Function at 0x404660
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401326
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb38
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4011e0
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1cc], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x22c], ebx
mov dword [ebp - 0x23c], ebx
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x25c], ebx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x29c], ebx
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2bc], ebx
mov dword [ebp - 0x2cc], ebx
mov dword [ebp - 0x2dc], ebx
mov dword [ebp - 0x2ec], ebx
mov dword [ebp - 0x2fc], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x36c], ebx
mov dword [ebp - 0x37c], ebx
mov dword [ebp - 0x38c], ebx
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x3ac], ebx
mov dword [ebp - 0x3bc], ebx
mov dword [ebp - 0x3cc], ebx
mov dword [ebp - 0x3dc], ebx
mov dword [ebp - 0x3ec], ebx
mov dword [ebp - 0x3fc], ebx
mov dword [ebp - 0x40c], ebx
mov dword [ebp - 0x41c], ebx
mov dword [ebp - 0x42c], ebx
mov dword [ebp - 0x43c], ebx
mov dword [ebp - 0x44c], ebx
mov dword [ebp - 0x45c], ebx
mov dword [ebp - 0x46c], ebx
mov dword [ebp - 0x47c], ebx
mov dword [ebp - 0x48c], ebx
mov dword [ebp - 0x49c], ebx
mov dword [ebp - 0x4ac], ebx
mov dword [ebp - 0x4bc], ebx
mov dword [ebp - 0x4cc], ebx
mov dword [ebp - 0x4dc], ebx
mov dword [ebp - 0x4ec], ebx
mov dword [ebp - 0x4fc], ebx
mov dword [ebp - 0x50c], ebx
mov dword [ebp - 0x51c], ebx
mov dword [ebp - 0x52c], ebx
mov dword [ebp - 0x53c], ebx
mov dword [ebp - 0x54c], ebx
mov dword [ebp - 0x55c], ebx
mov dword [ebp - 0x56c], ebx
mov dword [ebp - 0x57c], ebx
mov dword [ebp - 0x58c], ebx
mov dword [ebp - 0x59c], ebx
mov dword [ebp - 0x5ac], ebx
mov dword [ebp - 0x5bc], ebx
mov dword [ebp - 0x5cc], ebx
mov dword [ebp - 0x5dc], ebx
mov dword [ebp - 0x5ec], ebx
mov dword [ebp - 0x5fc], ebx
mov dword [ebp - 0x60c], ebx
mov dword [ebp - 0x61c], ebx
mov dword [ebp - 0x62c], ebx
mov dword [ebp - 0x63c], ebx
mov dword [ebp - 0x64c], ebx
mov dword [ebp - 0x65c], ebx
mov dword [ebp - 0x66c], ebx
mov dword [ebp - 0x67c], ebx
mov dword [ebp - 0x68c], ebx
mov dword [ebp - 0x69c], ebx
mov dword [ebp - 0x6ac], ebx
mov dword [ebp - 0x6bc], ebx
mov dword [ebp - 0x6cc], ebx
mov dword [ebp - 0x6dc], ebx
mov dword [ebp - 0x6ec], ebx
mov dword [ebp - 0x6fc], ebx
mov dword [ebp - 0x70c], ebx
mov dword [ebp - 0x71c], ebx
mov dword [ebp - 0x72c], ebx
mov dword [ebp - 0x73c], ebx
mov dword [ebp - 0x74c], ebx
mov dword [ebp - 0x75c], ebx
mov dword [ebp - 0x76c], ebx
mov dword [ebp - 0x77c], ebx
mov dword [ebp - 0x78c], ebx
mov dword [ebp - 0x79c], ebx
mov dword [ebp - 0x7ac], ebx
mov dword [ebp - 0x7bc], ebx
mov dword [ebp - 0x7cc], ebx
mov dword [ebp - 0x7dc], ebx
mov dword [ebp - 0x7ec], ebx
mov dword [ebp - 0x7fc], ebx
mov dword [ebp - 0x80c], ebx
mov dword [ebp - 0x81c], ebx
mov dword [ebp - 0x82c], ebx
mov dword [ebp - 0x83c], ebx
mov dword [ebp - 0x84c], ebx
mov dword [ebp - 0x85c], ebx
mov dword [ebp - 0x86c], ebx
mov dword [ebp - 0x87c], ebx
mov dword [ebp - 0x88c], ebx
mov dword [ebp - 0x89c], ebx
mov dword [ebp - 0x8ac], ebx
mov dword [ebp - 0x8bc], ebx
mov dword [ebp - 0x8cc], ebx
mov dword [ebp - 0x8dc], ebx
mov dword [ebp - 0x8ec], ebx
mov dword [ebp - 0x8fc], ebx
mov dword [ebp - 0x90c], ebx
mov dword [ebp - 0x91c], ebx
mov dword [ebp - 0x92c], ebx
mov dword [ebp - 0x93c], ebx
mov dword [ebp - 0x94c], ebx
mov dword [ebp - 0x95c], ebx
mov dword [ebp - 0x96c], ebx
mov dword [ebp - 0x97c], ebx
mov dword [ebp - 0x98c], ebx
mov dword [ebp - 0x99c], ebx
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x9ac], ebx
mov dword [ebp - 0x9bc], ebx
mov dword [ebp - 0x9cc], ebx
mov dword [ebp - 0x9dc], ebx
mov dword [ebp - 0x9ec], ebx
mov dword [ebp - 0x9fc], ebx
mov dword [ebp - 0xa0c], ebx
mov dword [ebp - 0xa1c], ebx
mov dword [ebp - 0xa2c], ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa4c], ebx
mov dword [ebp - 0xa5c], ebx
mov dword [ebp - 0xa6c], ebx
mov dword [ebp - 0xa7c], ebx
mov dword [ebp - 0xa8c], ebx
mov dword [ebp - 0xa9c], ebx
mov dword [ebp - 0xaac], ebx
mov dword [ebp - 0xabc], ebx
mov dword [ebp - 0xacc], ebx
mov dword [ebp - 0xadc], ebx
mov dword [ebp - 0xaec], ebx
mov dword [ebp - 0xafc], ebx
mov dword [ebp - 0xb10], ebx
mov dword [ebp - 0xb20], ebx
mov dword [ebp - 0xb24], ebx
mov dword [ebp - 0xb28], ebx
mov dword [ebp - 0xb2c], ebx
mov dword [ebp - 0xb30], ebx
mov dword [ebp - 0xb34], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
cmp word [0x40d010], bx
jne 0x406703
push ebx
push 0xaa
push 1
lea eax, [ebp - 0x4c]
push ebx
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x4c]
mov edi, 2
mov dword [ebp - 0x54], 0xe8
mov dword [ebp - 0x5c], edi
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x5c]
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x64], 0x22
mov dword [ebp - 0x6c], edi
lea edx, [ebp - 0x6c]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0xb48], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xb48]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, edi
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x7c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 3
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x8c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 4
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x9c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 5
mov dword [ebp - 0xa4], 0x68
mov dword [ebp - 0xac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 6
mov dword [ebp - 0xb4], 0xa4
mov dword [ebp - 0xbc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xbc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0xc4], 0x4e
mov dword [ebp - 0xcc], edi
mov eax, dword [ebp - 0x4c]
mov ecx, 7
lea edx, [ebp - 0xcc]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 8
mov dword [ebp - 0xd4], 0xe
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 9
mov dword [ebp - 0xe4], 0xec
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xa
mov dword [ebp - 0xf4], 0x50
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xb
mov dword [ebp - 0x104], 0xe8
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xc
mov dword [ebp - 0x114], 0x43
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xd
mov dword [ebp - 0x124], ebx
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xe
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xf
mov dword [ebp - 0x144], ebx
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x154], 0x83
mov dword [ebp - 0x15c], edi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x10
lea edx, [ebp - 0x15c]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x11
mov dword [ebp - 0x164], 0xc4
mov dword [ebp - 0x16c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x16c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x12
mov dword [ebp - 0x174], 8
mov dword [ebp - 0x17c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x17c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x13
mov dword [ebp - 0x184], 0xff
mov dword [ebp - 0x18c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x18c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x14
mov dword [ebp - 0x194], 0x74
mov dword [ebp - 0x19c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x19c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x15
mov dword [ebp - 0x1a4], 0x24
mov dword [ebp - 0x1ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x16
mov dword [ebp - 0x1b4], 4
mov dword [ebp - 0x1bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x17
mov dword [ebp - 0x1c4], 0xff
mov dword [ebp - 0x1cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x18
mov dword [ebp - 0x1d4], 0xd0
mov dword [ebp - 0x1dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x1e4], 0xff
mov dword [ebp - 0x1ec], edi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x19
lea edx, [ebp - 0x1ec]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x1a
mov dword [ebp - 0x1f4], 0x74
mov dword [ebp - 0x1fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x1b
mov dword [ebp - 0x204], 0x24
mov dword [ebp - 0x20c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x20c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x1c
mov dword [ebp - 0x214], 8
mov dword [ebp - 0x21c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x21c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x1d
mov dword [ebp - 0x224], 0x50
mov dword [ebp - 0x22c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x22c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x1e
mov dword [ebp - 0x234], 0xe8
mov dword [ebp - 0x23c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x23c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x1f
mov dword [ebp - 0x244], 0x30
mov dword [ebp - 0x24c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x24c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x20
mov dword [ebp - 0x254], ebx
mov dword [ebp - 0x25c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x25c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x21
mov dword [ebp - 0x264], ebx
mov dword [ebp - 0x26c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x26c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x274], ebx
mov dword [ebp - 0x27c], edi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x22
lea edx, [ebp - 0x27c]
mov ebx, dword [eax + 0x14]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x284], 0x83
mov dword [ebp - 0x28c], edi
mov ecx, 0x23
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x28c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x294], 0xc4
mov dword [ebp - 0x29c], edi
mov ecx, 0x24
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x29c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2a4], 8
mov dword [ebp - 0x2ac], edi
mov ecx, 0x25
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2ac]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2b4], 0xc3
mov dword [ebp - 0x2bc], edi
mov ecx, 0x26
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2bc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c4], 0x56
mov dword [ebp - 0x2cc], edi
mov ecx, 0x27
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2cc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2d4], 0x55
mov dword [ebp - 0x2dc], edi
mov ecx, 0x28
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2dc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2e4], 0x31
mov dword [ebp - 0x2ec], edi
lea edx, [ebp - 0x2ec]
mov ebx, dword [eax + 0x14]
mov ecx, 0x29
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2f4], 0xc0
mov dword [ebp - 0x2fc], edi
mov ecx, 0x2a
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2fc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x304], 0x64
mov dword [ebp - 0x30c], edi
mov ecx, 0x2b
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x30c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov ebx, 0x8b
mov ecx, 0x2c
mov dword [ebp - 0x314], ebx
mov dword [ebp - 0x31c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x31c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x2d
mov dword [ebp - 0x324], 0x70
mov dword [ebp - 0x32c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x32c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x2e
mov dword [ebp - 0x334], 0x30
mov dword [ebp - 0x33c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x33c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x2f
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x34c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x34c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x30
mov dword [ebp - 0x354], 0x76
mov dword [ebp - 0x35c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x35c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x31
mov dword [ebp - 0x364], 0xc
mov dword [ebp - 0x36c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x36c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x32
mov dword [ebp - 0x374], ebx
mov dword [ebp - 0x37c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x37c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x33
mov dword [ebp - 0x384], 0x76
mov dword [ebp - 0x38c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x38c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x34
mov dword [ebp - 0x394], 0x1c
mov dword [ebp - 0x39c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x39c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x35
mov dword [ebp - 0x3a4], ebx
mov dword [ebp - 0x3ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x36
mov dword [ebp - 0x3b4], 0x6e
mov dword [ebp - 0x3bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x37
mov dword [ebp - 0x3c4], 8
mov dword [ebp - 0x3cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x38
mov dword [ebp - 0x3d4], ebx
mov dword [ebp - 0x3dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x39
mov dword [ebp - 0x3e4], 0x7e
mov dword [ebp - 0x3ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x3a
mov dword [ebp - 0x3f4], 0x20
mov dword [ebp - 0x3fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x3b
mov dword [ebp - 0x404], ebx
mov dword [ebp - 0x40c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x40c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x3c
mov dword [ebp - 0x414], 0x36
mov dword [ebp - 0x41c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x41c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x3d
mov dword [ebp - 0x424], 0x38
mov dword [ebp - 0x42c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x42c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x3e
mov dword [ebp - 0x434], 0x47
mov dword [ebp - 0x43c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x43c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x3f
mov dword [ebp - 0x444], 0x18
mov dword [ebp - 0x44c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x44c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, pe_nt_image_headers32
mov dword [ebp - 0x454], 0x75
mov dword [ebp - 0x45c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x45c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x41
mov dword [ebp - 0x464], 0xf3
mov dword [ebp - 0x46c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x46c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x42
mov dword [ebp - 0x474], 0x80
mov dword [ebp - 0x47c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x47c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x43
mov dword [ebp - 0x484], 0x3f
mov dword [ebp - 0x48c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x48c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x44
mov dword [ebp - 0x494], 0x6b
mov dword [ebp - 0x49c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x49c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x45
mov dword [ebp - 0x4a4], 0x74
mov dword [ebp - 0x4ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x46
mov dword [ebp - 0x4b4], 7
mov dword [ebp - 0x4bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x47
mov dword [ebp - 0x4c4], 0x80
mov dword [ebp - 0x4cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x48
mov dword [ebp - 0x4d4], 0x3f
mov dword [ebp - 0x4dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x49
mov dword [ebp - 0x4e4], 0x4b
mov dword [ebp - 0x4ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4ec]
sti
invalid
inc ecx
loope 0x4056bd
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4a
mov dword [ebp - 0x4f4], 0x74
mov dword [ebp - 0x4fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4b
mov dword [ebp - 0x504], edi
mov dword [ebp - 0x50c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x50c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4c
mov dword [ebp - 0x514], 0xeb
mov dword [ebp - 0x51c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x51c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4d
mov dword [ebp - 0x524], 0xe7
mov dword [ebp - 0x52c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x52c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4e
mov dword [ebp - 0x534], 0x89
mov dword [ebp - 0x53c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x53c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x4f
mov dword [ebp - 0x544], 0xe8
mov dword [ebp - 0x54c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x54c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x50
mov dword [ebp - 0x554], 0x5d
mov dword [ebp - 0x55c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x55c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x51
mov dword [ebp - 0x564], 0x5e
mov dword [ebp - 0x56c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x56c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x52
mov dword [ebp - 0x574], 0xc3
mov dword [ebp - 0x57c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x57c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x53
mov dword [ebp - 0x584], 0x55
mov dword [ebp - 0x58c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x58c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x54
mov dword [ebp - 0x594], 0x52
mov dword [ebp - 0x59c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x59c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x55
mov dword [ebp - 0x5a4], 0x51
mov dword [ebp - 0x5ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x56
mov dword [ebp - 0x5b4], 0x53
mov dword [ebp - 0x5bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x57
mov dword [ebp - 0x5c4], 0x56
mov dword [ebp - 0x5cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x58
mov dword [ebp - 0x5d4], 0x57
mov dword [ebp - 0x5dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x59
mov dword [ebp - 0x5e4], ebx
mov dword [ebp - 0x5ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x5a
mov dword [ebp - 0x5f4], 0x6c
mov dword [ebp - 0x5fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x5b
mov dword [ebp - 0x604], 0x24
mov dword [ebp - 0x60c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x60c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x5c
mov dword [ebp - 0x614], 0x1c
mov dword [ebp - 0x61c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x61c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x5d
mov dword [ebp - 0x624], 0x85
mov dword [ebp - 0x62c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x62c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x5e
mov dword [ebp - 0x634], 0xed
mov dword [ebp - 0x63c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x63c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x5f
mov dword [ebp - 0x644], 0x74
mov dword [ebp - 0x64c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x64c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x60
mov dword [ebp - 0x654], 0x43
mov dword [ebp - 0x65c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x65c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x61
mov dword [ebp - 0x664], ebx
mov dword [ebp - 0x66c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x66c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x62
mov dword [ebp - 0x674], 0x45
mov dword [ebp - 0x67c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x67c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x63
mov dword [ebp - 0x684], 0x3c
mov dword [ebp - 0x68c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x68c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x64
mov dword [ebp - 0x694], ebx
mov dword [ebp - 0x69c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x69c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x65
mov dword [ebp - 0x6a4], 0x54
mov dword [ebp - 0x6ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x66
mov dword [ebp - 0x6b4], 5
mov dword [ebp - 0x6bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x67
mov dword [ebp - 0x6c4], 0x78
mov dword [ebp - 0x6cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x68
mov dword [ebp - 0x6d4], 1
mov dword [ebp - 0x6dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x69
mov dword [ebp - 0x6e4], 0xea
mov dword [ebp - 0x6ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x6a
mov dword [ebp - 0x6f4], ebx
mov dword [ebp - 0x6fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x6b
mov dword [ebp - 0x704], 0x4a
mov dword [ebp - 0x70c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x70c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x6c
mov dword [ebp - 0x714], 0x18
mov dword [ebp - 0x71c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x71c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x6d
mov dword [ebp - 0x724], ebx
mov dword [ebp - 0x72c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x72c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x6e
mov dword [ebp - 0x734], 0x5a
mov dword [ebp - 0x73c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x73c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x6f
mov dword [ebp - 0x744], 0x20
mov dword [ebp - 0x74c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x74c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x70
mov dword [ebp - 0x754], 1
mov dword [ebp - 0x75c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x75c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x71
mov dword [ebp - 0x764], 0xeb
mov dword [ebp - 0x76c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x76c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x72
mov dword [ebp - 0x774], 0xe3
mov dword [ebp - 0x77c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x77c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x73
mov dword [ebp - 0x784], 0x30
mov dword [ebp - 0x78c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x78c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x74
mov dword [ebp - 0x794], 0x49
mov dword [ebp - 0x79c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x79c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x75
mov dword [ebp - 0x7a4], ebx
mov dword [ebp - 0x7ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x76
mov dword [ebp - 0x7b4], 0x34
mov dword [ebp - 0x7bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x77
mov dword [ebp - 0x7c4], ebx
mov dword [ebp - 0x7cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x78
mov dword [ebp - 0x7d4], 1
mov dword [ebp - 0x7dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x79
mov dword [ebp - 0x7e4], 0xee
mov dword [ebp - 0x7ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x7a
mov dword [ebp - 0x7f4], 0x31
mov dword [ebp - 0x7fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x7b
mov dword [ebp - 0x804], 0xff
mov dword [ebp - 0x80c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x80c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x7c
mov dword [ebp - 0x814], 0x31
mov dword [ebp - 0x81c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x81c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x7d
mov dword [ebp - 0x824], 0xc0
mov dword [ebp - 0x82c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x82c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x7e
mov dword [ebp - 0x834], 0xfc
mov dword [ebp - 0x83c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x83c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x7f
mov dword [ebp - 0x844], 0xac
mov dword [ebp - 0x84c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x84c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x80
mov dword [ebp - 0x854], 0x84
mov dword [ebp - 0x85c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x85c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x81
mov dword [ebp - 0x864], 0xc0
mov dword [ebp - 0x86c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x86c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x82
mov dword [ebp - 0x874], 0x74
mov dword [ebp - 0x87c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x87c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x83
mov dword [ebp - 0x884], 7
mov dword [ebp - 0x88c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x88c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x84
mov dword [ebp - 0x894], 0xc1
mov dword [ebp - 0x89c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x89c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x85
mov dword [ebp - 0x8a4], 0xcf
mov dword [ebp - 0x8ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x86
mov dword [ebp - 0x8b4], 0xd
mov dword [ebp - 0x8bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x87
mov dword [ebp - 0x8c4], 1
mov dword [ebp - 0x8cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x88
mov dword [ebp - 0x8d4], 0xc7
mov dword [ebp - 0x8dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x89
mov dword [ebp - 0x8e4], 0xeb
mov dword [ebp - 0x8ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x8a
mov dword [ebp - 0x8f4], 0xf4
mov dword [ebp - 0x8fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, ebx
mov dword [ebp - 0x904], 0x3b
mov dword [ebp - 0x90c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x90c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x8c
mov dword [ebp - 0x914], 0x7c
mov dword [ebp - 0x91c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x91c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x8d
mov dword [ebp - 0x924], 0x24
mov dword [ebp - 0x92c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x92c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x8e
mov dword [ebp - 0x934], 0x20
mov dword [ebp - 0x93c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x93c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x8f
mov dword [ebp - 0x944], 0x75
mov dword [ebp - 0x94c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x94c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x90
mov dword [ebp - 0x954], 0xe1
mov dword [ebp - 0x95c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x95c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x91
mov dword [ebp - 0x964], ebx
mov dword [ebp - 0x96c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x96c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x92
mov dword [ebp - 0x974], 0x5a
mov dword [ebp - 0x97c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x97c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x93
mov dword [ebp - 0x984], 0x24
mov dword [ebp - 0x98c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x98c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x94
mov dword [ebp - 0x994], 1
mov dword [ebp - 0x99c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x99c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x95
mov dword [ebp - 0x9a4], 0xeb
mov dword [ebp - 0x9ac], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9ac]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x96
mov dword [ebp - 0x9b4], 0x66
mov dword [ebp - 0x9bc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9bc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x97
mov dword [ebp - 0x9c4], ebx
mov dword [ebp - 0x9cc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9cc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x98
mov dword [ebp - 0x9d4], 0xc
mov dword [ebp - 0x9dc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9dc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x99
mov dword [ebp - 0x9e4], 0x4b
mov dword [ebp - 0x9ec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9ec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x9a
mov dword [ebp - 0x9f4], ebx
mov dword [ebp - 0x9fc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9fc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x9b
mov dword [ebp - 0xa04], 0x5a
mov dword [ebp - 0xa0c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa0c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x9c
mov dword [ebp - 0xa14], 0x1c
mov dword [ebp - 0xa1c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa1c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x9d
mov dword [ebp - 0xa24], 1
mov dword [ebp - 0xa2c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa2c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x9e
mov dword [ebp - 0xa34], 0xeb
mov dword [ebp - 0xa3c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa3c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0x9f
mov dword [ebp - 0xa44], ebx
mov dword [ebp - 0xa4c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov ecx, 0xa0
mov dword [ebp - 0xa54], 4
mov dword [ebp - 0xa5c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa5c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa64], ebx
mov dword [ebp - 0xa6c], edi
mov ecx, 0xa1
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xa6c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa74], 1
mov dword [ebp - 0xa7c], edi
mov ecx, 0xa2
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xa7c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa84], 0xe8
mov dword [ebp - 0xa8c], edi
mov ecx, 0xa3
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xa8c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa94], 0x5f
mov dword [ebp - 0xa9c], edi
mov ecx, 0xa4
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xa9c]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xaa4], 0x5e
mov dword [ebp - 0xaac], edi
mov ecx, 0xa5
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xaac]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xab4], 0x5b
mov dword [ebp - 0xabc], edi
mov ecx, 0xa6
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xabc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xac4], 0x59
mov dword [ebp - 0xacc], edi
mov ecx, 0xa7
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xacc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xad4], 0x5a
mov dword [ebp - 0xadc], edi
mov ecx, 0xa8
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xadc]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xae4], 0x5d
mov dword [ebp - 0xaec], edi
mov ecx, 0xa9
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xaec]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xaf4], 0xc3
mov dword [ebp - 0xafc], edi
mov ecx, 0xaa
mov edi, dword [eax + 0x14]
lea edx, [ebp - 0xafc]
sub ecx, edi
mov edi, dword [eax + 0xc]
shl ecx, 4
add ecx, edi
call esi
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x4c]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0xb20]
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0xb20]
lea edx, [ebp - 0x24]
push ecx
lea eax, [ebp - 0xb10]
push edx
lea ecx, [ebp - 0xb30]
push eax
lea edx, [ebp - 0xb34]
push ecx
lea eax, [ebp - 0xb24]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaForEachVar]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaUI1ErrVar]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNextEachVar]
test eax, eax
je 0x4066ee
mov esi, dword [ebp - 0x14]
cmp esi, 0xab
jb 0x4066af
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x24]
push ecx
call edi
mov edx, dword [0x40d024]
lea ecx, [ebp - 0xb10]
mov byte [edx + esi], al
lea eax, [ebp - 0x24]
push eax
lea edx, [ebp - 0xb30]
push ecx
lea eax, [ebp - 0xb34]
add esi, 1
push edx
lea ecx, [ebp - 0xb24]
push eax
jo 0x406aa5
push ecx
mov dword [ebp - 0x14], esi
call ebx
jmp 0x40669a
mov dword [ebp - 0x14], 0
mov word [0x40d010], 0xffff
mov esi, dword [ebp - 0x14]
xor ebx, ebx
mov edx, dword [0x40d024]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov edi, eax
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov ecx, dword [ebp + 0xc]
push ebx
push ebx
push ecx
push eax
push edi
call fcn.004020a8
mov edi, eax
mov dword [ebp - 0xb00], edi
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp edi, ebx
je 0x406a35
mov edi, dword [ebp + 0x10]
mov edx, dword [edi]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov dword [ebp - 0xb3c], eax
mov eax, dword [edi]
push eax
push 1
mov dword [ebp - 0xb38], 0xffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov edi, eax
mov dword [ebp - 0x38], edi
cmp edi, dword [ebp - 0xb3c]
jl 0x4068b8
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
cmp eax, ebx
je 0x4067a4
cmp word [eax], 1
jne 0x4067a4
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x40679a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl edi, 4
mov eax, edi
mov edi, dword [ebp - 0x38]
jmp 0x4067aa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp + 0x10]
mov ecx, dword [edx]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x24]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x24]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
push eax
call 0x406ab0
mov dword [ebp - 0xb28], eax
lea eax, [ebp - 0xb28]
lea ecx, [ebp - 0x2c]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
cmp esi, 0x100
jb 0x4067f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, 0x68
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [0x40d040]
add esi, 1
mov byte [edx + esi - 1], al
jo 0x406aa5
cmp esi, 0x100
jb 0x406820
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x40d040]
mov al, byte [ebp - 0x2c]
mov byte [ecx + esi], al
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x406843
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x40d040]
mov dl, byte [ebp - 0x2b]
mov byte [eax + esi], dl
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x406865
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x40d040]
mov cl, byte [ebp - 0x2a]
mov byte [edx + esi], cl
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x406888
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x40d040]
mov al, byte [ebp - 0x29]
mov edx, dword [ebp - 0xb38]
mov byte [ecx + esi], al
add esi, 1
jo 0x406aa5
add edx, edi
mov dword [ebp - 0x14], esi
jo 0x406aa5
mov dword [ebp - 0x38], edx
mov edi, edx
jmp 0x40676d
mov eax, dword [ebp - 0xb00]
push eax
call 0x406ab0
lea ecx, [ebp - 0xb2c]
lea edx, [ebp - 0x2c]
push ecx
push edx
push 4
mov dword [ebp - 0xb2c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
cmp esi, 0x100
jb 0x4068eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, 0xb8
call edi
mov ecx, dword [0x40d040]
add esi, 1
mov byte [ecx + esi - 1], al
jo 0x406aa5
cmp esi, 0x100
jb 0x406919
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x40d040]
mov dl, byte [ebp - 0x2c]
mov byte [eax + esi], dl
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x40693b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x40d040]
mov cl, byte [ebp - 0x2b]
mov byte [edx + esi], cl
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x40695e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x40d040]
mov al, byte [ebp - 0x2a]
mov byte [ecx + esi], al
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x406981
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x40d040]
mov dl, byte [ebp - 0x29]
mov byte [eax + esi], dl
add esi, 1
jo 0x406aa5
cmp esi, 0x100
jb 0x4069a3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, 0xff
call edi
mov ecx, dword [0x40d040]
add esi, 1
mov byte [ecx + esi - 1], al
jo 0x406aa5
cmp esi, 0x100
jb 0x4069cb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, 0xd0
call edi
mov edx, dword [0x40d040]
add esi, 1
mov byte [edx + esi - 1], al
jo 0x406aa5
cmp esi, 0x100
jb 0x4069f3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, 0xc3
call edi
mov ecx, dword [0x40d040]
push ebx
push ebx
push ebx
mov byte [ecx + esi], al
mov edx, dword [0x40d040]
add esi, 1
push ebx
push edx
jo 0x406aa5
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
push eax
call fcn.004020a8
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 0x30], esi
push 0x406a8f
jmp 0x406a59
mov dword [ebp - 0x30], 0xffffffff
push 0x406a8f
jmp 0x406a59
lea ecx, [ebp - 0xb24]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0xb10]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xb20]
call esi
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
push ecx
mov eax, dword [esp + 8]
lea ecx, [esp + 8]
lea edx, [esp]
push ecx
push edx
push 4
mov dword [esp + 0xc], 0
mov dword [esp + 0x14], eax
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
mov eax, dword [esp]
pop ecx
ret 4