Function at 0x4fbe70
Capabilities:
Check http status code
Enumerate pe sections
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405216
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x80
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4046b0
mov ax, word [0x539852]
xor ebx, ebx
cmp word [0x539850], ax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
jne 0x4ff655
cmp ax, 0x7fbc
jne 0x4fbeee
push ebx
call fcn.00431010
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x7fbd
jne 0x4fbf0a
push ebx
call fcn.00518370
push ebx
call fcn.00431010
push 0x4ff6ac
jmp 0x4ff687
mov edi, dword [ebp + 8]
cmp di, 2
jne 0x4fbf18
mov edi, 0xa
mov si, word [0x53a13a]
movsx ecx, si
cmp ecx, 0x5b
jg 0x4ff373
je 0x4ff151
inc ecx
cmp ecx, 0xc
ja case.default.0x4fbf43
xor edx, edx
mov dl, byte [ecx + 0x4ff6d4]
jmp dword [edx*4 + 0x4ff6c0]
movsx ecx, ax
mov edx, ecx
sub edx, ebx
je 0x4fbfe2
sub edx, 0x3e6
je 0x4fbfbe
dec edx
je 0x4fbfa1
mov word [0x53a13c], ax
mov eax, dword [0x539840]
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, edx
mov edx, ecx
shl edx, 5
add edx, ecx
cmp word [eax + edx*8 + 8], bx
jge 0x4fc12c
push 0xffffffffffffffff
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
push 0x3e7
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
mov cx, word [0x53a13e]
mov word [0x539850], 0xfffe
not cx
mov word [0x53a13e], cx
push 0x4ff6ac
jmp 0x4ff687
push 3
call fcn.004fb300
xor edx, edx
mov ecx, 0x53a148
mov word [0x53a150], bx
mov word [0x53a140], bx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [0x538c18], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, bx
je 0x4ff156
cmp ax, 1
jne 0x4fc045
push ebx
call fcn.004f97c0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 2
jne 0x4fc0b4
mov edx, dword [0x539840]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x44]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*8 + 0x10]
mov dl, byte [eax + 0x1a]
inc dl
mov cl, dl
mov byte [eax + 0x1a], dl
cmp cl, 3
jne 0x4fc08a
mov byte [eax + 0x1a], 0
mov cx, word [0x53a142]
push ecx
call fcn.004a35d0
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 3
jne 0x4fc0d4
push 0xfffffffffffffff6
call fcn.004f7e10
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 4
jne 0x4fc0f4
push 0xa
call fcn.004f7e10
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 5
jne 0x4fc101
push 0x63
jmp 0x4ff252
cmp ax, 6
jne 0x4fc126
push 2
call fcn.004fb300
call fcn.004f7ee0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 7
jne 0x4fc146
push 1
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 8
jne 0x4fc164
call fcn.004f8400
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 9
jne 0x4fc1b7
mov eax, dword [0x539840]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*8]
push ecx
call fcn.00449d30
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xa
jne 0x4fc20a
mov eax, dword [0x539840]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*8]
push ecx
call fcn.004498b0
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xb
jl 0x4fc2a5
cmp ax, 0x63
jg 0x4fc2a5
call fcn.0043ef10
mov edx, dword [0x539840]
mov cx, word [0x539852]
movsx eax, word [0x53a13c]
mov esi, dword [edx + 0x14]
sub cx, 0xa
sub eax, esi
mov word [0x53a140], cx
mov esi, eax
mov word [0x53a150], bx
shl esi, 5
add esi, eax
mov eax, dword [edx + 0xc]
movsx ecx, cx
mov eax, dword [eax + esi*8 + 0xc]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
movzx ax, byte [ecx + edx + 6]
add eax, 5
push eax
call fcn.004fb300
mov dword [0x538c18], ebx
mov word [0x53a146], bx
mov word [0x538dd0], bx
call fcn.0043e980
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x65
jl 0x4fc2f9
cmp ax, 0xc7
jg 0x4fc2f9
mov edx, dword [0x53a12c]
sub ax, 0x64
movsx ecx, word [0x53a150]
mov edi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, edi
movsx eax, ax
lea ecx, [ecx + ecx*4]
mov ecx, dword [edx + ecx*4 + 0x10]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
movsx edx, word [ecx + eax*2]
push edx
call fcn.0049f750
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xc9
jl 0x4fc322
cmp ax, 0x12b
jg 0x4fc322
sub ax, 0xc9
mov word [0x539850], 0xfffe
mov word [0x53a14e], ax
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x1f4
jne 0x4fc340
call fcn.004f8460
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x258
jne 0x4fc35e
call fcn.004fab40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x2bc
jne 0x4fc37e
push 0xffffffffffffffff
call fcn.004f97c0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x3e9
jl 0x4fc3aa
cmp ax, 0x7cf
jg 0x4fc3aa
sub ax, 0x3e8
movsx eax, ax
push eax
call fcn.004f95a0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x7d1
jl case.default.0x4fbf43
cmp ax, 0xbb7
jg case.default.0x4fbf43
sub ax, 0x7d0
movsx ecx, ax
push ecx
call fcn.004f96b0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, bx
jne 0x4fc403
push 1
call fcn.004fb300
mov dword [0x538c18], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 1
jne 0x4fc4ef
movsx edx, word [0x53a13c]
mov eax, dword [0x539840]
mov ecx, edx
sub ecx, dword [eax + 0x14]
mov esi, ecx
shl esi, 5
add esi, ecx
mov ecx, dword [eax + 0xc]
mov esi, dword [ecx + esi*8 + 0xc]
movsx ecx, word [0x53a140]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
mov edi, ecx
sub edi, ebx
shl edi, 7
mov bl, byte [edi + esi + 0x1c]
lea esi, [edi + esi + 0x1c]
inc bl
mov byte [esi], bl
mov edi, dword [eax + 0x14]
mov esi, edx
sub esi, edi
mov edi, esi
shl edi, 5
add edi, esi
mov esi, dword [eax + 0xc]
mov esi, dword [esi + edi*8 + 0xc]
mov edi, ecx
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub edi, ebx
shl edi, 7
mov bl, byte [edi + esi + 0x1c]
lea esi, [edi + esi + 0x1c]
cmp bl, 3
jne 0x4fc47e
mov byte [esi], 7
mov edi, dword [eax + 0x14]
mov esi, edx
sub esi, edi
mov edi, esi
shl edi, 5
add edi, esi
mov esi, dword [eax + 0xc]
mov esi, dword [esi + edi*8 + 0xc]
mov edi, ecx
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub edi, ebx
shl edi, 7
mov bl, byte [edi + esi + 0x1c]
lea esi, [edi + esi + 0x1c]
cmp bl, 8
jne 0x4fc4b0
mov byte [esi], 9
sub edx, dword [eax + 0x14]
mov esi, edx
shl esi, 5
add esi, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + esi*8 + 0xc]
mov esi, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, esi
shl ecx, 7
lea eax, [ecx + eax + 0x1c]
cmp byte [eax], 0xb
jne case.default.0x4fbf43
mov byte [eax], 0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 2
jne 0x4fc50d
call fcn.004f9aa0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 3
jne 0x4fc52b
call fcn.004fb1d0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 4
jne 0x4fc54b
push 2
call fcn.004fa3f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 5
jne 0x4fc5e4
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edx, dword [eax + 0x14]
push 8
sub ecx, edx
mov edx, dword [eax + 0xc]
shl ecx, 7
mov dword [ebp - 0x38], 0x4011
lea eax, [ecx + edx + 0x35]
mov dword [ebp - 0x30], eax
push ebx
movsx ecx, di
lea edx, [ebp - 0x38]
push ecx
push edx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 6
jne 0x4fc64b
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edx, dword [eax + 0x14]
push 0x10
sub ecx, edx
mov edx, dword [eax + 0xc]
shl ecx, 7
mov dword [ebp - 0x38], 0x4011
lea eax, [ecx + edx + 0xa]
mov dword [ebp - 0x30], eax
jmp 0x4fc5b1
cmp ax, 7
jne 0x4fc6b2
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
mov dword [ebp - 0x38], 0x4011
shl ecx, 7
push 3
lea eax, [ecx + edx + 0xb]
mov dword [ebp - 0x30], eax
jmp 0x4ff615
cmp ax, 8
jne 0x4fc6d2
push 1
call fcn.004fa3f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 9
jne 0x4fc6f0
call fcn.004f9240
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xa
jl 0x4fc719
cmp ax, 0x12
jg 0x4fc719
sub ax, 0xa
mov word [0x539850], 0xfffe
mov word [0x53a146], ax
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x13
jne 0x4fc738
push ebx
call fcn.004fa3f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x14
jne 0x4fc79f
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edx, dword [eax + 0x14]
push 0xf
sub ecx, edx
mov edx, dword [eax + 0xc]
shl ecx, 7
mov dword [ebp - 0x38], 0x4011
lea eax, [ecx + edx + 0xc]
mov dword [ebp - 0x30], eax
jmp 0x4fc5b1
cmp ax, 0x15
jne 0x4fc7bf
push 4
call fcn.004fa3f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x16
jne 0x4fc826
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
mov dword [ebp - 0x38], 0x4011
shl ecx, 7
push 3
lea eax, [ecx + edx + 0x22]
mov dword [ebp - 0x30], eax
jmp 0x4ff615
cmp ax, 0x17
jne 0x4fc88d
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
mov dword [ebp - 0x38], 0x4011
shl ecx, 7
push 1
lea eax, [ecx + edx + 0x5d]
mov dword [ebp - 0x30], eax
jmp 0x4ff615
cmp ax, 0x18
jne 0x4fc8ac
push ebx
call fcn.004fa4f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x19
jne 0x4fc8cc
push 1
call fcn.004fa4f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x1a
jne 0x4fc8eb
push ebx
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
mov ebx, 0x1b
cmp ax, bx
jne 0x4fc912
push 0x2af8
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x1c
jne 0x4fc935
push 0xffffd508
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x1d
jne 0x4fc958
push 0x5209
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x1e
jne 0x4fc9c1
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
lea eax, [ecx + edx + 0x36]
push 0xffffffffffffffff
push 3
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0x4011
push 0
jmp 0x4ff616
cmp ax, 0x1f
jl 0x4fc9ed
cmp ax, 0x27
jg 0x4fc9ed
sub ax, 0x1e
movsx ecx, ax
push ecx
call fcn.004fa880
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x28
jl 0x4fca6b
cmp ax, 0x30
jg 0x4fca6b
mov edx, dword [0x539840]
sub ax, 0x28
movsx ecx, word [0x53a13c]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, ebx
mov word [0x539850], 0xfffe
mov esi, ecx
push 0x4ff6ac
shl esi, 5
add esi, ecx
movsx eax, ax
mov ecx, dword [edx + esi*8 + 0xc]
movsx edx, word [0x53a140]
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub edx, edi
shl edx, 7
mov ecx, dword [edx + ecx + 0x60]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*2]
lea eax, [eax + edx*2]
neg cx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
mov word [eax], cx
jmp 0x4ff687
cmp ax, 0x31
jne 0x4fca89
call fcn.004faca0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x32
jne 0x4fcae2
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
lea eax, [ecx + edx + 0x38]
jmp 0x4fc9ac
cmp ax, 0x33
jl 0x4fcb0e
cmp ax, 0x3b
jg 0x4fcb0e
sub ax, 0x32
movsx ecx, ax
push ecx
call fcn.004fadf0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x3c
jne 0x4fcb77
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
push 9
shl ecx, 7
mov dword [ebp - 0x38], 0x4011
push 0
lea eax, [ecx + edx + 0x5e]
mov dword [ebp - 0x30], eax
jmp 0x4fc5b2
cmp ax, 0x3d
jl 0x4fcd3f
cmp ax, 0x45
jg 0x4fcd3f
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x3c
push 0xffffffffffffffff
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
push 8
push 0
mov dword [ebp - 0x38], 0x4011
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4]
lea ecx, [ebp - 0x38]
movsx eax, di
push eax
push ecx
mov dword [ebp - 0x30], edx
call fcn.004364b0
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call edi
lea eax, [ebp - 0x18]
push eax
call edi
lea ecx, [ebp - 0x1c]
push ecx
call edi
mov edx, dword [0x539840]
lea eax, [ebp - 0x28]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x28]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x24]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x24]
movsx ecx, word [0x53a140]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov edx, dword [0x539840]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
sub dx, 0x3c
movsx eax, dx
mov edx, dword [ebp - 0x20]
mov ecx, eax
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, ebx
lea ecx, [ecx + ecx*8]
lea ecx, [edx + ecx*4 + 0x12]
push ecx
mov ecx, dword [ebp - 0x14]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.004fb2d0
lea edx, [ebp - 0x14]
push edx
call edi
lea eax, [ebp - 0x18]
push eax
call edi
lea ecx, [ebp - 0x1c]
push ecx
call edi
lea edx, [ebp - 0x20]
push edx
call edi
lea eax, [ebp - 0x24]
push eax
call edi
lea ecx, [ebp - 0x28]
push ecx
call edi
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x46
jne 0x4fcd5f
push 0
call fcn.004f9d40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x47
jl 0x4fcd8b
cmp ax, 0x4f
jg 0x4fcd8b
sub ax, 0x46
movsx edx, ax
push edx
call fcn.004fb080
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x50
jne 0x4fcdae
push 0x7d7c
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x51
jl 0x4fcdda
cmp ax, 0x58
jg 0x4fcdda
sub ax, 0x50
movsx eax, ax
push eax
call fcn.004faf40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x59
jne 0x4fcdfa
push 1
call fcn.004f9d40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x5a
jne 0x4fce1a
push 2
call fcn.004f9d40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x5b
jl 0x4fceb6
cmp ax, 0x63
jg 0x4fceb6
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x5a
push 0xffffffffffffffff
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
mov dword [ebp - 0x38], 0x4011
push 0xb
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 1]
mov dword [ebp - 0x30], edx
jmp 0x4fd6ff
cmp ax, 0x64
jne 0x4fcede
mov edx, dword [0x53a144]
mov word [0x539850], 0xfffe
not edx
mov word [0x53a144], dx
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x65
jl 0x4fcfb5
cmp ax, 0x6d
jg 0x4fcfb5
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x50]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x50]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x4c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x4c]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x48]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x48]
sub dx, 0x64
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
lea eax, [eax + eax*8]
mov dl, byte [ecx + eax*4 + 2]
lea eax, [ecx + eax*4]
inc dl
mov cl, dl
mov byte [eax + 2], dl
cmp cl, 7
jne 0x4fcf79
mov byte [eax + 2], 0x15
cmp byte [eax + 2], 0x17
jne 0x4fcf83
mov byte [eax + 2], 0x1a
cmp byte [eax + 2], bl
jne 0x4fcf8c
mov byte [eax + 2], 0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x48]
push edx
mov dword [eax + 0xc], 0
mov byte [eax + 3], 0
mov byte [eax + 4], 0
call esi
lea eax, [ebp - 0x4c]
push eax
call esi
lea ecx, [ebp - 0x50]
jmp 0x4fc5ce
cmp ax, 0x6e
jne 0x4fcfd5
push 3
call fcn.004fa3f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x6f
jl 0x4fd172
cmp ax, 0x77
jg 0x4fd172
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x6e
mov ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, ebx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 3
push 0
mov eax, dword [ecx + 0x14]
push 1
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
shl edx, 2
sub eax, edx
lea ecx, [ebp - 0x38]
add eax, 0xc
push ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0x4011
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx ecx, word [0x53a13c]
mov edi, dword [0x539840]
mov eax, ecx
sub eax, dword [edi + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [edi + 0xc]
mov edx, dword [eax + edx*8 + 0xc]
movsx eax, word [0x53a140]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov esi, eax
sub esi, ebx
shl esi, 7
mov ebx, dword [esi + edx + 0x78]
mov dx, word [0x539852]
sub dx, 0x6e
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
mov ebx, dword [ebx + 0xc]
lea esi, [esi + esi*8]
mov esi, dword [ebx + esi*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ebx, [ebx + ebx*2]
shl ebx, 2
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x10], esi
mov ebx, dword [edi + 0x14]
sub ecx, ebx
mov word [0x539850], 0xfffe
mov ebx, ecx
push 0x4ff6ac
shl ebx, 5
add ebx, ecx
mov ecx, dword [edi + 0xc]
mov ecx, dword [ecx + ebx*8 + 0xc]
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
shl eax, 7
mov eax, dword [eax + ecx + 0x78]
mov edi, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, edi
lea edx, [edx + edx*8]
mov eax, dword [eax + edx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea ecx, [ecx + ecx*2]
shl ecx, 2
sub edx, ecx
mov word [edx + 0x14], si
jmp 0x4ff687
cmp ax, 0x78
jne 0x4fd1ca
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
lea eax, [ecx + edx + 0x37]
jmp 0x4fc9ac
cmp ax, 0x79
jl 0x4fd369
cmp ax, 0x81
jg 0x4fd369
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x78
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 2
push 0xffffffffffffffff
push 3
mov edx, dword [ecx + 0x14]
push 0
sub eax, edx
push 1
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x30], ecx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
lea eax, [ebp - 0x20]
push eax
call esi
movsx ecx, word [0x53a13c]
mov edi, dword [0x539840]
mov eax, ecx
sub eax, dword [edi + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [edi + 0xc]
mov edx, dword [eax + edx*8 + 0xc]
mov word [0x539850], 0xfffe
movsx eax, word [0x53a140]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov esi, eax
push 0x4ff6ac
sub esi, ebx
shl esi, 7
mov ebx, dword [esi + edx + 0x78]
mov dx, word [0x539852]
sub dx, 0x78
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
mov ebx, dword [ebx + 0xc]
lea esi, [esi + esi*8]
mov esi, dword [ebx + esi*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ebx, [ebx + ebx*2]
shl ebx, 2
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x1c], esi
mov ebx, dword [edi + 0x14]
sub ecx, ebx
mov ebx, ecx
shl ebx, 5
add ebx, ecx
mov ecx, dword [edi + 0xc]
mov ecx, dword [ecx + ebx*8 + 0xc]
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
shl eax, 7
mov eax, dword [eax + ecx + 0x78]
mov edi, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, edi
lea edx, [edx + edx*8]
mov eax, dword [eax + edx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea ecx, [ecx + ecx*2]
shl ecx, 2
sub edx, ecx
mov word [edx + 0x20], si
jmp 0x4ff687
cmp ax, 0x82
jne 0x4fd415
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov eax, 2
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
push 0
push 1
lea edx, [ebp - 0x38]
push edx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
jmp 0x4fc5cf
cmp ax, 0x83
jl 0x4fd5b5
cmp ax, 0x8b
jg 0x4fd5b5
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x82
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 3
push 0xffffffffffffffff
push 3
mov edx, dword [ecx + 0x14]
push 0
sub eax, edx
push 1
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x30], ecx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
lea eax, [ebp - 0x20]
push eax
call esi
movsx ecx, word [0x53a13c]
mov edi, dword [0x539840]
mov eax, ecx
sub eax, dword [edi + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [edi + 0xc]
mov edx, dword [eax + edx*8 + 0xc]
mov word [0x539850], 0xfffe
movsx eax, word [0x53a140]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov esi, eax
push 0x4ff6ac
sub esi, ebx
shl esi, 7
mov ebx, dword [esi + edx + 0x78]
mov dx, word [0x539852]
sub dx, 0x82
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
mov ebx, dword [ebx + 0xc]
lea esi, [esi + esi*8]
mov esi, dword [ebx + esi*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ebx, [ebx + ebx*2]
shl ebx, 2
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x28], esi
mov ebx, dword [edi + 0x14]
sub ecx, ebx
mov ebx, ecx
shl ebx, 5
add ebx, ecx
mov ecx, dword [edi + 0xc]
mov ecx, dword [ecx + ebx*8 + 0xc]
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
shl eax, 7
mov eax, dword [eax + ecx + 0x78]
mov edi, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, edi
lea edx, [edx + edx*8]
mov eax, dword [eax + edx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea ecx, [ecx + ecx*2]
shl ecx, 2
sub edx, ecx
mov word [edx + 0x2c], si
jmp 0x4ff687
cmp ax, 0x8c
jne 0x4fd619
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov eax, 5
jmp 0x4fd3cc
cmp ax, 0x8d
jl 0x4fd7a6
cmp ax, 0x95
jg 0x4fd7a6
mov ecx, dword [0x539840]
sub ax, 0x8c
movsx edx, word [0x53a13c]
mov esi, dword [ecx + 0x14]
push ecx
sub edx, esi
mov esi, edx
shl esi, 5
add esi, edx
mov edx, dword [ecx + 0xc]
movsx eax, ax
mov edx, dword [edx + esi*8 + 0xc]
movsx esi, word [0x53a140]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub esi, ebx
shl esi, 7
mov edx, dword [esi + edx + 0x78]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub eax, ebx
lea eax, [eax + eax*8]
cmp word [edx + eax*4 + 0x12], 0xffff
jne 0x4fd728
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x8c
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
mov dword [ebp - 0x38], 0x4003
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 0xc]
mov dword [ebp - 0x30], edx
push 0xffffffffffffffff
push 8
movsx eax, di
push 0
push eax
lea ecx, [ebp - 0x38]
push ecx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
jmp 0x4fc5ce
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x8c
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
mov dword [ebp - 0x38], 0x4011
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 4]
mov dword [ebp - 0x30], edx
jmp 0x4fd6fb
cmp ax, 0x96
jl 0x4fd7d2
cmp ax, 0xb3
jg 0x4fd7d2
sub ax, 0x95
movsx edx, ax
push edx
call fcn.004fa740
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xb4
jne 0x4fd857
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 8
push 0xffffffffffffffff
push 4
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x4fd3ed
cmp ax, 0xb5
jl 0x4fd883
cmp ax, 0xbc
jg 0x4fd883
sub ax, 0xb4
movsx eax, ax
push eax
call fcn.004fa600
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xbd
jne 0x4fd8a6
push 0x7fd7
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xbe
jne 0x4fd8c9
push 0x7e78
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xbf
jl 0x4fd969
cmp ax, 0xc6
jg 0x4fd969
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x58]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov eax, dword [ebp - 0x14]
sub dx, 0xbe
push 0xffffffffffffffff
mov esi, dword [eax + 0x14]
push 0xf
movsx ecx, dx
mov edx, dword [eax + 0xc]
sub ecx, esi
push 0
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*4 + 2]
movsx ecx, di
mov dword [ebp - 0x30], eax
push ecx
jmp 0x4fd3f1
cmp ax, 0xc7
jne 0x4fd98c
push 0xffff8000
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xc8
jne 0x4fd9f4
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
push 2
shl ecx, 7
mov dword [ebp - 0x38], 0x4002
push 0
lea eax, [ecx + edx + 0x3e]
mov dword [ebp - 0x30], eax
jmp 0x4ff616
cmp ax, 0xc9
jl 0x4fda20
cmp ax, 0xd1
jg 0x4fda20
sub ax, 0xc8
movsx ecx, ax
push ecx
call fcn.004fa180
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xd2
jne 0x4fda89
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
push 1
shl ecx, 7
mov dword [ebp - 0x38], 0x4011
push 0
lea eax, [ecx + edx + 0x5d]
mov dword [ebp - 0x30], eax
jmp 0x4ff616
cmp ax, 0xd3
jl 0x4fdabd
cmp ax, 0xd8
jg 0x4fdabd
sub ax, 0xd2
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 1
mov dword [ebp - 0x3c], ecx
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xd9
jne 0x4fdb21
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov eax, 2
jmp 0x4fdc05
cmp ax, 0xda
jne 0x4fdba6
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 3
push 0xffffffffffffffff
push 3
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x4fd3ed
cmp ax, 0xdb
jne 0x4fdc2b
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov eax, 4
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 1
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x4fd3ed
cmp ax, 0xdc
jne 0x4fdc4b
push 2
call fcn.004fa4f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xdd
jl 0x4fdc7f
cmp ax, 0xe2
jg 0x4fdc7f
sub ax, 0xdc
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 2
mov dword [ebp - 0x3c], eax
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xe3
jne 0x4fdc9d
call fcn.00514270
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xe4
jne 0x4fdcbd
push 3
call fcn.004fa4f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xe5
jne 0x4fdd4c
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
mov dword [ebp - 0x38], 0x4002
movsx ecx, di
add eax, 0x36
push ecx
mov dword [ebp - 0x30], eax
jmp 0x4fd3f1
cmp ax, 0xe6
jne 0x4fddda
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
mov dword [ebp - 0x38], 0x4002
movsx ecx, di
add eax, 0x38
push ecx
mov dword [ebp - 0x30], eax
jmp 0x4fd3f1
cmp ax, 0xe7
jl 0x4fde0e
cmp ax, 0xec
jg 0x4fde0e
sub ax, 0xe6
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 3
mov dword [ebp - 0x3c], eax
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xed
jne 0x4fde9b
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3a
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0x4002
push 1
jmp 0x4fd705
cmp ax, 0xee
jne 0x4fdf12
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3c
jmp 0x4fde84
cmp ax, 0xef
jne 0x4fdf89
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x7a
jmp 0x4fde84
cmp ax, 0xf0
jne 0x4fdfa9
push 3
call fcn.004f9d40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xf1
jl 0x4fdfdd
cmp ax, 0xf6
jg 0x4fdfdd
sub ax, 0xf0
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 4
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xf7
jne 0x4fdffd
push 4
call fcn.004f9d40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xf8
jne 0x4fe01d
push 4
call fcn.004fa4f0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xfb
jl 0x4fe051
cmp ax, 0x100
jg 0x4fe051
sub ax, 0xfa
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 5
mov dword [ebp - 0x3c], ecx
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x101
jl 0x4fe07a
cmp ax, 0x104
jg 0x4fe07a
sub ax, 0x101
push eax
call fcn.00514030
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x105
jl 0x4fe0ae
cmp ax, 0x10a
jg 0x4fe0ae
sub ax, 0x104
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 6
mov dword [ebp - 0x3c], eax
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x10f
jl 0x4fe0e2
cmp ax, 0x114
jg 0x4fe0e2
sub ax, 0x10e
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 7
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x119
jl 0x4fe116
cmp ax, 0x11e
jg 0x4fe116
sub ax, 0x118
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 8
mov dword [ebp - 0x3c], ecx
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x123
jl 0x4fe14a
cmp ax, 0x128
jg 0x4fe14a
sub ax, 0x122
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 9
mov dword [ebp - 0x3c], eax
call fcn.004fa290
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x12d
jl 0x4fe1e7
cmp ax, 0x135
jg 0x4fe1e7
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
sub dx, 0x12c
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dword [ebp - 0x38], 0x4002
push 1
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 0x10]
mov dword [ebp - 0x30], edx
jmp 0x4ff048
cmp ax, 0x136
jne 0x4fe206
mov dword [0x538adc], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x137
jl 0x4fe28a
cmp ax, 0x13e
jg 0x4fe28a
mov edx, dword [0x539840]
sub ax, 0x136
movsx ecx, word [0x53a13c]
mov ebx, dword [edx + 0x14]
mov word [0x539850], 0xfffe
sub ecx, ebx
push 0x4ff6ac
mov esi, ecx
shl esi, 5
add esi, ecx
mov ecx, dword [edx + 0xc]
movsx edx, word [0x53a140]
mov ecx, dword [ecx + esi*8 + 0xc]
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub edx, edi
shl edx, 7
mov ecx, dword [edx + ecx + 0x14]
movsx edx, ax
mov eax, dword [ecx + 0x14]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*2]
lea eax, [eax + edx*2]
sub cx, 0x7fd7
neg cx
sbb ecx, ecx
and ecx, 0x160
add ecx, 0x7e77
mov word [eax], cx
jmp 0x4ff687
cmp ax, 0x13f
jne 0x4fe2ad
mov dword [0x538adc], 0x14
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x141
jl 0x4fe3fa
cmp ax, 0x149
jg 0x4fe3fa
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x140
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 9
push 0
mov eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
shl edx, 2
movsx ecx, di
sub eax, edx
lea edx, [ebp - 0x38]
add eax, 0xc
push ecx
push edx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0x4011
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
lea eax, [ebp - 0x20]
push eax
call esi
movsx ecx, word [0x53a13c]
mov edi, dword [0x539840]
mov eax, ecx
sub eax, dword [edi + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [edi + 0xc]
mov edx, dword [eax + edx*8 + 0xc]
movsx eax, word [0x53a140]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov esi, eax
sub esi, ebx
shl esi, 7
mov ebx, dword [esi + edx + 0x78]
mov dx, word [0x539852]
sub dx, 0x140
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
mov ebx, dword [ebx + 0xc]
lea esi, [esi + esi*8]
mov esi, dword [ebx + esi*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ebx, [ebx + ebx*2]
shl ebx, 2
sub esi, ebx
mov ebx, esi
xor esi, esi
jmp 0x4fd119
cmp ax, 0x14a
jne 0x4fe470
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3e
jmp 0x4fde84
cmp ax, 0x14b
jl 0x4fe553
cmp ax, 0x153
jg 0x4fe553
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x14a
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 0xf
mov eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
shl edx, 2
sub eax, edx
mov dword [ebp - 0x38], 0x4002
add eax, 0x14
mov dword [ebp - 0x30], eax
movsx ecx, di
push 0
lea edx, [ebp - 0x38]
push ecx
push edx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
lea eax, [ebp - 0x20]
push eax
jmp 0x4fc5cf
cmp ax, 0x154
jne 0x4fe576
push 0x7993
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x155
jl 0x4fe613
cmp ax, 0x15d
jg 0x4fe613
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x154
push 0xffffffffffffffff
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
mov dword [ebp - 0x38], 0x4011
push 5
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0x30], edx
jmp 0x4fd6ff
cmp ax, 0x15e
jne 0x4fe636
push 0x791a
call fcn.004f9c60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x15f
jl 0x4fe6db
cmp ax, 0x17d
jg 0x4fe6db
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 7
push 0xffffffffffffffff
push 7
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dword [ebp - 0x38], 0x4002
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x539852]
sub ax, 0x15e
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x4fd6ff
cmp ax, 0x17e
jl 0x4fe793
cmp ax, 0x190
jg 0x4fe793
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x17d
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 9
mov eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
shl edx, 2
sub eax, edx
mov dword [ebp - 0x38], 0x4002
add eax, 0x14
mov dword [ebp - 0x30], eax
jmp 0x4fe523
cmp ax, 0x191
jl 0x4fe834
cmp ax, 0x1ae
jg 0x4fe834
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 4
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dword [ebp - 0x38], 0x4002
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x539852]
sub ax, 0x190
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x4fd6fb
cmp ax, 0x1af
jl 0x4fe8d9
cmp ax, 0x1cc
jg 0x4fe8d9
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 2
push 0xffffffffffffffff
push 2
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
mov dword [ebp - 0x38], 0x4002
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x539852]
sub ax, 0x1ae
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x4ff048
cmp ax, 0x1cd
jl 0x4fe976
cmp ax, 0x1d6
jg 0x4fe976
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x1cc
push 0xffffffffffffffff
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
mov dword [ebp - 0x38], 0x4003
push 9
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 0xc]
mov dword [ebp - 0x30], edx
jmp 0x4fd6ff
cmp ax, 0x1d7
jl 0x4fea30
cmp ax, 0x1df
jg 0x4fea30
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x1d6
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 2
push 1
mov eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
shl edx, 2
sub eax, edx
mov dword [ebp - 0x38], 0x4011
add eax, 0xc
mov dword [ebp - 0x30], eax
jmp 0x4ff125
cmp ax, 0x1e0
jl 0x4feb2d
cmp ax, 0x3de
jg 0x4feb2d
mov di, word [0x53a188]
cmp di, 6
jge 0x4feabf
mov edx, dword [0x539840]
movsx ecx, word [0x53a13c]
sub ecx, dword [edx + 0x14]
mov esi, ecx
shl esi, 5
add esi, ecx
mov ecx, dword [edx + 0xc]
mov ecx, dword [ecx + esi*8 + 0xc]
movsx esi, word [0x53a140]
mov ebx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub esi, ebx
shl esi, 7
mov esi, dword [esi + ecx + 0x6c]
movsx ecx, word [0x53a186]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub ecx, ebx
mov bx, ax
sub bx, 0x1e0
lea ecx, [ecx + ecx*2]
mov esi, dword [esi + ecx*4 + 4]
movsx ecx, word [0x53a184]
sub ecx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ecx, [ecx + ecx*2]
mov word [esi + ecx*4 + 2], bx
mov ebx, 0x1b
jmp 0x4feac5
mov edx, dword [0x539840]
cmp di, 6
jne 0x4feb14
movsx ecx, word [0x53a13c]
mov esi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, esi
sub ax, 0x1e0
mov esi, ecx
shl esi, 5
add esi, ecx
mov ecx, dword [edx + esi*8 + 0xc]
movsx edx, ax
mov eax, dword [0x53a180]
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
mov esi, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub edx, esi
movsx esi, word [0x53a140]
mov dx, word [eax + edx*2]
sub esi, edi
shl esi, 7
mov word [esi + ecx + 4], dx
mov dword [0x538adc], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x3df
jl 0x4febc9
cmp ax, 0x3e6
jg 0x4febc9
mov eax, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x3de
push 0xffffffffffffffff
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dword [ebp - 0x38], 0x4011
push 0xe
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0x30], edx
jmp 0x4ff048
cmp ax, 0x3e7
jne 0x4febe7
call fcn.004f9160
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x3e9
jl 0x4fec13
cmp ax, 0x7530
jg 0x4fec13
sub ax, 0x3e8
movsx ecx, ax
push ecx
call fcn.004f90c0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x7531
jl 0x4fecb0
cmp ax, 0x7539
jg 0x4fecb0
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x7530
push 0xffffffffffffffff
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, dx
sub eax, esi
mov dword [ebp - 0x38], 0x4011
push 0xf
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 4]
mov dword [ebp - 0x30], edx
jmp 0x4fd6ff
cmp ax, 0x753b
jl 0x4fed22
cmp ax, 0x7542
jg 0x4fed22
mov edx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
sub dx, 0x753a
jmp 0x4fe1bf
cmp ax, 0x7544
jl 0x4fedc9
cmp ax, 0x754d
jg 0x4fedc9
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, ebx
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x7544
push 0xffffffffffffffff
movsx eax, dx
mov edx, dword [ecx + 0x14]
push 8
sub eax, edx
push 0
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2 + 0xe]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x4ff04c
cmp ax, 0x754e
jl 0x4fee6e
cmp ax, 0x7555
jg 0x4fee6e
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 8
push 0xffffffffffffffff
push 1
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
mov dword [ebp - 0x38], 0x4002
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x539852]
sub ax, 0x753a
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x4ff048
cmp ax, 0x7558
jl 0x4fef13
cmp ax, 0x755f
jg 0x4fef13
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x60]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 9
push 0xffffffffffffffff
push 1
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
mov dword [ebp - 0x38], 0x4002
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x539852]
sub ax, 0x7544
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x4ff048
cmp ax, 0x7595
jl 0x4fefb0
cmp ax, 0x759d
jg 0x4fefb0
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x7594
push 0xffffffffffffffff
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dword [ebp - 0x38], 0x4011
push 1
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 3]
mov dword [ebp - 0x30], edx
jmp 0x4ff048
cmp ax, 0x759f
jl 0x4ff070
cmp ax, 0x75a7
jg 0x4ff070
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x18]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x14]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x14]
sub dx, 0x759e
push 0xffffffffffffffff
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dword [ebp - 0x38], 0x4011
push 3
lea eax, [eax + eax*8]
lea edx, [ecx + eax*4 + 4]
mov dword [ebp - 0x30], edx
push 0
push 1
lea eax, [ebp - 0x38]
push eax
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
jmp 0x4fc5cf
cmp ax, 0x75f9
jl case.default.0x4fbf43
cmp ax, 0x7601
jg case.default.0x4fbf43
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0xc]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x1c]
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
shl ecx, 7
mov eax, dword [ecx + edx + 0x78]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov dx, word [0x539852]
mov ecx, dword [ebp - 0x18]
sub dx, 0x75f8
movsx eax, dx
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
lea eax, [eax + eax*8]
mov edx, dword [ecx + eax*4 + 0x18]
lea eax, [ebp - 0x14]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 1
push 0
mov eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
shl edx, 2
sub eax, edx
mov dword [ebp - 0x38], 0x4002
add eax, 0x14
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x38]
push 1
push ecx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
jmp 0x4fc5cf
cmp ax, bx
jne 0x4ff17c
push ebx
call fcn.004fb300
mov word [0x53a13c], bx
mov dword [0x538c18], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 1
jne 0x4ff19c
push 0x5b
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 2
jne 0x4ff20a
mov eax, dword [0x539840]
lea ecx, [ebp - 0x40]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x40]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*8 + 0x10]
mov dl, byte [eax + 0x1a]
inc dl
mov cl, dl
mov byte [eax + 0x1a], dl
cmp cl, 3
jne 0x4ff1e0
mov byte [eax + 0x1a], 0
mov cx, word [0x53a142]
push ecx
call fcn.004a35d0
lea edx, [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 3
jne 0x4ff22a
push 0xfffffffffffffff6
call fcn.004f7e10
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 4
jne 0x4ff24a
push 0xa
call fcn.004f7e10
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 5
jne 0x4ff27e
push 0x62
call fcn.004fb300
mov word [0x53a140], bx
mov dword [0x538c18], ebx
mov word [0x538c16], bx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 6
jne 0x4ff2a3
push 2
call fcn.004fb300
call fcn.004f7ee0
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 7
jne 0x4ff2c3
push 0xffffffffffffffff
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 8
jne 0x4ff2e1
call fcn.004f8400
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xb
jl 0x4ff30a
cmp ax, 0x13
jg 0x4ff30a
sub ax, 0xb
mov word [0x539850], 0xfffe
mov word [0x53a14c], ax
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x64
jle case.default.0x4fbf43
mov edx, dword [0x539840]
mov si, 0x64
movsx ecx, word [0x53a13c]
mov edi, dword [edx + 0x14]
sub si, ax
sub ecx, edi
sub ax, 0x64
mov edi, ecx
mov word [0x539850], 0xfffe
shl edi, 5
add edi, ecx
mov ecx, dword [edx + 0xc]
mov edx, dword [0x539844]
push 0x4ff6ac
mov word [ecx + edi*8 + 8], si
movsx ecx, word [0x53a142]
mov edi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, edi
lea ecx, [ecx + ecx*2]
shl ecx, 5
mov word [ecx + edx + 0x42], ax
jmp 0x4ff687
cmp ecx, 0x62
jl case.default.0x4fbf43
cmp ecx, 0x63
jle 0x4ff514
cmp ecx, 0x3e7
jne case.default.0x4fbf43
cmp ax, bx
jne 0x4ff3b5
push ebx
call fcn.004fb300
mov dword [0x538c18], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 2
jne 0x4ff3f5
cmp si, 3
jne 0x4ff3db
push 4
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
push 3
call fcn.004fb300
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 3
jne 0x4ff449
mov ax, word [0x53a150]
mov ecx, dword [0x53a12c]
mov word [0x53a140], ax
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
movsx eax, ax
sub eax, edx
lea eax, [eax + eax*4]
mov edx, dword [ecx + eax*4]
mov ecx, 0x53a148
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 3
call fcn.004fb300
mov dword [0x538c18], ebx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 4
jne 0x4ff469
mov word [0x53a140], bx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 5
jne 0x4ff4a9
cmp word [0x53a140], bx
push ebx
jne 0x4ff491
call fcn.004f7f60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
call fcn.004f8120
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 6
jne 0x4ff4d2
cmp word [0x53a140], bx
push 0xffffffffffffffff
jne 0x4ff491
call fcn.004f7f60
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0xb
jl 0x4ff4fb
cmp ax, 0x13
jg 0x4ff4fb
sub ax, 0xb
mov word [0x539850], 0xfffe
mov word [0x53a14c], ax
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 0x65
jl case.default.0x4fbf43
cmp ax, 0xc7
jg case.default.0x4fbf43
jmp 0x4fc2b1
cmp ax, bx
jne 0x4ff561
cmp si, 0x62
jne 0x4ff540
push 0xffffffffffffffff
call fcn.004fb300
mov word [0x53a140], bx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
push 1
call fcn.004fb300
mov word [0x53a140], bx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 1
jne 0x4ff57f
call fcn.004f9e40
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 2
jne 0x4ff5ac
movsx eax, word [0x53a140]
push eax
call fcn.004fa050
mov word [0x53a140], bx
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
cmp ax, 3
jne 0x4ff636
mov ecx, dword [0x539840]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x53a13c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 0x104]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx ecx, word [0x53a140]
mov edi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, edi
mov dword [ebp - 0x38], 0x4011
shl ecx, 4
push 2
lea eax, [ecx + edx + 0xc]
mov dword [ebp - 0x30], eax
push ebx
lea ecx, [ebp - 0x38]
push 1
push ecx
call fcn.004364b0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
jmp 0x4fc5cf
cmp ax, 0xb
jl case.default.0x4fbf43
cmp ax, 0x14
jg case.default.0x4fbf43
sub ax, 0xa
mov word [0x53a140], ax
mov word [0x539850], 0xfffe
push 0x4ff6ac
jmp 0x4ff687
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x40]
push ecx
call esi
lea edx, [ebp - 0x44]
push edx
call esi
lea eax, [ebp - 0x48]
push eax
call esi
lea ecx, [ebp - 0x4c]
push ecx
call esi
lea edx, [ebp - 0x50]
push edx
call esi
ret