Function at 0x705ff3
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0xc2b7de
call fcn.00be12c8
sub esp, 0x39c
push ebx
push esi
push edi
mov esi, ecx
xor edi, edi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x10], edi
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], edi
lea eax, [ebp - 0x1c]
push 0x599
push eax
mov byte [ebp - 4], 1
call fcn.00877d11
mov ecx, eax
call fcn.00406bc6
push dword [esi + 0xb84]
mov eax, dword [eax]
push eax
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 4], 2
call fcn.0044e655
mov eax, dword [ebp - 0x1c]
add esp, 0xc
cmp eax, edi
mov byte [ebp - 4], 1
je 0x70605d
add eax, 0xfffffff4
push eax
call fcn.0042db7e
pop ecx
mov dword [ebp - 0x20], edi
mov ebx, 0xd8d000
mov eax, dword [ebp + 8]
xor esi, esi
cmp dword [ebp - 0x20], esi
je 0x706072
mov eax, dword [ebp + 0xc]
push ebx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x30], eax
call fcn.00402fdb
push 3
push esi
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 3
call fcn.00403001
cmp dword [0xd87954], esi
mov byte [ebp - 4], 4
jne 0x7060a9
push 0x80004003
call fcn.00be0541
mov ecx, dword [0xd87954]
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0x178]
push eax
push 5
push esi
push esi
push esi
push esi
lea eax, [ebp - 0x3c]
push eax
call fcn.0042bac5
push dword [eax]
lea ecx, [ebp - 0x10]
call fcn.0042d57d
lea ecx, [ebp - 0x3c]
call fcn.00418618
lea eax, [ebp - 0x178]
push eax
mov byte [ebp - 4], 3
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7060f9
push eax
call fcn.00be0541
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706114
push eax
call fcn.00be0541
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x58]
push eax
call fcn.0042b471
mov eax, dword [eax]
push 1
push eax
lea ecx, [ebp - 0x238]
call fcn.00413c1f
mov eax, dword [ebp - 0x10]
cmp eax, esi
mov byte [ebp - 4], 6
jne 0x706148
push 0x80004003
call fcn.00be0541
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x238]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x14], eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x64]
test eax, eax
jge 0x706172
push 0xd3bb88
push dword [ebp - 0x14]
push eax
call fcn.00be054f
lea eax, [ebp - 0x238]
push eax
mov byte [ebp - 4], 5
call fcn.00402973
test eax, eax
pop ecx
jge 0x70618d
push eax
call fcn.00be0541
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
call fcn.00418618
mov ecx, dword [ebp - 0x38]
lea eax, [ebp - 0x48]
push eax
call fcn.0042b471
mov eax, dword [eax]
push 1
push eax
lea ecx, [ebp - 0xd8]
call fcn.00413c1f
mov eax, dword [ebp - 0x10]
test eax, eax
mov byte [ebp - 4], 8
jne 0x7061cd
push 0x80004003
call fcn.00be0541
mov eax, dword [ebp - 0x10]
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0xd8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x14], eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xfc]
test eax, eax
jge 0x7061fa
push 0xd3bb98
push dword [ebp - 0x14]
push eax
call fcn.00be054f
lea eax, [ebp - 0xd8]
push eax
mov byte [ebp - 4], 7
call fcn.00402973
test eax, eax
pop ecx
jge 0x706215
push eax
call fcn.00be0541
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
call fcn.00418618
cmp dword [ebp - 0x10], 0
jne 0x706231
push 0x80004003
call fcn.00be0541
mov esi, dword [ebp - 0x10]
mov eax, dword [esi]
push 0xffffffffffffffff
push esi
call dword [eax + 0xe0]
test eax, eax
jge 0x70624f
push 0xd3bb98
push esi
push eax
call fcn.00be054f
push ebx
lea ecx, [ebp - 0xf8]
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x2c8]
mov byte [ebp - 4], 9
call fcn.00402fdb
cmp dword [ebp - 0x10], 0
mov byte [ebp - 4], 0xa
jne 0x70627f
push 0x80004003
call fcn.00be0541
mov esi, dword [ebp - 0x38]
mov edi, dword [esi + 0xc30]
mov eax, dword [ebp - 0x30]
cdq
idiv edi
sub esp, 0x10
mov ecx, eax
mov eax, dword [ebp - 0x30]
imul ecx, ecx, 0x43
cdq
idiv edi
add ecx, dword [esi + 0xc38]
mov edi, esp
mov eax, dword [ebp - 0x10]
sub esp, 0x10
mov dword [ebp - 0x14], eax
mov eax, dword [eax]
imul edx, edx, 0x38
add edx, dword [esi + 0xc34]
lea esi, [ebp - 0xf8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edi, esp
lea esi, [ebp - 0x2c8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push ecx
movsd dword es:[edi], dword [esi]
push edx
push dword [ebp - 0x10]
movsd dword es:[edi], dword [esi]
call dword [eax + 0x90]
test eax, eax
jge 0x7062eb
push 0xd3bb88
push dword [ebp - 0x14]
push eax
call fcn.00be054f
lea eax, [ebp - 0x2c8]
push eax
mov byte [ebp - 4], 9
call fcn.00402973
xor esi, esi
cmp eax, esi
pop ecx
jge 0x706308
push eax
call fcn.00be0541
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706323
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x308]
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0xb
call fcn.00402fdb
push 3
pop edi
push edi
push 0xff
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0xc
call fcn.00403001
push edi
push esi
lea ecx, [ebp - 0x138]
mov byte [ebp - 4], 0xd
call fcn.00403001
push edi
push 0x12c
lea ecx, [ebp - 0x2e8]
mov byte [ebp - 4], 0xe
call fcn.00403001
push ebx
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0xf
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x10
call fcn.00402fdb
push esi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x11
push esi
push esi
call dword [0xd86228]
shl eax, 1
add eax, edi
and eax, 0xfffffffc
call fcn.00be1990
mov eax, esp
push esi
push esi
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x258]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x18]
call fcn.0042d27a
push eax
call fcn.0047d919
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x338]
push eax
mov byte [ebp - 4], 0x11
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.00403308
cmp eax, esi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x24], esi
je 0x70643c
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.0042258b
cmp eax, esi
jge 0x70643c
cmp eax, 0x80004002
je 0x70643c
push eax
call fcn.00be0541
cmp dword [ebp - 0x10], esi
mov edi, dword [ebp - 0x24]
mov byte [ebp - 4], 0x14
jne 0x706452
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x2e8]
push eax
push edi
lea eax, [ebp - 0x318]
push eax
call fcn.0042b9f2
lea eax, [ebp - 0x318]
push eax
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70649c
push eax
call fcn.00be0541
lea ecx, [ebp - 0x24]
call fcn.004185fe
lea eax, [ebp - 0x338]
push eax
mov byte [ebp - 4], 0x11
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7064bf
push eax
call fcn.00be0541
lea eax, [ebp - 0x258]
push eax
mov byte [ebp - 4], 0x10
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7064da
push eax
call fcn.00be0541
lea eax, [ebp - 0x118]
push eax
mov byte [ebp - 4], 0xf
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7064f5
push eax
call fcn.00be0541
lea eax, [ebp - 0x2e8]
push eax
mov byte [ebp - 4], 0xe
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706510
push eax
call fcn.00be0541
lea eax, [ebp - 0x138]
push eax
mov byte [ebp - 4], 0xd
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70652b
push eax
call fcn.00be0541
lea eax, [ebp - 0x278]
push eax
mov byte [ebp - 4], 0xc
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706546
push eax
call fcn.00be0541
lea eax, [ebp - 0x158]
push eax
mov byte [ebp - 4], 0xb
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706561
push eax
call fcn.00be0541
lea eax, [ebp - 0x308]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70657c
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x1d8]
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x2b8]
mov byte [ebp - 4], 0x15
call fcn.00402fdb
push 3
mov edi, 0x80
push edi
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 0x16
call fcn.00403001
push 3
push 0xff
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 0x17
call fcn.00403001
push 3
push 0x12c
lea ecx, [ebp - 0x198]
mov byte [ebp - 4], 0x18
call fcn.00403001
push ebx
lea ecx, [ebp - 0x298]
mov byte [ebp - 4], 0x19
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x98]
mov byte [ebp - 4], 0x1a
call fcn.00402fdb
push esi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x1b
push esi
push esi
call dword [0xd86228]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00be1990
mov eax, esp
push esi
push esi
lea ecx, [ebp - 0x298]
push ecx
lea ecx, [ebp - 0x98]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x18]
call fcn.0042d27a
push eax
call fcn.0047d919
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x358]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.00403308
cmp eax, esi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x2c], esi
je 0x70669b
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0042258b
cmp eax, esi
jge 0x70669b
cmp eax, 0x80004002
je 0x70669b
push eax
call fcn.00be0541
cmp dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x2c]
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x14], eax
jne 0x7066b4
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1d8]
push eax
lea eax, [ebp - 0x2b8]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x2d8]
push eax
lea eax, [ebp - 0x198]
push eax
push dword [ebp - 0x14]
lea eax, [ebp - 0x378]
push eax
call fcn.0042b9f2
lea eax, [ebp - 0x378]
push eax
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706700
push eax
call fcn.00be0541
lea ecx, [ebp - 0x2c]
call fcn.004185fe
lea eax, [ebp - 0x358]
push eax
mov byte [ebp - 4], 0x1b
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706723
push eax
call fcn.00be0541
lea eax, [ebp - 0x98]
push eax
mov byte [ebp - 4], 0x1a
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70673e
push eax
call fcn.00be0541
lea eax, [ebp - 0x298]
push eax
mov byte [ebp - 4], 0x19
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706759
push eax
call fcn.00be0541
lea eax, [ebp - 0x198]
push eax
mov byte [ebp - 4], 0x18
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706774
push eax
call fcn.00be0541
lea eax, [ebp - 0x2d8]
push eax
mov byte [ebp - 4], 0x17
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70678f
push eax
call fcn.00be0541
lea eax, [ebp - 0x1b8]
push eax
mov byte [ebp - 4], 0x16
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7067aa
push eax
call fcn.00be0541
lea eax, [ebp - 0x2b8]
push eax
mov byte [ebp - 4], 0x15
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7067c5
push eax
call fcn.00be0541
lea eax, [ebp - 0x1d8]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7067e0
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0xc8]
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x1f
call fcn.00402fdb
push 3
push 0xff
lea ecx, [ebp - 0x2a8]
mov byte [ebp - 4], 0x20
call fcn.00403001
push 3
push edi
lea ecx, [ebp - 0x218]
mov byte [ebp - 4], 0x21
call fcn.00403001
push 3
push 0x12c
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0x22
call fcn.00403001
push ebx
lea ecx, [ebp - 0x1f8]
mov byte [ebp - 4], 0x23
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x2f8]
mov byte [ebp - 4], 0x24
call fcn.00402fdb
push esi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x25
push esi
push esi
call dword [0xd86228]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00be1990
mov eax, esp
push esi
push esi
lea ecx, [ebp - 0x1f8]
push ecx
lea ecx, [ebp - 0x2f8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x18]
call fcn.0042d27a
push eax
call fcn.0047d919
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x328]
push eax
mov byte [ebp - 4], 0x25
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov ecx, eax
mov byte [ebp - 4], 0x27
call fcn.00403308
cmp eax, esi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x34], esi
je 0x7068fa
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x34]
call fcn.0042258b
cmp eax, esi
jge 0x7068fa
cmp eax, 0x80004002
je 0x7068fa
push eax
call fcn.00be0541
cmp dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x34]
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x14], eax
jne 0x706913
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x2a8]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x288]
push eax
push dword [ebp - 0x14]
lea eax, [ebp - 0x398]
push eax
call fcn.0042b9f2
lea eax, [ebp - 0x398]
push eax
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70695f
push eax
call fcn.00be0541
lea ecx, [ebp - 0x34]
call fcn.004185fe
lea eax, [ebp - 0x328]
push eax
mov byte [ebp - 4], 0x25
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706982
push eax
call fcn.00be0541
lea eax, [ebp - 0x2f8]
push eax
mov byte [ebp - 4], 0x24
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x70699d
push eax
call fcn.00be0541
lea eax, [ebp - 0x1f8]
push eax
mov byte [ebp - 4], 0x23
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7069b8
push eax
call fcn.00be0541
lea eax, [ebp - 0x288]
push eax
mov byte [ebp - 4], 0x22
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7069d3
push eax
call fcn.00be0541
lea eax, [ebp - 0x218]
push eax
mov byte [ebp - 4], 0x21
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x7069ee
push eax
call fcn.00be0541
lea eax, [ebp - 0x2a8]
push eax
mov byte [ebp - 4], 0x20
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706a09
push eax
call fcn.00be0541
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0x1f
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706a24
push eax
call fcn.00be0541
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706a3f
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x1a8]
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0x29
call fcn.00402fdb
push 3
push edi
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0x2a
call fcn.00403001
push 3
push 0xff
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x2b
call fcn.00403001
push 3
push 0x12c
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x2c
call fcn.00403001
push ebx
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x2d
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x2e
call fcn.00402fdb
push esi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x2f
push esi
push esi
call dword [0xd86228]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00be1990
mov eax, esp
push esi
push esi
lea ecx, [ebp - 0x108]
push ecx
lea ecx, [ebp - 0xe8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x18]
call fcn.0042d27a
push eax
call fcn.0047d919
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x368]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov ecx, eax
mov byte [ebp - 4], 0x31
call fcn.00403308
cmp eax, esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x28], esi
je 0x706b59
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x28]
call fcn.0042258b
cmp eax, esi
jge 0x706b59
cmp eax, 0x80004002
je 0x706b59
push eax
call fcn.00be0541
cmp dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x28]
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x14], eax
jne 0x706b72
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x168]
push eax
lea eax, [ebp - 0x148]
push eax
lea eax, [ebp - 0x128]
push eax
push dword [ebp - 0x14]
lea eax, [ebp - 0x348]
push eax
call fcn.0042b9f2
lea eax, [ebp - 0x348]
push eax
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706bbe
push eax
call fcn.00be0541
lea ecx, [ebp - 0x28]
call fcn.004185fe
lea eax, [ebp - 0x368]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706be1
push eax
call fcn.00be0541
lea eax, [ebp - 0xe8]
push eax
mov byte [ebp - 4], 0x2e
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706bfc
push eax
call fcn.00be0541
lea eax, [ebp - 0x108]
push eax
mov byte [ebp - 4], 0x2d
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706c17
push eax
call fcn.00be0541
lea eax, [ebp - 0x128]
push eax
mov byte [ebp - 4], 0x2c
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706c32
push eax
call fcn.00be0541
lea eax, [ebp - 0x148]
push eax
mov byte [ebp - 4], 0x2b
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706c4d
push eax
call fcn.00be0541
lea eax, [ebp - 0x168]
push eax
mov byte [ebp - 4], 0x2a
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706c68
push eax
call fcn.00be0541
lea eax, [ebp - 0x188]
push eax
mov byte [ebp - 4], 0x29
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706c83
push eax
call fcn.00be0541
lea eax, [ebp - 0x1a8]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706c9e
push eax
call fcn.00be0541
push ebx
lea ecx, [ebp - 0x268]
call fcn.00402fdb
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x33
call dword [sym.imp.oleaut32.dll_VariantInit]
lea eax, [ebp - 0x68]
push ebx
push eax
call fcn.00402be2
cmp eax, esi
pop ecx
pop ecx
jge 0x706cce
push eax
call fcn.00be0541
push 3
push 0xff
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 0x34
call fcn.00403001
push 3
push edi
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x35
call fcn.00403001
push 3
push 0x12c
lea ecx, [ebp - 0x208]
mov byte [ebp - 4], 0x36
call fcn.00403001
push ebx
lea ecx, [ebp - 0x1e8]
mov byte [ebp - 4], 0x37
call fcn.00402fdb
push ebx
lea ecx, [ebp - 0x1c8]
mov byte [ebp - 4], 0x38
call fcn.00402fdb
push esi
push esi
push 0xffffffffffffffff
push dword [ebp - 0x18]
mov byte [ebp - 4], 0x39
push esi
push esi
call dword [0xd86228]
shl eax, 1
add eax, 3
and eax, 0xfffffffc
call fcn.00be1990
mov eax, esp
push esi
push esi
lea ecx, [ebp - 0x1e8]
push ecx
lea ecx, [ebp - 0x1c8]
push ecx
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x18]
call fcn.0042d27a
push eax
call fcn.0047d919
pop ecx
pop ecx
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.004033d8
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp - 4], 0x39
call fcn.00406be3
mov ecx, eax
call fcn.004026d6
mov ecx, eax
call fcn.00403ae9
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.00403308
cmp eax, esi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1c], esi
je 0x706dcc
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042258b
cmp eax, esi
jge 0x706dcc
cmp eax, 0x80004002
je 0x706dcc
push eax
call fcn.00be0541
cmp dword [ebp - 0x10], esi
mov edi, dword [ebp - 0x1c]
mov byte [ebp - 4], 0x3c
jne 0x706de2
push 0x80004003
call fcn.00be0541
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x68]
push eax
lea eax, [ebp - 0x248]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x208]
push eax
push edi
lea eax, [ebp - 0x388]
push eax
call fcn.0042b9f2
lea eax, [ebp - 0x388]
push eax
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706e29
push eax
call fcn.00be0541
mov eax, dword [ebp - 0x1c]
cmp eax, esi
mov byte [ebp - 4], 0x3b
je 0x706e3a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x3a8]
push eax
mov byte [ebp - 4], 0x39
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706e55
push eax
call fcn.00be0541
lea eax, [ebp - 0x1c8]
push eax
mov byte [ebp - 4], 0x38
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706e70
push eax
call fcn.00be0541
lea eax, [ebp - 0x1e8]
push eax
mov byte [ebp - 4], 0x37
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706e8b
push eax
call fcn.00be0541
lea eax, [ebp - 0x208]
push eax
mov byte [ebp - 4], 0x36
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706ea6
push eax
call fcn.00be0541
lea eax, [ebp - 0x228]
push eax
mov byte [ebp - 4], 0x35
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706ec1
push eax
call fcn.00be0541
lea eax, [ebp - 0x248]
push eax
mov byte [ebp - 4], 0x34
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706edc
push eax
call fcn.00be0541
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x33
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706ef4
push eax
call fcn.00be0541
lea eax, [ebp - 0x268]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
cmp eax, esi
pop ecx
jge 0x706f0f
push eax
call fcn.00be0541
mov edi, dword [sym.imp.oleaut32.dll_VariantInit]
lea eax, [ebp - 0x88]
push eax
call edi
lea eax, [ebp - 0x88]
push ebx
push eax
call fcn.00402be2
cmp eax, esi
pop ecx
pop ecx
jge 0x706f37
push eax
call fcn.00be0541
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x3d
call edi
lea eax, [ebp - 0x78]
push ebx
push eax
call fcn.00402be2
cmp eax, esi
pop ecx
pop ecx
jge 0x706f57
push eax
call fcn.00be0541
mov eax, dword [ebp - 0x10]
cmp eax, esi
mov byte [ebp - 4], 0x3e
jne 0x706f6f
push 0x80004003
call fcn.00be0541
mov eax, dword [ebp - 0x10]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x88]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
mov edi, esp
lea esi, [ebp - 0x78]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
push eax
mov dword [ebp - 0x14], eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x110]
test eax, eax
jge 0x706faa
push 0xd3bb98
push dword [ebp - 0x14]
push eax
call fcn.00be054f
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 4], 0x3d
call fcn.00402973
test eax, eax
pop ecx
jge 0x706fc2
push eax
call fcn.00be0541
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 1
call fcn.00402973
test eax, eax
pop ecx
jge 0x706fdd
push eax
call fcn.00be0541
push 0
push ecx
lea eax, [ebp - 0x10]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.0041733b
mov byte [ebp - 4], 1
call fcn.00438119
mov ecx, eax
call fcn.0043b73e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x706065
and byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00406a50
mov eax, dword [ebp - 0x10]
or dword [ebp - 4], 0xffffffff
test eax, eax
je 0x707028
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov ecx, dword [ebp - 0xc]
lea esp, [ebp - 0x3b4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 8