Function at 0x67174b6b
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x134
mov eax, dword [0x6753165c]
xor eax, esp
mov dword [esp + 0x130], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x150]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 0xd8], eax
mov eax, dword [esp + 0x15c]
mov dword [esp + 0xdc], eax
mov eax, dword [esp + 0x160]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0x164]
mov edx, dword [esp + 0x14c]
mov ebx, dword [esp + 0x148]
mov dword [esp + 0xe4], eax
mov eax, dword [esp + 0x168]
mov dword [esp + 0xcc], eax
xor ebp, ebp
mov eax, dword [esp + 0x170]
inc ebp
mov dword [esp + 0x44], eax
or eax, 0xffffffff
mov esi, dword [esp + 0x16c]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xa8], eax
xor eax, eax
mov edi, dword [ecx]
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x88], ecx
mov dword [esp + 0x90], eax
mov eax, dword [ebx]
mov ecx, eax
shr ecx, 0x13
and ecx, ebp
mov dword [esp + 0xc8], ebx
mov dword [esp + 0x74], ecx
xor ebx, ebx
mov ecx, eax
mov dword [esp + 0x38], eax
shr ecx, 0x12
and ecx, ebp
shr eax, 3
mov dword [esp + 0xc0], ecx
xor ecx, ebp
mov dword [esp + 0xc4], ecx
and eax, ebp
mov ecx, ebx
mov dword [esp + 0x70], ebx
push 0xfffffffffffffffe
mov dword [esp + 0x90], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xc0], ebx
mov dword [esp + 0x58], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0x84], ebx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x6c], ebx
pop ebx
mov dword [esp + 0xe8], edx
mov edx, dword [edx]
mov dword [esp + 0x20], esi
mov dword [esp + 0x30], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edx
mov dword [esp + 0xb0], edx
mov dword [esp + 0xac], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x64], ebx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x84], eax
mov dword [esp + 0xd0], 0x8a
mov eax, dword [edi]
mov ebp, ebx
mov ebx, eax
mov dword [esp + 0x40], ecx
and ebx, 0xffff0000
movzx ecx, ax
cmp dword [esp + 0x44], 0
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x2c], ecx
je 0x67174d82
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x28]
lea ecx, [eax + ecx*2]
lea eax, [ecx - 0xc8]
cmp edx, eax
ja 0x67177695
mov eax, dword [esp + 0xb0]
cmp edx, eax
cmovae eax, edx
mov dword [esp + 0x10], eax
mov edx, eax
cmp ebx, 0x80340000
jb 0x67174d3e
cmp ebx, 0x803f0000
jbe 0x67174d77
mov esi, dword [esp + 0x44]
mov eax, 0x7fffffeb
sub edx, dword [esp + 0xac]
sar edx, 1
mov ecx, dword [esi]
sub eax, ecx
cmp eax, edx
jb 0x67177797
lea eax, [ecx + edx]
mov dword [esi], eax
cmp eax, 0x10000
ja 0x67177797
mov edx, dword [esp + 0xac]
mov dword [esp + 0x10], edx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0xb0], edx
cmp ebx, 0x80340000
jb 0x67174d92
cmp ebx, 0x803f0000
jbe 0x67174dbc
mov eax, dword [esp + 0x54]
mov dword [esp + 0x3c], edx
test eax, eax
je 0x67174dc0
mov edx, dword [esp + 0xa8]
cmp dword [esp + 0xbc], 0
push 1
pop esi
cmove edx, esi
mov dword [esp + 0xa8], edx
jmp 0x67174dc0
mov eax, dword [esp + 0x54]
xor edx, edx
mov dword [esp + 0x54], edx
mov esi, edx
cmp ebx, 0x80220000
ja 0x671760c4
je 0x671760ad
mov eax, 0x800f0000
cmp ebx, eax
ja 0x67175982
je 0x67175978
mov eax, 0x80070000
cmp ebx, eax
ja 0x67174fbe
je 0x67174ee9
cmp ebx, 0x80000000
je 0x67177706
cmp ebx, 0x80010000
je 0x67177706
cmp ebx, 0x80020000
je 0x67174edf
cmp ebx, 0x80030000
je 0x67174ea2
cmp ebx, 0x80040000
je 0x67175d19
cmp ebx, 0x80050000
je 0x67174e94
cmp ebx, 0x80060000
jne 0x671766eb
mov edx, dword [esp + 0x10]
push 0x76
pop eax
mov word [edx], ax
mov eax, dword [esp + 0x18]
mov ax, word [eax + 4]
mov word [edx + 2], ax
mov eax, dword [esp + 0x18]
mov ax, word [eax + 8]
mov word [edx + 4], ax
mov eax, dword [esp + 0x18]
mov ax, word [eax + 0xc]
mov word [edx + 6], ax
movzx eax, byte [0x67495946]
mov edi, dword [esp + 0x18]
add edi, 0xc
lea edx, [edx + eax*2]
mov dword [esp + 0x10], edx
jmp 0x67175945
push 4
pop eax
add edi, eax
mov dword [esp + 0x18], edi
jmp 0x671766f7
mov ebp, dword [esp + 0x20]
push 0xa
pop eax
cmp ecx, eax
jae 0x67174eb5
lea edi, [ebp + 0x2c]
lea edi, [edi + ecx*4]
jmp 0x67174ebe
push 4
pop eax
add edi, eax
mov dword [esp + 0x18], edi
mov eax, dword [edi]
mov dword [esp + 0x70], eax
cmp ecx, dword [ebp + 0x74]
jbe 0x67175e0e
mov dword [ebp + 0x54], eax
mov eax, dword [esp + 0x58]
mov dword [eax], 0x73
jmp 0x671777a0
mov eax, 0x84
jmp 0x671760b2
mov ebp, dword [esp + 0x44]
test ebp, ebp
je 0x67174f04
mov eax, dword [edi + 0xc]
add eax, 5
add dword [ebp], eax
push 0x10
pop eax
add edi, eax
jmp 0x67175f9e
mov ebp, dword [esp + 0x10]
mov edi, dword [edi + 0xc]
push 0x77
pop eax
mov word [ebp], ax
lea ecx, [ebp + 0xa]
mov eax, dword [esp + 0x18]
push 0x10
pop edx
push 2
mov ax, word [eax + 4]
mov word [ebp + 2], ax
mov eax, dword [esp + 0x1c]
mov ax, word [eax + 8]
mov word [ebp + 4], ax
mov eax, dword [esp + 0x1c]
add eax, edx
mov dword [esp + 0x1c], eax
mov edx, dword [eax]
mov eax, dword [esp + 0x24]
mov dword [esp + 0x74], edx
mov eax, dword [eax + 0x1c]
lea esi, [eax + edx*2]
movzx eax, word [esi]
mov word [ecx], ax
mov ebx, eax
pop eax
add ecx, eax
add esi, eax
cmp ebx, 0x7b
push 0x7d
pop eax
cmove ebx, eax
lea eax, [edx + 1]
mov word [ebp + 8], ax
dec edi
xor eax, eax
inc eax
cmp edi, eax
jbe 0x67174fa3
xor ebp, ebp
inc ebp
movzx edx, word [esi]
cmp edx, ebx
jne 0x67174f8b
movzx eax, word [esi + 2]
cmp eax, ebx
jne 0x67174f8b
dec edi
movzx eax, bx
push 4
jmp 0x67174f8f
mov eax, edx
push 2
pop edx
add esi, edx
mov word [ecx], ax
dec edi
lea edx, [ecx + 2]
mov ecx, edx
cmp edi, ebp
ja 0x67174f74
mov ebp, dword [esp + 0x10]
xor eax, eax
mov word [ecx], ax
push 2
pop eax
add ecx, eax
mov eax, ecx
mov edx, ecx
sub eax, ebp
sar eax, 1
mov word [ebp + 6], ax
jmp 0x6717593d
cmp ebx, 0x80080000
je 0x67175956
cmp ebx, 0x80090000
je 0x67175910
mov ecx, 0x800a0000
cmp ebx, ecx
je 0x67175003
cmp ebx, 0x800b0000
je 0x671750fb
cmp ebx, 0x800c0000
je 0x671750fb
cmp ebx, 0x800e0000
jne 0x671766eb
mov edx, dword [edi + 4]
xor esi, esi
xor eax, eax
inc esi
cmp ebx, 0x800e0000
mov dword [esp + 0x54], esi
sete al
mov dword [esp + 0x94], eax
mov eax, 0x80000000
cmp edx, eax
jae 0x6717518f
lea eax, [edi + 8]
cmp dword [eax], 0x800d0000
jne 0x6717518a
mov dword [esp + 0x18], eax
cmp ebx, ecx
je 0x671766fc
mov ebp, dword [esp + 0x28]
cmp ebp, 0xfffffffe
mov esi, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
push 0xffffffffffffffff
pop eax
cmove ebp, eax
mov dword [esp + 0x80], esi
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x64], ebp
mov ebp, dword [esp + 0x74]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x7c], ebx
test ebp, ebp
je 0x67175145
test al, 8
je 0x67175147
mov eax, edx
test eax, eax
jns 0x67175098
add eax, 0x7f
sar eax, 7
movzx ecx, word [eax*2 + 0x6747fac0]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x671750b4
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x67483ec0]
imul eax, eax, 0xc
mov al, byte [eax + 0x6747cdcb]
test al, al
je 0x67175141
mov edx, dword [esp + 0x10]
push 0xf
pop ecx
push 2
mov word [edx], cx
pop ebp
add edx, ebp
movzx eax, al
push 9
pop ecx
mov word [edx], cx
add edx, ebp
mov word [edx], ax
add edx, ebp
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
mov dword [esp + 0x10], edx
jmp 0x6717594d
mov edx, dword [esp + 0x10]
xor eax, eax
inc eax
cmp ebx, 0x800c0000
push 0xd
mov dword [esp + 0x58], eax
mov eax, 0xa2
pop ecx
cmove eax, ecx
mov word [edx], ax
push 2
pop eax
add edx, eax
mov ebp, dword [esp + 0x28]
cmp ebp, 0xfffffffe
push 0xffffffffffffffff
pop eax
cmove ebp, eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], ebp
mov dword [esp + 0x78], eax
mov dword [esp + 0x64], ebp
jmp 0x6717593d
mov eax, dword [esp + 0x38]
test al, 8
mov ecx, dword [esp + 0x10]
push 0
pop eax
setne al
add eax, 0x1f
mov word [ecx], ax
push 2
pop eax
add ecx, eax
mov dword [esp + 0x10], ecx
test ebp, ebp
je 0x67175178
mov eax, 0xffff
cmp edx, eax
jbe 0x67175178
push ecx
push edx
call fcn.671a0e04
pop ecx
pop ecx
jmp 0x6717517e
xor eax, eax
mov word [ecx], dx
inc eax
mov edx, dword [esp + 0x10]
lea edx, [edx + eax*2]
jmp 0x671750ea
mov eax, 0x80000000
cmp ebx, ecx
jne 0x6717527f
cmp edx, eax
jae 0x6717527f
cmp dword [edi + 8], eax
jae 0x6717527f
lea esi, [edi + 0xc]
cmp dword [esi], 0x800d0000
jne 0x6717527f
mov eax, edx
test eax, eax
jns 0x671751c0
add eax, 0x7f
sar eax, 7
movzx ecx, word [eax*2 + 0x6747fac0]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x671751dc
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x67483ec0]
imul eax, eax, 0xc
cmp byte [eax + 0x6747cdcb], 0
jne 0x6717527f
cmp dword [esp + 0x74], 0
je 0x6717520c
cmp edx, 0x7f
jbe 0x6717520c
mov eax, dword [eax + 0x6747cdcc]
add eax, edx
jmp 0x6717521f
cmp edx, 0xff
ja 0x6717527f
mov eax, dword [esp + 0x20]
mov eax, dword [eax + 8]
movzx eax, byte [eax + edx]
cmp edx, eax
je 0x6717527f
cmp dword [edi + 8], eax
jne 0x6717527f
mov ebx, dword [esp + 0x38]
mov ecx, ebx
mov dword [esp + 0x18], esi
and ecx, 8
jne 0x6717524a
xor esi, esi
inc esi
mov dword [esp + 0xa4], esi
mov dword [esp + 0x84], esi
jmp 0x6717524d
xor esi, esi
inc esi
mov eax, ebx
or eax, 8
test ecx, ecx
cmovne eax, ebx
mov ebx, eax
mov dword [esp + 0x38], ebx
cmp dword [esp + 0x74], 0
je 0x67176796
lea eax, [esp + 0x110]
push eax
push edx
call fcn.671a0e04
pop ecx
pop ecx
mov edi, eax
jmp 0x671767a0
mov eax, dword [esp + 0x10]
xor ecx, ecx
add eax, 6
mov dword [esp + 0x48], ecx
push 0x20
mov dword [esp + 0x28], eax
mov esi, ecx
push ecx
lea eax, [esp + 0xf8]
mov dword [esp + 0x68], esi
push eax
mov dword [esp + 0x68], ecx
mov ebp, ecx
mov dword [esp + 0x4c], ecx
call sub.VCRUNTIME140.dll_memset
mov ecx, dword [esp + 0x24]
add esp, 0xc
mov edx, dword [esp + 0x10]
add ecx, 4
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, 0x800d0000
je 0x671753af
mov ebx, ebp
cmp edi, 0x801c0000
je 0x67175685
cmp edi, 0x801d0000
je 0x67175685
cmp edi, 0x80050000
jne 0x6717531d
add ecx, 4
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
push 0xd
pop esi
push 0xa
pop ebx
cmp edi, esi
je 0x6717530d
cmp edi, ebx
jne 0x6717561d
mov edx, dword [esp + 0x20]
or dword [edx + 0x70], 0x800
jmp 0x67175621
cmp edi, 0x80000000
jb 0x671752fb
mov eax, edi
and eax, 0xffff0000
cmp eax, 0x80180000
jne 0x6717777f
movzx edi, di
inc ebp
push 0xf
pop esi
lea eax, [edi - 6]
cmp eax, esi
ja case.0x67175345.12
jmp dword [eax*4 + 0x671777bb]
mov ebx, dword [esp + 0x88]
xor eax, eax
mov ecx, eax
mov al, byte [ebx + ecx + 0x40]
or byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0x20
jl 0x67175357
xor ebx, ebx
inc ebx
mov eax, dword [esp + 0x24]
lea ecx, [edx + 6]
cmp eax, ecx
jbe 0x6717538c
mov dword [esp + 0x5c], ebx
mov ebx, dword [esp + 0x44]
test ebx, ebx
je 0x6717538c
sub eax, ecx
mov dword [esp + 0x24], ecx
sar eax, 1
add dword [ebx], eax
mov ecx, dword [esp + 0x18]
push 4
pop eax
add ecx, eax
mov dword [esp + 0x18], ecx
mov edi, dword [ecx]
cmp edi, 0x800d0000
jne 0x671752d0
mov ebx, dword [esp + 0x6c]
mov esi, dword [esp + 0x60]
mov eax, dword [esp + 0x28]
cmp eax, 0xfffffffe
push 0xffffffffffffffff
pop ecx
cmove eax, ecx
cmp dword [esp + 0x5c], 0
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x78], ecx
mov dword [esp + 0x7c], eax
je 0x671758bb
mov eax, dword [esp + 0x38]
mov edi, dword [esp + 0x40]
and eax, 0x20000
jne 0x67175405
test edi, edi
jne 0x67175405
test esi, esi
jne 0x671758bb
cmp dword [esp + 0x48], 0
jne 0x67175428
test esi, esi
je 0x6717580a
cmp ebx, 0x800e0000
je 0x6717580a
test eax, eax
jne 0x6717580a
mov eax, dword [esp + 0x24]
push 2
pop ecx
mov word [eax], cx
mov eax, dword [esp + 0x24]
add eax, ecx
cmp dword [esp + 0x74], 0
mov dword [esp + 0x24], eax
je 0x671757ec
push eax
mov eax, 0x100
push eax
call fcn.671a0e04
mov ecx, dword [esp + 0x2c]
lea eax, [ecx + eax*2]
push eax
push 0x10ffff
mov dword [esp + 0x34], eax
call fcn.671a0e04
mov ecx, dword [esp + 0x34]
add esp, 0x10
lea eax, [ecx + eax*2]
mov dword [esp + 0x24], eax
jmp 0x6717580a
mov ebx, dword [esp + 0x88]
xor eax, eax
inc eax
mov dword [esp + 0x60], eax
xor eax, eax
mov ecx, eax
mov al, byte [ebx + ecx + 0x40]
not al
or byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0x20
jl 0x6717548e
jmp case.0x67175345.12
mov ebx, dword [esp + 0x88]
xor eax, eax
mov ecx, eax
mov al, byte [ebx + ecx + 0xa0]
or byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0x20
jl 0x671754b1
jmp case.0x67175345.12
mov ebx, dword [esp + 0x88]
xor eax, eax
inc eax
mov dword [esp + 0x60], eax
xor eax, eax
mov ecx, eax
mov al, byte [ebx + ecx + 0xa0]
not al
or byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0x20
jl 0x671754dc
jmp case.0x67175345.12
mov esi, dword [esp + 0x88]
xor eax, eax
mov edx, eax
lea eax, [esp + 0xf0]
sub esi, eax
lea ecx, [esp + 0xf0]
add ecx, edx
mov al, byte [esi + ecx]
or byte [ecx], al
inc edx
cmp edx, 0x20
jl 0x6717550b
mov edx, dword [esp + 0x10]
jmp case.0x67175345.12
mov esi, dword [esp + 0x88]
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [esp + 0x60], eax
xor eax, eax
mov edx, eax
lea eax, [esp + 0xf0]
sub esi, eax
lea ecx, [esp + 0xf0]
add ecx, edx
mov al, byte [esi + ecx]
not al
or byte [ecx], al
inc edx
cmp edx, 0x20
jl 0x67175545
jmp 0x67175715
or eax, 0xffffffff
push eax
push 0x674959c0
push dword [esp + 0x28]
mov eax, dword [esp + 0x44]
and eax, 0xfffffff7
push eax
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x104]
push eax
call fcn.67174297
add esp, 0x18
jmp 0x6717551f
push 0x674959c0
push dword [esp + 0x24]
mov eax, dword [esp + 0x40]
and eax, 0xfffffff7
push eax
lea eax, [esp + 0x30]
push eax
lea eax, [esp + 0x100]
push eax
call fcn.671743cb
add esp, 0x14
jmp 0x6717551f
or eax, 0xffffffff
push eax
push 0x67495a10
jmp 0x67175569
push 0x67495a10
jmp 0x67175591
lea eax, [ecx + 4]
mov ebp, ebx
mov dword [esp + 0x18], eax
xor ecx, ecx
mov eax, dword [eax]
mov edx, eax
movzx esi, ax
push 0x10
pop eax
shr edx, 0x10
cmp edi, eax
mov eax, dword [esp + 0x24]
setne cl
add ecx, 3
push 2
mov word [eax], cx
mov eax, dword [esp + 0x28]
pop edi
add eax, edi
mov dword [esp + 0x24], eax
mov word [eax], dx
mov eax, dword [esp + 0x24]
add eax, edi
mov dword [esp + 0x24], eax
mov word [eax], si
xor eax, eax
add dword [esp + 0x24], edi
inc eax
mov dword [esp + 0x40], eax
jmp 0x6717551f
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
cmp dword [eax + 4], 0x801f0000
je 0x6717565a
cmp dword [eax + 4], 0x801e0000
je 0x6717565a
push edi
push edi
push edx
push dword [esp + 0x44]
lea eax, [esp + 0x34]
push eax
lea eax, [esp + 0x104]
push eax
call fcn.67174450
add esp, 0x18
add ebp, eax
jmp 0x6717551f
add ecx, 8
mov dword [esp + 0x18], ecx
mov eax, dword [ecx]
cmp eax, 0x80050000
jne 0x67175673
lea eax, [ecx + 4]
mov dword [esp + 0x18], eax
mov eax, dword [eax]
cmp eax, esi
je 0x6717567b
cmp eax, ebx
jne 0x67175682
or dword [edx + 0x70], 0x800
push eax
jmp 0x67175638
xor ebx, ebx
lea eax, [ecx + 4]
cmp edi, 0x801d0000
mov dword [esp + 0x18], eax
mov edx, dword [eax]
mov eax, dword [esp + 0x38]
sete bl
mov dword [esp + 0x60], ebx
push 2
pop esi
test al, 8
je 0x671756af
xor ecx, ecx
cmp edx, esi
cmovle edx, ecx
test eax, 0x20000
je 0x67175722
lea eax, [edx - 8]
cmp eax, esi
ja 0x6717571e
mov eax, dword [esp + 0x24]
xor ecx, ecx
cmp edi, 0x801d0000
push 2
sete cl
pop ebx
add ecx, 3
mov word [eax], cx
xor eax, eax
mov ecx, dword [esp + 0x24]
add ecx, ebx
push 9
pop esi
cmp edx, esi
mov dword [esp + 0x24], ecx
push 0xb
setne al
add eax, 0xc
cmp edx, 8
movzx eax, ax
pop esi
cmove eax, esi
mov word [ecx], ax
xor ecx, ecx
mov eax, dword [esp + 0x24]
add eax, ebx
mov dword [esp + 0x24], eax
mov word [eax], cx
add dword [esp + 0x24], ebx
xor ebx, ebx
inc ebx
mov dword [esp + 0x40], ebx
mov edx, dword [esp + 0x10]
jmp 0x6717536b
or dword [esp + 0x48], ebx
mov ebx, dword [esp + 0x88]
imul esi, edx, 0xc
push 0x20
mov eax, dword [esi + 0x6747ac60]
add eax, ebx
push eax
lea eax, [esp + 0x128]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esi + 0x6747ac64]
add esp, 0xc
mov esi, dword [esi + 0x6747ac68]
xor ebp, ebp
test eax, eax
js 0x67175786
lea edx, [eax + ebx]
mov ecx, ebp
test esi, esi
js 0x67175774
mov al, byte [edx + ecx]
or byte [esp + ecx + 0x120], al
inc ecx
cmp ecx, 0x20
jl 0x67175762
jmp 0x67175786
mov al, byte [edx + ecx]
not al
and byte [esp + ecx + 0x120], al
inc ecx
cmp ecx, 0x20
jl 0x67175774
mov eax, esi
neg eax
test esi, esi
cmovns eax, esi
xor ebx, ebx
inc ebx
cmp eax, ebx
jne 0x671757a0
and byte [esp + 0x121], 0xc3
jmp 0x671757af
push 2
pop ecx
cmp eax, ecx
jne 0x671757af
and byte [esp + 0x12b], 0x7f
mov ecx, ebp
cmp edi, 0x801d0000
jne 0x671757d1
mov al, byte [esp + ecx + 0x120]
not al
or byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0x20
jl 0x671757b9
jmp 0x671757e5
mov al, byte [esp + ecx + 0x120]
or byte [esp + ecx + 0xf0], al
inc ecx
cmp ecx, 0x20
jl 0x671757d1
mov ebp, ebx
jmp 0x67175715
mov edx, 0x100
mov word [eax], dx
mov edx, 0xffff
mov eax, dword [esp + 0x24]
add eax, ecx
mov dword [esp + 0x24], eax
mov word [eax], dx
add dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
xor ecx, ecx
mov esi, dword [esp + 0x10]
push 2
pop edx
mov word [eax], cx
add dword [esp + 0x24], edx
push 0x70
pop eax
mov word [esi], ax
push 4
pop eax
add esi, eax
xor eax, eax
cmp ebx, 0x800e0000
sete al
movzx eax, ax
mov word [esi], ax
mov ecx, eax
test edi, edi
je 0x6717584b
push 4
pop ecx
or eax, ecx
mov word [esi], ax
movzx ecx, ax
test ebp, ebp
jle 0x671758a4
or ecx, edx
mov word [esi], cx
add esi, edx
mov eax, dword [esp + 0x24]
sub eax, esi
and eax, 0xfffffffe
push eax
lea eax, [esi + 0x20]
push esi
push eax
call sub.VCRUNTIME140.dll_memmove
add esp, 0xc
cmp ebx, 0x800e0000
jne 0x67175888
test edi, edi
jne 0x67175888
xor eax, eax
not byte [esp + eax + 0xf0]
inc eax
cmp eax, 0x20
jl 0x6717587b
push 0x20
lea eax, [esp + 0xf4]
push eax
push esi
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x30]
add esp, 0xc
add edx, 0x20
jmp 0x671758a8
mov edx, dword [esp + 0x24]
mov ebp, dword [esp + 0x3c]
mov eax, edx
sub eax, ebp
sar eax, 1
mov word [ebp + 2], ax
jmp 0x6717593d
xor eax, eax
cmp dword [esp + 0x94], esi
push 2
setne al
add eax, 0x6e
mov word [edx], ax
pop eax
add edx, eax
cmp dword [esp + 0x44], 0
mov dword [esp + 0x10], edx
jne 0x6717590b
cmp ebx, 0x800e0000
jne 0x671758f4
xor eax, eax
not byte [esp + eax + 0xf0]
inc eax
cmp eax, 0x20
jl 0x671758e7
push 0x20
lea eax, [esp + 0xf4]
push eax
push edx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x1c]
add esp, 0xc
add edx, 0x20
jmp 0x6717593d
test dword [esp + 0x38], 0x400
je 0x67175930
cmp dword [esp + 0x28], 0xfffffffe
jne 0x6717592c
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x64], eax
push 0x1c
jmp 0x67175932
push 0x1b
mov edx, dword [esp + 0x14]
pop ecx
mov word [edx], cx
add edx, 2
mov dword [esp + 0x10], edx
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
jmp 0x67176bef
mov eax, 0x88
mov dword [esp + 0x2c], eax
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [esp + 0x10]
mov word [eax + 4], cx
mov eax, dword [esp + 0x20]
mov dword [eax + 0x78], ecx
jmp 0x671760b6
mov eax, 0x8a
jmp 0x671760b2
mov eax, 0x80170000
cmp ebx, eax
ja 0x67175cd1
je 0x67175c71
cmp ebx, 0x80100000
je 0x67175c44
cmp ebx, 0x80110000
je 0x67175ab5
cmp ebx, 0x80120000
je 0x67175a5c
cmp ebx, 0x80130000
je 0x67175ab5
cmp ebx, 0x80140000
je 0x67175ab5
cmp ebx, 0x80150000
je 0x67175a08
cmp ebx, 0x80160000
jne 0x671766eb
mov eax, dword [esp + 0x38]
and eax, 0x400
neg eax
sbb eax, eax
neg eax
add eax, 0x19
mov edx, dword [esp + 0x10]
push 2
mov word [edx], ax
pop eax
add edx, eax
jmp 0x6717593d
mov eax, 0x8a
mov dword [esp + 0x2c], eax
xor eax, eax
cmp dword [edi + 4], eax
push 0xa
pop eax
jbe 0x67175a2f
cmp dword [edi + 8], eax
jb 0x67175a28
jne 0x67175a3f
cmp dword [edi + 0xc], 0x22
ja 0x67175a3f
mov eax, 0x95
jmp 0x67175a44
cmp dword [edi + 8], eax
jne 0x67175a3f
cmp dword [edi + 0xc], 0x22
mov eax, 0x95
je 0x67175a44
mov eax, 0x94
mov ecx, dword [esp + 0x10]
xor edx, edx
movzx eax, ax
inc edx
mov word [ecx + 4], ax
add dword [esp + 0x18], 0xc
jmp 0x671760b6
mov ecx, dword [esp + 0x20]
mov eax, 0x8a
mov dword [esp + 0x2c], eax
push 4
pop eax
add edi, eax
mov dword [esp + 0x18], edi
mov edx, dword [edi]
lea eax, [edi + 4]
mov dword [esp + 0x18], eax
mov eax, dword [eax]
cmp eax, dword [ecx + 0x74]
ja 0x671776ac
cmp eax, dword [ecx + 0x88]
jbe 0x67175a94
mov dword [ecx + 0x88], eax
mov ecx, dword [esp + 0x10]
push 2
pop ebx
sub edx, ebx
mov dword [esp + 0x70], edx
mov edx, 0x90
mov word [ecx + 4], dx
mov edx, ebx
mov word [ecx + 6], ax
jmp 0x671760b6
mov ecx, dword [esp + 0x20]
mov eax, 0x8a
mov dword [esp + 0x2c], eax
push 4
pop eax
mov esi, dword [ecx + 0x64]
add edi, eax
mov dword [esp + 0x18], edi
mov ebx, dword [edi]
lea eax, [edi + 4]
mov dword [esp + 0x18], eax
mov edx, dword [eax]
mov eax, dword [ecx + 0x1c]
mov dword [esp + 0x70], edx
lea ebp, [eax + edx*2]
xor eax, eax
mov edi, eax
cmp ax, word [ecx + 0x58]
jae 0x67175b15
movzx eax, word [esi + 8]
cmp ebx, eax
jne 0x67175b09
push ebx
push dword [esi]
push ebp
call fcn.6719f8e0
add esp, 0xc
test eax, eax
je 0x67175b61
mov ecx, dword [esp + 0x20]
movzx eax, word [ecx + 0x58]
inc edi
add esi, 0xc
cmp edi, eax
jl 0x67175aed
xor ecx, ecx
mov esi, dword [esp + 0x20]
movzx eax, word [esi + 0x58]
cmp edi, eax
jl 0x67175bd1
cmp dword [esp + 0x6c], 0x80140000
mov eax, ecx
jne 0x671776d6
xor ecx, ecx
inc ecx
mov edx, ecx
cmp ebx, ecx
jle 0x67175bab
movzx ecx, word [ebp + edx*2]
imul eax, eax, 0xa
add ecx, 0xffffffd0
add eax, ecx
mov ecx, 0xffff
cmp eax, ecx
ja 0x671776be
inc edx
cmp edx, ebx
jl 0x67175b40
jmp 0x67175bb0
xor ecx, ecx
cmp word [esi + 0xa], cx
jne 0x67175b17
cmp dword [esp + 0x6c], 0x80130000
mov eax, 0x90
lea ecx, [eax + 2]
cmove eax, ecx
mov ecx, dword [esp + 0x10]
mov word [ecx + 4], ax
mov ax, word [esi + 4]
mov word [ecx + 6], ax
mov ecx, dword [esp + 0x20]
mov eax, dword [esi + 4]
cmp eax, dword [ecx + 0x88]
jbe 0x67175ba1
mov dword [ecx + 0x88], eax
push 2
pop eax
mov edx, eax
jmp 0x671760b6
mov ecx, 0xffff
cmp eax, dword [esi + 0x74]
ja 0x671776d6
test eax, eax
mov edx, 0x92
cmove eax, ecx
mov ecx, dword [esp + 0x10]
mov word [ecx + 4], dx
mov word [ecx + 6], ax
jmp 0x67175ba1
cmp dword [esp + 0x6c], 0x80130000
mov eax, 0x90
mov edi, dword [esp + 0x10]
mov dword [esp + 0x40], ecx
lea edx, [eax + 2]
cmove eax, edx
cmp dword [esp + 0x44], 0
mov word [edi + 4], ax
mov eax, ecx
mov dword [esp + 0x90], eax
jne 0x67175c30
mov ecx, dword [esp + 0x58]
lea eax, [esp + 0x90]
push esi
push ecx
push eax
lea eax, [esp + 0x4c]
push eax
push ebx
push ebp
call fcn.67177bf9
add esp, 0x18
test eax, eax
je 0x671777a0
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x40]
inc word [edi + 4]
push 3
pop edx
mov word [edi + 6], cx
mov word [edi + 8], ax
jmp 0x671760b6
mov edx, dword [esp + 0x10]
mov ebx, 0x8a
push 4
pop eax
add edi, eax
mov dword [esp + 0x18], edi
mov eax, dword [edi]
mov dword [esp + 0x70], eax
lea eax, [ebx + 0x1d]
mov word [edx + 4], ax
xor eax, eax
lea edx, [eax + 1]
mov ebp, dword [esp + 0x20]
jmp 0x67176198
mov ebp, dword [esp + 0x28]
xor edx, edx
mov ecx, dword [esp + 0x14]
inc edx
mov ebx, dword [esp + 0x1c]
cmp ebp, 0xfffffffe
push 0xffffffffffffffff
pop eax
cmove ebp, eax
mov dword [esp + 0x54], edx
mov eax, dword [esp + 0x68]
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x38]
shr eax, 5
and eax, edx
mov dword [esp + 0x28], ebp
mov edx, dword [esp + 0x10]
or eax, 0xc
push 2
mov dword [esp + 0x68], ebp
mov dword [esp + 0x84], ecx
mov word [edx], ax
pop eax
add edx, eax
mov dword [esp + 0x7c], ebx
mov dword [esp + 0x10], edx
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x20]
jmp 0x67176bef
cmp ebx, 0x80180000
je 0x67175fb1
cmp ebx, 0x80190000
je 0x67177706
cmp ebx, 0x801a0000
je 0x67175fa7
cmp ebx, 0x801b0000
je 0x67175f60
cmp ebx, 0x80200000
je 0x67175f1c
cmp ebx, 0x80210000
jne 0x671766eb
mov ecx, dword [esp + 0x20]
xor eax, eax
mov ebx, eax
push 4
pop eax
mov esi, dword [ecx + 0x64]
add edi, eax
mov dword [esp + 0x18], edi
mov ebp, dword [edi]
lea eax, [edi + 4]
mov dword [esp + 0x18], eax
mov edx, dword [eax]
mov eax, dword [ecx + 0x1c]
mov dword [esp + 0x70], edx
lea edx, [eax + edx*2]
xor eax, eax
mov ecx, eax
mov dword [esp + 0x48], edx
mov edi, eax
mov dword [esp + 0x2c], ecx
mov eax, dword [esp + 0x20]
xor edx, edx
cmp dx, word [eax + 0x58]
mov edx, dword [esp + 0x48]
jae 0x671776f0
movzx eax, word [esi + 8]
cmp ebp, eax
jne 0x67175de2
push ebp
push dword [esi]
push edx
call fcn.6719f8e0
add esp, 0xc
test eax, eax
jne 0x67175dda
cmp dword [esp + 0x6c], 0x80210000
mov ecx, dword [esi + 4]
movzx ebx, word [esi + 0xa]
mov dword [esp + 0x2c], ecx
je 0x67175e85
inc eax
mov edx, eax
shl edx, cl
cmp ecx, 0x20
cmovb eax, edx
mov edx, dword [esp + 0x20]
or dword [edx + 0x8c], eax
cmp ecx, dword [edx + 0x88]
jbe 0x67175db8
mov dword [edx + 0x88], ecx
mov ecx, dword [edx + 0x60]
test ecx, ecx
je 0x67175dda
mov edx, dword [esp + 0x2c]
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x67175dd3
mov ecx, dword [ecx]
test ecx, ecx
jne 0x67175dc3
jmp 0x67175dda
xor eax, eax
inc eax
mov word [ecx + 6], ax
mov edx, dword [esp + 0x48]
mov ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x20]
inc edi
add esi, 0xc
movzx eax, word [eax + 0x58]
cmp edi, eax
jl 0x67175d64
test ecx, ecx
je 0x671776ec
test ebx, ebx
jne 0x67175e9b
mov ebp, dword [esp + 0x20]
mov dword [esp + 0x2c], ecx
cmp dword [esp + 0x28], 0xfffffffe
jne 0x67175e20
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov dword [esp + 0x64], eax
test byte [esp + 0x38], 8
mov edx, dword [esp + 0x10]
push 0
pop eax
setne al
xor esi, esi
add eax, 0x71
inc esi
mov word [edx], ax
push 2
pop eax
add edx, eax
mov word [edx], cx
add edx, eax
mov dword [esp + 0x10], edx
mov eax, esi
mov edx, esi
shl edx, cl
cmp ecx, 0x20
cmovb eax, edx
or dword [ebp + 0x8c], eax
cmp ecx, dword [ebp + 0x88]
jbe 0x67175e66
mov dword [ebp + 0x88], ecx
mov ecx, dword [ebp + 0x60]
test ecx, ecx
je 0x671768df
mov edx, dword [esp + 0x2c]
movzx eax, word [ecx + 4]
cmp eax, edx
je 0x67175e8e
mov ecx, dword [ecx]
test ecx, ecx
jne 0x67175e75
jmp 0x67175e92
mov ebp, dword [esp + 0x20]
jmp 0x67175f38
mov word [ecx + 6], si
mov edi, dword [esp + 0x18]
jmp 0x67175f9e
xor eax, eax
mov ecx, eax
mov edx, eax
mov dword [esp + 0x40], ecx
mov dword [esp + 0x60], edx
cmp dword [esp + 0x44], eax
jne 0x67175ede
push dword [esp + 0x20]
lea eax, [esp + 0x44]
push dword [esp + 0x5c]
push eax
lea eax, [esp + 0x6c]
push eax
push ebp
push dword [esp + 0x5c]
call fcn.67177bf9
add esp, 0x18
test eax, eax
je 0x671777a0
mov ecx, dword [esp + 0x40]
mov edx, dword [esp + 0x60]
mov ebp, dword [esp + 0x28]
cmp ebp, 0xfffffffe
mov ebx, dword [esp + 0x10]
push 0xffffffffffffffff
pop eax
cmove ebp, eax
test byte [esp + 0x38], 8
push 0
pop eax
setne al
mov dword [esp + 0x28], ebp
add eax, 0x73
push 2
mov word [ebx], ax
pop ebp
add ebx, ebp
mov dword [esp + 0x10], ebx
mov word [ebx], dx
mov edx, ebx
add edx, ebp
mov word [edx], cx
jmp 0x671763cc
mov ebp, dword [esp + 0x20]
push 4
pop eax
add edi, eax
mov dword [esp + 0x18], edi
mov eax, dword [edi]
mov dword [esp + 0x70], eax
cmp ecx, dword [ebp + 0x74]
ja 0x67174ecd
mov edx, dword [esp + 0x10]
push 0x75
pop eax
push 4
mov word [edx], ax
pop eax
mov word [edx + 2], cx
add edx, eax
xor eax, eax
mov dword [esp + 0x98], eax
inc eax
mov dword [ebp + 0xb8], eax
jmp 0x6717511f
mov ecx, dword [esp + 0xc8]
xor edx, edx
push 4
pop eax
add edi, eax
inc edx
mov dword [esp + 0x18], edi
mov eax, dword [edi]
mov dword [ecx], eax
mov ecx, eax
shr ecx, 0x12
and ecx, edx
mov dword [esp + 0x38], eax
mov dword [esp + 0xc0], ecx
xor ecx, edx
shr eax, 3
and eax, edx
mov dword [esp + 0xc4], ecx
mov dword [esp + 0x84], eax
mov edx, dword [esp + 0x10]
jmp 0x67175945
mov eax, 0x86
jmp 0x671760b2
mov ebp, dword [esp + 0x28]
xor edx, edx
inc edx
cmp ecx, 5
jbe 0x67175fd5
push 0x17
pop eax
cmp ecx, eax
jae 0x67175fd5
push 0xffffffffffffffff
cmp ebp, 0xfffffffe
mov dword [esp + 0x58], edx
pop eax
cmove ebp, eax
mov dword [esp + 0x28], ebp
mov eax, dword [esp + 0x68]
mov ebx, dword [esp + 0x1c]
push 0xf
pop esi
mov dword [esp + 0x78], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x64], ebp
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], ebx
push 0x10
pop ebp
cmp ecx, esi
je 0x67176054
cmp ecx, ebp
je 0x67176054
mov ebp, dword [esp + 0x20]
cmp ecx, 0xe
jne 0x67176012
or dword [ebp + 0x70], 0x400000
cmp ecx, 5
je 0x67176022
push 4
pop eax
cmp ecx, eax
je 0x67176022
cmp ecx, edx
jne 0x67176032
xor eax, eax
cmp dword [ebp + 0xa8], eax
jne 0x67176032
mov dword [ebp + 0xa8], edx
cmp dword [esp + 0x74], 0
jne 0x67176043
cmp ecx, 0xe
jne 0x67176043
push 0xd
pop eax
mov ecx, eax
mov edx, dword [esp + 0x10]
push 2
pop eax
mov word [edx], cx
add edx, eax
jmp 0x671750ea
mov ebx, dword [esp + 0x2c]
push 4
pop eax
add edi, eax
mov dword [esp + 0x18], edi
mov eax, dword [edi]
mov ecx, eax
shr ecx, 0x10
movzx edx, ax
cmp ebx, ebp
jne 0x67176085
test ecx, ecx
jne 0x67176085
mov edx, dword [esp + 0x10]
push 0xd
pop eax
push 2
mov word [edx], ax
pop ebp
jmp 0x671763cc
xor eax, eax
cmp ebx, ebp
mov ebx, dword [esp + 0x10]
sete al
add eax, esi
push 2
mov word [ebx], ax
pop ebp
add ebx, ebp
mov word [ebx], cx
add ebx, ebp
mov dword [esp + 0x10], ebx
mov word [ebx], dx
mov edx, ebx
jmp 0x671763cc
mov eax, 0x85
mov dword [esp + 0x2c], eax
mov ebx, dword [esp + 0x2c]
xor eax, eax
lea esi, [eax + 1]
jmp 0x67175c68
mov ecx, 0x80310000
cmp ebx, ecx
ja 0x67176537
je 0x67176528
mov eax, 0x802a0000
cmp ebx, eax
ja 0x671764cd
je 0x6717643c
cmp ebx, 0x80230000
je 0x6717618d
cmp ebx, 0x80240000
je 0x6717614b
cmp ebx, 0x80250000
je 0x67176144
cmp ebx, 0x80260000
je 0x6717613d
cmp ebx, 0x80270000
je 0x67176136
cmp ebx, 0x80280000
je 0x6717612f
cmp ebx, 0x80290000
je 0x671765af
jmp 0x671766eb
mov ebx, 0x83
jmp 0x67176190
mov ebx, 0x82
jmp 0x67176190
mov ebx, 0x81
jmp 0x67176190
mov ebx, 0x80
jmp 0x67176190
cmp dword [edi + 4], 0x80190000
jne 0x67176189
cmp dword [edi + 8], 0x80340000
jb 0x67176166
cmp dword [edi + 8], 0x803f0000
jbe 0x67176189
mov edx, dword [esp + 0x10]
mov eax, 0xa2
push 2
mov word [edx], ax
mov edi, dword [esp + 0x1c]
pop eax
push 4
add edx, eax
pop ecx
mov dword [esp + 0x10], edx
add edi, ecx
jmp 0x67175945
push 0x7f
jmp 0x6717618f
push 0x7e
pop ebx
mov ebp, dword [esp + 0x20]
inc word [ebp + 0x5e]
mov eax, dword [esp + 0x10]
inc word [ebp + 0x5c]
push 4
pop ecx
mov word [eax], bx
add dword [esp + 0x18], ecx
xor ecx, ecx
mov dword [esp + 0x34], eax
xor eax, eax
cmp dword [esp + 0x44], ecx
mov dword [esp + 0x8c], eax
lea eax, [esp + 0x8c]
cmove eax, ecx
mov edi, dword [ebp + 0xac]
push eax
push ebp
push dword [esp + 0xd4]
lea eax, [esp + 0xa8]
push eax
lea eax, [esp + 0xb0]
push eax
lea eax, [esp + 0xc8]
push eax
lea eax, [esp + 0xd0]
push eax
push edx
push dword [esp + 0x78]
lea eax, [esp + 0x3c]
push eax
lea eax, [esp + 0x5c]
push eax
push dword [esp + 0x64]
call fcn.671777fb
add esp, 0x30
mov dword [esp + 0x90], eax
test eax, eax
je 0x671777a0
mov edx, 0xffff
mov ecx, 0x8a
add word [ebp + 0x5c], dx
test esi, esi
je 0x6717624b
cmp ebx, ecx
je 0x6717624b
mov ecx, dword [esp + 0x54]
test eax, eax
push 1
pop eax
cmovg ecx, eax
mov dword [esp + 0x54], ecx
mov ecx, 0x8a
lea eax, [ebx - 0x7e]
cmp eax, 5
ja 0x67176257
add word [ebp + 0x5e], dx
cmp ebx, ecx
jne 0x671762f9
cmp dword [esp + 0x44], 0
jne 0x6717638b
mov ecx, dword [esp + 0x10]
xor eax, eax
push 0x79
mov esi, eax
pop ebp
movzx eax, word [ecx + 2]
mov edx, esi
inc esi
lea ecx, [ecx + eax*2]
cmp word [ecx], bp
jne 0x67176275
mov eax, dword [esp + 0x10]
mov ecx, 0xa7
mov ebp, dword [esp + 0x20]
cmp word [eax + 4], cx
jne 0x671762ba
xor eax, eax
inc eax
cmp edx, eax
jge 0x67177759
mov edx, dword [esp + 0x10]
lea eax, [ecx - 0x13]
mov word [edx + 4], ax
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
jmp 0x671764c2
push 2
pop eax
cmp edx, eax
jge 0x6717776c
xor eax, eax
inc eax
cmp esi, eax
jne 0x671762e9
mov edx, dword [esp + 0x34]
or ecx, 0xffffffff
mov eax, ecx
mov dword [esp + 0xb4], ecx
mov dword [esp + 0x9c], eax
mov dword [esp + 0x10], edx
jmp 0x67176328
cmp dword [esp + 0x90], 0
jle 0x6717630a
mov dword [esp + 0x54], eax
jmp 0x671762fe
mov ecx, 0xa7
mov ebp, dword [esp + 0x44]
test ebp, ebp
jne 0x6717638f
mov edx, dword [esp + 0x34]
mov dword [esp + 0x10], edx
cmp ebx, ecx
je 0x67175941
mov eax, dword [esp + 0x9c]
mov ecx, dword [esp + 0xb4]
mov esi, dword [esp + 0x14]
mov ebp, dword [esp + 0x68]
and dword [esp + 0x98], 0
mov dword [esp + 0x80], esi
mov esi, dword [esp + 0x1c]
mov dword [esp + 0x7c], esi
mov esi, 0x84
mov dword [esp + 0x78], ebp
mov ebp, dword [esp + 0x28]
mov dword [esp + 0x64], ebp
cmp ebx, esi
jb 0x67176405
cmp ebp, 0xfffffffe
jne 0x671763e0
cmp ecx, ebp
je 0x671763e0
test ecx, ecx
js 0x671763d3
mov ebx, dword [esp + 0xb8]
mov dword [esp + 0x28], ecx
xor ecx, ecx
inc ecx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x98], ecx
or ecx, 0xffffffff
jmp 0x671763da
mov ebp, dword [esp + 0x44]
mov esi, dword [esp + 0x8c]
mov ecx, 0x7fffffeb
mov edx, dword [ebp]
sub ecx, edx
lea eax, [esi - 4]
cmp ecx, eax
jb 0x67177797
lea eax, [esi - 4]
add eax, edx
mov edx, dword [esp + 0x10]
mov dword [ebp], eax
push 2
pop ebp
add edx, ebp
push 0x79
pop eax
mov word [edx], bp
add edx, ebp
mov word [edx], ax
add edx, ebp
mov word [edx], bp
add edx, ebp
jmp 0x6717593d
or ecx, 0xffffffff
mov dword [esp + 0x28], ecx
mov dword [esp + 0x64], ecx
jmp 0x67176401
test ecx, ecx
js 0x67176401
test eax, eax
jns 0x67176426
mov eax, dword [esp + 0xb8]
mov dword [esp + 0xa0], eax
mov eax, ecx
or eax, edi
mov dword [esp + 0x9c], eax
test eax, eax
jmp 0x67176420
cmp ebx, 0x7e
je 0x67176416
cmp ebx, 0x82
jne 0x67175941
test eax, eax
js 0x67175941
test ecx, ecx
js 0x67175941
mov ecx, dword [esp + 0xa0]
mov ebx, eax
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ebx
jmp 0x67175cc4
mov ebp, dword [esp + 0x20]
xor eax, eax
inc eax
mov dword [esp + 0xbc], eax
mov ecx, dword [ebp + 0x60]
mov dword [ebp + 0xb0], eax
jmp 0x6717648c
mov ax, word [ecx + 8]
cmp ax, word [ebp + 0x5e]
jb 0x67176490
mov eax, dword [esp + 0x44]
test eax, eax
je 0x6717646c
add dword [eax], 3
jmp 0x6717648a
mov edx, dword [esp + 0x10]
mov eax, 0xa5
push 2
pop ebx
mov word [edx], ax
add edx, ebx
mov ax, word [ecx + 4]
mov word [edx], ax
add edx, ebx
mov dword [esp + 0x10], edx
mov ecx, dword [ecx]
test ecx, ecx
jne 0x67176455
mov edx, dword [esp + 0x10]
xor ax, ax
cmp ax, word [ebp + 0x5e]
push 2
sbb eax, eax
neg eax
add eax, 0xa3
mov word [edx], ax
pop eax
add edx, eax
cmp dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x10], edx
jne 0x67175941
or eax, 0xffffffff
mov dword [esp + 0x28], eax
mov edi, dword [esp + 0x18]
mov esi, ebp
jmp 0x67175949
cmp ebx, 0x802b0000
je 0x67176512
cmp ebx, 0x802c0000
je 0x67176512
cmp ebx, 0x802d0000
je 0x671765af
cmp ebx, 0x802e0000
je 0x67176505
cmp ebx, 0x802f0000
je 0x67176528
cmp ebx, 0x80300000
jne 0x671766eb
mov eax, dword [esp + 0x20]
xor ecx, ecx
inc ecx
mov dword [eax + 0xb4], ecx
lea eax, [ebx + 0x7fd70000]
shr eax, 0x10
mov ax, word [eax*4 + 0x6747aa6c]
jmp 0x671759f7
mov eax, dword [esp + 0x20]
xor edi, edi
inc edi
mov dword [eax + 0xb4], edi
jmp 0x671765b2
mov ecx, 0x80390000
cmp ebx, ecx
ja 0x671766a3
je 0x67176586
cmp ebx, 0x80320000
je 0x6717667a
cmp ebx, 0x80330000
je 0x671765a4
cmp ebx, 0x80340000
je 0x67176595
cmp ebx, 0x80350000
je 0x67176595
cmp ebx, 0x80360000
je 0x67176595
cmp ebx, 0x80370000
je 0x67176586
cmp ebx, 0x80380000
jne 0x671766eb
xor edx, edx
mov edi, 0x10000
inc edx
mov ecx, edx
jmp 0x6717690c
xor ecx, ecx
mov edi, 0x10000
xor edx, edx
inc edx
jmp 0x6717690c
mov eax, dword [esp + 0x20]
or dword [eax + 0x70], 0x1000
xor edi, edi
inc edi
mov edx, dword [esp + 0x10]
lea eax, [ebx + 0x7fd70000]
shr eax, 0x10
xor ebp, ebp
push 2
pop esi
push 4
mov ax, word [eax*4 + 0x6747aa6c]
mov word [edx], ax
add edx, esi
mov eax, dword [esp + 0x1c]
pop ecx
add eax, ecx
mov ecx, edx
mov dword [esp + 0x18], eax
add edx, esi
mov dword [esp + 0x10], edx
mov ebx, dword [eax]
mov dword [esp + 0x34], ecx
test ebx, ebx
jle 0x6717666b
mov esi, dword [esp + 0x74]
push 4
pop ecx
add eax, ecx
mov dword [esp + 0x18], eax
mov ecx, dword [eax]
test esi, esi
je 0x6717661f
lea eax, [esp + 0x110]
push eax
push ecx
call fcn.671a0e04
mov edx, dword [esp + 0x18]
mov edi, eax
mov eax, dword [esp + 0x20]
pop ecx
pop ecx
jmp 0x67176627
mov word [esp + 0x110], cx
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x67176633
add dword [ecx], edi
jmp 0x6717665c
lea esi, [edi + edi]
push esi
lea eax, [esp + 0x114]
push eax
push edx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov eax, dword [esp + 0x18]
add edx, esi
mov esi, dword [esp + 0x74]
add ebp, edi
mov dword [esp + 0x10], edx
push 1
pop edi
sub ebx, 1
jne 0x671765f4
mov ecx, dword [esp + 0x34]
push 2
pop esi
xor eax, eax
mov word [ecx], bp
mov word [edx], ax
add edx, esi
jmp 0x6717593d
mov edx, dword [esp + 0x10]
mov eax, 0x9e
mov esi, dword [esp + 0x20]
push 2
or dword [esi + 0x70], 0x1000
mov word [edx], ax
mov edi, dword [esp + 0x1c]
pop eax
add edx, eax
mov dword [esp + 0x10], edx
jmp 0x67175949
cmp ebx, 0x803a0000
je 0x67176905
cmp ebx, 0x803b0000
je 0x67176905
cmp ebx, 0x803c0000
je 0x67176905
cmp ebx, 0x803d0000
je 0x671768e8
cmp ebx, 0x803e0000
je 0x671768e8
cmp ebx, 0x803f0000
je 0x671768e8
cmp ebx, 0x80000000
jae 0x6717777f
mov edx, dword [edi]
xor esi, esi
inc esi
cmp dword [esp + 0x74], 0
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x54], esi
je 0x67176796
test bl, 8
je 0x6717525d
mov eax, edx
test eax, eax
jns 0x67176721
add eax, 0x7f
sar eax, 7
movzx ecx, word [eax*2 + 0x6747fac0]
mov eax, edx
shl ecx, 7
and eax, 0x8000007f
jns 0x6717673d
dec eax
or eax, 0xffffff80
inc eax
add ecx, eax
movzx eax, word [ecx*2 + 0x67483ec0]
imul eax, eax, 0xc
mov al, byte [eax + 0x6747cdcb]
test al, al
je 0x6717525d
mov edx, dword [esp + 0x10]
push 0x10
pop ecx
push 2
mov word [edx], cx
pop ebx
add edx, ebx
movzx eax, al
push 9
pop ecx
mov word [edx], cx
add edx, ebx
mov word [edx], ax
add edx, ebx
cmp dword [esp + 0x28], 0xfffffffe
mov dword [esp + 0x10], edx
jne 0x67175941
or eax, 0xffffffff
mov dword [esp + 0x64], eax
mov dword [esp + 0x28], eax
jmp 0x67175941
mov edi, esi
mov word [esp + 0x110], dx
mov ecx, dword [esp + 0x10]
lea esi, [edi + edi]
push 0
pop eax
test bl, 8
push 2
setne al
add eax, 0x1d
mov word [ecx], ax
pop eax
add ecx, eax
lea eax, [esp + 0x110]
push esi
push eax
push ecx
mov dword [esp + 0x1c], ecx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov ax, word [esp + 0x110]
add edx, esi
mov dword [esp + 0x10], edx
push 0xd
pop ecx
cmp ax, cx
je 0x671767f3
push 0xa
pop ecx
cmp ax, cx
jne 0x67176800
mov esi, dword [esp + 0x20]
or dword [esi + 0x70], 0x800
jmp 0x67176804
mov esi, dword [esp + 0x20]
mov ecx, dword [esp + 0x28]
cmp ecx, 0xfffffffe
jne 0x6717685e
or ecx, 0xffffffff
mov dword [esp + 0x64], ecx
xor ecx, ecx
inc ecx
cmp edi, ecx
je 0x67176834
cmp dword [esp + 0x84], 0
je 0x67176834
or eax, 0xffffffff
mov ebx, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x1c], ebx
jmp 0x6717688a
movzx eax, ax
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x28], eax
cmp edi, ecx
je 0x67176886
mov ebx, dword [esi + 0xac]
movzx ecx, word [edx - 2]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ebx
jmp 0x6717688e
mov eax, dword [esp + 0x68]
mov dword [esp + 0x78], eax
xor eax, eax
inc eax
mov dword [esp + 0x64], ecx
cmp edi, eax
mov eax, dword [esp + 0x84]
je 0x6717687c
test eax, eax
jne 0x67176886
mov ebx, dword [esi + 0xac]
or ebx, eax
jmp 0x67176850
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x40]
xor edi, edi
inc edi
mov dword [esp + 0x80], eax
cmp dword [esp + 0xa4], 0
mov dword [esp + 0x54], edi
mov dword [esp + 0x7c], ebp
je 0x67175941
and dword [esp + 0x38], 0xfffffff7
and dword [esp + 0x84], 0
and dword [esp + 0xa4], 0
mov dword [esp + 0x54], edi
mov edi, dword [esp + 0x18]
mov dword [esp + 0x80], eax
mov dword [esp + 0x7c], ebp
jmp 0x67176bef
mov edx, dword [esp + 0x10]
jmp 0x67175941
push 4
pop ecx
add edi, ecx
mov dword [esp + 0x18], edi
mov ecx, dword [edi]
add edi, 4
mov dword [esp + 0x30], edi
mov dword [esp + 0x18], edi
mov edi, dword [edi]
jmp 0x6717659c
xor edx, edx
xor ecx, ecx
inc edx
mov edi, edx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x4c], ecx
test eax, eax
je 0x67176923
test ecx, ecx
mov eax, esi
cmovne eax, edx
mov dword [esp + 0x54], eax
xor edx, edx
cmp ecx, edi
push 2
pop eax
cmove eax, edx
test ecx, ecx
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0x7c]
cmovne eax, dword [esp + 0x1c]
mov ebp, eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x64]
cmovne eax, dword [esp + 0x28]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x80]
cmovne eax, dword [esp + 0x14]
mov esi, eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x78]
cmovne eax, dword [esp + 0x68]
mov dword [esp + 0x68], eax
mov eax, 0x803b0000
mov dword [esp + 0x94], ebp
mov dword [esp + 0x40], esi
cmp ebx, eax
ja 0x671769af
je 0x671769d0
cmp ebx, 0x80350000
je 0x671769d0
cmp ebx, 0x80360000
je 0x671769d9
cmp ebx, 0x80380000
je 0x671769d0
cmp ebx, 0x80390000
jmp 0x671769c5
cmp ebx, 0x803c0000
je 0x671769d9
cmp ebx, 0x803e0000
je 0x671769d0
cmp ebx, 0x803f0000
je 0x671769d9
mov eax, dword [esp + 0xc0]
jmp 0x671769e0
xor eax, eax
mov dword [esp + 0x50], eax
inc eax
jmp 0x671769e6
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x3c]
mov ebx, eax
mov dword [esp + 0x34], ebx
movzx edx, word [eax]
movzx eax, dx
mov dword [esp + 0x5c], edx
cmp eax, 0x86
ja 0x67176da6
cmp eax, 0x7e
jae 0x67176b81
cmp eax, 0x1d
jb 0x67176dc4
cmp eax, 0x20
jbe 0x67176ccd
cmp eax, 0x6d
jbe 0x67176dc4
cmp eax, 0x74
jbe 0x67176c01
push 0x75
pop esi
cmp eax, esi
jne 0x67176dc4
xor eax, eax
inc eax
cmp edi, eax
jne 0x67176a57
cmp ecx, eax
jne 0x67176a57
cmp dword [esp + 0x6c], 0
je 0x67176bce
test ecx, ecx
je 0x67176b2d
cmp ecx, eax
jne 0x67176a6f
cmp edi, 0x10000
je 0x67176b2d
cmp ecx, edi
lea esi, [ecx - 1]
cmovne esi, ecx
cmp dword [esp + 0x44], 0
je 0x67176ac3
push 2
mov eax, esi
lea edi, [esi + esi]
pop ecx
imul ecx
xor esi, esi
cmp edx, esi
jg 0x67177797
jl 0x67176a9f
cmp eax, 0x7fffffff
ja 0x67177797
mov edx, dword [esp + 0x44]
mov eax, 0x7fffffeb
mov ecx, dword [edx]
sub eax, ecx
cmp eax, edi
jb 0x67177797
lea eax, [edi + ecx]
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x4c]
mov dword [edx], eax
jmp 0x67176b07
test esi, esi
jle 0x67176b05
mov ebx, dword [esp + 0x10]
mov eax, dword [esp + 0x3c]
push 4
pop ebp
push ebp
push eax
push ebx
call sub.VCRUNTIME140.dll_memcpy
mov eax, ebx
add esp, 0xc
add ebx, ebp
sub esi, 1
jne 0x67176ad2
mov ebp, dword [esp + 0x94]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
xor esi, esi
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebp
cmp ecx, edi
je 0x67177552
cmp edi, 0x10000
je 0x67176b29
sub edi, ecx
mov dword [esp + 0x2c], edi
mov dword [esp + 0x4c], esi
mov ebx, dword [esp + 0x3c]
push 4
pop ebp
push ebp
lea eax, [ebx + 4]
push ebx
push eax
call sub.VCRUNTIME140.dll_memmove
add dword [esp + 0x1c], 8
add esp, 0xc
mov eax, 0x86
mov word [ebx + 2], bp
mov word [ebx], ax
mov edx, eax
mov word [ebx + 0xa], bp
push 0x79
pop eax
mov word [ebx + 8], ax
or eax, 0xffffffff
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x8c], 6
mov dword [esp + 0x30], eax
mov ebp, dword [esp + 0x10]
xor esi, esi
mov eax, dword [esp + 0x3c]
xor ecx, ecx
sub ebp, eax
mov dword [esp + 0x40], esi
sar ebp, 1
inc ecx
mov dword [esp + 0x94], esi
mov esi, dword [esp + 0x60]
mov dword [esp + 0x5c], ebp
cmp edi, ecx
jne 0x6717705d
cmp dword [esp + 0x4c], ecx
mov ecx, dword [esp + 0x48]
jne 0x67177061
cmp dword [esp + 0x6c], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], ecx
jne 0x67177061
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edi, dword [esp + 0x30]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0xd4]
or dword [esi + 0xac], eax
push 4
pop eax
add edi, eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x18], edi
jmp 0x67174ce3
test edi, edi
jne 0x67176c1f
mov edx, dword [esp + 0x3c]
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ebx
jmp 0x67176bda
xor edx, edx
inc edx
cmp edi, edx
jne 0x67176c3e
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebx
cmp ecx, edx
je 0x67176ceb
test ecx, ecx
jne 0x67176c53
cmp edi, 0x10000
jne 0x67176c6c
mov eax, dword [esp + 0x50]
add eax, 0x62
jmp 0x67176c77
cmp ecx, edx
jne 0x67176c68
cmp edi, 0x10000
jne 0x67176c80
mov eax, dword [esp + 0x50]
add eax, 0x64
jmp 0x67176c77
test ecx, ecx
jne 0x67176c80
cmp edi, edx
jne 0x67176c80
mov eax, dword [esp + 0x50]
add eax, 0x66
mov edx, dword [esp + 0x10]
mov word [edx], ax
jmp 0x67176ca9
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
add eax, 0x68
push 2
mov word [edx], ax
pop eax
add edx, eax
mov word [edx], cx
add edx, eax
xor ecx, ecx
movzx eax, di
cmp edi, 0x10000
cmovne ecx, eax
mov word [edx], cx
mov eax, dword [esp + 0x18]
mov ecx, esi
mov ebx, dword [esp + 0x34]
push 2
mov dword [esp + 0x20], ebp
pop ebp
add edx, ebp
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edx
mov dword [esp + 0x30], eax
jmp 0x6717755d
xor ebx, ebx
inc ebx
cmp edi, ebx
jne 0x67176cf4
mov ebx, dword [esp + 0x14]
xor edi, edi
inc edi
mov dword [esp + 0x14], ebx
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x1c], ebx
cmp ecx, edi
jne 0x67176cf7
mov edx, dword [esp + 0x10]
jmp 0x67176bd6
xor edi, edi
inc edi
cmp dword [esp + 0x74], 0
mov esi, dword [eax*4 + 0x67531454]
mov ebx, dword [esp + 0x10]
je 0x67176d54
mov ax, word [ebx - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
jne 0x67176d54
lea ecx, [ebx - 4]
sub ebx, ecx
sar ebx, 1
lea eax, [ebx + ebx]
push eax
push ecx
lea eax, [esp + 0x118]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [esp + 0x4c]
add esp, 0xc
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x30], eax
jmp 0x67176e12
movzx eax, word [ebx - 2]
mov ebx, edi
mov word [esp + 0x110], ax
mov ecx, eax
mov eax, dword [esp + 0x40]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebp
cmp edx, 0x1e
ja 0x67176e12
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebp
cmp dword [esp + 0x4c], edi
jbe 0x67176e12
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], ecx
mov eax, dword [eax + 0xac]
or eax, dword [esp + 0x84]
mov dword [esp + 0x1c], eax
jmp 0x67176e12
sub eax, 0x88
je 0x67176b81
dec eax
sub eax, 1
je 0x67176b81
sub eax, 0x18
je 0x67177044
push 0x17
pop eax
cmp dx, ax
jae 0x6717778b
xor esi, esi
inc esi
cmp edi, esi
jne 0x67176def
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebx
cmp ecx, esi
je 0x67176ceb
push 0x34
xor eax, eax
pop esi
mov ebx, eax
push 0x10
pop eax
cmp dx, ax
mov eax, dword [esp + 0x40]
je 0x67176e22
push 0xf
pop ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x1c], ebp
cmp dx, cx
je 0x67176e22
or eax, 0xffffffff
mov ebp, eax
mov edi, eax
mov eax, dword [esp + 0x3c]
lea ecx, [eax + 2]
jmp 0x67176e41
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x1c], eax
mov eax, edx
movzx ebp, word [edx + 4]
lea ecx, [edx + 2]
movzx edi, word [ecx]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x2c]
test eax, eax
je 0x67176bce
add dword [esp + 0x50], esi
cmp dword [esp + 0x4c], 0
jne 0x67176ef9
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x2c]
movzx eax, ax
cmp edx, 0x10000
jne 0x67176ec6
mov edx, dword [esp + 0x3c]
add eax, 0x21
mov word [edx], ax
mov eax, ecx
mov dword [esp + 0x10], eax
push 2
pop ecx
mov edx, dword [esp + 0x5c]
test ebx, ebx
je 0x67177000
lea esi, [ebx + ebx]
push esi
lea ecx, [esp + 0x114]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x1c]
add esp, 0xc
add edx, esi
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
jmp 0x67177556
xor esi, esi
inc esi
push 2
cmp edx, esi
jne 0x67176ee1
mov edx, dword [esp + 0x40]
add eax, 0x25
mov word [edx], ax
mov eax, ecx
mov dword [esp + 0x14], eax
jmp 0x67176e89
mov esi, dword [esp + 0x40]
add eax, 0x27
mov word [esi], ax
mov eax, ecx
mov word [eax], dx
pop ecx
add eax, ecx
mov dword [esp + 0x10], eax
jmp 0x67176e8a
mov ecx, dword [esp + 0x4c]
cmp ecx, 1
jne 0x67176f42
cmp eax, 0x10000
jne 0x67176f16
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x3c]
add eax, 0x23
jmp 0x67176f37
xor ecx, ecx
mov dword [esp + 0x10], edx
inc ecx
cmp eax, ecx
je 0x67176bce
mov eax, dword [esp + 0x50]
lea ecx, [edx + 2]
add eax, 0x27
mov word [edx], ax
mov eax, dword [esp + 0x2c]
dec eax
mov word [ecx], ax
lea eax, [ecx + 2]
jmp 0x67176e83
mov edx, dword [esp + 0x3c]
lea eax, [esi + 0x29]
mov esi, dword [esp + 0x2c]
push 2
mov word [edx], ax
lea eax, [edx + 2]
pop edx
mov word [eax], cx
add eax, edx
mov dword [esp + 0x10], eax
cmp esi, ecx
je 0x67176e87
test ebx, ebx
je 0x67176f8e
lea esi, [ebx + ebx]
push esi
lea ecx, [esp + 0x114]
push ecx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x68]
add esp, 0xc
add dword [esp + 0x10], esi
mov esi, dword [esp + 0x2c]
jmp 0x67176fb0
mov edx, dword [esp + 0x5c]
push 2
pop ecx
mov word [eax], dx
add eax, ecx
mov dword [esp + 0x10], eax
test edi, edi
js 0x67176fb0
mov word [eax], di
add eax, ecx
mov word [eax], bp
add eax, ecx
mov dword [esp + 0x10], eax
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x50]
add ecx, 2
movzx eax, ax
push 2
cmp esi, 0x10000
jne 0x67176fcd
add eax, 0x21
jmp 0x67176fd9
sub esi, dword [esp + 0x50]
cmp esi, 1
jne 0x67176fec
add eax, 0x25
mov esi, dword [esp + 0x14]
mov word [esi], ax
mov eax, ecx
mov dword [esp + 0x14], eax
pop ecx
jmp 0x67176e8e
mov edx, dword [esp + 0x14]
add eax, 0x27
mov word [edx], ax
mov eax, ecx
mov word [eax], si
jmp 0x67176ef0
mov word [eax], dx
mov edx, dword [esp + 0x10]
add edx, ecx
mov dword [esp + 0x10], edx
push 2
test edi, edi
js 0x67177033
mov word [edx], di
add edx, ecx
mov word [edx], bp
pop ebp
add edx, ebp
mov dword [esp + 0x10], edx
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
jmp 0x67177559
mov eax, dword [esp + 0x1c]
mov ebx, dword [esp + 0x38]
mov dword [esp + 0x34], eax
jmp 0x67177558
mov ecx, dword [esp + 0x14]
mov ebx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ebx
jmp 0x67176bda
mov ecx, dword [esp + 0x48]
cmp dx, word [esp + 0xd0]
jne 0x671770a0
mov ebp, 0x94
cmp word [eax + 4], bp
mov ebp, dword [esp + 0x5c]
jne 0x671770cc
mov ebp, dword [esp + 0x3c]
movzx eax, word [eax + 2]
mov dword [esp + 0x1c], ecx
push 0x78
pop ecx
cmp word [ebp + eax*2], cx
mov ebp, dword [esp + 0x5c]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x14], esi
jne 0x67176bce
mov eax, 0x84
cmp dx, ax
mov eax, dword [esp + 0x4c]
jae 0x671770d0
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], ecx
test eax, eax
jne 0x67176bce
xor edx, edx
inc edx
cmp edi, edx
cmova edi, edx
mov dword [esp + 0x2c], edi
jmp 0x671770d3
mov eax, dword [esp + 0x4c]
xor edx, edx
inc edx
test eax, eax
jne 0x671771c0
cmp edi, edx
jbe 0x67177134
cmp edi, 0x10000
je 0x67177134
mov ebx, dword [esp + 0x3c]
lea eax, [ebp*2]
push eax
push ebx
lea eax, [ebx + 6]
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [esp + 0x5c]
add esp, 0xc
add dword [esp + 0x10], 6
add eax, 0x96
mov word [ebx], ax
mov edx, 0x86
push 2
pop ecx
add ebx, ecx
mov eax, ebx
mov word [ebx], dx
add ebx, ecx
xor ecx, ecx
mov dword [esp + 0x40], ebx
add eax, 4
mov dword [esp + 0x3c], eax
mov word [ebx], cx
jmp 0x67177196
mov ebx, dword [esp + 0x3c]
lea eax, [ebp*2]
push eax
push ebx
lea esi, [ebx + 2]
push esi
call sub.VCRUNTIME140.dll_memmove
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov dword [esp + 0x3c], esi
push 2
pop eax
add edx, eax
mov dword [esp + 0x10], edx
test edi, edi
jne 0x67177183
mov ecx, dword [esp + 0x60]
mov eax, 0xa6
mov word [ebx], ax
mov ebx, dword [esp + 0x48]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ebx
jmp 0x67176bde
mov eax, dword [esp + 0x50]
add eax, 0x96
mov dword [esp + 0x94], ebx
mov word [ebx], ax
cmp edi, 0x10000
je 0x6717719f
dec edi
mov eax, dword [esp + 0x60]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x30], eax
jmp 0x671772ad
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], ecx
cmp eax, edx
jbe 0x6717729f
cmp dword [esp + 0x44], 0
je 0x6717722a
dec eax
mov esi, eax
mul dword [esp + 0x8c]
imul esi, dword [esp + 0x8c]
test edx, edx
jg 0x67177797
jl 0x671771fe
cmp eax, 0x7fffffff
ja 0x67177797
mov edx, dword [esp + 0x44]
mov eax, 0x7fffffeb
mov ecx, dword [edx]
sub eax, ecx
cmp eax, esi
jb 0x67177797
lea eax, [esi + ecx]
mov dword [edx], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], eax
jmp 0x6717729b
cmp dword [esp + 0x98], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], ecx
je 0x67177258
mov dword [esp + 0x14], esi
mov dword [esp + 0x1c], ecx
test ecx, ecx
jns 0x67177258
mov ecx, dword [esp + 0x68]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x1c], ecx
xor ecx, ecx
inc ecx
cmp eax, ecx
jbe 0x6717729f
mov ebx, dword [esp + 0x10]
lea esi, [ebp*2]
mov ebp, dword [esp + 0x3c]
lea edi, [eax - 1]
push esi
push ebp
push ebx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
add ebx, esi
sub edi, 1
jne 0x67177271
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x5c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x10], ebx
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x4c]
cmp edi, 0x10000
je 0x671773fb
sub edi, eax
cmp edi, 0x10000
je 0x671773fb
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x6717737a
test edi, edi
je 0x6717737a
mov eax, dword [esp + 0x8c]
add eax, 5
mov esi, eax
imul esi, edi
push 4
pop edx
sub esi, edx
mul edi
test edx, edx
jg 0x67177797
jl 0x671772f8
cmp eax, 0x7fffffff
ja 0x67177797
mov ecx, dword [ecx]
mov eax, 0x7fffffeb
sub eax, ecx
cmp eax, esi
jb 0x67177797
lea eax, [esi + ecx]
mov ecx, dword [esp + 0x44]
mov dword [ecx], eax
mov edx, dword [esp + 0x10]
mov ebp, dword [esp + 0x40]
test ebp, ebp
je 0x67177556
push 2
pop ebx
push 0x79
pop edi
mov esi, edx
sub esi, ebp
sar esi, 1
inc esi
lea eax, [esi + esi]
sub edx, eax
movzx ecx, word [edx + 2]
lea eax, [ecx + ecx]
sub ebp, eax
neg ecx
movzx eax, si
sbb ecx, ecx
and ebp, ecx
mov ecx, dword [esp + 0x10]
mov word [ecx], di
add ecx, ebx
mov word [ecx], ax
add ecx, ebx
mov word [edx + 2], ax
mov edx, ecx
mov dword [esp + 0x10], ecx
test ebp, ebp
jne 0x67177328
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x14]
push 2
mov dword [esp + 0x34], eax
pop ebp
jmp 0x67177560
lea esi, [edi - 1]
test esi, esi
js 0x67177312
mov ebx, dword [esp + 0x50]
lea edi, [ebp*2]
mov edx, dword [esp + 0x10]
add ebx, 0x96
push 2
pop ebp
mov word [edx], bx
add edx, ebp
mov dword [esp + 0x10], edx
test esi, esi
je 0x671773cd
mov ecx, dword [esp + 0x40]
mov eax, 0x86
mov word [edx], ax
add edx, ebp
mov eax, edx
mov dword [esp + 0x40], edx
sub eax, ecx
sar eax, 1
neg ecx
sbb ecx, ecx
and eax, ecx
mov word [edx], ax
add edx, ebp
mov dword [esp + 0x10], edx
push edi
push dword [esp + 0x40]
push edx
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [esp + 0x1c]
add esp, 0xc
add edx, edi
sub esi, 1
mov dword [esp + 0x10], edx
jns 0x67177399
mov eax, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov dword [esp + 0x30], eax
jmp 0x67177316
mov edx, dword [esp + 0x10]
mov ebp, 0x84
mov ebx, dword [esp + 0x6c]
lea esi, [edx - 4]
movzx eax, word [esi + 2]
mov edi, esi
add eax, eax
sub edi, eax
movzx eax, word [edi]
mov ecx, eax
cmp ax, bp
jne 0x6717742f
test ebx, ebx
je 0x67177543
lea eax, [ebp + 2]
mov word [edi], ax
mov ecx, eax
cmp cx, bp
je 0x67177543
mov eax, 0x85
cmp cx, ax
je 0x67177543
cmp dword [esp + 0x44], 0
movzx edx, cx
jne 0x6717748c
cmp dword [esp + 0x90], 0
movzx eax, cx
jge 0x67177466
lea eax, [ecx + 5]
mov word [edi], ax
movzx eax, ax
mov ebp, 0x8a
movzx edx, ax
cmp ax, bp
jne 0x67177491
movzx eax, word [edi + 2]
mov edx, ebp
push 0x78
pop ecx
cmp word [edi + eax*2], cx
lea eax, [ebp + 5]
je 0x67177496
mov word [edi], ax
mov edx, eax
jmp 0x67177496
mov ebp, 0x8a
mov eax, 0x8f
test ebx, ebx
je 0x67177530
cmp dx, bp
je 0x671774bd
cmp dx, ax
je 0x671774bd
lea eax, [edx + 1]
mov edx, dword [esp + 0x10]
push 0x7c
mov word [edi], ax
pop eax
push 2
mov word [esi], ax
pop ebp
jmp 0x6717750b
mov esi, dword [esp + 0x10]
sub esi, edi
sar esi, 1
lea eax, [esi + esi]
push eax
lea eax, [edi + 4]
push edi
push eax
call sub.VCRUNTIME140.dll_memmove
mov edx, dword [esp + 0x1c]
add esp, 0xc
push 4
pop eax
add edx, eax
mov eax, 0x8c
cmp word [edi], bp
push 0x7c
lea ecx, [eax - 5]
cmove eax, ecx
mov word [edi], ax
pop eax
mov word [edx], ax
lea eax, [esi + 2]
push 2
pop ebp
add edx, ebp
mov word [edx], ax
add edx, ebp
mov dword [esp + 0x10], edx
mov word [edi + 2], ax
mov eax, dword [esp + 0x94]
test eax, eax
je 0x6717751e
mov ecx, 0x98
mov word [eax], cx
xor eax, eax
cmp dword [esp + 0x4c], ebp
cmovae eax, ebx
mov dword [esp + 0x6c], eax
jmp 0x67177022
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x10]
add eax, 0x7a
mov word [esi], ax
jmp 0x6717763a
mov eax, dword [esp + 0x50]
add eax, 0x7a
mov word [esi], ax
jmp 0x67176eb5
mov edx, dword [esp + 0x10]
push 2
pop ebp
mov ecx, dword [esp + 0x14]
push 0x79
pop edi
cmp dword [esp + 0x6c], 0
je 0x6717768c
movzx ecx, word [ebx]
mov eax, ecx
cmp eax, 0x50
ja 0x671775c4
je 0x67177594
cmp eax, 0x1d
jb 0x67177612
cmp eax, 0x20
jbe 0x67177594
cmp eax, 0x29
je 0x67177594
cmp eax, 0x36
je 0x67177594
cmp eax, 0x43
jne 0x67177612
cmp dword [esp + 0x74], 0
movzx eax, byte [eax + 0x674958d0]
lea ebx, [ebx + eax*2]
mov dword [esp + 0x34], ebx
je 0x67177612
mov ax, word [ebx - 2]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xd800
cmp ax, cx
jne 0x67177612
add ebx, 2
jmp 0x6717760e
cmp eax, 0x5d
je 0x671775e6
cmp eax, 0x6d
jbe 0x67177612
cmp eax, 0x6f
jbe 0x671775e1
push 0x70
pop eax
cmp cx, ax
jne 0x67177612
movzx eax, word [ebx + 2]
jmp 0x6717760b
add ebx, 0x22
jmp 0x6717760e
movzx eax, word [ebx + 4]
push 0x10
pop ecx
cmp ax, cx
je 0x67177600
push 0xf
pop ecx
cmp ax, cx
je 0x67177600
xor eax, eax
mov ecx, eax
jmp 0x67177602
mov ecx, ebp
movzx eax, byte [0x6749592d]
add eax, ecx
lea ebx, [ebx + eax*2]
mov dword [esp + 0x34], ebx
mov eax, edx
sub eax, ebx
mov esi, eax
sar esi, 1
test esi, esi
jle 0x67176bd2
movzx ecx, word [ebx]
cmp ecx, 0x76
jae 0x6717764b
mov cl, byte [ecx + 0x6747ad08]
test cl, cl
je 0x6717764b
movzx eax, cl
mov word [ebx], ax
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
jmp 0x67176bde
and eax, 0xfffffffe
push eax
lea eax, [ebx + 4]
push ebx
push eax
call sub.VCRUNTIME140.dll_memmove
mov edx, dword [esp + 0x1c]
add esp, 0xc
mov ecx, 0x84
push 4
pop eax
add edx, eax
mov eax, dword [esp + 0x34]
mov word [eax], cx
lea ecx, [esi + 2]
mov word [edx], di
add edx, ebp
mov word [edx], cx
add edx, ebp
mov eax, dword [esp + 0x34]
mov dword [esp + 0x10], edx
mov word [eax + 2], cx
jmp 0x6717763a
mov ebx, dword [esp + 0x1c]
jmp 0x67176bda
cmp edx, ecx
mov ecx, dword [esp + 0x58]
sbb eax, eax
and eax, 0x22
add eax, 0x98
mov dword [ecx], eax
jmp 0x671777a0
mov eax, dword [esp + 0x58]
mov dword [eax], 0x73
mov dword [ecx + 0x54], edx
jmp 0x671777a0
mov eax, dword [esp + 0x58]
mov dword [eax], 0xa1
mov eax, dword [esp + 0x70]
add eax, edx
mov dword [esi + 0x54], eax
jmp 0x671777a0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x70]
mov dword [eax], 0x73
mov dword [esi + 0x54], ecx
jmp 0x671777a0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x58]
mov dword [ecx], 0x73
mov ecx, dword [esp + 0x70]
mov dword [eax + 0x54], ecx
jmp 0x671777a0
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0x68]
mov dword [ecx], eax
mov ecx, dword [esp + 0xdc]
mov eax, dword [esp + 0x28]
mov dword [ecx], eax
mov ecx, dword [esp + 0xe0]
mov eax, dword [esp + 0x14]
mov dword [ecx], eax
mov ecx, dword [esp + 0xe4]
mov eax, dword [esp + 0x1c]
mov dword [ecx], eax
mov ecx, dword [esp + 0xe8]
mov eax, dword [esp + 0x10]
mov dword [ecx], eax
mov eax, dword [esp + 0xec]
mov dword [eax], edi
mov eax, dword [esp + 0xa8]
jmp 0x671777a2
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x70]
mov dword [ebp + 0x54], ecx
mov dword [eax], 0x9a
jmp 0x671777a0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x70]
mov dword [ebp + 0x54], ecx
mov dword [eax], 0x7f
jmp 0x671777a0
mov eax, dword [esp + 0x58]
mov dword [eax], 0xbd
jmp 0x671777a0
mov eax, dword [esp + 0x58]
mov dword [eax], 0x6e
jmp 0x671777a0
mov eax, dword [esp + 0x58]
push 0x78
pop ecx
mov dword [eax], ecx
xor eax, eax
mov ecx, dword [esp + 0x140]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.671a2acb
add esp, 0x134
ret