Function at 0x408dc4
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov ecx, dword [0x40b17c]
push ebx
push esi
push edi
push 0x40
mov eax, ecx
pop esi
xor edi, edi
cdq
mov ebx, esi
mov dword [ebp - 4], edi
idiv ebx
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
sub esi, edx
mov dword [ebp - 8], edx
jo 0x408dbf
add eax, ecx
jo 0x408dbf
mov dword [0x40b17c], eax
cmp dword [ebx], esi
jl 0x408d5c
mov ecx, esi
sub ecx, 1
jo 0x408dbf
call sub.MSVBVM60.DLL___vbaI2I4
cmp ax, di
mov dword [ebp - 0xc], eax
mov dword [ebp + 8], edi
jl 0x408cac
movsx edi, word [ebp + 8]
add edi, dword [ebp - 8]
jo 0x408dbf
cmp edi, 0x40
jb 0x408c7b
call sub.MSVBVM60.DLL___vbaGenerateBoundsError
movsx eax, word [ebp + 8]
push eax
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.MSVBVM60.DLL___vbaDerefAry1
mov ecx, dword [0x40b190]
mov al, byte [eax]
mov byte [ecx + edi], al
mov ax, word [ebp + 8]
add ax, 1
jo 0x408dbf
cmp ax, word [ebp - 0xc]
mov dword [ebp + 8], eax
jle 0x408c64
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x40b184
push eax
call 0x408dc4
mov ecx, dword [ebx]
push 0x40
mov eax, ecx
pop edi
cdq
idiv edi
movsx eax, word [ebp + 8]
sub ecx, eax
jo 0x408dbf
sub ecx, edx
jo 0x408dbf
call sub.MSVBVM60.DLL___vbaI2I4
mov ecx, esi
mov dword [ebp - 8], eax
call sub.MSVBVM60.DLL___vbaI2I4
mov edi, eax
cmp di, word [ebp - 8]
jg 0x408d58
and dword [ebp + 8], 0
movsx esi, word [ebp + 8]
cmp esi, 0x40
jb 0x408d03
call sub.MSVBVM60.DLL___vbaGenerateBoundsError
mov ax, word [ebp + 8]
add ax, di
jo 0x408dbf
movsx eax, ax
push eax
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.MSVBVM60.DLL___vbaDerefAry1
mov ecx, dword [0x40b190]
mov al, byte [eax]
mov byte [ecx + esi], al
mov ax, word [ebp + 8]
add ax, 1
jo 0x408dbf
cmp ax, 0x3f
mov dword [ebp + 8], eax
jle 0x408cf5
lea eax, [ebp - 4]
mov dword [ebp - 4], 0x40b184
push eax
call 0x408dc4
add di, 0x40
jo 0x408dbf
jmp 0x408ceb
and dword [ebp - 8], 0
mov ecx, dword [ebx]
movsx eax, di
sub ecx, eax
jo 0x408dbf
sub ecx, 1
jo 0x408dbf
call sub.MSVBVM60.DLL___vbaI2I4
xor ebx, ebx
mov dword [ebp + 8], eax
test ax, ax
jl 0x408db8
movsx esi, bx
add esi, dword [ebp - 8]
jo 0x408dbf
cmp esi, 0x40
jb 0x408d8b
call sub.MSVBVM60.DLL___vbaGenerateBoundsError
mov ax, bx
add ax, di
jo 0x408dbf
movsx eax, ax
push eax
mov eax, dword [ebp + 0xc]
push dword [eax]
call sub.MSVBVM60.DLL___vbaDerefAry1
mov ecx, dword [0x40b190]
mov al, byte [eax]
add bx, 1
jo 0x408dbf
cmp bx, word [ebp + 8]
mov byte [ecx + esi], al
jle 0x408d79
pop edi
pop esi
pop ebx
leave
ret 8
call sub.MSVBVM60.DLL___vbaErrorOverflow
push ebp
mov ebp, esp
push ecx
push ecx
push 0x401586
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x44
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401540
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x38]
push 0x40434c
push eax
call sub.MSVBVM60.DLL___vbaAryConstruct2
mov eax, dword [0x40b170]
push dword [ebp + 8]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
mov ecx, dword [eax + 8]
mov dword [ebp - 0x18], ecx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1c], ecx
mov eax, dword [eax + 0x10]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x40], 0x40
call fcn.00409ab1
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xd76aa478
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push dword [ebp - 0x2c]
mov dword [ebp - 0x44], 7
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409bdf
push 0xc
lea eax, [ebp - 0x48]
pop ebx
mov dword [ebp - 0x48], 0xe8c7b756
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 4
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409bdf
push 0x11
lea eax, [ebp - 0x48]
pop edi
mov dword [ebp - 0x48], 0x242070db
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], edi
add eax, 8
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409bdf
push 0x16
lea eax, [ebp - 0x48]
pop esi
mov dword [ebp - 0x48], 0xc1bdceee
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, ebx
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xf57c0faf
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x44], 7
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x4787c62a
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x14
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xa8304613
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xfd469501
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x1c
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x698098d8
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x20
mov dword [ebp - 0x44], 7
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x8b44f7af
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x24
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xffff5bb1
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x28
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x895cd7be
push eax
mov dword [ebp - 0x44], esi
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x2c
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x6b901122
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x30
mov dword [ebp - 0x44], 7
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xfd987193
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x34
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xa679438e
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x38
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x49b40821
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x3c
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409bdf
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xf61e2562
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 4
mov dword [ebp - 0x44], 5
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c2f
push 9
lea eax, [ebp - 0x48]
pop ebx
mov dword [ebp - 0x48], 0xc040b340
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c2f
push 0xe
lea eax, [ebp - 0x48]
pop edi
mov dword [ebp - 0x48], 0x265e5a51
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x2c
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c2f
push 0x14
lea eax, [ebp - 0x48]
pop esi
mov dword [ebp - 0x48], 0xe9b6c7aa
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x14]
push dword [ebp - 0x2c]
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c2f
mov dword [ebp - 0x48], 0xd62f105d
lea eax, [ebp - 0x48]
mov dword [ebp - 0x44], 5
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, esi
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x2441453
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x28
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xd8a1e681
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x3c
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xe7d3fbc8
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x10
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x21e1cde6
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x24
mov dword [ebp - 0x44], 5
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xc33707d6
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x38
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xf4d50d87
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xc
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x455a14ed
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x20
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xa9e3e905
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x34
mov dword [ebp - 0x44], 5
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c2f
mov dword [ebp - 0x48], 0xfcefa3f8
lea eax, [ebp - 0x48]
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 8
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x676f02d9
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x1c
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x8d2a4c8a
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x30
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c2f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xfffa3942
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, esi
mov dword [ebp - 0x44], 4
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c7f
push 0xb
lea eax, [ebp - 0x48]
pop ebx
mov dword [ebp - 0x48], 0x8771f681
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], ebx
add eax, 0x20
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c7f
push 0x10
lea eax, [ebp - 0x48]
pop edi
mov dword [ebp - 0x48], 0x6d9d6122
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x2c
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c7f
push 0x17
lea eax, [ebp - 0x48]
pop esi
mov dword [ebp - 0x48], 0xfde5380c
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x38
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xa4beea44
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 4
mov dword [ebp - 0x44], 4
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x4bdecfa9
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, edi
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xf6bb4b60
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x1c
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xbebfbc70
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x28
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x289b7ec6
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x34
mov dword [ebp - 0x44], 4
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xeaa127fa
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x1c]
push dword [ebp - 0x2c]
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xd4ef3085
push eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], edi
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xc
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x4881d05
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xd9d4d039
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x24
mov dword [ebp - 0x44], 4
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xe6db99e5
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x30
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x1fa27cf8
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x3c
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xc4ac5665
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 8
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409c7f
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xf4292244
push eax
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x20]
push dword [ebp - 0x2c]
mov dword [ebp - 0x44], 6
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409cc7
push 0xa
lea eax, [ebp - 0x48]
pop ebx
mov dword [ebp - 0x48], 0x432aff97
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x1c
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409cc7
push 0xf
lea eax, [ebp - 0x48]
pop edi
mov dword [ebp - 0x48], 0xab9423a7
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x38
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409cc7
push 0x15
mov dword [ebp - 0x48], 0xfc93a039
pop esi
mov dword [ebp - 0x44], esi
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x14
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x655b59c3
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x30
mov dword [ebp - 0x44], 6
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x8f0ccc92
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0xc
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xffeff47d
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x28
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x85845dd1
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 4
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x6fa87e4f
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x20
mov dword [ebp - 0x44], 6
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xfe2ce6e0
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x3c
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xa3014314
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x18
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x4e0811a1
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x34
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409cc7
mov dword [ebp - 0x48], 0xf7537e82
mov dword [ebp - 0x44], 6
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x10
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xbd3af235
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x2c
mov dword [ebp - 0x44], ebx
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0x2ad7d2bb
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 8
mov dword [ebp - 0x44], edi
push eax
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x48]
mov dword [ebp - 0x48], 0xeb86d391
push eax
lea eax, [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x24
mov dword [ebp - 0x44], esi
push eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.00409cc7
lea eax, [ebp - 0x14]
push eax
mov eax, dword [0x40b170]
add eax, 4
push eax
call fcn.00409d91
mov ecx, dword [0x40b170]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [0x40b170]
add eax, 8
push eax
call fcn.00409d91
mov ecx, dword [0x40b170]
mov dword [ecx + 8], eax
lea eax, [ebp - 0x1c]
push eax
mov eax, dword [0x40b170]
add eax, 0xc
push eax
call fcn.00409d91
mov ecx, dword [0x40b170]
mov dword [ecx + 0xc], eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [0x40b170]
add eax, 0x10
push eax
call fcn.00409d91
mov ecx, dword [0x40b170]
push 0x409aa0
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x38]
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0
call sub.MSVBVM60.DLL___vbaAryDestruct
ret