Function at 0x67240f70
Capabilities:
Inspect section memory permissions
Resolve function by parsing pe exports

Disassembly:
push ecx
push esi
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
call 0x67240f70
mov esi, eax
add esp, 0x1c
cmp esi, 0xffffffd2
jne 0x670a5e92
mov ecx, 0x674c7aa0
call fcn.670a3e60
mov ecx, eax
call sym.Qt5Core.dll_public:_void_____thiscall_QThreadStorageData::get_void_const
test eax, eax
jne 0x670a5e90
push 4
call fcn.67267bfd
push 0
mov esi, eax
push 0x80000
push 0x8000
mov dword [esp + 0x14], esi
call fcn.6725f7c0
add esp, 0x10
mov dword [esi], eax
mov ecx, 0x674c7aa0
call fcn.670a3e60
push esi
mov ecx, eax
call sym.Qt5Core.dll_public:_void_____thiscall_QThreadStorageData::set_void__
pop esi
add esp, 4
jmp 0x67240f70
mov eax, esi
pop esi
pop ecx
ret
mov eax, 0x5178
call fcn.672686c0
mov eax, dword [0x674c412c]
xor eax, esp
mov dword [esp + 0x5174], eax
mov eax, dword [esp + 0x517c]
mov edx, dword [esp + 0x5194]
mov ecx, dword [esp + 0x5190]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x5184]
push ebx
mov dword [esp + 0x1c], eax
xor ebx, ebx
xor eax, eax
mov dword [esp + 0x28], edx
push ebp
mov ebp, dword [esp + 0x5190]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x30], eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x24], eax
lea eax, [ebp*2]
push esi
mov dword [esp + 0x80], eax
push edi
mov edi, dword [esp + 0x5190]
add eax, edi
mov esi, eax
mov dword [esp + 0x8c], eax
mov dword [esp + 0x24], ecx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x4c], ebp
lea eax, [esi - 2]
mov dword [esp + 0x60], 0
mov dword [esp + 0x68], eax
lea eax, [esp + 0x184]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x48], 0
cmp eax, 0xffffffff
jne 0x67241052
push edi
call fcn.67263b80
mov edx, dword [esp + 0x38]
add esp, 4
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x28], eax
mov dword [esp + 0x60], 1
test dword [esp + 0x519c], 0x1fff9fc0
lea eax, [edi + eax*2]
mov dword [esp + 0x10], eax
mov dword [esp + 0x74], eax
jne 0x672422ec
mov eax, dword [esp + 0x18]
test eax, eax
je 0x672422e5
test edi, edi
je 0x672422e5
test ecx, ecx
je 0x672422e5
cmp ebp, dword [esp + 0x28]
jbe 0x6724109a
mov eax, 0xffffffdf
jmp 0x672422f1
cmp dword [eax + 0x38], 0x50435245
je 0x672410ad
mov eax, 0xffffffe1
jmp 0x672422f1
mov ecx, dword [eax + 0x48]
mov eax, ecx
and al, 7
cmp al, 2
je 0x672410c2
mov eax, 0xffffffe0
jmp 0x672422f1
mov eax, dword [esp + 0x18]
mov edi, dword [esp + 0x519c]
shr ecx, 0xe
and ecx, 0xc
or edi, ecx
mov dword [esp + 0x519c], edi
cmp dword [eax + 0x10], ebx
je 0x672410f0
test edi, 0xbfffbfc0
jne 0x672410f0
mov edi, 1
jmp 0x672410f2
xor edi, edi
mov ecx, dword [eax + 0x40]
mov eax, ecx
shr eax, 0x13
and eax, 1
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x519c]
test al, 0x20
je 0x67241117
mov eax, 2
jmp 0x6724111d
shr eax, 4
and eax, 1
movzx eax, ax
mov word [esp + 0x11c], ax
test ax, ax
je 0x67241141
mov eax, ecx
or eax, dword [esp + 0x519c]
test eax, 0x20000000
jne 0x672422ec
test edx, edx
je 0x6724115d
cmp dword [edx + 0x24], 0xffffffff
je 0x6724115d
test ecx, 0x800000
jne 0x6724115d
mov eax, 0xffffffc8
jmp 0x672422f1
mov eax, dword [esp + 0x24]
test byte [eax + 0x25], 1
je 0x67241181
push dword [eax + 8]
push dword [eax + 0x10]
mov eax, dword [eax + 4]
call eax
mov eax, dword [esp + 0x2c]
add esp, 8
mov ecx, dword [esp + 0x20]
and byte [eax + 0x25], 0xfe
mov dword [eax + 0x10], ebx
lea edx, [eax + 0x20]
mov dword [esp + 0x5c], edx
mov dword [edx], ebx
mov dword [esp + 0x64], 0xfc00
mov dword [esp + 0x50], 0xdc00
test edi, edi
je 0x672412d4
cmp dword [esp + 0x14], ebx
je 0x6724125b
test dword [esp + 0x519c], 0x40000000
jne 0x6724125b
test ecx, 0x4000000
jne 0x6724125b
mov ebx, 0xfc00
mov edi, 0xdc00
cmp esi, dword [esp + 0x10]
jae 0x672411eb
mov ax, word [esi]
and ax, bx
cmp ax, di
je 0x67241490
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x67241227
nop dword [eax + eax]
cmp esi, edx
jbe 0x67241227
sub esi, 2
cmp esi, edx
jbe 0x67241222
nop dword [eax + eax]
mov ax, word [esi]
and ax, bx
cmp ax, di
jne 0x67241222
sub esi, 2
cmp esi, edx
ja 0x67241210
sub ecx, 1
jne 0x67241200
mov eax, dword [esp + 0x28]
mov edi, esi
mov ebx, dword [esp + 0x5c]
sub edi, edx
sar edi, 1
push ebx
sub eax, edi
push eax
push esi
call fcn.67266ee0
mov ecx, dword [esp + 0x30]
add esp, 0xc
mov dword [ecx + 0x28], eax
test eax, eax
je 0x67241254
add dword [ebx], edi
jmp 0x672422f1
mov ebx, 1
mov eax, ecx
push dword [esp + 0x34]
push eax
push dword [esp + 0x51a4]
push ebp
push dword [esp + 0x38]
push dword [esp + 0x30]
push dword [esp + 0x30]
call fcn.6725f600
mov edi, eax
add esp, 0x1c
cmp edi, 0xffffffd3
je 0x672412d4
test edi, edi
js 0x672412cd
test dword [esp + 0x519c], 0x4000
je 0x672412cd
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x28]
mov ebx, dword [esp + 0x24]
lea esi, [esi + ecx]
push dword [ebx + 8]
mov eax, dword [ebx]
add esi, esi
push esi
call eax
add esp, 8
mov dword [ebx + 0x10], eax
test eax, eax
je 0x672422d7
push esi
push dword [esp + 0x20]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
or byte [ebx + 0x25], 1
mov eax, edi
jmp 0x672422f1
cmp dword [esp + 0x14], 0
mov edx, dword [esp + 0x1c]
mov dword [esp + 0x130], edx
je 0x672414ba
test ebx, ebx
jne 0x672414ba
test dword [esp + 0x519c], 0x40000000
mov ebx, dword [esp + 0x20]
je 0x6724130f
test ebx, 0x4000000
je 0x672414ba
mov edi, dword [esp + 0x10]
mov eax, ebx
xor ecx, ecx
and eax, 0x4000000
cmp esi, edi
jae 0x67241349
mov edx, 0xfc00
test eax, eax
je 0x6724147c
mov ebp, 0xdc00
mov ax, word [esi]
and ax, dx
cmp ax, bp
jne 0x67241349
add esi, 2
mov ecx, 1
cmp esi, edi
jb 0x67241332
mov ebp, dword [esp + 0x1c]
mov edx, esi
mov dword [esp + 0x130], edx
test ecx, ecx
jne 0x672413a2
mov eax, dword [esp + 0x18]
movzx ecx, word [eax + 0x64]
test ecx, ecx
je 0x672413a2
cmp edx, ebp
jbe 0x672413a2
sub edx, 2
mov dword [esp + 0x130], edx
cmp edx, ebp
jbe 0x6724139d
nop dword [eax + eax]
mov ax, word [edx]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x50]
jne 0x6724139d
sub edx, 2
mov dword [esp + 0x130], edx
cmp edx, ebp
ja 0x67241380
sub ecx, 1
jne 0x67241366
push dword [esp + 0x5c]
mov eax, dword [esp + 0x2c]
mov ecx, edx
sub ecx, ebp
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.67266ee0
mov edx, dword [esp + 0x30]
add esp, 0xc
mov dword [edx + 0x28], eax
test eax, eax
je 0x67241463
nop dword [eax + eax]
mov ecx, dword [esp + 0x130]
mov eax, dword [edx + 0x20]
sub ecx, ebp
sar ecx, 1
add eax, ecx
lea ecx, [edx + 0x20]
mov dword [ecx], eax
test ebx, 0x4000000
je 0x672414b2
cmp dword [edx + 0x28], 0
jg 0x672414b2
lea edi, [eax*2]
add edi, ebp
mov dword [esp + 0x10], edi
cmp edi, esi
jae 0x672414a8
lea edx, [edi + 2]
mov dword [esp + 0x130], edx
cmp edx, esi
jae 0x6724143d
nop
mov ax, word [edx]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x50]
jne 0x6724143d
add edx, 2
mov dword [esp + 0x130], edx
cmp edx, esi
jb 0x67241420
mov eax, dword [esp + 0x28]
push ecx
mov ecx, edx
sub ecx, ebp
sar ecx, 1
sub eax, ecx
push eax
push edx
call fcn.67266ee0
mov edx, dword [esp + 0x30]
add esp, 0xc
mov dword [edx + 0x28], eax
test eax, eax
jne 0x672413d0
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x18]
test eax, eax
jne 0x672414c0
movq xmm0, qword [ecx]
mov ebp, dword [ecx + 8]
jmp 0x672414c7
mov ax, word [esi]
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x67241349
test ebp, ebp
je 0x6724149e
mov eax, 0xffffffdc
jmp 0x672422f1
mov eax, 0xffffffe6
jmp 0x672422f1
mov dword [esp + 0x48], 2
jmp 0x67241463
mov eax, dword [edx + 0x28]
jmp 0x672422f1
mov edi, dword [esp + 0x10]
jmp 0x67241467
movq xmm0, qword [eax]
mov ebp, dword [eax + 8]
mov ecx, dword [ecx + 0x40]
test eax, eax
mov ebx, 0x673e8648
mov dword [esp + 0xd8], ebp
cmovne ebx, eax
movq qword [esp + 0xd0], xmm0
mov eax, ecx
or eax, dword [esp + 0x519c]
shr eax, 0x1f
mov dword [esp + 0x58], eax
mov eax, ecx
shr eax, 8
and eax, 1
mov dword [esp + 0x70], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0x48]
mov dword [esp + 0x34], eax
mov eax, dword [ebx + 0x24]
cmp eax, 0xffffffff
jne 0x67241519
mov eax, dword [esp + 0x74]
jmp 0x6724151c
lea eax, [edx + eax*2]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x90]
mov dword [esp + 0x178], eax
mov eax, edi
sub eax, edx
mov dword [esp + 0xa8], edx
sar eax, 1
mov dword [esp + 0xac], eax
mov eax, dword [ebx + 0x14]
mov dword [esp + 0x180], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x17c], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x114], eax
mov dword [esp + 0x12c], edx
mov edx, dword [esp + 0x34]
mov eax, edx
shr eax, 0xc
and eax, 1
mov dword [esp + 0x90], 2
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0xcc], 0
mov dword [esp + 0x134], edi
cmp word [eax + 0x64], 0
ja 0x672415af
test edx, 0x2000
jne 0x672415af
xor eax, eax
jmp 0x672415b4
mov eax, 1
mov dword [esp + 0x104], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x15c], ecx
mov dword [esp + 0x164], 0
mov dword [esp + 0x148], 0
movzx edx, word [eax + 0x6e]
lea edi, [eax + 0x70]
movzx eax, word [eax + 0x6c]
mov word [esp + 0x122], ax
imul eax, edx
mov dword [esp + 0x124], edi
mov dword [esp + 0x144], 0
mov word [esp + 0x120], dx
mov dword [esp + 0x168], 0
lea eax, [edi + eax*2]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov ax, word [edi + 0x60]
mov word [esp + 0x11e], ax
movzx eax, word [edi + 0x62]
dec eax
cmp eax, 5
ja case.default.0x6724163f
jmp dword [eax*4 + 0x6724230c]
mov eax, 0xd
mov dword [esp + 0x16c], 1
mov word [esp + 0x170], ax
jmp 0x672416c1
mov eax, 0xa
mov dword [esp + 0x16c], 1
mov word [esp + 0x170], ax
jmp 0x672416c1
xor eax, eax
mov dword [esp + 0x16c], 1
mov word [esp + 0x170], ax
jmp 0x672416c1
mov dword [esp + 0x16c], 2
mov dword [esp + 0x170], 0xa000d
jmp 0x672416c1
mov dword [esp + 0x168], 1
jmp 0x672416c1
mov dword [esp + 0x168], 2
mov edx, dword [ebx + 0x28]
cmp edx, dword [edi + 0x4c]
mov ecx, dword [ebx + 0x2c]
cmovae edx, dword [edi + 0x4c]
cmp ecx, dword [edi + 0x50]
movzx eax, word [edi + 0x68]
cmovae ecx, dword [edi + 0x50]
mov dword [esp + 0xf0], ecx
mov ecx, dword [ebx + 0x30]
mov ebx, edi
lea eax, [eax*8 + 0x54]
mov dword [esp + 0xec], edx
mov edi, eax
mov dword [esp + 0x54], eax
cmp ecx, dword [ebx + 0x54]
cmovae ecx, dword [ebx + 0x54]
mov dword [esp + 0xf4], ecx
cmp edi, 0x800
ja 0x67241735
mov ecx, 0x5000
mov edi, dword [esp + 0xe8]
mov eax, ecx
mov dword [esp + 0xe0], edi
xor edx, edx
div dword [esp + 0x54]
sub ecx, edx
mov dword [esp + 0xdc], ecx
jmp 0x67241790
lea ecx, [edi + edi*4]
add ecx, ecx
mov eax, ecx
mov dword [esp + 0xdc], ecx
shr eax, 0xa
cmp eax, edx
jbe 0x6724176c
mov ecx, edx
shl ecx, 0xa
cmp edi, ecx
jbe 0x6724175d
mov eax, 0xffffffc1
jmp 0x672422f1
mov eax, ecx
xor edx, edx
div edi
sub ecx, edx
mov dword [esp + 0xdc], ecx
push ebp
push ecx
call dword [esp + 0xd8]
mov edi, eax
add esp, 8
mov dword [esp + 0xe0], edi
test edi, edi
je 0x672422d7
mov ecx, dword [esp + 0xdc]
movzx eax, word [ebx + 0x68]
add ecx, edi
shl eax, 3
push eax
lea eax, [edi + 0x54]
mov dword [esp + 0xe8], ecx
push 0xff
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebx + 0xc]
add esp, 0xc
mov edx, dword [ebx + 0x48]
mov dword [esp + 0x108], eax
lea edi, [eax + 0x100]
add eax, 0x340
mov dword [esp + 0x10c], edi
mov dword [esp + 0x110], eax
test dl, 0x10
je 0x67241867
movzx ebp, word [ebx + 0x58]
movzx ebx, bp
mov dword [esp + 0x44], 1
mov dword [esp + 0x30], ebp
movzx eax, bp
mov dword [esp + 0x38], ebx
test dl, 0x20
je 0x67241889
mov ecx, eax
mov eax, 0xff
cmp bp, ax
ja 0x6724181d
movzx eax, byte [ecx + edi]
mov dword [esp + 0x30], eax
cmp ebx, 0x7f
jbe 0x67241889
mov ebp, dword [esp + 0x14]
mov ebx, dword [esp + 0x20]
test ebp, ebp
jne 0x67241831
test ebx, 0x20000
je 0x67241891
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x673eda38]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x673f1e38]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x673eac84]
add ax, word [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x30], eax
jmp 0x67241895
test dword [esp + 0x34], 0x200
mov ebp, dword [esp + 0x14]
jne 0x67241881
test dl, 0x40
je 0x67241881
lea eax, [ebx + 0x14]
mov dword [esp + 0x40], eax
mov ebx, dword [esp + 0x20]
xor eax, eax
jmp 0x67241895
mov ebx, dword [esp + 0x20]
mov ebp, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
movzx ecx, ax
mov eax, dword [esp + 0x38]
movzx eax, ax
mov dword [esp + 0x80], ecx
mov dword [esp + 0x7c], eax
test dl, dl
jns 0x67241938
mov eax, dword [esp + 0x18]
mov dword [esp + 0x78], 1
movzx ecx, word [eax + 0x5c]
mov dword [esp + 0x2c], ecx
movzx eax, cx
movzx ecx, cx
mov dword [esp + 0x3c], ecx
test edx, 0x100
je 0x6724193a
mov edx, dword [esp + 0x3c]
mov ecx, eax
mov eax, 0xff
cmp word [esp + 0x2c], ax
ja 0x672418f8
movzx eax, byte [edi + ecx]
mov dword [esp + 0x2c], eax
cmp dx, 0x7f
jbe 0x6724193a
test ebp, ebp
jne 0x67241904
test ebx, 0x20000
je 0x6724193a
mov eax, ecx
and ecx, 0x7f
shr eax, 7
movzx eax, word [eax*2 + 0x673eda38]
shl eax, 7
add eax, ecx
movzx eax, word [eax*2 + 0x673f1e38]
lea eax, [eax + eax*2]
mov ax, word [eax*4 + 0x673eac84]
add ax, dx
movzx eax, ax
mov dword [esp + 0x2c], eax
jmp 0x6724193a
xor eax, eax
mov eax, dword [esp + 0x3c]
mov edi, dword [esp + 0x10]
movzx eax, ax
mov dword [esp + 0x88], eax
nop dword [eax]
mov ebp, dword [esp + 0x16c]
xor ecx, ecx
mov edx, dword [esp + 0x168]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x20], ecx
mov dword [esp + 0xfc], ecx
mov ecx, dword [esp + 0x18]
test dword [ecx + 0x40], 0x10000
jne 0x67241f3f
cmp dword [esp + 0x70], 0
mov ebx, dword [esp + 0x134]
je 0x67241ab5
mov edi, esi
cmp esi, dword [esp + 0x10]
jae 0x67241ab1
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x67241a60
nop word [eax + eax]
test edx, edx
je 0x67241a22
mov eax, dword [esp + 0x134]
cmp edi, eax
jae 0x67241a53
push ecx
lea ecx, [esp + 0x170]
push ecx
push eax
push edx
push edi
call fcn.672655d0
mov ebp, dword [esp + 0x180]
add esp, 0x14
mov edx, dword [esp + 0x168]
mov ebx, dword [esp + 0x134]
test eax, eax
jne 0x67241ab1
mov ecx, dword [esp + 0x14]
add edi, 2
cmp edi, dword [esp + 0x10]
jae 0x67241ab1
mov ax, word [edi]
and ax, word [esp + 0x64]
cmp ax, word [esp + 0x50]
jne 0x672419b0
add edi, 2
cmp edi, dword [esp + 0x10]
jb 0x672419b0
jmp 0x67241ab1
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x672419f4
mov ax, word [edi]
cmp ax, word [esp + 0x170]
jne 0x672419f4
cmp ebp, 1
je 0x67241ab1
mov ax, word [edi + 2]
cmp ax, word [esp + 0x172]
je 0x67241ab1
jmp 0x672419f4
mov ebx, dword [esp + 0x134]
jmp 0x672419f8
test edx, edx
je 0x67241bd9
mov eax, dword [esp + 0x134]
cmp edi, eax
jae 0x67241c1d
push ecx
lea ecx, [esp + 0x170]
push ecx
push eax
push edx
push edi
call fcn.672655d0
mov ebp, dword [esp + 0x180]
add esp, 0x14
mov edx, dword [esp + 0x168]
mov ebx, dword [esp + 0x134]
test eax, eax
jne 0x67241ab1
mov ecx, dword [esp + 0x14]
add edi, 2
cmp edi, dword [esp + 0x10]
jb 0x67241a60
mov dword [esp + 0x10], edi
cmp dword [esp + 0x58], 0
je 0x67241c29
mov ecx, dword [esp + 0x44]
mov ebp, dword [esp + 0x40]
test ecx, ecx
jne 0x67241ad4
test ebp, ebp
je 0x67241e7d
cmp esi, edi
sbb eax, eax
neg eax
cmp esi, edi
jae 0x67241b27
movzx eax, word [esi]
test ecx, ecx
je 0x67241afb
cmp ax, word [esp + 0x38]
je 0x67241e7d
cmp ax, word [esp + 0x30]
je 0x67241e7d
test ebp, ebp
je case.0x6724200a.997
mov ecx, 0xff
cmp ax, cx
cmova eax, ecx
movzx edx, ax
mov eax, 1
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
mov eax, 0
setne al
test eax, eax
jne 0x67241e7d
xor ebx, ebx
cmp dword [esp + 0x14], 0
je 0x67241b79
mov ebp, dword [esp + 0x74]
cmp edi, ebp
je 0x67241b79
test ebx, ebx
je 0x67241b49
cmp ebx, 0xfffffffe
jne 0x67241b79
mov ebx, dword [esp + 0x5c]
nop dword [eax]
lea esi, [edi + 2]
cmp esi, ebp
jae 0x67241b77
mov ecx, 0xfc00
mov edx, 0xdc00
mov ax, word [esi]
and ax, cx
cmp ax, dx
jne 0x67242180
add esi, 2
cmp esi, ebp
jb 0x67241b61
xor ebx, ebx
mov eax, dword [esp + 0xe0]
cmp eax, dword [esp + 0xe8]
je 0x67241b9b
push dword [esp + 0xd8]
push eax
call dword [esp + 0xdc]
add esp, 8
mov ebp, dword [esp + 0x24]
mov eax, dword [esp + 0x18]
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x144]
mov dword [ebp + 0x14], eax
mov byte [ebp + 0x24], 0
cmp ebx, 1
jne 0x67242280
movzx eax, word [ebp + 0x26]
mov ecx, dword [esp + 0x118]
add eax, eax
cmp ecx, eax
jl 0x672421e9
xor edx, edx
jmp 0x672421f3
lea eax, [ebp*2]
mov ecx, ebx
sub ecx, eax
cmp edi, ecx
ja 0x67241aa4
mov ax, word [edi]
cmp ax, word [esp + 0x170]
jne 0x67241aa4
cmp ebp, 1
je 0x67241ab1
mov ax, word [edi + 2]
cmp ax, word [esp + 0x172]
je 0x67241ab1
jmp 0x67241aa4
mov ebx, dword [esp + 0x134]
jmp 0x67241aa8
cmp dword [esp + 0x44], 0
je 0x67241c8a
cmp esi, edi
jae 0x67241e6a
mov eax, dword [esp + 0x7c]
cmp ax, word [esp + 0x80]
je 0x67241c71
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x30]
nop
movzx eax, word [esi]
cmp ax, cx
je 0x67241e6a
cmp ax, dx
je 0x67241e6a
add esi, 2
cmp esi, edi
jb 0x67241c50
jmp 0x67241e6a
mov eax, dword [esp + 0x38]
cmp word [esi], ax
je 0x67241e6a
add esi, 2
cmp esi, edi
jb 0x67241c75
jmp 0x67241e6a
test dword [esp + 0x34], 0x200
je 0x67241e2a
mov eax, dword [esp + 0x84]
mov edi, dword [esp + 0x12c]
add eax, edi
cmp esi, eax
jbe 0x67241e7d
cmp esi, dword [esp + 0x10]
jae 0x67241e08
mov eax, dword [esp + 0x14]
mov ebx, dword [esp + 0x168]
mov edx, dword [esp + 0x10]
test eax, eax
je 0x67241d82
test ebx, ebx
je 0x67241d0c
cmp esi, edi
jbe 0x67241d4a
push eax
lea eax, [esp + 0x170]
push eax
push edi
push ebx
push esi
call fcn.67265690
add esp, 0x14
test eax, eax
jne 0x67241dfa
mov ebp, dword [esp + 0x16c]
mov edi, dword [esp + 0x12c]
mov ebx, dword [esp + 0x168]
jmp 0x67241d46
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x67241d46
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x170]
jne 0x67241d46
cmp ebp, 1
je 0x67241dfa
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x172]
je 0x67241dfa
mov edx, dword [esp + 0x10]
add esi, 2
cmp esi, edx
jae 0x67241dfa
mov ax, word [esi]
mov ecx, 0xfc00
and ax, cx
mov ecx, 0xdc00
cmp ax, cx
mov eax, dword [esp + 0x14]
jne 0x67241cd1
add esi, 2
cmp esi, edx
jae 0x67241dfa
jmp 0x67241cd1
test ebx, ebx
je 0x67241db9
cmp esi, edi
jbe 0x67241df3
push eax
lea eax, [esp + 0x170]
push eax
push edi
push ebx
push esi
call fcn.67265690
add esp, 0x14
test eax, eax
jne 0x67241dfa
mov ebp, dword [esp + 0x16c]
mov edi, dword [esp + 0x12c]
mov ebx, dword [esp + 0x168]
jmp 0x67241deb
lea edx, [ebp*2]
lea eax, [edi + edx]
cmp esi, eax
jb 0x67241deb
mov ecx, esi
sub ecx, edx
mov ax, word [ecx]
cmp ax, word [esp + 0x170]
jne 0x67241deb
cmp ebp, 1
je 0x67241dfa
mov ax, word [ecx + 2]
cmp ax, word [esp + 0x172]
je 0x67241dfa
mov eax, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
add esi, 2
cmp esi, edx
jb 0x67241d82
mov edx, dword [esp + 0x168]
mov ebx, dword [esp + 0x134]
cmp word [esi - 2], 0xd
jne 0x67241e7d
cmp edx, 1
je 0x67241e19
cmp edx, 2
jne 0x67241e7d
cmp esi, dword [esp + 0x10]
jae 0x67241e7d
cmp word [esi], 0xa
jne 0x67241e7d
add esi, 2
jmp 0x67241e7d
mov ebp, dword [esp + 0x40]
test ebp, ebp
je 0x67241e7d
cmp esi, edi
jae 0x67241e6a
mov ebx, 0xff
nop dword [eax + eax]
movzx edx, word [esi]
mov eax, 1
cmp edx, ebx
cmova edx, ebx
mov ecx, edx
shr edx, 3
and ecx, 7
shl eax, cl
test byte [edx + ebp], al
jne 0x67241e63
add esi, 2
cmp esi, edi
jb 0x67241e40
mov ebx, dword [esp + 0x134]
cmp word [esp + 0x11c], 0
jne 0x67241e7d
cmp esi, ebx
jae case.0x6724200a.997
cmp word [esp + 0x11c], 0
mov edi, ebx
mov dword [esp + 0x10], edi
jne 0x67241f3b
mov eax, dword [esp + 0x18]
mov edx, edi
sub edx, esi
sar edx, 1
movzx eax, word [eax + 0x66]
cmp edx, eax
jl case.0x6724200a.997
cmp dword [esp + 0x78], 0
mov eax, dword [esp + 0x44]
lea ecx, [esi + eax*2]
je 0x67241f3b
cmp ecx, dword [esp + 0x68]
jbe 0x67241f3b
cmp edx, 0x7d0
jb 0x67241edb
cmp dword [esp + 0x58], 0
jne 0x67241f3b
cmp edx, 0x1e8480
jae 0x67241f3b
mov edx, dword [esp + 0x134]
cmp ecx, edx
jae case.0x6724200a.997
mov ebx, dword [esp + 0x2c]
movzx eax, bx
cmp word [esp + 0x88], ax
je 0x67242011
mov ebp, dword [esp + 0x3c]
mov ebx, edx
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
mov edx, eax
cmp ax, bp
je 0x67241f28
cmp dx, word [esp + 0x2c]
je 0x67241f28
cmp ecx, ebx
jb 0x67241f05
mov edi, dword [esp + 0x10]
jmp case.0x6724200a.997
mov edx, dword [esp + 0x134]
cmp edi, edx
jae 0x67241f1f
mov dword [esp + 0x68], edi
mov edi, dword [esp + 0x10]
mov ecx, dword [esp + 0x18]
cmp esi, dword [esp + 0x6c]
ja case.0x6724200a.997
mov eax, esi
or dword [esp + 0xcc], 1
sub eax, dword [esp + 0x1c]
sar eax, 1
mov dword [esp + 0xb0], eax
mov eax, dword [esp + 0x48]
or eax, dword [esp + 0x519c]
mov dword [esp + 0x158], eax
lea eax, [esp + 0xd0]
push eax
movzx eax, word [ecx + 0x68]
push dword [esp + 0x58]
mov ecx, dword [esp + 0x2c]
push eax
mov dword [esp + 0x148], esi
mov dword [esp + 0x14c], esi
movzx eax, word [ecx + 0x26]
push eax
lea eax, [ecx + 0x2c]
mov dword [esp + 0x108], 0
push eax
push dword [esp + 0x13c]
mov dword [esp + 0x130], 0
push esi
mov dword [esp + 0x17c], 0
call fcn.67236920
add esp, 0x1c
mov ebx, eax
cmp dword [esp + 0xfc], 0
je 0x67241ff1
cmp dword [esp + 0x20], 0
jne 0x67241ff1
mov eax, dword [esp + 0x13c]
mov dword [esp + 0x20], eax
mov dword [esp + 0x4c], esi
test ebx, ebx
jg case.default.0x6724200a
je case.0x6724200a.996
lea eax, [ebx + 0x3e5]
cmp eax, 4
ja case.default.0x6724200a
jmp dword [eax*4 + 0x67242324]
mov ebx, dword [esp + 0x3c]
movzx eax, word [ecx]
mov edi, ecx
add ecx, 2
cmp ax, bx
je 0x67241f2f
cmp ecx, edx
jb 0x67242015
mov edi, dword [esp + 0x10]
jmp case.0x6724200a.997
mov eax, dword [esp + 0x160]
mov edi, esi
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x164], eax
jmp 0x6724208e
mov edi, dword [esp + 0x150]
cmp edi, esi
jbe case.0x6724200a.996
mov ecx, dword [esp + 0x14]
jmp 0x6724208e
mov ecx, dword [esp + 0x14]
lea edi, [esi + 2]
mov dword [esp + 0x164], 0
test ecx, ecx
je 0x6724208e
cmp edi, dword [esp + 0x10]
jae 0x6724208e
mov ax, word [edi]
mov edx, 0xfc00
and ax, dx
mov edx, 0xdc00
cmp ax, dx
jne 0x6724208e
add edi, 2
mov edx, dword [esp + 0x168]
xor ebx, ebx
cmp dword [esp + 0x70], ebx
je 0x672420d3
mov eax, dword [esp + 0x134]
test edx, edx
je 0x6724213b
cmp esi, eax
jae 0x672420d3
push ecx
lea ecx, [esp + 0x170]
push ecx
push eax
push edx
push esi
call fcn.672655d0
add esp, 0x14
test eax, eax
jne case.default.0x6724200a
mov edx, dword [esp + 0x168]
mov ebp, dword [esp + 0x16c]
mov esi, edi
cmp dword [esp + 0x58], ebx
jne case.default.0x6724200a
mov eax, dword [esp + 0x10]
cmp edi, eax
ja case.default.0x6724200a
mov ecx, dword [esp + 0x18]
cmp edi, dword [esp + 0x8c]
jbe 0x6724212b
cmp word [edi - 2], 0xd
jne 0x6724212b
cmp edi, eax
jae 0x6724212b
cmp word [edi], 0xa
jne 0x6724212b
test dword [ecx + 0x48], 0x800
jne 0x6724212b
cmp edx, 1
je 0x67242128
cmp edx, 2
je 0x67242128
cmp ebp, 2
jne 0x6724212b
lea esi, [edi + 2]
mov edi, dword [esp + 0x10]
mov dword [esp + 0x144], ebx
jmp 0x67241973
mov ebp, dword [esp + 0x16c]
lea ecx, [ebp*2]
sub eax, ecx
cmp esi, eax
ja 0x672420da
mov ax, word [esi]
cmp ax, word [esp + 0x170]
jne 0x672420da
cmp ebp, 1
je case.default.0x6724200a
mov ax, word [esi + 2]
cmp ax, word [esp + 0x172]
jne 0x672420da
mov edi, dword [esp + 0x10]
jmp 0x67241b31
mov eax, dword [esp + 0x28]
mov ecx, esi
sub ecx, dword [esp + 0x1c]
sar ecx, 1
push ebx
sub eax, ecx
mov dword [esp + 0x134], esi
push eax
push esi
call fcn.67266ee0
add esp, 0xc
test eax, eax
je 0x672421cf
jns 0x67241b50
mov eax, dword [ebx]
lea edi, [esi + eax*2]
mov dword [esp + 0x10], edi
mov dword [esp + 0x134], edi
cmp edi, esi
jbe 0x67241b50
mov dword [esp + 0x48], 3
jmp 0x67241950
mov edi, ebp
mov dword [esp + 0x134], ebp
mov dword [esp + 0x10], edi
mov dword [esp + 0x48], 1
jmp 0x67241950
mov eax, ecx
cdq
sub eax, edx
mov edx, eax
sar edx, 1
inc edx
mov ebx, dword [esp + 0x1c]
sub esi, ebx
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x138]
sub eax, ebx
sar esi, 1
sar eax, 1
cmp dword [esp + 0x140], ecx
mov dword [ebp + 0x28], edx
cmova ecx, dword [esp + 0x140]
sub ecx, ebx
mov dword [ebp + 0x20], esi
sar ecx, 1
test dword [esp + 0x519c], 0x4000
mov dword [ebp + 0x18], eax
mov dword [ebp + 0x1c], ecx
je 0x67242276
mov ecx, dword [esp + 0x60]
mov esi, dword [esp + 0x28]
push dword [ebp + 8]
mov eax, dword [ebp]
lea esi, [esi + ecx]
add esi, esi
push esi
call eax
add esp, 8
mov dword [ebp + 0x10], eax
test eax, eax
je 0x672422d7
push esi
push ebx
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp + 0x28]
add esp, 0xc
or byte [ebp + 0x25], 1
mov eax, edx
jmp 0x672422f1
mov dword [ebp + 0x10], ebx
mov eax, edx
jmp 0x672422f1
mov eax, dword [esp + 0x148]
mov dword [ebp + 0x14], eax
test ebx, ebx
je 0x67242293
cmp ebx, 0xfffffffe
jne 0x672422d0
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x672422cd
mov eax, dword [esp + 0x1c]
mov ebx, 0xfffffffe
sub ecx, eax
mov dword [ebp + 0x10], eax
sar ecx, 1
sub edi, eax
mov dword [ebp + 0x2c], ecx
mov dword [ebp + 0x20], ecx
mov ecx, dword [esp + 0x20]
sar edi, 1
sub ecx, eax
sar ecx, 1
mov eax, ebx
mov dword [ebp + 0x30], edi
mov dword [ebp + 0x18], ecx
mov dword [ebp + 0x1c], edi
mov dword [ebp + 0x28], ebx
jmp 0x672422f1
or ebx, 0xffffffff
mov dword [ebp + 0x28], ebx
mov eax, ebx
jmp 0x672422f1
mov eax, 0xffffffd0
jmp 0x672422f1
mov eax, 0xffffffd4
jmp 0x672422f1
mov eax, 0xffffffcd
jmp 0x672422f1
mov eax, 0xffffffde
mov ecx, dword [esp + 0x5184]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.67267c3b
add esp, 0x5178
ret