Function at 0x42fe90
Capabilities:
Access peb ldr_data
Get process heap flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x402e06
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4015e8
mov eax, dword [0x458104]
xor edi, edi
push eax
push 1
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x3c], edi
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov esi, eax
push edi
push esi
push 1
lea ecx, [ebp - 0x28]
push 0x11
push ecx
push 1
push 0x80
mov dword [ebp - 0x14], esi
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
add esp, 0x1c
mov dword [ebp - 0x18], edi
cmp edi, esi
jg 0x43096d
mov eax, dword [0x458104]
test eax, eax
je 0x42ff26
cmp word [eax], 1
jne 0x42ff26
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
mov esi, edi
sub esi, edx
cmp esi, ecx
jb 0x42ff2a
call ebx
jmp 0x42ff2a
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x42ff52
cmp word [ecx], 1
jne 0x42ff52
mov edi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x42ff4b
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, edi
mov edi, dword [ebp - 0x18]
jmp 0x42ff57
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [0x458104]
mov ecx, dword [ecx + 0xc]
mov edx, dword [edx + 0xc]
mov dl, byte [edx + esi]
mov byte [ecx + eax], dl
mov eax, edi
cdq
mov ecx, 0xa
idiv ecx
cmp edx, 9
ja case.default.0x42ff7c
jmp dword [edx*4 + 0x4309d8]
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x42ffa7
cmp word [ecx], 1
jne 0x42ffa7
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x42ffa3
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x42ffac
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xbf
jb 0x430013
test ecx, ecx
je 0x42ffd6
cmp word [ecx], 1
jne 0x42ffd6
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x42ffd2
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x42ffdd
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x42fffa
cmp word [ecx], 1
jne 0x42fffa
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430001
call ebx
jmp 0x42fffe
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xbf
jmp 0x43093b
test ecx, ecx
je 0x430034
cmp word [ecx], 1
jne 0x430034
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430030
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x43003b
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x430058
cmp word [ecx], 1
jne 0x430058
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x43005f
call ebx
jmp 0x43005c
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xbf
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x4300a0
cmp word [ecx], 1
jne 0x4300a0
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x43009c
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x4300a5
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc0
jb 0x43010c
test ecx, ecx
je 0x4300cf
cmp word [ecx], 1
jne 0x4300cf
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4300cb
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4300d6
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4300f3
cmp word [ecx], 1
jne 0x4300f3
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4300fa
call ebx
jmp 0x4300f7
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc0
jmp 0x43093b
test ecx, ecx
je 0x43012d
cmp word [ecx], 1
jne 0x43012d
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430129
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x430134
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x430151
cmp word [ecx], 1
jne 0x430151
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430158
call ebx
jmp 0x430155
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc0
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x430199
cmp word [ecx], 1
jne 0x430199
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430195
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x43019e
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc1
jb 0x430205
test ecx, ecx
je 0x4301c8
cmp word [ecx], 1
jne 0x4301c8
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4301c4
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4301cf
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4301ec
cmp word [ecx], 1
jne 0x4301ec
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4301f3
call ebx
jmp 0x4301f0
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc1
jmp 0x43093b
test ecx, ecx
je 0x430226
cmp word [ecx], 1
jne 0x430226
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430222
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x43022d
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x43024a
cmp word [ecx], 1
jne 0x43024a
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430251
call ebx
jmp 0x43024e
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc1
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x430292
cmp word [ecx], 1
jne 0x430292
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x43028e
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x430297
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc2
jb 0x4302fe
test ecx, ecx
je 0x4302c1
cmp word [ecx], 1
jne 0x4302c1
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4302bd
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4302c8
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4302e5
cmp word [ecx], 1
jne 0x4302e5
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4302ec
call ebx
jmp 0x4302e9
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc2
jmp 0x43093b
test ecx, ecx
je 0x43031f
cmp word [ecx], 1
jne 0x43031f
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x43031b
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x430326
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x430343
cmp word [ecx], 1
jne 0x430343
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x43034a
call ebx
jmp 0x430347
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc2
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x43038b
cmp word [ecx], 1
jne 0x43038b
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430387
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x430390
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc3
jb 0x4303f7
test ecx, ecx
je 0x4303ba
cmp word [ecx], 1
jne 0x4303ba
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4303b6
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4303c1
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4303de
cmp word [ecx], 1
jne 0x4303de
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4303e5
call ebx
jmp 0x4303e2
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc3
jmp 0x43093b
test ecx, ecx
je 0x430418
cmp word [ecx], 1
jne 0x430418
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430414
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x43041f
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x43043c
cmp word [ecx], 1
jne 0x43043c
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430443
call ebx
jmp 0x430440
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc3
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x430484
cmp word [ecx], 1
jne 0x430484
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430480
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x430489
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc4
jb 0x4304f0
test ecx, ecx
je 0x4304b3
cmp word [ecx], 1
jne 0x4304b3
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4304af
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4304ba
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4304d7
cmp word [ecx], 1
jne 0x4304d7
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4304de
call ebx
jmp 0x4304db
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc4
jmp 0x43093b
test ecx, ecx
je 0x430511
cmp word [ecx], 1
jne 0x430511
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x43050d
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x430518
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x430535
cmp word [ecx], 1
jne 0x430535
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x43053c
call ebx
jmp 0x430539
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc4
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x43057d
cmp word [ecx], 1
jne 0x43057d
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430579
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x430582
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc5
jb 0x4305e9
test ecx, ecx
je 0x4305ac
cmp word [ecx], 1
jne 0x4305ac
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4305a8
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4305b3
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4305d0
cmp word [ecx], 1
jne 0x4305d0
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4305d7
call ebx
jmp 0x4305d4
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc5
jmp 0x43093b
test ecx, ecx
je 0x43060a
cmp word [ecx], 1
jne 0x43060a
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430606
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x430611
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x43062e
cmp word [ecx], 1
jne 0x43062e
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430635
call ebx
jmp 0x430632
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc5
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x430676
cmp word [ecx], 1
jne 0x430676
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430672
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x43067b
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc6
jb 0x4306e2
test ecx, ecx
je 0x4306a5
cmp word [ecx], 1
jne 0x4306a5
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4306a1
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4306ac
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4306c9
cmp word [ecx], 1
jne 0x4306c9
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4306d0
call ebx
jmp 0x4306cd
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc6
jmp 0x43093b
test ecx, ecx
je 0x430703
cmp word [ecx], 1
jne 0x430703
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4306ff
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x43070a
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x430727
cmp word [ecx], 1
jne 0x430727
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x43072e
call ebx
jmp 0x43072b
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc6
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x43076f
cmp word [ecx], 1
jne 0x43076f
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x43076b
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x430774
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc7
jb 0x4307db
test ecx, ecx
je 0x43079e
cmp word [ecx], 1
jne 0x43079e
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x43079a
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4307a5
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4307c2
cmp word [ecx], 1
jne 0x4307c2
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4307c9
call ebx
jmp 0x4307c6
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
sub cx, 0xc7
jmp 0x43093b
test ecx, ecx
je 0x4307fc
cmp word [ecx], 1
jne 0x4307fc
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4307f8
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x430803
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x430820
cmp word [ecx], 1
jne 0x430820
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430827
call ebx
jmp 0x430824
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc7
jmp 0x43093b
mov ecx, dword [ebp - 0x28]
test ecx, ecx
je 0x430868
cmp word [ecx], 1
jne 0x430868
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430864
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, esi
jmp 0x43086d
call ebx
mov ecx, dword [ebp - 0x28]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0xc8
jb 0x4308d7
test ecx, ecx
je 0x430897
cmp word [ecx], 1
jne 0x430897
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x430893
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x43089e
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x4308c6
cmp word [ecx], 1
jne 0x4308c6
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4308cd
call ebx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
jmp 0x430936
call ebx
mov ecx, dword [ebp - 0x28]
mov esi, eax
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
jmp 0x430936
test ecx, ecx
je 0x4308f8
cmp word [ecx], 1
jne 0x4308f8
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov esi, edi
sub esi, edx
cmp esi, eax
jb 0x4308f4
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, esi
jmp 0x4308ff
call ebx
mov ecx, dword [ebp - 0x28]
mov edi, eax
test ecx, ecx
je 0x43091c
cmp word [ecx], 1
jne 0x43091c
mov esi, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x430923
call ebx
jmp 0x430920
call ebx
mov esi, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx + 0xc]
movzx cx, byte [eax + edi]
add cx, 0x100
jo 0x430a00
sub cx, 0xc8
jo 0x430a00
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x18]
mov edx, dword [ecx + 0xc]
mov byte [edx + esi], al
mov esi, dword [ebp - 0x14]
mov eax, 1
add eax, edi
jo 0x430a00
mov edi, eax
mov dword [ebp - 0x18], edi
jmp 0x42fefd
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x3c]
push ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 0x2011
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x4309c2
jmp 0x4309ac
lea edx, [ebp - 0x28]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop