Function at 0x46faf0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x402216
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401a50
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x38]
push 0x40e67c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov eax, dword [0x48b18c]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x18], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1c], ecx
mov edx, dword [eax + 0x10]
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x44], eax
lea edx, [ebp - 0x44]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
mov dword [ebp - 0x40], 0x40
call fcn.00470800
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
push ecx
mov dword [ebp - 0x48], 0xd76aa478
mov dword [ebp - 0x44], 7
call fcn.00470a20
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 4
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
mov ebx, 0xc
push ecx
push edx
mov dword [ebp - 0x48], 0xe8c7b756
mov dword [ebp - 0x44], ebx
call fcn.00470a20
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
mov edi, 0x11
lea ecx, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0x242070db
mov dword [ebp - 0x44], edi
push ecx
add edx, 8
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
push eax
call fcn.00470a20
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, ebx
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
mov esi, 0x16
push eax
push ecx
mov dword [ebp - 0x48], 0xc1bdceee
mov dword [ebp - 0x44], esi
call fcn.00470a20
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x10
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
push edx
mov dword [ebp - 0x48], 0xf57c0faf
mov dword [ebp - 0x44], 7
call fcn.00470a20
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x14
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
push eax
mov dword [ebp - 0x48], 0x4787c62a
mov dword [ebp - 0x44], ebx
call fcn.00470a20
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x18
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
mov dword [ebp - 0x48], 0xa8304613
mov dword [ebp - 0x44], edi
push eax
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00470a20
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x1c
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
push edx
mov dword [ebp - 0x48], 0xfd469501
mov dword [ebp - 0x44], esi
call fcn.00470a20
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x20
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
push eax
mov dword [ebp - 0x48], 0x698098d8
mov dword [ebp - 0x44], 7
call fcn.00470a20
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x24
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x48], 0x8b44f7af
mov dword [ebp - 0x44], ebx
call fcn.00470a20
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x28
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
push edx
mov dword [ebp - 0x48], 0xffff5bb1
mov dword [ebp - 0x44], edi
call fcn.00470a20
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
mov dword [ebp - 0x48], 0x895cd7be
mov dword [ebp - 0x44], esi
push ecx
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x14]
add edx, 0x2c
lea ecx, [ebp - 0x20]
push edx
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
push eax
call fcn.00470a20
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x30
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
push ecx
mov dword [ebp - 0x48], 0x6b901122
mov dword [ebp - 0x44], 7
call fcn.00470a20
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x34
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
mov dword [ebp - 0x48], 0xfd987193
mov dword [ebp - 0x44], ebx
call fcn.00470a20
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x38
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x48], 0xa679438e
mov dword [ebp - 0x44], edi
call fcn.00470a20
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x3c
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
mov dword [ebp - 0x48], 0x49b40821
mov dword [ebp - 0x44], esi
push eax
lea ecx, [ebp - 0x18]
push ecx
call fcn.00470a20
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 4
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
push edx
mov dword [ebp - 0x48], 0xf61e2562
mov dword [ebp - 0x44], 5
call fcn.00470a80
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x18
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
mov ebx, 9
push edx
push eax
mov dword [ebp - 0x48], 0xc040b340
mov dword [ebp - 0x44], ebx
call fcn.00470a80
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x2c
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
mov edi, 0xe
push eax
push ecx
mov dword [ebp - 0x48], 0x265e5a51
mov dword [ebp - 0x44], edi
call fcn.00470a80
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
mov esi, 0x14
push ecx
push edx
mov dword [ebp - 0x48], 0xe9b6c7aa
mov dword [ebp - 0x44], esi
call fcn.00470a80
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xd62f105d
mov dword [ebp - 0x44], 5
push eax
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x44]
add edx, esi
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
push eax
call fcn.00470a80
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x28
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x48], 0x2441453
mov dword [ebp - 0x44], ebx
call fcn.00470a80
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x3c
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
push edx
mov dword [ebp - 0x48], 0xd8a1e681
mov dword [ebp - 0x44], edi
call fcn.00470a80
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x10
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
push eax
mov dword [ebp - 0x48], 0xe7d3fbc8
mov dword [ebp - 0x44], esi
call fcn.00470a80
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x24
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
mov dword [ebp - 0x48], 0x21e1cde6
mov dword [ebp - 0x44], 5
push edx
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x14]
push eax
push ecx
call fcn.00470a80
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x38
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
mov dword [ebp - 0x48], 0xc33707d6
mov dword [ebp - 0x44], ebx
call fcn.00470a80
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0xc
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x48], 0xf4d50d87
mov dword [ebp - 0x44], edi
call fcn.00470a80
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x20
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
push ecx
mov dword [ebp - 0x48], 0x455a14ed
mov dword [ebp - 0x44], esi
call fcn.00470a80
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x34
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
push edx
mov dword [ebp - 0x48], 0xa9e3e905
mov dword [ebp - 0x44], 5
call fcn.00470a80
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xfcefa3f8
mov dword [ebp - 0x44], ebx
push eax
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x44]
add edx, 8
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
push eax
call fcn.00470a80
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x1c
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
push ecx
mov dword [ebp - 0x48], 0x676f02d9
mov dword [ebp - 0x44], edi
call fcn.00470a80
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x30
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
push edx
mov dword [ebp - 0x48], 0x8d2a4c8a
mov dword [ebp - 0x44], esi
call fcn.00470a80
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, esi
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
push eax
mov dword [ebp - 0x48], 0xfffa3942
mov dword [ebp - 0x44], 4
call fcn.00470ae0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x20
mov ebx, 0xb
push edx
lea ecx, [ebp - 0x1c]
push eax
mov dword [ebp - 0x48], 0x8771f681
mov dword [ebp - 0x44], ebx
push ecx
lea edx, [ebp - 0x18]
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
push ecx
call fcn.00470ae0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x2c
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
mov edi, 0x10
push ecx
push edx
mov dword [ebp - 0x48], 0x6d9d6122
mov dword [ebp - 0x44], edi
call fcn.00470ae0
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x38
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
mov esi, 0x17
push edx
push eax
mov dword [ebp - 0x48], 0xfde5380c
mov dword [ebp - 0x44], esi
call fcn.00470ae0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 4
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
push ecx
mov dword [ebp - 0x48], 0xa4beea44
mov dword [ebp - 0x44], 4
call fcn.00470ae0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, edi
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
mov dword [ebp - 0x48], 0x4bdecfa9
mov dword [ebp - 0x44], ebx
call fcn.00470ae0
mov dword [ebp - 0x48], 0xf6bb4b60
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x1c
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x44], edi
call fcn.00470ae0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x28
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
push ecx
mov dword [ebp - 0x48], 0xbebfbc70
mov dword [ebp - 0x44], esi
call fcn.00470ae0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x34
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
push edx
mov dword [ebp - 0x48], 0x289b7ec6
mov dword [ebp - 0x44], 4
call fcn.00470ae0
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
push eax
mov dword [ebp - 0x48], 0xeaa127fa
mov dword [ebp - 0x44], ebx
call fcn.00470ae0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0xc
push edx
lea ecx, [ebp - 0x18]
push eax
mov dword [ebp - 0x48], 0xd4ef3085
mov dword [ebp - 0x44], edi
push ecx
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
push ecx
call fcn.00470ae0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x18
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
push edx
mov dword [ebp - 0x48], 0x4881d05
mov dword [ebp - 0x44], esi
call fcn.00470ae0
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x24
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
push eax
mov dword [ebp - 0x48], 0xd9d4d039
mov dword [ebp - 0x44], 4
call fcn.00470ae0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x30
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x48], 0xe6db99e5
mov dword [ebp - 0x44], ebx
call fcn.00470ae0
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x3c
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
push edx
mov dword [ebp - 0x48], 0x1fa27cf8
mov dword [ebp - 0x44], edi
call fcn.00470ae0
mov dword [ebp - 0x48], 0xc4ac5665
mov dword [ebp - 0x44], esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 8
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
push eax
call fcn.00470ae0
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
push ecx
mov dword [ebp - 0x48], 0xf4292244
mov dword [ebp - 0x44], 6
call fcn.00470b40
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x1c
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
mov ebx, 0xa
push ecx
push edx
mov dword [ebp - 0x48], 0x432aff97
mov dword [ebp - 0x44], ebx
call fcn.00470b40
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x38
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
mov edi, 0xf
push edx
push eax
mov dword [ebp - 0x48], 0xab9423a7
mov dword [ebp - 0x44], edi
call fcn.00470b40
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
mov esi, 0x15
push ecx
add eax, 0x14
push edx
mov dword [ebp - 0x48], 0xfc93a039
mov dword [ebp - 0x44], esi
push eax
lea ecx, [ebp - 0x14]
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
push ecx
call fcn.00470b40
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x30
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
push edx
mov dword [ebp - 0x48], 0x655b59c3
mov dword [ebp - 0x44], 6
call fcn.00470b40
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0xc
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
push eax
mov dword [ebp - 0x48], 0x8f0ccc92
mov dword [ebp - 0x44], ebx
call fcn.00470b40
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x28
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
push ecx
mov dword [ebp - 0x48], 0xffeff47d
mov dword [ebp - 0x44], edi
call fcn.00470b40
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 4
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
push edx
mov dword [ebp - 0x48], 0x85845dd1
mov dword [ebp - 0x44], esi
call fcn.00470b40
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x20
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
push eax
mov dword [ebp - 0x48], 0x6fa87e4f
mov dword [ebp - 0x44], 6
call fcn.00470b40
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x3c
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x48], 0xfe2ce6e0
mov dword [ebp - 0x44], ebx
call fcn.00470b40
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x18
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
push edx
mov dword [ebp - 0x48], 0xa3014314
mov dword [ebp - 0x44], edi
call fcn.00470b40
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 0x34
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
push eax
mov dword [ebp - 0x48], 0x4e0811a1
mov dword [ebp - 0x44], esi
call fcn.00470b40
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x10
push edx
mov dword [ebp - 0x48], 0xf7537e82
mov dword [ebp - 0x44], 6
push eax
lea ecx, [ebp - 0x20]
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
push ecx
call fcn.00470b40
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
add ecx, 0x2c
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
mov dword [ebp - 0x48], 0xbd3af235
mov dword [ebp - 0x44], ebx
call fcn.00470b40
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
add edx, 8
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x48], 0x2ad7d2bb
mov dword [ebp - 0x44], edi
call fcn.00470b40
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
lea edx, [ebp - 0x44]
push ecx
add eax, 0x24
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
push ecx
mov dword [ebp - 0x48], 0xeb86d391
mov dword [ebp - 0x44], esi
call fcn.00470b40
mov eax, dword [0x48b18c]
lea edx, [ebp - 0x14]
add eax, 4
push edx
push eax
call fcn.00470c20
mov ecx, dword [0x48b18c]
lea edx, [ebp - 0x18]
push edx
mov dword [ecx + 4], eax
mov eax, dword [0x48b18c]
add eax, 8
push eax
call fcn.00470c20
mov ecx, dword [0x48b18c]
lea edx, [ebp - 0x1c]
push edx
mov dword [ecx + 8], eax
mov eax, dword [0x48b18c]
add eax, 0xc
push eax
call fcn.00470c20
mov ecx, dword [0x48b18c]
lea edx, [ebp - 0x20]
push edx
mov dword [ecx + 0xc], eax
mov eax, dword [0x48b18c]
add eax, 0x10
push eax
call fcn.00470c20
mov ecx, dword [0x48b18c]
push 0x4707ec
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x44]
lea edx, [ebp - 0x38]
push eax
push 0
mov dword [ebp - 0x44], edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret