; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: 48-377D-7114-93 SRI International, 1 computer, std, 11/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : 041B82A1AEF42FBBB382F86415D919D4 ; File Name : u:\work\041b82a1aef42fbbb382f86415d919d4_orig.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 400000 ; Section 1. (virtual address 00001000) ; Virtual size : 0000E934 ( 59700.) ; Section size in file : 0000F000 ( 61440.) ; Offset to raw data for section: 00001000 ; Flags 60000020: Text Executable Readable ; Alignment : default ; ; Imports from MSVBVM60.DLL ; include uni.inc ; see unicode subdir of ida for info on unicode .686p .mmx .model flat ; =========================================================================== ; Segment type: Externs ; _idata extrn __imp___vbaVarSub:dword ; DATA XREF: __vbaVarSubr extrn _CIcos:dword ; DATA XREF: .text:004013F6r extrn _adj_fptan:dword ; DATA XREF: .text:004013EAr extrn __imp___vbaVarMove:dword ; DATA XREF: __vbaVarMover extrn __imp___vbaFreeVar:dword ; DATA XREF: __vbaFreeVarr extrn __imp___vbaAryMove:dword ; DATA XREF: __vbaAryMover extrn __imp___vbaLenBstr:dword ; DATA XREF: __vbaLenBstrr extrn __imp___vbaStrVarMove:dword ; DATA XREF: __vbaStrVarMover extrn __imp___vbaFreeVarList:dword ; DATA XREF: __vbaFreeVarListr extrn __imp__adj_fdiv_m64:dword ; DATA XREF: _adj_fdiv_m64r extrn __imp_rtcAnsiValueBstr:dword ; DATA XREF: rtcAnsiValueBstrr extrn _adj_fprem1:dword ; DATA XREF: .text:004013E4r extrn __imp___vbaRecAnsiToUni:dword ; DATA XREF: __vbaRecAnsiToUnir extrn __imp___vbaStrCat:dword ; DATA XREF: __vbaStrCatr extrn __imp___vbaSetSystemError:dword ; DATA XREF: __vbaSetSystemErrorr extrn __imp___vbaRecDestruct:dword ; DATA XREF: __vbaRecDestructr extrn __imp___vbaVargVarCopy:dword ; DATA XREF: __vbaVargVarCopyr extrn _adj_fdiv_m32:dword ; DATA XREF: .text:004013A8r extrn __imp___vbaAryVar:dword ; DATA XREF: __vbaAryVarr extrn __imp___vbaAryDestruct:dword ; DATA XREF: __vbaAryDestructr extrn __imp___vbaOnError:dword ; DATA XREF: __vbaOnErrorr extrn _adj_fdiv_m16i:dword ; DATA XREF: .text:004013A2r extrn _adj_fdivr_m16i:dword ; DATA XREF: .text:004013C0r extrn _CIsin:dword ; DATA XREF: .text:00401408r extrn __imp_rtcMidCharBstr:dword ; DATA XREF: rtcMidCharBstrr extrn __imp___vbaErase:dword ; DATA XREF: __vbaEraser extrn __imp_rtcMidCharVar:dword ; DATA XREF: rtcMidCharVarr extrn __imp___vbaVarZero:dword ; DATA XREF: __vbaVarZeror extrn __imp___vbaChkstk:dword ; DATA XREF: __vbaChkstkr extrn __imp_rtcSpaceVar:dword ; DATA XREF: rtcSpaceVarr extrn __imp___vbaFileClose:dword ; DATA XREF: __vbaFileCloser extrn __imp___vbaGenerateBoundsError:dword ; DATA XREF: __vbaGenerateBoundsErrorr extrn __imp___vbaStrCmp:dword ; DATA XREF: __vbaStrCmpr extrn __imp___vbaAryConstruct2:dword ; DATA XREF: __vbaAryConstruct2r extrn __imp___vbaPutOwner3:dword ; DATA XREF: __vbaPutOwner3r extrn __imp_rtcIsNumeric:dword ; DATA XREF: rtcIsNumericr extrn __imp___vbaI2I4:dword ; DATA XREF: __vbaI2I4r extrn __imp_DllFunctionCall:dword ; DATA XREF: DllFunctionCallr extrn __imp_rtcVarType:dword ; DATA XREF: rtcVarTyper extrn __imp___vbaLbound:dword ; DATA XREF: __vbaLboundr extrn __imp___vbaRedimPreserve:dword ; DATA XREF: __vbaRedimPreserver extrn _adj_fpatan:dword ; DATA XREF: .text:004013D8r extrn __imp___vbaFixstrConstruct:dword ; DATA XREF: __vbaFixstrConstructr extrn __imp___vbaRedim:dword ; DATA XREF: __vbaRedimr extrn __imp___vbaRecUniToAnsi:dword ; DATA XREF: __vbaRecUniToAnsir extrn __imp___vbaUI1I2:dword ; DATA XREF: __vbaUI1I2r extrn _CIsqrt:dword ; DATA XREF: .text:0040140Er extrn __imp___vbaExceptHandler:dword ; DATA XREF: __vbaExceptHandlerr extrn __imp___vbaStrToUnicode:dword ; DATA XREF: __vbaStrToUnicoder extrn _adj_fprem:dword ; DATA XREF: .text:004013DEr extrn _adj_fdivr_m64:dword ; DATA XREF: .text:004013D2r extrn __imp_rtcVarBstrFromAnsi:dword ; DATA XREF: rtcVarBstrFromAnsir extrn __vbaFPException:dword ; DATA XREF: sub_40D806:loc_40139Cr extrn __imp_rtcStrConvVar2:dword ; DATA XREF: rtcStrConvVar2r extrn __imp___vbaInStrVar:dword ; DATA XREF: __vbaInStrVarr extrn __imp___vbaUbound:dword ; DATA XREF: __vbaUboundr extrn __vbaGetOwner3:dword ; DATA XREF: .text:00401462r extrn __imp___vbaVarCat:dword ; DATA XREF: __vbaVarCatr extrn __imp_VarPtr:dword ; DATA XREF: VarPtrr extrn _CIlog:dword ; DATA XREF: .text:00401402r extrn __imp___vbaErrorOverflow:dword ; DATA XREF: __vbaErrorOverflowr extrn __imp___vbaFileOpen:dword ; DATA XREF: __vbaFileOpenr extrn __imp___vbaVar2Vec:dword ; DATA XREF: __vbaVar2Vecr extrn __imp_rtcFreeFile:dword ; DATA XREF: rtcFreeFiler extrn rtcFileLength:dword ; DATA XREF: .text:00401468r extrn _adj_fdiv_m32i:dword ; DATA XREF: .text:004013AEr extrn _adj_fdivr_m32i:dword ; DATA XREF: .text:004013CCr extrn __imp___vbaStrCopy:dword ; DATA XREF: __vbaStrCopyr extrn __imp___vbaI4Str:dword ; DATA XREF: __vbaI4Strr extrn __imp_rtcImmediateIf:dword ; DATA XREF: rtcImmediateIfr extrn __imp___vbaFreeStrList:dword ; DATA XREF: __vbaFreeStrListr extrn __imp___vbaDerefAry1:dword ; DATA XREF: __vbaDerefAry1r extrn _adj_fdivr_m32:dword ; DATA XREF: .text:004013C6r extrn _adj_fdiv_r:dword ; DATA XREF: .text:004013BAr extrn __imp_ThunRTMain:dword ; DATA XREF: ThunRTMainr extrn __imp___vbaI4Var:dword ; DATA XREF: __vbaI4Varr extrn __imp___vbaVarCmpEq:dword ; DATA XREF: __vbaVarCmpEqr extrn __imp___vbaAryLock:dword ; DATA XREF: __vbaAryLockr extrn __imp___vbaStrToAnsi:dword ; DATA XREF: __vbaStrToAnsir extrn __imp___vbaVarDup:dword ; DATA XREF: __vbaVarDupr extrn __imp___vbaAryVarVarg:dword ; DATA XREF: __vbaAryVarVargr extrn __imp___vbaFpI4:dword ; DATA XREF: __vbaFpI4r extrn __imp___vbaVarCopy:dword ; DATA XREF: __vbaVarCopyr extrn __imp_rtcLeftCharVar:dword ; DATA XREF: rtcLeftCharVarr extrn _CIatan:dword ; DATA XREF: .text:004013F0r extrn __imp___vbaAryCopy:dword ; DATA XREF: __vbaAryCopyr extrn __imp___vbaStrMove:dword ; DATA XREF: __vbaStrMover extrn __imp___vbaStrVarCopy:dword ; DATA XREF: __vbaStrVarCopyr extrn __imp_rtcRightCharVar:dword ; DATA XREF: rtcRightCharVarr extrn _allmul:dword ; DATA XREF: .text:0040141Ar extrn _CItan:dword ; DATA XREF: .text:00401414r extrn __imp___vbaAryUnlock:dword ; DATA XREF: __vbaAryUnlockr extrn _CIexp:dword ; DATA XREF: .text:004013FCr extrn __imp___vbaFreeStr:dword ; DATA XREF: __vbaFreeStrr extrn __imp___vbaI4ErrVar:dword ; DATA XREF: __vbaI4ErrVarr ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Execute _text segment para public 'CODE' use32 assume cs:_text ;org 40117Ch assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing dd 2 dup(0) dd 4A3C7F3Eh, 0 dd 2, 26h, 0 dd 31000h, 0 dword_4011A0 dd 40006h, 0 dd offset loc_408E38 dd offset loc_408E2F dd 0C0006h, 0 ; DATA XREF: sub_408E65+25o dd offset loc_409349 dd offset loc_40930D dd 40006h, 0 ; DATA XREF: sub_409384+21o dd offset loc_4095CC dd offset loc_4095C2 dword_4011D0 dd 40006h, 0 dd offset loc_40969B dd offset loc_409691 dd 40002h, 0 ; DATA XREF: sub_4096BA+21o dd offset loc_40974B align 10h dword_4011F0 dd 40006h, 0 dd offset loc_40C08D dd offset loc_40C017 dword_401200 dd 140026h, 0 dd offset loc_40C713 dd offset loc_40C6F4 dd 0 dd offset dword_401218 dword_401218 dd 22h, 40C13Ch, 40C143h, 40C151h, 40C187h, 40C1D0h, 40C219h ; DATA XREF: .text:00401214o dd 40C262h, 40C2A4h, 40C2B8h, 40C2C5h, 2 dup(40C2EFh) dd 40C334h, 40C3A3h, 40C3EFh, 40C43Bh, 40C48Eh, 40C4A2h dd 40C4B6h, 40C4D0h, 40C514h, 40C533h, 40C535h, 2 dup(40C55Fh) dd 40C5C3h, 2 dup(40C613h), 40C61Fh, 40C664h, 40C6DFh dd 2 dup(40C6E1h), 40C6EDh, 0 dword_4012A8 dd 40006h, 0 dd offset loc_40C9E5 dd offset loc_40C9A7 dd 8000Eh, 0 ; DATA XREF: sub_40CA0D+25o dd offset loc_40CCC7 dd offset loc_40CC7B dd 8000Eh, 0 ; DATA XREF: sub_40CCED+25o dd offset loc_40D172 dd offset loc_40D10E dword_4012D8 dd 40006h, 0 dd offset loc_40D234 dd offset loc_40D22B dd 8000Eh, 0 ; DATA XREF: sub_40D252+25o dd offset loc_40D57C dd offset loc_40D518 dd 8000Ch, 2 dup(0) ; DATA XREF: sub_40D5AE+25o dd offset loc_40D794 dbl_401308 dq 2.0 ; DATA XREF: sub_40D806+80r ; sub_40D806+8Er ... dword_401310 dd 8000Eh, 0 dd offset loc_40DA58 dd offset loc_40DA28 dd 8000Eh, 0 ; DATA XREF: sub_40DA8A+22o dd offset loc_40DB8A dd offset loc_40DB56 dword_401330 dd 40004h, 2 dup(0) dd offset loc_40DFF5 dword_401340 dd 8000Ch, 2 dup(0) dd offset loc_40E168 dd 40002h, 0 ; DATA XREF: sub_40E194+21o dd offset loc_40E253 align 10h dword_401360 dd 4000Ah, 0 dd offset loc_40E2FA dd offset loc_40E2F1 dword_401370 dd 8000Eh, 0 dd offset loc_40ECB3 dd offset loc_40EC57 dd 8000Eh, 0 ; DATA XREF: .text:0040ED05o dd offset loc_40F216 dd offset loc_40F1B9 ; [00000006 BYTES: COLLAPSED FUNCTION __vbaChkstk. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaExceptHandler. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_40D806 loc_40139C: ; CODE XREF: sub_40D806:loc_40DA80j jmp ds:__vbaFPException ; END OF FUNCTION CHUNK FOR sub_40D806 ; --------------------------------------------------------------------------- jmp ds:_adj_fdiv_m16i ; --------------------------------------------------------------------------- jmp ds:_adj_fdiv_m32 ; --------------------------------------------------------------------------- jmp ds:_adj_fdiv_m32i ; [00000006 BYTES: COLLAPSED FUNCTION _adj_fdiv_m64. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp ds:_adj_fdiv_r ; --------------------------------------------------------------------------- jmp ds:_adj_fdivr_m16i ; --------------------------------------------------------------------------- jmp ds:_adj_fdivr_m32 ; --------------------------------------------------------------------------- jmp ds:_adj_fdivr_m32i ; --------------------------------------------------------------------------- jmp ds:_adj_fdivr_m64 ; --------------------------------------------------------------------------- jmp ds:_adj_fpatan ; --------------------------------------------------------------------------- jmp ds:_adj_fprem ; --------------------------------------------------------------------------- jmp ds:_adj_fprem1 ; --------------------------------------------------------------------------- jmp ds:_adj_fptan ; --------------------------------------------------------------------------- jmp ds:_CIatan ; --------------------------------------------------------------------------- jmp ds:_CIcos ; --------------------------------------------------------------------------- jmp ds:_CIexp ; --------------------------------------------------------------------------- jmp ds:_CIlog ; --------------------------------------------------------------------------- jmp ds:_CIsin ; --------------------------------------------------------------------------- jmp ds:_CIsqrt ; --------------------------------------------------------------------------- jmp ds:_CItan ; --------------------------------------------------------------------------- jmp ds:_allmul ; [00000006 BYTES: COLLAPSED FUNCTION DllFunctionCall. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarCmpEq. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarDup. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcImmediateIf. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcRightCharVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaPutOwner3. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaInStrVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarSub. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaI4Var. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcLeftCharVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFileClose. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp ds:__vbaGetOwner3 ; --------------------------------------------------------------------------- jmp ds:rtcFileLength ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFileOpen. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcFreeFile. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarCopy. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrVarMove. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrCat. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaLenBstr. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaI4Str. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaRecDestruct. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaRecAnsiToUni. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaRecUniToAnsi. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarZero. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION VarPtr. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrCmp. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFreeStrList. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaErase. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrMove. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrCopy. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaGenerateBoundsError. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryConstruct2. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaUI1I2. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaI4ErrVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrToUnicode. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaSetSystemError. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrToAnsi. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarMove. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFreeVarList. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcVarBstrFromAnsi. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcStrConvVar2. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVarCat. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVar2Vec. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryMove. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaRedimPreserve. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryUnlock. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryLock. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcVarType. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaI2I4. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaOnError. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaRedim. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaErrorOverflow. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFreeStr. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryDestruct. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaDerefAry1. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaVargVarCopy. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaLbound. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaUbound. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFreeVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryVarVarg. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaAryCopy. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFixstrConstruct. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcSpaceVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcIsNumeric. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaStrVarCopy. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcMidCharBstr. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcAnsiValueBstr. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION rtcMidCharVar. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION __vbaFpI4. PRESS KEYPAD "+" TO EXPAND] ; [00000006 BYTES: COLLAPSED FUNCTION ThunRTMain. PRESS KEYPAD "+" TO EXPAND] align 4 public start start: push offset dword_4016C0 call ThunRTMain ; --------------------------------------------------------------------------- dw 0 dd 0 dd 30h, 40h, 0 dd 6D3A3FABh, 450174F0h, 0F278AC93h, 0AC993FD1h, 0 dd 10000h, 6F540000h, 65646F43h, 786D5A66h, 4C535756h dd 525552h, 200A0D29h, 0 dword_40161C dd 7, 401CB8h, 7, 401C70h, 7, 401C1Ch, 7, 401BD4h, 10001h ; DATA XREF: .text:00401990o dd 401998h, 0 dd 2 dup(0FFFFFFFFh), 0 dd offset off_401A1C dd offset dword_410024 align 10h dd 76AFA0h, 3 dup(0) dd offset dword_401674 dword_401674 dd 1, 401998h, 0 ; .text:off_4019ECo dd 2 dup(0FFFFFFFFh), 0 dd offset off_4019EC dd offset dword_410008 dd 4, 4016B0h, 200001h, 0 dd 79A0DCh, 4016ACh, 401AD4h, 6C0061h, 54005Ch, 6D0065h dd 5C0070h dword_4016C0 dd 21354256h, 2A1FF0h, 3 dup(0) dd 7Eh, 2 dup(0) dd 0A0000h, 409h, 0 dd offset loc_40C0FE dd offset dword_40175C dd 30F000h, 0FFFFFF00h, 8, 1, 0 dd 0E9h, 2 dup(40161Ch), 4015D8h, 78h, 84h, 8Eh, 8Fh, 4 dup(0) aKyfbiluyhsj db 'KYFbILUYhSJ',0 aAohfoeelw db 'AOhFoEeLW',0 dw 6600h aZmxvwslrur db 'ZmxVWSLRUR',0 align 4 dword_40175C dd 1F4h, 401998h, 0 dd offset dword_408D60 dd offset dword_40F260 dd 3D4h, 410008h, 401396h, 410000h, 5C002Ah, 430041h, 5C003Ah dd 420056h, 41005Ch, 68004Fh, 6F0046h, 650045h, 57004Ch dd 76002Eh, 700062h, 79h dup(0) dd offset dword_40161C dword_401994 dd 4, 0 dd offset dword_4100B4 dd offset dword_408D2C dd 0FFFFFFFFh, 0 dd offset dword_4100A4 dd 0F91C442Eh, 43605B0Eh, 27AB8C82h, 0C00190h, 2000Ah dd 20002h, 4019ECh, 3 dup(0) dd offset aFzmxvwslrur ; "fZmxVWSLRUR" dd 2 dup(409h), 0 dd 2 off_4019EC dd offset dword_401674 ; DATA XREF: .text:0040168Co dd 0FFFFFFFFh, 401CECh, 0 dd offset dword_410010 dd 0 dd offset aYbxryinpewcmke ; "yBxRYinPEWCMke" dd 15h, 0 dd 0FFFFh, 18001h, 0 off_401A1C dd offset dword_40161C+20h ; DATA XREF: .text:00401654o dd 0FFFFFFFFh, 401D8Ch, 408D08h, 41002Ch, 4100A0h, 401A5Ch dd 0Ch, 0 dd 6Ch, 18001h, 0 aYbxryinpewcmke db 'yBxRYinPEWCMke',0 ; DATA XREF: .text:00401A04o align 4 aAmcpgtrfezzckg db 'AMCPgtRfezZCKg',0 align 4 aFzmxvwslrur db 'fZmxVWSLRUR',0 ; DATA XREF: .text:004019D8o dd 22C0016h, 10000h, 34040128h, 200A0024h, 244265h, 104h dd 4280020h, 20000h, 34040224h, 200A0020h, 204265h, 2200100h dd 200Ah, 1040120h, 70000Ch, 0 dd 4040070h, 0CC000Ch, 0 db 0CCh align 2 dw 404h dd 10000Ch, 0 dd 4040010h dword_401AD4 dd 440018h, 30000h, 2C040044h, 10004h, 10008h, 1000Ch ; DATA XREF: sub_4097F2+28E5o dd 40000Ch, 0 dd 4040040h, 14000Ch, 0 dd 4040014h, 8000Ch, 0 dd 4040008h, 0E0000Ch, 0 dd 40400E0h, 0F8000Ch, 0 dd 40400F8h a0: ; DATA XREF: sub_4097F2+2015o unicode 0, <^0>,0 db 0Ah,0 db '(',0 dw 3404h dd 200A0000h, 4265h, 100008h, 4200Bh, 140008h, 4200Bh dd 18000Ch, 4200Bh, 1C0010h, 4200Bh, 200014h, 4200Bh, 240018h dd 4200Bh, 28001Ch, 2200Bh, 2A0020h, 2200Bh, 2C0022h, 4200Bh dd 24h, 0C000Ch, 0 dd 404000Ch dword_401B94 dd 40016h, 10000h, 0C040004h, 1050000h, 4265h, 2 dup(0) ; DATA XREF: sub_408E65+292o ; sub_408E65+4F0o dd 9 aKernel32 db 'kernel32',0 ; DATA XREF: .text:off_401BD4o ; .text:off_401C1Co ... align 10h dword_401BC0 dd 0Eh, 4D6C7452h, 4D65766Fh, 726F6D65h, 79hoff_401BD4 dd offset aKernel32 ; DATA XREF: sub_401BEC:loc_401BF7o ; "kernel32" dd offset dword_401BC0+4 dd 40000h, 4103ACh, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_401BEC proc near ; CODE XREF: sub_4096BA+53p ; sub_4097F2+2021p mov eax, dword_4103B4 or eax, eax jz short loc_401BF7 jmp eax ; --------------------------------------------------------------------------- loc_401BF7: ; CODE XREF: sub_401BEC+7j push offset off_401BD4 mov eax, offset DllFunctionCall call eax ; DllFunctionCall jmp eax sub_401BEC endp ; --------------------------------------------------------------------------- align 4 dword_401C08 dd 0Dh, 64616F4Ch, 7262694Ch, 41797261h, 0off_401C1C dd offset aKernel32 ; DATA XREF: sub_401C34:loc_401C3Fo ; "kernel32" dd offset dword_401C08+4 dd 40000h, 4103B8h, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_401C34 proc near ; CODE XREF: sub_408E65+C4p mov eax, dword_4103C0 or eax, eax jz short loc_401C3F jmp eax ; --------------------------------------------------------------------------- loc_401C3F: ; CODE XREF: sub_401C34+7j push offset off_401C1C mov eax, offset DllFunctionCall call eax ; DllFunctionCall jmp eax sub_401C34 endp ; --------------------------------------------------------------------------- align 10h dd 7 aUser32 db 'user32',0 ; DATA XREF: .text:off_401C70o align 4 dword_401C5C dd 10h, 6C6C6143h, 646E6957h, 7250776Fh, 41636Fh ; DATA XREF: .text:00401C74o off_401C70 dd offset aUser32 ; DATA XREF: sub_401C88:loc_401C93o ; "user32" dd offset dword_401C5C+4 dd 40000h, 4103C4h, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_401C88 proc near ; CODE XREF: sub_408E65+3CDp mov eax, dword_4103CC or eax, eax jz short loc_401C93 jmp eax ; --------------------------------------------------------------------------- loc_401C93: ; CODE XREF: sub_401C88+7j push offset off_401C70 mov eax, offset DllFunctionCall call eax ; DllFunctionCall jmp eax sub_401C88 endp ; --------------------------------------------------------------------------- align 4 dword_401CA4 dd 0Fh, 50746547h, 41636F72h, 65726464h, 7373hoff_401CB8 dd offset aKernel32 ; DATA XREF: sub_401CD0:loc_401CDBo ; "kernel32" dd offset dword_401CA4+4 dd 40000h, 4103D0h, 2 dup(0) ; =============== S U B R O U T I N E ======================================= sub_401CD0 proc near ; CODE XREF: sub_408E65+108p mov eax, dword_4103D8 or eax, eax jz short loc_401CDB jmp eax ; --------------------------------------------------------------------------- loc_401CDB: ; CODE XREF: sub_401CD0+7j push offset off_401CB8 mov eax, offset DllFunctionCall call eax ; DllFunctionCall jmp eax sub_401CD0 endp ; --------------------------------------------------------------------------- align 4 dd 140020h, 20000h, 0 dd 1050004h, 4265h, 80000h, 40105h, 8, 18h dword_401D10 dd 920001h, 1, 2 dup(0) dd 4, 0 dd 30h a748b0240d409c7: ; DATA XREF: sub_4097F2+180o unicode 0, <748B0240D409C77A9163A0C2>,0 align 10h dd 18h a66udgwbrev3g: ; DATA XREF: sub_4097F2+170o unicode 0, <66UDGwBReV3g>,0 align 10h dd 10000Ch, 0 dd 4020010h, 740098h, 30003h, 0 dd 50004h, 14010015h, 8000000h, 4400001h, 920001h, 1, 2 dup(0) dd 100h, 0 dd 20011h, 50028h, 282h, 4400000h, 2C2FFFFh, 920002h, 1 dd 2 dup(0) dd 100h, 0 dd 100h, 0 dd 4400011h, 5004Ch, 35Eh, 760000h, 0FFFFFFFFh, 920001h dd 1, 2 dup(0) dd 100h, 0 dd 760011h, 34h a236e6492a77bf3: ; DATA XREF: sub_4097F2+1C0o unicode 0, <236E6492A77BF3EE435FA36725>,0 align 10h dd 1Eh a78s1676sg6x9w5: ; DATA XREF: sub_4097F2+1B0o unicode 0, <78s1676SG6X9W5d>,0 a0_0: unicode 0, <0>,0 aCda5d517da6a1c: ; DATA XREF: sub_4097F2+389o unicode 0, <CDA5D517DA6A1C8F11B46F05>,0 align 4 dd 14h aBbww6zclp9: ; DATA XREF: sub_4097F2+379o unicode 0, <bbwW6ZcLp9>,0 align 4 a4: unicode 0, <4>,0 a784e3efc38428b: ; DATA XREF: sub_4097F2+3C9o unicode 0, <784E3EFC38428B9F22E7301E7B>,0 align 4 dd 16h aOqnguece747: ; DATA XREF: sub_4097F2+3B9o unicode 0, <oQNGueCE747>,0 dd 0 dword_401F34 dd 0 ; sub_40C7E9+2Fo ... dd 30h off_401F3C dd offset byte_410043 ; DATA XREF: sub_4097F2+63Co aB10f1207ce5615: unicode 0, <B10F1207CE56157437A63B>,0 align 10h dd 14h aKswmrhtlxw: ; DATA XREF: sub_4097F2+614o unicode 0, <kSWmRhtlXw>,0 align 4 a8: unicode 0, <8>,0 a4c3798da46c9a6: ; DATA XREF: sub_4097F2+67Co unicode 0, <4C3798DA46C9A63344C70F8550AC>,0 align 4 dd 12h aAcrkqaxyf: ; DATA XREF: sub_4097F2+66Co unicode 0, <acRkQaxYF>,0 a0_1: unicode 0, <0>,0 aBc1e2a7351a4ff: ; DATA XREF: sub_4097F2+9A9o unicode 0, <BC1E2A7351A4FF4B5E587BBB>,0 align 4 dd 18h a9iul2xr64mhp: ; DATA XREF: sub_4097F2:loc_40A181o unicode 0, <9IUL2Xr64MHP>,0 align 4 a@: unicode 0, <@>,0 a0ed63105fc600a: ; DATA XREF: sub_4097F2+9E9o unicode 0, <0ED63105FC600AA7E11ED2E2F2DC8895>,0 align 4 dd 1Ch a5ixp5wm4te34zs: ; DATA XREF: sub_4097F2+9D9o unicode 0, <5IXp5wM4TE34zs>,0 align 4 a0_2: unicode 0, <0>,0 off_4020AC dd offset byte_410036 ; DATA XREF: sub_4097F2+B5Do dd offset byte_410037 a058b4c353e2b10: unicode 0, <058B4C353E2B10743AA1>,0 align 10h dd 1Ah a8tb2vaqctgf9z: ; DATA XREF: sub_4097F2+B4Do unicode 0, <8TB2vAQcTGf9Z>,0 aD: unicode 0, <D>,0 aB83d86b0a4b113: ; DATA XREF: sub_4097F2+B9Do unicode 0, <B83D86B0A4B113EA5353200A33EA25FAB2>,0 align 4 dd 10h aQ3p9wqf8: ; DATA XREF: sub_4097F2+B8Do unicode 0, <q3p9Wqf8>,0 align 4 unicode 0, <$>,0 aC096280f9398b4: ; DATA XREF: sub_4097F2+D93o unicode 0, <C096280F9398B458ED>,0 align 10h dd 14h a9d0ogazuvx: ; DATA XREF: sub_4097F2+D83o unicode 0, <9D0oGazuVX>,0 align 4 aP: unicode 0, <P>,0 a6d0aa1bd28dff1: ; DATA XREF: sub_4097F2+DD3o unicode 0, <6D0AA1BD28DFF131ED212889736DAACBC1669EC8>,0 align 4 dd 18h aQno1otd7m94i: ; DATA XREF: sub_4097F2+DC3o unicode 0, <QNo1otD7m94I>,0 align 4 a0_3: unicode 0, <0>,0 aF2309ece7696d9: ; DATA XREF: sub_4097F2+F45o unicode 0, <F2309ECE7696D968F48E5C60>,0 align 4 dd 14h aCj2mjrv4pg: ; DATA XREF: sub_4097F2+F35o unicode 0, <cJ2MJRV4Pg>,0 align 4 a8_0: unicode 0, <8>,0 aBb31c3998c9a41: ; DATA XREF: sub_4097F2+F85o unicode 0, <BB31C3998C9A414AE646EA6B8813>,0 align 4 dd 18h a3dr0zbqipyw8: ; DATA XREF: sub_4097F2+F75o unicode 0, <3dR0zbqiPyw8>,0 align 4 a0_4: unicode 0, <0>,0 a4203d6d59fddf5: ; DATA XREF: sub_4097F2+12ABo unicode 0, <4203D6D59FDDF56EC94F76CC>,0 align 10h dd 12h aL9otr1c6p: ; DATA XREF: sub_4097F2+1291o unicode 0, <l9OTR1C6p>,0 a@_0: unicode 0, <@>,0 a4233a8a68c2a47: ; DATA XREF: sub_4097F2+12EBo unicode 0, <4233A8A68C2A47C2FC102FB30E20182A>,0 align 10h dd 1Ch aHagq55v57vs4sj: ; DATA XREF: sub_4097F2+12DBo unicode 0, <hagq55V57vS4SJ>,0 align 4 a0_5: unicode 0, <0>,0 a7d6917e7d01217: ; DATA XREF: sub_4097F2+145Fo unicode 0, <7D6917E7D012172F3148882A>,0 align 4 dd 1Ah aQl7o8shlufpbs: ; DATA XREF: sub_4097F2+144Fo unicode 0, <Ql7o8SHLuFpbs>,0 aD_0: unicode 0, <D>,0 off_4023F0 dd offset byte_410045 ; DATA XREF: sub_4097F2+149Fo a2d9b58d611f876: unicode 0, <2D9B58D611F876C59C91F66E5B842AE2>,0 align 4 dd 10h aJu9053o9: ; DATA XREF: sub_4097F2+148Fo unicode 0, <jU9053o9>,0 align 10h unicode 0, <$>,0 a23d7effdb010ac: ; DATA XREF: sub_4097F2+1689o unicode 0, <23D7EFFDB010AC5299>,0 align 4 unicode 0, < >,0 a3lu28j05lzy7t8: ; DATA XREF: sub_4097F2+1679o unicode 0, <3lU28J05Lzy7T8Ea>,0 align 4 aP_0: unicode 0, <P>,0 aBfb598a9f4593e: ; DATA XREF: sub_4097F2+16C9o unicode 0, <BFB598A9F4593E69704C8F680D4B5B08AE69C3C4>,0 align 4 dd 18h aGvnl8kkrchi9: ; DATA XREF: sub_4097F2+16B9o unicode 0, <GvNL8kKrcHI9>,0 align 4 a0_6: unicode 0, <0>,0 aAe30e614b1c8fe: ; DATA XREF: sub_4097F2+183Bo unicode 0, <AE30E614B1C8FE51FE66CD45>,0 align 4 dd 14h a1loxb3vm6p: ; DATA XREF: sub_4097F2:loc_40B01Do unicode 0, <1LoxB3vm6P>,0 align 10h a8_1: unicode 0, <8>,0 a92929c96d0df8b: ; DATA XREF: sub_4097F2+187Bo unicode 0, <92929C96D0DF8BEA994F86F36A6B>,0 align 10h dd 10h aP0yzvoux: ; DATA XREF: sub_4097F2+186Bo unicode 0, <P0yzvoux>,0 align 4 a0_7: unicode 0, <0>,0 a70f95929ec7810: ; DATA XREF: sub_4097F2+1D47o unicode 0, <70F95929EC78109CCEC1B6B9>,0 align 10h dd 1Ah a90r8my61b5ojq: ; DATA XREF: sub_4097F2:loc_40B529o unicode 0, <90r8My61B5ojq>,0 unicode 0, <H>,0 a2dd20b24a4f87a: ; DATA XREF: sub_4097F2+1D87o unicode 0, <2DD20B24A4F87A5A90D61A02F05DEE8876C0>,0 align 10h unicode 0, < >,0 aL5l4b46u6kxi23: ; DATA XREF: sub_4097F2+1D77o unicode 0, <l5l4B46u6kxI23xp>,0 align 4 a0_8: unicode 0, <0>,0 a698e1f9adee36a: ; DATA XREF: sub_4097F2+205Bo unicode 0, <698E1F9ADEE36A15EE162CFF>,0 align 10h dd 18h a7xgj7euaylj8: ; DATA XREF: sub_4097F2+204Bo unicode 0, <7XGJ7EuaYLj8>,0 align 10h unicode 0, <H>,0 aFfdee7b15a6722: ; DATA XREF: sub_4097F2+209Bo unicode 0, <FFDEE7B15A672287D21FFAF10290BBD9C90F>,0 align 10h unicode 0, < >,0 a952587vcua0z7z: ; DATA XREF: sub_4097F2+208Bo unicode 0, <952587VcUA0Z7zq5>,0 align 4 a0_9: unicode 0, <0>,0 aF05010ce27d129: ; DATA XREF: sub_4097F2+22DDo unicode 0, <F05010CE27D129751F94D931>,0 align 10h unicode 0, < >,0 aSz8czos0mw3ztl: ; DATA XREF: sub_4097F2:loc_40BABFo unicode 0, <sZ8Czos0mw3ztlFE>,0 align 4 unicode 0, <H>,0 aB87d22bf4ee52c: ; DATA XREF: sub_4097F2+231Do unicode 0, <B87D22BF4EE52C87A326A9593645E0300A2D>,0 align 4 dd 14h a8p8fcw4cbk: ; DATA XREF: sub_4097F2+230Do unicode 0, <8P8FCw4CbK>,0 align 4 a0_10: unicode 0, <0>,0 aFfc119ac0690c0: ; DATA XREF: sub_4097F2+2527o unicode 0, <FFC119AC0690C02D3DE1CECD>,0 align 4 dd 10h aRe1qpk4n: ; DATA XREF: sub_4097F2+250Bo unicode 0, <re1QPk4n>,0 align 4 a@_1: unicode 0, <@>,0 aFf7fc63c75ef87: ; DATA XREF: sub_4097F2+2567o unicode 0, <FF7FC63C75EF870384E5BCFA2B9BACFC>,0 align 4 dd 1Eh a219m11mb0it99o: ; DATA XREF: sub_4097F2+2557o unicode 0, <219M11mB0IT99o2>,0 a0_11: unicode 0, <0>,0 a2f5e1f435a5c54: ; DATA XREF: sub_4097F2+26BFo unicode 0, <2F5E1F435A5C54D8C195BCEB>,0 align 4 dd 18h aV92lu28b9m1y: ; DATA XREF: sub_4097F2+26AFo unicode 0, <v92lU28B9m1y>,0 align 4 a0_12: unicode 0, <0>,0 aD1d880b3c75824: ; DATA XREF: sub_4097F2+26FFo unicode 0, <D1D880B3C758248D52E299B2>,0 align 10h dd 14h a329121fufk: ; DATA XREF: sub_4097F2+26EFo unicode 0, <329121FuFK>,0 align 4 unicode 0, < >,0 a1b61374817aace: ; DATA XREF: sub_4097F2+1A7Fo unicode 0, <1B61374817AACE4C>,0 align 4 dd 1Eh a3amlz9t0w1034c: ; DATA XREF: sub_4097F2+1A6Fo unicode 0, <3aMlZ9T0w1034c2>,0 dd 14h, 770038h, 350031h, 370037h, 63004Ah, 730069h, 2 dup(0) dd 2Ch a89c0cc81f97763: ; DATA XREF: sub_4097F2+1ABFo unicode 0, <89C0CC81F9776335DD1FEF>,0 align 4 dd 10h a1au3sqsh: ; DATA XREF: sub_4097F2+1AAFo unicode 0, <1aU3sQSH>,0 align 4 unicode 0, < >,0 a008531098ea886: ; DATA XREF: sub_4097F2+1BE3o unicode 0, <008531098EA8863B>,0 align 4 dd 10h a8ehqudo1: ; DATA XREF: sub_4097F2+1BD3o unicode 0, <8EhquDo1>,0 align 4 unicode 0, <,>,0 a4c92994641507d: ; DATA XREF: sub_4097F2+1C23o unicode 0, <4C92994641507DBED217B9>,0 align 4 dd 1Eh aSl93hjyrxhef4e: ; DATA XREF: sub_4097F2+1C13o unicode 0, <sL93HJYRXHEf4ek>,0 dd 18h dword_402AF0 dd 920001h, 1, 2 dup(0) dd 401h, 0 dd 20h aA9319c49294983: ; DATA XREF: sub_40C7E9+BDo unicode 0, <A9319C49294983B6>,0 align 10h dd 18h a9pcbooj6m7qf: ; DATA XREF: sub_40C7E9+B0o unicode 0, <9pcbOOJ6m7QF>,0 align 10h unicode 0, <,>,0 a8e70488bee9000: ; DATA XREF: sub_40C7E9+EEo unicode 0, <8E70488BEE9000E648D006>,0 align 4 dd 12h aK1ik2ahs8: ; DATA XREF: sub_40C7E9+E1o unicode 0, <k1Ik2ahS8>,0 dd 1Ch aD13acee44f29b5: ; DATA XREF: sub_40CA0D+B5o unicode 0, <D13ACEE44F29B5>,0 align 10h dd 1Eh a6rmu92js18g943: ; DATA XREF: sub_40CA0D+A8o unicode 0, <6rMu92jS18G943x>,0 a4_0: unicode 0, <4>,0 a534c7f64368da1: ; DATA XREF: sub_40CA0D+E6o unicode 0, <534C7F64368DA1C7EAD5E4A022>,0 align 10h dd 18h a5181n4etlj7i: ; DATA XREF: sub_40CA0D+D9o unicode 0, <5181N4EtLJ7I>,0 align 10h dd 16h dword_402C44 dd 4, 1, 0 dd 1730000h, 0FFFFFFFFh, 1, 20h a62cb79d3b18dc6: ; DATA XREF: sub_40CCED+9Co unicode 0, <62CB79D3B18DC608>,0 align 4 dd 12h aS6llzg0jm: ; DATA XREF: sub_40CCED+8Fo unicode 0, <s6LlzG0Jm>,0 a@_2: unicode 0, <@>,0 a7b0af891653b6e: ; DATA XREF: sub_40CCED+CDo unicode 0, <7B0AF891653B6EFA12A7FE509A9924B5>,0 align 4 dd 14h a16j2qgan9w: ; DATA XREF: sub_40CCED+C0o unicode 0, <16J2qgaN9w>,0 align 10h unicode 0, < >,0 a279edcbba0c482: ; DATA XREF: sub_40CCED+1B9o unicode 0, <279EDCBBA0C48257>,0 align 4 dd 18h a22j3589p74w5: ; DATA XREF: sub_40CCED+1ACo unicode 0, <22j3589P74W5>,0 align 4 dd 10h, 480036h, 500032h, 660032h, 380034h, 0 dd 16h, 46004Bh, 690032h, 4D0070h, 390037h, 37004Fh, 33h dd 48h aF74d6f4ba3113c: ; DATA XREF: sub_40CCED+1EAo unicode 0, <F74D6F4BA3113CA094C8665388A9AFB7762C>,0 align 4 dd 1Ah aE5nokwj4j4zk6: ; DATA XREF: sub_40CCED+1DDo unicode 0, <E5noKwj4j4Zk6>,0 dd 18h dword_402DF0 dd 920001h, 1, 2 dup(0) dd 181h, 0 dd 20h a17f3eeee7cda4f: ; DATA XREF: sub_40D252+99o unicode 0, <17F3EEEE7CDA4F4B>,0 align 10h dd 16h a9oi0uto5k7v: ; DATA XREF: sub_40D252+8Co unicode 0, <9oI0UTO5k7V>,0 a0_13: unicode 0, <0>,0 a8497bb8ad55ed7: ; DATA XREF: sub_40D252+CAo unicode 0, <8497BB8AD55ED78523DF55AA>,0 align 4 dd 10h aCqbh329n: ; DATA XREF: sub_40D252+BDo unicode 0, <CQbH329n>,0 align 4 dd 18h dword_402EA0 dd 920001h, 1, 2 dup(0) dd 101h, 0 dd 4 a04: ; DATA XREF: sub_40D5AE+9Fo unicode 0, <04>,0 align 4 dd 14h a876pst813y: ; DATA XREF: sub_40D5AE+92o unicode 0, <876pSt813Y>,0 align 10h dd 4 a31: ; DATA XREF: sub_40D5AE+E1o unicode 0, <31>,0 align 4 dd 1Ch aY0x6xo45d80m3k: ; DATA XREF: sub_40D5AE+C8o unicode 0, <Y0X6xO45d80M3k>,0 align 10h dd 1Eh, 720032h, 350030h, 790031h, 4B0036h, 65006Ah, 300045h dd 6C0049h, 54h, 1E8h, 410045h, 450030h, 410043h, 330037h dd 310037h, 370038h, 440032h, 420038h, 320042h, 340032h dd 380032h, 430033h, 460039h, 380031h, 370045h, 460031h dd 360030h, 380037h, 360044h, 420035h, 300046h, 300033h dd 330041h, 380043h, 430046h, 430033h, 380037h, 320039h dd 410046h, 340033h, 330043h, 360039h, 460041h, 310032h dd 320044h, 380035h, 320038h, 390035h, 440036h, 410041h dd 390042h, 410042h, 300030h, 410035h, 340041h, 440032h dd 300042h, 380045h, 360046h, 320043h, 450038h, 460045h dd 440031h, 370031h, 420033h, 380036h, 380041h, 380030h dd 320045h, 390042h, 450036h, 410046h, 430031h, 320043h dd 370046h, 340032h, 420039h, 430046h, 310034h, 320038h dd 410032h, 460039h, 380039h, 460037h, 310039h, 350038h dd 370045h, 440035h, 380030h, 380035h, 350046h, 370037h dd 300046h, 380033h, 340036h, 340032h, 370038h, 410038h dd 420033h, 360044h, 330032h, 430043h, 340039h, 350044h dd 440034h, 450035h, 450030h, 330035h, 410032h, 320030h dd 300035h, 310042h, 350041h, 350039h, 430043h, 450039h dd 310041h, 370042h, 340038h, 430039h, 460036h, 410039h dd 310036h, 430043h, 410042h, 460030h, 450044h, 340044h dd 320032h, 440038h, 370033h, 300043h, 0 dd 1E8h, 360039h, 410030h, 410034h, 380038h, 380034h, 420042h dd 410038h, 370039h, 350031h, 390044h, 350034h, 360044h dd 300037h, 330046h, 420044h, 350035h, 440042h, 360045h dd 310036h, 350044h, 300031h, 420034h, 330031h, 380039h dd 460035h, 420031h, 360030h, 300045h, 310045h, 450036h dd 320037h, 420043h, 460039h, 440042h, 410044h, 370045h dd 420044h, 370035h, 340032h, 320043h, 370045h, 390044h dd 450038h, 390030h, 410037h, 410030h, 300037h, 330033h dd 360030h, 390046h, 440041h, 340036h, 380038h, 340045h dd 380041h, 440032h, 440044h, 460031h, 360044h, 330045h dd 390038h, 370044h, 390037h, 330041h, 450034h, 410043h dd 350044h, 310036h, 440031h, 460034h, 410030h, 370046h dd 390030h, 450038h, 310042h, 430039h, 310044h, 410038h dd 410037h, 380031h, 380041h, 390045h, 310033h, 360037h dd 420045h, 340042h, 320036h, 430039h, 390035h, 450043h dd 360034h, 310045h, 320041h, 340034h, 300036h, 440042h dd 360036h, 430044h, 390037h, 360036h, 320034h, 390041h dd 410046h, 320042h, 430039h, 440035h, 310039h, 310032h dd 380035h, 310038h, 360045h, 320034h, 440045h, 300031h dd 420043h, 440043h, 440044h, 420032h, 360039h, 310035h dd 350035h, 460034h, 0 dd 1E8h, 440046h, 380038h, 440039h, 430035h, 2 dup(440036h) dd 390043h, 360033h, 450041h, 310041h, 370031h, 430042h dd 340045h, 390045h, 360046h, 320035h, 380035h, 410033h dd 450043h, 410038h, 440042h, 440035h, 350037h, 390045h dd 360038h, 360035h, 340035h, 320037h, 350041h, 340030h dd 440034h, 350036h, 350046h, 440034h, 440037h, 300045h dd 330030h, 390044h, 410031h, 440046h, 330041h, 360046h dd 390033h, 350043h, 360039h, 310038h, 310035h, 360041h dd 310044h, 430037h, 360042h, 420038h, 440044h, 330038h dd 420030h, 310041h, 450036h, 450034h, 450032h, 370035h dd 340036h, 340043h, 440034h, 340043h, 420037h, 370037h dd 460033h, 460038h, 350032h, 450041h, 380042h, 410033h dd 430037h, 450046h, 350041h, 460030h, 420043h, 360030h dd 320033h, 450046h, 350039h, 390041h, 420042h, 340033h dd 370045h, 380037h, 370038h, 330032h, 430039h, 440037h dd 380031h, 440034h, 450038h, 380045h, 330036h, 340033h dd 430041h, 420043h, 410030h, 370045h, 390035h, 330044h dd 380043h, 370045h, 450045h, 380032h, 390035h, 310041h dd 390030h, 380031h, 320039h, 370037h, 450045h, 420042h dd 410031h, 330045h, 310034h, 350044h, 460046h, 450031h dd 460038h, 440031h, 0 dd 1E8h, 300038h, 380044h, 310035h, 460035h, 410035h, 340038h dd 450033h, 380030h, 390033h, 410036h, 450041h, 300037h dd 330031h, 310036h, 340041h, 320034h, 340045h, 380031h dd 420044h, 440032h, 410031h, 320045h, 390030h, 390041h dd 380045h, 330033h, 360036h, 460032h, 360042h, 310034h dd 430043h, 460046h, 370032h, 340045h, 460039h, 390033h dd 450032h, 430046h, 430031h, 350030h, 450035h, 410041h dd 320046h, 310033h, 440035h, 370031h, 330034h, 390031h dd 410034h, 350043h, 310039h, 430031h, 410042h, 430041h dd 460045h, 300032h, 450044h, 360035h, 350030h, 380037h dd 450042h, 460035h, 350031h, 350044h, 370039h, 460041h dd 310038h, 340039h, 320041h, 460032h, 310037h, 390042h dd 320041h, 460039h, 330042h, 430032h, 450043h, 300043h dd 450034h, 340036h, 310044h, 330046h, 350037h, 460042h dd 350032h, 380037h, 450034h, 340035h, 310037h, 350043h dd 330030h, 320031h, 460032h, 300033h, 310033h, 370043h dd 300031h, 380045h, 390032h, 460030h, 370033h, 370036h dd 440041h, 340031h, 320037h, 380037h, 450036h, 420041h dd 440044h, 310041h, 440031h, 360038h, 380035h, 430037h dd 340030h, 410042h, 420045h, 390045h, 410043h, 350039h dd 420036h, 430034h, 0 dd 1E8h, 450041h, 320033h, 460034h, 360037h, 310030h, 420046h dd 330034h, 460034h, 350038h, 310043h, 460031h, 370037h dd 460037h, 350034h, 340038h, 370043h, 380031h, 460038h dd 460032h, 300036h, 330038h, 390044h, 390041h, 320033h dd 430039h, 450046h, 440034h, 370037h, 440037h, 360046h dd 310031h, 390042h, 460032h, 320043h, 360037h, 420035h dd 340037h, 330039h, 410044h, 370036h, 310032h, 420042h dd 340030h, 460034h, 380045h, 410032h, 340043h, 310046h dd 320046h, 380036h, 420043h, 380036h, 450043h, 370038h dd 450037h, 380042h, 380037h, 460041h, 320032h, 390035h dd 310043h, 320041h, 390035h, 390039h, 380036h, 2 dup(420039h) dd 460036h, 410045h, 440035h, 310031h, 350043h, 350041h dd 390045h, 350030h, 370042h, 460043h, 360033h, 370041h dd 360035h, 340030h, 440030h, 420045h, 450033h, 330043h dd 440033h, 390031h, 310036h, 460034h, 310046h, 320036h dd 340043h, 430043h, 390039h, 340037h, 380038h, 310042h dd 310044h, 320034h, 360034h, 380031h, 370043h, 350030h dd 380044h, 450044h, 430036h, 440045h, 390045h, 360031h dd 340038h, 410031h, 420039h, 300032h, 370041h, 370046h dd 370033h, 440031h, 340045h, 420044h, 450033h, 310031h dd 450045h, 0 dd 1Ch, 660062h, 610035h, 380071h, 470075h, 540039h, 4E0053h dd 36004Eh, 0 dd 20h, 390063h, 500041h, 460030h, 450035h, 4C0039h, 370057h dd 720038h, 710031h, 0 dd 10h, 320039h, 610034h, 560032h, 390048h, 0 dd 1Ch, 720032h, 51004Fh, 390032h, 4F0031h, 6D004Ch, 4D0030h dd 540072h, 0 dd 14h, 740067h, 460037h, 410046h, 630030h, 470031h, 0 dd 10h, 340064h, 690064h, 68004Ch, 330042h, 0 dd 1Ch, 320032h, 680030h, 6C0044h, 380032h, 4A0030h, 310038h dd 330051h, 0 dd 1Ch, 330059h, 70006Fh, 580045h, 6E0044h, 31006Bh, 6C0054h dd 740033h, 0 dd 12h, 6A0077h, 560033h, 710076h, 370051h, 41h, 18h, 440033h dd 330072h, 360049h, 320047h, 79006Fh, 460044h, 0 dd 1Ah, 740039h, 450030h, 36004Dh, 4B005Ah, 470030h, 360031h dd 4Ah, 1Ah, 50004Eh, 310034h, 4E004Bh, 6C004Bh, 4B007Ah dd 5A0071h, 70h, 12h, 360053h, 440045h, 460059h, 4A0062h dd 46h, 14h, 390033h, 350069h, 350071h, 550067h, 310031h dd 0 dd 1E8h, 350041h, 450037h, 360037h, 420041h, 440034h, 310044h dd 330038h, 450037h, 330032h, 330041h, 340032h, 380031h dd 350035h, 300037h, 310043h, 410046h, 310037h, 430034h dd 380046h, 420037h, 410037h, 300031h, 450036h, 460035h dd 420042h, 390032h, 2 dup(350037h), 420046h, 370034h dd 340038h, 390045h, 350044h, 390041h, 440045h, 440032h dd 430032h, 450044h, 420036h, 410039h, 360033h, 340036h dd 300032h, 460044h, 450032h, 350036h, 330036h, 310031h dd 460042h, 360042h, 320046h, 450042h, 360039h, 350033h dd 360031h, 310033h, 430046h, 360044h, 450043h, 390043h dd 320038h, 350041h, 460032h, 410035h, 340036h, 420038h dd 460042h, 340038h, 340041h, 460035h, 330038h, 360037h dd 350043h, 370038h, 370043h, 450038h, 410039h, 430043h dd 380030h, 300042h, 410046h, 360042h, 420043h, 460034h dd 330033h, 360037h, 360046h, 390042h, 460034h, 420032h dd 310037h, 460041h, 320036h, 330030h, 300041h, 360044h dd 410038h, 410035h, 420043h, 390033h, 430034h, 420037h dd 440045h, 440044h, 300036h, 390036h, 360032h, 450035h dd 370039h, 330036h, 360030h, 370043h, 300045h, 320045h dd 330037h, 390035h, 390036h, 410037h, 410034h, 360045h dd 310033h, 360046h, 0 dd 1E8h, 340032h, 320039h, 320043h, 390035h, 330034h, 420042h dd 460035h, 430044h, 320036h, 460043h, 420044h, 450042h dd 340037h, 370045h, 330043h, 390033h, 390045h, 340038h dd 410036h, 360030h, 420030h, 390037h, 450043h, 410038h dd 430030h, 360041h, 320045h, 370046h, 440042h, 380037h dd 430037h, 330035h, 450033h, 360038h, 330042h, 340033h dd 330045h, 310032h, 390034h, 450044h, 330042h, 380041h dd 310043h, 390031h, 350043h, 420035h, 360037h, 360045h dd 430031h, 410031h, 440034h, 420030h, 430036h, 430043h dd 380031h, 350031h, 380037h, 430035h, 440042h, 410034h dd 310032h, 380046h, 340044h, 370039h, 440037h, 380041h dd 440044h, 300042h, 320046h, 440034h, 440039h, 460037h dd 350031h, 450045h, 350041h, 310041h, 320037h, 350037h dd 380045h, 410044h, 380033h, 420044h, 450034h, 390044h dd 420043h, 440034h, 440031h, 410046h, 370046h, 450038h dd 440033h, 300037h, 360038h, 370046h, 320043h, 380031h dd 420045h, 340046h, 420043h, 440036h, 460045h, 430037h dd 330030h, 440039h, 450041h, 340042h, 350042h, 350030h dd 330033h, 300036h, 310034h, 380044h, 450036h, 460044h dd 420045h, 410036h, 300042h, 450045h, 340034h, 330036h dd 390033h, 450032h, 0 dd 1E8h, 300034h, 440034h, 360045h, 310036h, 420041h, 320036h dd 430036h, 310037h, 340032h, 410046h, 310031h, 460030h dd 410034h, 430034h, 460033h, 420045h, 450044h, 320046h dd 350042h, 390037h, 460039h, 320030h, 350037h, 440035h dd 460041h, 310044h, 410043h, 430042h, 440031h, 320046h dd 300041h, 320041h, 350031h, 410041h, 430030h, 350043h dd 440031h, 440032h, 380041h, 350037h, 330036h, 320033h dd 360041h, 390035h, 320046h, 360033h, 460033h, 440036h dd 440032h, 360039h, 430031h, 340044h, 310045h, 300037h dd 370042h, 340041h, 460042h, 420031h, 370041h, 310034h dd 440044h, 370036h, 380041h, 370038h, 440042h, 360038h dd 430034h, 390041h, 410039h, 440044h, 340037h, 430031h dd 410032h, 390033h, 300046h, 340041h, 320043h, 330044h dd 440042h, 370031h, 310036h, 390043h, 370033h, 340036h dd 440035h, 410033h, 450046h, 370044h, 320037h, 460037h dd 460045h, 350036h, 430039h, 390043h, 330030h, 410043h dd 410037h, 310042h, 320036h, 350030h, 460044h, 440041h dd 320042h, 310036h, 430042h, 420036h, 300038h, 330038h dd 390044h, 440037h, 340036h, 320038h, 410034h, 430043h dd 390030h, 350041h, 310046h, 410034h, 300035h, 390035h dd 300046h, 420032h, 0 dd 1E8h, 360032h, 440031h, 350043h, 380043h, 330038h, 460042h dd 360046h, 440046h, 320043h, 380035h, 420033h, 330035h dd 310038h, 320045h, 350030h, 340031h, 300032h, 410034h dd 300044h, 410041h, 420038h, 410044h, 320033h, 330042h dd 350035h, 320039h, 310036h, 460034h, 380030h, 330036h dd 310035h, 330041h, 420039h, 320033h, 450038h, 430035h dd 440037h, 350042h, 330044h, 360032h, 430035h, 380039h dd 420034h, 410038h, 330043h, 380042h, 380032h, 430035h dd 360042h, 300031h, 350043h, 430041h, 440046h, 300030h dd 380037h, 310041h, 350032h, 310032h, 300041h, 310044h dd 340038h, 420031h, 310034h, 310039h, 410037h, 420036h dd 310030h, 460033h, 380034h, 350035h, 300033h, 410041h dd 360042h, 440035h, 370044h, 320041h, 330030h, 390033h dd 440043h, 320046h, 430031h, 410041h, 450041h, 450044h dd 460031h, 380031h, 340030h, 370036h, 330045h, 310046h dd 450031h, 340035h, 330046h, 340046h, 380038h, 370031h dd 310043h, 360030h, 410036h, 420036h, 300035h, 430030h dd 440042h, 450034h, 310036h, 340043h, 380031h, 320042h dd 350036h, 370036h, 440036h, 310044h, 460031h, 360031h dd 350039h, 380031h, 340036h, 300037h, 450031h, 300034h dd 330036h, 430033h, 0 dd 1E8h, 430034h, 420038h, 320037h, 440039h, 420042h, 460031h dd 430046h, 440034h, 360034h, 320031h, 390046h, 310045h dd 300036h, 430043h, 380046h, 310032h, 420033h, 390036h dd 310045h, 360031h, 380032h, 420036h, 420035h, 380046h dd 450038h, 320036h, 460037h, 330045h, 450038h, 380046h dd 420030h, 380036h, 410037h, 440041h, 420043h, 390033h dd 460033h, 320042h, 410042h, 330046h, 310045h, 410037h dd 420030h, 340036h, 460030h, 390042h, 420031h, 350033h dd 360035h, 460038h, 360032h, 340039h, 440045h, 440041h dd 360039h, 330038h, 310034h, 390030h, 410036h, 420039h dd 310031h, 390033h, 420033h, 430046h, 430045h, 360045h dd 380042h, 380045h, 320042h, 390036h, 450038h, 420039h dd 380043h, 450036h, 460039h, 300034h, 410043h, 300034h dd 370034h, 300046h, 300035h, 450041h, 310042h, 310032h dd 330046h, 410046h, 430034h, 370043h, 320041h, 350036h dd 360042h, 360046h, 460045h, 340034h, 410035h, 410043h dd 310030h, 410035h, 340035h, 380038h, 370044h, 360046h dd 440037h, 350041h, 330036h, 310045h, 360035h, 410037h dd 330033h, 430041h, 450033h, 330041h, 410033h, 350042h dd 370031h, 330030h, 320036h, 460043h, 310041h, 370039h dd 390030h, 370043h, 0 dd 1E8h, 360031h, 390044h, 420031h, 320038h, 430044h, 440036h dd 360045h, 380043h, 330033h, 420037h, 360039h, 390039h dd 460041h, 340034h, 360036h, 380037h, 300046h, 310034h dd 450035h, 460039h, 380042h, 430041h, 350046h, 320039h dd 390033h, 450039h, 440044h, 330032h, 450044h, 300032h dd 410039h, 340032h, 460046h, 320041h, 360032h, 350036h dd 330037h, 450035h, 450042h, 320045h, 460030h, 310032h dd 460041h, 450038h, 430046h, 420033h, 440041h, 320032h dd 320034h, 320044h, 420034h, 460030h, 370032h, 440044h dd 350038h, 360030h, 390035h, 320041h, 380031h, 450045h dd 360043h, 450044h, 430045h, 340046h, 330032h, 450039h dd 440035h, 340039h, 360045h, 350039h, 420032h, 430039h dd 440039h, 390037h, 450032h, 370033h, 310046h, 440036h dd 360044h, 390041h, 410044h, 330031h, 440038h, 330036h dd 370035h, 380035h, 440039h, 420035h, 350031h, 410030h dd 440044h, 440045h, 390031h, 460039h, 390032h, 330037h dd 440042h, 440035h, 370032h, 350041h, 460033h, 430045h dd 380038h, 360038h, 390043h, 440031h, 460039h, 380036h dd 420033h, 340045h, 370045h, 310033h, 310042h, 300046h dd 440041h, 340039h, 330045h, 390043h, 380038h, 330034h dd 460041h, 460033h, 0 dd 1E8h, 390033h, 390039h, 380043h, 370041h, 390046h, 460044h dd 340039h, 340043h, 440042h, 460039h, 460033h, 310044h dd 310045h, 430045h, 450037h, 370030h, 420035h, 420032h dd 340037h, 420042h, 310044h, 370044h, 380039h, 340036h dd 310042h, 310043h, 300046h, 380044h, 380039h, 460034h dd 410037h, 420044h, 450042h, 360032h, 2 dup(330034h) dd 450036h, 440043h, 330036h, 340038h, 380037h, 440036h dd 340041h, 340036h, 310035h, 420037h, 440041h, 460032h dd 450033h, 330030h, 430030h, 390045h, 430033h, 350030h dd 410037h, 370030h, 430035h, 370031h, 330032h, 380033h dd 430041h, 450045h, 430045h, 410039h, 450045h, 440045h dd 310033h, 390036h, 350044h, 360046h, 430037h, 420037h dd 360033h, 440041h, 460033h, 450039h, 410036h, 460041h dd 370037h, 330038h, 370045h, 390033h, 410043h, 420032h dd 410044h, 390034h, 390030h, 340042h, 320038h, 300032h dd 440037h, 350031h, 340044h, 320044h, 330045h, 410044h dd 460046h, 320044h, 330045h, 330035h, 330031h, 460031h dd 300033h, 460032h, 320032h, 350034h, 370042h, 380042h dd 440031h, 370045h, 350038h, 330031h, 430044h, 450039h dd 440046h, 430042h, 460038h, 420033h, 330036h, 330031h dd 370035h, 450043h, 0 dd 1E8h, 340038h, 340037h, 330035h, 300041h, 420033h, 380036h dd 390034h, 380038h, 340031h, 390036h, 310041h, 320032h dd 380044h, 360031h, 390043h, 410034h, 360035h, 320041h dd 440045h, 440033h, 350037h, 340032h, 440034h, 330034h dd 360043h, 330045h, 350035h, 350043h, 360037h, 340033h dd 450038h, 300043h, 420033h, 370034h, 340033h, 340042h dd 380037h, 410044h, 450031h, 340042h, 370042h, 360044h dd 380037h, 430036h, 310043h, 310042h, 360044h, 370045h dd 330035h, 360035h, 450034h, 320042h, 410035h, 440042h dd 390035h, 310039h, 390044h, 430042h, 440038h, 310030h dd 430039h, 350036h, 300045h, 460038h, 320031h, 330045h dd 330041h, 390045h, 350041h, 410035h, 430046h, 380034h dd 320034h, 440033h, 360034h, 420038h, 460031h, 460038h dd 360041h, 370037h, 340043h, 300039h, 450045h, 380034h dd 380036h, 320032h, 460038h, 320038h, 460043h, 340044h dd 440032h, 390036h, 340041h, 360044h, 350030h, 360037h dd 430033h, 300031h, 420033h, 310041h, 390036h, 390039h dd 450030h, 340044h, 430044h, 410039h, 340043h, 420034h dd 450030h, 370044h, 420036h, 300036h, 330033h, 320036h dd 350032h, 410034h, 450043h, 340034h, 440043h, 420046h dd 430035h, 390033h, 0 dd 1E8h, 450046h, 360032h, 320031h, 330030h, 360033h, 450043h dd 420037h, 320030h, 430046h, 420032h, 340032h, 410041h dd 330042h, 410030h, 310038h, 370039h, 440034h, 350042h dd 330041h, 380035h, 450032h, 310039h, 440034h, 370045h dd 320037h, 320035h, 300046h, 420038h, 330033h, 340034h dd 430045h, 370043h, 300030h, 320031h, 450035h, 390031h dd 360044h, 420038h, 390046h, 310037h, 350039h, 440030h dd 450038h, 330038h, 380042h, 370038h, 370043h, 340037h dd 440035h, 390031h, 320034h, 2 dup(330046h), 430034h dd 410039h, 390043h, 320030h, 350031h, 450031h, 390041h dd 370032h, 430036h, 330042h, 310044h, 380045h, 410045h dd 410031h, 300030h, 370039h, 390033h, 340038h, 310046h dd 330032h, 390042h, 390038h, 390039h, 340030h, 410042h dd 380034h, 350042h, 420039h, 340042h, 420034h, 390041h dd 300046h, 370044h, 340032h, 390043h, 420037h, 430039h dd 370045h, 380038h, 390043h, 420041h, 320034h, 340036h dd 390037h, 360030h, 320045h, 380034h, 360041h, 380042h dd 340035h, 340031h, 330035h, 370037h, 420031h, 440037h dd 300039h, 350046h, 390038h, 430042h, 410043h, 440034h dd 340042h, 370045h, 390045h, 440031h, 350042h, 340042h dd 420042h, 450038h, 0 dd 1E8h, 310041h, 380039h, 370030h, 460034h, 390035h, 440043h dd 350038h, 460034h, 340044h, 440032h, 310031h, 310038h dd 440037h, 460035h, 340042h, 330030h, 340043h, 310034h dd 420034h, 330034h, 330045h, 380035h, 450043h, 300041h dd 320045h, 340038h, 440030h, 420031h, 370039h, 430031h dd 410042h, 370031h, 380041h, 390045h, 450045h, 310033h dd 410045h, 460034h, 360043h, 310034h, 340044h, 300042h dd 370031h, 330033h, 420045h, 390030h, 420039h, 450038h dd 370045h, 310046h, 300037h, 360044h, 390030h, 320037h dd 420035h, 380046h, 420042h, 330044h, 390039h, 390043h dd 2 dup(460037h), 360042h, 410034h, 310045h, 460046h dd 370043h, 430045h, 300037h, 310039h, 390041h, 320036h dd 340046h, 420037h, 410038h, 340031h, 440033h, 450036h dd 420036h, 410035h, 410033h, 350041h, 360033h, 450038h dd 330039h, 430031h, 370042h, 310041h, 380037h, 420041h dd 300043h, 440031h, 380041h, 310031h, 380035h, 340041h dd 410043h, 390030h, 440037h, 410030h, 410037h, 460032h dd 340033h, 440045h, 460043h, 340043h, 300032h, 310044h dd 410044h, 310045h, 320043h, 380046h, 410038h, 350036h dd 330034h, 460046h, 350042h, 340034h, 310030h, 390031h dd 310038h, 430042h, 0 dd 1E8h, 340042h, 440042h, 320038h, 320033h, 390033h, 380046h dd 320041h, 450030h, 410045h, 440042h, 430031h, 360039h dd 450030h, 320044h, 450046h, 460038h, 310036h, 330032h dd 300045h, 360031h, 460041h, 460044h, 320044h, 350032h dd 310033h, 310030h, 320042h, 450043h, 390038h, 310032h dd 360032h, 390033h, 410034h, 390036h, 430034h, 390030h dd 320031h, 440034h, 440043h, 330044h, 380038h, 440042h dd 310041h, 380032h, 460034h, 450033h, 460038h, 320042h dd 380038h, 370044h, 320045h, 440042h, 330041h, 320044h dd 410046h, 330044h, 430033h, 440046h, 340046h, 450034h dd 350041h, 440038h, 310031h, 360044h, 390033h, 370037h dd 380031h, 330038h, 350030h, 360033h, 450030h, 440035h dd 380037h, 390032h, 390035h, 300039h, 320031h, 440041h dd 420036h, 460039h, 310034h, 360041h, 340037h, 340045h dd 360042h, 300033h, 300032h, 350044h, 330035h, 320032h dd 350038h, 410034h, 410044h, 360037h, 390037h, 360038h dd 460039h, 350041h, 460041h, 370046h, 300034h, 310039h dd 370044h, 460033h, 330037h, 300037h, 360036h, 330033h dd 440032h, 460033h, 350037h, 360032h, 360044h, 450045h dd 350031h, 430045h, 360032h, 380042h, 460032h, 380042h dd 360030h, 370032h, 0 dd 1E8h, 310035h, 320030h, 380034h, 300033h, 390043h, 410041h dd 330038h, 330044h, 410032h, 320037h, 300045h, 370030h dd 430046h, 450041h, 460039h, 2 dup(430039h), 460041h dd 460030h, 460038h, 370044h, 330037h, 460037h, 390041h dd 340033h, 310030h, 450031h, 380036h, 320045h, 370042h dd 360034h, 300034h, 460032h, 330035h, 370036h, 420035h dd 360035h, 440032h, 420036h, 410034h, 390033h, 380032h dd 350030h, 430038h, 420035h, 300035h, 340036h, 300036h dd 350046h, 460038h, 380031h, 320041h, 390032h, 430036h dd 430034h, 390031h, 380042h, 370032h, 430034h, 330030h dd 350037h, 340033h, 320045h, 390041h, 430037h, 440041h dd 390046h, 410044h, 380045h, 390032h, 370042h, 420034h dd 430034h, 350037h, 370036h, 380042h, 440030h, 450043h dd 330033h, 330044h, 370031h, 440041h, 330046h, 310037h dd 410030h, 380033h, 440037h, 360031h, 340034h, 370038h dd 380038h, 410037h, 380043h, 320030h, 300030h, 410045h dd 410036h, 450035h, 410033h, 410030h, 440046h, 380038h dd 450046h, 380044h, 420030h, 370044h, 340032h, 350033h dd 450043h, 320036h, 310032h, 450039h, 460038h, 300037h dd 360041h, 320032h, 340039h, 310046h, 300032h, 360037h dd 350032h, 390043h, 0 dd 1E8h, 350034h, 310041h, 370039h, 440037h, 370030h, 370033h dd 300030h, 430042h, 310041h, 330030h, 410031h, 460041h dd 420038h, 380036h, 350035h, 300032h, 300034h, 350033h dd 340042h, 330034h, 420035h, 330041h, 430039h, 340035h dd 360033h, 430043h, 300044h, 420032h, 450035h, 340039h dd 410033h, 350030h, 320033h, 360031h, 320038h, 420032h dd 350035h, 350036h, 460046h, 360045h, 340031h, 460034h dd 440037h, 370046h, 380045h, 390042h, 340042h, 340033h dd 380037h, 460038h, 460041h, 370031h, 310032h, 450035h dd 370041h, 420034h, 320030h, 450038h, 310045h, 380037h dd 390038h, 370031h, 310043h, 300030h, 360043h, 430036h dd 380045h, 300030h, 420042h, 320041h, 390034h, 430033h dd 430036h, 420039h, 300039h, 310046h, 460034h, 390036h dd 380042h, 410045h, 390037h, 390032h, 350039h, 460043h dd 310043h, 310037h, 350034h, 390042h, 450033h, 310034h dd 320041h, 310036h, 350043h, 300034h, 370041h, 330035h dd 390044h, 370039h, 310043h, 340038h, 420031h, 410038h dd 460031h, 370032h, 380031h, 360039h, 340044h, 410033h dd 360034h, 450033h, 360046h, 430038h, 360042h, 460035h dd 410046h, 440039h, 380039h, 420030h, 300031h, 430032h dd 350039h, 330037h, 0 dd 1E8h, 350041h, 390030h, 450045h, 330038h, 310041h, 410044h dd 440038h, 380033h, 460042h, 330045h, 350030h, 430035h dd 370035h, 320034h, 320045h, 370033h, 380033h, 440041h dd 440046h, 440043h, 350038h, 320037h, 420043h, 370045h dd 310043h, 320041h, 310032h, 430035h, 430036h, 310037h dd 370033h, 430044h, 340038h, 300044h, 430043h, 390041h dd 380038h, 380041h, 310036h, 310030h, 350036h, 370030h dd 430039h, 450038h, 440036h, 420030h, 430034h, 440034h dd 450033h, 320044h, 430043h, 450032h, 370035h, 410039h dd 430041h, 430043h, 430036h, 300038h, 460031h, 420030h dd 370033h, 410033h, 300033h, 310045h, 350037h, 440041h dd 330035h, 330039h, 380046h, 320045h, 380033h, 440035h dd 320033h, 420032h, 360032h, 320035h, 410036h, 450037h dd 380037h, 340034h, 450037h, 430037h, 430039h, 310032h dd 2 dup(390038h), 340037h, 460042h, 430037h, 380045h dd 410037h, 350037h, 390038h, 420045h, 430034h, 430032h dd 330046h, 320033h, 410038h, 320032h, 390035h, 300044h dd 350045h, 460044h, 360034h, 380038h, 360033h, 430031h dd 340036h, 310031h, 340032h, 380036h, 340045h, 440031h dd 320036h, 440035h, 410039h, 430039h, 390035h, 450036h dd 410035h, 300042h, 0 dd 1Ch, 35004Eh, 36006Ah, 300055h, 700047h, 520030h, 550057h dd 670032h, 0 dd 1Eh, 380037h, 64006Bh, 37006Ah, 520036h, 360059h, 390057h dd 350056h, 56h, 14h, 740075h, 56006Fh, 5A0036h, 4B0076h dd 78004Fh, 0 dd 14h, 36006Eh, 32004Dh, 58006Dh, 440043h, 340037h, 0 dd 20h, 4A0032h, 380053h, 510066h, 740048h, 58004Bh, 330076h dd 440049h, 670064h, 0 dd 1Ah, 77007Ah, 320036h, 760078h, 370046h, 300076h, 720034h dd 73h, 12h, 48004Ch, 73004Fh, 450061h, 790035h, 70h, 1Eh dd 320034h, 310053h, 640030h, 720079h, 610078h, 5A0039h dd 39004Eh, 31h, 1Ah, 540063h, 650032h, 360037h, 740034h dd 780050h, 620037h, 66h, 12h, 560036h, 550078h, 620035h dd 33004Ch, 34h, 12h, 410065h, 340068h, 380074h, 720047h dd 33h, 20h, 6F0076h, 350030h, 6D006Bh, 550042h, 4B0041h dd 330068h, 690036h, 700035h, 0 dd 1Eh, 5A006Dh, 4C0078h, 46004Bh, 690034h, 4D0036h, 320030h dd 39004Fh, 4Ah, 14h, 780031h, 350044h, 370037h, 63006Ah dd 730069h, 0 dd 1E8h, 350042h, 460045h, 450033h, 390036h, 310041h, 300033h dd 430044h, 420042h, 390041h, 360042h, 450042h, 360044h dd 420045h, 300043h, 350045h, 420042h, 430044h, 300042h dd 430035h, 450039h, 340036h, 340039h, 390036h, 300037h dd 300034h, 320046h, 380032h, 300031h, 340046h, 420030h dd 460037h, 300043h, 440034h, 300046h, 380030h, 320036h dd 410031h, 300041h, 320034h, 310036h, 370035h, 460042h dd 430039h, 420031h, 370042h, 320039h, 300046h, 320042h dd 370043h, 460046h, 340035h, 340037h, 390043h, 460041h dd 420044h, 460044h, 350044h, 440032h, 320046h, 320037h dd 310037h, 450045h, 440042h, 320037h, 390036h, 420034h dd 320036h, 360038h, 430035h, 370043h, 350038h, 370031h dd 420034h, 390034h, 380045h, 300035h, 420037h, 440032h dd 340032h, 300045h, 410036h, 350045h, 460032h, 330035h dd 380030h, 450037h, 310034h, 460037h, 340044h, 450030h dd 460042h, 340045h, 330044h, 460030h, 380045h, 380031h dd 390036h, 410033h, 380039h, 440042h, 360046h, 410033h dd 440045h, 390039h, 460035h, 380030h, 460039h, 330041h dd 390030h, 440035h, 350032h, 440039h, 370032h, 300031h dd 440032h, 310045h, 350036h, 360035h, 320046h, 390046h dd 310039h, 330035h, 0 dd 1E8h, 330030h, 350033h, 320037h, 440041h, 300043h, 300041h dd 340038h, 460037h, 460038h, 370033h, 310038h, 410032h dd 460044h, 340034h, 360044h, 310038h, 450030h, 320042h dd 410045h, 450032h, 430035h, 430045h, 410046h, 410034h dd 340031h, 460039h, 300045h, 300035h, 390031h, 370043h dd 330032h, 410046h, 340030h, 430034h, 370041h, 330034h dd 300038h, 330039h, 430033h, 370044h, 310046h, 360043h dd 430039h, 330046h, 370037h, 390042h, 440031h, 300044h dd 430044h, 460035h, 420030h, 370038h, 360039h, 450043h dd 340037h, 330042h, 310030h, 350031h, 310032h, 410046h dd 340036h, 340032h, 300044h, 300038h, 300037h, 410032h dd 300045h, 310045h, 440046h, 420041h, 340041h, 430046h dd 300045h, 390032h, 320045h, 430035h, 420042h, 350030h dd 410042h, 330039h, 390034h, 330039h, 350032h, 380030h dd 380039h, 430043h, 380045h, 300046h, 330035h, 420037h dd 430046h, 410045h, 390037h, 300046h, 390034h, 300043h dd 380033h, 330037h, 430030h, 320039h, 360036h, 310039h dd 320041h, 390043h, 460041h, 380030h, 340045h, 350043h dd 320034h, 450043h, 370041h, 320043h, 450035h, 460043h dd 460039h, 430030h, 440039h, 460033h, 420030h, 390043h dd 450045h, 300045h, 0 dd 1E8h, 330034h, 360039h, 380041h, 300043h, 450041h, 360044h dd 420030h, 320035h, 450044h, 420045h, 350031h, 460037h dd 460043h, 380033h, 330043h, 330031h, 350034h, 320032h dd 380031h, 390046h, 460030h, 460035h, 370043h, 350042h dd 410034h, 310032h, 410039h, 360044h, 350033h, 300044h dd 460037h, 440045h, 340041h, 340044h, 450031h, 410036h dd 350044h, 420042h, 410039h, 440041h, 390030h, 420043h dd 350031h, 320045h, 300041h, 360044h, 390042h, 430046h dd 460041h, 350046h, 430046h, 450036h, 360041h, 350030h dd 390038h, 350045h, 410036h, 440035h, 370031h, 320045h dd 440041h, 300030h, 350033h, 330041h, 330044h, 300037h dd 300046h, 390043h, 410036h, 300046h, 300030h, 320032h dd 360039h, 360045h, 350031h, 440045h, 340039h, 410039h dd 460043h, 370044h, 450041h, 370039h, 360038h, 370045h dd 340043h, 460033h, 360046h, 350043h, 340038h, 420042h dd 300042h, 300037h, 320042h, 420039h, 390046h, 380038h dd 300038h, 390036h, 330031h, 300030h, 430038h, 300037h dd 320031h, 440038h, 410045h, 380033h, 390034h, 460038h dd 330045h, 430032h, 380030h, 420042h, 450041h, 380030h dd 440045h, 430045h, 350038h, 430032h, 320032h, 350039h dd 440044h, 430033h, 0 dd 1E8h, 380030h, 440035h, 340034h, 460032h, 410036h, 430044h dd 370034h, 350037h, 450046h, 390036h, 380046h, 450031h dd 370035h, 300035h, 310032h, 330038h, 460030h, 320046h dd 420031h, 390035h, 460034h, 300039h, 430044h, 320042h dd 410041h, 330033h, 460042h, 330045h, 300041h, 390033h dd 340033h, 330042h, 440039h, 320042h, 330031h, 410044h dd 440043h, 320041h, 390044h, 390036h, 320045h, 460041h dd 430035h, 430044h, 430041h, 350043h, 440034h, 330036h dd 420039h, 320030h, 310034h, 460035h, 460030h, 340046h dd 370030h, 350034h, 410042h, 410041h, 440039h, 440038h dd 410046h, 440045h, 370038h, 440034h, 380030h, 460042h dd 440034h, 300033h, 330031h, 330044h, 360043h, 440043h dd 420033h, 390041h, 340033h, 310046h, 440036h, 420031h dd 350030h, 390031h, 350034h, 330038h, 370043h, 430037h dd 410031h, 360033h, 420035h, 300036h, 370032h, 370041h dd 2 dup(350036h), 370032h, 380030h, 360045h, 430037h dd 300031h, 330036h, 320037h, 300038h, 410033h, 380041h dd 350044h, 370039h, 330041h, 450036h, 300043h, 390046h dd 440045h, 320031h, 380046h, 390033h, 310033h, 430032h dd 410046h, 440038h, 440030h, 440039h, 310039h, 300046h dd 310032h, 330044h, 0 dd 1E8h, 390037h, 450039h, 420037h, 430036h, 410039h, 450045h dd 380037h, 370044h, 460033h, 300042h, 390041h, 380038h dd 320045h, 410042h, 390039h, 330035h, 2 dup(360035h) dd 310031h, 410046h, 360036h, 440032h, 450035h, 360031h dd 440033h, 460041h, 440039h, 450043h, 310030h, 430045h dd 450032h, 420038h, 440041h, 410038h, 300042h, 430032h dd 440042h, 390044h, 410045h, 360036h, 300034h, 300036h dd 450044h, 430041h, 390044h, 370033h, 420046h, 310033h dd 350046h, 430044h, 440044h, 330036h, 320036h, 320044h dd 450046h, 410044h, 460036h, 390042h, 300031h, 410038h dd 350042h, 430039h, 370035h, 320034h, 380037h, 300035h dd 460035h, 430033h, 360030h, 350035h, 350042h, 340031h dd 330045h, 380043h, 430044h, 320039h, 340038h, 380038h dd 320033h, 390037h, 370035h, 410036h, 430043h, 2 dup(360044h) dd 380041h, 340032h, 460035h, 460031h, 350042h, 410034h dd 320039h, 330039h, 320032h, 430035h, 460033h, 430032h dd 450032h, 350032h, 320046h, 390038h, 330037h, 420031h dd 440041h, 380043h, 300033h, 440038h, 370044h, 440034h dd 350036h, 420034h, 410038h, 450042h, 350046h, 390039h dd 370041h, 320042h, 460033h, 310044h, 460044h, 310038h dd 310044h, 0 dd 1E8h, 390030h, 320030h, 410036h, 300043h, 330037h, 390035h dd 360030h, 360034h, 310043h, 340045h, 420035h, 340046h dd 420034h, 430042h, 360041h, 330042h, 320038h, 360042h dd 350045h, 340032h, 450043h, 440038h, 460043h, 410043h dd 330032h, 330036h, 300035h, 450045h, 430042h, 390033h dd 340034h, 460045h, 320035h, 410038h, 370038h, 300044h dd 390045h, 330038h, 420041h, 380031h, 430044h, 330037h dd 430030h, 330041h, 450036h, 460045h, 450044h, 460034h dd 410042h, 440032h, 370038h, 390032h, 300037h, 350044h dd 340039h, 350030h, 420033h, 390046h, 410033h, 440034h dd 320045h, 320034h, 390032h, 430038h, 380030h, 420034h dd 440036h, 390030h, 360042h, 380043h, 340036h, 330038h dd 420042h, 440046h, 380036h, 310036h, 340033h, 410042h dd 380046h, 300042h, 440043h, 390039h, 330045h, 450030h dd 380044h, 370038h, 430033h, 450032h, 320045h, 320042h dd 450039h, 460034h, 450042h, 330045h, 310033h, 420031h dd 380032h, 310044h, 300034h, 360032h, 450036h, 370037h dd 340042h, 390035h, 370035h, 410034h, 430037h, 440031h dd 420046h, 340038h, 350041h, 460030h, 340039h, 380032h dd 320046h, 440046h, 390042h, 370046h, 450041h, 430030h dd 360041h, 410031h, 0 dd 1E8h, 330037h, 360033h, 380031h, 380037h, 450030h, 420030h dd 430036h, 430038h, 350031h, 430038h, 320042h, 390046h dd 450041h, 370031h, 460035h, 380046h, 300038h, 390043h dd 340045h, 450042h, 460032h, 430038h, 450037h, 300037h dd 300045h, 300044h, 420043h, 410033h, 310041h, 450044h dd 420044h, 300036h, 310042h, 330046h, 450041h, 390041h dd 300036h, 440043h, 340038h, 380037h, 330035h, 320041h dd 360042h, 380036h, 420044h, 420030h, 430038h, 440038h dd 300042h, 340042h, 300036h, 450035h, 330042h, 360031h dd 320036h, 390039h, 450045h, 340036h, 420043h, 370044h dd 380035h, 450042h, 370032h, 380032h, 360044h, 2 dup(370033h) dd 360045h, 350042h, 310036h, 380038h, 340036h, 450044h dd 370038h, 430041h, 420038h, 310034h, 460032h, 410036h dd 390038h, 380042h, 350035h, 360036h, 460030h, 390043h dd 310042h, 310043h, 310044h, 340036h, 350030h, 320036h dd 440044h, 350034h, 390045h, 380033h, 340042h, 370037h dd 460039h, 350032h, 440044h, 450032h, 430038h, 350044h dd 420043h, 330037h, 330039h, 420041h, 350032h, 320036h dd 300036h, 370031h, 410031h, 410036h, 370041h, 390039h dd 340032h, 330033h, 380032h, 300034h, 390041h, 430038h dd 320046h, 0 dd 1E8h, 300035h, 340030h, 310044h, 420036h, 300030h, 350046h dd 350043h, 370036h, 340035h, 330041h, 340034h, 350031h dd 450036h, 440041h, 340033h, 360038h, 380031h, 460031h dd 430035h, 460033h, 320044h, 420044h, 300046h, 320035h dd 370031h, 460045h, 410044h, 420041h, 460043h, 440034h dd 410034h, 410045h, 460043h, 420044h, 350039h, 420043h dd 450041h, 420034h, 340043h, 340036h, 380036h, 360046h dd 440038h, 380046h, 360031h, 380041h, 460033h, 310042h dd 420039h, 370042h, 300045h, 460042h, 310038h, 300033h dd 310043h, 410042h, 320046h, 310044h, 380042h, 320046h dd 390035h, 450046h, 410043h, 360045h, 370044h, 430037h dd 450032h, 380035h, 440044h, 340037h, 370035h, 330046h dd 380039h, 440039h, 300033h, 320034h, 390035h, 320030h dd 450033h, 420039h, 350034h, 330039h, 330031h, 410045h dd 350032h, 310034h, 430035h, 300044h, 330037h, 360043h dd 450037h, 430037h, 340043h, 370042h, 390044h, 320036h dd 390038h, 440046h, 450032h, 330043h, 370038h, 380039h dd 360032h, 330045h, 460038h, 450030h, 420035h, 450039h dd 420036h, 430030h, 300045h, 310031h, 370036h, 410042h dd 320041h, 300031h, 450032h, 380030h, 420046h, 370041h dd 330043h, 320039h, 0 dd 1E8h, 380045h, 350037h, 380043h, 310042h, 300046h, 410041h dd 370046h, 410035h, 370031h, 370042h, 420042h, 360038h dd 300035h, 460042h, 390032h, 420037h, 430037h, 430043h dd 420036h, 350044h, 350042h, 330043h, 440039h, 390039h dd 380042h, 440045h, 300034h, 380043h, 300030h, 360035h dd 430036h, 430044h, 380044h, 360042h, 430039h, 360031h dd 380034h, 370046h, 300043h, 330044h, 310043h, 430036h dd 430034h, 310036h, 360044h, 320034h, 390032h, 420036h dd 320038h, 370042h, 340032h, 360038h, 350043h, 450034h dd 310031h, 320039h, 410035h, 420037h, 350033h, 370031h dd 410034h, 370044h, 420032h, 330033h, 330045h, 340034h dd 410034h, 330035h, 420030h, 320036h, 350046h, 370035h dd 450031h, 430046h, 340034h, 430044h, 370032h, 370046h dd 330031h, 390031h, 440030h, 330039h, 440032h, 390034h dd 320042h, 320030h, 370036h, 430036h, 360035h, 430037h dd 420045h, 330038h, 350038h, 440039h, 380042h, 350041h dd 330034h, 330045h, 370041h, 440045h, 330041h, 310035h dd 350045h, 350043h, 340037h, 430031h, 360033h, 420032h dd 390033h, 420034h, 370036h, 410043h, 330034h, 380046h dd 330036h, 440041h, 430041h, 460041h, 320031h, 300046h dd 380031h, 340044h, 0 dd 1E8h, 410035h, 460045h, 350043h, 320036h, 310031h, 420039h dd 370032h, 440034h, 420034h, 440043h, 380044h, 420030h dd 340044h, 390034h, 430044h, 300042h, 390036h, 440032h dd 430039h, 340032h, 330032h, 330046h, 440046h, 320046h dd 440038h, 370032h, 340031h, 410033h, 380042h, 360032h dd 380039h, 330038h, 320044h, 460038h, 380035h, 350035h dd 460045h, 320043h, 310045h, 420030h, 340030h, 360042h dd 450035h, 420031h, 370038h, 430038h, 440046h, 320046h dd 310037h, 310033h, 380041h, 310038h, 310042h, 420035h dd 340030h, 330039h, 440045h, 320044h, 350033h, 320033h dd 330030h, 360044h, 390030h, 310044h, 420046h, 370043h dd 390037h, 440036h, 300044h, 360035h, 410039h, 310035h dd 360037h, 380038h, 370031h, 430042h, 430031h, 340043h dd 300031h, 390041h, 420036h, 430042h, 370030h, 460034h dd 300034h, 330038h, 390033h, 440035h, 440043h, 360037h dd 430037h, 300039h, 360044h, 370031h, 370041h, 460034h dd 430039h, 340043h, 360045h, 410044h, 380042h, 310039h dd 360032h, 330043h, 410030h, 340046h, 350037h, 430046h dd 390044h, 430039h, 330042h, 460030h, 330030h, 410041h dd 460038h, 450030h, 360037h, 310030h, 450030h, 350044h dd 440044h, 430045h, 0 dd 1E8h, 320038h, 320039h, 420032h, 420039h, 440045h, 460045h dd 410035h, 360034h, 340032h, 350032h, 350037h, 460041h dd 340043h, 350030h, 320038h, 430046h, 410039h, 320033h dd 410039h, 330034h, 300043h, 460038h, 440036h, 300041h dd 430030h, 2 dup(460046h), 390036h, 330030h, 320034h dd 420035h, 420041h, 460030h, 360035h, 390046h, 330045h dd 370034h, 430032h, 390042h, 320038h, 420037h, 390035h dd 330036h, 460042h, 330042h, 360037h, 350039h, 450035h dd 390045h, 430031h, 430045h, 380031h, 350034h, 410030h dd 340041h, 370033h, 330046h, 440041h, 350035h, 460030h dd 390042h, 310039h, 450037h, 340046h, 300045h, 390030h dd 370030h, 320037h, 440030h, 390034h, 370031h, 420033h dd 410031h, 370035h, 360033h, 340046h, 320037h, 440046h dd 320044h, 330042h, 410039h, 330045h, 370042h, 340032h dd 430043h, 320033h, 330037h, 310036h, 310043h, 310044h dd 370045h, 300031h, 350042h, 450034h, 300033h, 390031h dd 450032h, 340045h, 410038h, 340034h, 320038h, 460035h dd 370039h, 420046h, 300039h, 410042h, 410035h, 390031h dd 310031h, 330035h, 460046h, 360033h, 460038h, 370032h dd 310042h, 420033h, 410037h, 310035h, 360044h, 310034h dd 300042h, 390043h, 0 dd 1E8h, 390033h, 320043h, 300037h, 380042h, 340031h, 440032h dd 420038h, 460046h, 310045h, 460036h, 430044h, 390041h dd 450044h, 420037h, 390031h, 410033h, 360038h, 430043h dd 440033h, 430035h, 430039h, 350046h, 350033h, 450033h dd 410035h, 300032h, 360035h, 360043h, 300030h, 390037h dd 420043h, 380046h, 370035h, 340045h, 340033h, 330034h dd 300030h, 340033h, 440037h, 330039h, 410034h, 360044h dd 340032h, 360031h, 360044h, 430039h, 420037h, 450031h dd 440035h, 340044h, 320043h, 410038h, 330033h, 460044h dd 320041h, 310045h, 460038h, 440034h, 340045h, 340043h dd 370035h, 390032h, 320032h, 350034h, 350042h, 330033h dd 430037h, 340034h, 300037h, 380033h, 320046h, 410038h dd 360037h, 420034h, 370042h, 430036h, 350038h, 320030h dd 320038h, 300033h, 390032h, 440033h, 330037h, 320033h dd 450035h, 450036h, 440032h, 410035h, 350034h, 330035h dd 380044h, 320043h, 420043h, 420031h, 380037h, 460044h dd 410036h, 300034h, 330044h, 430043h, 430034h, 350042h dd 440035h, 320032h, 380030h, 450036h, 410031h, 300045h dd 450045h, 390032h, 360041h, 370045h, 410039h, 330030h dd 300038h, 460038h, 340033h, 310044h, 330038h, 310046h dd 440031h, 430032h, 0 dd 1E8h, 440030h, 370039h, 460032h, 350030h, 350036h, 370044h dd 430035h, 450036h, 410042h, 380038h, 460042h, 300043h dd 370046h, 330046h, 360042h, 370031h, 410043h, 460030h dd 430044h, 390044h, 420032h, 320043h, 320036h, 390042h dd 450041h, 360043h, 430038h, 390037h, 450045h, 320039h dd 350037h, 350044h, 380032h, 420036h, 340041h, 410036h dd 350044h, 410038h, 310045h, 360041h, 390038h, 440036h dd 420032h, 420038h, 460043h, 320037h, 450039h, 410033h dd 370036h, 340038h, 390034h, 350034h, 410034h, 420031h dd 300043h, 380044h, 340039h, 410034h, 350043h, 320045h dd 330043h, 370045h, 420031h, 440043h, 420044h, 330032h dd 380038h, 320041h, 410038h, 300046h, 430032h, 340032h dd 360043h, 390034h, 430045h, 390037h, 360035h, 420044h dd 310035h, 370032h, 420033h, 340032h, 340046h, 450043h dd 350031h, 330032h, 350032h, 340035h, 320036h, 440037h dd 440041h, 350030h, 320042h, 370044h, 460033h, 350030h dd 330036h, 330041h, 390045h, 460033h, 440039h, 380042h dd 300046h, 320038h, 420036h, 350041h, 300042h, 390033h dd 380037h, 330043h, 300033h, 350039h, 430030h, 310032h dd 380045h, 300045h, 340045h, 410038h, 420042h, 350041h dd 350042h, 420038h, 0 dd 1E8h, 350030h, 440039h, 300037h, 380035h, 360030h, 440031h dd 360043h, 300034h, 450042h, 360042h, 340039h, 380037h dd 360038h, 350043h, 370032h, 410034h, 380035h, 450044h dd 350030h, 320044h, 390045h, 380038h, 420038h, 330039h dd 370037h, 370035h, 320031h, 300033h, 460032h, 370044h dd 450032h, 450044h, 440044h, 450031h, 380044h, 460044h dd 340037h, 360030h, 410039h, 340045h, 460042h, 460034h dd 450035h, 370030h, 330031h, 320039h, 430034h, 360034h dd 450041h, 360032h, 350036h, 410036h, 460034h, 380030h dd 350037h, 370043h, 430030h, 330032h, 360031h, 300046h dd 330043h, 340036h, 440034h, 410038h, 330034h, 440038h dd 350034h, 370043h, 310046h, 300045h, 440044h, 410037h dd 410032h, 390037h, 460037h, 340039h, 340041h, 420045h dd 390030h, 460044h, 430030h, 370043h, 370032h, 330042h dd 300033h, 430037h, 320039h, 370041h, 340043h, 430043h dd 450043h, 320043h, 300038h, 430036h, 420031h, 460044h dd 320044h, 370032h, 430041h, 360046h, 420045h, 310033h dd 320046h, 450043h, 360036h, 410046h, 340039h, 420036h dd 300030h, 300041h, 350043h, 340038h, 380041h, 340031h dd 340032h, 390033h, 360044h, 460034h, 300035h, 340036h dd 350041h, 410046h, 0 dd 1Ch, 670063h, 610035h, 310072h, 680075h, 540032h, 6E0073h dd 36004Fh, 0 dd 20h, 320033h, 500042h, 470032h, 450035h, 4D0032h, 420057h dd 730044h, 710034h, 0 dd 14h, 52004Ah, 650038h, 470050h, 4A006Ch, 6F0038h, 0 dd 1Eh, 550053h, 490051h, 52004Fh, 360070h, 700031h, 450076h dd 6E0037h, 30h, 1Eh, 69006Ah, 4B0064h, 4F0032h, 53006Bh dd 340057h, 680052h, 6B0074h, 45h, 1Ch, 610031h, 720063h dd 51006Bh, 380061h, 4D0059h, 310078h, 300066h, 0 dd 1Ch, 650032h, 360036h, 4D0034h, 50004Fh, 610073h, 370065h dd 36007Ah, 0 dd 1Eh, 340054h, 4C0054h, 340033h, 37007Ah, 330079h, 470032h dd 32006Fh, 4Ch, 20h, 300033h, 340075h, 470047h, 300042h dd 310077h, 510048h, 630037h, 45004Fh, 0 dd 36414256h, 4C4C442Eh, 0 a__vbavarcmpeq db '__vbaVarCmpEq',0 align 10h a__vbavardup db '__vbaVarDup',0 dd 1Eh a78kcis6ry6w9u5: ; DATA XREF: .text:0040F002o unicode 0, <78kcis6RY6W9U5V>,0 dd 0 dd 1E8h, 330043h, 330039h, 300038h, 380042h, 420035h, 380043h dd 320031h, 320033h, 380037h, 430043h, 320037h, 340036h dd 430041h, 450031h, 450045h, 410033h, 420041h, 360043h dd 360041h, 390035h, 310031h, 380038h, 430044h, 300044h dd 390039h, 380031h, 310046h, 360033h, 380031h, 350037h dd 390044h, 330036h, 360035h, 300037h, 430045h, 420042h dd 350042h, 420035h, 380042h, 360033h, 390042h, 340037h dd 330046h, 440041h, 430035h, 410044h, 390034h, 390036h dd 2 dup(440038h), 380030h, 460031h, 440045h, 310030h dd 370045h, 380042h, 320036h, 310031h, 430037h, 340038h dd 450045h, 370042h, 300045h, 350036h, 380042h, 410042h dd 340034h, 370038h, 420033h, 300032h, 340037h, 430035h dd 390035h, 300044h, 390034h, 370035h, 330030h, 380030h dd 330046h, 410041h, 460032h, 310046h, 360044h, 370045h dd 310045h, 300044h, 320045h, 430036h, 420031h, 390043h dd 430045h, 460035h, 440036h, 310046h, 310032h, 430042h dd 360045h, 300041h, 450044h, 460043h, 310031h, 440035h dd 330044h, 340036h, 410032h, 420038h, 320046h, 410035h dd 460036h, 390034h, 410038h, 320046h, 430034h, 410035h dd 370043h, 450036h, 430032h, 330032h, 380038h, 320033h dd 390043h, 300041h, 0 dd 1E8h, 450041h, 320038h, 300031h, 310033h, 340038h, 430045h dd 340045h, 410039h, 310037h, 370046h, 320032h, 360032h dd 330041h, 440037h, 330043h, 360041h, 370036h, 330032h dd 320042h, 390036h, 440038h, 420046h, 370033h, 460041h dd 390038h, 330032h, 340030h, 460031h, 380031h, 390036h dd 310046h, 310035h, 350030h, 380032h, 440043h, 370038h dd 360030h, 430030h, 380033h, 430038h, 450033h, 410031h dd 450039h, 410046h, 390031h, 360042h, 350031h, 420038h dd 350037h, 360037h, 340039h, 380034h, 380043h, 390033h dd 380035h, 420041h, 420031h, 310045h, 360041h, 410036h dd 330041h, 320044h, 410036h, 360037h, 390042h, 320039h dd 390035h, 390039h, 440045h, 310042h, 340044h, 380036h dd 360034h, 330036h, 330033h, 300046h, 370034h, 320042h dd 310045h, 360046h, 380041h, 450039h, 330043h, 310046h dd 430033h, 360042h, 460044h, 360032h, 430039h, 330045h dd 390038h, 410044h, 420035h, 300042h, 450032h, 440030h dd 340038h, 460035h, 380031h, 440043h, 370031h, 330034h dd 380045h, 380038h, 440046h, 370041h, 310038h, 460030h dd 410038h, 340033h, 370035h, 390031h, 460034h, 380041h dd 450034h, 370046h, 310044h, 430037h, 440044h, 340036h dd 430044h, 370041h, 0 dd 1E8h, 380044h, 330037h, 350035h, 430037h, 380038h, 350043h dd 410030h, 380037h, 350043h, 380037h, 460046h, 390039h dd 390032h, 380038h, 360044h, 310035h, 310046h, 300036h dd 320042h, 300036h, 330042h, 460046h, 300045h, 320030h dd 360036h, 450039h, 340044h, 350037h, 410032h, 360039h dd 300041h, 430038h, 410030h, 360045h, 340035h, 300041h dd 410042h, 440037h, 350044h, 460038h, 370046h, 460037h dd 340033h, 310030h, 300042h, 450037h, 2 dup(330038h) dd 370030h, 460045h, 330045h, 360031h, 360042h, 410034h dd 330043h, 370046h, 450033h, 420036h, 420031h, 330030h dd 390039h, 410035h, 430046h, 420045h, 380033h, 330032h dd 300041h, 440037h, 310035h, 360032h, 460037h, 420039h dd 440031h, 310043h, 420032h, 320041h, 430033h, 340037h dd 430034h, 360030h, 410031h, 310030h, 450034h, 380031h dd 430033h, 330036h, 440043h, 410031h, 420043h, 300031h dd 350045h, 340043h, 300038h, 310041h, 440041h, 310044h dd 390043h, 320046h, 460036h, 330046h, 330038h, 420030h dd 360038h, 350036h, 390038h, 460046h, 390035h, 350032h dd 320044h, 340044h, 390034h, 360033h, 310037h, 340032h dd 420038h, 330046h, 420034h, 380042h, 460041h, 370036h dd 300032h, 450043h, 0 dd 1E8h, 460032h, 420043h, 420037h, 460039h, 430032h, 440044h dd 410033h, 370030h, 340036h, 420038h, 320036h, 350042h dd 330035h, 320043h, 360046h, 370031h, 310030h, 460041h dd 430045h, 390037h, 430043h, 450035h, 330042h, 410044h dd 350044h, 370033h, 360043h, 350030h, 420036h, 440039h dd 450039h, 370033h, 320044h, 330033h, 410038h, 330033h dd 340041h, 420034h, 370042h, 300033h, 330037h, 430032h dd 460036h, 430030h, 440046h, 300046h, 420032h, 340030h dd 390031h, 430039h, 420036h, 350030h, 430038h, 430041h dd 310045h, 430043h, 330045h, 320035h, 340031h, 460035h dd 420033h, 440043h, 430039h, 340035h, 340037h, 350041h dd 330038h, 450038h, 330034h, 330035h, 410031h, 410044h dd 340039h, 350033h, 300032h, 430041h, 370041h, 390046h dd 360045h, 450043h, 310032h, 370034h, 390043h, 390041h dd 350043h, 370045h, 420036h, 450035h, 450036h, 390032h dd 460030h, 330034h, 440036h, 390038h, 410039h, 430038h dd 380035h, 330033h, 450036h, 410043h, 340034h, 380043h dd 440046h, 430043h, 320044h, 320035h, 390041h, 410038h dd 350030h, 440032h, 300038h, 410036h, 340035h, 310036h dd 350031h, 390045h, 410041h, 350034h, 350046h, 390037h dd 440036h, 450045h, 0 dd 1E8h, 420038h, 360041h, 410038h, 340043h, 450044h, 450031h dd 460030h, 410031h, 370046h, 370033h, 410035h, 350034h dd 370043h, 460043h, 420031h, 340043h, 2 dup(370041h) dd 370031h, 410032h, 410031h, 460033h, 320043h, 300034h dd 320044h, 450035h, 380033h, 440046h, 300030h, 420044h dd 390034h, 450031h, 340031h, 390044h, 330043h, 370041h dd 310031h, 310034h, 340046h, 450035h, 460034h, 410045h dd 350031h, 420032h, 410038h, 370038h, 460036h, 360041h dd 350032h, 350042h, 310043h, 430031h, 440033h, 330039h dd 370041h, 390034h, 350035h, 300038h, 300031h, 410037h dd 310032h, 2 dup(340032h), 310041h, 350039h, 320045h dd 380042h, 330030h, 420038h, 390034h, 380042h, 450031h dd 390044h, 440033h, 300046h, 420031h, 390044h, 320032h dd 390043h, 370045h, 420034h, 330039h, 300044h, 310037h dd 380035h, 390032h, 310033h, 430046h, 320037h, 360037h dd 340035h, 430033h, 390042h, 450035h, 390042h, 310046h dd 380030h, 310031h, 340037h, 430031h, 330044h, 350038h dd 320045h, 430043h, 450046h, 350043h, 410044h, 310037h dd 460044h, 300030h, 360042h, 300033h, 320044h, 350032h dd 360043h, 460030h, 320041h, 430043h, 430035h, 460046h dd 320036h, 300039h, 0 dd 1E8h, 420035h, 440046h, 310039h, 340030h, 380030h, 370035h dd 360043h, 330043h, 340039h, 380036h, 410037h, 330039h dd 310036h, 450041h, 460045h, 340042h, 460045h, 430043h dd 410034h, 340039h, 440037h, 340031h, 460041h, 430045h dd 380038h, 420041h, 420038h, 430036h, 320038h, 430043h dd 440034h, 310036h, 430030h, 330038h, 460045h, 460031h dd 310041h, 340037h, 310044h, 430031h, 320045h, 370037h dd 340046h, 460033h, 450036h, 370045h, 340042h, 330045h dd 370043h, 410042h, 410041h, 330034h, 420037h, 390030h dd 310030h, 420031h, 320032h, 420042h, 380037h, 340032h dd 420043h, 330034h, 320033h, 430041h, 450038h, 340041h dd 360041h, 460045h, 440032h, 370038h, 370037h, 390037h dd 330046h, 430030h, 360036h, 430046h, 380046h, 330043h dd 320031h, 420045h, 300038h, 460039h, 380034h, 420044h dd 410044h, 340041h, 410043h, 410037h, 420041h, 310041h dd 320045h, 360032h, 330041h, 430038h, 390045h, 330042h dd 450039h, 300035h, 370034h, 450036h, 460030h, 310030h dd 360038h, 380036h, 360035h, 420030h, 320031h, 420037h dd 440042h, 320031h, 430046h, 300037h, 460041h, 360037h dd 310041h, 310045h, 410041h, 430042h, 380043h, 340038h dd 390035h, 370031h, 0 dd 1E8h, 440039h, 340046h, 440045h, 350034h, 450046h, 380042h dd 340037h, 350043h, 350044h, 420039h, 430037h, 300038h dd 340044h, 300038h, 390039h, 310031h, 420037h, 430033h dd 380044h, 300046h, 460044h, 300035h, 390033h, 330038h dd 390045h, 330033h, 300039h, 370044h, 340044h, 300031h dd 390045h, 340042h, 330034h, 420044h, 350037h, 430038h dd 300034h, 330038h, 380037h, 320039h, 440033h, 450030h dd 420044h, 340030h, 380046h, 350043h, 450043h, 320034h dd 320044h, 350038h, 440037h, 350036h, 420043h, 460043h dd 360037h, 460035h, 380037h, 320033h, 330041h, 320039h dd 380034h, 360033h, 370037h, 460045h, 410035h, 310042h dd 360042h, 410043h, 430034h, 310044h, 460037h, 390034h dd 440037h, 310035h, 440042h, 420038h, 390033h, 390038h dd 350045h, 430034h, 430032h, 360046h, 460035h, 380038h dd 330031h, 380038h, 420044h, 380030h, 360030h, 330035h dd 440032h, 300033h, 430035h, 320039h, 300033h, 370032h dd 340031h, 300044h, 440041h, 440039h, 460032h, 370045h dd 340043h, 420042h, 310045h, 440045h, 420043h, 300039h dd 320033h, 350032h, 420042h, 350035h, 370034h, 450035h dd 410039h, 440045h, 370041h, 440041h, 450044h, 350033h dd 330043h, 350041h, 0 dd 1E8h, 360036h, 440042h, 300032h, 330030h, 350033h, 370043h dd 390034h, 440035h, 460039h, 360033h, 460046h, 380036h dd 440046h, 440037h, 340032h, 300041h, 390039h, 300046h dd 330041h, 390031h, 460038h, 420032h, 430041h, 340039h dd 300030h, 320045h, 380031h, 320035h, 360033h, 440032h dd 340032h, 430045h, 440044h, 410031h, 380044h, 450039h dd 340035h, 370045h, 390046h, 370034h, 460030h, 450044h dd 440039h, 360032h, 390043h, 320035h, 430036h, 350039h dd 390034h, 450037h, 460037h, 430032h, 460038h, 450044h dd 310042h, 320035h, 440045h, 390036h, 430037h, 460034h dd 310033h, 350039h, 350046h, 300042h, 430045h, 390042h dd 320031h, 430042h, 320042h, 320031h, 460036h, 420039h dd 370045h, 350032h, 460037h, 300032h, 410030h, 350041h dd 350045h, 430046h, 330033h, 330030h, 340035h, 440033h dd 450035h, 390046h, 370044h, 410041h, 460034h, 320032h dd 420032h, 320045h, 430043h, 440035h, 370039h, 380043h dd 360046h, 410031h, 330032h, 420030h, 340044h, 380034h dd 340038h, 340044h, 380035h, 370034h, 310031h, 430036h dd 300041h, 360038h, 390034h, 460043h, 430041h, 350039h dd 410038h, 350036h, 300046h, 450044h, 340032h, 350044h dd 460037h, 350045h, 0 a__vbaputowner3 db '__vbaPutOwner3',0 align 4 a__vbainstrvar db '__vbaInStrVar',0 align 4 a__vbavarsub db '__vbaVarSub',0 a__vbai4var db '__vbaI4Var',0 align 4 unicode 0, < >,0 aBc24719aa57954: ; DATA XREF: .text:0040F00Fo unicode 0, <BC24719AA57954F7>,0 align 8 a__vbafileclose db '__vbaFileClose',0 align 4 a__vbagetowner3 db '__vbaGetOwner3',0 align 4 a__vbafileopen db '__vbaFileOpen',0 align 4 a__vbavarcopy db '__vbaVarCopy',0 align 4 a__vbastrvarmov db '__vbaStrVarMove',0 a__vbastrcat db '__vbaStrCat',0 a__vbalenbstr db '__vbaLenBstr',0 align 4 a__vbai4str db '__vbaI4Str',0 align 10h a__vbarecdestru db '__vbaRecDestruct',0 align 4 a__vbarecansito db '__vbaRecAnsiToUni',0 align 4 a__vbarecunitoa db '__vbaRecUniToAnsi',0 align 4 unicode 0, < >,0 aOi8gef0nadab6b: ; DATA XREF: sub_40E325+318o unicode 0, <oI8gEF0NAdAb6BgJ>,0 align 4 a__vbavarzero db '__vbaVarZero',0 align 4 a__vbastrcmp db '__vbaStrCmp',0 a__vbafreestrli db '__vbaFreeStrList',0 align 4 a__vbaerase db '__vbaErase',0 align 10h a__vbastrmove db '__vbaStrMove',0 align 10h a__vbastrcopy db '__vbaStrCopy',0 align 10h dd 0 a__vbagenerateb db '__vbaGenerateBoundsError',0 align 10h a__vbaaryconstr db '__vbaAryConstruct2',0 align 4 a__vbaui1i2 db '__vbaUI1I2',0 align 10h a__vbai4errvar db '__vbaI4ErrVar',0 align 10h a__vbastrtounic db '__vbaStrToUnicode',0 align 4 a__vbasetsystem db '__vbaSetSystemError',0 dd 16h a03spjxpoxnn: ; DATA XREF: sub_40E325+6B5o unicode 0, <03SPjxPoXnN>,0 align 8 a__vbastrtoansi db '__vbaStrToAnsi',0 align 4 a__vbavarmove db '__vbaVarMove',0 align 4 a__vbafreevarli db '__vbaFreeVarList',0 align 4 a__vbavarcat db '__vbaVarCat',0 a__vbavar2vec db '__vbaVar2Vec',0 align 4 a__vbaarymove db '__vbaAryMove',0 align 4 a__vbaredimpres db '__vbaRedimPreserve',0 align 4 a__vbaaryunlock db '__vbaAryUnlock',0 align 4 a__vbaarylock db '__vbaAryLock',0 align 4 a__vbai2i4 db '__vbaI2I4',0 align 4 a__vbaonerror db '__vbaOnError',0 align 4 a__vbaredim db '__vbaRedim',0 align 4 a__vbaerrorover db '__vbaErrorOverflow',0 align 4 a__vbafreestr db '__vbaFreeStr',0 align 4 a__vbaarydestru db '__vbaAryDestruct',0 align 4 a__vbaderefary1 db '__vbaDerefAry1',0 align 4 a__vbavargvarco db '__vbaVargVarCopy',0 align 10h a__vbafixstrcon db '__vbaFixstrConstruct',0 align 4 a__vbalbound db '__vbaLbound',0 a__vbaubound db '__vbaUbound',0 a__vbafreevar db '__vbaFreeVar',0 align 10h a__vbaaryvarvar db '__vbaAryVarVarg',0 a__vbaaryvar db '__vbaAryVar',0 a__vbaarycopy db '__vbaAryCopy',0 align 4 dd 4 asc_408760: ; DATA XREF: sub_40D806+16Ao unicode 0, <&H>,0 align 4 dd 18h dword_40876C dd 920001h, 1, 2 dup(0) dd 100h, 0 dd 20h aB4105bb7318446: ; DATA XREF: sub_40E325+83o unicode 0, <B4105BB731844633>,0 align 4 unicode 0, < >,0 aP6wh45cv043cq3: ; DATA XREF: sub_40E325+2Eo unicode 0, <P6wH45cv043CQ3H6>,0 align 4 a@_3: unicode 0, <@>,0 a3b5bba33c50196: ; DATA XREF: sub_40E325+B4o unicode 0, <3B5BBA33C5019624901EF1BF4B43C13D>,0 align 4 dd 12h aWji1cq8s0: ; DATA XREF: sub_40E325+A7o unicode 0, <WJi1CQ8s0>,0 unicode 0, < >,0 a4da55a5ba4177c: ; DATA XREF: sub_40E325+1BCo unicode 0, <4DA55A5BA4177C6C>,0 align 4 dd 10h aZti0yhxr: ; DATA XREF: sub_40E325+1AFo unicode 0, <Zti0yHXR>,0 align 4 a4_1: unicode 0, <4>,0 aF64d71c23d023d: ; DATA XREF: sub_40E325+1EDo unicode 0, <F64D71C23D023D104D8CB1AB26>,0 align 10h dd 1Ah aJdcxxabemq2lb: ; DATA XREF: sub_40E325+1E0o unicode 0, <JdcxxAbemq2lb>,0 unicode 0, < >,0 a90d8f4e1ff31b7: ; DATA XREF: sub_40E325+325o unicode 0, <90D8F4E1FF31B763>,0 align 4 a0_14: unicode 0, <0>,0 a861e877cee016f: ; DATA XREF: sub_40E325+356o unicode 0, <861E877CEE016F10F10E13DD>,0 align 10h dd 1Ah aF9r442gbj489h: ; DATA XREF: sub_40E325+349o unicode 0, <F9r442gBj489H>,0 unicode 0, < >,0 a0255e498be029d: ; DATA XREF: sub_40E325+448o unicode 0, <0255E498BE029D7C>,0 align 4 dd 1Ch a9awqe5modvclj3: ; DATA XREF: sub_40E325+43Bo unicode 0, <9awqE5moDVclj3>,0 align 4 a0_15: unicode 0, <0>,0 a1edeb7fdc4b8da: ; DATA XREF: sub_40E325+479o unicode 0, <1EDEB7FDC4B8DA8CBA5F4512>,0 align 4 unicode 0, < >,0 a5uk8nazmmh5k6o: ; DATA XREF: sub_40E325+46Co unicode 0, <5uk8nAzMMH5k6ODH>,0 align 4 unicode 0, < >,0 off_408A00 dd offset dword_410030 ; DATA XREF: sub_40E325+546o aDbf5a620eb0961: unicode 0, <DBF5A620EB0961>,0 align 4 dd 16h aAgi1yfp78le: ; DATA XREF: sub_40E325+539o unicode 0, <aGi1yFP78le>,0 a8_2: unicode 0, <8>,0 a0b8d12e825793f: ; DATA XREF: sub_40E325+577o unicode 0, <0B8D12E825793F7E8B99901F661A>,0 align 10h dd 1Ch aZc45x39l16oc08: ; DATA XREF: sub_40E325+56Ao unicode 0, <zC45X39L16Oc08>,0 align 4 unicode 0, < >,0 a750b1e8f1accec: ; DATA XREF: sub_40E325+6C2o unicode 0, <750B1E8F1ACCEC4F>,0 align 4 a4_2: unicode 0, <4>,0 a97b17caec49ab7: ; DATA XREF: sub_40E325+6F3o unicode 0, <97B17CAEC49AB769A910C73427>,0 align 4 dd 1Ah a5jjxe92ktwfrh: ; DATA XREF: sub_40E325+6E6o unicode 0, <5JjxE92kTWfRH>,0 unicode 0, < >,0 aDc81a966f01098: ; DATA XREF: sub_40E325+832o unicode 0, <DC81A966F01098B7>,0 align 10h dd 1Ah aEx4wuvrkqtq62: ; DATA XREF: sub_40E325+825o unicode 0, <ex4wuvRKQTq62>,0 a0_16: unicode 0, <0>,0 a5fb7248e5f9d14: ; DATA XREF: sub_40E325+863o unicode 0, <5FB7248E5F9D14BCBD7D7F92>,0 align 4 dd 18h aS3u4yxkkfm3p: ; DATA XREF: sub_40E325+856o unicode 0, <s3U4yXkkfm3P>,0 align 4 unicode 0, <$>,0 off_408BCC dd offset byte_410042 ; DATA XREF: .text:0040EDC3o a40a7c4f7f129c4: unicode 0, <40A7C4F7F129C44E>,0 align 4 dd 16h aH38i5q4gt10: ; DATA XREF: .text:0040EDB6o unicode 0, <h38i5q4gT10>,0 unicode 0, <L>,0 a07e6eb19108c5d: ; DATA XREF: .text:0040EDF4o unicode 0, <07E6EB19108C5D271A4E68C46AF0D32D082143>,0 align 4 dd 1Ch aM5i6t02o0qwu2f: ; DATA XREF: .text:0040EDE7o unicode 0, <M5i6T02o0QWU2f>,0 align 4 a__vbafpi4 db '__vbaFpI4',0 align 4 a4_3: unicode 0, <4>,0 aE217fe6beffc6f: ; DATA XREF: .text:0040F040o unicode 0, <E217FE6BEFFC6FAE39073AF75D>,0 align 10h dd 14h aTtov6yukox: ; DATA XREF: .text:0040F033o unicode 0, <ttoV6YuKOx>,0 align 4 dd 18h dword_408CF0 dd 920001h, 1, 2 dup(0) dd 10h, 0 dd 2000Ch, 2 dup(0) a__vbastrvarcop db '__vbaStrVarCopy',0 dword_408D24 dd 2 dup(0FFFFFFFFh)dword_408D2C dd 0 dd offset dword_401994+4 dd 0FFFFFFFFh, 0 dd offset dword_408D24 dd 3 dup(0) dd 0FFFFFFFFh, 0 align 10h dword_408D60 dd 0E9E9E9E9h ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408D64 proc near ; CODE XREF: sub_4097F2+316p ; sub_4097F2+51Ep ... var_3C = dword ptr -3Ch var_34 = dword ptr -34h var_30 = dword ptr -30h var_20 = byte ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 30h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4011A0 xor eax, eax mov [ebp+var_1C], eax mov [ebp+var_30], eax mov [ebp+var_34], eax lea eax, [ebp+var_20] push eax push 180h call __vbaFixstrConstruct mov esi, [ebp+arg_8] mov edx, [esi] lea ecx, [ebp+var_30] call __vbaAryVarVarg push eax push 200Ch call __vbaAryVar mov [ebp+var_34], eax lea eax, [ebp+var_34] push eax lea eax, [ebp+var_1C] push eax call __vbaAryCopy lea ecx, [ebp+var_30] call __vbaFreeVar lea eax, [ebp+var_1C] push eax push [ebp+arg_4] push [ebp+arg_0] call sub_408E65 push dword ptr [esi] mov [ebp+var_18], eax push 1 call __vbaUbound push dword ptr [esi] mov [ebp+var_3C], eax push 1 call __vbaLbound loc_408DFC: ; CODE XREF: sub_408D64+C2j mov edi, eax cmp edi, [ebp+var_3C] jg short loc_408E28 push edi push [ebp+var_1C] call __vbaDerefAry1 push edi push dword ptr [esi] mov ebx, eax call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVargVarCopy push 1 pop eax add eax, edi jo short loc_408E60 jmp short loc_408DFC ; --------------------------------------------------------------------------- loc_408E28: ; CODE XREF: sub_408D64+9Dj push offset loc_408E4C jmp short loc_408E38 ; --------------------------------------------------------------------------- loc_408E2F: ; DATA XREF: .text:004011ACo lea ecx, [ebp+var_30] call __vbaFreeVar retn ; --------------------------------------------------------------------------- loc_408E38: ; CODE XREF: sub_408D64+C9j ; DATA XREF: .text:004011A8o lea eax, [ebp+var_1C] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_20] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_408E4C: ; DATA XREF: sub_408D64:loc_408E28o mov ecx, [ebp+var_10] mov eax, [ebp+var_18] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 0Ch ; --------------------------------------------------------------------------- loc_408E60: ; CODE XREF: sub_408D64+C0j call __vbaErrorOverflow sub_408D64 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_408E65 proc near ; CODE XREF: sub_408D64+7Bp var_B8 = dword ptr -0B8h var_B4 = dword ptr -0B4h var_A4 = dword ptr -0A4h var_9C = dword ptr -9Ch var_94 = dword ptr -94h var_88 = dword ptr -88h var_84 = dword ptr -84h var_7C = dword ptr -7Ch var_74 = dword ptr -74h var_70 = dword ptr -70h var_60 = dword ptr -60h var_50 = dword ptr -50h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = byte ptr -2Ch var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp sub esp, 10h push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0A0h push ebx push esi push edi mov [ebp+var_10], esp mov [ebp+var_C], offset dword_4011B0 xor esi, esi mov [ebp+var_8], esi mov [ebp+var_4], esi mov [ebp+var_1C], esi mov [ebp+var_24], esi mov [ebp+var_30], esi mov [ebp+var_34], esi mov [ebp+var_38], esi mov [ebp+var_3C], esi mov [ebp+var_40], esi mov [ebp+var_50], esi mov [ebp+var_60], esi mov [ebp+var_70], esi mov [ebp+var_74], esi mov [ebp+var_84], esi lea eax, [ebp+var_2C] push eax push 180h call __vbaFixstrConstruct push esi push esi push 1 push 11h push offset dword_410018 push 1 mov ebx, 80h push ebx call __vbaRedim push esi push esi push 1 push 3 push offset dword_410014 push 4 push ebx call __vbaRedim add esp, 38h mov dword_41001C, esi mov edi, [ebp+arg_8] push dword ptr [edi] push 1 call __vbaUbound cmp eax, 0FFFFFFFFh jnz loc_409044 or [ebp+var_1C], eax loc_408F1A: ; CODE XREF: sub_408E65+233j mov eax, [ebp+arg_0] push dword ptr [eax] lea eax, [ebp+var_40] push eax call __vbaStrToAnsi push eax call sub_401C34 mov [ebp+var_88], eax call __vbaSetSystemError push [ebp+var_40] push [ebp+arg_0] call __vbaStrToUnicode lea ecx, [ebp+var_40] call __vbaFreeStr cmp [ebp+var_88], esi jz loc_409306 mov eax, [ebp+arg_4] push dword ptr [eax] lea eax, [ebp+var_40] push eax call __vbaStrToAnsi push eax push [ebp+var_88] call sub_401CD0 mov [ebp+var_88], eax call __vbaSetSystemError push [ebp+var_40] push [ebp+arg_4] call __vbaStrToUnicode mov eax, [ebp+var_88] mov dword_41001C, eax lea ecx, [ebp+var_40] call __vbaFreeStr cmp dword_41001C, esi jz loc_409306 push esi push dword ptr [edi] push 1 call __vbaUbound add eax, 1 jo loc_40937F push eax push 1 push 3 push offset dword_410014 push 4 push ebx call __vbaRedim add esp, 1Ch push dword_410014 push 1 pop ebx push ebx call __vbaUbound mov ecx, eax call __vbaI2I4 mov [ebp+var_9C], eax mov [ebp+var_20], ebx loc_408FEE: ; CODE XREF: sub_408E65+1DDj mov ax, word ptr [ebp+var_9C] cmp word ptr [ebp+var_20], ax jg loc_409228 mov ax, word ptr [ebp+var_20] sub ax, 1 jo loc_40937F movsx eax, ax push eax push dword ptr [edi] call __vbaDerefAry1 push eax call __vbaI4ErrVar mov ebx, eax movsx eax, word ptr [ebp+var_20] push eax push dword_410014 call __vbaDerefAry1 mov [eax], ebx push 1 pop eax add ax, word ptr [ebp+var_20] jo loc_40937F mov [ebp+var_20], eax jmp short loc_408FEE ; --------------------------------------------------------------------------- loc_409044: ; CODE XREF: sub_408E65+ACj push esi call __vbaOnError push esi push dword ptr [edi] push 1 call __vbaUbound push eax push 1 push 0Bh lea eax, [ebp+var_34] push eax push 2 push ebx call __vbaRedim add esp, 1Ch push dword ptr [edi] push 1 call __vbaUbound mov ecx, eax call __vbaI2I4 mov [ebp+var_94], eax push dword ptr [edi] push 1 call __vbaLbound mov ecx, eax call __vbaI2I4 mov [ebp+var_20], eax loc_409091: ; CODE XREF: sub_408E65+3BEj cmp ax, word ptr [ebp+var_94] jg loc_408F1A movsx eax, ax mov [ebp+var_B4], eax push eax push [ebp+var_34] call __vbaDerefAry1 mov [eax], si push dword ptr [edi] lea eax, [ebp+var_38] push eax call __vbaAryLock push [ebp+var_B4] push [ebp+var_38] call __vbaDerefAry1 push eax call rtcVarType mov [ebp+var_88], eax lea eax, [ebp+var_38] push eax call __vbaAryUnlock cmp [ebp+var_88], 8 jnz loc_409213 push esi push [ebp+var_B4] push 1 push offset dword_401B94 lea eax, [ebp+var_30] push eax push 4 push esi call __vbaRedimPreserve add esp, 1Ch push dword ptr [edi] lea eax, [ebp+var_38] push eax call __vbaAryLock push esi push ebx push [ebp+var_B4] push [ebp+var_38] call __vbaDerefAry1 push eax lea eax, [ebp+var_50] push eax call rtcStrConvVar2 lea eax, [ebp+var_38] push eax call __vbaAryUnlock push esi lea eax, [ebp+var_60] push eax call rtcVarBstrFromAnsi lea eax, [ebp+var_50] push eax lea eax, [ebp+var_60] push eax lea eax, [ebp+var_70] push eax call __vbaVarCat push eax lea eax, [ebp+var_74] push eax call __vbaVar2Vec lea eax, [ebp+var_74] push eax push [ebp+var_B4] push [ebp+var_30] call __vbaDerefAry1 push eax call __vbaAryMove lea eax, [ebp+var_70] push eax lea eax, [ebp+var_60] push eax lea eax, [ebp+var_50] push eax push 3 call __vbaFreeVarList add esp, 10h push [ebp+var_30] lea eax, [ebp+var_3C] push eax call __vbaAryLock push [ebp+var_B4] push [ebp+var_3C] call __vbaDerefAry1 push dword ptr [eax] lea eax, [ebp+var_38] push eax call __vbaAryLock push esi push [ebp+var_38] call __vbaDerefAry1 push eax call VarPtr mov ebx, eax lea eax, [ebp+var_38] push eax call __vbaAryUnlock lea eax, [ebp+var_3C] push eax call __vbaAryUnlock mov [ebp+var_7C], ebx mov [ebp+var_84], 3 lea ebx, [ebp+var_84] push [ebp+var_B4] push dword ptr [edi] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove movsx eax, word ptr [ebp+var_20] push eax push [ebp+var_34] call __vbaDerefAry1 or word ptr [eax], 0FFFFh mov ebx, 80h loc_409213: ; CODE XREF: sub_408E65+283j push 1 pop eax add ax, word ptr [ebp+var_20] jo loc_40937F mov [ebp+var_20], eax jmp loc_409091 ; --------------------------------------------------------------------------- loc_409228: ; CODE XREF: sub_408E65+194j call sub_409384 push esi push esi push esi push esi push eax call sub_401C88 mov ebx, eax call __vbaSetSystemError mov [ebp+var_24], ebx cmp word ptr [ebp+var_1C], si jnz loc_409306 push dword ptr [edi] push 1 call __vbaUbound mov ecx, eax call __vbaI2I4 mov [ebp+var_A4], eax push dword ptr [edi] push 1 call __vbaLbound mov ecx, eax call __vbaI2I4 loc_409271: ; CODE XREF: sub_408E65+49Cj mov [ebp+var_20], eax cmp ax, word ptr [ebp+var_A4] jg loc_409306 movsx ebx, ax push ebx push [ebp+var_34] call __vbaDerefAry1 cmp [eax], si jz short loc_4092F8 push [ebp+var_30] lea eax, [ebp+var_38] push eax call __vbaAryLock push ebx push [ebp+var_38] call __vbaDerefAry1 mov [ebp+var_7C], eax mov [ebp+var_84], 6011h push esi push 40h lea eax, [ebp+var_84] push eax lea eax, [ebp+var_50] push eax call rtcStrConvVar2 lea eax, [ebp+var_38] push eax call __vbaAryUnlock lea edx, [ebp+var_50] push ebx push dword ptr [edi] mov [ebp+var_B8], edx call __vbaDerefAry1 mov ecx, eax mov eax, [ebp+var_B8] mov edx, eax call __vbaVarMove lea ecx, [ebp+var_50] call __vbaFreeVar loc_4092F8: ; CODE XREF: sub_408E65+42Bj push 1 pop eax add ax, word ptr [ebp+var_20] jo short loc_40937F jmp loc_409271 ; --------------------------------------------------------------------------- loc_409306: ; CODE XREF: sub_408E65+EDj ; sub_408E65+13Cj ... push offset loc_40936B jmp short loc_409349 ; --------------------------------------------------------------------------- loc_40930D: ; DATA XREF: .text:004011BCo lea eax, [ebp+var_38] push eax call __vbaAryUnlock lea eax, [ebp+var_3C] push eax call __vbaAryUnlock lea ecx, [ebp+var_40] call __vbaFreeStr lea eax, [ebp+var_70] push eax lea eax, [ebp+var_60] push eax lea eax, [ebp+var_50] push eax push 3 call __vbaFreeVarList add esp, 10h lea eax, [ebp+var_74] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_409349: ; CODE XREF: sub_408E65+4A6j ; DATA XREF: .text:004011B8o lea ecx, [ebp+var_2C] call __vbaFreeStr lea eax, [ebp+var_30] push eax push offset dword_401B94 call __vbaAryDestruct lea eax, [ebp+var_34] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40936B: ; DATA XREF: sub_408E65:loc_409306o mov eax, [ebp+var_24] mov ecx, [ebp+var_18] mov large fs:0, ecx pop edi pop esi pop ebx leave retn 0Ch ; --------------------------------------------------------------------------- loc_40937F: ; CODE XREF: sub_408E65+14Fj ; sub_408E65+1A2j ... call __vbaErrorOverflow sub_408E65 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_409384 proc near ; CODE XREF: sub_408E65:loc_409228p var_38 = dword ptr -38h var_30 = dword ptr -30h var_28 = byte ptr -28h var_24 = dword ptr -24h var_1C = byte ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 34h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4011C0 lea eax, [ebp+var_1C] xor ebx, ebx push eax push 180h mov [ebp+var_24], ebx mov [ebp+var_28], bl mov [ebp+var_30], ebx call __vbaFixstrConstruct push ebx push dword_410014 push 1 pop esi push esi call __vbaUbound imul eax, 6 jo loc_4095E7 add eax, 32h jo loc_4095E7 push eax push esi push 11h push offset dword_410018 push esi push 80h call __vbaRedim add esp, 1Ch push dword_410018 lea eax, [ebp+var_24] push eax call __vbaAryLock push ebx push [ebp+var_24] call __vbaDerefAry1 push eax call VarPtr mov edi, eax lea eax, [ebp+var_24] push eax call __vbaAryUnlock lea eax, [ebp+var_30] push eax mov [ebp+var_30], edi call sub_4097AB push dword_410018 mov [ebp+var_18], eax lea eax, [ebp+var_24] push eax call __vbaAryLock push ebx push [ebp+var_24] call __vbaDerefAry1 push eax call VarPtr mov edi, eax lea eax, [ebp+var_24] push eax call __vbaAryUnlock mov eax, [ebp+var_18] sub eax, edi jo loc_4095E7 mov dword_410010, eax sub eax, esi jo loc_4095E7 mov [ebp+var_38], eax xor edi, edi loc_40947C: ; CODE XREF: sub_409384+123j cmp edi, [ebp+var_38] jg short loc_4094A9 mov cx, 0CCh call __vbaUI1I2 push edi push dword_410018 mov bl, al call __vbaDerefAry1 mov [eax], bl push 1 pop eax add eax, edi jo loc_4095E7 mov edi, eax jmp short loc_40947C ; --------------------------------------------------------------------------- loc_4094A9: ; CODE XREF: sub_409384+FBj mov cx, 58h call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B push 59h pop ebx mov cx, bx call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B mov cx, bx call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B mov cx, bx call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B mov cx, bx call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B mov cx, 50h call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B push dword_410014 mov edi, esi push esi or ebx, 0FFFFFFFFh call __vbaUbound loc_409537: ; CODE XREF: sub_409384+1FBj mov esi, eax cmp esi, edi jl short loc_409581 mov cx, 68h call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B push dword_410014 lea eax, [ebp+var_24] push eax call __vbaAryLock push esi push [ebp+var_24] call __vbaDerefAry1 push eax call sub_4096BA lea eax, [ebp+var_24] push eax call __vbaAryUnlock mov eax, ebx add eax, esi jo short loc_4095E7 jmp short loc_409537 ; --------------------------------------------------------------------------- loc_409581: ; CODE XREF: sub_409384+1B7j push offset dword_41001C call sub_4095EC mov cx, 0C3h call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B mov cx, 0CCh call __vbaUI1I2 mov [ebp+var_28], al lea eax, [ebp+var_28] push eax call sub_40977B mov eax, [ebp+var_18] mov [ebp+var_14], eax push offset loc_4095D5 jmp short loc_4095CC ; --------------------------------------------------------------------------- loc_4095C2: ; DATA XREF: .text:004011CCo lea eax, [ebp+var_24] push eax call __vbaAryUnlock retn ; --------------------------------------------------------------------------- loc_4095CC: ; CODE XREF: sub_409384+23Cj ; DATA XREF: .text:004011C8o lea ecx, [ebp+var_1C] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_4095D5: ; DATA XREF: sub_409384+237o mov ecx, [ebp+var_10] mov eax, [ebp+var_14] pop edi pop esi mov large fs:0, ecx pop ebx leave retn ; --------------------------------------------------------------------------- loc_4095E7: ; CODE XREF: sub_409384+54j ; sub_409384+5Dj ... call __vbaErrorOverflow sub_409384 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4095EC proc near ; CODE XREF: sub_409384+202p var_24 = dword ptr -24h var_1C = byte ptr -1Ch var_18 = dword ptr -18h var_14 = byte ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 18h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4011D0 xor eax, eax mov [ebp+var_18], eax mov [ebp+var_1C], al mov [ebp+var_24], eax lea eax, [ebp+var_14] push eax push 180h call __vbaFixstrConstruct mov cx, 0E8h call __vbaUI1I2 mov [ebp+var_1C], al lea eax, [ebp+var_1C] push eax call sub_40977B push dword_410018 lea eax, [ebp+var_18] push eax call __vbaAryLock push dword_410010 push [ebp+var_18] call __vbaDerefAry1 push eax call VarPtr mov esi, eax lea eax, [ebp+var_18] push eax call __vbaAryUnlock mov eax, [ebp+arg_0] mov eax, [eax] sub eax, esi jo short loc_4096B5 sub eax, 4 jo short loc_4096B5 mov [ebp+var_24], eax lea eax, [ebp+var_24] push eax call sub_4096BA push offset loc_4096A4 jmp short loc_40969B ; --------------------------------------------------------------------------- loc_409691: ; DATA XREF: .text:004011DCo lea eax, [ebp+var_18] push eax call __vbaAryUnlock retn ; --------------------------------------------------------------------------- loc_40969B: ; CODE XREF: sub_4095EC+A3j ; DATA XREF: .text:004011D8o lea ecx, [ebp+var_14] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_4096A4: ; DATA XREF: sub_4095EC+9Eo mov ecx, [ebp+var_10] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 ; --------------------------------------------------------------------------- loc_4096B5: ; CODE XREF: sub_4095EC+8Bj ; sub_4095EC+90j call __vbaErrorOverflow sub_4095EC endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4096BA proc near ; CODE XREF: sub_409384+1E7p ; sub_4095EC+99p var_38 = dword ptr -38h var_34 = byte ptr -34h var_28 = byte ptr -28h var_1C = dword ptr -1Ch var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 38h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4011E0 push 11h push offset dword_401D10 lea eax, [ebp+var_28] xor edi, edi push eax mov [ebp+var_38], edi call __vbaAryConstruct2 lea eax, [ebp+var_34] push eax push 180h call __vbaFixstrConstruct push 4 push [ebp+arg_0] push [ebp+var_1C] call sub_401BEC call __vbaSetSystemError push 1 pop ebx loc_40971A: ; CODE XREF: sub_4096BA+8Aj push 3 pop eax cmp di, ax jg short loc_409746 movsx esi, di cmp esi, 4 jb short loc_40972F call __vbaGenerateBoundsError loc_40972F: ; CODE XREF: sub_4096BA+6Ej mov eax, [ebp+var_1C] add eax, esi push eax call sub_40977B mov ax, bx add ax, di jo short loc_409776 mov edi, eax jmp short loc_40971A ; --------------------------------------------------------------------------- loc_409746: ; CODE XREF: sub_4096BA+66j push offset loc_409765 loc_40974B: ; DATA XREF: .text:004011E8o lea eax, [ebp+var_28] mov [ebp+var_38], eax lea eax, [ebp+var_38] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_34] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_409765: ; DATA XREF: sub_4096BA:loc_409746o mov ecx, [ebp+var_10] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 ; --------------------------------------------------------------------------- loc_409776: ; CODE XREF: sub_4096BA+86j call __vbaErrorOverflow sub_4096BA endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_40977B proc near ; CODE XREF: sub_409384+135p ; sub_409384+14Cp ... arg_0 = dword ptr 4 push dword_410010 push dword_410018 call __vbaDerefAry1 mov ecx, [esp+arg_0] mov cl, [ecx] mov [eax], cl mov eax, dword_410010 add eax, 1 jo short loc_4097A6 mov dword_410010, eax retn 4 ; --------------------------------------------------------------------------- loc_4097A6: ; CODE XREF: sub_40977B+21j call __vbaErrorOverflow sub_40977B endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_4097AB proc near ; CODE XREF: sub_409384+AAp arg_0 = dword ptr 4 mov eax, [esp+arg_0] push esi mov esi, [eax] push 10h mov eax, esi sub eax, 1 jo short loc_4097ED cdq pop ecx idiv ecx push 0Fh pop ecx mov eax, esi push 10h sub ecx, edx jo short loc_4097ED add ecx, esi jo short loc_4097ED sub eax, 1 jo short loc_4097ED cdq pop esi idiv esi push 0Fh pop eax pop esi sub eax, edx jo short loc_4097ED test eax, eax jnz short loc_4097E8 add ecx, 10h jo short loc_4097ED loc_4097E8: ; CODE XREF: sub_4097AB+36j mov eax, ecx retn 4 ; --------------------------------------------------------------------------- loc_4097ED: ; CODE XREF: sub_4097AB+Ej ; sub_4097AB+1Dj ... call __vbaErrorOverflow sub_4097AB endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4097F2 proc near ; CODE XREF: sub_4097F2+2EB6p var_40C = dword ptr -40Ch var_404 = byte ptr -404h var_3D4 = dword ptr -3D4h var_3D0 = dword ptr -3D0h var_3C8 = dword ptr -3C8h var_3C0 = dword ptr -3C0h var_3B8 = dword ptr -3B8h var_3B0 = dword ptr -3B0h var_3A8 = dword ptr -3A8h var_3A0 = dword ptr -3A0h var_398 = dword ptr -398h var_390 = dword ptr -390h var_388 = dword ptr -388h var_380 = dword ptr -380h var_378 = dword ptr -378h var_370 = dword ptr -370h var_368 = dword ptr -368h var_360 = dword ptr -360h var_358 = dword ptr -358h var_350 = dword ptr -350h var_348 = dword ptr -348h var_340 = dword ptr -340h var_338 = dword ptr -338h var_330 = dword ptr -330h var_32C = dword ptr -32Ch var_328 = dword ptr -328h var_318 = dword ptr -318h var_314 = dword ptr -314h var_310 = dword ptr -310h var_30C = dword ptr -30Ch var_308 = dword ptr -308h var_304 = dword ptr -304h var_300 = dword ptr -300h var_2FC = dword ptr -2FCh var_2F8 = dword ptr -2F8h var_2F4 = byte ptr -2F4h var_2E0 = dword ptr -2E0h var_2DC = byte ptr -2DCh var_2D8 = dword ptr -2D8h var_2C4 = byte ptr -2C4h var_2C0 = byte ptr -2C0h var_2BC = dword ptr -2BCh var_2B4 = dword ptr -2B4h var_288 = dword ptr -288h var_284 = word ptr -284h var_270 = dword ptr -270h var_26C = dword ptr -26Ch var_268 = dword ptr -268h var_1C4 = dword ptr -1C4h var_1B8 = dword ptr -1B8h var_19C = dword ptr -19Ch var_198 = byte ptr -198h var_194 = dword ptr -194h var_190 = dword ptr -190h var_18A = word ptr -18Ah var_168 = dword ptr -168h var_15C = byte ptr -15Ch var_140 = byte ptr -140h var_13C = byte ptr -13Ch var_C8 = dword ptr -0C8h var_C4 = dword ptr -0C4h var_AC = byte ptr -0ACh var_A8 = byte ptr -0A8h var_A4 = byte ptr -0A4h var_A0 = byte ptr -0A0h var_9C = byte ptr -9Ch var_98 = dword ptr -98h var_94 = dword ptr -94h var_90 = dword ptr -90h var_8C = dword ptr -8Ch var_88 = word ptr -88h var_84 = dword ptr -84h var_80 = byte ptr -80h var_70 = dword ptr -70h var_6C = byte ptr -6Ch var_68 = byte ptr -68h var_64 = dword ptr -64h var_60 = byte ptr -60h var_5C = dword ptr -5Ch var_58 = byte ptr -58h var_54 = byte ptr -54h var_50 = byte ptr -50h var_4C = byte ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = byte ptr -40h var_3C = dword ptr -3Ch var_38 = byte ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = byte ptr -2Ch var_28 = byte ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 490h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4011F0 xor eax, eax push 10h lea edi, [ebp+var_44] stosd stosd stosd pop ecx xor eax, eax lea edi, [ebp+var_84] rep stosd push 3Eh lea edi, [ebp+var_90] stosd stosd stosd pop ecx xor eax, eax push 33h mov edx, [ebp+arg_0] xor esi, esi lea edi, [ebp+var_190] rep stosd pop ecx push 11h lea edi, [ebp+var_268] rep stosd pop ecx lea edi, [ebp+var_2B4] rep stosd lea edi, [ebp+var_2C4] stosd stosd stosd stosd push 0Ch pop ecx xor eax, eax lea edi, [ebp+var_2F4] rep stosd push 0Ah pop ecx lea edi, [ebp+var_404] rep stosd lea ecx, [ebp+var_194] mov [ebp+var_14], esi mov [ebp+var_94], esi mov [ebp+var_98], esi mov [ebp+var_194], esi mov [ebp+var_19C], esi mov [ebp+var_26C], esi mov [ebp+var_270], esi mov [ebp+var_2F8], esi mov [ebp+var_2FC], esi mov [ebp+var_300], esi mov [ebp+var_304], esi mov [ebp+var_308], esi mov [ebp+var_30C], esi mov [ebp+var_310], esi mov [ebp+var_314], esi mov [ebp+var_318], esi mov [ebp+var_328], esi mov [ebp+var_32C], esi mov [ebp+var_330], esi mov [ebp+var_340], esi mov [ebp+var_350], esi mov [ebp+var_360], esi mov [ebp+var_370], esi mov [ebp+var_380], esi mov [ebp+var_390], esi mov [ebp+var_3A0], esi mov [ebp+var_3B0], esi mov [ebp+var_3C0], esi mov [ebp+var_3D0], esi mov [ebp+var_3D4], esi call __vbaStrCopy push 11h push offset dword_402AF0 lea eax, [ebp+var_34] push eax call __vbaAryConstruct2 lea eax, [ebp+var_198] push eax push 100h call __vbaFixstrConstruct mov edx, offset a66udgwbrev3g ; "66UDGwBReV3g" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a748b0240d409c7 ; "748B0240D409C77A9163A0C2" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a78s1676sg6x9w5 ; "78s1676SG6X9W5d" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a236e6492a77bf3 ; "236E6492A77BF3EE435FA36725" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 2 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch lea eax, [ebp+var_84] push eax call VarPtr push 3 pop edi push esi push [ebp+var_32C] mov [ebp+var_338], eax mov [ebp+var_340], edi lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov eax, [ebp+arg_4] push dword ptr [eax] lea eax, [ebp+var_2F8] push eax call __vbaAryLock push esi push [ebp+var_2F8] call __vbaDerefAry1 push eax call VarPtr mov [ebp+var_3D4], eax lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov eax, [ebp+var_3D4] push 1 push [ebp+var_32C] mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 2 pop eax push eax push [ebp+var_32C] mov [ebp+var_358], 40h mov [ebp+var_360], eax lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h cmp word ptr [ebp+var_84], 5A4Dh jnz loc_40A175 mov edx, offset aBbww6zclp9 ; "bbwW6ZcLp9" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset aCda5d517da6a1c ; "CDA5D517DA6A1C8F11B46F05" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aOqnguece747 ; "oQNGueCE747" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a784e3efc38428b ; "784E3EFC38428B9F22E7301E7B" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 2 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch lea eax, [ebp+var_190] push eax call VarPtr push esi push [ebp+var_32C] mov [ebp+var_338], eax mov [ebp+var_340], edi lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov eax, [ebp+arg_4] push dword ptr [eax] lea eax, [ebp+var_2F8] push eax call __vbaAryLock push [ebp+var_48] push [ebp+var_2F8] call __vbaDerefAry1 push eax call VarPtr mov [ebp+var_3D4], eax lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov eax, [ebp+var_3D4] push 1 push [ebp+var_32C] mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 2 pop eax push eax push [ebp+var_32C] mov [ebp+var_358], 0F8h mov [ebp+var_360], eax lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h cmp [ebp+var_190], 4550h jnz loc_40A175 mov eax, [ebp+arg_8] push 44h pop ebx push dword ptr [eax] mov [ebp+var_2B4], ebx push offset dword_401F34 call __vbaStrCmp test eax, eax jnz short loc_409DED push esi lea eax, [ebp+var_194] mov [ebp+var_338], eax push 80h lea eax, [ebp+var_340] push eax lea eax, [ebp+var_328] push eax mov [ebp+var_340], 4008h call rtcStrConvVar2 lea eax, [ebp+var_328] push eax lea eax, [ebp+var_330] push eax call __vbaVar2Vec lea eax, [ebp+var_330] push eax lea eax, [ebp+var_14] push eax call __vbaAryMove lea ecx, [ebp+var_328] call __vbaFreeVar loc_409DED: ; CODE XREF: sub_4097F2+59Cj xor edx, edx lea ecx, [ebp+var_94] call __vbaStrCopy push 0Ch pop eax push 1 mov [ebp+var_2B4], ebx pop ebx mov edx, offset aKswmrhtlxw ; "kSWmRhtlXw" lea ecx, [ebp+var_300] mov [ebp+var_44], eax mov [ebp+var_90], eax mov [ebp+var_288], ebx mov [ebp+var_284], 5 call __vbaStrCopy mov edx, offset off_401F3C lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aAcrkqaxyf ; "acRkQaxYF" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a4c3798da46c9a6 ; "4C3798DA46C9A63344C70F8550AC" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 9 push ebx push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push [ebp+var_94] call VarPtr push esi push [ebp+var_32C] mov [ebp+var_338], eax mov [ebp+var_340], edi lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push [ebp+var_14] lea eax, [ebp+var_2F8] push eax call __vbaAryLock push esi push [ebp+var_2F8] call __vbaDerefAry1 push eax call VarPtr mov [ebp+var_3D4], eax lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov eax, [ebp+var_3D4] push 1 push [ebp+var_32C] mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_44] push eax call VarPtr push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_90] push eax call VarPtr push edi push [ebp+var_32C] mov [ebp+var_368], eax mov [ebp+var_370], edi lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 4 push [ebp+var_32C] mov [ebp+var_378], esi mov [ebp+var_380], 0Bh lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 5 push [ebp+var_32C] mov [ebp+var_388], 4 mov [ebp+var_390], 2 lea ebx, [ebp+var_390] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 6 push [ebp+var_32C] mov [ebp+var_398], esi mov [ebp+var_3A0], 2 lea ebx, [ebp+var_3A0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 7 push [ebp+var_32C] mov [ebp+var_3A8], esi mov [ebp+var_3B0], 2 lea ebx, [ebp+var_3B0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_2B4] push eax call VarPtr push 8 push [ebp+var_32C] mov [ebp+var_3B8], eax mov [ebp+var_3C0], edi lea ebx, [ebp+var_3C0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_2C4] push eax call VarPtr mov [ebp+var_3C8], eax mov [ebp+var_3D0], edi lea ebx, [ebp+var_3D0] push 9 push [ebp+var_32C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov ebx, eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase xor eax, eax cmp ebx, esi setz al neg eax mov ebx, eax lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h cmp bx, si jz short loc_40A181 loc_40A175: ; CODE XREF: sub_4097F2+373j ; sub_4097F2+57Cj or [ebp+var_19C], 0FFFFFFFFh jmp loc_40C010 ; --------------------------------------------------------------------------- loc_40A181: ; CODE XREF: sub_4097F2+981j mov edx, offset a9iul2xr64mhp ; "9IUL2Xr64MHP" lea ecx, [ebp+var_300] mov [ebp+var_268], 10002h call __vbaStrCopy mov edx, offset aBc1e2a7351a4ff ; "BC1E2A7351A4FF4B5E587BBB" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a5ixp5wm4te34zs ; "5IXp5wM4TE34zs" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a0ed63105fc600a ; "0ED63105FC600AA7E11ED2E2F2DC8895" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C0] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero lea eax, [ebp+var_268] push eax call VarPtr push 1 push [ebp+var_32C] mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov [ebp+var_3D4], eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax xor ebx, ebx cmp [ebp+var_3D4], esi lea eax, [ebp+var_304] push eax setz bl lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 neg ebx call __vbaFreeStrList add esp, 24h cmp bx, si jnz loc_40B25A mov edx, offset a8tb2vaqctgf9z ; "8TB2vAQcTGf9Z" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset off_4020AC lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aQ3p9wqf8 ; "q3p9Wqf8" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aB83d86b0a4b113 ; "B83D86B0A4B113EA5353200A33EA25FAB2" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 4 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+var_1C4] push 1 push [ebp+var_32C] add eax, 8 jo loc_40C0F9 mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_26C] push eax call VarPtr push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push edi push [ebp+var_32C] mov [ebp+var_368], 4 mov [ebp+var_370], 2 lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 4 push [ebp+var_32C] mov [ebp+var_378], esi mov [ebp+var_380], 2 lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h cmp [ebp+var_26C], esi jz loc_40B25A mov edx, offset a9d0ogazuvx ; "9D0oGazuVX" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset aC096280f9398b4 ; "C096280F9398B458ED" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aQno1otd7m94i ; "QNo1otD7m94I" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a6d0aa1bd28dff1 ; "6D0AA1BD28DFF131ED212889736DAACBC1669EC"... lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 1 push [ebp+var_32C] lea eax, [ebp+var_26C] mov [ebp+var_348], eax mov [ebp+var_350], 4003h lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov [ebp+var_3D4], eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase xor ebx, ebx cmp [ebp+var_3D4], esi setnz bl lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 neg ebx call __vbaFreeStrList add esp, 24h cmp bx, si jz loc_40B01D mov edx, offset aCj2mjrv4pg ; "cJ2MJRV4Pg" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset aF2309ece7696d9 ; "F2309ECE7696D968F48E5C60" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a3dr0zbqipyw8 ; "3dR0zbqiPyw8" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aBb31c3998c9a41 ; "BB31C3998C9A414AE646EA6B8813" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 9 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push [ebp+var_94] call VarPtr push esi push [ebp+var_32C] mov [ebp+var_338], eax mov [ebp+var_340], edi lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push [ebp+var_14] lea eax, [ebp+var_2F8] push eax call __vbaAryLock push esi push [ebp+var_2F8] call __vbaDerefAry1 push eax call VarPtr mov [ebp+var_3D4], eax lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov eax, [ebp+var_3D4] push 1 push [ebp+var_32C] mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_44] push eax call VarPtr push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_90] push eax call VarPtr push edi push [ebp+var_32C] mov [ebp+var_368], eax mov [ebp+var_370], edi lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 4 push [ebp+var_32C] mov [ebp+var_378], esi mov [ebp+var_380], 0Bh lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 5 push [ebp+var_32C] mov [ebp+var_388], 4 mov [ebp+var_390], 2 lea ebx, [ebp+var_390] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 6 push [ebp+var_32C] mov [ebp+var_398], esi mov [ebp+var_3A0], 2 lea ebx, [ebp+var_3A0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 7 push [ebp+var_32C] mov [ebp+var_3A8], esi mov [ebp+var_3B0], 2 lea ebx, [ebp+var_3B0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_2B4] push eax call VarPtr push 8 push [ebp+var_32C] mov [ebp+var_3B8], eax mov [ebp+var_3C0], edi lea ebx, [ebp+var_3C0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_2C4] push eax call VarPtr push 9 push [ebp+var_32C] mov [ebp+var_3C8], eax mov [ebp+var_3D0], edi lea ebx, [ebp+var_3D0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] mov [ebp+var_314], esi lea ecx, [ebp+var_30C] call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov ebx, eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase xor eax, eax cmp ebx, esi setz al neg eax mov ebx, eax lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h cmp bx, si jnz loc_40C010 mov edx, offset aL9otr1c6p ; "l9OTR1C6p" lea ecx, [ebp+var_300] mov [ebp+var_268], 10002h call __vbaStrCopy mov edx, offset a4203d6d59fddf5 ; "4203D6D59FDDF56EC94F76CC" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aHagq55v57vs4sj ; "hagq55V57vS4SJ" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a4233a8a68c2a47 ; "4233A8A68C2A47C2FC102FB30E20182A" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C0] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero lea eax, [ebp+var_268] push eax call VarPtr push 1 push [ebp+var_32C] mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov [ebp+var_3D4], eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax xor ebx, ebx cmp [ebp+var_3D4], esi lea eax, [ebp+var_304] push eax setz bl lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 neg ebx call __vbaFreeStrList add esp, 24h cmp bx, si jnz loc_40B25A mov edx, offset aQl7o8shlufpbs ; "Ql7o8SHLuFpbs" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a7d6917e7d01217 ; "7D6917E7D012172F3148882A" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aJu9053o9 ; "jU9053o9" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset off_4023F0 lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 4 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+var_1C4] push 1 push [ebp+var_32C] add eax, 8 jo loc_40C0F9 mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_26C] push eax call VarPtr push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push edi push [ebp+var_32C] mov [ebp+var_368], 4 mov [ebp+var_370], 2 lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 4 push [ebp+var_32C] mov [ebp+var_378], esi mov [ebp+var_380], 2 lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h mov edx, offset a3lu28j05lzy7t8 ; "3lU28J05Lzy7T8Ea" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a23d7effdb010ac ; "23D7EFFDB010AC5299" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aGvnl8kkrchi9 ; "GvNL8kKrcHI9" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aBfb598a9f4593e ; "BFB598A9F4593E69704C8F680D4B5B08AE69C3C"... lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 1 push [ebp+var_32C] lea eax, [ebp+var_26C] mov [ebp+var_348], eax mov [ebp+var_350], 4003h lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov [ebp+var_3D4], eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax xor ebx, ebx cmp [ebp+var_3D4], esi lea eax, [ebp+var_304] push eax setnz bl lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 neg ebx call __vbaFreeStrList add esp, 24h cmp bx, si jnz loc_40B25A loc_40B01D: ; CODE XREF: sub_4097F2+F2Fj mov edx, offset a1loxb3vm6p ; "1LoxB3vm6P" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset aAe30e614b1c8fe ; "AE30E614B1C8FE51FE66CD45" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aP0yzvoux ; "P0yzvoux" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a92929c96d0df8b ; "92929C96D0DF8BEA994F86F36A6B" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 4 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 1 push [ebp+var_32C] lea eax, [ebp+var_15C] mov [ebp+var_348], eax mov [ebp+var_350], 4003h lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 2 push [ebp+var_32C] lea eax, [ebp+var_140] mov [ebp+var_358], eax mov [ebp+var_360], 4003h lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push edi push [ebp+var_32C] mov [ebp+var_368], 3000h mov [ebp+var_370], edi lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov [ebp+var_378], 40h mov [ebp+var_380], edi lea ebx, [ebp+var_380] push 4 push [ebp+var_32C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 mov [ebp+var_3D4], eax lea eax, [ebp+var_32C] push eax push esi call __vbaErase mov eax, [ebp+var_3D4] mov [ebp+var_270], eax lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h cmp [ebp+var_270], esi jnz loc_40B529 loc_40B25A: ; CODE XREF: sub_4097F2+B47j ; sub_4097F2+D7Dj ... or [ebp+var_19C], 0FFFFFFFFh mov edx, offset a3amlz9t0w1034c ; "3aMlZ9T0w1034c2" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a1b61374817aace ; "1B61374817AACE4C" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a1au3sqsh ; "1aU3sQSH" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a89c0cc81f97763 ; "89C0CC81F9776335DD1FEF" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_32C] push eax push 10h mov edi, 880h push edi call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C0] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h mov edx, offset a8ehqudo1 ; "8EhquDo1" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a008531098ea886 ; "008531098EA8863B" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aSl93hjyrxhef4e ; "sL93HJYRXHEf4ek" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a4c92994641507d ; "4C92994641507DBED217B9" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push edi call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea edi, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarZero mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h jmp loc_40C010 ; --------------------------------------------------------------------------- loc_40B529: ; CODE XREF: sub_4097F2+1A62j mov edx, offset a90r8my61b5ojq ; "90r8My61B5ojq" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a70f95929ec7810 ; "70F95929EC78109CCEC1B6B9" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset aL5l4b46u6kxi23 ; "l5l4B46u6kxI23xp" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset a2dd20b24a4f87a ; "2DD20B24A4F87A5A90D61A02F05DEE8876C0" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 4 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 1 push [ebp+var_32C] lea eax, [ebp+var_270] mov [ebp+var_348], eax mov [ebp+var_350], 4003h lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+arg_4] push dword ptr [eax] lea eax, [ebp+var_2F8] push eax call __vbaAryLock push esi push [ebp+var_2F8] call __vbaDerefAry1 push eax call VarPtr mov [ebp+var_3D4], eax lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov eax, [ebp+var_3D4] push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push edi push [ebp+var_32C] lea eax, [ebp+var_13C] mov [ebp+var_368], eax mov [ebp+var_370], 4003h lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero lea eax, [ebp+var_98] push eax call VarPtr push 4 push [ebp+var_32C] mov [ebp+var_378], eax mov [ebp+var_380], edi lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList mov ebx, [ebp+var_48] mov ax, [ebp+var_18A] add esp, 24h add ebx, 0F8h jo loc_40C0F9 sub ax, 1 jo loc_40C0F9 movsx eax, ax mov [ebp+var_18], ebx mov [ebp+var_40C], eax mov [ebp+var_1C], esi loc_40B7B6: ; CODE XREF: sub_4097F2+22C8j mov eax, [ebp+var_40C] cmp [ebp+var_1C], eax jg loc_40BABF mov eax, [ebp+arg_4] push dword ptr [eax] lea eax, [ebp+var_2F8] push eax call __vbaAryLock mov eax, [ebp+var_1C] imul eax, 28h jo loc_40C0F9 push 28h add eax, ebx jo loc_40C0F9 push eax push [ebp+var_2F8] call __vbaDerefAry1 push eax lea eax, [ebp+var_2F4] push eax lea eax, [ebp+var_404] push eax mov ebx, offset a0 ; "^0" push ebx call __vbaRecUniToAnsi push eax call sub_401BEC call __vbaSetSystemError lea eax, [ebp+var_404] push eax lea eax, [ebp+var_2F4] push eax push ebx call __vbaRecAnsiToUni lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov edx, offset a7xgj7euaylj8 ; "7XGJ7EuaYLj8" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a698e1f9adee36a ; "698E1F9ADEE36A15EE162CFF" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a952587vcua0z7z ; "952587VcUA0Z7zq5" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aFfdee7b15a6722 ; "FFDEE7B15A672287D21FFAF10290BBD9C90F" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 4 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+var_2E0] add eax, [ebp+var_270] push 1 push [ebp+var_32C] jo loc_40C0F9 mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov eax, [ebp+arg_4] push dword ptr [eax] lea eax, [ebp+var_2F8] push eax call __vbaAryLock push [ebp+var_2D8] push [ebp+var_2F8] call __vbaDerefAry1 push eax call VarPtr mov [ebp+var_3D4], eax lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock mov eax, [ebp+var_3D4] push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push edi push [ebp+var_32C] lea eax, [ebp+var_2DC] mov [ebp+var_368], eax mov [ebp+var_370], 4003h lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero lea eax, [ebp+var_98] push eax call VarPtr push 4 push [ebp+var_32C] mov [ebp+var_378], eax mov [ebp+var_380], edi lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList mov ebx, [ebp+var_18] add esp, 24h push 1 pop eax add eax, [ebp+var_1C] jo loc_40C0F9 mov [ebp+var_1C], eax jmp loc_40B7B6 ; --------------------------------------------------------------------------- loc_40BABF: ; CODE XREF: sub_4097F2+1FCDj mov edx, offset aSz8czos0mw3ztl ; "sZ8Czos0mw3ztlFE" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset aF05010ce27d129 ; "F05010CE27D129751F94D931" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a8p8fcw4cbk ; "8P8FCw4CbK" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aB87d22bf4ee52c ; "B87D22BF4EE52C87A326A9593645E0300A2D" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 4 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C4] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+var_1C4] push 1 push [ebp+var_32C] add eax, 8 jo loc_40C0F9 mov [ebp+var_348], eax mov [ebp+var_350], edi lea ebx, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_270] push eax call VarPtr push 2 push [ebp+var_32C] mov [ebp+var_358], eax mov [ebp+var_360], edi lea ebx, [ebp+var_360] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push edi push [ebp+var_32C] mov [ebp+var_368], 4 mov [ebp+var_370], 2 lea ebx, [ebp+var_370] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove lea eax, [ebp+var_98] push eax call VarPtr push 4 push [ebp+var_32C] mov [ebp+var_378], eax mov [ebp+var_380], edi lea ebx, [ebp+var_380] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList mov eax, [ebp+var_168] add esp, 24h add eax, [ebp+var_270] mov edx, offset aRe1qpk4n ; "re1QPk4n" jo loc_40C0F9 lea ecx, [ebp+var_300] mov [ebp+var_1B8], eax call __vbaStrCopy mov edx, offset aFfc119ac0690c0 ; "FFC119AC0690C02D3DE1CECD" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a219m11mb0it99o ; "219M11mB0IT99o2" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aFf7fc63c75ef87 ; "FF7FC63C75EF870384E5BCFA2B9BACFC" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C0] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea ebx, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero lea eax, [ebp+var_268] push eax call VarPtr push 1 push [ebp+var_32C] mov [ebp+var_350], edi mov [ebp+var_348], eax lea edi, [ebp+var_350] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarMove mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h mov edx, offset aV92lu28b9m1y ; "v92lU28B9m1y" lea ecx, [ebp+var_300] call __vbaStrCopy mov edx, offset a2f5e1f435a5c54 ; "2F5E1F435A5C54D8C195BCEB" lea ecx, [ebp+var_2FC] call __vbaStrCopy lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_314] call __vbaStrMove mov edx, offset a329121fufk ; "329121FuFK" lea ecx, [ebp+var_308] call __vbaStrCopy mov edx, offset aD1d880b3c75824 ; "D1D880B3C758248D52E299B2" lea ecx, [ebp+var_304] call __vbaStrCopy lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_318] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_32C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_32C] lea eax, [ebp+var_2C0] mov [ebp+var_338], eax mov [ebp+var_340], 4003h lea edi, [ebp+var_340] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarZero mov edx, [ebp+var_318] lea ecx, [ebp+var_310] mov [ebp+var_318], esi call __vbaStrMove mov edx, [ebp+var_314] lea ecx, [ebp+var_30C] mov [ebp+var_314], esi call __vbaStrMove lea eax, [ebp+var_32C] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax call sub_408D64 lea eax, [ebp+var_32C] push eax push esi call __vbaErase lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList mov eax, [ebp+var_2BC] add esp, 24h mov [ebp+var_19C], eax loc_40C010: ; CODE XREF: sub_4097F2+98Aj ; sub_4097F2+128Bj ... push offset loc_40C0E2 jmp short loc_40C08D ; --------------------------------------------------------------------------- loc_40C017: ; DATA XREF: .text:004011FCo lea eax, [ebp+var_2F8] push eax call __vbaAryUnlock lea eax, [ebp+var_318] push eax lea eax, [ebp+var_314] push eax lea eax, [ebp+var_310] push eax lea eax, [ebp+var_30C] push eax lea eax, [ebp+var_308] push eax lea eax, [ebp+var_304] push eax lea eax, [ebp+var_300] push eax lea eax, [ebp+var_2FC] push eax push 8 call __vbaFreeStrList add esp, 24h lea ecx, [ebp+var_328] call __vbaFreeVar lea eax, [ebp+var_32C] push eax xor esi, esi push esi call __vbaAryDestruct lea eax, [ebp+var_330] push eax push esi call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40C08D: ; CODE XREF: sub_4097F2+2823j ; DATA XREF: .text:004011F8o lea eax, [ebp+var_14] push eax xor esi, esi push esi call __vbaAryDestruct lea eax, [ebp+var_34] mov [ebp+var_3D4], eax lea eax, [ebp+var_3D4] push eax push esi call __vbaAryDestruct lea ecx, [ebp+var_94] call __vbaFreeStr lea ecx, [ebp+var_194] call __vbaFreeStr lea ecx, [ebp+var_198] call __vbaFreeStr lea eax, [ebp+var_2B4] push eax push offset dword_401AD4 call __vbaRecDestruct retn ; --------------------------------------------------------------------------- loc_40C0E2: ; DATA XREF: sub_4097F2:loc_40C010o mov ecx, [ebp+var_10] mov eax, [ebp+var_19C] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 0Ch ; --------------------------------------------------------------------------- loc_40C0F9: ; CODE XREF: sub_4097F2+C2Bj ; sub_4097F2+152Dj ... call __vbaErrorOverflow loc_40C0FE: ; DATA XREF: .text:004016ECo push ebp mov ebp, esp sub esp, 18h push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp mov eax, 0A8h call __vbaChkstk push ebx push esi push edi mov [ebp+var_18], esp mov [ebp+var_14], offset dword_401200 mov [ebp+var_10], 0 mov [ebp+var_C], 0 mov [ebp+var_4], 1 mov [ebp+var_4], 2 push 0FFFFFFFFh call __vbaOnError mov [ebp+var_4], 3 xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3E9h push 3E8h call sub_40E279 mov edx, eax lea ecx, [ebp+var_48] call __vbaStrMove lea ecx, [ebp+var_68] call __vbaFreeStr mov [ebp+var_4], 4 xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3EAh push 3E8h call sub_40E279 mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove push eax call __vbaI4Str mov [ebp+var_24], eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch mov [ebp+var_4], 5 xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3EDh push 3E8h call sub_40E279 mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove push eax call __vbaI4Str mov [ebp+var_5C], eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch mov [ebp+var_4], 6 xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3EEh push 3E8h call sub_40E279 mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove push eax call __vbaI4Str mov [ebp+var_64], eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch mov [ebp+var_4], 7 xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3E8h push 3E8h call sub_40E325 mov [ebp+var_84], eax lea eax, [ebp+var_84] push eax lea eax, [ebp+var_28] push eax call __vbaAryMove lea ecx, [ebp+var_68] call __vbaFreeStr mov [ebp+var_4], 8 lea eax, [ebp+var_48] push eax lea eax, [ebp+var_28] push eax call sub_40DBAA mov [ebp+var_4], 9 cmp [ebp+var_5C], 0 jz short loc_40C2EF mov [ebp+var_4], 0Ah lea eax, [ebp+var_24] push eax lea eax, [ebp+var_28] push eax call loc_40ECE0 mov [ebp+var_84], eax lea eax, [ebp+var_84] push eax lea eax, [ebp+var_28] push eax call __vbaAryMove loc_40C2EF: ; CODE XREF: sub_4097F2+2AD1j mov [ebp+var_4], 0Ch mov [ebp+var_90], 6 mov [ebp+var_8C], 1 mov [ebp+var_30], 1 jmp short loc_40C325 ; --------------------------------------------------------------------------- loc_40C313: ; CODE XREF: sub_4097F2+2E28j mov eax, [ebp+var_30] add eax, [ebp+var_8C] jo loc_40C7E4 mov [ebp+var_30], eax loc_40C325: ; CODE XREF: sub_4097F2+2B1Fj mov eax, [ebp+var_30] cmp eax, [ebp+var_90] jg loc_40C61F mov [ebp+var_4], 0Dh xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3EBh mov eax, [ebp+var_30] add eax, 3E8h jo loc_40C7E4 push eax call sub_40E279 mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove push eax call __vbaLenBstr xor ecx, ecx test eax, eax setnle cl neg ecx mov [ebp+var_88], cx lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch movsx eax, [ebp+var_88] test eax, eax jz loc_40C613 mov [ebp+var_4], 0Eh xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3E9h mov eax, [ebp+var_30] add eax, 3E8h jo loc_40C7E4 push eax call sub_40E325 mov [ebp+var_84], eax lea eax, [ebp+var_84] push eax lea eax, [ebp+var_34] push eax call __vbaAryMove lea ecx, [ebp+var_68] call __vbaFreeStr mov [ebp+var_4], 0Fh xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3EAh mov eax, [ebp+var_30] add eax, 3E8h jo loc_40C7E4 push eax call sub_40E325 mov [ebp+var_84], eax lea eax, [ebp+var_84] push eax lea eax, [ebp+var_40] push eax call __vbaAryMove lea ecx, [ebp+var_68] call __vbaFreeStr mov [ebp+var_4], 10h xor edx, edx lea ecx, [ebp+var_68] call __vbaStrCopy lea eax, [ebp+var_68] push eax push 3EBh mov eax, [ebp+var_30] add eax, 3E8h jo loc_40C7E4 push eax call sub_40E279 mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove push eax call __vbaI4Str mov [ebp+var_44], eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch mov [ebp+var_4], 11h lea eax, [ebp+var_48] push eax lea eax, [ebp+var_34] push eax call sub_40DBAA mov [ebp+var_4], 12h lea eax, [ebp+var_48] push eax lea eax, [ebp+var_40] push eax call sub_40DBAA mov [ebp+var_4], 13h lea eax, [ebp+var_40] push eax call sub_40E0D6 mov edx, eax lea ecx, [ebp+var_3C] call __vbaStrMove mov [ebp+var_4], 14h call sub_40D252 mov edx, eax lea ecx, [ebp+var_68] call __vbaStrMove push eax push [ebp+var_3C] call __vbaStrCat mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove lea eax, [ebp+var_6C] push eax call sub_40C7E9 lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch mov [ebp+var_4], 15h push [ebp+var_34] push 1 call __vbaUbound add eax, 1 jo loc_40C7E4 cmp eax, [ebp+var_44] jnz short loc_40C535 jmp short loc_40C55F ; --------------------------------------------------------------------------- loc_40C535: ; CODE XREF: sub_4097F2+2D3Fj mov [ebp+var_4], 17h lea eax, [ebp+var_44] push eax lea eax, [ebp+var_34] push eax call loc_40ECE0 mov [ebp+var_84], eax lea eax, [ebp+var_84] push eax lea eax, [ebp+var_34] push eax call __vbaAryMove loc_40C55F: ; CODE XREF: sub_4097F2+2D41j mov [ebp+var_4], 19h call sub_40D252 mov edx, eax lea ecx, [ebp+var_70] call __vbaStrMove mov eax, [ebp+var_70] mov [ebp+var_C4], eax and [ebp+var_70], 0 lea eax, [ebp+var_34] push eax mov edx, [ebp+var_C4] lea ecx, [ebp+var_68] call __vbaStrMove push eax push [ebp+var_3C] call __vbaStrCat mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove push eax call sub_40D1A4 lea eax, [ebp+var_70] push eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 3 call __vbaFreeStrList add esp, 10h mov [ebp+var_4], 1Ah call sub_40D252 mov edx, eax lea ecx, [ebp+var_68] call __vbaStrMove push eax push [ebp+var_3C] call __vbaStrCat mov edx, eax lea ecx, [ebp+var_6C] call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_80] push eax call sub_40CA0D lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 2 call __vbaFreeStrList add esp, 0Ch lea ecx, [ebp+var_80] call __vbaFreeVar loc_40C613: ; CODE XREF: sub_4097F2+2BABj mov [ebp+var_4], 1Ch jmp loc_40C313 ; --------------------------------------------------------------------------- loc_40C61F: ; CODE XREF: sub_4097F2+2B3Cj mov [ebp+var_4], 1Dh mov [ebp+var_98], 3E8h mov [ebp+var_94], 1 mov [ebp+var_30], 1 jmp short loc_40C655 ; --------------------------------------------------------------------------- loc_40C643: ; CODE XREF: sub_4097F2+2EF6j mov eax, [ebp+var_30] add eax, [ebp+var_94] jo loc_40C7E4 mov [ebp+var_30], eax loc_40C655: ; CODE XREF: sub_4097F2+2E4Fj mov eax, [ebp+var_30] cmp eax, [ebp+var_98] jg loc_40C6ED mov [ebp+var_4], 1Eh call sub_40CCED mov edx, eax lea ecx, [ebp+var_70] call __vbaStrMove xor edx, edx lea ecx, [ebp+var_6C] call __vbaStrCopy mov eax, [ebp+var_70] mov [ebp+var_C8], eax and [ebp+var_70], 0 lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_28] push eax mov edx, [ebp+var_C8] lea ecx, [ebp+var_68] call __vbaStrMove push eax call sub_4097F2 xor ecx, ecx cmp eax, 0FFFFFFFFh setnz cl neg ecx mov [ebp+var_88], cx lea eax, [ebp+var_70] push eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 3 call __vbaFreeStrList add esp, 10h movsx eax, [ebp+var_88] test eax, eax jz short loc_40C6E1 jmp short loc_40C6ED ; --------------------------------------------------------------------------- loc_40C6E1: ; CODE XREF: sub_4097F2+2EEBj mov [ebp+var_4], 21h jmp loc_40C643 ; --------------------------------------------------------------------------- loc_40C6ED: ; CODE XREF: sub_4097F2+2E6Cj ; sub_4097F2+2EEDj push offset loc_40C7D5 jmp short loc_40C713 ; --------------------------------------------------------------------------- loc_40C6F4: ; DATA XREF: .text:0040120Co lea eax, [ebp+var_70] push eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_68] push eax push 3 call __vbaFreeStrList add esp, 10h lea ecx, [ebp+var_80] call __vbaFreeVar retn ; --------------------------------------------------------------------------- loc_40C713: ; CODE XREF: sub_4097F2+2F00j ; DATA XREF: .text:00401208o lea eax, [ebp+var_9C] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_A0] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_A4] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_A8] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_AC] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_28] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_2C] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_34] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_38] call __vbaFreeStr lea ecx, [ebp+var_3C] call __vbaFreeStr lea eax, [ebp+var_40] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_48] call __vbaFreeStr lea eax, [ebp+var_4C] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_50] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_54] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_58] push eax push 0 call __vbaAryDestruct lea eax, [ebp+var_60] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40C7D5: ; DATA XREF: sub_4097F2:loc_40C6EDo mov ecx, [ebp+var_20] mov large fs:0, ecx pop edi pop esi pop ebx leave retn ; --------------------------------------------------------------------------- loc_40C7E4: ; CODE XREF: sub_4097F2+2B2Aj ; sub_4097F2+2B64j ... call __vbaErrorOverflow sub_4097F2 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40C7E9 proc near ; CODE XREF: sub_4097F2+2D0Bp var_60 = dword ptr -60h var_58 = dword ptr -58h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 60h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4012A8 mov edi, [ebp+arg_0] push dword ptr [edi] xor esi, esi push offset dword_401F34 mov [ebp+var_14], esi mov [ebp+var_18], esi mov [ebp+var_1C], esi mov [ebp+var_20], esi mov [ebp+var_24], esi mov [ebp+var_28], esi mov [ebp+var_2C], esi mov [ebp+var_30], esi mov [ebp+var_34], esi mov [ebp+var_38], esi mov [ebp+var_3C], esi mov [ebp+var_4C], esi mov [ebp+var_50], esi mov [ebp+var_60], esi call __vbaStrCmp test eax, eax jz loc_40C9A0 mov edx, [edi] lea ecx, [ebp+var_18] call __vbaStrCopy push esi lea eax, [ebp+var_18] mov [ebp+var_58], eax push 80h lea eax, [ebp+var_60] push eax lea eax, [ebp+var_4C] push eax mov [ebp+var_60], 4008h call rtcStrConvVar2 lea eax, [ebp+var_4C] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_18] call __vbaStrMove lea ecx, [ebp+var_4C] call __vbaFreeVar mov edx, offset a9pcbooj6m7qf ; "9pcbOOJ6m7QF" lea ecx, [ebp+var_24] call __vbaStrCopy mov edx, offset aA9319c49294983 ; "A9319C49294983B6" lea ecx, [ebp+var_20] call __vbaStrCopy lea eax, [ebp+var_24] push eax lea eax, [ebp+var_20] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_38] call __vbaStrMove mov edx, offset aK1ik2ahs8 ; "k1Ik2ahS8" lea ecx, [ebp+var_2C] call __vbaStrCopy mov edx, offset a8e70488bee9000 ; "8E70488BEE9000E648D006" lea ecx, [ebp+var_28] call __vbaStrCopy lea eax, [ebp+var_2C] push eax lea eax, [ebp+var_28] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_3C] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_50] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push [ebp+var_18] call VarPtr push esi push [ebp+var_50] mov [ebp+var_58], eax mov [ebp+var_60], 3 lea edi, [ebp+var_60] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarMove mov edx, [ebp+var_3C] lea ecx, [ebp+var_34] mov [ebp+var_3C], esi call __vbaStrMove mov edx, [ebp+var_38] lea ecx, [ebp+var_30] mov [ebp+var_38], esi call __vbaStrMove lea eax, [ebp+var_50] push eax lea eax, [ebp+var_34] push eax lea eax, [ebp+var_30] push eax call sub_408D64 mov edi, eax lea eax, [ebp+var_50] push eax push esi call __vbaErase lea eax, [ebp+var_3C] push eax lea eax, [ebp+var_38] push eax lea eax, [ebp+var_34] push eax lea eax, [ebp+var_30] push eax lea eax, [ebp+var_2C] push eax lea eax, [ebp+var_28] push eax lea eax, [ebp+var_24] push eax lea eax, [ebp+var_20] push eax push 8 mov [ebp+var_1C], edi call __vbaFreeStrList add esp, 24h loc_40C9A0: ; CODE XREF: sub_40C7E9+65j push offset loc_40C9F9 jmp short loc_40C9E5 ; --------------------------------------------------------------------------- loc_40C9A7: ; DATA XREF: .text:004012B4o lea eax, [ebp+var_3C] push eax lea eax, [ebp+var_38] push eax lea eax, [ebp+var_34] push eax lea eax, [ebp+var_30] push eax lea eax, [ebp+var_2C] push eax lea eax, [ebp+var_28] push eax lea eax, [ebp+var_24] push eax lea eax, [ebp+var_20] push eax push 8 call __vbaFreeStrList add esp, 24h lea ecx, [ebp+var_4C] call __vbaFreeVar lea eax, [ebp+var_50] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40C9E5: ; CODE XREF: sub_40C7E9+1BCj ; DATA XREF: .text:004012B0o lea eax, [ebp+var_14] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_18] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40C9F9: ; DATA XREF: sub_40C7E9:loc_40C9A0o mov ecx, [ebp+var_10] mov eax, [ebp+var_1C] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 sub_40C7E9 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40CA0D proc near ; CODE XREF: sub_4097F2+2E02p var_BC = dword ptr -0BCh var_B4 = dword ptr -0B4h var_AC = dword ptr -0ACh var_A4 = dword ptr -0A4h var_9C = dword ptr -9Ch var_94 = dword ptr -94h var_8C = dword ptr -8Ch var_84 = dword ptr -84h var_7C = dword ptr -7Ch var_74 = dword ptr -74h var_6C = dword ptr -6Ch var_64 = dword ptr -64h var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0B8h push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_4012B8 mov eax, [ebp+arg_4] xor esi, esi push esi mov [ebp+var_64], eax push 80h lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_58] push eax mov [ebp+var_24], esi mov [ebp+var_28], esi mov [ebp+var_2C], esi mov [ebp+var_30], esi mov [ebp+var_34], esi mov [ebp+var_38], esi mov [ebp+var_3C], esi mov [ebp+var_40], esi mov [ebp+var_44], esi mov [ebp+var_48], esi mov [ebp+var_58], esi mov [ebp+var_5C], esi mov [ebp+var_7C], esi mov [ebp+var_8C], esi mov [ebp+var_9C], esi mov [ebp+var_AC], esi mov [ebp+var_BC], esi mov [ebp+var_6C], 4008h call rtcStrConvVar2 lea eax, [ebp+var_58] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_28] call __vbaStrMove lea ecx, [ebp+var_58] call __vbaFreeVar mov edx, offset a6rmu92js18g943 ; "6rMu92jS18G943x" lea ecx, [ebp+var_30] call __vbaStrCopy mov edx, offset aD13acee44f29b5 ; "D13ACEE44F29B5" lea ecx, [ebp+var_2C] call __vbaStrCopy lea eax, [ebp+var_30] push eax lea eax, [ebp+var_2C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_44] call __vbaStrMove mov edx, offset a5181n4etlj7i ; "5181N4EtLJ7I" lea ecx, [ebp+var_38] call __vbaStrCopy mov edx, offset a534c7f64368da1 ; "534C7F64368DA1C7EAD5E4A022" lea ecx, [ebp+var_34] call __vbaStrCopy lea eax, [ebp+var_38] push eax lea eax, [ebp+var_34] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_48] call __vbaStrMove push esi push 5 push 1 push esi lea eax, [ebp+var_5C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch mov [ebp+var_64], esi mov [ebp+var_6C], 2 push esi push [ebp+var_5C] lea edi, [ebp+var_6C] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarMove push 8 pop edi push 1 push [ebp+var_5C] mov [ebp+var_74], esi mov [ebp+var_7C], edi lea ebx, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarCopy push [ebp+var_28] call VarPtr push 2 push [ebp+var_5C] mov [ebp+var_84], eax mov [ebp+var_8C], 3 lea ebx, [ebp+var_8C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 3 push [ebp+var_5C] mov [ebp+var_94], esi mov [ebp+var_9C], edi lea ebx, [ebp+var_9C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarCopy push 4 push [ebp+var_5C] mov [ebp+var_A4], esi mov [ebp+var_AC], edi lea ebx, [ebp+var_AC] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarCopy push 5 pop eax push eax push [ebp+var_5C] mov [ebp+var_B4], eax mov [ebp+var_BC], 2 lea ebx, [ebp+var_BC] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_48] lea ecx, [ebp+var_40] mov [ebp+var_48], esi call __vbaStrMove mov edx, [ebp+var_44] lea ecx, [ebp+var_3C] mov [ebp+var_44], esi call __vbaStrMove lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_408D64 lea eax, [ebp+var_5C] push eax push esi call __vbaErase lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax lea eax, [ebp+var_38] push eax lea eax, [ebp+var_34] push eax lea eax, [ebp+var_30] push eax lea eax, [ebp+var_2C] push eax push edi call __vbaFreeStrList add esp, 24h push offset loc_40CCD0 jmp short loc_40CCC7 ; --------------------------------------------------------------------------- loc_40CC7B: ; DATA XREF: .text:004012C4o test [ebp+var_4], 4 jz short loc_40CC89 lea ecx, [ebp+var_24] call __vbaFreeVar loc_40CC89: ; CODE XREF: sub_40CA0D+272j lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax lea eax, [ebp+var_38] push eax lea eax, [ebp+var_34] push eax lea eax, [ebp+var_30] push eax lea eax, [ebp+var_2C] push eax push 8 call __vbaFreeStrList add esp, 24h lea ecx, [ebp+var_58] call __vbaFreeVar lea eax, [ebp+var_5C] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40CCC7: ; CODE XREF: sub_40CA0D+26Cj ; DATA XREF: .text:004012C0o lea ecx, [ebp+var_28] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40CCD0: ; DATA XREF: sub_40CA0D+267o mov eax, [ebp+arg_0] mov ecx, [ebp+var_14] lea esi, [ebp+var_24] mov edi, eax movsd movsd movsd movsd pop edi pop esi mov large fs:0, ecx pop ebx leave retn 8 sub_40CA0D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40CCED proc near ; CODE XREF: sub_4097F2+2E79p var_D4 = dword ptr -0D4h var_D0 = dword ptr -0D0h var_C8 = dword ptr -0C8h var_C0 = dword ptr -0C0h var_B8 = dword ptr -0B8h var_B0 = dword ptr -0B0h var_A8 = dword ptr -0A8h var_A0 = dword ptr -0A0h var_9C = dword ptr -9Ch var_8C = dword ptr -8Ch var_7C = dword ptr -7Ch var_6C = dword ptr -6Ch var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_2C = byte ptr -2Ch var_20 = dword ptr -20h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0DCh push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_4012C8 xor esi, esi push 11h push offset dword_402DF0 lea eax, [ebp+var_2C] push eax mov [ebp+var_34], esi mov [ebp+var_38], esi mov [ebp+var_3C], esi mov [ebp+var_40], esi mov [ebp+var_44], esi mov [ebp+var_48], esi mov [ebp+var_4C], esi mov [ebp+var_50], esi mov [ebp+var_54], esi mov [ebp+var_58], esi mov [ebp+var_5C], esi mov [ebp+var_6C], esi mov [ebp+var_7C], esi mov [ebp+var_8C], esi mov [ebp+var_9C], esi mov [ebp+var_A0], esi mov [ebp+var_B0], esi mov [ebp+var_C0], esi mov [ebp+var_D0], esi mov [ebp+var_D4], esi call __vbaAryConstruct2 mov edx, offset aS6llzg0jm ; "s6LlzG0Jm" lea ecx, [ebp+var_44] call __vbaStrCopy mov edx, offset a62cb79d3b18dc6 ; "62CB79D3B18DC608" lea ecx, [ebp+var_40] call __vbaStrCopy lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove mov edx, offset a16j2qgan9w ; "16J2qgaN9w" lea ecx, [ebp+var_4C] call __vbaStrCopy mov edx, offset a7b0af891653b6e ; "7B0AF891653B6EFA12A7FE509A9924B5" lea ecx, [ebp+var_48] call __vbaStrCopy lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_5C] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_A0] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push 2 pop edi push esi push [ebp+var_A0] mov [ebp+var_A8], esi mov [ebp+var_B0], edi lea ebx, [ebp+var_B0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_5C] lea ecx, [ebp+var_54] mov [ebp+var_5C], esi call __vbaStrMove mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove lea eax, [ebp+var_A0] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax call sub_408D64 mov [ebp+var_D4], eax lea eax, [ebp+var_A0] push eax push esi call __vbaErase mov eax, [ebp+var_D4] mov [ebp+var_34], eax lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax push 8 call __vbaFreeStrList add esp, 24h mov edx, offset a22j3589p74w5 ; "22j3589P74W5" lea ecx, [ebp+var_44] call __vbaStrCopy mov edx, offset a279edcbba0c482 ; "279EDCBBA0C48257" lea ecx, [ebp+var_40] call __vbaStrCopy lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove mov edx, offset aE5nokwj4j4zk6 ; "E5noKwj4j4Zk6" lea ecx, [ebp+var_4C] call __vbaStrCopy mov edx, offset aF74d6f4ba3113c ; "F74D6F4BA3113CA094C8665388A9AFB7762C" lea ecx, [ebp+var_48] call __vbaStrCopy lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_5C] call __vbaStrMove push esi push edi push 1 push esi lea eax, [ebp+var_A0] push eax push 10h push 880h call __vbaRedim lea eax, [ebp+var_34] add esp, 1Ch mov [ebp+var_A8], eax mov [ebp+var_B0], 4003h push esi push [ebp+var_A0] lea ebx, [ebp+var_B0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push [ebp+var_20] call VarPtr push 1 push [ebp+var_A0] mov [ebp+var_B8], eax mov [ebp+var_C0], 3 lea ebx, [ebp+var_C0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push edi push [ebp+var_A0] mov [ebp+var_C8], 180h mov [ebp+var_D0], edi lea ebx, [ebp+var_D0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_5C] lea ecx, [ebp+var_54] mov [ebp+var_5C], esi call __vbaStrMove mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove lea eax, [ebp+var_A0] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax call sub_408D64 lea eax, [ebp+var_A0] push eax push esi call __vbaErase lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax push 8 pop ebx push ebx call __vbaFreeStrList add esp, 24h lea eax, [ebp+var_2C] mov [ebp+var_D4], eax push esi lea eax, [ebp+var_D4] mov [ebp+var_A8], eax push 40h lea eax, [ebp+var_B0] push eax lea eax, [ebp+var_6C] push eax mov [ebp+var_B0], 6011h call rtcStrConvVar2 lea eax, [ebp+var_6C] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_38] call __vbaStrMove lea ecx, [ebp+var_6C] call __vbaFreeVar mov eax, [ebp+var_38] mov [ebp+var_A8], eax push esi lea eax, [ebp+var_6C] push eax mov [ebp+var_B0], ebx call rtcVarBstrFromAnsi push 1 pop eax push eax mov [ebp+var_B8], eax lea eax, [ebp+var_B0] push eax lea eax, [ebp+var_6C] push eax push esi lea eax, [ebp+var_7C] lea ecx, [ebp+var_38] push eax mov [ebp+var_C0], edi mov [ebp+var_C8], ecx mov [ebp+var_D0], 4008h call __vbaInStrVar push eax lea eax, [ebp+var_C0] push eax lea eax, [ebp+var_8C] push eax call __vbaVarSub push eax call __vbaI4Var push eax lea eax, [ebp+var_D0] push eax lea eax, [ebp+var_9C] push eax call rtcLeftCharVar lea eax, [ebp+var_9C] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_3C] call __vbaStrMove lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax push 3 call __vbaFreeVarList add esp, 10h push offset loc_40D192 jmp short loc_40D172 ; --------------------------------------------------------------------------- loc_40D10E: ; DATA XREF: .text:004012D4o test [ebp+var_4], 4 jz short loc_40D11C lea ecx, [ebp+var_3C] call __vbaFreeStr loc_40D11C: ; CODE XREF: sub_40CCED+425j lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax push 8 call __vbaFreeStrList lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax push 4 call __vbaFreeVarList add esp, 38h lea eax, [ebp+var_A0] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40D172: ; CODE XREF: sub_40CCED+41Fj ; DATA XREF: .text:004012D0o lea eax, [ebp+var_2C] mov [ebp+var_D4], eax lea eax, [ebp+var_D4] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_38] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40D192: ; DATA XREF: sub_40CCED+41Ao mov ecx, [ebp+var_14] mov eax, [ebp+var_3C] pop edi pop esi mov large fs:0, ecx pop ebx leave retn sub_40CCED endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40D1A4 proc near ; CODE XREF: sub_4097F2+2DB6p var_2C = dword ptr -2Ch var_24 = dword ptr -24h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 30h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_4012D8 mov edx, [ebp+arg_0] xor eax, eax lea ecx, [ebp+var_18] mov [ebp+var_18], eax mov [ebp+var_1C], eax mov [ebp+var_2C], eax call __vbaStrCopy lea eax, [ebp+var_2C] push eax mov [ebp+var_24], 80020004h mov [ebp+var_2C], 0Ah call rtcFreeFile lea ecx, [ebp+var_2C] mov esi, eax call __vbaFreeVar push [ebp+var_18] push esi push 0FFFFFFFFh push 20h call __vbaFileOpen push esi push [ebp+arg_4] push offset dword_402C44 call __vbaPutOwner3 push esi call __vbaFileClose push offset loc_40D23D jmp short loc_40D234 ; --------------------------------------------------------------------------- loc_40D22B: ; DATA XREF: .text:004012E4o lea ecx, [ebp+var_2C] call __vbaFreeVar retn ; --------------------------------------------------------------------------- loc_40D234: ; CODE XREF: sub_40D1A4+85j ; DATA XREF: .text:004012E0o lea ecx, [ebp+var_18] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40D23D: ; DATA XREF: sub_40D1A4+80o mov ecx, [ebp+var_10] mov ax, word ptr [ebp+var_1C] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 8 sub_40D1A4 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40D252 proc near ; CODE XREF: sub_4097F2+2CE5p ; sub_4097F2+2D74p ... var_D4 = dword ptr -0D4h var_D0 = dword ptr -0D0h var_C8 = dword ptr -0C8h var_C0 = dword ptr -0C0h var_B8 = dword ptr -0B8h var_B0 = dword ptr -0B0h var_A8 = dword ptr -0A8h var_A0 = dword ptr -0A0h var_9C = dword ptr -9Ch var_8C = dword ptr -8Ch var_7C = dword ptr -7Ch var_6C = dword ptr -6Ch var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_34 = dword ptr -34h var_2C = byte ptr -2Ch var_20 = dword ptr -20h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0D4h push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_4012E8 xor esi, esi push 11h push offset dword_402EA0 lea eax, [ebp+var_2C] push eax mov [ebp+var_34], esi mov [ebp+var_3C], esi mov [ebp+var_40], esi mov [ebp+var_44], esi mov [ebp+var_48], esi mov [ebp+var_4C], esi mov [ebp+var_50], esi mov [ebp+var_54], esi mov [ebp+var_58], esi mov [ebp+var_5C], esi mov [ebp+var_6C], esi mov [ebp+var_7C], esi mov [ebp+var_8C], esi mov [ebp+var_9C], esi mov [ebp+var_A0], esi mov [ebp+var_B0], esi mov [ebp+var_C0], esi mov [ebp+var_D0], esi mov [ebp+var_D4], esi call __vbaAryConstruct2 mov edx, offset a9oi0uto5k7v ; "9oI0UTO5k7V" lea ecx, [ebp+var_44] call __vbaStrCopy mov edx, offset a17f3eeee7cda4f ; "17F3EEEE7CDA4F4B" lea ecx, [ebp+var_40] call __vbaStrCopy lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove mov edx, offset aCqbh329n ; "CQbH329n" lea ecx, [ebp+var_4C] call __vbaStrCopy mov edx, offset a8497bb8ad55ed7 ; "8497BB8AD55ED78523DF55AA" lea ecx, [ebp+var_48] call __vbaStrCopy lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_5C] call __vbaStrMove push esi push 1 pop edi push edi push edi push esi lea eax, [ebp+var_A0] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_A0] mov [ebp+var_A8], 0FFh mov [ebp+var_B0], 2 lea ebx, [ebp+var_B0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push [ebp+var_20] call VarPtr push edi push [ebp+var_A0] mov [ebp+var_B8], eax mov [ebp+var_C0], 3 lea ebx, [ebp+var_C0] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_5C] lea ecx, [ebp+var_54] mov [ebp+var_5C], esi call __vbaStrMove mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove lea eax, [ebp+var_A0] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax call sub_408D64 lea eax, [ebp+var_A0] push eax push esi call __vbaErase lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax push 8 pop ebx push ebx call __vbaFreeStrList lea eax, [ebp+var_2C] mov [ebp+var_D4], eax add esp, 24h lea eax, [ebp+var_D4] push eax call sub_40E0D6 mov edx, eax lea ecx, [ebp+var_3C] call __vbaStrMove mov eax, [ebp+var_3C] mov [ebp+var_A8], eax push esi lea eax, [ebp+var_6C] push eax mov [ebp+var_B0], ebx call rtcVarBstrFromAnsi lea eax, [ebp+var_3C] mov [ebp+var_C8], eax push edi lea eax, [ebp+var_B0] push eax lea eax, [ebp+var_6C] push eax push esi lea eax, [ebp+var_7C] push eax mov [ebp+var_B8], edi mov [ebp+var_C0], 2 mov [ebp+var_D0], 4008h call __vbaInStrVar push eax lea eax, [ebp+var_C0] push eax lea eax, [ebp+var_8C] push eax call __vbaVarSub push eax call __vbaI4Var push eax lea eax, [ebp+var_D0] push eax lea eax, [ebp+var_9C] push eax call rtcLeftCharVar lea eax, [ebp+var_9C] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_40] call __vbaStrMove lea eax, [ebp+var_40] push eax call sub_40D5AE mov edx, eax lea ecx, [ebp+var_34] call __vbaStrMove lea ecx, [ebp+var_40] call __vbaFreeStr lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax push 3 call __vbaFreeVarList add esp, 10h push offset loc_40D59C jmp short loc_40D57C ; --------------------------------------------------------------------------- loc_40D518: ; DATA XREF: .text:004012F4o test [ebp+var_4], 4 jz short loc_40D526 lea ecx, [ebp+var_34] call __vbaFreeStr loc_40D526: ; CODE XREF: sub_40D252+2CAj lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax push 8 call __vbaFreeStrList lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax push 4 call __vbaFreeVarList add esp, 38h lea eax, [ebp+var_A0] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40D57C: ; CODE XREF: sub_40D252+2C4j ; DATA XREF: .text:004012F0o lea eax, [ebp+var_2C] mov [ebp+var_D4], eax lea eax, [ebp+var_D4] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_3C] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40D59C: ; DATA XREF: sub_40D252+2BFo mov ecx, [ebp+var_14] mov eax, [ebp+var_34] pop edi pop esi mov large fs:0, ecx pop ebx leave retn sub_40D252 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40D5AE proc near ; CODE XREF: sub_40D252+28Fp var_DC = dword ptr -0DCh var_D4 = dword ptr -0D4h var_CC = dword ptr -0CCh var_C4 = dword ptr -0C4h var_BC = dword ptr -0BCh var_B4 = dword ptr -0B4h var_AC = dword ptr -0ACh var_9C = dword ptr -9Ch var_8C = dword ptr -8Ch var_84 = dword ptr -84h var_7C = dword ptr -7Ch var_6C = dword ptr -6Ch var_5C = dword ptr -5Ch var_4C = dword ptr -4Ch var_44 = dword ptr -44h var_3C = dword ptr -3Ch var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0D4h push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_4012F8 mov edi, [ebp+arg_0] xor esi, esi push 1 lea eax, [ebp+var_BC] push eax lea eax, [ebp+var_3C] push eax mov [ebp+var_18], esi mov [ebp+var_1C], esi mov [ebp+var_20], esi mov [ebp+var_24], esi mov [ebp+var_28], esi mov [ebp+var_2C], esi mov [ebp+var_3C], esi mov [ebp+var_4C], esi mov [ebp+var_5C], esi mov [ebp+var_6C], esi mov [ebp+var_7C], esi mov [ebp+var_8C], esi mov [ebp+var_9C], esi mov [ebp+var_AC], esi mov [ebp+var_CC], esi mov [ebp+var_DC], esi mov [ebp+var_B4], edi mov [ebp+var_BC], 4008h call rtcRightCharVar mov edx, offset a876pst813y ; "876pSt813Y" lea ecx, [ebp+var_20] call __vbaStrCopy mov edx, offset a04 ; "04" lea ecx, [ebp+var_1C] call __vbaStrCopy lea eax, [ebp+var_20] push eax lea eax, [ebp+var_1C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_2C] call __vbaStrMove mov eax, [edi] push 8 pop edi mov edx, offset aY0x6xo45d80m3k ; "Y0X6xO45d80M3k" lea ecx, [ebp+var_28] mov [ebp+var_D4], eax mov [ebp+var_DC], edi call __vbaStrCopy mov edx, offset a31 ; "31" lea ecx, [ebp+var_24] call __vbaStrCopy lea eax, [ebp+var_28] push eax lea eax, [ebp+var_24] push eax call sub_40DA8A lea edx, [ebp+var_CC] lea ecx, [ebp+var_7C] mov [ebp+var_84], eax mov [ebp+var_8C], edi mov [ebp+var_C4], offset dword_401F34 mov [ebp+var_CC], edi call __vbaVarDup mov eax, [ebp+var_2C] mov [ebp+var_44], eax lea eax, [ebp+var_3C] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_5C] push eax mov [ebp+var_2C], esi mov [ebp+var_4C], 8008h call __vbaVarCmpEq mov edx, eax lea ecx, [ebp+var_6C] call __vbaVarMove lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_9C] push eax call rtcImmediateIf lea eax, [ebp+var_DC] push eax lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_AC] push eax call __vbaVarCat push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_18] call __vbaStrMove lea eax, [ebp+var_2C] push eax lea eax, [ebp+var_28] push eax lea eax, [ebp+var_24] push eax lea eax, [ebp+var_20] push eax lea eax, [ebp+var_1C] push eax push 5 call __vbaFreeStrList lea eax, [ebp+var_AC] push eax lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_3C] push eax push 7 call __vbaFreeVarList add esp, 38h push offset loc_40D7F2 jmp short locret_40D7F1 ; --------------------------------------------------------------------------- loc_40D794: ; DATA XREF: .text:00401304o test [ebp+var_4], 4 jz short loc_40D7A2 lea ecx, [ebp+var_18] call __vbaFreeStr loc_40D7A2: ; CODE XREF: sub_40D5AE+1EAj lea eax, [ebp+var_2C] push eax lea eax, [ebp+var_28] push eax lea eax, [ebp+var_24] push eax lea eax, [ebp+var_20] push eax lea eax, [ebp+var_1C] push eax push 5 call __vbaFreeStrList lea eax, [ebp+var_AC] push eax lea eax, [ebp+var_9C] push eax lea eax, [ebp+var_8C] push eax lea eax, [ebp+var_7C] push eax lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_5C] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_3C] push eax push 8 call __vbaFreeVarList add esp, 3Ch retn ; --------------------------------------------------------------------------- locret_40D7F1: ; CODE XREF: sub_40D5AE+1E4j retn ; --------------------------------------------------------------------------- loc_40D7F2: ; DATA XREF: sub_40D5AE+1DFo mov ecx, [ebp+var_14] mov eax, [ebp+var_18] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 sub_40D5AE endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40D806 proc near ; CODE XREF: sub_40DA8A+40p var_E4 = qword ptr -0E4h var_DC = qword ptr -0DCh var_C4 = dword ptr -0C4h var_BC = dword ptr -0BCh var_B4 = dword ptr -0B4h var_AC = dword ptr -0ACh var_94 = dword ptr -94h var_8C = dword ptr -8Ch var_84 = dword ptr -84h var_74 = dword ptr -74h var_64 = dword ptr -64h var_54 = dword ptr -54h var_44 = dword ptr -44h var_3C = dword ptr -3Ch var_34 = dword ptr -34h var_28 = dword ptr -28h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 ; FUNCTION CHUNK AT 0040139C SIZE 00000006 BYTES push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0D0h push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_401310 mov edi, [ebp+arg_0] push dword ptr [edi] xor esi, esi mov [ebp+var_18], esi mov [ebp+var_28], esi mov [ebp+var_34], esi mov [ebp+var_44], esi mov [ebp+var_54], esi mov [ebp+var_64], esi mov [ebp+var_74], esi mov [ebp+var_84], esi mov [ebp+var_94], esi mov [ebp+var_B4], esi mov [ebp+var_C4], esi call __vbaLenBstr mov [ebp+var_1C], eax fild [ebp+var_1C] fstp [ebp+var_DC] fld [ebp+var_DC] cmp dword_410000, 0 jnz short loc_40D88E fdiv ds:dbl_401308 jmp short loc_40D89F ; --------------------------------------------------------------------------- loc_40D88E: ; CODE XREF: sub_40D806+7Ej push dword ptr ds:dbl_401308+4 push dword ptr ds:dbl_401308 call _adj_fdiv_m64 ; _adj_fdiv_m64 loc_40D89F: ; CODE XREF: sub_40D806+86j fnstsw ax test al, 0Dh jnz loc_40DA80 call __vbaFpI4 push 1 pop ebx push esi sub eax, ebx jo loc_40DA85 push eax push ebx push 11h lea eax, [ebp+var_18] push eax push ebx push 80h call __vbaRedimPreserve add esp, 1Ch push dword ptr [edi] call __vbaLenBstr mov [ebp+var_20], eax fild [ebp+var_20] fstp [ebp+var_E4] fld [ebp+var_E4] cmp dword_410000, 0 jnz short loc_40D8FA fdiv ds:dbl_401308 jmp short loc_40D90B ; --------------------------------------------------------------------------- loc_40D8FA: ; CODE XREF: sub_40D806+EAj push dword ptr ds:dbl_401308+4 push dword ptr ds:dbl_401308 call _adj_fdiv_m64 ; _adj_fdiv_m64 loc_40D90B: ; CODE XREF: sub_40D806+F2j fnstsw ax test al, 0Dh jnz loc_40DA80 call __vbaFpI4 push 2 mov [ebp+var_20], eax mov [ebp+var_1C], ebx pop esi loc_40D923: ; CODE XREF: sub_40D806+20Aj mov eax, [ebp+var_1C] cmp eax, [ebp+var_20] jg loc_40DA15 mov ecx, [ebp+var_28] sub eax, ebx jo loc_40DA85 imul eax, 2 push 8 mov [ebp+var_BC], ecx pop ecx jo loc_40DA85 mov [ebp+var_C4], ecx mov [ebp+var_B4], ecx add eax, ebx lea ecx, [ebp+var_44] push ecx jo loc_40DA85 push eax lea eax, [ebp+var_94] push eax lea eax, [ebp+var_54] push eax mov [ebp+var_AC], offset asc_408760 ; "&H" mov [ebp+var_3C], esi mov [ebp+var_44], esi mov [ebp+var_8C], edi mov [ebp+var_94], 4008h call rtcMidCharVar lea eax, [ebp+var_B4] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_64] push eax call __vbaVarCat push eax call __vbaI4ErrVar push eax lea eax, [ebp+var_74] push eax call rtcVarBstrFromAnsi lea eax, [ebp+var_C4] push eax lea eax, [ebp+var_74] push eax lea eax, [ebp+var_84] push eax call __vbaVarCat push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_28] call __vbaStrMove lea eax, [ebp+var_84] push eax lea eax, [ebp+var_74] push eax lea eax, [ebp+var_64] push eax lea eax, [ebp+var_64] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_44] push eax push 6 call __vbaFreeVarList add esp, 1Ch push 1 pop eax add eax, [ebp+var_1C] jo short loc_40DA85 mov [ebp+var_1C], eax jmp loc_40D923 ; --------------------------------------------------------------------------- loc_40DA15: ; CODE XREF: sub_40D806+123j mov edx, [ebp+var_28] lea ecx, [ebp+var_34] call __vbaStrCopy wait push offset loc_40DA6C jmp short loc_40DA58 ; --------------------------------------------------------------------------- loc_40DA28: ; DATA XREF: .text:0040131Co test [ebp+var_4], 4 jz short loc_40DA36 lea ecx, [ebp+var_34] call __vbaFreeStr loc_40DA36: ; CODE XREF: sub_40D806+226j lea eax, [ebp+var_84] push eax lea eax, [ebp+var_74] push eax lea eax, [ebp+var_64] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_44] push eax push 5 call __vbaFreeVarList add esp, 18h retn ; --------------------------------------------------------------------------- loc_40DA58: ; CODE XREF: sub_40D806+220j ; DATA XREF: .text:00401318o lea eax, [ebp+var_18] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_28] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40DA6C: ; DATA XREF: sub_40D806+21Bo mov ecx, [ebp+var_14] mov eax, [ebp+var_34] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 ; --------------------------------------------------------------------------- loc_40DA80: ; CODE XREF: sub_40D806+9Dj ; sub_40D806+109j jmp loc_40139C ; --------------------------------------------------------------------------- loc_40DA85: ; CODE XREF: sub_40D806+AEj ; sub_40D806+12Ej ... call __vbaErrorOverflow sub_40D806 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40DA8A proc near ; CODE XREF: sub_4097F2+19Ep ; sub_4097F2+1DEp ... var_44 = dword ptr -44h var_40 = dword ptr -40h var_30 = dword ptr -30h var_28 = dword ptr -28h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 3Ch push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_401320 push [ebp+arg_0] xor esi, esi mov [ebp+var_18], esi mov [ebp+var_1C], esi mov [ebp+var_20], esi mov [ebp+var_30], esi mov [ebp+var_40], esi mov [ebp+var_44], esi call sub_40D806 mov edx, eax lea ecx, [ebp+var_20] call __vbaStrMove mov eax, [ebp+var_20] push esi mov [ebp+var_28], eax push 80h lea eax, [ebp+var_30] push eax lea eax, [ebp+var_40] push eax mov [ebp+var_20], esi mov [ebp+var_30], 8 call rtcStrConvVar2 lea eax, [ebp+var_40] push eax lea eax, [ebp+var_44] push eax call __vbaVar2Vec lea eax, [ebp+var_44] push eax lea eax, [ebp+var_18] push eax call __vbaAryMove lea ecx, [ebp+var_20] call __vbaFreeStr lea eax, [ebp+var_40] push eax lea eax, [ebp+var_30] push eax push 2 call __vbaFreeVarList add esp, 0Ch push [ebp+arg_4] lea eax, [ebp+var_18] push eax call sub_40DBAA lea eax, [ebp+var_18] push eax call sub_40E0D6 mov edx, eax lea ecx, [ebp+var_1C] call __vbaStrMove push offset loc_40DB96 jmp short loc_40DB8A ; --------------------------------------------------------------------------- loc_40DB56: ; DATA XREF: .text:0040132Co test [ebp+var_4], 4 jz short loc_40DB64 lea ecx, [ebp+var_1C] call __vbaFreeStr loc_40DB64: ; CODE XREF: sub_40DA8A+D0j lea ecx, [ebp+var_20] call __vbaFreeStr lea eax, [ebp+var_40] push eax lea eax, [ebp+var_30] push eax push 2 call __vbaFreeVarList add esp, 0Ch lea eax, [ebp+var_44] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40DB8A: ; CODE XREF: sub_40DA8A+CAj ; DATA XREF: .text:00401328o lea eax, [ebp+var_18] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40DB96: ; DATA XREF: sub_40DA8A+C5o mov ecx, [ebp+var_14] mov eax, [ebp+var_1C] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 8 sub_40DA8A endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40DBAA proc near ; CODE XREF: sub_4097F2+2AC1p ; sub_4097F2+2CABp ... arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp push esi mov esi, [ebp+arg_4] push dword ptr [esi] push offset dword_401F34 call __vbaStrCmp test eax, eax jz short loc_40DBC7 push esi call sub_40DD6E loc_40DBC7: ; CODE XREF: sub_40DBAA+15j mov eax, [ebp+arg_0] push dword ptr [eax] push 1 call __vbaUbound and dword_410094, 0 test eax, eax mov [ebp+arg_4], eax jl loc_40DD64 push ebx push edi mov esi, 100h loc_40DBEC: ; CODE XREF: sub_40DBAA+1B2j movsx edi, word ptr dword_410048+2 cmp edi, esi jb short loc_40DBFC call __vbaGenerateBoundsError loc_40DBFC: ; CODE XREF: sub_40DBAA+4Bj mov eax, dword_410060 movzx ax, byte ptr [eax+edi+100h] movsx edi, word ptr dword_410048 cmp edi, esi mov word ptr dword_410048+2, ax jb short loc_40DC20 call __vbaGenerateBoundsError loc_40DC20: ; CODE XREF: sub_40DBAA+6Fj movsx ebx, word ptr dword_410048+2 cmp ebx, esi jb short loc_40DC30 call __vbaGenerateBoundsError loc_40DC30: ; CODE XREF: sub_40DBAA+7Fj mov eax, dword_410084 movzx ebx, byte ptr [eax+ebx] cmp ebx, esi jb short loc_40DC42 call __vbaGenerateBoundsError loc_40DC42: ; CODE XREF: sub_40DBAA+91j shl ebx, 8 add ebx, dword_410060 movzx ax, byte ptr [ebx+edi] movsx ebx, word ptr dword_410048+2 cmp ebx, esi mov word ptr dword_410048, ax jb short loc_40DC66 call __vbaGenerateBoundsError loc_40DC66: ; CODE XREF: sub_40DBAA+B5j mov eax, dword_410084 mov al, [eax+ebx] movsx ebx, word ptr dword_410048 cmp ebx, esi mov byte ptr dword_41004C+2, al jb short loc_40DC83 call __vbaGenerateBoundsError loc_40DC83: ; CODE XREF: sub_40DBAA+D2j movsx edi, word ptr dword_410048+2 cmp edi, esi jb short loc_40DC93 call __vbaGenerateBoundsError loc_40DC93: ; CODE XREF: sub_40DBAA+E2j mov eax, dword_410084 mov cl, [eax+ebx] mov [eax+edi], cl movsx ebx, word ptr dword_410048 cmp ebx, esi jb short loc_40DCAE call __vbaGenerateBoundsError loc_40DCAE: ; CODE XREF: sub_40DBAA+FDj mov al, byte ptr dword_41004C+2 mov ecx, dword_410084 mov [ecx+ebx], al movsx edi, word ptr dword_410048+2 cmp edi, esi jb short loc_40DCCC call __vbaGenerateBoundsError loc_40DCCC: ; CODE XREF: sub_40DBAA+11Bj mov eax, dword_410084 movzx edi, byte ptr [eax+edi] cmp edi, esi jb short loc_40DCDE call __vbaGenerateBoundsError loc_40DCDE: ; CODE XREF: sub_40DBAA+12Dj movsx ebx, word ptr dword_410048 cmp ebx, esi jb short loc_40DCEE call __vbaGenerateBoundsError loc_40DCEE: ; CODE XREF: sub_40DBAA+13Dj mov eax, dword_410084 movzx ebx, byte ptr [eax+ebx] cmp ebx, esi jb short loc_40DD00 call __vbaGenerateBoundsError loc_40DD00: ; CODE XREF: sub_40DBAA+14Fj shl ebx, 8 add ebx, dword_410060 movzx ebx, byte ptr [ebx+edi] cmp ebx, esi jb short loc_40DD16 call __vbaGenerateBoundsError loc_40DD16: ; CODE XREF: sub_40DBAA+165j mov eax, dword_410084 mov al, [eax+ebx] push dword_410094 mov edi, [ebp+arg_0] mov byte_410090, al push dword ptr [edi] call __vbaDerefAry1 push dword_410094 mov bl, [eax] push dword ptr [edi] xor bl, byte_410090 call __vbaDerefAry1 mov [eax], bl mov eax, dword_410094 add eax, 1 jo short loc_40DD69 cmp eax, [ebp+arg_4] mov dword_410094, eax jle loc_40DBEC pop edi pop ebx loc_40DD64: ; CODE XREF: sub_40DBAA+35j pop esi pop ebp retn 8 ; --------------------------------------------------------------------------- loc_40DD69: ; CODE XREF: sub_40DBAA+1A8j call __vbaErrorOverflow sub_40DBAA endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40DD6E proc near ; CODE XREF: sub_40DBAA+18p var_5C = dword ptr -5Ch var_58 = dword ptr -58h var_54 = dword ptr -54h var_4C = dword ptr -4Ch var_24 = dword ptr -24h var_1C = dword ptr -1Ch var_14 = dword ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 50h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_401330 and [ebp+var_14], 0 and [ebp+var_24], 0 call sub_40E01D call sub_40E194 mov eax, [ebp+arg_0] push dword ptr [eax] call __vbaLenBstr mov ecx, eax call __vbaI2I4 push 1 mov word ptr dword_41004C, ax pop ecx sub ax, cx jo loc_40E018 mov esi, 100h mov [ebp+var_4C], eax xor ax, ax mov word ptr dword_410048+2, ax loc_40DDDC: ; CODE XREF: sub_40DD6E+14Aj cmp ax, word ptr [ebp+var_4C] jg loc_40DEBD add ax, cx jo loc_40E018 movsx eax, ax lea edx, [ebp+var_24] push edx push eax mov eax, [ebp+arg_0] push dword ptr [eax] mov [ebp+var_1C], ecx mov [ebp+var_24], 2 call rtcMidCharBstr mov edx, eax lea ecx, [ebp+var_14] call __vbaStrMove push eax call rtcAnsiValueBstr mov ecx, eax call __vbaUI1I2 lea ecx, [ebp+var_14] mov byte_410090, al call __vbaFreeStr lea ecx, [ebp+var_24] call __vbaFreeVar mov ax, word ptr dword_410048+2 mov edi, dword_41004C mov cx, ax mov [ebp+var_54], 0FFh mov word ptr dword_410048, cx loc_40DE54: ; CODE XREF: sub_40DD6E+136j xor edx, edx mov dx, di sar dx, 0Fh mov ebx, edx xor ebx, dword_410048 xor edx, [ebp+var_54] cmp bx, dx jg short loc_40DEA6 movsx ebx, cx cmp ebx, esi jb short loc_40DE79 call __vbaGenerateBoundsError loc_40DE79: ; CODE XREF: sub_40DD6E+104j mov eax, dword_41003C mov cl, byte_410090 mov [eax+ebx], cl mov cx, word ptr dword_410048 mov ax, word ptr dword_410048+2 add cx, di jo loc_40E018 mov word ptr dword_410048, cx jmp short loc_40DE54 ; --------------------------------------------------------------------------- loc_40DEA6: ; CODE XREF: sub_40DD6E+FDj push 1 pop ecx add ax, cx jo loc_40E018 mov word ptr dword_410048+2, ax jmp loc_40DDDC ; --------------------------------------------------------------------------- loc_40DEBD: ; CODE XREF: sub_40DD6E+72j xor eax, eax mov word ptr dword_410048, ax mov [ebp+var_5C], 0FFh mov [ebp+var_58], ecx loc_40DECF: ; CODE XREF: sub_40DD6E+26Bj cmp ax, word ptr [ebp+var_5C] mov word ptr dword_410048+2, ax jg loc_40DFDE movsx edi, ax cmp edi, esi jb short loc_40DEEB call __vbaGenerateBoundsError loc_40DEEB: ; CODE XREF: sub_40DD6E+176j mov eax, dword_410084 movzx ebx, byte ptr [eax+edi] cmp ebx, esi jb short loc_40DEFD call __vbaGenerateBoundsError loc_40DEFD: ; CODE XREF: sub_40DD6E+188j movsx edi, word ptr dword_410048+2 cmp edi, esi jb short loc_40DF0D call __vbaGenerateBoundsError loc_40DF0D: ; CODE XREF: sub_40DD6E+198j mov eax, dword_41003C movzx edi, byte ptr [eax+edi] cmp edi, esi jb short loc_40DF1F call __vbaGenerateBoundsError loc_40DF1F: ; CODE XREF: sub_40DD6E+1AAj shl edi, 8 add edi, dword_410060 movzx ax, byte ptr [edi+ebx] movsx ebx, word ptr dword_410048 cmp ebx, esi mov word ptr dword_41004C, ax jb short loc_40DF43 call __vbaGenerateBoundsError loc_40DF43: ; CODE XREF: sub_40DD6E+1CEj movsx edi, word ptr dword_41004C cmp edi, esi jb short loc_40DF53 call __vbaGenerateBoundsError loc_40DF53: ; CODE XREF: sub_40DD6E+1DEj shl edi, 8 add edi, dword_410060 movzx ax, byte ptr [edi+ebx] movsx edi, word ptr dword_410048+2 cmp edi, esi mov word ptr dword_410048, ax jb short loc_40DF77 call __vbaGenerateBoundsError loc_40DF77: ; CODE XREF: sub_40DD6E+202j mov eax, dword_410084 mov al, [eax+edi] movsx edi, word ptr dword_410048 cmp edi, esi mov byte_410090, al jb short loc_40DF94 call __vbaGenerateBoundsError loc_40DF94: ; CODE XREF: sub_40DD6E+21Fj movsx ebx, word ptr dword_410048+2 cmp ebx, esi jb short loc_40DFA4 call __vbaGenerateBoundsError loc_40DFA4: ; CODE XREF: sub_40DD6E+22Fj mov eax, dword_410084 mov cl, [eax+edi] mov [eax+ebx], cl movsx edi, word ptr dword_410048 cmp edi, esi jb short loc_40DFBF call __vbaGenerateBoundsError loc_40DFBF: ; CODE XREF: sub_40DD6E+24Aj mov eax, dword_410084 mov cl, byte_410090 mov [eax+edi], cl mov ax, word ptr dword_410048+2 add ax, word ptr [ebp+var_58] jo short loc_40E018 jmp loc_40DECF ; --------------------------------------------------------------------------- loc_40DFDE: ; CODE XREF: sub_40DD6E+16Bj and word ptr dword_410048+2, 0 and word ptr dword_410048, 0 push offset loc_40E007 jmp short locret_40E006 ; --------------------------------------------------------------------------- loc_40DFF5: ; DATA XREF: .text:0040133Co lea ecx, [ebp+var_14] call __vbaFreeStr lea ecx, [ebp+var_24] call __vbaFreeVar retn ; --------------------------------------------------------------------------- locret_40E006: ; CODE XREF: sub_40DD6E+285j retn ; --------------------------------------------------------------------------- loc_40E007: ; DATA XREF: sub_40DD6E+280o mov ecx, [ebp+var_10] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 ; --------------------------------------------------------------------------- loc_40E018: ; CODE XREF: sub_40DD6E+57j ; sub_40DD6E+7Bj ... call __vbaErrorOverflow sub_40DD6E endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= sub_40E01D proc near ; CODE XREF: sub_40DD6E+30p mov ecx, dword_410098 xor eax, eax cmp [ecx], ax jnz locret_40E0D0 push ebx push esi push edi mov word ptr dword_410048, ax mov ebx, 100h loc_40E03C: ; CODE XREF: sub_40E01D+A1j xor cx, cx mov word ptr dword_410048+2, cx loc_40E046: ; CODE XREF: sub_40E01D+8Fj movsx edi, cx cmp edi, ebx jb short loc_40E058 call __vbaGenerateBoundsError mov ax, word ptr dword_410048 loc_40E058: ; CODE XREF: sub_40E01D+2Ej movsx esi, ax cmp esi, ebx jb short loc_40E06A call __vbaGenerateBoundsError mov ax, word ptr dword_410048 loc_40E06A: ; CODE XREF: sub_40E01D+40j mov cx, word ptr dword_410048+2 add cx, ax jo short loc_40E0D1 and ecx, 0FFFF00FFh call __vbaUI1I2 shl esi, 8 add esi, dword_410060 mov [esi+edi], al mov cx, word ptr dword_410048+2 mov ax, word ptr dword_410048 add cx, 1 jo short loc_40E0D1 cmp cx, 0FFh mov word ptr dword_410048+2, cx jle short loc_40E046 add ax, 1 jo short loc_40E0D1 cmp ax, 0FFh mov word ptr dword_410048, ax jle loc_40E03C mov eax, dword_410098 or word ptr [eax], 0FFFFh pop edi pop esi pop ebx locret_40E0D0: ; CODE XREF: sub_40E01D+Bj retn ; --------------------------------------------------------------------------- loc_40E0D1: ; CODE XREF: sub_40E01D+57j ; sub_40E01D+81j ... call __vbaErrorOverflow sub_40E01D endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40E0D6 proc near ; CODE XREF: sub_4097F2+2CCFp ; sub_40D252+1E6p ... var_38 = dword ptr -38h var_30 = dword ptr -30h var_28 = dword ptr -28h var_18 = dword ptr -18h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 2Ch push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_401340 mov eax, [ebp+arg_0] mov eax, [eax] mov [ebp+var_30], eax lea eax, [ebp+var_38] xor esi, esi push eax mov [ebp+var_18], esi mov [ebp+var_28], esi mov [ebp+var_38], 2011h call __vbaStrVarCopy mov edx, eax lea ecx, [ebp+var_18] call __vbaStrMove push esi lea eax, [ebp+var_18] mov [ebp+var_30], eax push 40h lea eax, [ebp+var_38] push eax lea eax, [ebp+var_28] push eax mov [ebp+var_38], 4008h call rtcStrConvVar2 lea eax, [ebp+var_28] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_18] call __vbaStrMove lea ecx, [ebp+var_28] call __vbaFreeVar push offset loc_40E180 jmp short locret_40E17F ; --------------------------------------------------------------------------- loc_40E168: ; DATA XREF: .text:0040134Co test [ebp+var_4], 4 jz short loc_40E176 lea ecx, [ebp+var_18] call __vbaFreeStr loc_40E176: ; CODE XREF: sub_40E0D6+96j lea ecx, [ebp+var_28] call __vbaFreeVar retn ; --------------------------------------------------------------------------- locret_40E17F: ; CODE XREF: sub_40E0D6+90j retn ; --------------------------------------------------------------------------- loc_40E180: ; DATA XREF: sub_40E0D6+8Bo mov ecx, [ebp+var_14] mov eax, [ebp+var_18] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 4 sub_40E0D6 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40E194 proc near ; CODE XREF: sub_40DD6E+35p var_30 = dword ptr -30h var_28 = byte ptr -28h var_1C = dword ptr -1Ch var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 34h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_401350 and [ebp+var_30], 0 push 11h push offset dword_40876C lea eax, [ebp+var_28] push eax call __vbaAryConstruct2 xor cx, cx mov word_410092, cx mov esi, 100h loc_40E1DF: ; CODE XREF: sub_40E194+B8j mov eax, 0FFh cmp cx, ax jg short loc_40E24E movsx edi, cx cmp edi, esi jb short loc_40E1FC call __vbaGenerateBoundsError mov cx, word_410092 loc_40E1FC: ; CODE XREF: sub_40E194+5Aj call __vbaUI1I2 mov ecx, [ebp+var_1C] mov [ecx+edi], al movsx edi, word_410092 cmp edi, esi jb short loc_40E217 call __vbaGenerateBoundsError loc_40E217: ; CODE XREF: sub_40E194+7Cj movsx ebx, word_410092 cmp ebx, esi jb short loc_40E227 call __vbaGenerateBoundsError loc_40E227: ; CODE XREF: sub_40E194+8Cj mov eax, [ebp+var_1C] mov al, [eax+edi] mov ecx, dword_410084 mov [ecx+ebx], al mov cx, word_410092 push 1 pop eax add cx, ax jo short loc_40E274 mov word_410092, cx jmp short loc_40E1DF ; --------------------------------------------------------------------------- loc_40E24E: ; CODE XREF: sub_40E194+53j push offset loc_40E265 loc_40E253: ; DATA XREF: .text:00401358o lea eax, [ebp+var_28] mov [ebp+var_30], eax lea eax, [ebp+var_30] push eax push 0 call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40E265: ; DATA XREF: sub_40E194:loc_40E24Eo mov ecx, [ebp+var_10] pop edi pop esi mov large fs:0, ecx pop ebx leave retn ; --------------------------------------------------------------------------- loc_40E274: ; CODE XREF: sub_40E194+AFj call __vbaErrorOverflow sub_40E194 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40E279 proc near ; CODE XREF: sub_4097F2+297Ep ; sub_4097F2+29B4p ... var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_10 = dword ptr -10h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 14h push ebx push esi push edi mov [ebp+var_8], esp mov [ebp+var_4], offset dword_401360 push [ebp+arg_8] xor esi, esi push [ebp+arg_4] mov [ebp+var_14], esi push [ebp+arg_0] mov [ebp+var_18], esi mov [ebp+var_1C], esi mov [ebp+var_20], esi call sub_40E325 mov [ebp+var_18], eax lea eax, [ebp+var_18] push eax lea eax, [ebp+var_20] push eax call __vbaAryMove lea eax, [ebp+var_20] push eax call sub_40E0D6 mov edx, eax lea ecx, [ebp+var_14] call __vbaStrMove lea eax, [ebp+var_20] push eax push esi call __vbaErase push offset loc_40E311 jmp short loc_40E2FA ; --------------------------------------------------------------------------- loc_40E2F1: ; DATA XREF: .text:0040136Co lea ecx, [ebp+var_14] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40E2FA: ; CODE XREF: sub_40E279+76j ; DATA XREF: .text:00401368o lea eax, [ebp+var_1C] push eax xor esi, esi push esi call __vbaAryDestruct lea eax, [ebp+var_20] push eax push esi call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40E311: ; DATA XREF: sub_40E279+71o mov ecx, [ebp+var_10] mov eax, [ebp+var_14] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 0Ch sub_40E279 endp ; sp-analysis failed ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40E325 proc near ; CODE XREF: sub_4097F2+2A8Fp ; sub_4097F2+2BDAp ... var_A4 = dword ptr -0A4h var_9C = dword ptr -9Ch var_94 = dword ptr -94h var_8C = dword ptr -8Ch var_84 = dword ptr -84h var_7C = dword ptr -7Ch var_74 = dword ptr -74h var_6C = dword ptr -6Ch var_68 = dword ptr -68h var_60 = dword ptr -60h var_58 = dword ptr -58h var_54 = dword ptr -54h var_50 = dword ptr -50h var_4C = dword ptr -4Ch var_48 = dword ptr -48h var_44 = dword ptr -44h var_40 = dword ptr -40h var_3C = dword ptr -3Ch var_38 = dword ptr -38h var_34 = dword ptr -34h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = byte ptr -4 arg_0 = dword ptr 8 arg_4 = byte ptr 0Ch push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0D0h push ebx push esi push edi mov [ebp+var_C], esp mov [ebp+var_8], offset dword_401370 xor esi, esi mov edx, offset aP6wh45cv043cq3 ; "P6wH45cv043CQ3H6" lea ecx, [ebp+var_40] mov [ebp+var_18], esi mov [ebp+var_1C], esi mov [ebp+var_20], esi mov [ebp+var_24], esi mov [ebp+var_28], esi mov [ebp+var_2C], esi mov [ebp+var_30], esi mov [ebp+var_34], esi mov [ebp+var_38], esi mov [ebp+var_3C], esi mov [ebp+var_40], esi mov [ebp+var_44], esi mov [ebp+var_48], esi mov [ebp+var_4C], esi mov [ebp+var_50], esi mov [ebp+var_54], esi mov [ebp+var_58], esi mov [ebp+var_68], esi mov [ebp+var_6C], esi mov [ebp+var_7C], esi mov [ebp+var_8C], esi mov [ebp+var_9C], esi call __vbaStrCopy mov edx, offset aB4105bb7318446 ; "B4105BB731844633" lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset aWji1cq8s0 ; "WJi1CQ8s0" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset a3b5bba33c50196 ; "3B5BBA33C5019624901EF1BF4B43C13D" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_6C] push eax push 10h mov ebx, 880h push ebx call __vbaRedim add esp, 1Ch push esi push [ebp+var_6C] mov [ebp+var_74], esi mov [ebp+var_7C], 2 lea edi, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarMove mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 mov edi, eax lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 mov [ebp+var_1C], edi call __vbaFreeStrList add esp, 24h cmp [ebp+var_1C], esi jz loc_40EC50 mov eax, [ebp+arg_0] push 3 mov [ebp+var_60], eax pop edi lea eax, [ebp+var_68] push eax mov [ebp+var_68], edi call rtcIsNumeric lea ecx, [ebp+var_68] mov [ebp+var_A4], eax call __vbaFreeVar cmp word ptr [ebp+var_A4], si jz loc_40E62F mov edx, offset aZti0yhxr ; "Zti0yHXR" lea ecx, [ebp+var_40] call __vbaStrCopy mov edx, offset a4da55a5ba4177c ; "4DA55A5BA4177C6C" lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset aJdcxxabemq2lb ; "JdcxxAbemq2lb" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset aF64d71c23d023d ; "F64D71C23D023D104D8CB1AB26" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push 2 push 1 push esi lea eax, [ebp+var_6C] push eax push 10h push ebx call __vbaRedim mov eax, [ebp+var_1C] add esp, 1Ch push esi push [ebp+var_6C] mov [ebp+var_7C], edi mov [ebp+var_74], eax lea edi, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarMove push 1 push [ebp+var_6C] lea eax, [ebp+arg_4] mov edi, 4003h mov [ebp+var_84], eax mov [ebp+var_8C], edi lea ebx, [ebp+var_8C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+arg_0] push 2 push [ebp+var_6C] mov [ebp+var_94], eax mov [ebp+var_9C], 3 lea ebx, [ebp+var_9C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 mov ebx, eax lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 mov [ebp+var_30], ebx call __vbaFreeStrList add esp, 24h mov ebx, 880h jmp short loc_40E634 ; --------------------------------------------------------------------------- loc_40E62F: ; CODE XREF: sub_40E325+1A9j mov edi, 4003h loc_40E634: ; CODE XREF: sub_40E325+308j cmp [ebp+var_30], esi jz loc_40EC50 mov edx, offset aOi8gef0nadab6b ; "oI8gEF0NAdAb6BgJ" lea ecx, [ebp+var_40] call __vbaStrCopy mov edx, offset a90d8f4e1ff31b7 ; "90D8F4E1FF31B763" lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset aF9r442gbj489h ; "F9r442gBj489H" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset a861e877cee016f ; "861E877CEE016F10F10E13DD" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_6C] push eax push 10h push ebx call __vbaRedim add esp, 1Ch push esi push [ebp+var_6C] lea eax, [ebp+var_1C] mov [ebp+var_74], eax mov [ebp+var_7C], edi lea ebx, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 1 push [ebp+var_6C] lea eax, [ebp+var_30] mov [ebp+var_84], eax mov [ebp+var_8C], edi lea ebx, [ebp+var_8C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 mov ebx, eax lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] mov [ebp+var_20], ebx push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 call __vbaFreeStrList add esp, 24h mov edx, offset a9awqe5modvclj3 ; "9awqE5moDVclj3" lea ecx, [ebp+var_40] call __vbaStrCopy mov edx, offset a0255e498be029d ; "0255E498BE029D7C" lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset a5uk8nazmmh5k6o ; "5uk8nAzMMH5k6ODH" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset a1edeb7fdc4b8da ; "1EDEB7FDC4B8DA8CBA5F4512" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_6C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_6C] lea eax, [ebp+var_20] mov [ebp+var_74], eax mov [ebp+var_7C], edi lea ebx, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 mov ebx, eax lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 mov [ebp+var_24], ebx call __vbaFreeStrList add esp, 24h mov edx, offset aAgi1yfp78le ; "aGi1yFP78le" lea ecx, [ebp+var_40] call __vbaStrCopy mov edx, offset off_408A00 lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset aZc45x39l16oc08 ; "zC45X39L16Oc08" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset a0b8d12e825793f ; "0B8D12E825793F7E8B99901F661A" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push 1 push 1 push esi lea eax, [ebp+var_6C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_6C] lea eax, [ebp+var_1C] mov [ebp+var_74], eax mov [ebp+var_7C], edi lea ebx, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 1 push [ebp+var_6C] lea eax, [ebp+var_30] mov [ebp+var_84], eax mov [ebp+var_8C], edi lea ebx, [ebp+var_8C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 mov ebx, eax lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 mov [ebp+var_34], ebx call __vbaFreeStrList add esp, 24h cmp [ebp+var_34], esi jz loc_40EC50 push [ebp+var_34] lea eax, [ebp+var_68] push eax call rtcSpaceVar lea eax, [ebp+var_68] push eax call __vbaStrVarMove mov edx, eax lea ecx, [ebp+var_2C] call __vbaStrMove lea ecx, [ebp+var_68] call __vbaFreeVar mov eax, [ebp+var_34] push esi push 1 pop ebx sub eax, ebx jo loc_40ECDB push eax push ebx push 11h lea eax, [ebp+var_28] push eax push ebx push 80h call __vbaRedim add esp, 1Ch mov edx, offset a03spjxpoxnn ; "03SPjxPoXnN" lea ecx, [ebp+var_40] call __vbaStrCopy mov edx, offset a750b1e8f1accec ; "750B1E8F1ACCEC4F" lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset a5jjxe92ktwfrh ; "5JjxE92kTWfRH" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset a97b17caec49ab7 ; "97B17CAEC49AB769A910C73427" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push 2 push ebx push esi lea eax, [ebp+var_6C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push [ebp+var_28] lea eax, [ebp+var_38] push eax call __vbaAryLock push esi push [ebp+var_38] call __vbaDerefAry1 push eax call VarPtr mov ebx, eax lea eax, [ebp+var_38] push eax call __vbaAryUnlock mov [ebp+var_74], ebx mov [ebp+var_7C], 3 lea ebx, [ebp+var_7C] push esi push [ebp+var_6C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 1 push [ebp+var_6C] lea eax, [ebp+var_24] mov [ebp+var_84], eax mov [ebp+var_8C], edi lea ebx, [ebp+var_8C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero push 2 push [ebp+var_6C] lea eax, [ebp+var_34] mov [ebp+var_94], eax mov [ebp+var_9C], edi lea ebx, [ebp+var_9C] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 call __vbaFreeStrList add esp, 24h mov edx, offset aEx4wuvrkqtq62 ; "ex4wuvRKQTq62" lea ecx, [ebp+var_40] call __vbaStrCopy mov edx, offset aDc81a966f01098 ; "DC81A966F01098B7" lea ecx, [ebp+var_3C] call __vbaStrCopy lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_54] call __vbaStrMove mov edx, offset aS3u4yxkkfm3p ; "s3U4yXkkfm3P" lea ecx, [ebp+var_48] call __vbaStrCopy mov edx, offset a5fb7248e5f9d14 ; "5FB7248E5F9D14BCBD7D7F92" lea ecx, [ebp+var_44] call __vbaStrCopy lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp+var_58] call __vbaStrMove push esi push esi push 1 push esi lea eax, [ebp+var_6C] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push esi push [ebp+var_6C] lea eax, [ebp+var_20] mov [ebp+var_7C], edi mov [ebp+var_74], eax lea edi, [ebp+var_7C] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarZero mov edx, [ebp+var_58] lea ecx, [ebp+var_50] mov [ebp+var_58], esi call __vbaStrMove mov edx, [ebp+var_54] lea ecx, [ebp+var_4C] mov [ebp+var_54], esi call __vbaStrMove lea eax, [ebp+var_6C] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax call sub_408D64 lea eax, [ebp+var_6C] push eax push esi call __vbaErase lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 call __vbaFreeStrList add esp, 24h lea eax, [ebp+var_28] push eax lea eax, [ebp+var_18] push eax call __vbaAryMove loc_40EC50: ; CODE XREF: sub_40E325+179j ; sub_40E325+312j ... push offset loc_40ECC7 jmp short loc_40ECB3 ; --------------------------------------------------------------------------- loc_40EC57: ; DATA XREF: .text:0040137Co test [ebp+var_4], 4 jz short loc_40EC6B lea eax, [ebp+var_18] push eax xor esi, esi push esi call __vbaAryDestruct jmp short loc_40EC6D ; --------------------------------------------------------------------------- loc_40EC6B: ; CODE XREF: sub_40E325+936j xor esi, esi loc_40EC6D: ; CODE XREF: sub_40E325+944j lea eax, [ebp+var_38] push eax call __vbaAryUnlock lea eax, [ebp+var_58] push eax lea eax, [ebp+var_54] push eax lea eax, [ebp+var_50] push eax lea eax, [ebp+var_4C] push eax lea eax, [ebp+var_48] push eax lea eax, [ebp+var_44] push eax lea eax, [ebp+var_40] push eax lea eax, [ebp+var_3C] push eax push 8 call __vbaFreeStrList add esp, 24h lea ecx, [ebp+var_68] call __vbaFreeVar lea eax, [ebp+var_6C] push eax push esi call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40ECB3: ; CODE XREF: sub_40E325+930j ; DATA XREF: .text:00401378o lea eax, [ebp+var_28] push eax push 0 call __vbaAryDestruct lea ecx, [ebp+var_2C] call __vbaFreeStr retn ; --------------------------------------------------------------------------- loc_40ECC7: ; DATA XREF: sub_40E325:loc_40EC50o mov ecx, [ebp+var_14] mov eax, [ebp+var_18] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 0Ch ; --------------------------------------------------------------------------- loc_40ECDB: ; CODE XREF: sub_40E325+699j call __vbaErrorOverflow sub_40E325 endp ; sp-analysis failed loc_40ECE0: ; CODE XREF: sub_4097F2+2AE2p ; sub_4097F2+2D52p push ebp mov ebp, esp sub esp, 0Ch push offset __vbaExceptHandler mov eax, large fs:0 push eax mov large fs:0, esp sub esp, 0E0h push ebx push esi push edi mov [ebp-0Ch], esp mov dword ptr [ebp-8], offset dword_401380 xor esi, esi push 11h push offset dword_408CF0 lea eax, [ebp-34h] push eax mov [ebp-1Ch], esi mov [ebp-3Ch], esi mov [ebp-40h], esi mov [ebp-44h], esi mov [ebp-48h], esi mov [ebp-4Ch], esi mov [ebp-50h], esi mov [ebp-54h], esi mov [ebp-58h], esi mov [ebp-5Ch], esi mov [ebp-60h], esi mov [ebp-64h], esi mov [ebp-68h], esi mov [ebp-6Ch], esi mov [ebp-70h], esi mov [ebp-74h], esi mov [ebp-84h], esi mov [ebp-94h], esi mov [ebp-0A4h], esi mov [ebp-0B4h], esi mov [ebp-0C4h], esi mov [ebp-0D4h], esi mov [ebp-0D8h], esi call __vbaAryConstruct2 mov eax, [ebp+8] push dword ptr [eax] push 1 pop edi push edi call __vbaUbound mov ecx, [ebp+0Ch] add eax, edi jo loc_40F257 mov [ecx], eax imul eax, 0Dh push esi jo loc_40F257 push eax push edi mov [ebp-44h], eax push 11h lea eax, [ebp-1Ch] push eax push edi push 80h call __vbaRedimPreserve add esp, 1Ch mov edx, offset aH38i5q4gt10 ; "h38i5q4gT10" lea ecx, [ebp-58h] call __vbaStrCopy mov edx, offset off_408BCC lea ecx, [ebp-54h] call __vbaStrCopy lea eax, [ebp-58h] push eax lea eax, [ebp-54h] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp-6Ch] call __vbaStrMove mov edx, offset aM5i6t02o0qwu2f ; "M5i6T02o0QWU2f" lea ecx, [ebp-60h] call __vbaStrCopy mov edx, offset a07e6eb19108c5d ; "07E6EB19108C5D271A4E68C46AF0D32D082143" lea ecx, [ebp-5Ch] call __vbaStrCopy lea eax, [ebp-60h] push eax lea eax, [ebp-5Ch] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp-70h] call __vbaStrMove push esi push 5 push edi push esi lea eax, [ebp-74h] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push 3 pop edi push esi push dword ptr [ebp-74h] mov dword ptr [ebp-7Ch], 102h mov [ebp-84h], edi lea ebx, [ebp-84h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push dword ptr [ebp-1Ch] lea eax, [ebp-4Ch] push eax call __vbaAryLock push esi push dword ptr [ebp-4Ch] call __vbaDerefAry1 push eax call VarPtr mov [ebp-0D8h], eax lea eax, [ebp-4Ch] push eax call __vbaAryUnlock mov eax, [ebp-0D8h] push 1 push dword ptr [ebp-74h] mov [ebp-8Ch], eax mov [ebp-94h], edi lea ebx, [ebp-94h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push 2 push dword ptr [ebp-74h] lea eax, [ebp-44h] mov [ebp-9Ch], eax mov dword ptr [ebp-0A4h], 4003h lea ebx, [ebp-0A4h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero mov eax, [ebp+8] push dword ptr [eax] lea eax, [ebp-50h] push eax call __vbaAryLock push esi push dword ptr [ebp-50h] call __vbaDerefAry1 push eax call VarPtr mov ebx, eax lea eax, [ebp-50h] push eax call __vbaAryUnlock push edi push dword ptr [ebp-74h] mov [ebp-0ACh], ebx mov [ebp-0B4h], edi lea ebx, [ebp-0B4h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov eax, [ebp+0Ch] push 4 push dword ptr [ebp-74h] mov [ebp-0BCh], eax mov dword ptr [ebp-0C4h], 4003h lea ebx, [ebp-0C4h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarZero lea eax, [ebp-3Ch] push eax call VarPtr push 5 push dword ptr [ebp-74h] mov [ebp-0CCh], eax mov [ebp-0D4h], edi lea ebx, [ebp-0D4h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove mov edx, [ebp-70h] lea ecx, [ebp-68h] mov [ebp-70h], esi call __vbaStrMove mov edx, [ebp-6Ch] lea ecx, [ebp-64h] mov [ebp-6Ch], esi call __vbaStrMove lea eax, [ebp-74h] push eax lea eax, [ebp-68h] push eax lea eax, [ebp-64h] push eax call sub_408D64 lea eax, [ebp-74h] push eax push esi call __vbaErase lea eax, [ebp-70h] push eax lea eax, [ebp-6Ch] push eax lea eax, [ebp-68h] push eax lea eax, [ebp-64h] push eax lea eax, [ebp-60h] push eax lea eax, [ebp-5Ch] push eax lea eax, [ebp-58h] push eax lea eax, [ebp-54h] push eax push 8 call __vbaFreeStrList mov eax, [ebp-3Ch] push esi push 1 pop ebx sub eax, ebx jo loc_40F257 push eax push ebx push 11h lea eax, [ebp-40h] push eax push ebx push 80h call __vbaRedim add esp, 40h mov edx, offset a78kcis6ry6w9u5 ; "78kcis6RY6W9U5V" lea ecx, [ebp-58h] call __vbaStrCopy mov edx, offset aBc24719aa57954 ; "BC24719AA57954F7" lea ecx, [ebp-54h] call __vbaStrCopy lea eax, [ebp-58h] push eax lea eax, [ebp-54h] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp-6Ch] call __vbaStrMove mov edx, offset aTtov6yukox ; "ttoV6YuKOx" lea ecx, [ebp-60h] call __vbaStrCopy mov edx, offset aE217fe6beffc6f ; "E217FE6BEFFC6FAE39073AF75D" lea ecx, [ebp-5Ch] call __vbaStrCopy lea eax, [ebp-60h] push eax lea eax, [ebp-5Ch] push eax call sub_40DA8A mov edx, eax lea ecx, [ebp-70h] call __vbaStrMove push esi push 2 push ebx push esi lea eax, [ebp-74h] push eax push 10h push 880h call __vbaRedim add esp, 1Ch push dword ptr [ebp-40h] lea eax, [ebp-4Ch] push eax call __vbaAryLock push esi push dword ptr [ebp-4Ch] call __vbaDerefAry1 push eax call VarPtr mov [ebp-0D8h], eax lea eax, [ebp-4Ch] push eax call __vbaAryUnlock mov eax, [ebp-0D8h] push esi push dword ptr [ebp-74h] mov [ebp-7Ch], eax mov [ebp-84h], edi lea ebx, [ebp-84h] call __vbaDerefAry1 mov ecx, eax mov edx, ebx call __vbaVarMove push dword ptr [ebp-1Ch] lea eax, [ebp-50h] push eax call __vbaAryLock push esi push dword ptr [ebp-50h] call __vbaDerefAry1 push eax call VarPtr mov ebx, eax lea eax, [ebp-50h] push eax call __vbaAryUnlock push 1 push dword ptr [ebp-74h] mov [ebp-94h], edi mov [ebp-8Ch], ebx lea edi, [ebp-94h] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarMove lea eax, [ebp-3Ch] mov [ebp-9Ch], eax mov dword ptr [ebp-0A4h], 4003h lea edi, [ebp-0A4h] push 2 push dword ptr [ebp-74h] call __vbaDerefAry1 mov ecx, eax mov edx, edi call __vbaVarZero mov edx, [ebp-70h] lea ecx, [ebp-68h] mov [ebp-70h], esi call __vbaStrMove mov edx, [ebp-6Ch] lea ecx, [ebp-64h] mov [ebp-6Ch], esi call __vbaStrMove lea eax, [ebp-74h] push eax lea eax, [ebp-68h] push eax lea eax, [ebp-64h] push eax call sub_408D64 lea eax, [ebp-74h] push eax push esi call __vbaErase lea eax, [ebp-70h] push eax lea eax, [ebp-6Ch] push eax lea eax, [ebp-68h] push eax lea eax, [ebp-64h] push eax lea eax, [ebp-60h] push eax lea eax, [ebp-5Ch] push eax lea eax, [ebp-58h] push eax lea eax, [ebp-54h] push eax push 8 call __vbaFreeStrList add esp, 24h lea eax, [ebp-40h] push eax lea eax, [ebp-48h] push eax call __vbaAryMove push offset loc_40F243 jmp short loc_40F216 ; --------------------------------------------------------------------------- loc_40F1B9: ; DATA XREF: .text:0040138Co test byte ptr [ebp-4], 4 jz short loc_40F1CD lea eax, [ebp-48h] push eax xor esi, esi push esi call __vbaAryDestruct jmp short loc_40F1CF ; --------------------------------------------------------------------------- loc_40F1CD: ; CODE XREF: .text:0040F1BDj xor esi, esi loc_40F1CF: ; CODE XREF: .text:0040F1CBj lea eax, [ebp-4Ch] push eax call __vbaAryUnlock lea eax, [ebp-50h] push eax call __vbaAryUnlock lea eax, [ebp-70h] push eax lea eax, [ebp-6Ch] push eax lea eax, [ebp-68h] push eax lea eax, [ebp-64h] push eax lea eax, [ebp-60h] push eax lea eax, [ebp-5Ch] push eax lea eax, [ebp-58h] push eax lea eax, [ebp-54h] push eax push 8 call __vbaFreeStrList add esp, 24h lea eax, [ebp-74h] push eax push esi call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40F216: ; CODE XREF: .text:0040F1B7j ; DATA XREF: .text:00401388o lea eax, [ebp-1Ch] push eax xor esi, esi push esi call __vbaAryDestruct lea eax, [ebp-34h] mov [ebp-0D8h], eax lea eax, [ebp-0D8h] push eax push esi call __vbaAryDestruct lea eax, [ebp-40h] push eax push esi call __vbaAryDestruct retn ; --------------------------------------------------------------------------- loc_40F243: ; DATA XREF: .text:0040F1B2o mov ecx, [ebp-14h] mov eax, [ebp-48h] pop edi pop esi mov large fs:0, ecx pop ebx leave retn 8 ; --------------------------------------------------------------------------- loc_40F257: ; CODE XREF: .text:0040ED8Bj ; .text:0040ED97j ... call __vbaErrorOverflow ; --------------------------------------------------------------------------- db 4 dup(0CCh) dword_40F260 dd 9E9E9E9Eh, 0F28Ch, 2 dup(0FFFFFFFFh), 0F40Ch, 1000h ; DATA XREF: .text:0040176Co dd 5 dup(0) dd 0F41Ah, 0F428h, 0F432h, 0F440h, 0F450h, 0F460h, 0F470h dd 0F480h, 0F492h, 0F4A6h, 80000204h, 0F4B6h, 0F4C4h, 0F4D8h dd 0F4E6h, 0F4FCh, 0F510h, 0F524h, 0F534h, 0F542h, 0F556h dd 0F566h, 0F578h, 0F58Ah, 80000277h, 0F594h, 80000278h dd 0F5A2h, 0F5B2h, 8000020Eh, 0F5C0h, 0F5D2h, 0F5EEh, 0F5FCh dd 0F612h, 80000231h, 0F624h, 0F630h, 80000233h, 0F642h dd 0F650h, 0F666h, 0F674h, 0F68Ch, 0F69Ah, 0F6AEh, 0F6BCh dd 0F6C6h, 0F6DCh, 0F6F0h, 0F6FEh, 80000260h, 0F710h, 800002CDh dd 0F724h, 0F734h, 0F742h, 0F754h, 80000284h, 0F762h, 0F76Ch dd 0F782h, 0F792h, 80000288h, 8000023Ah, 0F7A2h, 0F7B4h dd 0F7C6h, 0F7D6h, 800002A9h, 0F7E4h, 0F7F8h, 0F80Ah, 0F81Ch dd 80000064h, 0F82Ah, 0F838h, 0F848h, 0F858h, 0F86Ah, 0F878h dd 0F88Ah, 0F896h, 80000269h, 0F8A6h, 0F8B0h, 0F8C0h, 0F8D0h dd 8000026Bh, 0F8E2h, 0F8ECh, 0F8F6h, 0F908h, 0F912h, 0F922h dd 0 dd 4256534Dh, 30364D56h, 4C4C442Eh, 0 a__vbavarsub_0 db '__vbaVarSub',0 dd 435F0000h, 736F6349h, 0 a_adj_fptan db '_adj_fptan',0 align 10h dd 5F5F0000h, 56616276h, 6F4D7261h, 6576h, 5F5F0000h, 46616276h dd 56656572h, 7261h, 5F5F0000h, 41616276h, 6F4D7972h, 6576h dd 5F5F0000h, 4C616276h, 73426E65h, 7274h, 5F5F0000h, 53616276h dd 61567274h, 766F4D72h, 65h, 62765F5Fh, 65724661h, 72615665h dd 7473694Ch, 0 a_adj_fdiv_m64 db '_adj_fdiv_m64',0 align 4 a_adj_fprem1 db '_adj_fprem1',0 dd 5F5F0000h, 52616276h, 6E416365h, 6F546973h, 696E55h dd 5F5F0000h, 53616276h, 61437274h, 74h, 62765F5Fh, 74655361h dd 74737953h, 72456D65h, 726F72h, 5F5F0000h, 52616276h dd 65446365h, 75727473h, 7463h, 5F5F0000h, 56616276h, 56677261h dd 6F437261h, 7970h, 615F0000h, 665F6A64h, 5F766964h, 32336Dh dd 5F5F0000h, 41616276h, 61567972h, 72h, 62765F5Fh, 79724161h dd 74736544h, 74637572h, 0 a__vbaonerror_0 db '__vbaOnError',0 align 4 a_adj_fdiv_m16i db '_adj_fdiv_m16i',0 align 4 dd 615F0000h, 665F6A64h, 72766964h, 36316D5Fh, 69h, 7349435Fh dd 6E69h, 5F5F0000h, 45616276h, 65736172h, 0 a__vbavarzero_0 db '__vbaVarZero',0 align 4 a__vbachkstk db '__vbaChkstk',0 dd 5F5F0000h, 46616276h, 43656C69h, 65736F6Ch, 0 a__vbagenerat_0 db '__vbaGenerateBoundsError',0 align 10h a__vbastrcmp_0 db '__vbaStrCmp',0 dd 5F5F0000h, 41616276h, 6F437972h, 7274736Eh, 32746375h dd 0 a__vbaputowne_0 db '__vbaPutOwner3',0 align 4 dd 5F5F0000h, 49616276h, 344932h, 6C440000h, 6E75466Ch dd 6F697463h, 6C61436Eh, 6Ch, 62765F5Fh, 6F624C61h, 646E75h dd 5F5F0000h, 52616276h, 6D696465h, 73657250h, 65767265h dd 0 a_adj_fpatan db '_adj_fpatan',0 dd 5F5F0000h, 46616276h, 74737869h, 6E6F4372h, 75727473h dd 7463h, 5F5F0000h, 52616276h, 6D696465h, 0 a__vbarecunit_0 db '__vbaRecUniToAnsi',0 align 10h a__vbaui1i2_0 db '__vbaUI1I2',0 align 4 dd 435F0000h, 72717349h, 74h, 62765F5Fh, 63784561h, 48747065h dd 6C646E61h, 7265h, 5F5F0000h, 53616276h, 6F547274h, 63696E55h dd 65646Fh, 615F0000h, 665F6A64h, 6D657270h, 0 a_adj_fdivr_m64 db '_adj_fdivr_m64',0 align 10h dd 5F5F0000h, 46616276h, 63784550h, 69747065h, 6E6Fh, 5F5F0000h dd 49616276h, 7274536Eh, 726156h, 5F5F0000h, 55616276h dd 6E756F62h, 64h, 62765F5Fh, 74654761h, 656E774Fh, 3372h dd 5F5F0000h, 56616276h, 61437261h, 74h, 6C49435Fh, 676Fh dd 5F5F0000h, 45616276h, 726F7272h, 7265764Fh, 776F6C66h dd 0 a__vbafileope_0 db '__vbaFileOpen',0 align 4 a__vbavar2vec_0 db '__vbaVar2Vec',0 align 4 a_adj_fdiv_m32i db '_adj_fdiv_m32i',0 align 4 dd 615F0000h, 665F6A64h, 72766964h, 32336D5Fh, 69h, 62765F5Fh dd 72745361h, 79706F43h, 0 a__vbai4str_0 db '__vbaI4Str',0 align 4 dd 5F5F0000h, 46616276h, 53656572h, 694C7274h, 7473h, 5F5F0000h dd 44616276h, 66657265h, 31797241h, 0 a_adj_fdivr_m32 db '_adj_fdivr_m32',0 align 4 dd 615F0000h, 665F6A64h, 5F766964h, 72h, 62765F5Fh, 56344961h dd 7261h, 5F5F0000h, 56616276h, 6D437261h, 714570h, 5F5F0000h dd 41616276h, 6F4C7972h, 6B63h, 5F5F0000h, 53616276h, 6F547274h dd 69736E41h, 0 a__vbavardup_0 db '__vbaVarDup',0 dd 5F5F0000h, 41616276h, 61567972h, 72615672h, 67h, 62765F5Fh dd 49704661h, 34h, 62765F5Fh, 72615661h, 79706F43h, 0 a_ciatan db '_CIatan',0 dd 5F5F0000h, 41616276h, 6F437972h, 7970h, 5F5F0000h, 53616276h dd 6F4D7274h, 6576h, 5F5F0000h, 53616276h, 61567274h, 706F4372h dd 79h, 6C6C615Fh, 6C756Dh, 435F0000h, 6E617449h, 0 a__vbaaryunlo_0 db '__vbaAryUnlock',0 align 4 dd 435F0000h, 70786549h, 0 a__vbafreestr_0 db '__vbaFreeStr',0 align 4 a__vbai4errva_0 db '__vbaI4ErrVar',0 align 100h _text ends ; Section 2. (virtual address 00010000) ; Virtual size : 000003DC ( 988.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00010000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _data segment para public 'DATA' use32 assume cs:_data ;org 410000h dword_410000 dd 0 ; sub_40D806+E3r align 8 dword_410008 dd 2 dup(0) dword_410010 dd 0 ; sub_409384+E6w ... dword_410014 dd 0 ; sub_408E65+15Ao ... dword_410018 dd 0 ; sub_409384+67o ... dword_41001C dd 0 ; sub_408E65+129w ... dd 0 dword_410024 dd 3 dup(0) dword_410030 dd 0 db 2 dup(0) byte_410036 db 0 ; DATA XREF: .text:off_4020ACo byte_410037 db 0 ; DATA XREF: .text:004020B0o dd 0 dword_41003C dd 0 ; sub_40DD6E:loc_40DF0Dr db 2 dup(0) byte_410042 db 0 ; DATA XREF: .text:off_408BCCo byte_410043 db 0 ; DATA XREF: .text:off_401F3Co db 0 byte_410045 db 3 dup(0) ; DATA XREF: .text:off_4023F0o dword_410048 dd 0 ; sub_40DBAA+AFw ... dword_41004C dd 0 ; sub_40DD6E+CFr ... dd 4 dup(0) dword_410060 dd 0 ; sub_40DBAA+9Br ... dd 8 dup(0) dword_410084 dd 0 ; sub_40DBAA:loc_40DC66r ... align 10h byte_410090 db 0 ; DATA XREF: sub_40DBAA+17Dw ; sub_40DBAA+193r ... align 2 word_410092 dw 0 ; DATA XREF: sub_40E194+3Fw ; sub_40E194+61r ... dword_410094 dd 0 ; sub_40DBAA+174r ... dword_410098 dd 0 ; sub_40E01D+A7r dd 2 dup(0) dword_4100A4 dd 4 dup(0) dword_4100B4 dd 0C0h dup(0) dword_4103B4 dd 0 align 10h dword_4103C0 dd 0 dd 2 dup(0) dword_4103CC dd 0 dd 2 dup(0) dword_4103D8 dd 0 align 40h _data ends end start