Function at 0x51c4f0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4024d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb10
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401ec8
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1cc], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x29c], ebx
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2fc], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x36c], ebx
mov dword [ebp - 0x37c], ebx
mov dword [ebp - 0x38c], ebx
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x3ac], ebx
mov dword [ebp - 0x3bc], ebx
mov dword [ebp - 0x3cc], ebx
mov dword [ebp - 0x3dc], ebx
mov dword [ebp - 0x3ec], ebx
mov dword [ebp - 0x3fc], ebx
mov dword [ebp - 0x40c], ebx
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x42c], ebx
mov dword [ebp - 0x43c], ebx
mov dword [ebp - 0x44c], ebx
mov dword [ebp - 0x45c], ebx
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x48c], ebx
mov dword [ebp - 0x49c], ebx
mov dword [ebp - 0x4ac], ebx
mov dword [ebp - 0x4bc], ebx
mov dword [ebp - 0x4cc], ebx
mov dword [ebp - 0x4dc], ebx
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x4fc], ebx
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x51c], ebx
mov dword [ebp - 0x52c], ebx
mov dword [ebp - 0x53c], ebx
mov dword [ebp - 0x54c], ebx
mov dword [ebp - 0x55c], ebx
mov dword [ebp - 0x56c], ebx
mov dword [ebp - 0x57c], ebx
mov dword [ebp - 0x58c], ebx
mov dword [ebp - 0x59c], ebx
mov dword [ebp - 0x5ac], ebx
mov dword [ebp - 0x5bc], ebx
mov dword [ebp - 0x5cc], ebx
mov dword [ebp - 0x5dc], ebx
mov dword [ebp - 0x5ec], ebx
mov dword [ebp - 0x5fc], ebx
mov dword [ebp - 0x60c], ebx
mov dword [ebp - 0x61c], ebx
mov dword [ebp - 0x62c], ebx
mov dword [ebp - 0x63c], ebx
mov dword [ebp - 0x64c], ebx
mov dword [ebp - 0x65c], ebx
mov dword [ebp - 0x66c], ebx
mov dword [ebp - 0x67c], ebx
mov dword [ebp - 0x68c], ebx
mov dword [ebp - 0x69c], ebx
mov dword [ebp - 0x6ac], ebx
mov dword [ebp - 0x6bc], ebx
mov dword [ebp - 0x6cc], ebx
mov dword [ebp - 0x6dc], ebx
mov dword [ebp - 0x6ec], ebx
mov dword [ebp - 0x6fc], ebx
mov dword [ebp - 0x70c], ebx
mov dword [ebp - 0x71c], ebx
mov dword [ebp - 0x72c], ebx
mov dword [ebp - 0x73c], ebx
mov dword [ebp - 0x74c], ebx
mov dword [ebp - 0x75c], ebx
mov dword [ebp - 0x76c], ebx
mov dword [ebp - 0x77c], ebx
mov dword [ebp - 0x78c], ebx
mov dword [ebp - 0x79c], ebx
mov dword [ebp - 0x7ac], ebx
mov dword [ebp - 0x7bc], ebx
mov dword [ebp - 0x7cc], ebx
mov dword [ebp - 0x7dc], ebx
mov dword [ebp - 0x7ec], ebx
mov dword [ebp - 0x7fc], ebx
mov dword [ebp - 0x80c], ebx
mov dword [ebp - 0x81c], ebx
mov dword [ebp - 0x82c], ebx
mov dword [ebp - 0x83c], ebx
mov dword [ebp - 0x84c], ebx
mov dword [ebp - 0x85c], ebx
mov dword [ebp - 0x86c], ebx
mov dword [ebp - 0x87c], ebx
mov dword [ebp - 0x88c], ebx
mov dword [ebp - 0x89c], ebx
mov dword [ebp - 0x8ac], ebx
mov dword [ebp - 0x8bc], ebx
mov dword [ebp - 0x8cc], ebx
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x8ec], ebx
mov dword [ebp - 0x8fc], ebx
mov dword [ebp - 0x90c], ebx
mov dword [ebp - 0x91c], ebx
mov dword [ebp - 0x92c], ebx
mov dword [ebp - 0x93c], ebx
mov dword [ebp - 0x94c], ebx
mov dword [ebp - 0x95c], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
lea eax, [ebp - 0x50]
push 0x4d0724
push eax
mov dword [ebp - 0x96c], ebx
mov dword [ebp - 0x97c], ebx
mov dword [ebp - 0x98c], ebx
mov dword [ebp - 0x99c], ebx
mov dword [ebp - 0x9ac], ebx
mov dword [ebp - 0x9bc], ebx
mov dword [ebp - 0x9cc], ebx
mov dword [ebp - 0x9dc], ebx
mov dword [ebp - 0x9ec], ebx
mov dword [ebp - 0x9fc], ebx
mov dword [ebp - 0xa0c], ebx
mov dword [ebp - 0xa1c], ebx
mov dword [ebp - 0xa2c], ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa4c], ebx
mov dword [ebp - 0xa5c], ebx
mov dword [ebp - 0xa6c], ebx
mov dword [ebp - 0xa7c], ebx
mov dword [ebp - 0xa8c], ebx
mov dword [ebp - 0xa9c], ebx
mov dword [ebp - 0xaac], ebx
mov dword [ebp - 0xabc], ebx
mov dword [ebp - 0xac0], ebx
mov dword [ebp - 0xac8], ebx
call esi
push eax
call fcn.004c8410
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 0xac0], eax
call edi
lea ecx, [ebp - 0x54]
push 0x4d073c
push ecx
call esi
mov edx, dword [ebp - 0xac0]
push eax
push edx
call fcn.004c83c4
mov esi, eax
call edi
xor eax, eax
cmp esi, ebx
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x50]
setne al
push ecx
mov edi, 2
neg eax
push edx
push edi
mov word [0x537168], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
cmp word [0x537168], bx
je 0x520b69
push ebx
push 0x7f
push 1
lea eax, [ebp - 0x8c]
push ebx
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], 0x56
mov dword [ebp - 0x9c], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9c]
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
call esi
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa4], 0x53
mov dword [ebp - 0xac], edi
lea edx, [ebp - 0xac]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0xb08], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xb08]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, edi
mov dword [ebp - 0xb4], 0x65
mov dword [ebp - 0xbc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xbc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 3
mov dword [ebp - 0xc4], 0x48
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 4
mov dword [ebp - 0xd4], 0x8b
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 5
mov dword [ebp - 0xe4], 4
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 6
mov dword [ebp - 0xf4], 0x25
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x104], 0x60
mov dword [ebp - 0x10c], edi
lea edx, [ebp - 0x10c]
mov eax, dword [ebp - 0x8c]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 8
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 9
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xa
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xb
mov dword [ebp - 0x144], 0x48
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xc
mov dword [ebp - 0x154], 0x8b
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xd
mov dword [ebp - 0x164], 0x40
mov dword [ebp - 0x16c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x16c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xe
mov dword [ebp - 0x174], 0x18
mov dword [ebp - 0x17c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x17c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xf
mov dword [ebp - 0x184], 0x48
mov dword [ebp - 0x18c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x18c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x194], 0x8b
mov dword [ebp - 0x19c], edi
lea edx, [ebp - 0x19c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x11
mov dword [ebp - 0x1a4], 0x58
mov dword [ebp - 0x1ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x12
mov dword [ebp - 0x1b4], 0x10
mov dword [ebp - 0x1bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x13
mov dword [ebp - 0x1c4], 0x48
mov dword [ebp - 0x1cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x14
mov dword [ebp - 0x1d4], 0x8d
mov dword [ebp - 0x1dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x15
mov dword [ebp - 0x1e4], 0x70
mov dword [ebp - 0x1ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x16
mov dword [ebp - 0x1f4], 0x10
mov dword [ebp - 0x1fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x17
mov dword [ebp - 0x204], 0x48
mov dword [ebp - 0x20c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x20c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x18
mov dword [ebp - 0x214], 0x39
mov dword [ebp - 0x21c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x21c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x224], 0xde
mov dword [ebp - 0x22c], edi
lea edx, [ebp - 0x22c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1a
mov dword [ebp - 0x234], 0x74
mov dword [ebp - 0x23c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x23c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1b
mov dword [ebp - 0x244], 0x58
mov dword [ebp - 0x24c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x24c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1c
mov dword [ebp - 0x254], 0xf
mov dword [ebp - 0x25c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x25c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1d
mov dword [ebp - 0x264], 0x1f
mov dword [ebp - 0x26c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x26c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1e
mov dword [ebp - 0x274], 0x40
mov dword [ebp - 0x27c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x27c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1f
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0x28c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x28c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x20
mov dword [ebp - 0x294], 0x4c
mov dword [ebp - 0x29c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x29c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x21
mov dword [ebp - 0x2a4], 0x8b
mov dword [ebp - 0x2ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2b4], 0x4b
mov dword [ebp - 0x2bc], edi
lea edx, [ebp - 0x2bc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x23
mov dword [ebp - 0x2c4], 0x60
mov dword [ebp - 0x2cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x24
mov dword [ebp - 0x2d4], 0x49
mov dword [ebp - 0x2dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x25
mov dword [ebp - 0x2e4], 0x89
mov dword [ebp - 0x2ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x26
mov dword [ebp - 0x2f4], 0xc8
mov dword [ebp - 0x2fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x27
mov dword [ebp - 0x304], 0xeb
mov dword [ebp - 0x30c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x30c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x28
mov dword [ebp - 0x314], 0xb
mov dword [ebp - 0x31c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x31c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x29
mov dword [ebp - 0x324], 0xf
mov dword [ebp - 0x32c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x32c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2a
mov dword [ebp - 0x334], 0x1f
mov dword [ebp - 0x33c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x33c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x344], 0x80
mov dword [ebp - 0x34c], edi
lea edx, [ebp - 0x34c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2c
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x35c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x35c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2d
mov dword [ebp - 0x364], ebx
mov dword [ebp - 0x36c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x36c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2e
mov dword [ebp - 0x374], ebx
mov dword [ebp - 0x37c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x37c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2f
mov dword [ebp - 0x384], ebx
mov dword [ebp - 0x38c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x38c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x30
mov dword [ebp - 0x394], 0x39
mov dword [ebp - 0x39c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x39c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x31
mov dword [ebp - 0x3a4], 0xd0
mov dword [ebp - 0x3ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x32
mov dword [ebp - 0x3b4], 0x75
mov dword [ebp - 0x3bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x33
mov dword [ebp - 0x3c4], 0x34
mov dword [ebp - 0x3cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3d4], 0x49
mov dword [ebp - 0x3dc], edi
lea edx, [ebp - 0x3dc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x35
mov dword [ebp - 0x3e4], 0x83
mov dword [ebp - 0x3ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x36
mov dword [ebp - 0x3f4], 0xc1
mov dword [ebp - 0x3fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x37
mov dword [ebp - 0x404], edi
mov dword [ebp - 0x40c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x40c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x38
mov dword [ebp - 0x414], 0x41
mov dword [ebp - 0x41c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x41c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x39
mov dword [ebp - 0x424], 0xf
mov dword [ebp - 0x42c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x42c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3a
mov dword [ebp - 0x434], 0xb7
mov dword [ebp - 0x43c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x43c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3b
mov dword [ebp - 0x444], 0x41
mov dword [ebp - 0x44c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x44c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3c
mov dword [ebp - 0x454], 0xfe
mov dword [ebp - 0x45c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x45c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x464], 0x44
mov dword [ebp - 0x46c], edi
lea edx, [ebp - 0x46c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3e
mov dword [ebp - 0x474], 0x8d
mov dword [ebp - 0x47c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x47c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3f
mov dword [ebp - 0x484], 0x50
mov dword [ebp - 0x48c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x48c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x40
mov dword [ebp - 0x494], 0xbf
mov dword [ebp - 0x49c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x49c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x41
mov dword [ebp - 0x4a4], 0x8d
mov dword [ebp - 0x4ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x42
mov dword [ebp - 0x4b4], 0x50
mov dword [ebp - 0x4bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x43
mov dword [ebp - 0x4c4], 0x20
mov dword [ebp - 0x4cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x44
mov dword [ebp - 0x4d4], 0x41
mov dword [ebp - 0x4dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x45
mov dword [ebp - 0x4e4], 0x83
mov dword [ebp - 0x4ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x4f4], 0xfa
mov dword [ebp - 0x4fc], edi
lea edx, [ebp - 0x4fc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x46
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x47
mov dword [ebp - 0x504], 0x19
mov dword [ebp - 0x50c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x50c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x48
mov dword [ebp - 0x514], 0xf
mov dword [ebp - 0x51c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x51c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x49
mov dword [ebp - 0x524], 0x46
mov dword [ebp - 0x52c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x52c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4a
mov dword [ebp - 0x534], 0xc2
mov dword [ebp - 0x53c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x53c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4b
mov dword [ebp - 0x544], 0x49
mov dword [ebp - 0x54c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x54c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4c
mov dword [ebp - 0x554], 0x83
mov dword [ebp - 0x55c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x55c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4d
mov dword [ebp - 0x564], pe_nt_image_headers32
mov dword [ebp - 0x56c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x56c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4e
mov dword [ebp - 0x574], edi
mov dword [ebp - 0x57c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x57c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x584], 0x41
mov dword [ebp - 0x58c], edi
lea edx, [ebp - 0x58c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4f
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x50
mov dword [ebp - 0x594], 0xf
mov dword [ebp - 0x59c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x59c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x51
mov dword [ebp - 0x5a4], 0xb7
mov dword [ebp - 0x5ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x52
mov dword [ebp - 0x5b4], 0x50
mov dword [ebp - 0x5bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x53
mov dword [ebp - 0x5c4], 0xfe
mov dword [ebp - 0x5cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x54
mov dword [ebp - 0x5d4], 0x44
mov dword [ebp - 0x5dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x55
mov dword [ebp - 0x5e4], 0x8d
mov dword [ebp - 0x5ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x56
mov dword [ebp - 0x5f4], 0x5a
mov dword [ebp - 0x5fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x57
mov dword [ebp - 0x604], 0xbf
mov dword [ebp - 0x60c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x60c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x614], 0x44
mov dword [ebp - 0x61c], edi
lea edx, [ebp - 0x61c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x58
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x59
mov dword [ebp - 0x624], 0x8d
mov dword [ebp - 0x62c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x62c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5a
mov dword [ebp - 0x634], 0x52
mov dword [ebp - 0x63c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x63c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5b
mov dword [ebp - 0x644], 0x20
mov dword [ebp - 0x64c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x64c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5c
mov dword [ebp - 0x654], 0x41
mov dword [ebp - 0x65c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x65c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5d
mov dword [ebp - 0x664], 0x83
mov dword [ebp - 0x66c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x66c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5e
mov dword [ebp - 0x674], 0xfb
mov dword [ebp - 0x67c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x67c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5f
mov dword [ebp - 0x684], 0x19
mov dword [ebp - 0x68c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x68c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x60
mov dword [ebp - 0x694], 0x41
mov dword [ebp - 0x69c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x69c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x6a4], 0xf
mov dword [ebp - 0x6ac], edi
lea edx, [ebp - 0x6ac]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x61
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x62
mov dword [ebp - 0x6b4], 0x46
mov dword [ebp - 0x6bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x63
mov dword [ebp - 0x6c4], 0xd2
mov dword [ebp - 0x6cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x64
mov dword [ebp - 0x6d4], 0x85
mov dword [ebp - 0x6dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x65
mov dword [ebp - 0x6e4], pe_nt_image_headers32
mov dword [ebp - 0x6ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x66
mov dword [ebp - 0x6f4], 0x75
mov dword [ebp - 0x6fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x67
mov dword [ebp - 0x704], 0xc8
mov dword [ebp - 0x70c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x70c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x68
mov dword [ebp - 0x714], 0x39
mov dword [ebp - 0x71c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x71c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x69
mov dword [ebp - 0x724], 0xd0
mov dword [ebp - 0x72c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x72c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x734], 0x74
mov dword [ebp - 0x73c], edi
lea edx, [ebp - 0x73c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6a
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6b
mov dword [ebp - 0x744], 0xd
mov dword [ebp - 0x74c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x74c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6c
mov dword [ebp - 0x754], 0x48
mov dword [ebp - 0x75c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x75c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6d
mov dword [ebp - 0x764], 0x8b
mov dword [ebp - 0x76c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x76c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6e
mov dword [ebp - 0x774], 0x1b
mov dword [ebp - 0x77c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x77c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6f
mov dword [ebp - 0x784], 0x48
mov dword [ebp - 0x78c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x78c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x70
mov dword [ebp - 0x794], 0x39
mov dword [ebp - 0x79c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x79c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x71
mov dword [ebp - 0x7a4], 0xde
mov dword [ebp - 0x7ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x72
mov dword [ebp - 0x7b4], 0x75
mov dword [ebp - 0x7bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x7c4], 0xac
mov dword [ebp - 0x7cc], edi
lea edx, [ebp - 0x7cc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x73
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x74
mov dword [ebp - 0x7d4], 0x31
mov dword [ebp - 0x7dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x75
mov dword [ebp - 0x7e4], pe_nt_image_headers32
mov dword [ebp - 0x7ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x76
mov dword [ebp - 0x7f4], 0x5b
mov dword [ebp - 0x7fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x77
mov dword [ebp - 0x804], 0x5e
mov dword [ebp - 0x80c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x80c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x78
mov dword [ebp - 0x814], 0xc3
mov dword [ebp - 0x81c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x81c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x79
mov dword [ebp - 0x824], 0x48
mov dword [ebp - 0x82c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x82c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7a
mov dword [ebp - 0x834], 0x8b
mov dword [ebp - 0x83c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x83c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7b
mov dword [ebp - 0x844], 0x43
mov dword [ebp - 0x84c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x84c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x854], 0x30
mov dword [ebp - 0x85c], edi
lea edx, [ebp - 0x85c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7c
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7d
mov dword [ebp - 0x864], 0x5b
mov dword [ebp - 0x86c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x86c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7e
mov dword [ebp - 0x874], 0x5e
mov dword [ebp - 0x87c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x87c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7f
mov dword [ebp - 0x884], 0xc3
mov dword [ebp - 0x88c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x88c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x8c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x8c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0x3c]
call esi
push ebx
push 0xa2
push 1
lea ecx, [ebp - 0x8c]
push ebx
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x94], 0x57
mov dword [ebp - 0x9c], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9c]
shl ecx, 4
mov dword [ebp - 0xb0c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xb0c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xa4], 0x56
mov dword [ebp - 0xac], edi
lea edx, [ebp - 0xac]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0xb10], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xb10]
sub ecx, eax
add ecx, 0x10
call esi
mov dword [ebp - 0xb4], 0x53
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov eax, dword [ebp - 0x8c]
mov ecx, edi
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 3
mov dword [ebp - 0xc4], 0x31
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 4
mov dword [ebp - 0xd4], pe_nt_image_headers32
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 5
mov dword [ebp - 0xe4], 0x66
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 6
mov dword [ebp - 0xf4], 0x81
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 7
mov dword [ebp - 0x104], 0x39
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 8
mov dword [ebp - 0x114], 0x4d
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 9
mov dword [ebp - 0x124], 0x5a
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xa
mov dword [ebp - 0x134], 0x75
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x144], 0x71
mov dword [ebp - 0x14c], edi
lea edx, [ebp - 0x14c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0xb
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xc
mov dword [ebp - 0x154], 0x4c
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xd
mov dword [ebp - 0x164], 0x63
mov dword [ebp - 0x16c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x16c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xe
mov dword [ebp - 0x174], 0x41
mov dword [ebp - 0x17c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x17c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xf
mov dword [ebp - 0x184], 0x3c
mov dword [ebp - 0x18c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x18c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x10
mov dword [ebp - 0x194], 0x49
mov dword [ebp - 0x19c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x19c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x11
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0x1ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x12
mov dword [ebp - 0x1b4], 0xc8
mov dword [ebp - 0x1bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x13
mov dword [ebp - 0x1c4], 0x41
mov dword [ebp - 0x1cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x1d4], 0x81
mov dword [ebp - 0x1dc], edi
lea edx, [ebp - 0x1dc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x14
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x15
mov dword [ebp - 0x1e4], 0x38
mov dword [ebp - 0x1ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x16
mov dword [ebp - 0x1f4], 0x50
mov dword [ebp - 0x1fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x17
mov dword [ebp - 0x204], 0x45
mov dword [ebp - 0x20c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x20c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x18
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x21c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x21c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x19
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x22c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x22c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1a
mov dword [ebp - 0x234], 0x75
mov dword [ebp - 0x23c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x23c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1b
mov dword [ebp - 0x244], 0x61
mov dword [ebp - 0x24c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x24c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1c
mov dword [ebp - 0x254], 0x45
mov dword [ebp - 0x25c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x25c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x264], 0x8b
mov dword [ebp - 0x26c], edi
lea edx, [ebp - 0x26c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1e
mov dword [ebp - 0x274], 0x80
mov dword [ebp - 0x27c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x27c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x1f
mov dword [ebp - 0x284], 0x88
mov dword [ebp - 0x28c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x28c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x20
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x29c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x29c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x21
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x2ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x22
mov dword [ebp - 0x2b4], ebx
mov dword [ebp - 0x2bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x23
mov dword [ebp - 0x2c4], 0x45
mov dword [ebp - 0x2cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x24
mov dword [ebp - 0x2d4], 0x85
mov dword [ebp - 0x2dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x25
mov dword [ebp - 0x2e4], pe_nt_image_headers32
mov dword [ebp - 0x2ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2f4], 0x74
mov dword [ebp - 0x2fc], edi
lea edx, [ebp - 0x2fc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x26
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x27
mov dword [ebp - 0x304], 0x55
mov dword [ebp - 0x30c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x30c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x28
mov dword [ebp - 0x314], 0x4a
mov dword [ebp - 0x31c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x31c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x29
mov dword [ebp - 0x324], 0x8d
mov dword [ebp - 0x32c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x32c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2a
mov dword [ebp - 0x334], 0x3c
mov dword [ebp - 0x33c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x33c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2b
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x34c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x34c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2c
mov dword [ebp - 0x354], 0x44
mov dword [ebp - 0x35c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x35c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2d
mov dword [ebp - 0x364], 0x8b
mov dword [ebp - 0x36c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x36c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2e
mov dword [ebp - 0x374], 0x47
mov dword [ebp - 0x37c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x37c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x384], 0x20
mov dword [ebp - 0x38c], edi
lea edx, [ebp - 0x38c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x2f
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x30
mov dword [ebp - 0x394], 0x8b
mov dword [ebp - 0x39c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x39c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x31
mov dword [ebp - 0x3a4], 0x77
mov dword [ebp - 0x3ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x32
mov dword [ebp - 0x3b4], 0x14
mov dword [ebp - 0x3bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x33
mov dword [ebp - 0x3c4], 0x85
mov dword [ebp - 0x3cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x34
mov dword [ebp - 0x3d4], 0xf6
mov dword [ebp - 0x3dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x35
mov dword [ebp - 0x3e4], 0x4e
mov dword [ebp - 0x3ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x36
mov dword [ebp - 0x3f4], 0x8d
mov dword [ebp - 0x3fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x37
mov dword [ebp - 0x404], 0x14
mov dword [ebp - 0x40c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x40c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x41c], edi
lea edx, [ebp - 0x41c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x38
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x39
mov dword [ebp - 0x424], 0x74
mov dword [ebp - 0x42c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x42c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3a
mov dword [ebp - 0x434], 0x42
mov dword [ebp - 0x43c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x43c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3b
mov dword [ebp - 0x444], 0xf
mov dword [ebp - 0x44c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x44c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3c
mov dword [ebp - 0x454], 0xb6
mov dword [ebp - 0x45c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x45c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3d
mov dword [ebp - 0x464], 0x1a
mov dword [ebp - 0x46c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x46c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3e
mov dword [ebp - 0x474], 0x45
mov dword [ebp - 0x47c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x47c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x3f
mov dword [ebp - 0x484], 0x31
mov dword [ebp - 0x48c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x48c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x40
mov dword [ebp - 0x494], 0xdb
mov dword [ebp - 0x49c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x49c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x4a4], 0x45
mov dword [ebp - 0x4ac], edi
lea edx, [ebp - 0x4ac]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x41
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x42
mov dword [ebp - 0x4b4], 0x8b
mov dword [ebp - 0x4bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x43
mov dword [ebp - 0x4c4], 0xa
mov dword [ebp - 0x4cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x44
mov dword [ebp - 0x4d4], 0x49
mov dword [ebp - 0x4dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x45
mov dword [ebp - 0x4e4], 1
mov dword [ebp - 0x4ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x46
mov dword [ebp - 0x4f4], 0xc9
mov dword [ebp - 0x4fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x47
mov dword [ebp - 0x504], 0x41
mov dword [ebp - 0x50c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x50c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x48
mov dword [ebp - 0x514], 0x38
mov dword [ebp - 0x51c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x51c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x49
mov dword [ebp - 0x524], 0x19
mov dword [ebp - 0x52c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x52c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x534], 0x75
mov dword [ebp - 0x53c], edi
lea edx, [ebp - 0x53c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4a
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4b
mov dword [ebp - 0x544], 0x22
mov dword [ebp - 0x54c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x54c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4c
mov dword [ebp - 0x554], 0x84
mov dword [ebp - 0x55c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x55c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4d
mov dword [ebp - 0x564], 0xdb
mov dword [ebp - 0x56c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x56c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4e
mov dword [ebp - 0x574], 0x74
mov dword [ebp - 0x57c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x57c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x4f
mov dword [ebp - 0x584], 0x31
mov dword [ebp - 0x58c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x58c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x50
mov dword [ebp - 0x594], 0x48
mov dword [ebp - 0x59c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x59c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x51
mov dword [ebp - 0x5a4], 0x89
mov dword [ebp - 0x5ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x52
mov dword [ebp - 0x5b4], 0xd0
mov dword [ebp - 0x5bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x5c4], 0xeb
mov dword [ebp - 0x5cc], edi
lea edx, [ebp - 0x5cc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x53
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x54
mov dword [ebp - 0x5d4], 5
mov dword [ebp - 0x5dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x55
mov dword [ebp - 0x5e4], 0x45
mov dword [ebp - 0x5ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x56
mov dword [ebp - 0x5f4], 0x84
mov dword [ebp - 0x5fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x57
mov dword [ebp - 0x604], pe_nt_image_headers32
mov dword [ebp - 0x60c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x60c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x58
mov dword [ebp - 0x614], 0x74
mov dword [ebp - 0x61c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x61c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x59
mov dword [ebp - 0x624], 0x27
mov dword [ebp - 0x62c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x62c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5a
mov dword [ebp - 0x634], 0x48
mov dword [ebp - 0x63c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x63c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5b
mov dword [ebp - 0x644], 0x83
mov dword [ebp - 0x64c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x64c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x654], pe_nt_image_headers32
mov dword [ebp - 0x65c], edi
lea edx, [ebp - 0x65c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5c
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5d
mov dword [ebp - 0x664], 1
mov dword [ebp - 0x66c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x66c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5e
mov dword [ebp - 0x674], 0x49
mov dword [ebp - 0x67c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x67c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x5f
mov dword [ebp - 0x684], 0x89
mov dword [ebp - 0x68c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x68c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x60
mov dword [ebp - 0x694], pe_nt_image_headers32
mov dword [ebp - 0x69c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x69c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x61
mov dword [ebp - 0x6a4], 0x49
mov dword [ebp - 0x6ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x62
mov dword [ebp - 0x6b4], 0x29
mov dword [ebp - 0x6bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x63
mov dword [ebp - 0x6c4], 0xd0
mov dword [ebp - 0x6cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x64
mov dword [ebp - 0x6d4], 0x47
mov dword [ebp - 0x6dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x6e4], 0xf
mov dword [ebp - 0x6ec], edi
lea edx, [ebp - 0x6ec]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x65
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x66
mov dword [ebp - 0x6f4], 0xb6
mov dword [ebp - 0x6fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x67
mov dword [ebp - 0x704], 4
mov dword [ebp - 0x70c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x70c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x68
mov dword [ebp - 0x714], 8
mov dword [ebp - 0x71c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x71c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x69
mov dword [ebp - 0x724], 0x44
mov dword [ebp - 0x72c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x72c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6a
mov dword [ebp - 0x734], 0x3a
mov dword [ebp - 0x73c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x73c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6b
mov dword [ebp - 0x744], ebx
mov dword [ebp - 0x74c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x74c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6c
mov dword [ebp - 0x754], 0x74
mov dword [ebp - 0x75c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x75c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6d
mov dword [ebp - 0x764], 0xe7
mov dword [ebp - 0x76c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x76c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x774], 0x41
mov dword [ebp - 0x77c], edi
lea edx, [ebp - 0x77c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6e
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x6f
mov dword [ebp - 0x784], 0x83
mov dword [ebp - 0x78c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x78c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x70
mov dword [ebp - 0x794], 0xc3
mov dword [ebp - 0x79c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x79c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x71
mov dword [ebp - 0x7a4], 1
mov dword [ebp - 0x7ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x72
mov dword [ebp - 0x7b4], 0x49
mov dword [ebp - 0x7bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x73
mov dword [ebp - 0x7c4], 0x83
mov dword [ebp - 0x7cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x74
mov dword [ebp - 0x7d4], 0xc2
mov dword [ebp - 0x7dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x75
mov dword [ebp - 0x7e4], 4
mov dword [ebp - 0x7ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x76
mov dword [ebp - 0x7f4], 0x41
mov dword [ebp - 0x7fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x804], 0x39
mov dword [ebp - 0x80c], edi
lea edx, [ebp - 0x80c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x77
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x78
mov dword [ebp - 0x814], 0xf3
mov dword [ebp - 0x81c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x81c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x79
mov dword [ebp - 0x824], 0x75
mov dword [ebp - 0x82c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x82c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7a
mov dword [ebp - 0x834], 0xc6
mov dword [ebp - 0x83c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x83c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7b
mov dword [ebp - 0x844], 0x31
mov dword [ebp - 0x84c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x84c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7c
mov dword [ebp - 0x854], pe_nt_image_headers32
mov dword [ebp - 0x85c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x85c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7d
mov dword [ebp - 0x864], 0x5b
mov dword [ebp - 0x86c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x86c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7e
mov dword [ebp - 0x874], 0x5e
mov dword [ebp - 0x87c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x87c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x7f
mov dword [ebp - 0x884], 0x5f
mov dword [ebp - 0x88c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x88c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x894], 0xc3
mov dword [ebp - 0x89c], edi
lea edx, [ebp - 0x89c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x80
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x81
mov dword [ebp - 0x8a4], 0x44
mov dword [ebp - 0x8ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x82
mov dword [ebp - 0x8b4], 0x39
mov dword [ebp - 0x8bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x83
mov dword [ebp - 0x8c4], 0xde
mov dword [ebp - 0x8cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x84
mov dword [ebp - 0x8d4], 0x74
mov dword [ebp - 0x8dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x85
mov dword [ebp - 0x8e4], 0xf5
mov dword [ebp - 0x8ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x86
mov dword [ebp - 0x8f4], 0x8b
mov dword [ebp - 0x8fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x87
mov dword [ebp - 0x904], 0x57
mov dword [ebp - 0x90c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x90c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x88
mov dword [ebp - 0x914], 0x24
mov dword [ebp - 0x91c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x91c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x924], 0x4e
mov dword [ebp - 0x92c], edi
lea edx, [ebp - 0x92c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x89
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x8a
mov dword [ebp - 0x934], 0x8d
mov dword [ebp - 0x93c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x93c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x8b
mov dword [ebp - 0x944], 4
mov dword [ebp - 0x94c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x94c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x8c
mov dword [ebp - 0x954], 0x59
mov dword [ebp - 0x95c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x95c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x8d
mov dword [ebp - 0x964], 0x8b
mov dword [ebp - 0x96c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x96c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x8e
mov dword [ebp - 0x974], 0x47
mov dword [ebp - 0x97c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x97c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x8f
mov dword [ebp - 0x984], 0x1c
mov dword [ebp - 0x98c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x98c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x90
mov dword [ebp - 0x994], 0x41
mov dword [ebp - 0x99c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x99c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x91
mov dword [ebp - 0x9a4], 0xf
mov dword [ebp - 0x9ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x9b4], 0xb7
mov dword [ebp - 0x9bc], edi
lea edx, [ebp - 0x9bc]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x92
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x93
mov dword [ebp - 0x9c4], 0x14
mov dword [ebp - 0x9cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x94
mov dword [ebp - 0x9d4], 0x10
mov dword [ebp - 0x9dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x95
mov dword [ebp - 0x9e4], 0x48
mov dword [ebp - 0x9ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x96
mov dword [ebp - 0x9f4], 0x8d
mov dword [ebp - 0x9fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x97
mov dword [ebp - 0xa04], 0x14
mov dword [ebp - 0xa0c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa0c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x98
mov dword [ebp - 0xa14], 0x91
mov dword [ebp - 0xa1c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa1c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x99
mov dword [ebp - 0xa24], 0x8b
mov dword [ebp - 0xa2c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa2c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x9a
mov dword [ebp - 0xa34], 4
mov dword [ebp - 0xa3c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa3c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0xa44], edi
mov dword [ebp - 0xa4c], edi
lea edx, [ebp - 0xa4c]
mov eax, dword [ebp - 0x8c]
mov ecx, 0x9b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x9c
mov dword [ebp - 0xa54], 0x48
mov dword [ebp - 0xa5c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa5c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x9d
mov dword [ebp - 0xa64], 1
mov dword [ebp - 0xa6c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa6c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x9e
mov dword [ebp - 0xa74], 0xc8
mov dword [ebp - 0xa7c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa7c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0x9f
mov dword [ebp - 0xa84], 0x5b
mov dword [ebp - 0xa8c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa8c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xa0
mov dword [ebp - 0xa94], 0x5e
mov dword [ebp - 0xa9c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa9c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xa1
mov dword [ebp - 0xaa4], 0x5f
mov dword [ebp - 0xaac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xaac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x8c]
mov ecx, 0xa2
mov dword [ebp - 0xab4], 0xc3
mov dword [ebp - 0xabc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xabc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x8c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x8c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0x28]
call esi
push 0x40
push 0x1000
push 0x1000
push ebx
call fcn.004c95a0
mov dword [ebp - 0xac0], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0xac0]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, eax
mov dword [0x53716c], eax
add ecx, 0x200
lea edx, [ebp - 0x3c]
jo 0x520bfc
add eax, 0x400
push ebx
jo 0x520bfc
push edx
mov dword [0x537170], ecx
mov dword [0x537174], eax
call esi
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
push eax
push 1
lea ecx, [ebp - 0x40]
push 0x11
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea edx, [ebp - 0x3c]
push edx
call esi
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0xae8], eax
mov dword [ebp - 0xae4], 1
xor eax, eax
mov ecx, dword [ebp - 0xae8]
mov dword [ebp - 0x14], eax
cmp eax, ecx
jg 0x51fd7c
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x9c], 0x4003
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x40]
cmp ecx, ebx
je 0x51fd00
cmp word [ecx], 1
jne 0x51fd00
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xad0], eax
jb 0x51fd06
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xad0]
jmp 0x51fd06
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x98]
sub esp, 0x10
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0x9c]
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x94]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x90]
mov dword [edx + 8], eax
lea eax, [ebp - 0x68]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1ErrVar]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0xb14]
mov byte [edx + ecx], al
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0xae4]
mov ecx, dword [ebp - 0x14]
add eax, ecx
jo 0x520bfc
jmp 0x51fcaf
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x4c]
cmp ecx, ebx
je 0x51fdb7
cmp word [ecx], 1
jne 0x51fdb7
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
neg eax
cmp eax, edx
mov dword [ebp - 0xad0], eax
jb 0x51fdbd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xad0]
jmp 0x51fdbd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0xb18], eax
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov edx, dword [ebp - 0x4c]
add eax, 1
mov ecx, dword [0x53716c]
jo 0x520bfc
push eax
mov eax, dword [edx + 0xc]
add eax, dword [ebp - 0xb18]
push eax
push ecx
call fcn.004c8248
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x28]
push ebx
push eax
call esi
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
push eax
push 1
lea edx, [ebp - 0x40]
push 0x11
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea eax, [ebp - 0x28]
push eax
call esi
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 0xaec], 1
xor eax, eax
mov ecx, dword [ebp - 0xaf0]
mov dword [ebp - 0x14], eax
cmp eax, ecx
jg 0x51ff07
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x14]
cmp ecx, ebx
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x9c], 0x4003
je 0x51fe95
cmp word [ecx], 1
jne 0x51fe95
sub eax, dword [ecx + 0x14]
mov esi, eax
mov eax, dword [ecx + 0x10]
cmp esi, eax
jb 0x51fe9d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x51fe9d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x98]
sub esp, 0x10
mov eax, esp
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0x94]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x90]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x68]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x28]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1ErrVar]
mov edx, dword [ebp - 0x40]
mov ecx, dword [edx + 0xc]
mov byte [ecx + esi], al
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0xaec]
mov ecx, dword [ebp - 0x14]
add eax, ecx
jo 0x520bfc
jmp 0x51fe50
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x4c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
je 0x51ff36
cmp word [eax], 1
jne 0x51ff36
mov esi, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
neg esi
cmp esi, ecx
jb 0x51ff3e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x51ff3e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
mov ecx, dword [ebp - 0x40]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [0x537170]
add eax, 1
jo 0x520bfc
push eax
mov eax, dword [edx + 0xc]
add eax, esi
push eax
push ecx
call fcn.004c8248
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x44]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push eax
push 0x4d0778
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0784
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0794
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d02dc
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d07b4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d07d4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d07e0
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d07f8
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0818
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d0830
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0848
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0858
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d0868
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0884
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d089c
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d08b4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0848
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d08cc
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d08dc
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d08b4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0848
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d08f8
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0908
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d08b4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d0848
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0924
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0934
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d08b4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0848
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0950
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d07a4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d04d4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0960
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d0978
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d08b4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d0848
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d099c
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d09ac
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d09c4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d09dc
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d09f4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d02dc
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d0a10
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0a40
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x44]
push edx
push 0x4d07d4
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
push eax
push 0x4d0a60
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x44]
push ecx
push 0x4d0a6c
call esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov edx, dword [ebp - 0x44]
push ebx
push 0xffffffffffffffff
push 1
push 0x4c8970
push 0x4d0a80
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov eax, dword [ebp - 0x44]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
push ebx
push eax
call esi
cdq
sub eax, edx
lea ecx, [ebp - 0x40]
sar eax, 1
push eax
push 1
push 0x11
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov edx, dword [ebp - 0x44]
add esp, 0x1c
push edx
call esi
cdq
sub eax, edx
mov dword [ebp - 0xaf4], 1
mov esi, eax
sar esi, 1
sub esi, 1
jo 0x520bfc
xor eax, eax
cmp eax, esi
mov dword [ebp - 0x14], eax
jg 0x5204ff
imul eax, eax, 2
jo 0x520bfc
lea edx, [ebp - 0x68]
add eax, 1
lea ecx, [ebp - 0x44]
push edx
jo 0x520bfc
push eax
mov dword [ebp - 0x94], ecx
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x78]
push eax
push ecx
mov dword [ebp - 0xb4], 0x4c8964
mov dword [ebp - 0xbc], 8
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x9c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
mov eax, dword [ebp - 0x40]
cmp eax, ebx
je 0x52048e
cmp word [eax], 1
jne 0x52048e
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xad0], ecx
jb 0x520486
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xad0]
mov dword [ebp - 0xb1c], ecx
jmp 0x52049a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xb1c], eax
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1ErrVar]
mov edx, dword [ebp - 0x40]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0xb1c]
mov byte [ecx + edx], al
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp - 0xaf4]
mov ecx, dword [ebp - 0x14]
add esp, 0x14
add eax, ecx
jo 0x520bfc
jmp 0x5203f8
cmp dword [0x537b94], ebx
jne 0x520517
push 0x537b94
push 0x4c8a28
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x537b94]
lea edx, [ebp - 0x58]
push edx
push esi
mov ecx, dword [esi]
call dword [ecx + 0x14]
cmp eax, ebx
fnclex
jge 0x52053c
push 0x14
push 0x4c8a18
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0xac0]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x118]
cmp eax, ebx
fnclex
jge 0x520569
push 0x118
push 0x4c8a38
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0xac0]
xor eax, eax
cmp edx, 1
lea ecx, [ebp - 0x58]
sete al
neg eax
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp si, bx
je 0x520627
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x4c]
push ecx
push edx
mov dword [ebp - 0xac0], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
je 0x5205c2
cmp word [eax], 1
jne 0x5205c2
mov esi, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
neg esi
cmp esi, ecx
jb 0x5205ca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x5205ca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0xac0]
push eax
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov edx, dword [ebp - 0x4c]
add eax, 1
jo 0x520bfc
push eax
mov eax, dword [edx + 0xc]
add eax, esi
push eax
push fcn.00520c10
push 0xffffffffffffffff
call fcn.004c7cf4
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea ecx, [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
cmp esi, ebx
jne 0x52099a
mov esi, dword [ebp - 0x2c]
add esi, 1
jo 0x520bfc
jmp 0x52099d
cmp dword [0x537b94], ebx
jne 0x52063f
push 0x537b94
push 0x4c8a28
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x537b94]
lea eax, [ebp - 0x58]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x14]
cmp eax, ebx
fnclex
jge 0x520664
push 0x14
push 0x4c8a18
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x58]
lea edx, [ebp - 0xac0]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x118]
cmp eax, ebx
fnclex
jge 0x520691
push 0x118
push 0x4c8a38
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0xac0]
xor eax, eax
cmp edx, ebx
lea ecx, [ebp - 0x58]
sete al
neg eax
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp si, bx
je 0x52099a
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
je 0x5206e3
cmp word [eax], 1
jne 0x5206e3
mov esi, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
neg esi
cmp esi, ecx
jb 0x5206eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x5206eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
mov eax, dword [ebp - 0x40]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [ebp - 0x4c]
add eax, 1
jo 0x520bfc
mov edx, dword [ecx + 0xc]
push eax
mov eax, dword [0x537174]
add edx, esi
push edx
push eax
call fcn.004c8248
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea ecx, [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov edx, 0x4d0b18
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x44]
push ebx
push 0xffffffffffffffff
push 1
push 0x4c8970
push 0x4d0a80
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x44]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
push ebx
push eax
call esi
cdq
sub eax, edx
lea ecx, [ebp - 0x40]
sar eax, 1
push eax
push 1
push 0x11
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov edx, dword [ebp - 0x44]
add esp, 0x1c
push edx
call esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
sub esi, 1
jo 0x520bfc
xor eax, eax
cmp eax, esi
mov dword [ebp - 0x14], eax
jg 0x5208a0
imul eax, eax, 2
jo 0x520bfc
lea edx, [ebp - 0x68]
add eax, 1
lea ecx, [ebp - 0x44]
push edx
jo 0x520bfc
push eax
mov dword [ebp - 0x94], ecx
lea eax, [ebp - 0x9c]
lea ecx, [ebp - 0x78]
push eax
push ecx
mov dword [ebp - 0xb4], 0x4c8964
mov dword [ebp - 0xbc], 8
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x9c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
mov eax, dword [ebp - 0x40]
cmp eax, ebx
je 0x520830
cmp word [eax], 1
jne 0x520830
mov ecx, dword [ebp - 0x14]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xad0], ecx
jb 0x520828
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xad0]
mov dword [ebp - 0xb20], ecx
jmp 0x52083c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xb20], eax
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1ErrVar]
mov edx, dword [ebp - 0x40]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0xb20]
mov byte [ecx + edx], al
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp - 0x14]
mov eax, 1
add esp, 0x14
add eax, ecx
jo 0x520bfc
jmp 0x52079a
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
lea ecx, [ebp - 0x50]
push 0x4d0724
push ecx
call esi
push eax
call fcn.004c8410
mov dword [ebp - 0xac0], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0x54]
push 0x4d0bd0
push edx
call esi
push eax
mov eax, dword [ebp - 0xac0]
push eax
call fcn.004c83c4
mov dword [ebp - 0xac4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x40]
lea edx, [ebp - 0x4c]
push ecx
push edx
mov dword [ebp - 0xac8], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x4c]
cmp eax, ebx
je 0x52091c
cmp word [eax], 1
jne 0x52091c
mov esi, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
neg esi
cmp esi, ecx
jb 0x520924
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x520924
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
mov ecx, dword [ebp - 0x40]
lea eax, [ebp - 0xac8]
push eax
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xac4]
add eax, 1
jo 0x520bfc
push eax
mov eax, dword [edx + 0xc]
add eax, esi
push eax
push ecx
push 0xffffffffffffffff
call fcn.004c7cf4
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0x4c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
xor eax, eax
cmp esi, ebx
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x50]
sete al
push ecx
push edx
neg eax
push edi
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
cmp si, bx
je 0x52099a
mov esi, dword [ebp - 0x2c]
add esi, 1
jo 0x520bfc
jmp 0x52099d
mov esi, dword [ebp - 0x2c]
push 0x4d0be0
call fcn.00520d50
push 0x4d0c18
mov dword [0x5371a0], eax
mov dword [0x5371a4], edx
call fcn.00520d50
push 0x4d0c4c
mov dword [0x537180], eax
mov dword [0x537184], edx
call fcn.00520d50
push 0x4d0c80
mov dword [0x537190], eax
mov dword [0x537194], edx
call fcn.00520d50
push 0x4d0cb0
mov dword [0x5371a8], eax
mov dword [0x5371ac], edx
call fcn.00520d50
push 0x4d0a88
mov dword [0x537188], eax
mov dword [0x53718c], edx
call fcn.00520d50
push 0x4d0ab4
mov dword [0x537178], eax
mov dword [0x53717c], edx
call fcn.00520d50
push 0x4d0ae0
mov dword [0x5371b0], eax
mov dword [0x5371b4], edx
call fcn.00520d50
mov ecx, dword [0x5371a0]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFpCmpCy]
fld qword [0x4012b8]
mov dword [0x537198], eax
mov eax, dword [0x5371a4]
push eax
push ecx
mov dword [0x53719c], edx
call edi
test eax, eax
jne 0x520a6d
add esi, 1
jo 0x520bfc
mov edx, dword [0x537184]
mov eax, dword [0x537180]
fld qword [0x4012b8]
push edx
push eax
call edi
test eax, eax
jne 0x520a8f
add esi, 1
jo 0x520bfc
mov ecx, dword [0x537194]
mov edx, dword [0x537190]
fld qword [0x4012b8]
push ecx
push edx
call edi
test eax, eax
jne 0x520ab2
add esi, 1
jo 0x520bfc
mov eax, dword [0x5371ac]
mov ecx, dword [0x5371a8]
fld qword [0x4012b8]
push eax
push ecx
call edi
test eax, eax
jne 0x520ad4
add esi, 1
jo 0x520bfc
mov edx, dword [0x53718c]
mov eax, dword [0x537188]
fld qword [0x4012b8]
push edx
push eax
call edi
test eax, eax
jne 0x520af6
add esi, 1
jo 0x520bfc
mov ecx, dword [0x53717c]
mov edx, dword [0x537178]
fld qword [0x4012b8]
push ecx
push edx
call edi
test eax, eax
jne 0x520b19
add esi, 1
jo 0x520bfc
mov eax, dword [0x5371b4]
mov ecx, dword [0x5371b0]
fld qword [0x4012b8]
push eax
push ecx
call edi
test eax, eax
jne 0x520b3b
add esi, 1
jo 0x520bfc
mov edx, dword [0x53719c]
mov eax, dword [0x537198]
fld qword [0x4012b8]
push edx
push eax
call edi
test eax, eax
jne 0x520b5d
add esi, 1
jo 0x520bfc
xor ecx, ecx
cmp esi, ebx
sete cl
neg ecx
mov dword [ebp - 0x48], ecx
wait
push 0x520be7
jmp 0x520bc1
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x3c]
call esi
lea eax, [ebp - 0x40]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop