Function at 0x67bf70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0xa58030
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push ebp
push esi
push edi
mov eax, dword [0xcdc190]
xor eax, esp
push eax
lea eax, [esp + 0x20]
mov dword fs:[0], eax
mov esi, ecx
mov ecx, dword [esi + 8]
mov ebp, dword [esp + 0x30]
mov ebx, dword [ecx + 0x568]
mov edi, dword [ebp + 0x24]
call fcn.0043f100
mov ecx, ebx
call fcn.004238c0
push ebp
mov ecx, ebx
call fcn.0041c700
test al, al
je 0x67cca8
mov ecx, dword [0xce1d00]
mov eax, dword [ecx + 0x568]
mov eax, dword [eax + 0x1c]
cmp eax, 0xa
je 0x67bff4
mov eax, dword [ecx + 0x570]
mov eax, dword [eax + 0x1664]
mov eax, dword [eax + 0x44c]
cmp dword [eax + 0x258], 0
je 0x67c024
mov eax, dword [edi + 0x50]
cmp eax, 0xe
je 0x67cc80
cmp eax, 0x14
je 0x67cc80
cmp eax, 0x22
je 0x67cc80
cmp eax, 0x1c
je 0x67cc80
cmp eax, 0x17
je 0x67cc80
mov eax, dword [edi + 0x50]
cmp eax, 0x2c
je 0x67c031
cmp eax, 0x2b
jne 0x67c0ab
cmp byte [ebx + 0x6b48], 0
je 0x67c0ab
push str.MB_Title_PSpotCollision
push str.SurpriseSpotStrings
mov ecx, 0xdacba0
call fcn.008e2ac0
push str.MB_Msg_PSpotCollision
push str.SurpriseSpotStrings
mov ecx, 0xdacba0
mov esi, eax
call fcn.008e2ac0
mov ecx, dword [0xce1d00]
mov edx, dword [ecx + 0x570]
mov ecx, dword [edx + 0x161c]
push ebp
mov edi, eax
call fcn.007e7020
mov eax, dword [0xce1d00]
mov ecx, dword [eax + 0x570]
mov edx, dword [ecx + 0x161c]
push 0x16
push 1
push 0xff
push 1
push 1
push 3
push edi
push esi
push edx
call fcn.004281f0
jmp 0x67ccb0
cmp dword [edi + 0xc], 0x45
jne 0x67c0be
push ebp
mov ecx, esi
call fcn.0067be00
jmp 0x67ccb0
mov ax, word [edi + 0x96]
shr ax, 9
test al, 1
je 0x67c142
call fcn.00679dc0
test al, al
je 0x67c142
push str.Dont_UseItem
push str.CoupleUIParams
mov ecx, 0xdacba0
call fcn.008e2b00
mov ebp, eax
call fcn.00626140
mov esi, eax
mov dword [esp + 0x30], esi
mov byte [esi], 0
mov edx, dword [edi + 0x14]
mov ecx, dword [0xce1d00]
mov ebx, dword [ecx + 0x570]
push 0
push 1
push edx
lea eax, [esp + 0x3c]
push ebp
push eax
mov dword [esp + 0x3c], 0
call fcn.00417090
add esp, 0xc
push eax
mov ecx, ebx
call fcn.00632870
push esi
mov dword [esp + 0x2c], 0xffffffff
call fcn.00626120
add esp, 4
jmp 0x67ccb0
mov ecx, ebp
call fcn.0046a490
test al, al
je 0x67c257
mov dword [esi + 0x53c], ebp
cmp dword [edi + 0x50], 0x1d
jne 0x67c1eb
mov ecx, dword [esi + 8]
call fcn.0043f4d0
test al, al
je 0x67c180
push 0
push 1
push str.msg_not_on_guildmatchzone
push str.RestartUIParams
jmp 0x67c706
mov ecx, dword [esi + 8]
call fcn.0043f730
test al, al
je 0x67c19f
push 0
push 1
push str.msg_not_on_pvpzone
push str.RestartUIParams
jmp 0x67c706
mov ecx, dword [esi + 8]
call fcn.0043f750
test al, al
je 0x67c1be
push 0
push 1
push str.msg_not_on_pkzone
push str.RestartUIParams
jmp 0x67c706
mov ecx, dword [esi + 8]
call fcn.00441390
test al, al
je 0x67c1dd
push 0
push 1
push str.msg_not_on_rebirthitem_at_zone
push str.RestartUIParams
jmp 0x67c706
mov ecx, dword [esi + 8]
push ebp
call fcn.0043f060
jmp 0x67ccb0
movsx ecx, word [edi + 0x72]
cmp dword [ebx + 0x1c8], ecx
jl 0x67c205
mov ecx, dword [esi + 8]
push ebp
call fcn.0043f0b0
jmp 0x67ccb0
mov ecx, dword [esi + 4]
push str.NotEnoughMp
call fcn.00633a00
push 0
push 0x2710
push str.Talk_UseFailedDueLowMp
mov ecx, 0xdacba0
call fcn.008e2a70
mov ecx, dword [esi + 4]
push eax
push ebx
call fcn.0063fec0
mov edx, dword [0xce1d00]
mov eax, dword [edx + 0x568]
movsx ecx, word [eax + 0x6c]
push ecx
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
jmp 0x67ccb0
mov ecx, ebp
call fcn.0046a4a0
test al, al
je 0x67c43a
mov edx, dword [ebp + 0x24]
mov eax, dword [edx + 0x50]
cmp eax, 0xe
je 0x67c294
cmp eax, 0x14
je 0x67c294
cmp eax, 0x22
je 0x67c294
cmp eax, 0xf
je 0x67c294
cmp eax, 0x17
je 0x67c294
cmp eax, 0x18
je 0x67c294
cmp eax, 0x1a
je 0x67c294
cmp eax, 0x19
jne 0x67c2c6
mov ecx, dword [0xce1d00]
add ecx, 0xfda0
call fcn.00464010
cmp al, 1
jne 0x67c2c6
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax + 0x50]
push ecx
mov ecx, dword [0xce1d00]
add ecx, 0xfda0
call fcn.00464020
jmp 0x67ccb0
mov edx, dword [ebp + 0x24]
mov eax, dword [edx + 0x50]
cmp eax, 0xe
jne 0x67c2f3
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x153c]
push ebp
call fcn.006b0be0
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x153c]
call fcn.006b09e0
jmp 0x67ccb0
cmp eax, 0x14
jne 0x67c30c
mov edx, dword [esi + 4]
mov ecx, dword [edx + 0x15bc]
push ebp
call fcn.007b7430
jmp 0x67ccb0
cmp eax, 0x22
jne 0x67c32c
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp + 0x1c]
lea edx, [esp + 0x18]
push edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
call fcn.00492130
add esp, 4
mov eax, dword [ebp + 0x24]
mov eax, dword [eax + 0x50]
cmp eax, 0xf
jne 0x67c353
movzx ecx, word [ebx + 0x1c0]
mov edx, dword [esi + 4]
push ecx
mov ecx, dword [edx + 0x158c]
push ebp
call fcn.0071c800
jmp 0x67ccb0
cmp eax, 0x15
jne 0x67c374
movzx eax, word [ebx + 0x1c0]
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x15f8]
push eax
push ebp
call fcn.007ba5c0
jmp 0x67ccb0
cmp eax, 0x17
jne 0x67c38d
mov edx, dword [esi + 4]
mov ecx, dword [edx + 0x15cc]
push ebp
call fcn.007bdb60
jmp 0x67ccb0
cmp eax, 0x18
jne 0x67c3a6
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x15d0]
push ebp
call fcn.007bfb10
jmp 0x67ccb0
cmp eax, 0x19
jne 0x67c3bf
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x15d8]
push ebp
call fcn.007c1610
jmp 0x67ccb0
cmp eax, 0x1b
jne 0x67c3d8
mov edx, dword [esi + 4]
mov ecx, dword [edx + 0x1538]
push ebp
call fcn.006ae5b0
jmp 0x67ccb0
cmp eax, 0x1f
jne 0x67c3ec
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x15f4]
push ebp
call fcn.007d8ec0
mov ecx, dword [ebp + 0x24]
mov eax, dword [ecx + 0x50]
cmp eax, 0x20
jne 0x67c41d
mov edx, dword [ebp + 0x18]
mov eax, dword [ebp + 0x1c]
mov dword [esp + 0x18], edx
mov edx, dword [esi + 4]
lea ecx, [esp + 0x18]
mov dword [esp + 0x1c], eax
push ecx
mov ecx, dword [edx + 0x15ec]
call fcn.007e07d0
jmp 0x67ccb0
cmp eax, 0x27
jne 0x67ccb0
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x165c]
push ebp
call fcn.006f98a0
jmp 0x67ccb0
mov eax, dword [ebp + 0x24]
cmp dword [eax + 0x50], 0x1a
jne 0x67c457
mov ecx, dword [esi + 4]
mov ecx, dword [ecx + 0x15d4]
push ebp
call fcn.007bf710
jmp 0x67ccb0
cmp dword [eax + 0x50], 0x21
jne 0x67c487
mov edx, dword [0xce1d00]
mov eax, dword [edx + 0x568]
push 0x32
push 0xbd5d80
push 0x320
push eax
add eax, 0xc
push eax
call fcn.00499fc0
add esp, 0x14
jmp 0x67ccb0
cmp dword [eax + 0x50], 0x23
jne 0x67c4a1
mov eax, dword [esi + 4]
mov ecx, dword [eax + 0x1614]
push ebp
call fcn.007e5ba0
jmp 0x67ccb0
mov eax, dword [edi + 0xc]
cmp eax, 0xa
je 0x67c4ae
cmp eax, 0xb
jne 0x67c4e4
test byte [ebx + 0x33cd], 4
je 0x67c4e4
mov ecx, dword [esi + 4]
push str.DoNotUsePotion
call fcn.00633a00
mov ecx, dword [0xce1d00]
mov edx, dword [ecx + 0x568]
movsx eax, word [edx + 0x6c]
push eax
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
mov eax, dword [edi + 0xc]
cmp eax, 0xa
jne 0x67c53a
mov ecx, dword [ebx + 0x1c4]
cmp ecx, dword [ebx + 0x1f0]
jl 0x67c53a
mov ecx, dword [esi + 4]
push str.FullHp
call fcn.00633a00
push 0
push 0xbb8
push str.Talk_UseFailedDueHpFull
mov ecx, 0xdacba0
call fcn.008e2a70
mov ecx, dword [esi + 4]
push eax
push ebx
call fcn.0063fec0
mov edx, dword [0xce1d00]
mov eax, dword [edx + 0x568]
movsx ecx, word [eax + 0x6c]
push ecx
jmp 0x67c58a
cmp eax, 0xb
jne 0x67c599
mov edx, dword [ebx + 0x1c8]
cmp edx, dword [ebx + 0x1d8]
jl 0x67c599
mov ecx, dword [esi + 4]
push str.FullMp
call fcn.00633a00
push 0
push 0xbb8
push str.Talk_UseFailedDueMpFull
mov ecx, 0xdacba0
call fcn.008e2a70
mov ecx, dword [esi + 4]
push eax
push ebx
call fcn.0063fec0
mov eax, dword [0xce1d00]
mov ecx, dword [eax + 0x568]
movsx edx, word [ecx + 0x6c]
push edx
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
cmp dword [edi + 8], 1
jne 0x67c5ec
movsx eax, word [edi + 0x78]
mov ecx, dword [ebx + 0x68f8]
add eax, ecx
js 0x67c5b4
cmp eax, 0x7d2b7500
jle 0x67c5ec
mov ecx, dword [esi + 4]
push 0
push str.Word_GelderCoupon_Over
push str.WordStrings
call fcn.00633bc0
mov eax, dword [0xce1d00]
mov ecx, dword [eax + 0x568]
movsx edx, word [ecx + 0x6c]
push edx
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
jmp 0x67ccb0
cmp dword [edi + 0x50], 0x25
jne 0x67c6ae
mov ecx, 0xdb6f08
call fcn.00679de0
test al, al
jne 0x67c661
mov ecx, dword [esi + 4]
push str.NoHaveMyFortune
call fcn.00633a00
push 0
push 0xbb8
push str.Talk_UseFailedFortuneDurAdd
mov ecx, 0xdacba0
call fcn.008e2a70
push eax
mov eax, dword [0xce1d00]
mov ecx, dword [eax + 0x568]
push ecx
mov ecx, dword [esi + 4]
call fcn.0063fec0
mov edx, dword [0xce1d00]
mov eax, dword [edx + 0x568]
movsx ecx, word [eax + 0x6c]
push ecx
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
jmp 0x67ccb0
push 0xd
push 1
push 0xc8
push 0
push 1
push 3
push str.F_MsgWarningUseFortuneItem
push str.FortuneUIParams
mov ecx, 0xdacba0
mov dword [esi + 0x53c], ebp
call fcn.008e2b00
push eax
push str.Warning
push str.WordStrings
mov ecx, 0xdacba0
call fcn.008e2ac0
mov ecx, dword [esi + 4]
push eax
push esi
call fcn.004281f0
jmp 0x67ccb0
cmp dword [edi + 0xc], 0x47
jne 0x67c6e3
cmp byte [ebx + 0x3d20], 0
jne 0x67c6ca
push 2
mov ecx, ebx
call fcn.0041aea0
test al, al
je 0x67c6e3
mov ecx, dword [esi + 4]
push 0
push str.Alert_TransSroll_TransState
push str.TransScrollStrings
call fcn.00633bc0
jmp 0x67ccb0
mov eax, dword [edi + 0xc]
cmp eax, 0x48
jne 0x67c7e0
cmp byte [ebx + 0x6a60], 1
jne 0x67c71e
push 0
push 1
push str.Notice_AlreadyUsedSoulSeed
push str.SoulSeedUIParams
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 4]
push eax
call fcn.00632870
jmp 0x67ccb0
mov edx, dword [edi + 0x38]
shr edx, 0x12
test dl, 1
je 0x67c76f
mov eax, dword [0xce1d00]
cmp byte [eax + 0x2904], 0
je 0x67c8c0
mov ecx, 0xdb7480
call fcn.0092c4c0
cmp al, 1
jne 0x67c76f
push str.strSystemMsg10
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 4]
push 0
push 1
push eax
call fcn.00632870
jmp 0x67ccb0
mov ecx, dword [0xce1d00]
mov ax, word [ecx + 0x560]
mov cx, word [ecx + 0x562]
lea edi, [esi + 0x578]
add cx, 0xa
add word [edi + 2], cx
push edi
add ax, 0xa
add word [edi], ax
push str.item_boom
mov ecx, 0xdbba20
call fcn.00984350
push 0
push edi
push 0
push str.etc_item4
call fcn.00499100
push ebp
call fcn.00495720
mov esi, dword [esi + 4]
add esp, 0x14
mov byte [esi + 0x830c], 1
mov dword [esi + 0x8370], 0
mov byte [esi + 0x8374], 1
jmp 0x67ccb0
cmp eax, 0x4a
jne 0x67c80e
push ebp
call fcn.00495720
mov esi, dword [esi + 4]
add esp, 4
mov byte [esi + 0x830c], 1
mov dword [esi + 0x8370], 0
mov byte [esi + 0x8374], 1
jmp 0x67ccb0
cmp eax, 0x4b
jne 0x67c9d8
mov ecx, dword [0xce1d00]
call fcn.0043eef0
test eax, eax
je 0x67c898
mov ecx, dword [0xce1d00]
mov edx, dword [ecx + 0x568]
movsx eax, word [edx + 0x6c]
push eax
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
push str.strSystemMsg11
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [0xce1d00]
mov edi, dword [ecx + 0x570]
push 0
push 0
push 0xff
push 0
push 1
push 4
push eax
push str.Warning
push str.WordStrings
mov ecx, 0xdacba0
call fcn.008e2ac0
push eax
push esi
mov ecx, edi
call fcn.004281f0
jmp 0x67ccb0
mov eax, dword [0xce1d00]
cmp byte [eax + 0x2904], 0
jne 0x67c8e6
mov edx, dword [eax + 0x568]
movsx eax, word [edx + 0x6c]
push eax
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
push str.strSystemMsg9
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 4]
push 0
push 1
push eax
call fcn.00632870
jmp 0x67ccb0
mov ecx, 0xdb7480
call fcn.0092bfa0
cmp al, 1
jne 0x67c91e
mov ecx, dword [0xce1d00]
mov edx, dword [ecx + 0x568]
movsx eax, word [edx + 0x6c]
push eax
push 3
push str.ui_btn_cancel
call fcn.00498fc0
add esp, 0xc
push str.strSystemMsg12
jmp 0x67c84b
mov edx, dword [0xce1d00]
mov eax, dword [edx + 0x570]
mov ecx, dword [eax + 0x1504]
call fcn.0081b260
test al, al
jne 0x67c94f
mov eax, dword [0xce1d00]
mov eax, dword [eax + 0x570]
mov ecx, dword [eax + 0x1504]
call fcn.0081b270
mov dword [esi + 0x53c], ebp
call fcn.00626140
mov edi, eax
mov dword [esp + 0x30], edi
mov byte [edi], 0
mov ebp, dword [ebp + 0x24]
mov ecx, dword [ebp + 0x14]
push 0x21
push 1
push 0xfa
push 1
push 1
push 3
push ecx
push str.PresendOpenWarning
push str.WordStrings
mov ecx, 0xdacba0
mov dword [esp + 0x4c], 1
call fcn.008e2ac0
push eax
lea edx, [esp + 0x50]
push edx
call fcn.00417090
add esp, 0xc
push eax
push str.Warning
push str.WordStrings
mov ecx, 0xdacba0
call fcn.008e2ac0
mov ecx, dword [esi + 4]
push eax
push esi
call fcn.004281f0
push edi
mov dword [esp + 0x2c], 0xffffffff
call fcn.00626120
add esp, 4
jmp 0x67ccb0
cmp eax, 0x4d
jne 0x67cc5a
mov eax, dword [0xce1d00]
cmp byte [eax + 0x2904], 0
je 0x67c8c0
mov ecx, 0xdb7480
call fcn.0092d090
mov ebx, eax
test ebx, ebx
jne 0x67ca28
push str.strSystemMsg7
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 4]
push ebx
push 1
push eax
call fcn.00632870
jmp 0x67ccb0
mov ecx, dword [0xce1d00]
mov eax, dword [ecx + 0x568]
cmp dword [eax + 0x3d50], 0
je 0x67ca72
mov eax, dword [eax + 0x3d50]
cmp byte [eax + 0x724], 0
je 0x67ca72
push str.strSystemMsg23
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 4]
push 0
push 1
push eax
call fcn.00632870
jmp 0x67ccb0
mov eax, dword [ecx + 0x570]
mov ecx, dword [eax + 0x1504]
call fcn.0081b260
test al, al
jne 0x67ca9e
mov ecx, dword [0xce1d00]
mov eax, dword [ecx + 0x570]
mov ecx, dword [eax + 0x1504]
call fcn.0081b270
mov dword [esi + 0x53c], ebp
mov eax, dword [ebp + 0x14]
push eax
mov ecx, 0xce48a0
call fcn.004ad2f0
mov edi, eax
mov dword [esp + 0x30], edi
test edi, edi
je 0x67ccb0
movzx edx, word [ebx + 0x2d]
push edx
mov ecx, 0xce48a0
call fcn.004ace50
xor ecx, ecx
add eax, 0x28
lea edx, [ebx + 0x193]
lea ebx, [ebx]
cmp dword [edx], 0
jg 0x67caf1
movzx edi, byte [edi + 0xc]
cmp dword [eax], edi
je 0x67cb3f
mov edi, dword [esp + 0x30]
inc ecx
add eax, 4
add edx, 9
cmp ecx, 4
jl 0x67cae0
mov cl, byte [edi + 0xc]
xor eax, eax
lea edi, [ebx + 0x198]
cmp byte [edi], cl
je 0x67cbb9
inc eax
add edi, 9
cmp eax, 4
jl 0x67cb08
push str.strSystemMsg14
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov ecx, dword [esi + 4]
push 0
push 1
push eax
call fcn.00632870
jmp 0x67ccb0
xor eax, eax
mov dword [esi + 0x584], eax
mov dword [esi + 0x588], eax
mov edx, dword [esi + 0x57c]
mov dword [eax + edx], ecx
add dword [esi + 0x584], 4
push str.strSystemMsg8
push str.GuardianUIParams2
mov ecx, 0xdacba0
call fcn.008e2b00
mov dword [esp + 0x30], eax
call fcn.00626140
mov edi, eax
mov dword [esp + 0x14], edi
mov byte [edi], 0
mov ebp, dword [ebp + 0x24]
mov eax, dword [ebp + 0x14]
mov ecx, dword [esp + 0x30]
push 0x22
push 1
push 0xfa
push 0
push 1
push 3
push eax
push ebx
push ecx
lea edx, [esp + 0x38]
push edx
mov dword [esp + 0x50], 2
call fcn.00417090
add esp, 0x10
jmp 0x67c9a3
xor ecx, ecx
mov dword [esi + 0x584], ecx
mov dword [esi + 0x588], ecx
mov edx, dword [esi + 0x584]
mov ecx, dword [esi + 0x57c]
mov dword [ecx + edx], eax
add dword [esi + 0x584], 4
lea ecx, [ebx + eax*8]
mov edx, dword [eax + ecx + 0x193]
push edx
mov ecx, 0xce48a0
call fcn.004aae70
push str.strSystemMsg13
push str.GuardianUIParams2
mov ecx, 0xdacba0
mov dword [esp + 0x38], eax
call fcn.008e2b00
mov dword [esp + 0x14], eax
call fcn.00626140
mov edi, eax
mov dword [esp + 0x18], edi
mov byte [edi], 0
mov eax, dword [esp + 0x30]
mov ecx, dword [eax + 8]
mov ebp, dword [ebp + 0x24]
mov edx, dword [ebp + 0x14]
mov eax, dword [esp + 0x14]
push 0x22
push 1
push 0xfa
push 0
push 1
push 3
push ecx
push edx
push ebx
push eax
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x54], 3
call fcn.00417090
add esp, 0x14
jmp 0x67c9a3
mov esi, dword [esi + 4]
push ebp
mov byte [esi + 0x830c], 1
mov dword [esi + 0x8370], 0
mov byte [esi + 0x8374], 1
call fcn.00495720
add esp, 4
jmp 0x67ccb0
mov esi, dword [ecx + 0x570]
push 0
push 1
push str.Warning_Cannot_Another
push str.CardIdentifyStrings
mov ecx, 0xdacba0
call fcn.008e2ac0
push eax
mov ecx, esi
call fcn.00632870
jmp 0x67ccb0
push ebp
mov ecx, esi
call fcn.0067a9e0
mov ecx, dword [esp + 0x20]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x18
ret 4