Function at 0x674220
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x77bd13
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
push ebx
push ebp
push esi
push edi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
mov edi, dword [esp + 0xd8]
xor ebx, ebx
push ebx
xor eax, eax
mov ebp, 7
push 0x7aa76c
lea ecx, [esp + 0x7c]
mov dword [esp + 0x94], ebp
mov dword [esp + 0x90], ebx
mov word [esp + 0x80], ax
call fcn.00403a80
mov dword [esp + 0xd0], ebx
xor ecx, ecx
push ebx
mov word [esp + 0x60], cx
push 0x7aa770
lea ecx, [esp + 0x60]
mov dword [esp + 0x78], ebp
mov dword [esp + 0x74], ebx
call fcn.00403a80
mov byte [esp + 0xd0], 1
push ebp
xor edx, edx
push 0x7aa774
lea ecx, [esp + 0x98]
mov dword [esp + 0xb0], ebp
mov dword [esp + 0xac], ebx
mov word [esp + 0x9c], dx
call fcn.00403a80
lea eax, [esp + 0x90]
push eax
mov byte [esp + 0xd4], 2
mov eax, dword [0x88b148]
push 0x133
add eax, 0x7ec
lea esi, [esp + 0xb4]
call fcn.004711e0
cmp byte [esp + 0xdc], bl
push ebx
push eax
setne cl
movzx edx, cl
push edx
push 0x15
mov byte [esp + 0xe0], 3
mov eax, dword [0x881ea8]
push ebx
push eax
push edi
lea ecx, [esp + 0x90]
lea edx, [esp + 0x74]
call fcn.007480c0
mov esi, 8
cmp dword [esp + 0xc4], esi
jb 0x674354
mov ecx, dword [esp + 0xb0]
push ecx
call fcn.006441c7
add esp, 4
xor edx, edx
mov dword [esp + 0xc4], ebp
mov dword [esp + 0xc0], ebx
mov word [esp + 0xb0], dx
cmp dword [esp + 0xa8], esi
jb 0x674385
mov eax, dword [esp + 0x94]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov dword [esp + 0xa8], ebp
mov dword [esp + 0xa4], ebx
mov word [esp + 0x94], cx
cmp dword [esp + 0x70], esi
jb 0x6743b0
mov edx, dword [esp + 0x5c]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov dword [esp + 0x70], ebp
mov dword [esp + 0x6c], ebx
mov word [esp + 0x5c], ax
mov byte [esp + 0xd0], 8
cmp dword [esp + 0x8c], esi
jb 0x6743dd
mov ecx, dword [esp + 0x78]
push ecx
call fcn.006441c7
add esp, 4
mov ecx, dword [0x88b12c]
mov dword [edi + method.Sexy::PopAnimListener.virtual_28], vtable.Sexy::SliderListener.0
xor edx, edx
mov dword [edi + method.Sexy::Bej3DialogButton.virtual_228], vtable.Sexy::CheckboxListener.0
mov dword [esp + 0x8c], ebp
lea ebp, [edi + 0xb8]
add ecx, 0x9e0
mov dword [esp + 0x88], ebx
mov word [esp + 0x78], dx
mov dword [edi], vtable.Sexy::OptionsDialog.0
mov dword [ebp], vtable.Sexy::OptionsDialog.1.0
mov dword [edi + method.Sexy::OptionsDialog.2.virtual_0], vtable.Sexy::OptionsDialog.2.0
mov dword [edi + method.Sexy::OptionsDialog.3.virtual_0], vtable.Sexy::OptionsDialog.3.0
cmp byte [esp + 0xdc], dl
je 0x67444c
mov edx, dword [ecx]
imul edx, edx, 0x2c6
jmp 0x674454
mov eax, dword [ecx]
lea edx, [eax + eax*4]
shl edx, 7
mov ecx, dword [ecx]
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul edx, edx, 0x3e8
push eax
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, ecx
imul ecx, ecx, 0x15e
imul edx, edx, 0xfa
push eax
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push ecx
mov ecx, edi
call fcn.0057f540
cmp byte [esp + 0xdc], 0
mov dword [edi + 0x244], ebx
je 0x6748d6
mov esi, dword [0x88b12c]
mov eax, dword [esi + 0xbe0]
cmp eax, ebx
je 0x6745fe
cmp dword [eax + 0x2b44], 0xffffffff
je 0x6745fe
mov ecx, dword [esi + 0x9e0]
imul ecx, ecx, 0x154
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
push ebp
add eax, edx
push eax
push 2
xor ecx, ecx
mov ebx, edi
call fcn.00747f90
push str.HOW_TO_PLAY
lea ecx, [esp + 0x40]
mov dword [edi + 0x244], eax
call fcn.00403550
lea edx, [esp + 0x3c]
mov byte [esp + 0xd0], 9
mov eax, dword [0x88b148]
push edx
push 0x134
add eax, 0x7ec
lea esi, [esp + 0x28]
call fcn.004711e0
push 0xffffffffffffffff
mov byte [esp + 0xd4], 0xa
mov ecx, dword [edi + 0x244]
push 0
add ecx, 0xbc
push eax
call fcn.00401880
mov ecx, esi
call fcn.00406fb0
lea ecx, [esp + 0x3c]
mov byte [esp + 0xd0], 8
call fcn.00406fb0
mov edx, dword [0x88b12c]
mov edx, dword [edx + 0x9e0]
mov ecx, dword [edi + 0x244]
imul edx, edx, 0xaa
mov eax, dword [edi + 0x4c]
sub eax, dword [ecx + 0x4c]
mov esi, dword [ecx]
sub eax, dword [edi + 0x15c]
push eax
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ebx, eax
mov eax, dword [edi + 0x48]
cdq
sub eax, edx
mov edx, dword [esi + 0xa4]
sar eax, 1
sub eax, ebx
push eax
call edx
mov esi, dword [0x88b12c]
mov eax, dword [esi + 0x9e0]
lea ecx, [eax + eax*4]
shl ecx, 4
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
add dword [edi + 0x4c], eax
xor ebx, ebx
mov ecx, dword [esi + 0x9e0]
imul ecx, ecx, 0x12c
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
push ebp
add eax, edx
push eax
push ebx
xor ecx, ecx
mov ebx, edi
call fcn.00747f90
mov ecx, dword [edi + 0x4c]
mov edx, dword [0x88b12c]
mov ebx, eax
sub ecx, dword [ebx + 0x4c]
mov eax, dword [edx + 0x9e0]
sub ecx, dword [edi + 0x15c]
mov esi, dword [ebx]
push ecx
lea ecx, [eax + eax*4]
add ecx, ecx
mov eax, 0x1b4e81b5
imul ecx
mov eax, dword [edi + 0x48]
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
cdq
sub eax, edx
mov edx, dword [esi + 0xa4]
sar eax, 1
add ecx, eax
push ecx
mov ecx, ebx
call edx
push 4
xor eax, eax
push 0x7aa79c
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], 0
mov word [esp + 0x2c], ax
call fcn.00403a80
lea ecx, [esp + 0x20]
mov byte [esp + 0xd0], 0xb
mov eax, dword [0x88b148]
push ecx
push 0x135
add eax, 0x7ec
lea esi, [esp + 0x44]
call fcn.004711e0
push 0xffffffffffffffff
xor esi, esi
push esi
push eax
lea ecx, [ebx + 0xbc]
mov byte [esp + 0xdc], 0xc
call fcn.00401880
mov ebx, 8
cmp dword [esp + 0x54], ebx
jb 0x6746ec
mov edx, dword [esp + 0x40]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov byte [esp + 0xd0], bl
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], esi
mov word [esp + 0x40], ax
cmp dword [esp + 0x38], ebx
jb 0x674719
mov ecx, dword [esp + 0x24]
push ecx
call fcn.006441c7
add esp, 4
mov eax, dword [0x88b12c]
xor edx, edx
mov word [esp + 0x24], dx
mov dword [esp + 0x38], 7
mov dword [esp + 0x34], esi
mov ecx, dword [eax + 0x9e0]
imul ecx, ecx, 0x12c
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
push ebp
add eax, edx
push eax
push 1
xor ecx, ecx
mov ebx, edi
call fcn.00747f90
mov ecx, dword [edi + 0x4c]
mov edx, dword [0x88b12c]
mov ebx, eax
sub ecx, dword [ebx + 0x4c]
mov esi, dword [ebx]
sub ecx, dword [edi + 0x15c]
mov eax, 0x1b4e81b5
push ecx
mov ecx, dword [edx + 0x9e0]
imul ecx, ecx, 0x136
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, eax
mov eax, dword [edi + 0x48]
cdq
sub eax, edx
mov edx, dword [esi + 0xa4]
sar eax, 1
sub eax, ecx
push eax
mov ecx, ebx
call edx
mov eax, dword [0x88b12c]
xor ebp, ebp
lea ecx, [esp + 0x20]
cmp dword [eax + 0xbd0], ebp
je 0x674849
push str.QUEST_MENU
call fcn.00403550
lea ecx, [esp + 0x20]
mov byte [esp + 0xd0], 0xd
mov eax, dword [0x88b148]
push ecx
push 0x136
add eax, 0x7ec
lea esi, [esp + 0x44]
call fcn.004711e0
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [ebx + 0xbc]
mov byte [esp + 0xdc], 0xe
call fcn.00401880
mov ebx, 8
cmp dword [esp + 0x54], ebx
jb 0x67481b
mov edx, dword [esp + 0x40]
push edx
call fcn.006441c7
add esp, 4
xor eax, eax
mov byte [esp + 0xd0], bl
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebp
mov word [esp + 0x40], ax
cmp dword [esp + 0x38], ebx
jb 0x6748d4
mov ecx, dword [esp + 0x24]
push ecx
jmp 0x6748cc
push 0x7aa7c0
call fcn.00403550
lea edx, [esp + 0x20]
mov byte [esp + 0xd0], 0xf
mov eax, dword [0x88b148]
push edx
push 0x137
add eax, 0x7ec
lea esi, [esp + 0x44]
call fcn.004711e0
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [ebx + 0xbc]
mov byte [esp + 0xdc], 0x10
call fcn.00401880
mov ebx, 8
cmp dword [esp + 0x54], ebx
jb 0x6748a7
mov eax, dword [esp + 0x40]
push eax
call fcn.006441c7
add esp, 4
xor ecx, ecx
mov byte [esp + 0xd0], bl
mov dword [esp + 0x54], 7
mov dword [esp + 0x50], ebp
mov word [esp + 0x40], cx
cmp dword [esp + 0x38], ebx
jb 0x6748d4
mov edx, dword [esp + 0x24]
push edx
call fcn.006441c7
add esp, 4
xor ebx, ebx
push 0x14
mov ebp, 0xf
push str.OPTIONS_DLG_SLIDER_X
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], ebx
mov byte [esp + 0x2c], 0
call fcn.004016e0
mov byte [esp + 0xd0], 0x11
mov ecx, dword [0x88b148]
push 0xc8
lea eax, [esp + 0x24]
call fcn.0046a0e0
mov ecx, dword [0x88b12c]
mov ecx, dword [ecx + 0x9e0]
imul ecx, eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov eax, edx
shr eax, 0x1f
add eax, edx
mov esi, 0x10
mov byte [esp + 0xd0], 8
mov dword [esp + 0x18], eax
cmp dword [esp + 0x38], esi
jb 0x674958
mov edx, dword [esp + 0x24]
push edx
call fcn.006441c7
add esp, 4
mov eax, dword [0x88b12c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], ebp
mov byte [esp + 0x24], 0
mov ecx, dword [eax + 0x9e0]
imul ecx, ecx, 0x82
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ebx, edx
push 0x18
shr ebx, 0x1f
push str.OPTIONS_DLG_SLIDER_WIDTH
lea ecx, [esp + 0x28]
add ebx, edx
mov dword [esp + 0x40], ebp
mov dword [esp + 0x3c], 0
mov byte [esp + 0x2c], 0
call fcn.004016e0
mov byte [esp + 0xd0], 0x12
mov ecx, dword [0x88b148]
push 0x2bc
lea eax, [esp + 0x24]
call fcn.0046a0e0
mov ecx, dword [0x88b12c]
mov ecx, dword [ecx + 0x9e0]
imul ecx, eax
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov byte [esp + 0xd0], 8
cmp dword [esp + 0x38], esi
jb 0x6749ff
mov edx, dword [esp + 0x24]
push edx
call fcn.006441c7
add esp, 4
push 0xe8
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x13
test eax, eax
je 0x674a37
lea ecx, [edi + 0x220]
push ecx
mov ecx, dword [0x881348]
push 0
push ecx
mov esi, eax
call fcn.0059d730
mov esi, eax
jmp 0x674a39
xor esi, esi
mov byte [esp + 0xd0], 8
mov eax, dword [0x8827a0]
mov edx, dword [esi]
call fcn.0045a0f0
mov edx, dword [edx + 0xa0]
push eax
mov eax, dword [esp + 0x1c]
push ebp
push ebx
push eax
mov ecx, esi
call edx
push esi
mov ecx, edi
mov dword [edi + 0x248], esi
call fcn.0046fa10
mov eax, dword [0x88b12c]
mov eax, dword [eax + 0x9e0]
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push 0xe8
add ebx, ecx
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x14
test eax, eax
je 0x674ace
mov edx, dword [0x881348]
lea ecx, [edi + 0x220]
push ecx
push 1
push edx
mov esi, eax
call fcn.0059d730
mov esi, eax
jmp 0x674ad0
xor esi, esi
mov byte [esp + 0xd0], 8
mov eax, dword [0x8827a0]
mov edx, dword [esi]
call fcn.0045a0f0
mov edx, dword [edx + 0xa0]
push eax
mov eax, dword [esp + 0x1c]
push ebp
push ebx
push eax
mov ecx, esi
call edx
push esi
mov ecx, edi
mov dword [edi + 0x24c], esi
call fcn.0046fa10
mov eax, dword [0x88b12c]
mov eax, dword [eax + 0x9e0]
mov ecx, eax
shl ecx, 4
sub ecx, eax
add ecx, ecx
add ecx, ecx
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push 0xe8
add ebx, ecx
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x15
test eax, eax
je 0x674b65
mov edx, dword [0x881348]
lea ecx, [edi + 0x220]
push ecx
push 2
push edx
mov esi, eax
call fcn.0059d730
mov esi, eax
jmp 0x674b67
xor esi, esi
mov byte [esp + 0xd0], 8
mov eax, dword [0x8827a0]
mov edx, dword [esi]
call fcn.0045a0f0
mov edx, dword [edx + 0xa0]
push eax
mov eax, dword [esp + 0x1c]
push ebp
push ebx
push eax
mov ecx, esi
call edx
push esi
mov ecx, edi
mov dword [edi + 0x250], esi
call fcn.0046fa10
mov eax, dword [0x88b12c]
mov ecx, dword [eax + 0x9e0]
mov edx, ecx
imul ecx, ecx, 0x186
imul edx, edx, 0x20d
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
push 0x11c
add ebx, edx
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x16
test eax, eax
je 0x674c15
mov edx, dword [0x88152c]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x883028]
push 8
push ecx
push edx
mov esi, eax
call fcn.0059c550
mov esi, eax
jmp 0x674c17
xor esi, esi
mov byte [esp + 0xd0], 8
mov ecx, dword [0x883028]
mov edx, dword [esi]
mov eax, ecx
call fcn.0045a0f0
push eax
mov eax, ecx
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
mov ecx, esi
call eax
mov ecx, dword [0x88b12c]
cmp dword [ecx + 0x9e0], 0x258
push esi
sete dl
mov byte [esi + 0xc0], dl
mov ecx, edi
mov dword [edi + 0x228], esi
call fcn.0046fa10
mov eax, dword [0x88b12c]
mov ecx, dword [eax + 0x9e0]
imul ecx, ecx, 0x32
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push 0x11c
add ebx, ecx
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x17
test eax, eax
je 0x674cca
mov edx, dword [0x883028]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x88152c]
push 9
push edx
push ecx
mov esi, eax
call fcn.0059c550
mov esi, eax
jmp 0x674ccc
xor esi, esi
mov byte [esp + 0xd0], 8
mov ecx, dword [0x883028]
mov edx, dword [esi]
mov eax, ecx
call fcn.0045a0f0
push eax
mov eax, ecx
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
mov ecx, esi
call eax
mov ecx, dword [0x88b12c]
cmp dword [ecx + 0x9e0], 0x300
push esi
sete dl
mov byte [esi + 0xc0], dl
mov ecx, edi
mov dword [edi + 0x22c], esi
call fcn.0046fa10
mov eax, dword [0x88b12c]
mov ecx, dword [eax + 0x9e0]
imul ecx, ecx, 0x32
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
push 0x11c
add ebx, ecx
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x18
test eax, eax
je 0x674d7f
mov edx, dword [0x883028]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x88152c]
push 0xa
push edx
push ecx
mov esi, eax
call fcn.0059c550
mov esi, eax
jmp 0x674d81
xor esi, esi
mov byte [esp + 0xd0], 8
mov ecx, dword [0x883028]
mov edx, dword [esi]
mov eax, ecx
call fcn.0045a0f0
push eax
mov eax, ecx
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
mov ecx, esi
call eax
mov ecx, dword [0x88b12c]
cmp dword [ecx + 0x9e0], 0x4b0
push esi
sete dl
mov byte [esi + 0xc0], dl
mov ecx, edi
mov dword [edi + 0x230], esi
call fcn.0046fa10
mov eax, dword [0x88b12c]
mov ecx, dword [eax + 0x9e0]
mov edx, ecx
imul ecx, ecx, 0x154
imul edx, edx, 0x64
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
push 0x11c
add ebx, edx
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x19
test eax, eax
je 0x674e4b
mov edx, dword [0x88152c]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x883028]
push 4
push ecx
push edx
mov esi, eax
call fcn.0059c550
mov esi, eax
jmp 0x674e4d
xor esi, esi
mov byte [esp + 0xd0], 8
mov ecx, dword [0x883028]
mov edx, dword [esi]
mov eax, ecx
call fcn.0045a0f0
push eax
mov eax, ecx
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
mov ecx, esi
call eax
mov eax, dword [0x88b12c]
call fcn.0046b580
mov byte [esi + 0xc0], al
push esi
mov ecx, edi
mov dword [edi + 0x234], esi
call fcn.0046fa10
mov ecx, dword [0x88b12c]
mov ecx, dword [ecx + 0x9e0]
imul ecx, ecx, 0x32
mov eax, 0x1b4e81b5
imul ecx
sar edx, 7
mov esi, edx
shr esi, 0x1f
add esi, edx
push 0x11c
mov dword [esp + 0x20], esi
add ebx, esi
call fcn.006442a0
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xd0], 0x1a
test eax, eax
je 0x674f04
mov edx, dword [0x883028]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x88152c]
push 5
push edx
push ecx
mov esi, eax
call fcn.0059c550
mov esi, dword [esp + 0x1c]
mov ecx, eax
mov dword [esp + 0x18], ecx
jmp 0x674f10
mov dword [esp + 0x18], 0
mov ecx, dword [esp + 0x18]
mov byte [esp + 0xd0], 8
mov eax, dword [0x883028]
mov edx, dword [ecx]
call fcn.0045a0f0
push eax
mov eax, dword [0x883028]
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
call eax
mov eax, dword [esp + 0x18]
push eax
mov ecx, edi
mov dword [edi + 0x238], eax
call fcn.0046fa10
push 0x11c
add ebx, esi
call fcn.006442a0
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0xd0], 0x1b
test eax, eax
je 0x674f95
mov edx, dword [0x88152c]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x883028]
push 6
push ecx
push edx
mov esi, eax
call fcn.0059c550
mov esi, dword [esp + 0x1c]
mov ecx, eax
mov dword [esp + 0x18], ecx
jmp 0x674fa1
mov dword [esp + 0x18], 0
mov ecx, dword [esp + 0x18]
mov byte [esp + 0xd0], 8
mov eax, dword [0x883028]
mov edx, dword [ecx]
call fcn.0045a0f0
push eax
mov eax, dword [0x883028]
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
call eax
mov eax, dword [esp + 0x18]
push eax
mov ecx, edi
mov dword [edi + 0x23c], eax
call fcn.0046fa10
push 0x11c
add ebx, esi
call fcn.006442a0
add esp, 4
mov dword [esp + 0x1c], eax
mov byte [esp + 0xd0], 0x1c
test eax, eax
je 0x67501e
mov edx, dword [0x88152c]
lea ecx, [edi + 0x224]
push ecx
mov ecx, dword [0x883028]
push 7
push ecx
push edx
mov esi, eax
call fcn.0059c550
mov esi, eax
jmp 0x675020
xor esi, esi
mov byte [esp + 0xd0], 8
mov ecx, dword [0x883028]
mov edx, dword [esi]
mov eax, ecx
call fcn.0045a0f0
push eax
mov eax, ecx
call fcn.0045a0e0
push eax
mov eax, dword [edx + 0xa0]
push ebx
push ebp
mov ecx, esi
call eax
push esi
mov ecx, edi
mov dword [edi + 0x240], esi
call fcn.0046fa10
mov esi, edi
call fcn.00666500
mov dword [edi + 0x258], 0
mov byte [edi + 0x254], 0
mov dword [edi + 0x184], 0x64
mov byte [edi + 0x1fa], 0
mov eax, edi
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc0
ret 8