Function at 0x6b19fd
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x70e0a6
mov eax, dword fs:[0]
push eax
sub esp, 0x128
push esi
push edi
push ecx
lea edi, [ebp - 0x134]
mov ecx, 0x4a
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x782e08]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x118], ecx
cmp dword [ebp - 0x118], 0x104
ja 0x6b19ab
cmp dword [ebp - 0x118], 0x104
je case.0x6b19d7.1
mov edx, dword [ebp - 0x118]
sub edx, 0xa1
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 0x5f
ja case.0x6b19d7.3
mov eax, dword [ebp - 0x118]
movzx ecx, byte [eax + 0x6b2760]
jmp dword [ecx*4 + 0x6b2758]
mov edx, dword [ebp - 0x118]
sub edx, 0x200
mov dword [ebp - 0x118], edx
cmp dword [ebp - 0x118], 8
ja case.0x6b19d7.3
mov eax, dword [ebp - 0x118]
movzx ecx, byte [eax + 0x6b27cc]
jmp dword [ecx*4 + 0x6b27c0]
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x74
call fcn.00576650
mov ecx, dword [ebp - 0x14]
add ecx, 0x1b0
call fcn.00644ce0
jmp case.0x6b19d7.3
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x74
call fcn.00576650
mov ecx, dword [ebp + 8]
cmp dword [ecx + 8], 0
jne case.0x6b19d7.3
lea ecx, [ebp - 0x20]
call fcn.004262c0
mov esi, esp
lea edx, [ebp - 0x20]
push edx
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp esi, esp
call fcn.006c7eb0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0x14]
call fcn.0043baf0
mov ecx, dword [ebp - 0x1c]
push ecx
mov edx, dword [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.006b4490
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x100
jne 0x6b1aa0
mov ecx, dword [ebp + 8]
cmp dword [ecx + 8], 9
jne 0x6b1aa0
mov edx, dword [ebp - 0x14]
cmp dword [edx + 0x398], 0
je 0x6b1aa0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov esi, esp
mov ecx, dword [edx + 0x398]
mov edx, dword [eax + 0xb0]
call edx
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b1aa0
mov eax, 1
jmp 0x6b2647
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x104
jne 0x6b1c4d
mov ecx, dword [ebp + 8]
cmp dword [ecx + 8], 0x28
je 0x6b1ac6
mov edx, dword [ebp + 8]
cmp dword [edx + 8], 0x27
jne 0x6b1c4d
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x398], 0
je 0x6b1c4d
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
cmp dword [edx + 0x60], 0
je 0x6b1c4d
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov edx, dword [ecx + 0x28]
and edx, 2
je 0x6b1c4d
mov esi, esp
push 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x184]
call edx
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b1c4d
mov esi, esp
lea eax, [ebp - 0x2c]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x2c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x35]
call fcn.00438b40
mov byte [ebp - 4], 1
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0xc0]
call fcn.0045bfe0
mov esi, esp
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x398]
mov edx, dword [eax + 0x44]
call edx
cmp esi, esp
call fcn.006c7eb0
mov esi, esp
lea eax, [ebp - 0xc8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x2c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.0051b770
add esp, 8
mov byte [ebp - 0xc1], al
lea ecx, [ebp - 0xc8]
call fcn.00406500
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x6b1c1d
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x178]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 0xcc], 1
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x35]
call fcn.00438ba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c]
call fcn.00406500
mov eax, dword [ebp - 0xcc]
jmp 0x6b2647
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0x100
jne 0x6b1cdd
mov edx, dword [ebp + 8]
cmp dword [edx + 8], 0xd
jne 0x6b1cdd
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x398], 0
je 0x6b1cdd
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x398]
call fcn.006acd10
test eax, eax
je 0x6b1cdd
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x398]
call fcn.006acd30
test eax, eax
jne 0x6b1cdd
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
call fcn.0049c410
test eax, eax
jne 0x6b1cb4
mov dword [ebp - 0x120], 1
jmp 0x6b1cbe
mov dword [ebp - 0x120], 0
mov ecx, dword [ebp - 0x120]
push ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x398]
call fcn.006abec0
mov eax, 1
jmp 0x6b2647
mov eax, dword [ebp - 0x14]
cmp dword [eax + 0x398], 0
je 0x6b263b
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
cmp dword [edx + 0x54], 0
je 0x6b263b
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
cmp dword [ecx + 0x60], 0
je 0x6b263b
push 0xfa3
push str.f:dd_vctools_vc7libs_ship_atlmfc_srcmfc_afxpropertygridctrl.cpp
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x398]
push eax
call fcn.00457b70
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
cmp dword [edx + 0xb8], 0
je 0x6b1d62
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov ecx, dword [ecx + 0xb8]
call fcn.00439cb0
test eax, eax
je 0x6b1d62
mov dword [ebp - 0x124], 1
jmp 0x6b1d6c
mov dword [ebp - 0x124], 0
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x100
jne 0x6b212d
cmp dword [ebp - 0x40], 0
je 0x6b1d98
mov ecx, dword [ebp + 8]
cmp dword [ecx + 8], 0xd
jne 0x6b212d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x128]
sub ecx, 0xd
mov dword [ebp - 0x128], ecx
cmp dword [ebp - 0x128], 0x1b
ja case.0x6b1dcd.1
mov edx, dword [ebp - 0x128]
movzx eax, byte [edx + 0x6b27e8]
jmp dword [eax*4 + 0x6b27d8]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
cmp dword [edx + 0x50], 0
je 0x6b1f09
mov esi, esp
lea eax, [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x2c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x51]
call fcn.00438b40
mov byte [ebp - 4], 3
push 0xffffffffffffffff
push 0xffffffffffffffff
lea ecx, [ebp - 0xd4]
call fcn.0045bfe0
mov esi, esp
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov ecx, dword [edx + 0x398]
mov edx, dword [eax + 0x44]
call edx
cmp esi, esp
call fcn.006c7eb0
mov esi, esp
lea eax, [ebp - 0xdc]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x2c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 0x12c], eax
mov ecx, dword [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x48]
push edx
call fcn.0051b770
add esp, 8
mov byte [ebp - 0xd5], al
lea ecx, [ebp - 0xdc]
call fcn.00406500
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x6b1ed9
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x178]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 0xe0], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x51]
call fcn.00438ba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.00406500
mov eax, dword [ebp - 0xe0]
jmp 0x6b2647
cmp dword [ebp - 0x40], 0
je 0x6b1f73
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xb4]
call fcn.0043a4a0
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov edx, dword [ebp - 0x14]
mov eax, dword [ecx]
mov esi, esp
mov ecx, dword [edx + 0x398]
mov edx, dword [eax + 0x50]
call edx
cmp esi, esp
call fcn.006c7eb0
mov esi, esp
mov eax, dword [ebp - 0x5c]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b1f73
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xb4]
call fcn.00441ea0
mov esi, esp
push 1
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18c]
call eax
cmp esi, esp
call fcn.006c7eb0
test eax, eax
jne 0x6b1fa3
mov esi, esp
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
cmp esi, esp
call fcn.006c7eb0
mov ecx, dword [ebp - 0x14]
call fcn.00441ea0
jmp 0x6b211e
mov esi, esp
push 0
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov ecx, dword [ebp - 0x14]
call fcn.00441ea0
jmp 0x6b211e
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ecx + 0x398]
add ecx, 0x98
call fcn.00474f40
cmp eax, 1
jle 0x6b204c
mov edx, dword [ebp + 8]
cmp dword [edx + 8], 0x26
je 0x6b2006
mov dword [ebp - 0x130], 1
jmp 0x6b2010
mov dword [ebp - 0x130], 0
mov esi, esp
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0xb4]
call eax
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b204a
mov eax, 1
jmp 0x6b2647
jmp 0x6b20a5
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xb4]
call fcn.0043a4a0
mov esi, esp
push eax
call dword [sym.imp.USER32.dll_IsWindow]
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b20a5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
push 0x100
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xb4]
call fcn.0043bbd0
mov eax, 1
jmp 0x6b2647
jmp 0x6b211e
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
cmp dword [ecx + 0x64], 0
jne 0x6b20e9
mov esi, esp
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x5c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov eax, 1
jmp 0x6b2647
mov esi, esp
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x1b4]
call eax
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b2117
mov eax, 1
jmp 0x6b2647
xor eax, eax
jmp 0x6b2647
mov eax, 1
jmp 0x6b2647
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0x200
jb 0x6b2637
mov edx, dword [ebp + 8]
cmp dword [edx + 4], 0x20e
ja 0x6b2637
lea ecx, [ebp - 0x68]
call fcn.004262c0
mov esi, esp
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
cmp esi, esp
call fcn.006c7eb0
lea ecx, [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0043baf0
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x398]
cmp dword [eax + 0xbc], 0
je 0x6b22af
push 0xffb
push str.f:dd_vctools_vc7libs_ship_atlmfc_srcmfc_afxpropertygridctrl.cpp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [edx + 0xbc]
push eax
call fcn.00457b70
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xbc]
call fcn.0043a4a0
test eax, eax
jne 0x6b21d5
push 0xffc
push str.f:dd_vctools_vc7libs_ship_atlmfc_srcmfc_afxpropertygridctrl.cpp
call fcn.00442350
test eax, eax
je 0x6b21d5
int3
lea ecx, [ebp - 0x80]
call fcn.00405ff0
lea ecx, [ebp - 0x80]
call fcn.00447440
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xbc]
call fcn.004398f0
lea ecx, [ebp - 0x80]
call fcn.00447440
push eax
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xbc]
call fcn.0043b530
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xe8], eax
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
push edx
mov eax, dword [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x80]
call fcn.0043fc20
test eax, eax
je 0x6b22af
push 1
lea ecx, [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x398]
mov ecx, dword [eax + 0xbc]
push ecx
mov ecx, dword [ebp - 0x14]
call fcn.0043b4b0
mov edx, dword [ebp - 0x68]
and edx, 0xffff
movzx eax, dx
mov ecx, dword [ebp - 0x64]
and ecx, 0xffff
movzx edx, cx
shl edx, 0x10
or eax, edx
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov ecx, dword [edx + 0xbc]
call fcn.0043bbd0
mov eax, 1
jmp 0x6b2647
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov edx, dword [ecx + 0xb4]
mov dword [ebp - 0x88], edx
push 0x100c
push str.f:dd_vctools_vc7libs_ship_atlmfc_srcmfc_afxpropertygridctrl.cpp
mov eax, dword [ebp - 0x88]
push eax
call fcn.00457b70
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
cmp dword [edx + 0x64], 0
jne 0x6b22fd
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
mov ecx, dword [ecx + 0xb4]
call fcn.0043ac90
lea ecx, [ebp - 0x9c]
call fcn.00405ff0
lea ecx, [ebp - 0x9c]
call fcn.00447440
push eax
mov ecx, dword [ebp - 0x88]
call fcn.004398f0
lea ecx, [ebp - 0x9c]
call fcn.00447440
push eax
mov edx, dword [ebp - 0x14]
push edx
mov ecx, dword [ebp - 0x88]
call fcn.0043b530
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0xec], ecx
mov edx, dword [ebp - 0xec]
push edx
mov eax, dword [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x9c]
call fcn.0043fc20
test eax, eax
je 0x6b23ad
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0x203
jne 0x6b23ad
mov esi, esp
mov edx, dword [ebp - 0x64]
push edx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x4c]
call eax
cmp esi, esp
call fcn.006c7eb0
test eax, eax
je 0x6b23ad
mov eax, 1
jmp 0x6b2647
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0xf8], ecx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xf4], edx
mov eax, dword [ebp - 0xf4]
push eax
mov ecx, dword [ebp - 0xf8]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.0043fc20
test eax, eax
je 0x6b2401
mov edx, dword [ebp + 8]
cmp dword [edx + 4], 0x204
jne 0x6b2401
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax + 0x398]
cmp dword [ecx + 0x64], 0
jne 0x6b2401
mov eax, 1
jmp 0x6b2647
mov edx, dword [ebp - 0x68]
mov dword [ebp - 0x100], edx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xfc]
push ecx
mov edx, dword [ebp - 0x100]
push edx
lea ecx, [ebp - 0x9c]
call fcn.0043fc20
test eax, eax
jne 0x6b25e3
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x201
je 0x6b2468
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0xa1
je 0x6b2468
mov edx, dword [ebp + 8]
cmp dword [edx + 4], 0x204
je 0x6b2468
mov eax, dword [ebp + 8]
cmp dword [eax + 4], 0x207
jne 0x6b25e3
mov ecx, dword [ebp - 0x68]
mov dword [ebp - 0x108], ecx
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [edx + 0x398]
add ecx, 0x3c
call fcn.0043fc20
test eax, eax
je 0x6b25bb
mov esi, esp
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
mov eax, dword [ebp - 0x14]
mov edx, dword [edx]
mov ecx, dword [eax + 0x398]
mov eax, dword [edx + 0x2c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 4], 4
lea ecx, [ebp - 0xb1]
call fcn.00438b40
mov byte [ebp - 4], 5
mov esi, esp
mov ecx, dword [ebp - 0x64]
push ecx
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x188]
call eax
cmp esi, esp
call fcn.006c7eb0
mov esi, esp
lea ecx, [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [edx + 0x398]
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ecx + 0x398]
mov eax, dword [edx + 0x2c]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
push ecx
lea edx, [ebp - 0xa8]
push edx
call fcn.0051b770
add esp, 8
mov byte [ebp - 0x109], al
lea ecx, [ebp - 0x110]
call fcn.00406500
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x6b2585
mov esi, esp
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx + 0x398]
push edx
mov eax, dword [ebp - 0x14]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x178]
call eax
cmp esi, esp
call fcn.006c7eb0
mov dword [ebp - 0x114], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb1]
call fcn.00438ba0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa8]
call fcn.00406500
mov eax, dword [ebp - 0x114]
jmp 0x6b2647
mov esi, esp
push 1
mov ecx, dword [ebp - 0x14]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x14]
mov eax, dword [edx + 0x18c]
call eax
cmp esi, esp
call fcn.006c7eb0
test eax, eax
jne 0x6b25e1
mov eax, 1
jmp 0x6b2647
jmp 0x6b2635
push 1
lea ecx, [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x88]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.0043b4b0
mov eax, dword [ebp - 0x68]
and eax, 0xffff
movzx ecx, ax
mov edx, dword [ebp - 0x64]
and edx, 0xffff
movzx eax, dx
shl eax, 0x10
or ecx, eax
push ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 8]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [ebp - 0x88]
call fcn.0043bbd0
mov eax, 1
jmp 0x6b2647
jmp 0x6b263b
xor eax, eax
jmp 0x6b2647
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x14]
call fcn.004513d0
push edx
mov ecx, ebp
push eax
lea edx, [0x6b2684]
call fcn.006c7e50
pop eax
pop edx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.006c31f0
add esp, 0x134
cmp ebp, esp
call fcn.006c7eb0
mov esp, ebp
pop ebp
ret 4