; sub esp, 690h 81 EC 90 06 00 00 ; push ebp 55 ; push esi 56 ; push edi 57 ; mov ecx, 7Fh B9 7F 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+49Dh] 8D BC 24 9D 04 00 00 ; mov [esp+69Ch+var_200], 0 C6 84 24 9C 04 00 00 00 ; mov [esp+69Ch+var_604], 0 C6 84 24 98 00 00 00 00 ; rep stosd F3 AB ; stosw 66 AB ; stosb AA ; mov ecx, 3Fh B9 3F 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+9Ah] 8D BC 24 9A 00 00 00 ; mov byte ptr [esp+99h], 0 C6 84 24 99 00 00 00 00 ; rep stosd F3 AB ; stosb AA ; mov ecx, 3Fh B9 3F 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+69Ch+var_404+2] 8D BC 24 9A 02 00 00 ; mov byte ptr [esp+69Ch+var_404], 0 C6 84 24 98 02 00 00 00 ; mov byte ptr [esp+69Ch+var_404+1], 0 C6 84 24 99 02 00 00 00 ; mov byte ptr [esp+69Ch+var_504], 0 C6 84 24 98 01 00 00 00 ; rep stosd F3 AB ; stosb AA ; mov ecx, 3Fh B9 3F 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+69Ch+var_504+2] 8D BC 24 9A 01 00 00 ; mov byte ptr [esp+69Ch+var_504+1], 0 C6 84 24 99 01 00 00 00 ; rep stosd F3 AB ; stosb AA ; mov ecx, 7 B9 07 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+69Ch+var_684+2] 8D 7C 24 1A ; mov byte ptr [esp+69Ch+var_684], 0 C6 44 24 18 00 ; mov byte ptr [esp+69Ch+var_684+1], 0 C6 44 24 19 00 ; mov [esp+69Ch+var_664], 0 C6 44 24 38 00 ; rep stosd F3 AB ; stosw 66 AB ; mov ecx, 7 B9 07 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+69Ch+var_662] 8D 7C 24 3A ; mov byte ptr [esp+39h], 0 C6 44 24 39 00 ; rep stosd F3 AB ; stosw 66 AB ; mov ecx, 7 B9 07 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+69Ch+var_642] 8D 7C 24 5A ; mov [esp+69Ch+var_644], 0 C6 44 24 58 00 ; mov byte ptr [esp+59h], 0 C6 44 24 59 00 ; mov [esp+69Ch+ModuleName], 0 C6 84 24 98 03 00 00 00 ; rep stosd F3 AB ; stosw 66 AB ; mov ecx, 40h B9 40 00 00 00 ; xor eax, eax 33 C0 ; lea edi, [esp+399h] 8D BC 24 99 03 00 00 ; mov [esp+69Ch+var_68C], 0 C7 44 24 10 00 00 00 00 ; rep stosd F3 AB ; stosw 66 AB ; stosb AA ; lea eax, [esp+69Ch+ModuleName] 8D 84 24 98 03 00 00 ; push eax ; char * 50 ; call sub_708190 E8 xx xx xx xx ; add esp, 4 83 C4 04 ; test eax, eax 85 C0 ; jnz short loc_707F13 75 xx ; pop edi 5F ; pop esi 5E ; pop ebp 5D ; add esp, 690h 81 C4 90 06 00 00 ; retn C3 ; mov ecx, [esp+69Ch+arg_8] 8B 8C 24 A8 06 00 00 ; lea edx, [esp+69Ch+var_664] 8D 54 24 38 ; push ecx 51 ; push offset aS ; "%s" 68 xx xx xx xx ; push edx ; char * 52 ; call _sprintf E8 xx xx xx xx ; add esp, 0Ch 83 C4 0C ; lea eax, [esp+69Ch+ModuleName] 8D 84 24 98 03 00 00 ; push eax ; lpModuleName 50 ; call ds:GetModuleHandleA FF 15 xx xx xx xx ; mov ebp, eax 8B E8 ; test ebp, ebp 85 ED ; mov [esp+69Ch+var_688], ebp 89 6C 24 14 ; jnz short loc_707F8E 75 xx ; call ds:GetLastError FF 15 xx xx xx xx ; mov esi, eax 8B F0 ; lea ecx, [esp+69Ch+ModuleName] 8D 8C 24 98 03 00 00 ; push esi 56 ; push ecx 51 ; lea edx, [esp+6A4h+var_200] 8D 94 24 A4 04 00 00 ; push offset aS_D ; "%s.(%d)" 68 xx xx xx xx ; push edx ; char * 52 ; call _sprintf E8 xx xx xx xx ; push 6 ; int 6A 06 ; push esi ; int 56 ; lea eax, [esp+6B4h+var_200] 8D 84 24 B4 04 00 00 ; push 31h ; int 6A 31 ; push eax ; char * 50 ; call sub_708FE0 E8 xx xx xx xx ; add esp, 20h 83 C4 20 ; call sub_706E80 E8 xx xx xx xx ; pop edi 5F ; pop esi 5E ; xor eax, eax 33 C0 ; pop ebp 5D ; add esp, 690h 81 C4 90 06 00 00 ; retn C3 ; mov edx, [ebp+3Ch] 8B 55 3C ; push ebx 53 ; mov ebx, ebp 8B DD ; xor eax, eax 33 C0 ; add ebx, edx 03 DA ; mov [esp+6A0h+var_690], ebx 89 5C 24 10 ; mov ecx, [ebx+50h] 8B 4B 50 ; mov dword_5A94F48, ecx 89 0D xx xx xx xx ; mov edx, [ebx+1Ch] 8B 53 1C ; mov dword_5A94F4C, edx 89 15 xx xx xx xx ; xor edx, edx 33 D2 ; mov dx, [ebx+6] 66 8B 53 06 ; test edx, edx 85 D2 ; jbe short loc_707FF9 76 xx ; mov ecx, [ebp+3Ch] 8B 4D 3C ; lea ebp, [ecx+ebp+0F8h] 8D AC 29 F8 00 00 00 ; mov ecx, 2 B9 02 00 00 00 ; mov edi, offset a_rsrc; ".rsrc" BF xx xx xx xx ; mov esi, ebp 8B F5 ; xor ebx, ebx 33 DB ; repe cmpsd F3 A7 ; mov [esp+6A0h+var_68C], ebp 89 6C 24 14 ; jz short loc_707FF1 74 xx ; lea ecx, [edx-1] 8D 4A FF ; cmp eax, ecx 3B C1 ; jz short loc_707FE9 74 xx ; inc eax 40 ; add ebp, 28h 83 C5 28 ; cmp eax, edx 3B C2 ; jb short loc_707FC2 72 xx ; jmp short loc_707FF1 EB xx ; mov [esp+6A0h+var_68C], 0 C7 44 24 14 00 00 00 00 ; mov ebp, [esp+6A0h+var_688] 8B 6C 24 18 ; mov ebx, [esp+6A0h+var_690] 8B 5C 24 10 ; mov al, byte ptr dword_5A94E44 A0 xx xx xx xx ; test al, al 84 C0 ; jnz short loc_708016 75 xx ; mov eax, [ebx+1Ch] 8B 43 1C ; lea edx, [esp+6A0h+var_684] 8D 54 24 1C ; push edx 52 ; push eax 50 ; push ebp 55 ; call sub_7093D0 E8 xx xx xx xx ; add esp, 0Ch 83 C4 0C ; jmp short loc_708026 EB xx