Function at 0x70d8e590
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
lea esi, [ebp - 0x1a]
push ebx
lea ebx, [ebp - 0x220]
push ecx
sub esp, 0x6b8
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x68c], eax
mov eax, dword [ecx + 8]
mov dword [ebp - 0x690], eax
mov eax, ebx
lea esi, [esi]
lea edi, [edi]
movzx ecx, word [edx]
test cx, cx
je 0x70d8e5e6
add eax, 2
add edx, 2
mov word [eax - 2], cx
cmp eax, esi
jne 0x70d8e5d0
xor edx, edx
mov word [eax], dx
mov eax, ebx
jmp 0x70d8e5f9
mov edx, 0x5f
mov word [eax - 2], dx
movzx edx, word [eax]
add eax, 2
cmp dx, 0x5c
je 0x70d8e5f0
cmp dx, 0x2f
je 0x70d8e5f0
cmp dx, 0x2e
je 0x70d8e5f0
test dx, dx
jne 0x70d8e5f9
mov eax, dword [ebp - 0x68c]
mov eax, dword [eax + 0xc]
mov edi, dword [eax + 0x228]
test edi, edi
jne 0x70d8e63a
jmp 0x70d8e680
mov edi, dword [edi + 0x210]
test edi, edi
je 0x70d8e680
mov dword [esp + 4], edi
mov esi, edi
mov dword [esp], ebx
call dword [sym.imp.kernel32.dll_lstrcmpiW]
sub esp, 8
test eax, eax
jne 0x70d8e630
test byte [0x70d98058], 8
jne 0x70d8eec8
mov eax, dword [edi + 0x20c]
mov ebx, dword [ebp - 0x690]
mov dword [ebx], eax
mov eax, dword [edi + 0x208]
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov dword [esp + 8], 0x214
mov dword [esp + 4], 0
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x30]
mov eax, dword [eax + 0x18]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_HeapAlloc]
mov edi, eax
mov eax, dword [ebp - 0x68c]
sub esp, 0xc
mov dword [esp + 0x14], 0x2000
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], ebx
mov eax, dword [eax + 8]
mov dword [esp], eax
call sym._LoadImageW_24
mov esi, dword [ebp - 0x690]
xor edx, edx
mov dword [edi + 0x208], eax
sub esp, 0x18
mov dword [esi], 0
test eax, eax
je 0x70d8ed18
lea edx, [ebp - 0x34c]
mov dword [esp + 4], 0x54
mov dword [esp + 8], edx
mov dword [esp], eax
call sym._GetObjectW_12
sub esp, 0xc
cmp eax, 0x54
jne 0x70d8ed10
cmp word [ebp - 0x33a], 0x20
jne 0x70d8ed10
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x668], eax
test eax, eax
jne 0x70d8ed10
mov eax, dword [ebp - 0x32c]
imul eax, dword [ebp - 0x330]
mov esi, dword [ebp - 0x338]
mov dword [ebp - 0x694], eax
test eax, eax
jle 0x70d8ed10
mov dword [ebp - 0x678], edi
xor eax, eax
mov edi, dword [ebp - 0x690]
jmp 0x70d8e78f
add eax, 1
cmp dword [ebp - 0x694], eax
je 0x70d8f1e4
movzx edx, byte [esi + eax*4 + 3]
xor ecx, ecx
cmp dl, 0xff
setne cl
mov dword [edi], ecx
je 0x70d8e780
mov edx, dword [ebp - 0x694]
mov edi, dword [ebp - 0x678]
lea ecx, [edx - 1]
cmp ecx, 0xe
jle 0x70d8ece0
shr edx, 4
mov dword [ebp - 0x698], ecx
mov eax, esi
pxor xmm7, xmm7
movdqu xmm2, xmmword [0x70d9b130]
mov dword [ebp - 0x69c], esi
mov esi, edx
mov edx, dword [ebp - 0x668]
lea esi, [esi]
movdqu xmm6, xmmword [eax]
movdqu xmm0, xmmword [eax + 0x10]
movdqu xmm5, xmm2
add edx, 1
movdqu xmm1, xmmword [eax]
movdqu xmm3, xmmword [eax + 0x20]
add eax, 0x40
pand xmm0, xmm2
pand xmm6, xmm2
movdqu xmm4, xmmword [eax - 0x10]
packuswb xmm6, xmm0
movdqu xmm0, xmmword [eax - 0x30]
psrlw xmm1, 8
pand xmm3, xmm2
psrlw xmm4, 8
psrlw xmm0, 8
packuswb xmm1, xmm0
movdqu xmm0, xmmword [eax - 0x10]
pand xmm0, xmm2
packuswb xmm3, xmm0
movdqu xmm0, xmmword [eax - 0x20]
pand xmm5, xmm3
psrlw xmm3, 8
psrlw xmm0, 8
packuswb xmm0, xmm4
movdqu xmm4, xmm2
pand xmm4, xmm6
psrlw xmm6, 8
packuswb xmm4, xmm5
movdqu xmm5, xmm6
packuswb xmm5, xmm3
movdqu xmm3, xmm2
movups xmmword [ebp - 0x688], xmm5
movdqu xmm5, xmm2
pand xmm3, xmm1
pand xmm5, xmm0
psrlw xmm1, 8
movdqu xmm6, xmm3
psrlw xmm0, 8
packuswb xmm6, xmm5
packuswb xmm1, xmm0
movdqu xmm0, xmm4
punpckhbw xmm4, xmm7
movdqu xmm5, xmm1
punpcklbw xmm0, xmm7
punpckhbw xmm1, xmm7
paddw xmm1, xmmword [0x70d9b140]
punpcklbw xmm5, xmm7
paddw xmm5, xmmword [0x70d9b140]
pmullw xmm0, xmm5
pmullw xmm4, xmm1
psrlw xmm0, 8
psrlw xmm4, 8
pand xmm0, xmm2
pand xmm4, xmm2
movdqu xmm3, xmm0
packuswb xmm3, xmm4
movups xmmword [ebp - 0x668], xmm3
movdqu xmm3, xmm6
movzx ecx, byte [ebp - 0x668]
punpcklbw xmm3, xmm7
movdqu xmm4, xmm3
movdqu xmm3, xmm6
movdqu xmm6, xmmword [ebp - 0x688]
punpckhbw xmm3, xmm7
pmullw xmm4, xmm5
movdqu xmm0, xmm3
punpckhbw xmm6, xmm7
pmullw xmm0, xmm1
pmullw xmm1, xmm6
psrlw xmm4, 8
pand xmm4, xmm2
psrlw xmm0, 8
psrlw xmm1, 8
movdqu xmm3, xmm4
pand xmm0, xmm2
pand xmm1, xmm2
packuswb xmm3, xmm0
movdqu xmm0, xmmword [ebp - 0x688]
movups xmmword [ebp - 0x678], xmm3
punpcklbw xmm0, xmm7
pmullw xmm5, xmm0
psrlw xmm5, 8
pand xmm5, xmm2
movdqu xmm6, xmm5
packuswb xmm6, xmm1
movups xmmword [ebp - 0x688], xmm6
movdqu xmm6, xmmword [ebp - 0x668]
movups xmmword [ebp - 0x368], xmm6
mov byte [eax - 0x40], cl
movups xmmword [ebp - 0x378], xmm6
movzx ecx, byte [ebp - 0x377]
mov byte [eax - 0x3c], cl
movups xmmword [ebp - 0x388], xmm6
movzx ecx, byte [ebp - 0x386]
mov byte [eax - 0x38], cl
movups xmmword [ebp - 0x398], xmm6
movzx ecx, byte [ebp - 0x395]
mov byte [eax - 0x34], cl
movups xmmword [ebp - 0x3a8], xmm6
movzx ecx, byte [ebp - 0x3a4]
mov byte [eax - 0x30], cl
movups xmmword [ebp - 0x3b8], xmm6
movzx ecx, byte [ebp - 0x3b3]
mov byte [eax - 0x2c], cl
movups xmmword [ebp - 0x3c8], xmm6
movzx ecx, byte [ebp - 0x3c2]
mov byte [eax - 0x28], cl
movups xmmword [ebp - 0x3d8], xmm6
movzx ecx, byte [ebp - 0x3d1]
mov byte [eax - 0x24], cl
movups xmmword [ebp - 0x3e8], xmm6
movzx ecx, byte [ebp - 0x3e0]
mov byte [eax - 0x20], cl
movups xmmword [ebp - 0x3f8], xmm6
movzx ecx, byte [ebp - 0x3ef]
mov byte [eax - 0x1c], cl
movups xmmword [ebp - 0x408], xmm6
movzx ecx, byte [ebp - 0x3fe]
mov byte [eax - 0x18], cl
movups xmmword [ebp - 0x418], xmm6
movzx ecx, byte [ebp - 0x40d]
mov byte [eax - 0x14], cl
movups xmmword [ebp - 0x428], xmm6
movzx ecx, byte [ebp - 0x41c]
mov byte [eax - 0x10], cl
movups xmmword [ebp - 0x438], xmm6
movzx ecx, byte [ebp - 0x42b]
mov byte [eax - 0xc], cl
movups xmmword [ebp - 0x448], xmm6
movzx ecx, byte [ebp - 0x43a]
mov byte [eax - 8], cl
movups xmmword [ebp - 0x458], xmm6
movzx ecx, byte [ebp - 0x449]
mov byte [eax - 4], cl
movzx ecx, byte [ebp - 0x678]
movdqu xmm5, xmmword [ebp - 0x678]
movups xmmword [ebp - 0x468], xmm5
mov byte [eax - 0x3f], cl
movups xmmword [ebp - 0x478], xmm5
movzx ecx, byte [ebp - 0x477]
mov byte [eax - 0x3b], cl
movups xmmword [ebp - 0x488], xmm5
movzx ecx, byte [ebp - 0x486]
mov byte [eax - 0x37], cl
movups xmmword [ebp - 0x498], xmm5
movzx ecx, byte [ebp - 0x495]
mov byte [eax - 0x33], cl
movups xmmword [ebp - 0x4a8], xmm5
movzx ecx, byte [ebp - 0x4a4]
mov byte [eax - 0x2f], cl
movups xmmword [ebp - 0x4b8], xmm5
movzx ecx, byte [ebp - 0x4b3]
mov byte [eax - 0x2b], cl
movups xmmword [ebp - 0x4c8], xmm5
movzx ecx, byte [ebp - 0x4c2]
mov byte [eax - 0x27], cl
movups xmmword [ebp - 0x4d8], xmm5
movzx ecx, byte [ebp - 0x4d1]
mov byte [eax - 0x23], cl
movups xmmword [ebp - 0x4e8], xmm5
movzx ecx, byte [ebp - 0x4e0]
mov byte [eax - 0x1f], cl
movups xmmword [ebp - 0x4f8], xmm5
movzx ecx, byte [ebp - 0x4ef]
mov byte [eax - 0x1b], cl
movups xmmword [ebp - 0x508], xmm5
movzx ecx, byte [ebp - 0x4fe]
movdqu xmm6, xmmword [ebp - 0x688]
mov byte [eax - 0x17], cl
movups xmmword [ebp - 0x518], xmm5
movzx ecx, byte [ebp - 0x50d]
mov byte [eax - 0x13], cl
movups xmmword [ebp - 0x528], xmm5
movzx ecx, byte [ebp - 0x51c]
mov byte [eax - 0xf], cl
movups xmmword [ebp - 0x538], xmm5
movzx ecx, byte [ebp - 0x52b]
mov byte [eax - 0xb], cl
movups xmmword [ebp - 0x548], xmm5
movzx ecx, byte [ebp - 0x53a]
mov byte [eax - 7], cl
movups xmmword [ebp - 0x558], xmm5
movzx ecx, byte [ebp - 0x549]
mov byte [eax - 3], cl
movzx ecx, byte [ebp - 0x688]
movups xmmword [ebp - 0x568], xmm6
mov byte [eax - 0x3e], cl
movups xmmword [ebp - 0x578], xmm6
movzx ecx, byte [ebp - 0x577]
mov byte [eax - 0x3a], cl
movups xmmword [ebp - 0x588], xmm6
movzx ecx, byte [ebp - 0x586]
mov byte [eax - 0x36], cl
movups xmmword [ebp - 0x598], xmm6
movzx ecx, byte [ebp - 0x595]
mov byte [eax - 0x32], cl
movups xmmword [ebp - 0x5a8], xmm6
movzx ecx, byte [ebp - 0x5a4]
mov byte [eax - 0x2e], cl
movups xmmword [ebp - 0x5b8], xmm6
movzx ecx, byte [ebp - 0x5b3]
mov byte [eax - 0x2a], cl
movups xmmword [ebp - 0x5c8], xmm6
movzx ecx, byte [ebp - 0x5c2]
mov byte [eax - 0x26], cl
movups xmmword [ebp - 0x5d8], xmm6
movzx ecx, byte [ebp - 0x5d1]
mov byte [eax - 0x22], cl
movups xmmword [ebp - 0x5e8], xmm6
movzx ecx, byte [ebp - 0x5e0]
mov byte [eax - 0x1e], cl
movups xmmword [ebp - 0x5f8], xmm6
movzx ecx, byte [ebp - 0x5ef]
mov byte [eax - 0x1a], cl
movups xmmword [ebp - 0x608], xmm6
movzx ecx, byte [ebp - 0x5fe]
mov byte [eax - 0x16], cl
movups xmmword [ebp - 0x618], xmm6
movzx ecx, byte [ebp - 0x60d]
mov byte [eax - 0x12], cl
movups xmmword [ebp - 0x628], xmm6
movzx ecx, byte [ebp - 0x61c]
mov byte [eax - 0xe], cl
movups xmmword [ebp - 0x638], xmm6
movzx ecx, byte [ebp - 0x62b]
mov byte [eax - 0xa], cl
movups xmmword [ebp - 0x648], xmm6
movzx ecx, byte [ebp - 0x63a]
mov byte [eax - 6], cl
movups xmmword [ebp - 0x658], xmm6
movzx ecx, byte [ebp - 0x649]
mov byte [eax - 2], cl
cmp esi, edx
jne 0x70d8e7e0
mov edx, dword [ebp - 0x694]
mov ecx, dword [ebp - 0x698]
mov esi, dword [ebp - 0x69c]
mov eax, edx
and eax, 0xfffffff0
lea esi, [esi + eax*4]
sub ecx, eax
cmp eax, edx
je 0x70d8ed10
lea esi, [esi]
lea edi, [edi]
movzx eax, byte [esi + 3]
movzx edx, byte [esi]
add esi, 4
add eax, 1
imul edx, eax
mov byte [esi - 4], dh
movzx edx, byte [esi - 3]
imul edx, eax
mov byte [esi - 3], dh
movzx edx, byte [esi - 2]
imul eax, edx
mov byte [esi - 2], ah
mov eax, ecx
sub ecx, 1
test eax, eax
jg 0x70d8ece0
mov eax, dword [ebp - 0x690]
mov edx, dword [eax]
mov dword [edi + 0x20c], edx
mov esi, edi
xor eax, eax
lea esi, [esi]
movzx edx, word [ebx + eax]
mov word [edi + eax], dx
add eax, 2
test dx, dx
jne 0x70d8ed28
mov eax, dword [ebp - 0x68c]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x228]
mov dword [edi + 0x210], edx
mov dword [eax + 0x228], edi
test byte [0x70d98058], 8
jne 0x70d8ed70
mov eax, dword [edi + 0x208]
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret
mov eax, dword [edi + 0x208]
mov dword [ebp - 0x678], eax
mov eax, edi
shr eax, 0x10
je 0x70d8f1b0
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov edx, 0x70d9ab2d
sub esp, 8
test eax, eax
jne 0x70d8ee89
cmp word [edi], 0
je 0x70d8f16e
lea esi, [esi]
mov edx, eax
lea eax, [eax + 1]
cmp word [edi + edx*2 + 2], 0
jne 0x70d8edb8
mov ecx, 0x224c
lea eax, [ebp - 0x22a]
mov dword [ebp - 0x688], edi
mov word [ebp - 0x34c], cx
lea ecx, [ebp - 0x34a]
mov dword [ebp - 0x668], eax
jmp 0x70d8ee21
cmp ax, 9
je 0x70d8f038
cmp ax, 0xa
jne 0x70d8f056
mov eax, 0x6e5c
add ecx, 2
mov word [ecx - 2], ax
lea eax, [edx - 1]
test edx, edx
jle 0x70d8ee55
cmp ecx, dword [ebp - 0x668]
ja 0x70d8ee55
mov edx, eax
movzx eax, word [esi]
add esi, 2
cmp ax, 0xd
je 0x70d8f024
jbe 0x70d8edf0
cmp ax, 0x22
je 0x70d8f0b0
cmp ax, 0x5c
jne 0x70d8f049
mov edi, 0x5c5c
add ecx, 2
mov word [ecx - 2], di
jmp 0x70d8ee10
mov byte [ecx], 0x22
mov edi, dword [ebp - 0x688]
test eax, eax
jle 0x70d8f187
mov ebx, 0x2e2e
mov byte [ecx + 3], 0x2e
lea eax, [ecx + 4]
mov word [ecx + 1], bx
mov byte [eax], 0
lea eax, [ebp - 0x34c]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov edx, eax
mov eax, dword [ebp - 0x678]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], str.new__p__s:__p_n
mov dword [esp + 8], str.MSSTYLES_LoadBitmap
mov dword [esp + 4], 0x70d98058
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x70d8ed5c
mov eax, dword [edi + 0x208]
mov dword [ebp - 0x678], eax
mov eax, edi
shr eax, 0x10
je 0x70d8f1ca
mov dword [esp + 4], 0xffffffff
mov dword [esp], edi
call dword [sym.imp.kernel32.dll_IsBadStringPtrW]
mov ecx, 0x70d9ab2d
sub esp, 8
test eax, eax
jne 0x70d8efe9
cmp word [edi], 0
je 0x70d8f18f
lea esi, [esi]
mov ecx, eax
lea eax, [eax + 1]
cmp word [edi + ecx*2 + 2], 0
jne 0x70d8ef10
mov eax, 0x224c
mov dword [ebp - 0x688], edi
lea ebx, [ebp - 0x34a]
mov word [ebp - 0x34c], ax
lea eax, [ebp - 0x22a]
mov dword [ebp - 0x668], eax
jmp 0x70d8ef81
cmp ax, 9
je 0x70d8f138
cmp ax, 0xa
jne 0x70d8f0ce
mov eax, 0x6e5c
add ebx, 2
mov word [ebx - 2], ax
nop
lea esi, [esi]
lea eax, [ecx - 1]
cmp ebx, dword [ebp - 0x668]
ja 0x70d8efb5
test ecx, ecx
jle 0x70d8efb5
mov ecx, eax
movzx eax, word [esi]
add esi, 2
cmp ax, 0xd
je 0x70d8f149
jbe 0x70d8ef48
cmp ax, 0x22
je 0x70d8f120
cmp ax, 0x5c
jne 0x70d8f0c1
mov edi, 0x5c5c
add ebx, 2
mov word [ebx - 2], di
jmp 0x70d8ef70
mov byte [ebx], 0x22
mov edi, dword [ebp - 0x688]
test eax, eax
jle 0x70d8f1a8
mov edx, 0x2e2e
mov byte [ebx + 3], 0x2e
lea eax, [ebx + 4]
mov word [ebx + 1], dx
mov byte [eax], 0
lea eax, [ebp - 0x34c]
mov dword [esp], eax
call sym.___wine_dbg_strdup
mov ecx, eax
mov eax, dword [ebp - 0x678]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x10], edi
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], str.found__p__s:__p_n
mov dword [esp + 8], str.MSSTYLES_LoadBitmap
mov dword [esp + 4], 0x70d98058
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_4
jmp 0x70d8e65d
mov eax, 0x725c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x70d8ee10
mov eax, 0x745c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x70d8ee10
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x70d8f15a
mov edi, eax
mov byte [ecx], 0x5c
add ecx, 5
shr di, 0xc
movzx edi, di
movzx ebx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ecx - 4], bl
movzx ebx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdefMSSTYLES_OpenThemeFile]
and edi, 0xf
mov byte [ecx - 3], bl
movzx ebx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov byte [ecx - 1], al
mov byte [ecx - 2], bl
jmp 0x70d8ee10
mov eax, 0x225c
add ecx, 2
mov word [ecx - 2], ax
jmp 0x70d8ee10
lea edi, [eax - 0x20]
cmp di, 0x5e
jbe 0x70d8f164
mov edi, eax
mov byte [ebx], 0x5c
add ebx, 5
shr di, 0xc
movzx edi, di
movzx edx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov edi, eax
shr di, 8
and edi, 0xf
mov byte [ebx - 4], dl
movzx edx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov edi, eax
and eax, 0xf
shr di, 4
movzx eax, byte [eax + str.0123456789abcdefMSSTYLES_OpenThemeFile]
and edi, 0xf
mov byte [ebx - 3], dl
movzx edx, byte [edi + str.0123456789abcdefMSSTYLES_OpenThemeFile]
mov byte [ebx - 1], al
mov byte [ebx - 2], dl
jmp 0x70d8ef70
mov eax, 0x225c
add ebx, 2
mov word [ebx - 2], ax
jmp 0x70d8ef70
mov eax, 0x745c
add ebx, 2
mov word [ebx - 2], ax
jmp 0x70d8ef70
mov eax, 0x725c
add ebx, 2
mov word [ebx - 2], ax
jmp 0x70d8ef70
mov byte [ecx], al
add ecx, 1
jmp 0x70d8ee10
mov byte [ebx], al
add ebx, 1
jmp 0x70d8ef70
mov eax, 0x224c
mov byte [ebp - 0x34a], 0x22
lea ecx, [ebp - 0x34a]
mov word [ebp - 0x34c], ax
lea eax, [ecx + 1]
jmp 0x70d8ee76
mov byte [ebp - 0x34a], 0x22
mov ebx, 0x224c
mov word [ebp - 0x34c], bx
lea ebx, [ebp - 0x34a]
lea eax, [ebx + 1]
jmp 0x70d8efd6
movzx eax, di
mov dword [esp], 0x70d9ab20
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf.constprop.0_1
mov edx, eax
jmp 0x70d8ee89
movzx eax, di
mov dword [esp], 0x70d9ab20
mov dword [esp + 4], eax
call sym._wine_dbg_sprintf.constprop.0_1
mov ecx, eax
jmp 0x70d8efe9
mov edi, dword [ebp - 0x678]
xor edx, edx
jmp 0x70d8ed18