Function at 0x40aa99
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x644
mov eax, 0x42ee35
call fcn.00427dc6
mov esi, edx
mov dword [ebp - 0xd0], esi
mov edi, ecx
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xcc], edi
and dword [ebp - 0xd8], 0
mov eax, dword fs:[0x2c]
push 0x16
pop ebx
mov ecx, dword [eax]
mov eax, dword [0x443a2c]
cmp eax, dword [ecx + 4]
jle 0x40b0d6
push 0x443a2c
call fcn.004282df
cmp dword [0x443a2c], 0xffffffff
pop ecx
jne 0x40b0d6
and dword [ebp - 4], 0
lea ecx, [ebp - 0x64c]
xorps xmm0, xmm0
mov dword [ebp - 0x650], 0x80042000
push str.Page_content_or_notebook_hierarchy_is_not_well_formed.
movlpd qword [0x443a24], xmm0
call fcn.004017a3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x630]
push str.Page_content_or_notebook_hierarchy_is_invalid.
mov dword [ebp - 0x634], 0x80042001
call fcn.004017a3
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x614]
push str.The_section_could_not_be_created.
mov dword [ebp - 0x618], 0x80042002
call fcn.004017a3
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5f8]
push str.The_section_could_not_be_opened.
mov dword [ebp - 0x5fc], 0x80042003
call fcn.004017a3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x5dc]
push str.The_section_does_not_exist.
mov dword [ebp - 0x5e0], 0x80042004
call fcn.004017a3
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x5c0]
push str.The_page_does_not_exist.
mov dword [ebp - 0x5c4], 0x80042005
call fcn.004017a3
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5a4]
push str.The_file_does_not_exist.
mov dword [ebp - 0x5a8], 0x80042006
call fcn.004017a3
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x588]
push str.The_image_could_not_be_inserted.
mov dword [ebp - 0x58c], 0x80042007
call fcn.004017a3
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x56c]
push str.The_ink_could_not_be_inserted.
mov dword [ebp - 0x570], 0x80042008
call fcn.004017a3
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x550]
push str.The_HTML_could_not_be_inserted.
mov dword [ebp - 0x554], 0x80042009
call fcn.004017a3
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x534]
push str.The_page_could_not_be_opened.
mov dword [ebp - 0x538], 0x8004200a
call fcn.004017a3
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x518]
push str.The_section_is_read_only.
mov dword [ebp - 0x51c], 0x8004200b
call fcn.004017a3
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4fc]
push str.The_page_is_read_only.
mov dword [ebp - 0x500], 0x8004200c
call fcn.004017a3
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x4e0]
push str.The_outline_text_could_not_be_inserted.
mov dword [ebp - 0x4e4], 0x8004200d
call fcn.004017a3
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4c4]
push str.The_page_object_does_not_exist.
mov dword [ebp - 0x4c8], 0x8004200e
call fcn.004017a3
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x4a8]
push str.The_binary_object_does_not_exist.
mov dword [ebp - 0x4ac], 0x8004200f
call fcn.004017a3
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x48c]
push str.The_last_modified_date_does_not_match.
mov dword [ebp - 0x490], 0x80042010
call fcn.004017a3
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x470]
push str.The_section_group_does_not_exist.
mov dword [ebp - 0x474], 0x80042011
call fcn.004017a3
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x454]
push str.The_page_does_not_exist_in_the_section_group.
mov dword [ebp - 0x458], 0x80042012
call fcn.004017a3
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x438]
push str.There_is_no_active_selection.
mov dword [ebp - 0x43c], 0x80042013
call fcn.004017a3
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x41c]
push str.The_object_does_not_exist.
mov dword [ebp - 0x420], 0x80042014
call fcn.004017a3
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x400]
push str.The_notebook_does_not_exist.
mov dword [ebp - 0x404], 0x80042015
call fcn.004017a3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x3e4]
push str.The_file_could_not_be_inserted.
mov dword [ebp - 0x3e8], 0x80042016
call fcn.004017a3
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x3c8]
push str.The_name_is_invalid.
mov dword [ebp - 0x3cc], 0x80042017
call fcn.004017a3
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x3ac]
push str.The_folder__section_group__does_not_exist.
mov dword [ebp - 0x3b0], 0x80042018
call fcn.004017a3
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x390]
push str.The_query_is_invalid.
mov dword [ebp - 0x394], 0x80042019
call fcn.004017a3
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x378], 0x8004201a
push str.The_file_already_exists.
lea ecx, [ebp - 0x374]
call fcn.004017a3
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x358]
push str.The_section_is_password_protected._You_might_need_to_allow_add_in_access_to_password_protected_sections_from_File___Options___Advanced___Passwords___Enable_add_in_programs_to_access_password_protected_sections_when_they_are_unlocked.
mov dword [ebp - 0x35c], 0x8004201b
call fcn.004017a3
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x33c]
push str.The_action_is_disabled_by_a_policy.
mov dword [ebp - 0x340], 0x8004201c
call fcn.004017a3
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x320]
push str.OneNote_has_not_yet_synchronized_content.
mov dword [ebp - 0x324], 0x8004201d
call fcn.004017a3
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x304]
push str.The_section_is_from_OneNote_2007_or_earlier.
mov dword [ebp - 0x308], 0x8004201e
call fcn.004017a3
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x2e8]
push str.The_merge_operation_failed.
mov dword [ebp - 0x2ec], 0x8004201f
call fcn.004017a3
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x2cc]
push str.The_XML_Schema_is_invalid.
mov dword [ebp - 0x2d0], 0x80042020
call fcn.004017a3
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x2b0]
push str.OneNote_does_not_allow_this_operation_as_is_claims_there_is_content_on_this_page_from_a_future_version_of_OneNote._This_typically_indicates_a_corruption_on_this_page._You_might_need_to_copy_contents_or_portions_of_contents_of_this_page_to_another_page_and_retry.
mov dword [ebp - 0x2b4], 0x80042022
call fcn.004017a3
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x294]
push str.The_action_timed_out.
mov dword [ebp - 0x298], 0x80042023
call fcn.004017a3
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x278]
push str.Audio_recording_is_in_progress.
mov dword [ebp - 0x27c], 0x80042024
call fcn.004017a3
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x25c]
push str.The_linked_note_state_is_unknown.
mov dword [ebp - 0x260], 0x80042025
call fcn.004017a3
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x240]
push str.No_short_name_exists_for_the_linked_note.
mov dword [ebp - 0x244], 0x80042026
call fcn.004017a3
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x224]
push str.No_friendly_name_exists_for_the_linked_note.
mov dword [ebp - 0x228], 0x80042027
call fcn.004017a3
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x208]
push str.The_linked_note_URI_is_invalid.
mov dword [ebp - 0x20c], 0x80042028
call fcn.004017a3
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x1ec]
push str.The_linked_note_thumbnail_is_invalid.
mov dword [ebp - 0x1f0], 0x80042029
call fcn.004017a3
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1d0]
push str.The_importation_of_linked_note_thumbnail_failed.
mov dword [ebp - 0x1d4], 0x8004202a
call fcn.004017a3
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0x1b4]
push str.Unread_highlighting_is_disabled_for_the_notebook.
mov dword [ebp - 0x1b8], 0x8004202b
call fcn.004017a3
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x198]
push str.The_selection_is_invalid.
mov dword [ebp - 0x19c], 0x8004202c
call fcn.004017a3
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x17c]
push str.The_conversion_failed.
mov dword [ebp - 0x180], 0x8004202d
call fcn.004017a3
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x160]
push str.Edit_failed_in_the_Recycle_Bin.
mov dword [ebp - 0x164], 0x8004202e
call fcn.004017a3
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x144]
push str.OneNote_has_a_modal_dialog_box_open.
mov dword [ebp - 0x148], 0x80042030
call fcn.004017a3
lea eax, [ebp - 0x12c]
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x650]
push eax
push ecx
call fcn.0040b440
push 0x40b347
push 0x2f
push 0x1c
lea eax, [ebp - 0x650]
mov byte [ebp - 4], 0
push eax
call fcn.004283b5
push 0x42f077
call fcn.0040c4f5
or dword [ebp - 4], 0xffffffff
mov dword [esp], 0x443a2c
call fcn.00428295
pop ecx
mov ecx, dword [esi + 8]
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0xcc], eax
test ecx, ecx
je 0x40b10b
mov eax, dword [ecx]
lea edx, [ebp - 0xcc]
push edx
push ecx
call dword [eax + 0x14]
mov ecx, dword [ebp - 0xcc]
xor edx, edx
test eax, eax
cmovs ecx, edx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0xcc], ecx
push 0xc
call fcn.0040bde1
mov esi, eax
pop ecx
mov dword [ebp - 0xdc], esi
test esi, esi
je 0x40b13e
xor eax, eax
mov edi, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebp - 0x14]
and dword [esi + 4], 0
mov edi, dword [ebp - 0xd4]
mov dword [esi + 8], 1
mov dword [esi], eax
jmp 0x40b140
xor esi, esi
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], esi
test esi, esi
je 0x40b33c
mov dword [ebp - 0xd8], 0x10
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 4], 0x31
mov eax, dword [eax + 4]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.0040b4c6
mov eax, dword [eax]
cmp dword [eax + 0x24], 0
je 0x40b283
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + 4]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.0040b4c6
mov eax, dword [eax]
add eax, 0x14
cmp dword [esi], 0
mov dword [ebp - 0xd0], eax
je 0x40b20f
push dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x40b20f
push str._r_n_r_n
lea ecx, [ebp - 0x110]
call fcn.004017a3
mov esi, eax
mov dword [ebp - 4], 0x33
lea ecx, [ebp - 0x14]
mov dword [ebp - 0xd8], 0x12
call fcn.004031d0
push esi
lea ecx, [ebp - 0xf8]
mov edx, dword [eax]
call fcn.00401e30
pop ecx
mov dword [ebp - 4], 0x34
jmp 0x40b226
push 0x43b628
lea ecx, [ebp - 0x128]
call fcn.004017a3
push 0x11
mov byte [ebp - 4], 0x32
pop ebx
push dword [ebp - 0xd0]
mov ecx, eax
mov dword [ebp - 0xd8], ebx
call fcn.004010f9
push eax
mov ecx, edi
call fcn.00401417
or ebx, 0x28
test bl, 4
je 0x40b257
lea ecx, [ebp - 0xf8]
and ebx, 0xfffffffb
call fcn.004014c0
test bl, 2
je 0x40b26a
lea ecx, [ebp - 0x110]
and ebx, 0xfffffffd
call fcn.004014c0
test bl, 1
je 0x40b32c
lea ecx, [ebp - 0x128]
call fcn.004014c0
jmp 0x40b32c
cmp dword [esi], 0
je 0x40b2aa
push dword [esi]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x40b2aa
lea ecx, [ebp - 0x14]
call fcn.004031d0
push dword [eax]
mov ecx, edi
call fcn.004017a3
jmp 0x40b32c
mov ebx, dword [ebp - 0xd0]
mov ecx, ebx
call fcn.0040a9d0
test eax, eax
je 0x40b2c5
mov ecx, ebx
call fcn.0040a9d0
push eax
jmp 0x40b29e
push 0xb0
lea eax, [ebp - 0xc8]
push 0
push eax
call fcn.0040d2d0
pop ecx
pop ecx
lea ecx, [ebp - 0xc8]
call fcn.00407281
mov edx, str.HRESULT:
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xb8]
call fcn.00409292
push dword [ebx + 4]
mov ecx, eax
call fcn.0040b34f
push edi
lea ecx, [ebp - 0xb0]
call fcn.0040765d
lea ecx, [ebp - 0x60]
call fcn.00407252
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x36
push eax
mov dword [ebp - 0x60], vtable.std::ios_base.0
call fcn.004271d0
pop ecx
lea ecx, [ebp - 0x14]
call fcn.00403170
mov eax, edi
call fcn.00427d75
ret
push 0x8007000e
call fcn.0040bbc0
int3