Function at 0x423d50
Capabilities:
Manipulate safe mode programs

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401b26
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb8
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401a60
mov ebx, dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
xor edi, edi
push edi
lea eax, [ebp - 0x44]
push 0x4051f4
push eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x84], edi
call ebx
lea ecx, [ebp - 0x44]
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [fcn.00401178]
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 1
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x40522c
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x24]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
add esp, 0x20
push eax
call esi
push eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push edi
lea ecx, [ebp - 0x44]
push 0x406eb0
push ecx
call ebx
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x34]
push edx
push eax
call dword [fcn.00401178]
sub esp, 0x10
mov ecx, 8
mov edi, esp
mov dword [ebp - 0x74], ecx
mov ebx, ecx
mov eax, 0x406ed0
mov dword [edi], ecx
mov ecx, dword [ebp - 0x70]
sub esp, 0x10
mov dword [ebp - 0x6c], eax
mov dword [edi + 4], ecx
mov ecx, esp
mov edx, 0x406f64
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edi + 0xc], eax
mov dword [ecx], ebx
mov ebx, dword [ebp - 0x90]
sub esp, 0x10
mov dword [ecx + 4], ebx
mov eax, 8
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x88]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb0]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], eax
mov eax, 0x406f6c
mov dword [ecx + 4], edx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x406f98
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x407030
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407078
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 2
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
xor eax, eax
sub esp, 0x10
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
mov dword [ecx], edx
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 8], eax
push 3
lea eax, [ebp - 0x34]
push 0x406f80
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x74], ecx
mov eax, 0x40712c
mov dword [edx], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
push 0
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x14]
push 0
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], 0x405280
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
push 2
push 0x406f80
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 0xc], eax
call esi
push eax
call edi
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x44]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x74], ecx
mov eax, 0x4071d0
mov dword [edx], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
push 0
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x14]
push 0
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], 0x40530c
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
push 2
push 0x406f80
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 0xc], eax
call esi
push eax
call edi
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x44]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x74], ecx
mov eax, 0x40726c
mov dword [edx], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
push 0
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x14]
push 0
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], 0x405344
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
push 2
push 0x406f80
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 0xc], eax
call esi
push eax
call edi
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x44]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x74], ecx
mov eax, 0x407304
mov dword [edx], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
push 0
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x14]
push 0
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], 0x40537c
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
push 2
push 0x406f80
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 0xc], eax
call esi
push eax
call edi
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x44]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x74], ecx
mov eax, 0x4073a4
mov dword [edx], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x7c], eax
push 0
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x14]
push 0
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x6c], 0x4053bc
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
lea eax, [ebp - 0x74]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
sub esp, 0x10
mov ecx, dword [eax]
mov edx, esp
push 2
push 0x406f80
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 0xc], eax
call esi
push eax
call edi
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x44]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov ecx, 8
mov edx, esp
mov eax, 0x40743c
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x84], ecx
mov dword [edx], ecx
lea ecx, [ebp - 0x74]
push ecx
push 0
mov dword [edx + 4], ebx
push 0
mov dword [ebp - 0x6c], 0x4074e0
mov dword [ebp - 0x7c], 0x4053bc
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
lea ecx, [ebp - 0x54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x64]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
push 2
push 0x406f80
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
lea edx, [ebp - 0x64]
lea eax, [ebp - 0x54]
push edx
lea ecx, [ebp - 0x44]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 0x407510
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x6c], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x4075d0
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x406f64
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
mov eax, 0x40769c
mov ecx, 8
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x74], ecx
add esp, 0x2c
mov dword [ebp - 0xb4], ecx
mov edx, esp
sub esp, 0x10
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x406f64
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x40775c
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x407830
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407848
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov dword [ecx], eax
mov edx, dword [ebp - 0x88]
mov dword [ecx + 4], ebx
mov eax, 0x406f64
sub esp, 0x10
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407930
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x406f64
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407a14
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov dword [ecx], eax
mov eax, 0x406f64
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov edx, dword [ebp - 0x88]
mov eax, dword [ebp - 0xb0]
sub esp, 0x10
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407af8
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407bdc
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb0]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x407cc4
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x405254
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407d18
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407dc8
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407e70
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407f44
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0xb4], ecx
mov eax, 0x407fe0
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
mov eax, 0x4080b0
mov ecx, 8
mov dword [ebp - 0x6c], eax
add esp, 0x2c
mov dword [ebp - 0x74], ecx
mov edx, esp
mov dword [ebp - 0xb4], ecx
sub esp, 0x10
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [edx + 4], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov eax, 8
mov edx, dword [ebp - 0x88]
mov dword [ecx], eax
mov eax, 0x4075c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
mov edx, dword [ebp - 0xb4]
mov ecx, esp
push 3
push 0x406f80
mov dword [ecx], edx
mov edx, dword [ebp - 0xa8]
mov dword [ecx + 4], eax
mov eax, 0x406f6c
mov dword [ecx + 8], eax
lea eax, [ebp - 0x34]
push eax
mov dword [ecx + 0xc], edx
call esi
push eax
call edi
add esp, 0x2c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408178
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408284
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
push 2
push 0x406f80
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x40836c
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408458
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408538
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
sub esp, 0x10
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov ecx, esp
mov eax, 0x408260
push 2
push 0x406f80
mov dword [ecx], edx
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x40861c
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408710
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
mov eax, 0x4087f4
mov ecx, 8
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x74], ecx
add esp, 0x1c
mov dword [ebp - 0x94], ecx
mov edx, esp
sub esp, 0x10
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x4088dc
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x4089c8
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408ab4
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408b94
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408c78
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
push 2
lea ecx, [ebp - 0x34]
push 0x406f80
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408d60
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408e44
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x408f28
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov eax, 0x408260
mov dword [ecx], edx
push 2
push 0x406f80
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x409010
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x4090f8
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x408260
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov eax, 0x4091e0
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
mov dword [edx + 4], ecx
sub esp, 0x10
mov ecx, esp
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
push 2
push 0x406f80
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x4092ec
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x4093cc
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
mov eax, 0x4094b8
mov ecx, 8
mov dword [ebp - 0x6c], eax
add esp, 0x1c
mov dword [ebp - 0x74], ecx
mov edx, esp
mov dword [ebp - 0x94], ecx
sub esp, 0x10
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x4095a4
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x409690
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x409778
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x94], ecx
mov eax, 0x409874
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
sub esp, 0x10
mov dword [edx + 4], ecx
mov ecx, esp
push 2
push 0x406f80
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x94]
mov dword [ecx], edx
mov eax, 0x4092c8
mov dword [ecx + 4], ebx
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x88]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x34]
push ecx
call esi
push eax
call edi
add esp, 0x1c
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 0x409954
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
mov eax, 0x409a64
add esp, 0xc
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x6c], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
add esp, 0xc
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 0x409b44
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
add esp, 0xc
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 0x409c40
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
add esp, 0xc
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 0x409d20
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
mov eax, 0x409e28
mov ecx, 8
add esp, 0xc
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x74], ecx
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
push 1
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
add esp, 0xc
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 0x409f08
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
add esp, 0xc
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x74], ecx
mov eax, 0x40a010
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
push 0x409a30
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x34]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 0xc], eax
call esi
push eax
call edi
add esp, 0x1c
push 0x425658
jmp 0x42563e
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x34]
call esi
ret