Function at 0x672fa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x94]
cmp eax, dword [ecx + 8]
jbe 0x673f22
sub esp, 0x114
lea eax, [0x79c7e0]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xc8], eax
mov ecx, dword [0xa08230]
test ecx, ecx
jne 0x673ec9
mov ecx, dword [esp + 0x11c]
mov dword [eax], ecx
mov edx, dword [ecx + 8]
test edx, edx
je 0x673e4e
mov eax, dword [esp + 0x118]
mov dword [esp], eax
call fcn.00671ef0
lea esi, [esp + 4]
lea edi, [esp + 0x100]
call fcn.0044de9e
lea eax, [0x725660]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xc0], eax
lea ecx, [0x77ba00]
mov dword [esp], ecx
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xbc], eax
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x118]
mov dword [esp], edx
call fcn.00673f30
mov eax, dword [esp + 8]
mov dword [esp + 0x80], eax
lea ecx, [0x73fdc0]
mov dword [esp], ecx
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xc4], eax
lea ecx, [0x771800]
mov dword [esp], ecx
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xb8], eax
lea ecx, [0x69fb80]
mov dword [eax], ecx
mov ecx, dword [0xa08230]
lea edx, [eax + 4]
lea ebx, [eax + 8]
lea ebp, [eax + 0xc]
lea esi, [eax + 0x10]
test ecx, ecx
jne 0x673db0
mov ecx, dword [esp + 0xc4]
mov dword [eax + 4], ecx
mov edx, dword [esp + 0xc8]
mov dword [eax + 8], edx
mov ebx, dword [esp + 0xc0]
mov dword [eax + 0xc], ebx
mov ebp, dword [esp + 0xbc]
mov dword [eax + 0x10], ebp
lea edi, [esp + 8]
mov dword [esp + 0xb4], edi
xor esi, esi
mov dword [esp + 0x48], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x40], ecx
xor ecx, ecx
mov byte [esp + 0x2f], cl
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x40]
jmp 0x673168
mov dword [esp + 0x5c], eax
mov dword [esp + 0x30], ecx
mov byte [esp + 0x2f], bl
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.006900e0
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xbc]
mov edi, dword [esp + 0xb4]
mov esi, dword [esp + 0x30]
mov eax, dword [ebx + 4]
test eax, eax
jg 0x673515
mov eax, dword [edx]
mov dword [esp + 0xb0], eax
mov esi, ecx
mov ecx, dword [ebx + 8]
mov ebp, dword [ebx]
mov edx, dword [ebx + 4]
lea eax, [edx + 1]
cmp eax, ecx
jg 0x673493
lea eax, [edx + 1]
mov dword [ebx + 4], eax
mov eax, dword [0xa08230]
lea ecx, [ebp + edx*4]
test eax, eax
jne 0x673474
mov eax, dword [esp + 0xb0]
mov dword [ebp + edx*4], eax
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
lea esi, [esp + 0x100]
call fcn.0044de9e
call fcn.00671d80
mov eax, dword [esp + 0x28]
mov dword [esp + 0x74], eax
mov ecx, dword [0xa08230]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
mov dword [esp + 0x70], ebp
test ecx, ecx
jne 0x673437
mov ecx, dword [esp + 0xbc]
mov dword [ecx], edx
test ebp, ebp
jne 0x67328e
mov eax, dword [esp + 0xc8]
mov ebx, dword [eax]
mov ebp, dword [ebx + 4]
mov ebx, dword [ebx]
mov esi, dword [esp + 0xc0]
mov edi, dword [esi + 4]
mov esi, dword [esi]
test edi, edi
jbe 0x673eef
mov eax, dword [esi]
mov dword [esp + 0xc], eax
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
call fcn.00672e30
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
movzx edx, byte [esp + 0x18]
movzx ebx, byte [esp + 0x19]
test dl, dl
jne 0x67311d
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
add esp, 0x114
ret
mov ecx, dword [esp + 0xc4]
mov byte [ecx], 1
lea edi, [esp + 0xec]
lea esi, [esp + 0x100]
call fcn.0044de9e
mov ecx, dword [esp + 0xec]
mov edx, ebx
mov ebx, dword [esp + 0xf0]
mov esi, ebx
shr ebx, 0x1f
shl ebx, 0x1f
test ebx, ebx
je 0x673424
mov ebx, ecx
shr ecx, 0x1f
shl esi, 1
or esi, ecx
mov ecx, ebx
shl ebx, 1
shr ebx, 0x1f
mov edi, esi
shl esi, 1
or esi, ebx
mov ebx, esi
add esi, 0xd7b17f80
shr edi, 0x1f
add ebx, 0xd7b17f80
adc edi, 0xd
test esi, esi
sete bl
test edi, edi
xchg esi, ebx
sete bl
xchg esi, ebx
and esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
je 0x67341d
test ecx, 0x3fffffff
sete cl
test cl, cl
je 0x673356
mov dword [esp], ebp
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x114
ret
mov eax, dword [edx]
call eax
movzx eax, byte [esp]
test al, al
jne 0x67336c
mov eax, dword [esp + 0x74]
mov ebp, dword [esp + 0x70]
jmp 0x67331c
mov eax, dword [esp + 0x70]
mov eax, dword [eax + 0x10]
mov ecx, dword [esp + 0x74]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0xac], ecx
lea edx, [0x763560]
mov dword [esp], edx
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xa8], eax
mov dword [esp], 0
mov ecx, dword [esp + 0xac]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x3c]
mov dword [esp + 8], ecx
lea ecx, [0x7c85dc]
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0x31
call fcn.0043cb30
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0xa8]
mov dword [edx + 4], eax
mov eax, dword [0xa08230]
test eax, eax
jne 0x673408
mov dword [edx], ecx
mov byte [edx + 8], 1
lea ebp, [0x800a80]
mov eax, edx
jmp 0x67331c
mov dword [esp], edx
mov dword [esp + 4], ecx
call fcn.0040f250
mov edx, dword [esp + 0xa8]
jmp 0x6733f7
xor ecx, ecx
jmp 0x673318
mov esi, dword [esp + 0xf4]
mov edi, dword [esp + 0xf8]
jmp 0x6732f5
mov dword [esp + 0xa4], edx
mov dword [esp + 0x7c], ebx
mov eax, dword [esp + 0xbc]
mov dword [esp], eax
mov dword [esp + 4], edx
call fcn.0040f250
mov eax, dword [esp + 0x74]
mov ecx, dword [esp + 0xbc]
mov edx, dword [esp + 0xa4]
mov ebx, dword [esp + 0x7c]
mov ebp, dword [esp + 0x70]
jmp 0x67320b
mov dword [esp], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], eax
call fcn.0040f250
mov edi, dword [esp + 0xb4]
jmp 0x6731b4
lea ebx, [0x79c7e0]
mov dword [esp], ebx
mov dword [esp + 4], ebp
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.00439c80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov ebx, dword [esp + 0xc0]
mov dword [ebx + 8], edx
mov edx, dword [0xa08230]
test edx, edx
jne 0x6734ea
mov dword [ebx], eax
mov esi, dword [esp + 0xc4]
mov edi, dword [esp + 0xb4]
mov edx, ecx
mov ebp, eax
jmp 0x673191
mov dword [esp + 0xa0], eax
mov dword [esp + 0x3c], ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x3c]
mov ebx, dword [esp + 0xc0]
jmp 0x6734d3
mov dword [esp + 0x30], esi
mov eax, dword [ebp]
mov eax, dword [eax + 0x1c]
mov dword [esp], eax
lea eax, [0x7b66b4]
mov dword [esp + 4], eax
mov dword [esp + 8], 8
call fcn.0068b5a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x673ce0
mov dword [esp + 0x60], eax
mov dword [esp + 0x34], ecx
mov edx, dword [esp + 0xc8]
mov ebx, dword [edx]
mov ebx, dword [ebx + 8]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0060b590
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test edx, edx
jne 0x673bb8
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx]
mov ebx, dword [edx + 0x48]
mov ebp, dword [edx + 0x44]
test ebx, ebx
je 0x673baf
mov edx, dword [edx + 8]
mov esi, dword [edx + 0x18]
mov edx, dword [edx + 0x14]
cmp ebx, esi
je 0x673b89
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
call fcn.00608d40
mov eax, dword [esp + 8]
test eax, eax
je 0x673b80
mov eax, dword [eax + 4]
test eax, eax
je 0x673b6c
xor eax, eax
xor ecx, ecx
mov edx, dword [esp + 0xc0]
mov ebx, dword [edx + 4]
mov ebp, dword [edx]
test ebx, ebx
jbe 0x673f1b
mov dword [esp + 0x68], ecx
mov dword [esp + 0x38], eax
mov eax, dword [ebp]
mov dword [esp + 0x64], eax
call fcn.004062a0
mov eax, dword [esp]
mov dword [esp + 0x9c], eax
lea ecx, [0x796480]
mov dword [esp], ecx
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
mov ecx, dword [0xa08230]
test ecx, ecx
jne 0x673b50
mov ecx, dword [esp + 0x5c]
mov dword [eax], ecx
mov ecx, dword [esp + 0xbc]
mov ebx, dword [ecx]
mov ebp, dword [0xa08230]
lea esi, [eax + 0x74]
lea edi, [eax + 8]
mov edx, ecx
lea ecx, [eax + 0x1c]
test ebp, ebp
jne 0x673af2
mov dword [eax + 0x74], ebx
mov ecx, dword [esp + 0x58]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x9c]
mov dword [eax + 0x1c], ecx
mov ecx, dword [esp + 0x38]
mov dword [eax + 0x48], ecx
mov ecx, dword [0xa08230]
lea ebx, [eax + 0x44]
test ecx, ecx
jne 0x673acf
mov ecx, dword [esp + 0x68]
mov dword [eax + 0x44], ecx
mov ecx, dword [esp + 0x64]
mov ebx, dword [ecx + 0x70]
mov ebp, dword [0xa08230]
lea esi, [eax + 0x70]
test ebp, ebp
jne 0x673aac
mov dword [eax + 0x70], ebx
mov ebx, dword [ecx + 0x78]
mov ebp, dword [ecx + 0x7c]
mov dword [eax + 0x78], ebx
mov ebx, dword [0xa08230]
lea esi, [eax + 0x7c]
test ebx, ebx
jne 0x673a6f
mov dword [eax + 0x7c], ebp
mov ebx, dword [esp + 0xc8]
mov dword [ebx], eax
movzx eax, byte [esp + 0x2f]
test al, al
je 0x6736ec
mov eax, dword [ecx + 0x28]
test eax, eax
jne 0x6739a4
mov eax, dword [ebx]
mov dword [esp], eax
mov edx, dword [esp + 0x80]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 4]
mov ebx, dword [eax]
lea ebp, [ecx - 1]
cmp ebp, ecx
jae 0x673f14
mov eax, dword [ebx + ecx*4 - 4]
mov ecx, dword [esp + 0xc8]
mov edx, dword [ecx]
mov eax, dword [eax + 8]
mov edx, dword [edx + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00671c70
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
test eax, eax
jne 0x673971
mov eax, dword [esp + 0xc0]
mov ecx, dword [eax + 8]
mov edx, dword [eax + 4]
mov ebx, dword [eax]
mov ebp, dword [esp + 0xc8]
mov esi, dword [ebp]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 0x10], ecx
mov ecx, dword [esp + 0x118]
mov dword [esp], ecx
mov dword [esp + 4], esi
call fcn.00672dc0
mov eax, dword [esp + 0x18]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x6c], ecx
mov edx, dword [0x9f4058]
cmp ecx, edx
je 0x673918
mov edx, dword [esp + 0xbc]
mov ebx, dword [edx]
mov ebp, dword [ebx + 0x2c]
mov esi, dword [ebx + 0x28]
cmp esi, 0xffffffff
xchg edi, ebx
sete bl
xchg edi, ebx
cmp ebp, 0xffffffff
sete al
and eax, edi
test al, al
je 0x6738ea
mov eax, dword [ebx + 0x24]
mov ecx, dword [ebx + 0x20]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
lea eax, [0x753a20]
mov dword [esp], eax
call fcn.0040c6a0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov eax, dword [0x9ee60c]
mov ecx, dword [0x9ee608]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 0x10], 0x800
mov dword [esp + 0x14], 0
call fcn.004667d0
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x20]
mov ecx, dword [ecx + 0x24]
mov edx, dword [edx + 0x10]
mov dword [esp], ecx
call edx
mov eax, dword [esp + 0x6c]
test eax, eax
jne 0x67385c
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xbc]
mov edi, dword [esp + 0xb4]
jmp 0x673173
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
lea ebx, [0x800b40]
cmp ebx, ecx
jne 0x673ef6
mov edx, dword [esp + 0x34]
mov dword [eax + 0xc], edx
mov edx, dword [0xa08230]
lea ebx, [eax + 8]
test edx, edx
jne 0x6738c8
mov edx, dword [esp + 0x60]
mov dword [eax + 8], edx
mov edx, dword [esp + 0xbc]
mov edx, dword [edx]
mov dword [esp + 0x120], edx
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x114
ret
mov dword [esp + 0x54], eax
mov dword [esp + 0x50], ecx
mov dword [esp], ebx
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x50]
jmp 0x6738a3
cmp esi, 0x800
setbe al
test ebp, ebp
xchg esi, ebx
sete bl
xchg esi, ebx
and eax, esi
test ebp, ebp
xchg ebp, ebx
setl bl
xchg ebp, ebx
or ebp, eax
xchg ebp, eax
test al, al
xchg ebp, eax
jne 0x6737c1
jmp 0x673815
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [0x9f405c]
mov dword [esp + 8], edx
call fcn.00402150
movzx eax, byte [esp + 0xc]
test al, al
jne 0x673944
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x6c]
jmp 0x673798
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], 0
mov dword [esp + 0x128], 0
add esp, 0x114
ret
mov edx, dword [esp + 0xc8]
mov ebx, dword [edx]
mov ebx, dword [ebx + 0x1c]
mov dword [esp], ebx
lea ebx, [0x7b6292]
mov dword [esp + 4], ebx
mov dword [esp + 8], 7
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call fcn.0068b550
jmp 0x673742
mov ecx, dword [eax]
mov edx, eax
call ecx
mov eax, dword [esp + 0xc8]
mov ecx, dword [eax]
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x78], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0x6c], ebp
mov esi, dword [esp + 4]
mov edi, dword [esp]
mov dword [ecx + 0x20], edi
mov edi, dword [0xa08230]
mov edx, ebx
lea ebx, [ecx + 0x24]
test edi, edi
jne 0x673a4f
mov dword [ecx + 0x24], esi
test ebp, ebp
jne 0x6739fc
mov ecx, dword [eax]
mov ebp, dword [esp + 0x64]
mov esi, dword [ebp + 0x2c]
mov ebp, dword [ebp + 0x30]
mov dword [ecx + 0x2c], esi
mov dword [ecx + 0x30], ebp
mov ebx, eax
jmp 0x6736ec
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.006912c0
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x114
ret
mov dword [esp], ebx
mov dword [esp + 4], esi
call fcn.0040f250
mov eax, dword [esp + 0xc8]
mov edx, dword [esp + 0x78]
mov ebp, dword [esp + 0x6c]
jmp 0x6739df
mov dword [esp], esi
mov dword [esp + 4], ebp
call fcn.0040f250
mov eax, dword [esp + 0xc8]
mov dword [esp], eax
mov ecx, dword [esp + 0xb0]
mov dword [esp + 4], ecx
call fcn.0040f250
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xbc]
mov ebx, dword [esp + 0xc8]
jmp 0x6736d8
mov dword [esp], esi
mov dword [esp + 4], ebx
call fcn.0040f250
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0x64]
mov edx, dword [esp + 0xbc]
jmp 0x6736b2
mov dword [esp], ebx
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xbc]
jmp 0x673697
mov dword [esp + 0x98], edi
mov dword [esp + 0x94], ecx
mov dword [esp], esi
mov dword [esp + 4], ebx
call fcn.0040f250
mov eax, dword [esp + 0x98]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x94]
mov dword [esp], eax
mov eax, dword [esp + 0x9c]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xb0]
mov edx, dword [esp + 0xbc]
jmp 0x673678
mov dword [esp], eax
mov ecx, dword [esp + 0x5c]
mov dword [esp + 4], ecx
call fcn.0040f250
mov eax, dword [esp + 0xb0]
jmp 0x673642
mov edx, dword [esp + 0xc8]
mov ebx, dword [edx]
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebx + 0x44]
jmp 0x6735dc
xor eax, eax
xor ecx, ecx
jmp 0x6735dc
mov dword [esp], ebp
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
call fcn.0044d600
movzx eax, byte [esp + 0xc]
test al, al
je 0x6735ad
xor ecx, ecx
xor eax, eax
jmp 0x6735dc
xor ecx, ecx
xor eax, eax
jmp 0x6735dc
mov dword [esp + 0x78], ecx
mov dword [esp + 0x6c], edx
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
mov dword [esp], eax
call fcn.006912c0
mov eax, dword [esp + 0x60]
mov dword [esp + 0xcc], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x673bf2
mov eax, dword [eax + 4]
mov dword [esp + 0xac], eax
mov dword [esp + 0xdc], 0
mov dword [esp + 0xe0], 0
mov dword [esp + 0xe4], 0
mov dword [esp + 0xe8], 0
lea ecx, [0x744900]
mov dword [esp], ecx
lea ecx, [esp + 0xcc]
mov dword [esp + 4], ecx
call fcn.0040c190
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x78]
mov dword [esp + 0xe8], eax
lea eax, [0x7c4d94]
mov dword [esp], eax
mov dword [esp + 4], 0x26
lea eax, [esp + 0xdc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004b9c90
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x114
ret
mov eax, dword [esp + 0xbc]
mov ecx, dword [eax]
mov dword [esp], ecx
call fcn.006912c0
mov dword [esp + 0xd4], 0
mov dword [esp + 0xd8], 0
mov eax, dword [esp + 0xbc]
mov eax, dword [eax]
test byte [eax], al
add eax, 8
mov dword [esp + 4], eax
lea eax, [0x744080]
mov dword [esp], eax
call fcn.0040c0a0
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], ecx
lea eax, [0x7c39fa]
mov dword [esp], eax
mov dword [esp + 4], 0x23
lea eax, [esp + 0xd4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004b9c90
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov edx, dword [esp + 0xb8]
mov eax, dword [edx]
call eax
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 8]
mov dword [esp + 0x120], 0
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x114
ret
mov dword [esp + 0x90], ebx
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x88], esi
mov dword [esp], edx
mov eax, dword [esp + 0xc4]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x90]
mov dword [esp], eax
mov eax, dword [esp + 0xc8]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x8c]
mov dword [esp], eax
mov eax, dword [esp + 0xc0]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0x88]
mov dword [esp], eax
mov eax, dword [esp + 0xbc]
mov dword [esp + 4], eax
call fcn.0040f250
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xc4]
mov edx, dword [esp + 0xc8]
mov ebx, dword [esp + 0xc0]
mov ebp, dword [esp + 0xbc]
jmp 0x6730f2
mov dword [esp], ecx
call fcn.006900e0
lea eax, [0x757820]
mov dword [esp], eax
call fcn.0040e9e0
mov eax, dword [esp + 4]
mov dword [eax + 4], 0x15
mov ecx, dword [0xa08230]
test ecx, ecx
jne 0x673ea7
lea ecx, [0x7bc9e5]
mov dword [eax], ecx
mov dword [esp + 0x120], 0
lea ecx, [0x8006c0]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], eax
add esp, 0x114
ret
mov dword [esp + 0x84], eax
mov dword [esp], eax
lea ecx, [0x7bc9e5]
mov dword [esp + 4], ecx
call fcn.0040f250
mov eax, dword [esp + 0x84]
jmp 0x673e81
mov dword [esp], eax
mov ecx, dword [esp + 0x11c]
mov dword [esp + 4], ecx
call fcn.0040f250
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0x11c]
jmp 0x672ff3
call fcn.00426960
ud2
mov dword [esp], ecx
lea eax, [0x76b860]
mov dword [esp + 4], eax
lea eax, [0x7529a0]
mov dword [esp + 8], eax
call fcn.0040bf70
ud2
call fcn.00426960
ud2
call fcn.00426960
ud2
call fcn.0044be50
jmp fcn.00672fa0