Function at 0x673610
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x77bbc3
mov eax, dword fs:[0]
push eax
sub esp, 0x12c
mov eax, dword [0x867e6c]
xor eax, esp
mov dword [esp + 0x124], eax
push ebx
push ebp
push esi
mov eax, dword [0x867e6c]
xor eax, esp
push eax
lea eax, [esp + 0x13c]
mov dword fs:[0], eax
push edi
mov dword [esp + 0x54], edi
call fcn.00466490
xor esi, esi
mov dword [esp + 0x144], esi
mov dword [edi + 0xb8], vtable.Sexy::ButtonListener.0
lea ecx, [edi + 0xe8]
mov dword [edi], vtable.Sexy::PlayMenu.0
mov dword [edi + 0xb8], vtable.Sexy::PlayMenu.1.0
call fcn.00434f60
lea ecx, [edi + 0x158]
call fcn.00434f60
mov ebx, 7
xor eax, eax
mov dword [edi + 0x1e0], ebx
mov dword [edi + 0x1dc], esi
mov word [edi + 0x1cc], ax
lea ecx, [edi + 0x1e8]
mov byte [esp + 0x144], 1
call fcn.00434f60
lea esi, [edi + 0x258]
lea ebp, [ebx - 4]
mov ecx, esi
call fcn.00434f60
add esi, 0x70
sub ebp, 1
jns 0x6736c3
lea ecx, [edi + 0x418]
call fcn.00434f60
lea ecx, [edi + 0x490]
call fcn.00434f60
mov ecx, dword [esp + 0x14c]
xor eax, eax
push ebx
mov dword [edi + 0xc0], ecx
xor edx, edx
push 0x7ab568
lea ecx, [esp + 0x1c]
mov dword [edi + 0xbc], eax
mov byte [edi + 0x1e4], al
mov byte [edi + 0x510], al
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
call fcn.00403a80
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x148], 2
mov eax, dword [0x88b148]
push 0x158
add eax, 0x7ec
lea esi, [esp + 0x5c]
call fcn.004711e0
mov ebp, 8
mov byte [esp + 0x144], 4
cmp dword [esp + 0x2c], ebp
jb 0x67376c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 3
xor edx, edx
push 0x7ab578
lea ecx, [esp + 0x3c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov word [esp + 0x40], ax
call fcn.00403a80
lea ecx, [esp + 0x34]
mov byte [esp + 0x144], 5
mov eax, dword [0x88b148]
push ecx
push 0x159
add eax, 0x7ec
lea esi, [esp + 0x78]
call fcn.004711e0
mov byte [esp + 0x144], bl
cmp dword [esp + 0x4c], ebp
jb 0x6737d9
mov edx, dword [esp + 0x38]
push edx
call fcn.006441c7
add esp, 4
xor ecx, ecx
xor eax, eax
push 9
mov word [esp + 0x3c], cx
xor edx, edx
push 0x7ab580
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
call fcn.00403a80
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x148], 8
mov eax, dword [0x88b148]
push 0x15a
add eax, 0x7ec
lea esi, [esp + 0x94]
call fcn.004711e0
mov byte [esp + 0x144], 0xa
cmp dword [esp + 0x2c], ebp
jb 0x67384c
mov ecx, dword [esp + 0x18]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 5
xor edx, edx
push str.QUEST
lea ecx, [esp + 0x3c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov word [esp + 0x40], ax
call fcn.00403a80
lea ecx, [esp + 0x34]
mov byte [esp + 0x144], 0xb
mov eax, dword [0x88b148]
push ecx
push 0x15b
add eax, 0x7ec
lea esi, [esp + 0xb0]
call fcn.004711e0
mov byte [esp + 0x144], 0xd
cmp dword [esp + 0x4c], ebp
jb 0x6738bd
mov edx, dword [esp + 0x38]
push edx
call fcn.006441c7
add esp, 4
xor ecx, ecx
xor eax, eax
push 5
mov word [esp + 0x3c], cx
xor edx, edx
push 0x7ab5a0
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
call fcn.00403a80
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x148], 0xe
mov eax, dword [0x88b148]
push 0x15c
add eax, 0x7ec
lea esi, [esp + 0xcc]
call fcn.004711e0
mov byte [esp + 0x144], 0x10
cmp dword [esp + 0x2c], ebp
jb 0x673930
mov ecx, dword [esp + 0x18]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 0xb
xor edx, edx
push 0x7ab5ac
lea ecx, [esp + 0x3c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov word [esp + 0x40], ax
call fcn.00403a80
lea ecx, [esp + 0x34]
mov byte [esp + 0x144], 0x11
mov eax, dword [0x88b148]
push ecx
push 0x15d
add eax, 0x7ec
lea esi, [esp + 0xe8]
call fcn.004711e0
mov byte [esp + 0x144], 0x13
cmp dword [esp + 0x4c], ebp
jb 0x6739a1
mov edx, dword [esp + 0x38]
push edx
call fcn.006441c7
add esp, 4
xor ecx, ecx
xor eax, eax
push 9
mov word [esp + 0x3c], cx
xor edx, edx
push 0x7ab5c4
lea ecx, [esp + 0x1c]
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
call fcn.00403a80
lea eax, [esp + 0x14]
push eax
mov byte [esp + 0x148], 0x14
mov eax, dword [0x88b148]
push 0x15e
add eax, 0x7ec
lea esi, [esp + 0x104]
call fcn.004711e0
mov byte [esp + 0x144], 0x16
cmp dword [esp + 0x2c], ebp
jb 0x673a14
mov ecx, dword [esp + 0x18]
push ecx
call fcn.006441c7
add esp, 4
xor eax, eax
push 0xc
xor edx, edx
push 0x7ab5d8
lea ecx, [esp + 0x3c]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x30], eax
mov word [esp + 0x20], dx
mov dword [esp + 0x54], ebx
mov dword [esp + 0x50], eax
mov word [esp + 0x40], ax
call fcn.00403a80
lea ecx, [esp + 0x34]
mov byte [esp + 0x144], 0x17
mov eax, dword [0x88b148]
push ecx
push 0x15f
add eax, 0x7ec
lea esi, [esp + 0x120]
call fcn.004711e0
cmp dword [esp + 0x4c], ebp
jb 0x673a7d
mov edx, dword [esp + 0x38]
push edx
call fcn.006441c7
add esp, 4
mov esi, ebx
mov byte [esp + 0x144], 0x18
mov bl, 0x19
lea esp, [esp]
push 0x670
call fcn.006442a0
add esp, 4
mov dword [esp + 0x30], eax
mov byte [esp + 0x144], bl
test eax, eax
je 0x673acb
lea ecx, [edi + 0xb8]
push ecx
lea ecx, [esi*8]
sub ecx, esi
lea edx, [esp + ecx*4 + 0x58]
push edx
push eax
mov ecx, esi
call fcn.00767ba0
jmp 0x673acd
xor eax, eax
mov byte [esp + 0x144], 0x18
mov dword [edi + esi*4 + 0xc4], eax
sub esp, 8
add eax, 0x1f8
cmp esi, 4
jge 0x673af1
fld qword [0x82dfb8]
jmp 0x673af7
fld qword [0x82dfe8]
fstp qword [esp]
call fcn.00435d30
mov ecx, dword [edi + esi*4 + 0xc4]
add ecx, 0x160
call fcn.00466460
test eax, eax
je 0x673b21
call fcn.00466460
mov ecx, eax
call fcn.0045a1a0
test esi, esi
jne 0x673b3c
mov ecx, dword [edi + 0xc4]
add ecx, 0x460
call fcn.004348f0
mov dword [edi + 0x50c], eax
mov eax, dword [edi + esi*4 + 0xc4]
push eax
mov ecx, edi
call fcn.0046fa10
sub esi, 1
jns 0x673a90
mov ecx, dword [edi + 0xd0]
mov dword [ecx + 0x478], 0
push 0x168
mov byte [edi + 0x64], 0
call fcn.006442a0
mov esi, eax
add esp, 4
mov dword [esp + 0x30], esi
mov byte [esp + 0x144], 0x1a
test esi, esi
je 0x673ba8
lea eax, [edi + 0xb8]
push eax
push 0x64
push esi
call fcn.00497330
fld1
fstp dword [esi + 0x160]
mov dword [esi], vtable.Sexy::Bej3Button.0
mov ebp, esi
jmp 0x673baa
xor ebp, ebp
mov byte [esp + 0x144], 0x18
mov dword [edi + 0x504], ebp
mov esi, dword [0x883cd0]
test esi, esi
jne 0x673bc6
xor eax, eax
jmp 0x673bc9
mov eax, dword [esi + 4]
mov edx, dword [0x88b12c]
mov ecx, dword [edx + 0x9e0]
mov edx, ecx
imul edx, eax
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
test esi, esi
jne 0x673bf3
xor eax, eax
jmp 0x673bf5
mov eax, dword [esi]
imul ecx, eax
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [0x8814f4]
sar edx, 7
mov esi, edx
shr esi, 0x1f
add esi, edx
call fcn.0045a100
mov dword [esp + 0x30], eax
call fcn.0045a110
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebx
mov edx, dword [ebp]
mov edx, dword [edx + 0x9c]
lea eax, [esp + 0x14]
push eax
mov ecx, ebp
call edx
mov eax, dword [edi + 0x504]
mov ecx, dword [0x8814f4]
mov dword [eax + 0xe0], ecx
mov ecx, dword [0x8814f4]
push 1
lea esi, [esp + 0x18]
call fcn.0045a130
mov ecx, dword [edi + 0x504]
mov edx, dword [eax]
add ecx, 0xf4
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x8814f4]
push 0
lea esi, [esp + 0x18]
call fcn.0045a130
mov ecx, dword [edi + 0x504]
mov edx, dword [eax]
add ecx, 0x104
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x8814f4]
push 0
lea esi, [esp + 0x18]
call fcn.0045a130
fld qword [0x82e0a0]
mov edx, dword [eax]
mov ecx, dword [edi + 0x504]
mov dword [ecx + 0x114], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x118], edx
mov edx, dword [eax + 8]
add ecx, 0x114
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [edi + 0x504]
fstp qword [ecx + 0x148]
mov edx, dword [edi + 0x504]
fld qword [0x82e220]
fstp qword [edx + 0x150]
mov eax, dword [edi + 0x504]
mov byte [eax + 0x136], 1
mov ecx, dword [edi + 0x504]
mov byte [ecx + 0x94], 1
mov edx, dword [edi + 0xbc]
mov eax, dword [edi + 0x504]
push edx
push eax
mov ecx, edi
call fcn.004703c0
mov ecx, dword [edi + 0x504]
push ecx
mov ecx, edi
call fcn.0046fa10
push 0x168
call fcn.006442a0
mov esi, eax
add esp, 4
mov dword [esp + 0x30], esi
mov byte [esp + 0x144], 0x1b
test esi, esi
je 0x673d96
lea eax, [edi + 0xb8]
push eax
push 0x65
push esi
call fcn.00497330
fld1
fstp dword [esi + 0x160]
mov dword [esi], vtable.Sexy::Bej3Button.0
mov ebx, esi
jmp 0x673d98
xor ebx, ebx
mov byte [esp + 0x144], 0x18
mov dword [edi + 0x508], ebx
mov esi, dword [0x883ccc]
test esi, esi
jne 0x673db4
xor eax, eax
jmp 0x673db7
mov eax, dword [esi + 4]
mov edx, dword [0x88b12c]
mov ecx, dword [edx + 0x9e0]
mov edx, ecx
imul edx, eax
mov eax, 0x1b4e81b5
imul edx
sar edx, 7
mov ebp, edx
shr ebp, 0x1f
add ebp, edx
test esi, esi
jne 0x673de1
xor eax, eax
jmp 0x673de3
mov eax, dword [esi]
imul ecx, eax
mov eax, 0x1b4e81b5
imul ecx
mov ecx, dword [0x8824e4]
sar edx, 7
mov esi, edx
shr esi, 0x1f
add esi, edx
call fcn.0045a100
mov dword [esp + 0x30], eax
call fcn.0045a110
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x20], eax
mov dword [esp + 0x14], esi
mov dword [esp + 0x18], ebp
mov edx, dword [ebx]
mov edx, dword [edx + 0x9c]
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call edx
mov eax, dword [edi + 0x508]
mov ecx, dword [0x8824e4]
mov dword [eax + 0xe0], ecx
mov ecx, dword [0x8824e4]
push 1
lea esi, [esp + 0x18]
call fcn.0045a130
mov ecx, dword [edi + 0x508]
mov edx, dword [eax]
add ecx, 0xf4
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x8824e4]
xor ebx, ebx
push ebx
lea esi, [esp + 0x18]
call fcn.0045a130
mov ecx, dword [edi + 0x508]
mov edx, dword [eax]
add ecx, 0x104
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x8824e4]
push ebx
lea esi, [esp + 0x18]
call fcn.0045a130
fld qword [0x82e0a0]
mov edx, dword [eax]
mov ecx, dword [edi + 0x508]
mov dword [ecx + 0x114], edx
mov edx, dword [eax + 4]
mov dword [ecx + 0x118], edx
mov edx, dword [eax + 8]
add ecx, 0x114
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, dword [edi + 0x508]
fstp qword [ecx + 0x148]
mov edx, dword [edi + 0x508]
fld qword [0x82e220]
fstp qword [edx + 0x150]
mov eax, dword [edi + 0x508]
mov byte [eax + 0x136], 1
mov ecx, dword [edi + 0x508]
mov byte [ecx + 0x94], 1
mov edx, dword [edi + 0xbc]
mov eax, dword [edi + 0x508]
push edx
push eax
mov ecx, edi
call fcn.004703c0
mov ecx, dword [edi + 0x508]
push ecx
mov ecx, edi
call fcn.0046fa10
lea eax, [edi + 0x258]
lea edx, [ebx + 4]
fldz
sub esp, 8
fstp qword [esp]
call fcn.00435d30
add eax, 0x70
sub edx, 1
jne 0x673f4c
fldz
sub esp, 8
lea esi, [edi + 0xe8]
fstp qword [esp]
mov eax, esi
call fcn.00435d30
push 0x21
push str.b0_1_0_1________8__i
lea ecx, [esp + 0x3c]
mov byte [edi + 0x51], dl
mov dword [edi + 0x488], ebx
mov dword [esp + 0x54], 0xf
mov dword [esp + 0x50], ebx
mov byte [esp + 0x40], dl
call fcn.004016e0
push ebx
lea edx, [esp + 0x38]
push edx
lea eax, [edi + 0x158]
mov byte [esp + 0x14c], 0x1c
call fcn.00435cc0
cmp dword [esp + 0x4c], 0x10
jb 0x673fcc
mov eax, dword [esp + 0x38]
push eax
call fcn.006441c7
add esp, 4
fldz
sub esp, 8
lea eax, [edi + 0x1e8]
fstp qword [esp]
mov dword [edi + 0x188], esi
mov dword [edi + 0x500], 0xffffffff
call fcn.00435d30
push fcn.00406fb0
push 8
push 0x1c
lea ecx, [esp + 0x60]
push ecx
mov byte [esp + 0x154], 1
call fcn.0064441b
mov eax, edi
mov ecx, dword [esp + 0x13c]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x124]
xor ecx, esp
call fcn.00643db8
add esp, 0x138
ret 4