Function at 0x6792f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, 0x13c8
call fcn.0074992a
push ebx
push ebp
push esi
push edi
push dword [0x1010995c]
mov ebx, ecx
mov dword [esp + 0x1c], ebx
call dword [0x100df26c]
inc eax
push eax
push dword [0x1010995c]
call dword [0x100df268]
push 1
lea ecx, [esp + 0x64]
call fcn.006fa540
lea eax, [esp + 0x13dc]
push eax
lea ecx, [esp + 0x170]
call fcn.006f9f70
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x170]
call fcn.006fa0c0
push 1
push 0x100e0cd8
lea ecx, [esp + 0xdc]
push dword [eax + 4]
push dword [eax]
call fcn.006f9c70
mov ecx, eax
call fcn.006f9d50
mov ebp, 0x3a
test eax, eax
je 0x67963b
mov eax, dword [0x100e0cec]
lea ecx, [esp + 0x16c]
movq xmm0, qword [0x100e0ce4]
mov dword [esp + 0x6c], eax
mov ax, word [0x100e0cf0]
movq qword [esp + 0x64], xmm0
mov word [esp + 0x70], ax
call fcn.006f9e60
cmp ax, 6
jb 0x67963b
push 5
lea ecx, [esp + 0x170]
call fcn.006fa4d0
cmp bp, ax
jne 0x67963b
push 4
lea ecx, [esp + 0x170]
call fcn.006fa4d0
cmp dword [ebx + 4], 0
mov word [esp + 0x6c], ax
je 0x67963b
cmp dword [0x10109814], 0
je 0x67963b
push 4
lea ecx, [esp + 0x170]
call fcn.006fa4d0
movzx ecx, ax
mov eax, dword [0x101097f8]
movzx edi, word [eax + ecx*2]
sub edi, 0x41
cmp edi, 0x20
jae 0x67963b
mov esi, dword [0x1010955c]
lea eax, [esp + 0x374]
push 0
push 0x24
push eax
push 0x17
call dword [0x100df260]
push eax
mov eax, dword [esi + 0x13ac]
lea ecx, [esi + 0x13ac]
call dword [eax + 0x24]
call eax
test eax, eax
jne 0x67963b
mov al, byte [esp + edi + 0x378]
test al, al
je 0x679467
cmp al, 1
je 0x679467
cmp al, 4
jne 0x67963b
lea eax, [esp + 0x5c]
mov dword [esp + 0x5c], edi
lea esi, [ebx + 0x40]
push eax
mov ecx, esi
call fcn.00678ca0
test eax, eax
jne 0x67a488
push 1
lea ecx, [esp + 0x30]
mov dword [esp + 0x18], 1
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], eax
call fcn.00678940
push edi
mov ecx, esi
call fcn.00678fc0
mov ebp, dword [esp + 0x2c]
lea eax, [esp + 0x14]
push eax
push ebp
lea eax, [esp + 0x74]
push eax
call dword [0x10109814]
mov ebx, eax
mov dword [esp + 0x38], edi
lea eax, [esp + 0x38]
mov ecx, esi
push eax
call fcn.006dac00
cmp ebx, 0xea
jne 0x67952a
mov dword [esp + 0x38], edi
jmp 0x6794e0
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x2c]
add eax, 0x100
push eax
mov dword [esp + 0x18], eax
call fcn.00678940
push edi
mov ecx, esi
call fcn.00678fc0
mov ebp, dword [esp + 0x2c]
lea eax, [esp + 0x14]
push eax
push ebp
lea eax, [esp + 0x74]
push eax
call dword [0x10109814]
mov ebx, eax
mov ecx, esi
lea eax, [esp + 0x38]
push eax
call fcn.006dac00
cmp ebx, 0xea
je 0x6794e0
test ebx, ebx
jne 0x67962e
push 0x100e0cf4
lea ecx, [esp + 0x90]
call fcn.00670fc0
lea eax, [ebp + 2]
push eax
lea ecx, [esp + 0x90]
call fcn.006782b0
push dword [esp + 0x8c]
lea ecx, [esp + 0xe8]
call fcn.006f9c30
mov ecx, eax
call fcn.006f9c90
mov esi, dword [esp + 0x13e8]
mov ecx, dword [esp + 0x18]
push esi
push dword [esp + 0x13e8]
push dword [eax + 4]
push dword [eax]
call fcn.006791a0
mov ecx, esi
call fcn.006f9c90
cmp word [eax], bx
jbe 0x6795c0
mov ecx, esi
call fcn.006f9e60
dec ax
mov ecx, esi
movzx eax, ax
push eax
call fcn.006fa4d0
mov ecx, 0x5c
cmp cx, ax
je 0x6795c0
push 0x100e09b8
mov ecx, esi
call fcn.006fa210
lea ecx, [esp + 0x16c]
call fcn.006f9e60
cmp ax, 7
jbe 0x679614
lea ecx, [esp + 0x16c]
call fcn.006f9e60
sub ax, 7
lea ecx, [esp + 0x16c]
movzx eax, ax
push eax
call fcn.006f9c90
lea ecx, [esp + 0xf8]
mov eax, dword [eax + 4]
add eax, 0xe
push eax
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
push eax
mov ecx, esi
call fcn.006fa190
lea ecx, [esp + 0x8c]
call fcn.00671570
lea ecx, [esp + 0x2c]
call fcn.006715a0
jmp 0x67a4a8
lea ecx, [esp + 0x2c]
call fcn.006715a0
mov ebx, dword [esp + 0x18]
lea edi, [ebx + 0x18]
push edi
lea ecx, [esp + 0x40]
mov dword [esp + 0x28], edi
call fcn.006895a0
lea eax, [esp + 0x58]
mov ecx, edi
push eax
call fcn.00678ed0
mov esi, dword [esp + 0x58]
cmp esi, dword [edi + 4]
jne 0x679669
xor ebx, ebx
test esi, esi
je 0x679681
jmp 0x67967b
mov ebx, esi
test esi, esi
je 0x679681
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
test ebx, ebx
je 0x6797c0
lea esp, [esp]
lea ebp, [ebx + 0x210]
test ebx, ebx
je 0x6796a0
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
push ebx
lea eax, [esp + 0x38]
mov ecx, edi
push eax
call fcn.0067b390
mov esi, dword [esp + 0x34]
cmp esi, dword [edi + 4]
jne 0x6796d4
xor edi, edi
test esi, esi
je 0x6796c6
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
mov dword [esp + 0x34], edi
test ebx, ebx
je 0x6796d0
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
mov ebx, edi
jmp 0x679704
mov edi, esi
test esi, esi
je 0x6796ee
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
mov dword [esp + 0x34], 0
test ebx, ebx
je 0x6796f8
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
mov ebx, edi
test edi, edi
je 0x679704
mov eax, dword [edi]
push edi
call dword [eax + 0xc]
push ebp
lea ecx, [esp + 0x7ac]
call fcn.006f9f70
push 1
lea ecx, [esp + 0x170]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x7b0]
call fcn.006f9c90
push eax
call dword [0x101095e4]
test eax, eax
je 0x6799ee
lea ecx, [esp + 0x7a8]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x9b4]
call fcn.006f9f70
push 0x100e09b8
lea ecx, [esp + 0x9b4]
call fcn.006fa210
push 1
lea ecx, [esp + 0x9b4]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x174]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x160]
call fcn.006f9c10
mov ecx, eax
call fcn.006f9cf0
test eax, eax
jne 0x67995d
lea ecx, [esp + 0x9b0]
call fcn.006f9fe0
lea ecx, [esp + 0x7a8]
call fcn.006f9fe0
test edi, edi
mov edi, dword [esp + 0x24]
jne 0x679690
cmp byte [esp + 0x40], 0
mov ebp, dword [0x100df280]
je 0x679806
mov esi, dword [esp + 0x3c]
dec dword [esi + 0x10]
jne 0x679806
push 0
lea eax, [esi + 8]
mov dword [esi + 0x10], 0
push eax
call dword [0x100df28c]
add esi, 0xc
cmp dword [esi], 0
jle 0x679806
push esi
call dword [0x100df290]
mov eax, dword [esp + 0x3c]
push 0
push 1
mov eax, dword [eax + 0x14]
push eax
call ebp
mov ebx, dword [esp + 0x18]
cmp dword [ebx + 4], 0
je 0x6798b0
push 0x100e0d04
lea ecx, [esp + 0x78]
call fcn.006f9c30
push 1
lea ecx, [esp + 0x78]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x174]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x150]
call fcn.006f9c10
mov ecx, eax
call fcn.006f9cf0
test eax, eax
je 0x6798b0
lea ecx, [esp + 0x74]
call fcn.006f9e60
movzx esi, ax
lea ecx, [esp + 0x16c]
add esi, esi
call fcn.006f9c90
lea ecx, [esp + 0x16c]
mov edi, dword [eax + 4]
add edi, esi
call fcn.006f9e60
movzx esi, ax
lea ecx, [esp + 0x16c]
add esi, esi
call fcn.006f9c90
mov eax, dword [eax + 4]
add eax, esi
cmp edi, eax
je 0x6798b0
mov edx, 0x5c
lea esp, [esp]
cmp dx, word [edi]
je 0x679a6f
add edi, 2
cmp edi, eax
jne 0x6798a0
lea ecx, [esp + 0x16c]
call fcn.006f9c90
xor esi, esi
mov edi, dword [eax + 4]
mov eax, 0x5c
cmp ax, word [edi]
je 0x6798e3
lea ecx, [esp + 0x16c]
call fcn.006f9c90
movzx ecx, si
add ecx, ecx
movzx eax, word [eax]
cmp ecx, eax
jne 0x679938
lea ecx, [esp + 0xbb8]
call fcn.006f9fd0
lea eax, [esp + 0xbb8]
push eax
push esi
lea ecx, [esp + 0x174]
call fcn.006f9c90
lea ecx, [esp + 0x12c]
mov eax, dword [eax + 4]
push eax
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
push eax
call fcn.006e14b0
add esp, 8
test eax, eax
je 0x679b13
lea ecx, [esp + 0xbb8]
call fcn.006f9fe0
lea ecx, [esp + 0x16c]
call fcn.006f9c90
movzx ecx, si
add ecx, ecx
movzx eax, word [eax]
cmp ecx, eax
je 0x679b92
inc esi
add edi, 2
jmp 0x6798c1
mov ecx, dword [esp + 0x13e4]
lea eax, [esp + 0x7a8]
push eax
call fcn.006fa000
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0x9b0]
mov ax, word [eax]
shr ax, 1
movzx esi, ax
call fcn.006f9e60
movzx edi, ax
lea ecx, [esp + 0x9b0]
add edi, edi
call fcn.006f9e60
sub si, ax
lea ecx, [esp + 0x16c]
movzx eax, si
push eax
call fcn.006f9c90
lea ecx, [esp + 0xc0]
mov eax, dword [eax + 4]
add eax, edi
push eax
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
mov ecx, dword [esp + 0x13e8]
push dword [eax + 4]
push dword [eax]
call fcn.006fa060
lea ecx, [esp + 0x9b0]
call fcn.006f9fe0
jmp 0x679a0e
mov ecx, dword [esp + 0x13e4]
lea eax, [esp + 0x7a8]
push eax
call fcn.006fa000
mov ecx, dword [esp + 0x13e8]
call fcn.006fa410
lea ecx, [esp + 0x7a8]
call fcn.006f9fe0
cmp byte [esp + 0x40], 0
je 0x67a4a8
mov esi, dword [esp + 0x3c]
dec dword [esi + 0x10]
jne 0x67a4a8
push 0
lea eax, [esi + 8]
mov dword [esi + 0x10], 0
push eax
call dword [0x100df28c]
add esi, 0xc
cmp dword [esi], 0
jle 0x67a4a8
push esi
call dword [0x100df290]
mov eax, dword [esp + 0x3c]
push 0
push 1
mov eax, dword [eax + 0x14]
push eax
call dword [0x100df280]
jmp 0x67a4a8
add edi, 2
cmp edi, eax
je 0x6798b0
mov esi, 0x3a
nop
movzx ecx, word [edi]
cmp dx, cx
je 0x6798b0
cmp si, cx
je 0x679a9d
add edi, 2
cmp edi, eax
jne 0x679a80
jmp 0x6798b0
cmp edi, eax
je 0x6798b0
cmp dx, word [edi]
je 0x679ab6
add edi, 2
cmp edi, eax
jne 0x679aa5
jmp 0x6798b0
push 0x100e0cf4
lea ecx, [esp + 0xfcc]
call fcn.006f9e70
push edi
lea ecx, [esp + 0xfcc]
call fcn.006fa210
lea eax, [esp + 0xa4]
push eax
lea ecx, [esp + 0xfcc]
call fcn.006fa0c0
push dword [esp + 0x13e8]
mov ecx, ebx
push dword [esp + 0x13e8]
push dword [eax + 4]
push dword [eax]
call fcn.006791a0
lea ecx, [esp + 0xfc8]
call fcn.006f9fe0
jmp 0x67a4a8
lea eax, [esp + 0xbb8]
push eax
lea ecx, [esp + 0xdc4]
call fcn.006f9f70
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0xdc]
mov ax, word [eax]
shr ax, 1
sub ax, si
movzx eax, ax
push eax
push edi
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
push eax
lea ecx, [esp + 0xdc4]
call fcn.006fa190
lea eax, [esp + 0xdc0]
push eax
lea ecx, [esp + 0x170]
call fcn.006fa000
lea ecx, [esp + 0xdc0]
call fcn.006f9fe0
lea ecx, [esp + 0xbb8]
call fcn.006f9fe0
jmp 0x6798b0
lea esi, [ebx + 0x24]
mov dword [esp + 0x44], esi
call dword [0x100df284]
mov edi, eax
lea ecx, [esi + 8]
cmp edi, dword [ecx]
je 0x679bc7
cmp dword [ecx], 0
jne 0x679bf0
push 0
push edi
push ecx
call dword [0x100df288]
test eax, eax
sete al
test al, al
je 0x679bf0
mov dword [esi + 0x10], 0
inc dword [esi + 0x10]
mov byte [esp + 0x13], 1
mov edi, dword [esp + 0x24]
lea eax, [esp + 0x4c]
push eax
mov ecx, edi
call fcn.00678ed0
mov esi, dword [esp + 0x4c]
cmp esi, dword [edi + 4]
jne 0x679c04
xor ebx, ebx
test esi, esi
je 0x679c1c
jmp 0x679c16
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.0066ea50
test al, al
jne 0x679bc7
mov byte [esp + 0x13], al
jmp 0x679bcf
mov ebx, esi
test esi, esi
je 0x679c1c
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
test ebx, ebx
je 0x679d68
lea ebp, [ebx + 0x210]
test ebx, ebx
je 0x679c34
mov eax, dword [ebx]
push ebx
call dword [eax + 8]
push ebx
lea eax, [esp + 0x20]
mov ecx, edi
push eax
call fcn.0067b390
mov esi, dword [esp + 0x1c]
cmp esi, dword [edi + 4]
jne 0x679c68
xor edi, edi
test esi, esi
je 0x679c5a
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
mov dword [esp + 0x1c], edi
test ebx, ebx
je 0x679c64
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
mov ebx, edi
jmp 0x679c98
mov edi, esi
test esi, esi
je 0x679c82
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov eax, dword [esi]
push esi
call dword [eax + 0xc]
mov dword [esp + 0x1c], 0
test ebx, ebx
je 0x679c8c
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
mov ebx, edi
test edi, edi
je 0x679c98
mov eax, dword [edi]
push edi
call dword [eax + 0xc]
push ebp
lea ecx, [esp + 0x39c]
call fcn.006f9f70
push 1
lea ecx, [esp + 0x170]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x3a0]
call fcn.006f9c90
push eax
call dword [0x101095e4]
test eax, eax
je 0x679f87
lea ecx, [esp + 0x398]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x5a4]
call fcn.006f9f70
push 0x100e09b8
lea ecx, [esp + 0x5a4]
call fcn.006fa210
lea eax, [esp + 0x12c]
push eax
lea ecx, [esp + 0x170]
call fcn.006fa0c0
push 1
lea ecx, [esp + 0x5a4]
mov esi, eax
call fcn.006f9c90
push eax
push dword [esi + 4]
lea ecx, [esp + 0xf8]
push dword [esi]
call fcn.006f9c70
mov ecx, eax
call fcn.006f9cf0
test eax, eax
jne 0x679ef6
lea ecx, [esp + 0x5a0]
call fcn.006f9fe0
lea ecx, [esp + 0x398]
call fcn.006f9fe0
test edi, edi
mov edi, dword [esp + 0x24]
jne 0x679c24
mov ebp, dword [0x100df280]
cmp byte [esp + 0x13], 0
je 0x679daa
mov esi, dword [esp + 0x44]
dec dword [esi + 0x10]
jne 0x679daa
push 0
lea eax, [esi + 8]
mov dword [esi + 0x10], 0
push eax
mov eax, dword [0x100df28c]
call eax
add esi, 0xc
cmp dword [esi], 0
jle 0x679daa
mov eax, dword [0x100df290]
push esi
call eax
mov eax, dword [esp + 0x44]
push 0
push 1
mov eax, dword [eax + 0x14]
push eax
call ebp
push 0
push 0x40
lea ecx, [esp + 0x174]
call fcn.006f9c90
push eax
push 0
lea ecx, [esp + 0x114]
call fcn.006f9be0
mov eax, dword [esp + 0x18]
cmp dword [eax + 4], 0
je 0x67a108
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0x16c]
mov ax, word [eax]
shr ax, 1
movzx edi, ax
mov dword [esp + 0x18], edi
movzx ebp, di
call fcn.006f9c90
movzx ecx, di
xor esi, esi
mov dword [esp + 0x14], esi
mov eax, dword [eax + 4]
lea ebx, [eax + ecx*2]
mov edi, edi
mov eax, 0x5c
cmp ax, word [ebx]
je 0x679e23
cmp bp, di
jne 0x67a0ce
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [ebp*2]
push 0x21
push 3
mov word [eax], cx
lea ecx, [esp + 0x104]
mov esi, dword [0x1010955c]
mov dword [esp + 0x28], 0
call fcn.006f9bb0
mov ecx, eax
call fcn.006f9c90
push eax
lea ecx, [esp + 0x110]
call fcn.006f9c90
push eax
push 0x100000
lea eax, [esp + 0x34]
push eax
mov eax, dword [esi + 0x5dc]
lea ecx, [esi + 0x5dc]
call dword [eax + 0x24]
call eax
test eax, eax
jne 0x67a0a8
mov edi, 0x400
xor esi, esi
test edi, edi
je 0x679ea5
push edi
call fcn.0073d830
add esp, 4
mov esi, eax
mov ecx, dword [0x1010955c]
lea eax, [esp + 0x98]
push eax
push edi
add ecx, 0x10ac
push esi
push 1
push dword [esp + 0x30]
mov eax, dword [ecx]
call dword [eax + 0x24]
call eax
cmp eax, 0xc0000004
je 0x679ee1
cmp eax, 0x80000005
je 0x679ee1
cmp eax, 0xc0000023
jne 0x67a00a
add edi, 0x100
test esi, esi
je 0x679e94
push esi
call fcn.0073d820
add esp, 4
jmp 0x679e94
mov ecx, dword [esp + 0x13e4]
lea eax, [esp + 0x398]
push eax
call fcn.006fa000
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0x5a0]
mov ax, word [eax]
shr ax, 1
movzx esi, ax
call fcn.006f9e60
movzx edi, ax
lea ecx, [esp + 0x5a0]
add edi, edi
call fcn.006f9e60
sub si, ax
lea ecx, [esp + 0x16c]
movzx eax, si
push eax
call fcn.006f9c90
lea ecx, [esp + 0x140]
mov eax, dword [eax + 4]
add eax, edi
push eax
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
mov ecx, dword [esp + 0x13e8]
push dword [eax + 4]
push dword [eax]
call fcn.006fa060
lea ecx, [esp + 0x5a0]
call fcn.006f9fe0
jmp 0x679fa7
mov ecx, dword [esp + 0x13e4]
lea eax, [esp + 0x398]
push eax
call fcn.006fa000
mov ecx, dword [esp + 0x13e8]
call fcn.006fa410
lea ecx, [esp + 0x398]
call fcn.006f9fe0
cmp byte [esp + 0x13], 0
je 0x67a4a8
mov esi, dword [esp + 0x44]
dec dword [esi + 0x10]
jne 0x67a4a8
push 0
lea eax, [esi + 8]
mov dword [esi + 0x10], 0
push eax
mov eax, dword [0x100df28c]
call eax
add esi, 0xc
cmp dword [esi], 0
jle 0x67a4a8
mov eax, dword [0x100df290]
push esi
call eax
mov eax, dword [esp + 0x44]
push 0
push 1
mov eax, dword [eax + 0x14]
push eax
call dword [0x100df280]
jmp 0x67a4a8
test eax, eax
jne 0x67a097
mov eax, dword [esp + 0x18]
lea ecx, [esp + 0x11d0]
sub eax, ebp
push eax
push ebx
call fcn.006f9ef0
push dword [esi + 4]
lea ecx, [esp + 0x170]
push dword [esi]
call fcn.006fa060
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x11d4]
call fcn.006fa0c0
lea eax, [esp + 0x9c]
push eax
lea ecx, [esp + 0x170]
call fcn.006fa190
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0x11d0]
mov dword [esp + 0x14], 1
mov ax, word [eax]
shr ax, 1
movzx edi, ax
mov dword [esp + 0x18], edi
call fcn.006f9fe0
push esi
call fcn.0073d820
add esp, 4
jmp 0x67a0a8
test esi, esi
je 0x67a0a4
push esi
call fcn.0073d820
add esp, 4
mov edi, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
test eax, eax
je 0x67a0ca
cmp eax, 0xffffffff
je 0x67a0ca
push eax
call fcn.00732890
mov ecx, dword [esp + 0x20]
xor edx, edx
test eax, eax
cmovne ecx, edx
mov dword [esp + 0x20], ecx
mov esi, dword [esp + 0x14]
lea ecx, [esp + 0x16c]
call fcn.006f9c90
cmp dword [eax + 4], ebx
je 0x67a0f2
add ebp, 0xffff
sub ebx, 2
test esi, esi
je 0x679e10
jmp 0x67a108
test esi, esi
jne 0x67a108
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [edi + edi]
mov word [eax], cx
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0x16c]
xor edi, edi
mov ebx, dword [eax + 4]
call fcn.006f9c90
mov esi, 0x5c
mov ax, word [eax]
shr ax, 1
movzx ebp, ax
cmp si, word [ebx]
je 0x67a141
cmp di, bp
jne 0x67a24a
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [edi + edi]
mov dword [esp + 0x1c], 0
mov word [eax], cx
cmp si, word [ebx]
jne 0x67a178
lea ecx, [esp + 0x16c]
call fcn.006f9c90
mov dword [esp + 0x1c], 1
add word [eax], 2
mov esi, dword [0x1010955c]
lea ecx, [esp + 0x14c]
push 0x21
push 3
mov dword [esp + 0x30], 0
call fcn.006f9bb0
mov ecx, eax
call fcn.006f9c90
push eax
lea ecx, [esp + 0x110]
call fcn.006f9c90
push eax
push 0x100001
lea eax, [esp + 0x3c]
push eax
mov eax, dword [esi + 0x5dc]
lea ecx, [esi + 0x5dc]
call dword [eax + 0x24]
call eax
test eax, eax
jne 0x67a233
push 0x400
call fcn.0073d830
mov esi, dword [0x1010955c]
lea ecx, [esp + 0x120]
add esp, 4
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], 0x400
push 1
push 0
push 0
push 3
push 0x400
push eax
call fcn.006f9bb0
mov ecx, eax
call fcn.006f9c90
push eax
mov eax, dword [esi + 0x9fc]
lea ecx, [esi + 0x9fc]
push 0
push 0
push 0
push dword [esp + 0x50]
call dword [eax + 0x24]
call eax
test eax, eax
je 0x67a253
lea ecx, [esp + 0x50]
call fcn.006715a0
lea ecx, [esp + 0x28]
call fcn.00678990
cmp di, bp
je 0x67a2ef
mov esi, 0x5c
inc edi
add ebx, 2
jmp 0x67a133
mov ebx, dword [esp + 0x13e4]
lea eax, [esp + 0x16c]
push eax
mov ecx, ebx
call fcn.006fa000
cmp dword [esp + 0x1c], 0
je 0x67a27f
mov ecx, ebx
call fcn.006f9c90
mov ecx, 0xfffe
add word [eax], cx
cmp bp, di
jne 0x67a297
push 0x100e03dc
lea ecx, [esp + 0x160]
call fcn.006f9c30
jmp 0x67a2c0
sub ebp, edi
lea ecx, [esp + 0x16c]
dec ebp
push ebp
call fcn.006f9c90
movzx ecx, di
mov eax, dword [eax + 4]
lea eax, [eax + ecx*2]
add eax, 2
lea ecx, [esp + 0x168]
push eax
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
mov ecx, dword [esp + 0x13e8]
push dword [eax + 4]
push dword [eax]
call fcn.006fa060
lea ecx, [esp + 0x50]
call fcn.006715a0
lea ecx, [esp + 0x28]
call fcn.00678990
jmp 0x67a46c
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [ebp*2]
push 1
push 0x100e0cd8
mov word [eax], cx
lea ecx, [esp + 0x174]
call fcn.006f9c90
push eax
lea ecx, [esp + 0x140]
call fcn.006f9c10
mov ecx, eax
call fcn.006f9d50
test eax, eax
je 0x67a488
mov eax, dword [0x100e0cec]
lea ecx, [esp + 0x16c]
movq xmm0, qword [0x100e0ce4]
mov dword [esp + 0x84], eax
movzx eax, word [0x100e0cf0]
movq qword [esp + 0x7c], xmm0
mov word [esp + 0x88], ax
call fcn.006f9c90
mov ecx, 0xfffe
movzx eax, word [eax]
and ax, cx
cmp ax, 0xc
jb 0x67a488
lea ecx, [esp + 0x16c]
call fcn.006f9c90
mov ecx, 0x3a
mov eax, dword [eax + 4]
cmp cx, word [eax + 0xa]
jne 0x67a488
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0xac]
mov eax, dword [eax + 4]
mov ax, word [eax + 8]
mov word [esp + 0x84], ax
lea eax, [esp + 0x7c]
push eax
call fcn.006f9c30
mov ecx, eax
call fcn.006f9c90
mov ebx, dword [esp + 0x13e4]
mov ecx, ebx
push dword [eax + 4]
push dword [eax]
call fcn.006fa060
lea ecx, [esp + 0x16c]
mov edi, 6
call fcn.006f9c90
cmp word [eax], 0xc
jne 0x67a40c
push 0x100e03dc
lea ecx, [esp + 0xb8]
call fcn.006f9c30
jmp 0x67a454
lea ecx, [esp + 0x16c]
call fcn.006f9c90
mov esi, dword [eax + 4]
mov eax, 0x5c
add esi, 0xc
cmp ax, word [esi]
jne 0x67a42e
add esi, 2
lea edi, [eax - 0x55]
lea ecx, [esp + 0x16c]
call fcn.006f9c90
lea ecx, [esp + 0xc4]
mov ax, word [eax]
shr ax, 1
sub ax, di
movzx eax, ax
push eax
push esi
call fcn.006f9c50
mov ecx, eax
call fcn.006f9c90
mov ecx, dword [esp + 0x13e8]
push dword [eax + 4]
push dword [eax]
call fcn.006fa060
sub esp, 0x208
mov ecx, esp
push ebx
call fcn.006f9f70
mov ecx, dword [esp + 0x22c]
call fcn.00678ff0
jmp 0x67a4a8
mov ecx, dword [esp + 0x13e4]
call fcn.006fa410
mov ecx, dword [esp + 0x13e8]
lea eax, [esp + 0x16c]
push eax
call fcn.006fa000
lea ecx, [esp + 0x16c]
call fcn.006f9fe0
lea ecx, [esp + 0x60]
call fcn.006fa560
push dword [0x1010995c]
call dword [0x100df26c]
dec eax
push eax
push dword [0x1010995c]
call dword [0x100df268]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x13c8
ret 0x10