0x6dbba7
mov word [esp + 0x108], 0xfbb5
push 2
lea eax, [esp + 0x10c]
push eax
mov edx, dword [esp + 0xc]
mov ecx, dword [edx + 0x24]
push ecx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov esi, 0x6ef58a
lea edi, [esp + 0x85c]
mov ecx, 0xc
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov eax, dword [esp + 4]
mov edx, 0x32
mov dword [eax + 0x28], edx
mov word [esp + 8], dx
movsx eax, word [esp + 8]
push eax
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
mov eax, dword [esp + 4]
cmp dword [eax + 0x2c], 0
je 0x6dbc69
lea ecx, [esp + 0x890]
push ecx
call sub.kernel32.dll_GetLocalTime
movzx eax, word [esp + 0x89c]
push eax
movzx edx, word [esp + 0x89e]
push edx
movzx ecx, word [esp + 0x8a0]
push ecx
movzx eax, word [esp + 0x8a2]
push eax
movzx edx, word [esp + 0x8a2]
push edx
movzx ecx, word [esp + 0x8a4]
push ecx
push 0x6efb5b
lea eax, [esp + 0x878]
push eax
call fcn.006ce8a4
add esp, 0x20
jmp 0x6dbc73
mov word [esp + 0x10a], 0xfbb5
push 2
lea edx, [esp + 0x10e]
push edx
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
lea edx, [esp + 0x85c]
push edx
call sub.kernel32.dll_lstrlenA_1
inc eax
push eax
lea ecx, [esp + 0x860]
push ecx
mov eax, dword [esp + 0xc]
mov edx, dword [eax + 0x24]
add edx, 2
push edx
call fcn.006cb33c
add esp, 0xc
jmp 0x6dbd07
mov word [esp + 0x10c], 0xfbbc
mov ecx, dword [esp + 4]
mov eax, 2
mov dword [ecx + 0x28], eax
mov word [esp + 8], ax
movsx edx, word [esp + 8]
push edx
push 0
mov ecx, dword [esp + 0x14]
push ecx
call sub.kernel32.dll_HeapAlloc
mov edx, dword [esp + 4]
mov dword [edx + 0x24], eax
push 2
lea eax, [esp + 0x110]
push eax
mov ecx, dword [esp + 0xc]
mov eax, dword [ecx + 0x24]
push eax
call fcn.006cb33c
add esp, 0xc
add esp, 0x8a0
pop edi
pop esi
ret