Function at 0x476b10
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x406f16
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa58
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x403248
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x178], esi
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x1b8], esi
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1d8], esi
mov dword [ebp - 0x1e8], esi
mov dword [ebp - 0x1f8], esi
mov dword [ebp - 0x208], esi
mov dword [ebp - 0x218], esi
mov dword [ebp - 0x228], esi
mov dword [ebp - 0x238], esi
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x258], esi
mov dword [ebp - 0x268], esi
mov dword [ebp - 0x278], esi
mov dword [ebp - 0x288], esi
mov dword [ebp - 0x298], esi
mov dword [ebp - 0x2a8], esi
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2e8], esi
mov dword [ebp - 0x2f8], esi
mov dword [ebp - 0x308], esi
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x328], esi
mov dword [ebp - 0x338], esi
mov dword [ebp - 0x348], esi
mov dword [ebp - 0x358], esi
mov dword [ebp - 0x368], esi
mov dword [ebp - 0x378], esi
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x398], esi
mov dword [ebp - 0x3a8], esi
mov dword [ebp - 0x3b8], esi
mov dword [ebp - 0x3c8], esi
mov dword [ebp - 0x3d8], esi
mov dword [ebp - 0x3e8], esi
mov dword [ebp - 0x3f8], esi
mov dword [ebp - 0x408], esi
mov dword [ebp - 0x418], esi
mov dword [ebp - 0x428], esi
mov dword [ebp - 0x438], esi
mov dword [ebp - 0x448], esi
mov dword [ebp - 0x458], esi
mov dword [ebp - 0x468], esi
mov dword [ebp - 0x478], esi
mov dword [ebp - 0x488], esi
mov dword [ebp - 0x498], esi
mov dword [ebp - 0x4a8], esi
mov dword [ebp - 0x4b8], esi
mov dword [ebp - 0x4c8], esi
mov dword [ebp - 0x4d8], esi
mov dword [ebp - 0x4e8], esi
mov dword [ebp - 0x4f8], esi
mov dword [ebp - 0x508], esi
mov dword [ebp - 0x518], esi
mov dword [ebp - 0x528], esi
mov dword [ebp - 0x538], esi
mov dword [ebp - 0x548], esi
mov dword [ebp - 0x558], esi
mov dword [ebp - 0x568], esi
mov dword [ebp - 0x578], esi
mov dword [ebp - 0x588], esi
mov dword [ebp - 0x598], esi
mov dword [ebp - 0x5a8], esi
mov dword [ebp - 0x5b8], esi
mov dword [ebp - 0x5c8], esi
mov dword [ebp - 0x5d8], esi
mov dword [ebp - 0x5e8], esi
mov dword [ebp - 0x5f8], esi
mov dword [ebp - 0x608], esi
mov dword [ebp - 0x618], esi
mov dword [ebp - 0x628], esi
mov dword [ebp - 0x638], esi
mov dword [ebp - 0x648], esi
mov dword [ebp - 0x658], esi
mov dword [ebp - 0x668], esi
mov dword [ebp - 0x678], esi
mov dword [ebp - 0x688], esi
mov dword [ebp - 0x698], esi
mov dword [ebp - 0x6a8], esi
mov dword [ebp - 0x6b8], esi
mov dword [ebp - 0x6c8], esi
mov dword [ebp - 0x6d8], esi
mov dword [ebp - 0x6e8], esi
mov dword [ebp - 0x6f8], esi
mov dword [ebp - 0x708], esi
mov dword [ebp - 0x718], esi
mov dword [ebp - 0x728], esi
mov dword [ebp - 0x738], esi
mov dword [ebp - 0x748], esi
mov dword [ebp - 0x758], esi
mov dword [ebp - 0x768], esi
mov dword [ebp - 0x778], esi
mov dword [ebp - 0x788], esi
mov dword [ebp - 0x798], esi
mov dword [ebp - 0x7a8], esi
mov dword [ebp - 0x7b8], esi
mov dword [ebp - 0x7c8], esi
mov dword [ebp - 0x7d8], esi
mov dword [ebp - 0x7e8], esi
mov dword [ebp - 0x7f8], esi
mov dword [ebp - 0x808], esi
mov dword [ebp - 0x818], esi
mov dword [ebp - 0x828], esi
mov dword [ebp - 0x838], esi
mov dword [ebp - 0x848], esi
mov dword [ebp - 0x858], esi
mov dword [ebp - 0x868], esi
mov dword [ebp - 0x878], esi
mov dword [ebp - 0x888], esi
mov dword [ebp - 0x898], esi
mov dword [ebp - 0x8a8], esi
mov dword [ebp - 0x8b8], esi
mov dword [ebp - 0x8c8], esi
mov dword [ebp - 0x8d8], esi
mov dword [ebp - 0x8e8], esi
mov dword [ebp - 0x8f8], esi
mov dword [ebp - 0x908], esi
mov dword [ebp - 0x918], esi
mov dword [ebp - 0x928], esi
mov dword [ebp - 0x938], esi
mov dword [ebp - 0x948], esi
mov dword [ebp - 0x958], esi
mov dword [ebp - 0x968], esi
push 0x41db40
mov dword [ebp - 0x978], esi
mov dword [ebp - 0x988], esi
mov dword [ebp - 0x998], esi
mov dword [ebp - 0x9a8], esi
mov dword [ebp - 0x9b8], esi
mov dword [ebp - 0x9c8], esi
mov dword [ebp - 0x9d8], esi
mov dword [ebp - 0x9e8], esi
mov dword [ebp - 0x9f8], esi
mov dword [ebp - 0xa08], esi
mov dword [ebp - 0xa18], esi
mov dword [ebp - 0xa1c], esi
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
cmp eax, esi
fnclex
jge 0x476f40
mov edx, dword [ebp - 0x2c]
push 0x30
push 0x41db30
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x2c]
push 0xffffffffffffffff
push eax
mov ecx, dword [eax]
call dword [ecx + 0x28]
cmp eax, esi
fnclex
jge 0x476f63
mov edx, dword [ebp - 0x2c]
push 0x28
push 0x41db30
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ebx, dword [ebp + 0xc]
push ebx
call dword [sym.imp.MSVBVM60.DLL_rtcIsMissing]
test ax, ax
je 0x4788b6
push esi
push 0x9b
push 1
lea eax, [ebp - 0x58]
push esi
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x58]
mov edi, 8
mov dword [ebp - 0x60], 0x41fc4c
mov dword [ebp - 0x68], edi
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x68]
call esi
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x70], 0x41fc68
mov dword [ebp - 0x78], edi
lea edx, [ebp - 0x78]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0xa5c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xa5c]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 2
mov dword [ebp - 0x80], 0x41fc80
mov dword [ebp - 0x88], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x88]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 3
mov dword [ebp - 0x90], 0x41fca0
mov dword [ebp - 0x98], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x98]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 4
mov dword [ebp - 0xa0], 0x41fcac
mov dword [ebp - 0xa8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 5
mov dword [ebp - 0xb0], 0x41f914
mov dword [ebp - 0xb8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xb8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 6
mov dword [ebp - 0xc0], 0x41fcc4
mov dword [ebp - 0xc8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0xd0], 0x41fcdc
mov dword [ebp - 0xd8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 7
lea edx, [ebp - 0xd8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, edi
mov dword [ebp - 0xe0], 0x41fcec
mov dword [ebp - 0xe8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 9
mov dword [ebp - 0xf0], 0x41fd08
mov dword [ebp - 0xf8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0xa
mov dword [ebp - 0x100], 0x41fd14
mov dword [ebp - 0x108], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x108]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0xb
mov dword [ebp - 0x110], 0x41fd38
mov dword [ebp - 0x118], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x118]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0xc
mov dword [ebp - 0x120], 0x41fd48
mov dword [ebp - 0x128], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x128]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0xd
mov dword [ebp - 0x130], 0x41fd64
mov dword [ebp - 0x138], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x138]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0xe
mov dword [ebp - 0x140], 0x41fd70
mov dword [ebp - 0x148], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x148]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0xf
mov dword [ebp - 0x150], 0x41fd8c
mov dword [ebp - 0x158], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x158]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x160], 0x41fd9c
mov dword [ebp - 0x168], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x10
lea edx, [ebp - 0x168]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x11
mov dword [ebp - 0x170], 0x41fdac
mov dword [ebp - 0x178], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x178]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x12
mov dword [ebp - 0x180], 0x41fdb8
mov dword [ebp - 0x188], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x188]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x13
mov dword [ebp - 0x190], 0x41fdd4
mov dword [ebp - 0x198], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x198]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x14
mov dword [ebp - 0x1a0], 0x41fde4
mov dword [ebp - 0x1a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x15
mov dword [ebp - 0x1b0], 0x41fdf4
mov dword [ebp - 0x1b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x16
mov dword [ebp - 0x1c0], 0x41fe04
mov dword [ebp - 0x1c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x17
mov dword [ebp - 0x1d0], 0x41fe10
mov dword [ebp - 0x1d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x18
mov dword [ebp - 0x1e0], 0x41fe1c
mov dword [ebp - 0x1e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x1f0], 0x41fe34
mov dword [ebp - 0x1f8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x19
lea edx, [ebp - 0x1f8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x1a
mov dword [ebp - 0x200], 0x41fe44
mov dword [ebp - 0x208], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x208]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x1b
mov dword [ebp - 0x210], 0x41f1a8
mov dword [ebp - 0x218], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x218]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x1c
mov dword [ebp - 0x220], 0x41fe58
mov dword [ebp - 0x228], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x228]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x1d
mov dword [ebp - 0x230], 0x41f028
mov dword [ebp - 0x238], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x238]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x1e
mov dword [ebp - 0x240], 0x41be2c
mov dword [ebp - 0x248], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x248]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x1f
mov dword [ebp - 0x250], 0x41fe6c
mov dword [ebp - 0x258], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x258]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x20
mov dword [ebp - 0x260], 0x41fe7c
mov dword [ebp - 0x268], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x268]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x21
mov dword [ebp - 0x270], 0x41fe8c
mov dword [ebp - 0x278], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x278]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x280], 0x41fe9c
mov dword [ebp - 0x288], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x22
lea edx, [ebp - 0x288]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x23
mov dword [ebp - 0x290], 0x41feb4
mov dword [ebp - 0x298], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x298]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x24
mov dword [ebp - 0x2a0], 0x41fec8
mov dword [ebp - 0x2a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x25
mov dword [ebp - 0x2b0], 0x41fee0
mov dword [ebp - 0x2b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x26
mov dword [ebp - 0x2c0], 0x41fef8
mov dword [ebp - 0x2c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x27
mov dword [ebp - 0x2d0], 0x41ff10
mov dword [ebp - 0x2d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x28
mov dword [ebp - 0x2e0], 0x41ff1c
mov dword [ebp - 0x2e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x29
mov dword [ebp - 0x2f0], 0x41ff38
mov dword [ebp - 0x2f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x2a
mov dword [ebp - 0x300], 0x41ff44
mov dword [ebp - 0x308], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x308]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x310], 0x41ff5c
mov dword [ebp - 0x318], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x2b
lea edx, [ebp - 0x318]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x2c
mov dword [ebp - 0x320], 0x41ff68
mov dword [ebp - 0x328], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x328]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x2d
mov dword [ebp - 0x330], 0x41ff78
mov dword [ebp - 0x338], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x338]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x2e
mov dword [ebp - 0x340], 0x41ff8c
mov dword [ebp - 0x348], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x348]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x2f
mov dword [ebp - 0x350], 0x41ffa0
mov dword [ebp - 0x358], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x358]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x30
mov dword [ebp - 0x360], 0x41ffb0
mov dword [ebp - 0x368], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x368]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x31
mov dword [ebp - 0x370], 0x41ffcc
mov dword [ebp - 0x378], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x378]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x32
mov dword [ebp - 0x380], 0x41ffdc
mov dword [ebp - 0x388], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x388]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x33
mov dword [ebp - 0x390], 0x41fff0
mov dword [ebp - 0x398], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x398]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3a0], 0x420000
mov dword [ebp - 0x3a8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x34
lea edx, [ebp - 0x3a8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x35
mov dword [ebp - 0x3b0], 0x420014
mov dword [ebp - 0x3b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x36
mov dword [ebp - 0x3c0], 0x420024
mov dword [ebp - 0x3c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x37
mov dword [ebp - 0x3d0], 0x420034
mov dword [ebp - 0x3d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x38
mov dword [ebp - 0x3e0], 0x420044
mov dword [ebp - 0x3e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x39
mov dword [ebp - 0x3f0], 0x420054
mov dword [ebp - 0x3f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x3a
mov dword [ebp - 0x400], 0x420064
mov dword [ebp - 0x408], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x408]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x3b
mov dword [ebp - 0x410], 0x420074
mov dword [ebp - 0x418], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x418]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x3c
mov dword [ebp - 0x420], 0x420084
mov dword [ebp - 0x428], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x428]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x430], 0x420098
mov dword [ebp - 0x438], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x3d
lea edx, [ebp - 0x438]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x3e
mov dword [ebp - 0x440], 0x4200a8
mov dword [ebp - 0x448], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x448]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x3f
mov dword [ebp - 0x450], 0x4200c0
mov dword [ebp - 0x458], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x458]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x40
mov dword [ebp - 0x460], 0x4200d4
mov dword [ebp - 0x468], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x468]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x41
mov dword [ebp - 0x470], 0x4200e4
mov dword [ebp - 0x478], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x478]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x42
mov dword [ebp - 0x480], 0x4200f4
mov dword [ebp - 0x488], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x488]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x43
mov dword [ebp - 0x490], 0x420104
mov dword [ebp - 0x498], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x498]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x44
mov dword [ebp - 0x4a0], 0x420110
mov dword [ebp - 0x4a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x45
mov dword [ebp - 0x4b0], 0x42011c
mov dword [ebp - 0x4b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x4c0], 0x420128
mov dword [ebp - 0x4c8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x46
lea edx, [ebp - 0x4c8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x47
mov dword [ebp - 0x4d0], 0x420134
mov dword [ebp - 0x4d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x48
mov dword [ebp - 0x4e0], 0x420144
mov dword [ebp - 0x4e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x49
mov dword [ebp - 0x4f0], 0x420164
mov dword [ebp - 0x4f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x4f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x4a
mov dword [ebp - 0x500], 0x420178
mov dword [ebp - 0x508], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x508]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x4b
mov dword [ebp - 0x510], 0x42019c
mov dword [ebp - 0x518], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x518]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x4c
mov dword [ebp - 0x520], 0x4201b4
mov dword [ebp - 0x528], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x528]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x4d
mov dword [ebp - 0x530], 0x4201c4
mov dword [ebp - 0x538], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x538]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x4e
mov dword [ebp - 0x540], 0x4201d0
mov dword [ebp - 0x548], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x548]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x550], 0x4201dc
mov dword [ebp - 0x558], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x4f
lea edx, [ebp - 0x558]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x50
mov dword [ebp - 0x560], 0x4201e8
mov dword [ebp - 0x568], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x568]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x51
mov dword [ebp - 0x570], 0x4201f4
mov dword [ebp - 0x578], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x578]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x52
mov dword [ebp - 0x580], 0x420204
mov dword [ebp - 0x588], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x588]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x53
mov dword [ebp - 0x590], 0x420214
mov dword [ebp - 0x598], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x598]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x54
mov dword [ebp - 0x5a0], 0x420220
mov dword [ebp - 0x5a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x55
mov dword [ebp - 0x5b0], 0x420238
mov dword [ebp - 0x5b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x56
mov dword [ebp - 0x5c0], 0x42024c
mov dword [ebp - 0x5c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x57
mov dword [ebp - 0x5d0], 0x42026c
mov dword [ebp - 0x5d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x5e0], 0x42028c
mov dword [ebp - 0x5e8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x58
lea edx, [ebp - 0x5e8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x59
mov dword [ebp - 0x5f0], 0x4202b0
mov dword [ebp - 0x5f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x5f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x5a
mov dword [ebp - 0x600], 0x4202c8
mov dword [ebp - 0x608], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x608]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x5b
mov dword [ebp - 0x610], 0x4202d0
mov dword [ebp - 0x618], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x618]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x5c
mov dword [ebp - 0x620], 0x4202d8
mov dword [ebp - 0x628], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x628]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x5d
mov dword [ebp - 0x630], 0x4202e0
mov dword [ebp - 0x638], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x638]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x5e
mov dword [ebp - 0x640], 0x4202e8
mov dword [ebp - 0x648], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x648]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x5f
mov dword [ebp - 0x650], 0x4202f0
mov dword [ebp - 0x658], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x658]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x60
mov dword [ebp - 0x660], 0x4202f8
mov dword [ebp - 0x668], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x668]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x670], 0x41f648
mov dword [ebp - 0x678], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x61
lea edx, [ebp - 0x678]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x62
mov dword [ebp - 0x680], 0x420300
mov dword [ebp - 0x688], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x688]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x63
mov dword [ebp - 0x690], 0x420308
mov dword [ebp - 0x698], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x698]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x64
mov dword [ebp - 0x6a0], 0x420310
mov dword [ebp - 0x6a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x65
mov dword [ebp - 0x6b0], 0x41f650
mov dword [ebp - 0x6b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x66
mov dword [ebp - 0x6c0], 0x420318
mov dword [ebp - 0x6c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x67
mov dword [ebp - 0x6d0], 0x420320
mov dword [ebp - 0x6d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x68
mov dword [ebp - 0x6e0], 0x42032c
mov dword [ebp - 0x6e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x69
mov dword [ebp - 0x6f0], 0x420334
mov dword [ebp - 0x6f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x6f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x700], 0x41f94c
mov dword [ebp - 0x708], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x6a
lea edx, [ebp - 0x708]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x6b
mov dword [ebp - 0x710], 0x41f5b8
mov dword [ebp - 0x718], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x718]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x6c
mov dword [ebp - 0x720], 0x41ee4c
mov dword [ebp - 0x728], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x728]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x6d
mov dword [ebp - 0x730], 0x41f640
mov dword [ebp - 0x738], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x738]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x6e
mov dword [ebp - 0x740], 0x41ec70
mov dword [ebp - 0x748], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x748]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x6f
mov dword [ebp - 0x750], 0x41e8e8
mov dword [ebp - 0x758], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x758]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x70
mov dword [ebp - 0x760], 0x41e538
mov dword [ebp - 0x768], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x768]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x71
mov dword [ebp - 0x770], 0x41e370
mov dword [ebp - 0x778], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x778]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x72
mov dword [ebp - 0x780], 0x41de30
mov dword [ebp - 0x788], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x788]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x790], 0x41d204
mov dword [ebp - 0x798], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x73
lea edx, [ebp - 0x798]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x74
mov dword [ebp - 0x7a0], 0x41d2f0
mov dword [ebp - 0x7a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x75
mov dword [ebp - 0x7b0], 0x41f658
mov dword [ebp - 0x7b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x76
mov dword [ebp - 0x7c0], 0x41c418
mov dword [ebp - 0x7c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x77
mov dword [ebp - 0x7d0], 0x41bc7c
mov dword [ebp - 0x7d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x78
mov dword [ebp - 0x7e0], 0x414e64
mov dword [ebp - 0x7e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x79
mov dword [ebp - 0x7f0], 0x420344
mov dword [ebp - 0x7f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x7f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x7a
mov dword [ebp - 0x800], 0x42034c
mov dword [ebp - 0x808], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x808]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x7b
mov dword [ebp - 0x810], 0x420354
mov dword [ebp - 0x818], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x818]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x820], 0x42035c
mov dword [ebp - 0x828], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x7c
lea edx, [ebp - 0x828]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x7d
mov dword [ebp - 0x830], 0x420364
mov dword [ebp - 0x838], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x838]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x7e
mov dword [ebp - 0x840], 0x42036c
mov dword [ebp - 0x848], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x848]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x7f
mov dword [ebp - 0x850], 0x420374
mov dword [ebp - 0x858], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x858]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x80
mov dword [ebp - 0x860], 0x42037c
mov dword [ebp - 0x868], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x868]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x81
mov dword [ebp - 0x870], 0x420384
mov dword [ebp - 0x878], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x878]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x82
mov dword [ebp - 0x880], 0x42038c
mov dword [ebp - 0x888], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x888]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x83
mov dword [ebp - 0x890], 0x420394
mov dword [ebp - 0x898], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x898]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x84
mov dword [ebp - 0x8a0], 0x42039c
mov dword [ebp - 0x8a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x8b0], 0x4203a4
mov dword [ebp - 0x8b8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x85
lea edx, [ebp - 0x8b8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x86
mov dword [ebp - 0x8c0], 0x4203ac
mov dword [ebp - 0x8c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x87
mov dword [ebp - 0x8d0], 0x4203b4
mov dword [ebp - 0x8d8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8d8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x88
mov dword [ebp - 0x8e0], 0x4203bc
mov dword [ebp - 0x8e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x89
mov dword [ebp - 0x8f0], 0x4203c4
mov dword [ebp - 0x8f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x8f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x8a
mov dword [ebp - 0x900], 0x4203cc
mov dword [ebp - 0x908], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x908]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x8b
mov dword [ebp - 0x910], 0x4203d4
mov dword [ebp - 0x918], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x918]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x8c
mov dword [ebp - 0x920], 0x4203e0
mov dword [ebp - 0x928], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x928]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x8d
mov dword [ebp - 0x930], 0x4203e8
mov dword [ebp - 0x938], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x938]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x940], 0x4203f4
mov dword [ebp - 0x948], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x8e
lea edx, [ebp - 0x948]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x8f
mov dword [ebp - 0x950], 0x4203fc
mov dword [ebp - 0x958], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x958]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x90
mov dword [ebp - 0x960], 0x420408
mov dword [ebp - 0x968], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x968]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x91
mov dword [ebp - 0x970], 0x420410
mov dword [ebp - 0x978], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x978]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x92
mov dword [ebp - 0x980], 0x42041c
mov dword [ebp - 0x988], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x988]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x93
mov dword [ebp - 0x990], 0x420424
mov dword [ebp - 0x998], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x998]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x94
mov dword [ebp - 0x9a0], 0x42042c
mov dword [ebp - 0x9a8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9a8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x95
mov dword [ebp - 0x9b0], 0x420434
mov dword [ebp - 0x9b8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9b8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x96
mov dword [ebp - 0x9c0], 0x420440
mov dword [ebp - 0x9c8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9c8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x9d0], 0x41f650
mov dword [ebp - 0x9d8], edi
mov eax, dword [ebp - 0x58]
mov ecx, 0x97
lea edx, [ebp - 0x9d8]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x98
mov dword [ebp - 0x9e0], 0x420448
mov dword [ebp - 0x9e8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9e8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x99
mov dword [ebp - 0x9f0], 0x420450
mov dword [ebp - 0x9f8], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x9f8]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x9a
mov dword [ebp - 0xa00], 0x42045c
mov dword [ebp - 0xa08], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa08]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x58]
mov ecx, 0x9b
mov dword [ebp - 0xa10], 0x420464
mov dword [ebp - 0xa18], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa18]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x58]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x44]
mov ecx, ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVargVarMove]
xor esi, esi
jmp 0x4788bb
mov edi, 8
push ebx
call dword [sym.imp.MSVBVM60.DLL_rtcIsArray]
test ax, ax
je 0x478f73
mov eax, dword [ebp + 0x10]
cmp eax, 0xffffffff
jne 0x478a1f
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
dec eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0xa28], eax
cmp dword [ebp - 0x24], eax
jg 0x478f73
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x24]
mov ecx, 0x4003
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], ecx
mov edi, dword [edx]
sub esp, 0x10
mov edx, esp
push 1
push ebx
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea edx, [ebp - 0x30]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
mov eax, dword [ebp - 0x2c]
push eax
call dword [edi + 0x20]
cmp eax, esi
fnclex
jge 0x478960
mov ecx, dword [ebp - 0x2c]
push 0x20
push 0x41db30
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x24]
sub esp, 0x10
mov ecx, 3
lea eax, [edx + 1]
mov edx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x60], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
push 1
push ebx
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
mov edi, dword [ebp - 0x44]
lea ecx, [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
push ecx
sub esp, 0x10
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x40]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x3c]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x38]
mov dword [ecx + 0xc], edi
mov edi, dword [ebp + 8]
mov ecx, dword [edi]
push ecx
push eax
call dword [edx + 0x44]
cmp eax, esi
fnclex
jge 0x4789f0
mov edx, dword [ebp - 0x2c]
push 0x44
push 0x41db30
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x30]
mov ecx, edi
mov dword [ebp - 0x30], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ecx, dword [ebp - 0x24]
mov eax, 2
add ecx, eax
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0x24], ecx
jmp 0x4788f3
jge 0x478b32
cdq
xor eax, edx
push ebx
sub eax, edx
sub eax, 2
mov dword [ebp + 0x10], eax
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
dec eax
mov dword [ebp - 0x24], esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0xa30], eax
cmp dword [ebp - 0x24], eax
jg 0x478f73
sub esp, 0x10
mov ecx, 0x4003
mov edx, esp
mov dword [ebp - 0x68], ecx
lea eax, [ebp - 0x24]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x60], eax
push ebx
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov edx, dword [ebp - 0x24]
add esp, 0xc
mov ecx, 3
lea eax, [edx + 1]
mov edx, esp
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x70], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x74]
push 1
push ebx
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x54]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x6c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov edx, dword [ebp + 0x10]
add esp, 0x1c
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x34]
push edx
push 0xffffffffffffffff
push 1
push eax
push ecx
call edi
push eax
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x30]
push edx
push eax
call edi
mov ecx, dword [esi]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
mov ecx, esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x30]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x44]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp - 0x24]
mov eax, 2
add esp, 0x18
add ecx, eax
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x24], ecx
jmp 0x478a55
mov ecx, eax
and eax, 0xfe
mov dword [ebp - 0xa60], eax
and ecx, 1
fild dword [ebp - 0xa60]
mov dword [ebp - 0x20], ecx
fstp qword [ebp - 0xa68]
fld qword [ebp - 0xa68]
fdiv qword [0x402b68]
fsub qword [0x402b60]
fnstsw ax
test al, 0xd
jne 0x478fe4
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0x44]
mov dword [ebp + 0x10], eax
mov dword [ebp - 0x60], 0x41dabc
mov dword [ebp - 0x68], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp + 8]
push esi
lea eax, [ebp - 0x44]
push 0xffffffffffffffff
mov edx, dword [ecx]
push eax
lea eax, [ebp - 0x54]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea ecx, [ebp - 0x54]
push ecx
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0xa1c], eax
lea edx, [ebp - 0xa1c]
lea eax, [ebp - 0x18]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x44]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp + 0x10]
add esp, 0xc
cmp eax, 0xffffffff
push ebx
jne 0x478dbe
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
dec eax
mov dword [ebp - 0x28], esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0xa38], eax
cmp dword [ebp - 0x28], eax
jg 0x478f32
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
mov ecx, 0x4003
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], ecx
mov esi, dword [edx]
sub esp, 0x10
mov edx, esp
push 1
push ebx
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea edx, [ebp - 0x30]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
mov eax, dword [ebp - 0x2c]
push eax
call dword [esi + 0x20]
test eax, eax
fnclex
jge 0x478c77
mov ecx, dword [ebp - 0x2c]
push 0x20
push 0x41db30
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov ecx, 3
lea eax, [edx + 1]
mov edx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x60], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
push 1
push ebx
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x14]
call esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x18]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xa40]
mov dword [ebp - 0x24], eax
cmp eax, ecx
jg 0x478da6
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
je 0x478d97
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], edi
mov edx, dword [ecx]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x60]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x2c]
push ecx
push eax
call dword [edx + 0x44]
test eax, eax
fnclex
jge 0x478d76
mov ecx, dword [ebp - 0x2c]
push 0x44
push 0x41db30
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x30]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x24]
mov ecx, 2
add eax, ecx
jmp 0x478cf2
mov ecx, dword [ebp - 0x28]
mov eax, 2
add ecx, eax
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0x28], ecx
jmp 0x478c0a
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
dec eax
mov dword [ebp - 0x28], esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0xa48], eax
cmp dword [ebp - 0x28], eax
jg 0x478f32
sub esp, 0x10
mov ecx, 0x4003
mov edx, esp
mov dword [ebp - 0x68], ecx
lea eax, [ebp - 0x28]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x60], eax
push ebx
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x28]
sub esp, 0x10
mov ecx, 3
lea eax, [edx + 1]
mov edx, esp
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x60], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x64]
push 1
push ebx
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x44]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x5c]
mov dword [edx + 0xc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x14]
call esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x18]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xa50]
mov dword [ebp - 0x24], eax
cmp eax, ecx
jg 0x478f1a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
je 0x478f0b
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x1c]
push eax
mov eax, dword [ebp - 0x18]
push 0xffffffffffffffff
push 1
push ecx
mov ecx, dword [ebp - 0x24]
push edx
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
mov ecx, dword [ebp - 0x24]
mov edx, eax
mov eax, dword [ebp - 0x18]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x24]
mov ecx, 2
add eax, ecx
jmp 0x478e96
mov ecx, dword [ebp - 0x28]
mov eax, 2
add ecx, eax
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x28], ecx
jmp 0x478ddf
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x70], 0x41dabc
mov dword [ebp - 0x78], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0x18]
push edx
push eax
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0x68], 0x6008
call dword [sym.imp.MSVBVM60.DLL_rtcJoin]
mov ecx, dword [ebp + 8]
mov edx, eax
call esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
wait
push 0x478fd1
jmp 0x478fab
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x14]
call esi
lea eax, [ebp - 0x18]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
ret
jmp 0x406f1c