Function at 0x40f1f0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401496
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x48
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401390
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x38]
push 0x4066b4
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov eax, dword [0x4130a0]
mov ecx, dword [eax + 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [eax + 8]
mov dword [ebp - 0x18], edx
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0x1c], ecx
mov edx, dword [eax + 0x10]
mov ecx, dword [ebp + 8]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x48], eax
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
mov dword [ebp - 0x44], 0x40
call fcn.00410640
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xd76aa478
mov dword [ebp - 0x48], 7
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xe8c7b756
mov dword [ebp - 0x48], 0xc
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 4
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
push ecx
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x242070db
mov dword [ebp - 0x48], 0x11
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 8
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov ebx, 0x16
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xc1bdceee
mov dword [ebp - 0x48], ebx
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0xc
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xf57c0faf
mov dword [ebp - 0x48], 7
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x10
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x4787c62a
mov dword [ebp - 0x48], 0xc
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x14
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xa8304613
mov dword [ebp - 0x48], 0x11
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x18
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfd469501
mov dword [ebp - 0x48], ebx
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x1c
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov dword [ebp - 0x4c], 0x698098d8
mov dword [ebp - 0x48], 7
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x20
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x8b44f7af
mov dword [ebp - 0x48], 0xc
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x24
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xffff5bb1
mov dword [ebp - 0x48], 0x11
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x28
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x895cd7be
mov dword [ebp - 0x48], ebx
call esi
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
push eax
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x14]
add ecx, 0x2c
lea eax, [ebp - 0x20]
push ecx
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x6b901122
mov dword [ebp - 0x48], 7
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x30
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfd987193
mov dword [ebp - 0x48], 0xc
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x34
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xa679438e
mov dword [ebp - 0x48], 0x11
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x38
push eax
lea edx, [ebp - 0x18]
push ecx
push edx
lea eax, [ebp - 0x14]
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x40666c
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x49b40821
mov dword [ebp - 0x48], ebx
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x3c
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xf61e2562
mov dword [ebp - 0x48], 5
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 4
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xc040b340
mov dword [ebp - 0x48], 9
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x18
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
lea eax, [ebp - 0x40]
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x265e5a51
mov dword [ebp - 0x48], 0xe
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x2c
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov ebx, 0x14
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xe9b6c7aa
mov dword [ebp - 0x48], ebx
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xd62f105d
mov dword [ebp - 0x48], 5
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, ebx
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov dword [ebp - 0x4c], 0x2441453
mov dword [ebp - 0x48], 9
mov edx, 0x406678
lea ecx, [ebp - 0x40]
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x28
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xd8a1e681
mov dword [ebp - 0x48], 0xe
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x3c
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xe7d3fbc8
mov dword [ebp - 0x48], ebx
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x10
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x21e1cde6
mov dword [ebp - 0x48], 5
call esi
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
mov eax, dword [ebp - 0x2c]
push edx
add eax, 0x24
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xc33707d6
mov dword [ebp - 0x48], 9
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x38
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xf4d50d87
mov dword [ebp - 0x48], 0xe
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0xc
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x455a14ed
mov dword [ebp - 0x48], ebx
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x20
push edx
lea ecx, [ebp - 0x14]
push eax
push ecx
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xa9e3e905
mov dword [ebp - 0x48], 5
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x34
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfcefa3f8
mov dword [ebp - 0x48], 9
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 8
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x676f02d9
mov dword [ebp - 0x48], 0xe
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x1c
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
push ecx
lea edx, [ebp - 0x40]
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406678
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x8d2a4c8a
mov dword [ebp - 0x48], ebx
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x30
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfffa3942
mov dword [ebp - 0x48], 4
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, ebx
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x8771f681
mov dword [ebp - 0x48], 0xb
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x20
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov dword [ebp - 0x4c], 0x6d9d6122
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x48], 0x10
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x2c
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov ebx, 0x17
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfde5380c
mov dword [ebp - 0x48], ebx
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x38
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xa4beea44
mov dword [ebp - 0x48], 4
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 4
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x4bdecfa9
mov dword [ebp - 0x48], 0xb
call esi
lea eax, [ebp - 0x4c]
mov edx, dword [ebp - 0x2c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x10
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xf6bb4b60
mov dword [ebp - 0x48], 0x10
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x1c
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xbebfbc70
mov dword [ebp - 0x48], ebx
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x28
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x289b7ec6
mov dword [ebp - 0x48], 4
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x34
push ecx
push edx
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xeaa127fa
mov dword [ebp - 0x48], 0xb
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xd4ef3085
mov dword [ebp - 0x48], 0x10
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0xc
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x4881d05
mov dword [ebp - 0x48], ebx
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x18
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
push edx
lea eax, [ebp - 0x18]
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xd9d4d039
mov dword [ebp - 0x48], 4
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x24
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xe6db99e5
mov dword [ebp - 0x48], 0xb
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x30
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x1fa27cf8
mov dword [ebp - 0x48], 0x10
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x3c
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406684
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xc4ac5665
mov dword [ebp - 0x48], ebx
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 8
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xf4292244
mov dword [ebp - 0x48], 6
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x432aff97
mov dword [ebp - 0x48], 0xa
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x1c
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xab9423a7
mov dword [ebp - 0x48], 0xf
call esi
lea edx, [ebp - 0x4c]
push edx
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x48]
add ecx, 0x38
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov ebx, 0x15
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfc93a039
mov dword [ebp - 0x48], ebx
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x14
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x655b59c3
mov dword [ebp - 0x48], 6
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x30
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x8f0ccc92
mov dword [ebp - 0x48], 0xa
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0xc
push eax
push ecx
lea edx, [ebp - 0x1c]
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xffeff47d
mov dword [ebp - 0x48], 0xf
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x28
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x85845dd1
mov dword [ebp - 0x48], ebx
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 4
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x6fa87e4f
mov dword [ebp - 0x48], 6
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x20
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
push ecx
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xfe2ce6e0
mov dword [ebp - 0x48], 0xa
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x3c
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xa3014314
mov dword [ebp - 0x48], 0xf
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x18
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x4e0811a1
mov dword [ebp - 0x48], ebx
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 0x34
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x1c]
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xf7537e82
mov dword [ebp - 0x48], 6
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x10
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x18]
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xbd3af235
mov dword [ebp - 0x48], 0xa
call esi
mov edx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
add edx, 0x2c
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x14]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0x2ad7d2bb
mov dword [ebp - 0x48], 0xf
call esi
mov ecx, dword [ebp - 0x2c]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x48]
push edx
add ecx, 8
push eax
lea edx, [ebp - 0x18]
push ecx
lea eax, [ebp - 0x14]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x1c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov edx, 0x406690
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x4c], 0xeb86d391
mov dword [ebp - 0x48], ebx
call esi
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
add eax, 0x24
push edx
lea ecx, [ebp - 0x14]
push eax
lea edx, [ebp - 0x20]
push ecx
lea eax, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x18]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call fcn.0040eb90
lea ecx, [ebp - 0x40]
call edi
mov ecx, dword [0x4130a0]
lea eax, [ebp - 0x14]
add ecx, 4
push eax
push ecx
call fcn.00410440
mov edx, dword [0x4130a0]
mov dword [edx + 4], eax
mov ecx, dword [0x4130a0]
lea eax, [ebp - 0x18]
add ecx, 8
push eax
push ecx
call fcn.00410440
mov edx, dword [0x4130a0]
mov dword [edx + 8], eax
mov ecx, dword [0x4130a0]
lea eax, [ebp - 0x1c]
add ecx, 0xc
push eax
push ecx
call fcn.00410440
mov edx, dword [0x4130a0]
mov dword [edx + 0xc], eax
mov ecx, dword [0x4130a0]
lea eax, [ebp - 0x20]
add ecx, 0x10
push eax
push ecx
call fcn.00410440
mov edx, dword [0x4130a0]
push 0x410425
mov dword [edx + 0x10], eax
jmp 0x410412
lea ecx, [ebp - 0x48]
lea eax, [ebp - 0x38]
push ecx
push 0
mov dword [ebp - 0x48], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret