Function at 0x431c50
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x4066f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x144
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401a08
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x30], ecx
xor edx, edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x98], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov esi, dword [ebp + 8]
cmp esi, 0xffffffff
je 0x434d49
mov ecx, dword [0x48e3ec]
cmp ecx, ebx
je 0x431d14
cmp word [ecx], 1
jne 0x431d14
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x431d09
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x431d22
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x72], bx
je 0x434d49
push ebx
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x434db7
push eax
push 1
push 3
push 0x48e410
push 4
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov ecx, dword [0x48e410]
cmp ecx, ebx
je 0x431d89
cmp word [ecx], 1
jne 0x431d89
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x431d80
call edi
mov ecx, dword [0x48e410]
lea eax, [esi*4]
jmp 0x431d91
call edi
mov ecx, dword [0x48e410]
mov ecx, dword [ecx + 0xc]
cmp dword [ecx + eax], ebx
jne 0x431de4
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e410]
cmp ecx, ebx
je 0x431dd3
cmp word [ecx], 1
jne 0x431dd3
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x431dca
call edi
mov ecx, dword [0x48e410]
lea eax, [esi*4]
jmp 0x431ddb
call edi
mov ecx, dword [0x48e410]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x64]
mov dword [edx + eax], ecx
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [0x48e410]
cmp eax, ebx
je 0x431e17
cmp word [eax], 1
jne 0x431e17
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x431e0e
call edi
lea ebx, [esi*4]
jmp 0x431e1b
call edi
mov ebx, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x431e49
cmp word [ecx], 1
jne 0x431e49
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x431e3e
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x431e51
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e410]
mov edx, dword [edx + 0xc]
mov esi, dword [ebp - 0x64]
sub esi, dword [edx + ebx]
jo 0x434db7
mov dword [ebp - 0xbc], esi
fild dword [ebp - 0xbc]
fstp qword [ebp - 0xc4]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR8]
fcomp qword [ebp - 0xc4]
fnstsw ax
test ah, 0x41
jne 0x431e99
mov ebx, 1
jmp 0x431e9b
xor ebx, ebx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x431ec9
cmp word [ecx], 1
jne 0x431ec9
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x431ebe
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x431ed1
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x14]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x41
je 0x431eec
mov eax, 1
jmp 0x431eee
xor eax, eax
or ebx, eax
jne 0x4320d2
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e410]
test ecx, ecx
je 0x431f30
cmp word [ecx], 1
jne 0x431f30
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x431f27
call edi
mov ecx, dword [0x48e410]
lea eax, [esi*4]
jmp 0x431f38
call edi
mov ecx, dword [0x48e410]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov eax, dword [0x48e3ec]
test eax, eax
je 0x431f6d
cmp word [eax], 1
jne 0x431f6d
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x431f62
call edi
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea ebx, [esi + esi*8]
shl ebx, 2
jmp 0x431f76
call edi
mov ebx, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x431f9d
cmp word [eax], 1
jne 0x431f9d
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x431f92
call edi
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x431faa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x431fd5
cmp word [eax], 1
jne 0x431fd5
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x431fca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
jmp 0x431fe2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
fld dword [ecx + edi + 0xc]
fadd dword [ecx + ebx + 4]
fstp dword [ecx + edx + 4]
fnstsw ax
test al, 0xd
jne 0x434db2
mov eax, dword [0x48e3ec]
test eax, eax
je 0x43202b
cmp word [eax], 1
jne 0x43202b
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432020
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea ebx, [esi + esi*8]
shl ebx, 2
jmp 0x432038
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x432063
cmp word [eax], 1
jne 0x432063
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432058
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x432070
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x43209b
cmp word [eax], 1
jne 0x43209b
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432090
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
jmp 0x4320a8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
fld dword [ecx + edi + 0x10]
fadd dword [ecx + ebx + 8]
fstp dword [ecx + edx + 8]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x432167
test ecx, ecx
je 0x4320fa
cmp word [ecx], 1
jne 0x4320fa
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4320ef
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432102
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x14]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x432167
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e410]
test ecx, ecx
je 0x432150
cmp word [ecx], 1
jne 0x432150
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432147
call edi
mov ecx, dword [0x48e410]
lea eax, [esi*4]
jmp 0x432158
call edi
mov ecx, dword [0x48e410]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov ecx, dword [0x48e3ec]
push 0
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x434db7
push eax
push 1
push 3
push 0x48e424
push 4
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4321c3
cmp word [ecx], 1
jne 0x4321c3
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4321b8
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4321cb
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x88]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x4321e9
mov ebx, 1
jmp 0x4321eb
xor ebx, ebx
test ecx, ecx
je 0x432213
cmp word [ecx], 1
jne 0x432213
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432208
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43221b
call edi
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x8c]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x432239
mov eax, 1
jmp 0x43223b
xor eax, eax
test eax, ebx
mov ecx, dword [0x48e424]
jne 0x432717
test ecx, ecx
je 0x43226f
cmp word [ecx], 1
jne 0x43226f
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432266
call edi
mov ecx, dword [0x48e424]
lea eax, [esi*4]
jmp 0x432277
call edi
mov ecx, dword [0x48e424]
mov edx, dword [ecx + 0xc]
cmp dword [edx + eax], 0
je 0x432326
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e424]
test ecx, ecx
je 0x4322c0
cmp word [ecx], 1
jne 0x4322c0
mov ebx, dword [ebp + 8]
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4322b7
call edi
mov ecx, dword [0x48e424]
lea eax, [esi*4]
jmp 0x4322cb
call edi
mov ecx, dword [0x48e424]
mov ebx, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
sub edx, dword [ecx + eax]
jo 0x434db7
mov dword [ebp - 0xc8], edx
fild dword [ebp - 0xc8]
fstp qword [ebp - 0xd0]
fld qword [ebp - 0xd0]
cmp dword [section..data], 0
jne 0x432303
fdiv qword [0x401a38]
jmp 0x432314
push dword [0x401a3c]
push dword [0x401a38]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fstp dword [0x48e428]
fnstsw ax
test al, 0xd
jne 0x434db2
jmp 0x432333
mov dword [0x48e428], 0x3f800000
mov ebx, dword [ebp + 8]
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e424]
test ecx, ecx
je 0x43236c
cmp word [ecx], 1
jne 0x43236c
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432363
call edi
mov ecx, dword [0x48e424]
lea eax, [esi*4]
jmp 0x432374
call edi
mov ecx, dword [0x48e424]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4323aa
cmp word [ecx], 1
jne 0x4323aa
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43239f
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4323b2
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x88]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
jne 0x43254d
push ecx
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x8c]
test ecx, ecx
je 0x432408
cmp word [ecx], 1
jne 0x432408
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4323fd
call edi
mov ecx, dword [ebp - 0x8c]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432410
call edi
mov ecx, dword [ebp - 0x8c]
mov esi, dword [ecx + 0xc]
add esi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x432449
cmp word [ecx], 1
jne 0x432449
mov edi, dword [ebp + 8]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x43243e
call ebx
mov ecx, dword [0x48e3ec]
lea edi, [edi + edi*4]
lea eax, [edi + edi*8]
shl eax, 2
jmp 0x432457
call edi
mov ecx, dword [0x48e3ec]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ecx + 0xc]
fld dword [0x48e428]
fmul dword [ecx + eax + 0x88]
fadd dword [esi + 0x3c]
fstp dword [esi + 0x3c]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4324a5
cmp word [ecx], 1
jne 0x4324a5
mov edi, dword [ebp + 8]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x43249a
call ebx
mov ecx, dword [0x48e3ec]
lea edi, [edi + edi*4]
lea eax, [edi + edi*8]
shl eax, 2
jmp 0x4324ad
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x88]
fcomp dword [0x401a40]
fnstsw ax
test ah, 1
fld dword [esi + 0x3c]
fcomp dword [esi + 0x90]
fnstsw ax
je 0x4324df
test ah, 0x41
je 0x432531
mov eax, dword [esi + 0x90]
mov dword [esi + 0x3c], eax
jmp 0x4324ed
test ah, 1
jne 0x432531
mov edx, dword [esi + 0x90]
mov dword [esi + 0x3c], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43251b
cmp word [ecx], 1
jne 0x43251b
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432510
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432523
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x88], 0
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [0x48e3ec]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [ebp + 8]
test ecx, ecx
je 0x432574
cmp word [ecx], 1
jne 0x432574
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432569
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43257c
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x8c]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
jne 0x432755
push ecx
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x90]
test ecx, ecx
je 0x4325d7
cmp word [ecx], 1
jne 0x4325d7
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4325cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x90]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4325e3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x90]
mov esi, dword [ecx + 0xc]
add esi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43261c
cmp word [ecx], 1
jne 0x43261c
mov edi, dword [ebp + 8]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x432611
call ebx
mov ecx, dword [0x48e3ec]
lea edi, [edi + edi*4]
lea eax, [edi + edi*8]
shl eax, 2
jmp 0x43262e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ecx + 0xc]
fld dword [0x48e428]
fmul dword [ecx + eax + 0x8c]
fadd dword [esi + 0x40]
fstp dword [esi + 0x40]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43267c
cmp word [ecx], 1
jne 0x43267c
mov edi, dword [ebp + 8]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x432671
call ebx
mov ecx, dword [0x48e3ec]
lea edi, [edi + edi*4]
lea eax, [edi + edi*8]
shl eax, 2
jmp 0x432684
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x8c]
fcomp dword [0x401a40]
fnstsw ax
test ah, 1
fld dword [esi + 0x40]
fcomp dword [esi + 0x94]
fnstsw ax
je 0x4326b6
test ah, 0x41
je 0x432708
mov eax, dword [esi + 0x94]
mov dword [esi + 0x40], eax
jmp 0x4326c4
test ah, 1
jne 0x432708
mov edx, dword [esi + 0x94]
mov dword [esi + 0x40], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4326f2
cmp word [ecx], 1
jne 0x4326f2
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4326e7
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4326fa
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x8c], 0
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
jmp 0x43274f
test ecx, ecx
je 0x43273d
cmp word [ecx], 1
jne 0x43273d
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432734
call edi
mov ecx, dword [0x48e424]
lea eax, [esi*4]
jmp 0x432745
call edi
mov ecx, dword [0x48e424]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax], 0
mov ecx, dword [0x48e3ec]
push 0
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x434db7
push eax
push 1
push 3
push 0x48e418
push 4
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov ecx, dword [0x48e418]
test ecx, ecx
je 0x4327b7
cmp word [ecx], 1
jne 0x4327b7
mov ebx, dword [ebp + 8]
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x4327ae
call edi
mov ecx, dword [0x48e418]
lea eax, [esi*4]
jmp 0x4327c8
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call edi
mov ecx, dword [0x48e418]
mov ebx, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
cmp dword [edx + eax], 0
jne 0x43281b
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e418]
test ecx, ecx
je 0x43280a
cmp word [ecx], 1
jne 0x43280a
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432801
call edi
mov ecx, dword [0x48e418]
lea eax, [esi*4]
jmp 0x432812
call edi
mov ecx, dword [0x48e418]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [0x48e418]
test eax, eax
je 0x43284d
cmp word [eax], 1
jne 0x43284d
mov esi, ebx
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432844
call edi
lea ebx, [esi*4]
jmp 0x432851
call edi
mov ebx, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43287f
cmp word [ecx], 1
jne 0x43287f
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432874
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432887
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e418]
mov edx, dword [edx + 0xc]
mov esi, dword [ebp - 0x64]
sub esi, dword [edx + ebx]
jo 0x434db7
mov dword [ebp - 0xd4], esi
fild dword [ebp - 0xd4]
fstp qword [ebp - 0xdc]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR8]
fcomp qword [ebp - 0xdc]
fnstsw ax
test ah, 0x41
jne 0x4328cf
mov ebx, 1
jmp 0x4328d1
xor ebx, ebx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4328ff
cmp word [ecx], 1
jne 0x4328ff
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4328f4
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432907
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x18]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x41
je 0x432922
mov eax, 1
jmp 0x432924
xor eax, eax
or ebx, eax
jne 0x432a42
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e418]
test ecx, ecx
je 0x432966
cmp word [ecx], 1
jne 0x432966
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43295d
call edi
mov ecx, dword [0x48e418]
lea eax, [esi*4]
jmp 0x43296e
call edi
mov ecx, dword [0x48e418]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov eax, dword [0x48e3ec]
test eax, eax
je 0x4329a3
cmp word [eax], 1
jne 0x4329a3
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432998
call edi
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea ebx, [esi + esi*8]
shl ebx, 2
jmp 0x4329ac
call edi
mov ebx, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x4329d3
cmp word [eax], 1
jne 0x4329d3
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x4329c8
call edi
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x4329e0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x432a0b
cmp word [eax], 1
jne 0x432a0b
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432a00
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
jmp 0x432a18
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
fld dword [edi + ecx + 0x20]
fadd dword [ebx + ecx + 0x1c]
fstp dword [edx + ecx + 0x1c]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x432ad7
test ecx, ecx
je 0x432a6a
cmp word [ecx], 1
jne 0x432a6a
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432a5f
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432a72
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x18]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x432ad7
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e418]
test ecx, ecx
je 0x432ac0
cmp word [ecx], 1
jne 0x432ac0
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432ab7
call edi
mov ecx, dword [0x48e418]
lea eax, [esi*4]
jmp 0x432ac8
call edi
mov ecx, dword [0x48e418]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov ecx, dword [0x48e3ec]
push 0
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x434db7
push eax
push 1
push 3
push 0x48e41c
push 4
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov ecx, dword [0x48e41c]
test ecx, ecx
je 0x432b33
cmp word [ecx], 1
jne 0x432b33
mov ebx, dword [ebp + 8]
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432b2a
call edi
mov ecx, dword [0x48e41c]
lea eax, [esi*4]
jmp 0x432b3e
call edi
mov ecx, dword [0x48e41c]
mov ebx, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
cmp dword [ecx + eax], 0
jne 0x432b91
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e41c]
test ecx, ecx
je 0x432b80
cmp word [ecx], 1
jne 0x432b80
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432b77
call edi
mov ecx, dword [0x48e41c]
lea eax, [esi*4]
jmp 0x432b88
call edi
mov ecx, dword [0x48e41c]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x64]
mov dword [edx + eax], ecx
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [0x48e41c]
test eax, eax
je 0x432bc3
cmp word [eax], 1
jne 0x432bc3
mov esi, ebx
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432bba
call edi
lea ebx, [esi*4]
jmp 0x432bc7
call edi
mov ebx, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x432bf5
cmp word [ecx], 1
jne 0x432bf5
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432bea
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432bfd
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e41c]
mov edx, dword [edx + 0xc]
mov esi, dword [ebp - 0x64]
sub esi, dword [edx + ebx]
jo 0x434db7
mov dword [ebp - 0xe0], esi
fild dword [ebp - 0xe0]
fstp qword [ebp - 0xe8]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR8]
fcomp qword [ebp - 0xe8]
fnstsw ax
test ah, 0x41
jne 0x432c45
mov ebx, 1
jmp 0x432c47
xor ebx, ebx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x432c75
cmp word [ecx], 1
jne 0x432c75
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432c6a
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432c7d
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x64]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x41
je 0x432c98
mov eax, 1
jmp 0x432c9a
xor eax, eax
or ebx, eax
jne 0x432eeb
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e41c]
test ecx, ecx
je 0x432cdc
cmp word [ecx], 1
jne 0x432cdc
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432cd3
call edi
mov ecx, dword [0x48e41c]
lea eax, [esi*4]
jmp 0x432ce4
call edi
mov ecx, dword [0x48e41c]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov eax, dword [0x48e3ec]
test eax, eax
je 0x432d19
cmp word [eax], 1
jne 0x432d19
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432d0e
call edi
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea ebx, [esi + esi*8]
shl ebx, 2
jmp 0x432d26
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x432d51
cmp word [eax], 1
jne 0x432d51
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432d46
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x432d5e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x432d89
cmp word [eax], 1
jne 0x432d89
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x432d7e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
jmp 0x432d96
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
fld dword [ebx + ecx + 0x2c]
fsub dword [ecx + edi + 0x60]
fstp dword [edx + ecx + 0x2c]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x432de5
cmp word [ecx], 1
jne 0x432de5
mov ebx, dword [ebp + 8]
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x432dda
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432dfa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov ebx, dword [ebp + 8]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x2c]
fcomp dword [0x401a40]
fnstsw ax
test ah, 1
je 0x432e4e
test ecx, ecx
je 0x432e35
cmp word [ecx], 1
jne 0x432e35
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432e2a
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432e3d
call edi
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x2c], 0
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x432e75
cmp word [ecx], 1
jne 0x432e75
mov esi, ebx
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432e6a
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432e7d
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x2c]
fcomp dword [0x401a30]
fnstsw ax
test ah, 0x41
jne 0x432f80
test ecx, ecx
je 0x432ecf
cmp word [ecx], 1
jne 0x432ecf
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432eb6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x2c], 0x437f0000
jmp 0x432f7a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x2c], 0x437f0000
jmp 0x432f7a
test ecx, ecx
je 0x432f13
cmp word [ecx], 1
jne 0x432f13
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432f08
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432f1b
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x64]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x432f80
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e41c]
test ecx, ecx
je 0x432f69
cmp word [ecx], 1
jne 0x432f69
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x432f60
call edi
mov ecx, dword [0x48e41c]
lea eax, [esi*4]
jmp 0x432f71
call edi
mov ecx, dword [0x48e41c]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov ecx, dword [0x48e3ec]
push 0
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x434db7
push eax
push 1
push 3
push 0x48e420
push 4
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x432fe2
cmp word [ecx], 1
jne 0x432fe2
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x432fd7
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x432ff0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x80]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x43300e
mov edi, 1
jmp 0x433010
xor edi, edi
test ecx, ecx
je 0x433038
cmp word [ecx], 1
jne 0x433038
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43302d
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433040
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x84]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
je 0x43305e
mov eax, 1
jmp 0x433060
xor eax, eax
test eax, edi
jne 0x43367e
test ecx, ecx
je 0x433090
cmp word [ecx], 1
jne 0x433090
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433085
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433098
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov word [ecx + eax + 0x74], 0xffff
mov ecx, dword [0x48e420]
test ecx, ecx
je 0x4330ce
cmp word [ecx], 1
jne 0x4330ce
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4330c5
call ebx
mov ecx, dword [0x48e420]
lea eax, [esi*4]
jmp 0x4330d6
call ebx
mov ecx, dword [0x48e420]
mov edx, dword [ecx + 0xc]
cmp dword [edx + eax], 0
je 0x433185
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e420]
test ecx, ecx
je 0x43311f
cmp word [ecx], 1
jne 0x43311f
mov edi, dword [ebp + 8]
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433116
call ebx
mov ecx, dword [0x48e420]
lea eax, [esi*4]
jmp 0x43312a
call ebx
mov ecx, dword [0x48e420]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
sub edx, dword [ecx + eax]
jo 0x434db7
mov dword [ebp - 0xec], edx
fild dword [ebp - 0xec]
fstp qword [ebp - 0xf4]
fld qword [ebp - 0xf4]
cmp dword [section..data], 0
jne 0x433162
fdiv qword [0x401a38]
jmp 0x433173
push dword [0x401a3c]
push dword [0x401a38]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fstp dword [0x48e428]
fnstsw ax
test al, 0xd
jne 0x434db2
jmp 0x433192
mov dword [0x48e428], 0x3f800000
mov edi, dword [ebp + 8]
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e420]
test ecx, ecx
je 0x4331cb
cmp word [ecx], 1
jne 0x4331cb
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4331c2
call ebx
mov ecx, dword [0x48e420]
lea eax, [esi*4]
jmp 0x4331d3
call ebx
mov ecx, dword [0x48e420]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433209
cmp word [ecx], 1
jne 0x433209
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4331fe
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433211
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x80]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
jne 0x433433
push ecx
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x94]
test ecx, ecx
je 0x433267
cmp word [ecx], 1
jne 0x433267
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43325c
call ebx
mov ecx, dword [ebp - 0x94]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43326f
call ebx
mov ecx, dword [ebp - 0x94]
mov edi, dword [ecx + 0xc]
add edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4332a2
cmp word [ecx], 1
jne 0x4332a2
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433297
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4332aa
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [0x48e428]
fmul dword [ecx + eax + 0x80]
fadd dword [edi + 4]
fstp dword [edi + 4]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4332f8
cmp word [ecx], 1
jne 0x4332f8
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4332ed
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433300
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x80]
fcomp dword [0x401a40]
fnstsw ax
test ah, 1
je 0x43335e
test ecx, ecx
je 0x43333f
cmp word [ecx], 1
jne 0x43333f
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433334
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433347
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edi + 4]
fcomp dword [edx + eax + 0x78]
fnstsw ax
test ah, 0x41
je 0x43341d
jmp 0x43339f
test ecx, ecx
je 0x433386
cmp word [ecx], 1
jne 0x433386
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43337b
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43338e
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edi + 4]
fcomp dword [edx + eax + 0x78]
fnstsw ax
test ah, 1
jne 0x43341d
test ecx, ecx
je 0x4333c7
cmp word [ecx], 1
jne 0x4333c7
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4333bc
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4333cf
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x78]
mov dword [edi + 4], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433407
cmp word [ecx], 1
jne 0x433407
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4333fc
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43340f
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x80], 0
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [0x48e3ec]
mov edi, dword [ebp + 8]
test ecx, ecx
je 0x43345a
cmp word [ecx], 1
jne 0x43345a
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43344f
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433462
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x84]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x40
jne 0x433702
push ecx
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x98]
test ecx, ecx
je 0x4334b9
cmp word [ecx], 1
jne 0x4334b9
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4334ae
call ebx
mov ecx, dword [ebp - 0x98]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4334c1
call ebx
mov ecx, dword [ebp - 0x98]
mov edi, dword [ecx + 0xc]
add edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4334f4
cmp word [ecx], 1
jne 0x4334f4
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4334e9
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4334fc
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [0x48e428]
fmul dword [ecx + eax + 0x84]
fadd dword [edi + 8]
fstp dword [edi + 8]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43354a
cmp word [ecx], 1
jne 0x43354a
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43353f
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433552
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x84]
fcomp dword [0x401a40]
fnstsw ax
test ah, 1
je 0x4335b0
test ecx, ecx
je 0x433591
cmp word [ecx], 1
jne 0x433591
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433586
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433599
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edi + 8]
fcomp dword [edx + eax + 0x7c]
fnstsw ax
test ah, 0x41
je 0x43366f
jmp 0x4335f1
test ecx, ecx
je 0x4335d8
cmp word [ecx], 1
jne 0x4335d8
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4335cd
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4335e0
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edi + 8]
fcomp dword [edx + eax + 0x7c]
fnstsw ax
test ah, 1
jne 0x43366f
test ecx, ecx
je 0x433619
cmp word [ecx], 1
jne 0x433619
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43360e
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433621
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x7c]
mov dword [edi + 8], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433659
cmp word [ecx], 1
jne 0x433659
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43364e
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433661
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x84], 0
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
jmp 0x4336fc
mov ecx, dword [0x48e420]
test ecx, ecx
je 0x4336aa
cmp word [ecx], 1
jne 0x4336aa
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4336a1
call ebx
mov ecx, dword [0x48e420]
lea eax, [esi*4]
jmp 0x4336b2
call ebx
mov ecx, dword [0x48e420]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax], 0
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4336ea
cmp word [ecx], 1
jne 0x4336ea
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4336df
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4336f2
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov word [edx + eax + 0x74], 0
mov ecx, dword [0x48e3ec]
push 0
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x434db7
push eax
push 1
push 3
push 0x48e414
push 4
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43375e
cmp word [ecx], 1
jne 0x43375e
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433753
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433766
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x5c], 0
je 0x433f14
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [0x48e414]
test eax, eax
je 0x4337ae
cmp word [eax], 1
jne 0x4337ae
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x4337a5
call edi
lea ebx, [esi*4]
jmp 0x4337b8
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call edi
mov ebx, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4337e6
cmp word [ecx], 1
jne 0x4337e6
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4337db
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4337ee
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e414]
mov edx, dword [edx + 0xc]
mov esi, dword [ebp - 0x64]
sub esi, dword [edx + ebx]
jo 0x434db7
mov dword [ebp - 0xf8], esi
fild dword [ebp - 0xf8]
fstp qword [ebp - 0x100]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR8]
fcomp qword [ebp - 0x100]
fnstsw ax
test ah, 0x41
jne 0x433836
mov ebx, 1
jmp 0x433838
xor ebx, ebx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433866
cmp word [ecx], 1
jne 0x433866
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43385b
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43386e
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x68]
fcomp dword [0x401a40]
fnstsw ax
test ah, 0x41
je 0x433889
mov eax, 1
jmp 0x43388b
xor eax, eax
or ebx, eax
jne 0x433f14
test ecx, ecx
je 0x4338bf
cmp word [ecx], 1
jne 0x4338bf
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4338b4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4338cb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x5c], 0
je 0x433f14
call fcn.00410294
mov dword [ebp - 0x64], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [0x48e414]
test ecx, ecx
je 0x43391c
cmp word [ecx], 1
jne 0x43391c
mov edi, dword [ebp + 8]
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x433913
call ebx
mov ecx, dword [0x48e414]
lea eax, [esi*4]
jmp 0x43392d
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call ebx
mov ecx, dword [0x48e414]
mov edi, dword [ebp + 8]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x64]
mov dword [ecx + eax], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433963
cmp word [ecx], 1
jne 0x433963
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433958
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43396b
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x6c], 0
je 0x4339fc
test ecx, ecx
je 0x4339a1
cmp word [ecx], 1
jne 0x4339a1
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433996
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x4339ab
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4339e3
cmp word [ecx], 1
jne 0x4339e3
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4339c8
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
mov ecx, dword [ecx + 0xc]
fld dword [ecx + edi + 0x58]
fsub dword [0x401a2c]
jmp 0x433a6c
call ebx
mov edx, eax
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + edi + 0x58]
fsub dword [0x401a2c]
jmp 0x433a6c
test ecx, ecx
je 0x433a23
cmp word [ecx], 1
jne 0x433a23
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433a18
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x433a2d
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433a55
cmp word [ecx], 1
jne 0x433a55
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433a4a
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
jmp 0x433a5f
call ebx
mov edx, eax
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + edi + 0x58]
fadd dword [0x401a2c]
fstp dword [ecx + edx + 0x58]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433aa8
cmp word [ecx], 1
jne 0x433aa8
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433a9d
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x433ab2
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433ada
cmp word [ecx], 1
jne 0x433ada
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433acf
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433ae2
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + edi + 0x58]
fcomp dword [edx + eax + 0x54]
fnstsw ax
test ah, 0x41
jne 0x433d0d
test ecx, ecx
je 0x433b26
cmp word [ecx], 1
jne 0x433b26
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x433b1b
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433b34
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x70], 0
je 0x433c9a
test ecx, ecx
je 0x433b6f
cmp word [ecx], 1
jne 0x433b6f
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433b64
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea ebx, [eax + eax*8]
shl ebx, 2
jmp 0x433b7d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433ba9
cmp word [ecx], 1
jne 0x433ba9
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433b9e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea edi, [eax + eax*8]
shl edi, 2
jmp 0x433bb7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433be3
cmp word [ecx], 1
jne 0x433be3
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433bd8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea edx, [eax + eax*8]
shl edx, 2
jmp 0x433bf1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, eax
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + ebx + 0x58]
fsub dword [ecx + edi + 0x54]
fstp dword [ecx + edx + 0x58]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433c3c
cmp word [ecx], 1
jne 0x433c3c
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433c31
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea edi, [eax + eax*8]
shl edi, 2
jmp 0x433c4a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433c76
cmp word [ecx], 1
jne 0x433c76
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433c6b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea eax, [eax + eax*8]
shl eax, 2
jmp 0x433c82
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edi + edx + 0x58]
fcomp dword [eax + edx + 0x54]
fnstsw ax
test ah, 0x41
je 0x433b43
jmp 0x433d0d
test ecx, ecx
je 0x433cc2
cmp word [ecx], 1
jne 0x433cc2
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433cb7
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x433ccc
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433cf4
cmp word [ecx], 1
jne 0x433cf4
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433ce9
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433cfc
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov edx, dword [edi + ecx + 0x54]
mov dword [eax + ecx + 0x58], edx
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433d39
cmp word [ecx], 1
jne 0x433d39
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433d2e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433d45
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x58]
fcomp dword [0x401a2c]
fnstsw ax
test ah, 1
je 0x433f14
test ecx, ecx
je 0x433d8b
cmp word [ecx], 1
jne 0x433d8b
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x433d80
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433d99
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call edi
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x70], 0
je 0x433ed3
test ecx, ecx
je 0x433dd4
cmp word [ecx], 1
jne 0x433dd4
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433dc9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea ebx, [eax + eax*8]
shl ebx, 2
jmp 0x433de2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433e0e
cmp word [ecx], 1
jne 0x433e0e
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433e03
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea edi, [eax + eax*8]
shl edi, 2
jmp 0x433e1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433e48
cmp word [ecx], 1
jne 0x433e48
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433e3d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea edx, [eax + eax*8]
shl edx, 2
jmp 0x433e56
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, eax
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ebx + ecx + 0x58]
fsub dword [0x401a2c]
fadd dword [edi + ecx + 0x54]
fadd dword [0x401a2c]
fstp dword [edx + ecx + 0x58]
fnstsw ax
test al, 0xd
jne 0x434db2
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433ead
cmp word [ecx], 1
jne 0x433ead
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433ea2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea eax, [eax + eax*8]
shl eax, 2
jmp 0x433eb9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x58]
fcomp dword [0x401a2c]
fnstsw ax
test ah, 1
jne 0x433da8
jmp 0x433f14
test ecx, ecx
je 0x433efb
cmp word [ecx], 1
jne 0x433efb
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433ef0
call edi
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433f03
call edi
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov dword [ecx + eax + 0x58], 0x3f800000
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x433f44
cmp word [ecx], 1
jne 0x433f44
mov edi, dword [ebp + 8]
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x433f39
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433f55
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call ebx
mov ecx, dword [0x48e3ec]
mov edi, dword [ebp + 8]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 4]
fild dword [0x48e0d4]
fstp qword [ebp - 0x108]
fadd qword [ebp - 0x108]
fstp dword [ebp - 0x34]
fnstsw ax
test al, 0xd
jne 0x434db2
test ecx, ecx
je 0x433fa2
cmp word [ecx], 1
jne 0x433fa2
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433f97
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433faa
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 8]
fild dword [0x48e0d8]
fstp qword [ebp - 0x110]
fadd qword [ebp - 0x110]
fstp dword [ebp - 0x30]
fnstsw ax
test al, 0xd
jne 0x434db2
test ecx, ecx
je 0x433ff7
cmp word [ecx], 1
jne 0x433ff7
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x433fec
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x433fff
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x3c]
mov dword [ebp - 0x3c], eax
test ecx, ecx
je 0x434030
cmp word [ecx], 1
jne 0x434030
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434025
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x434038
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x40]
mov dword [ebp - 0x38], eax
test ecx, ecx
je 0x434069
cmp word [ecx], 1
jne 0x434069
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43405e
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x434071
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x5c], 0
jne 0x43444d
test ecx, ecx
je 0x4340a7
cmp word [ecx], 1
jne 0x4340a7
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43409c
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4340af
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [ebp - 0x3c]
fmul dword [edx + eax + 0x98]
fstp dword [ebp - 0x2c]
fnstsw ax
test al, 0xd
jne 0x434db2
test ecx, ecx
je 0x4340f0
cmp word [ecx], 1
jne 0x4340f0
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4340e5
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4340f8
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [ebp - 0x38]
fmul dword [edx + eax + 0x9c]
fstp dword [ebp - 0x28]
fnstsw ax
test al, 0xd
jne 0x434db2
test ecx, ecx
je 0x434139
cmp word [ecx], 1
jne 0x434139
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43412e
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x434141
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0xa0]
push edx
lea eax, [ebp - 0x4c]
push eax
push 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434185
cmp word [ecx], 1
jne 0x434185
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43417a
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43418d
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x24], 0
je 0x434d49
test ecx, ecx
je 0x4341c3
cmp word [ecx], 1
jne 0x4341c3
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4341b8
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4341cb
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov ax, word [edx + eax + 0xb0]
cmp ax, word [0x48e478]
jne 0x434d49
test ecx, ecx
je 0x434210
cmp word [ecx], 1
jne 0x434210
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4341ff
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea esi, [esi + esi*8]
shl esi, 2
mov dword [ebp - 0x114], esi
jmp 0x43421e
call ebx
mov dword [ebp - 0x114], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x43424b
cmp word [ecx], 1
jne 0x43424b
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43423a
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x118], eax
jmp 0x434259
call ebx
mov dword [ebp - 0x118], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434286
cmp word [ecx], 1
jne 0x434286
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434275
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x11c], eax
jmp 0x434294
call ebx
mov dword [ebp - 0x11c], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4342c1
cmp word [ecx], 1
jne 0x4342c1
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4342b0
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x120], eax
jmp 0x4342cf
call ebx
mov dword [ebp - 0x120], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4342fc
cmp word [ecx], 1
jne 0x4342fc
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4342eb
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x124], eax
jmp 0x43430a
call ebx
mov dword [ebp - 0x124], eax
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e3e4]
test edx, edx
je 0x434373
cmp word [edx], 1
jne 0x434373
test ecx, ecx
je 0x434347
cmp word [ecx], 1
jne 0x434347
sub edi, dword [ecx + 0x14]
mov esi, edi
cmp esi, dword [ecx + 0x10]
jb 0x43433c
call ebx
mov edx, dword [0x48e3e4]
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea eax, [eax + eax*8]
shl eax, 2
jmp 0x434355
call ebx
mov edx, dword [0x48e3e4]
mov ecx, dword [0x48e3ec]
mov esi, dword [ecx + 0xc]
mov esi, dword [esi + eax + 0x28]
sub esi, dword [edx + 0x14]
cmp esi, dword [edx + 0x10]
jb 0x43436c
call ebx
mov ecx, dword [0x48e3ec]
shl esi, 4
mov edi, esi
jmp 0x43437d
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e2c0]
mov ebx, dword [edx]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x114]
fld dword [eax + ecx + 0x2c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
call esi
push eax
mov edx, dword [0x48e3ec]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x118]
fld dword [eax + ecx + 0x38]
call esi
push eax
mov edx, dword [0x48e3ec]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x11c]
fld dword [eax + ecx + 0x34]
call esi
push eax
mov edx, dword [0x48e3ec]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x120]
fld dword [eax + ecx + 0x30]
call esi
push eax
call dword [sym.imp.dx8vb.dll_Ordinal_130]
push eax
lea edx, [ebp - 0x34]
push edx
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x124]
mov eax, dword [ecx + edx + 0x1c]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0x4c]
push eax
mov ecx, dword [0x48e3e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + edi]
push eax
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov edx, dword [0x48e2c0]
push edx
call dword [ebx + 0x14]
fnclex
test eax, eax
jge 0x434d40
push 0x14
push 0x413028
mov ecx, dword [0x48e2c0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x434d40
test ecx, ecx
je 0x434474
cmp word [ecx], 1
jne 0x434474
mov esi, edi
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434469
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x43447e
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4344a6
cmp word [ecx], 1
jne 0x4344a6
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43449b
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4344ae
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + edi + 0x58]
fsub dword [0x401a2c]
cmp dword [section..data], 0
jne 0x4344ca
fdiv dword [ecx + eax + 0x48]
jmp 0x4344d3
push dword [ecx + eax + 0x48]
call sub.MSVBVM60.DLL__adj_fdiv_m32
fnstsw ax
test al, 0xd
jne 0x434db2
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [0x401a2c]
fnstsw ax
test ah, 1
jne 0x434596
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434522
cmp word [ecx], 1
jne 0x434522
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434517
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x43452c
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434554
cmp word [ecx], 1
jne 0x434554
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434549
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43455c
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + edi + 0x58]
fsub dword [0x401a2c]
cmp dword [section..data], 0
jne 0x434578
fdiv dword [ecx + eax + 0x48]
jmp 0x434581
push dword [ecx + eax + 0x48]
call sub.MSVBVM60.DLL__adj_fdiv_m32
fnstsw ax
test al, 0xd
jne 0x434db2
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov dword [ebp - 0x20], eax
jmp 0x43459d
mov dword [ebp - 0x20], 0
mov eax, dword [0x48e3ec]
test eax, eax
je 0x4345c9
cmp word [eax], 1
jne 0x4345c9
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x4345be
call ebx
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edi, [esi + esi*8]
shl edi, 2
jmp 0x4345d2
call ebx
mov edi, eax
mov eax, dword [0x48e3ec]
test eax, eax
je 0x4345f9
cmp word [eax], 1
jne 0x4345f9
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x4345ee
call ebx
mov eax, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea edx, [esi + esi*8]
shl edx, 2
jmp 0x434602
call ebx
mov edx, eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
fld dword [ecx + edi + 0x58]
fsub dword [0x401a2c]
fnstsw ax
test al, 0xd
jne 0x434db2
fld dword [ecx + edx + 0x48]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x12c]
fmul qword [ebp - 0x12c]
fsubp st(1)
fnstsw ax
test al, 0xd
jne 0x434db2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
call edi
mov dword [ebp - 0x54], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434671
cmp word [ecx], 1
jne 0x434671
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434666
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x434679
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x4c]
fild dword [ebp - 0x54]
fstp qword [ebp - 0x134]
fmul qword [ebp - 0x134]
fnstsw ax
test al, 0xd
jne 0x434db2
call edi
mov dword [ebp - 0x4c], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4346cc
cmp word [ecx], 1
jne 0x4346cc
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4346c1
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4346d4
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x4c]
fild dword [ebp - 0x4c]
fstp qword [ebp - 0x13c]
fadd qword [ebp - 0x13c]
fnstsw ax
test al, 0xd
jne 0x434db2
call edi
mov dword [ebp - 0x44], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434727
cmp word [ecx], 1
jne 0x434727
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43471c
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43472f
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x50]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x144]
fmul qword [ebp - 0x144]
fnstsw ax
test al, 0xd
jne 0x434db2
call edi
mov dword [ebp - 0x48], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434782
cmp word [ecx], 1
jne 0x434782
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434777
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43478a
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
fld dword [ecx + eax + 0x50]
fild dword [ebp - 0x48]
fstp qword [ebp - 0x14c]
fadd qword [ebp - 0x14c]
fnstsw ax
test al, 0xd
jne 0x434db2
call edi
mov dword [ebp - 0x40], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x4347dd
cmp word [ecx], 1
jne 0x4347dd
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4347d2
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4347e5
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x3c]
fcomp dword [0x401a2c]
fnstsw ax
test ah, 0x40
jne 0x434800
mov edi, 1
jmp 0x434802
xor edi, edi
test ecx, ecx
je 0x43482a
cmp word [ecx], 1
jne 0x43482a
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43481f
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x434832
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
fld dword [edx + eax + 0x40]
fcomp dword [0x401a2c]
fnstsw ax
test ah, 0x40
jne 0x43484d
mov eax, 1
jmp 0x43484f
xor eax, eax
neg eax
neg edi
or eax, edi
cmp ax, 0xffff
jne 0x43496f
test ecx, ecx
je 0x434887
cmp word [ecx], 1
jne 0x434887
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43487c
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43488f
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x3c]
mov dword [ebp - 0x3c], eax
test ecx, ecx
je 0x4348c1
cmp word [ecx], 1
jne 0x4348c1
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4348b6
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4348c9
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x40]
mov dword [ebp - 0x38], eax
mov eax, dword [0x48e3e4]
test eax, eax
je 0x4348fc
cmp word [eax], 1
jne 0x4348fc
mov esi, dword [ebp + 8]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x4348f5
call ebx
mov ecx, dword [0x48e3ec]
shl esi, 4
mov eax, esi
jmp 0x434904
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e3e4]
mov esi, dword [edx + 0xc]
fld dword [ebp - 0x3c]
fmul dword [esi + eax + 4]
fstp dword [ebp - 0x2c]
fnstsw ax
test al, 0xd
jne 0x434db2
test edx, edx
je 0x434945
cmp word [edx], 1
jne 0x434945
mov esi, dword [ebp + 8]
sub esi, dword [edx + 0x14]
cmp esi, dword [edx + 0x10]
jb 0x43493e
call ebx
mov ecx, dword [0x48e3ec]
shl esi, 4
mov eax, esi
jmp 0x43494d
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [0x48e3e4]
mov edx, dword [edx + 0xc]
fld dword [ebp - 0x38]
fmul dword [edx + eax + 8]
fstp dword [ebp - 0x28]
fnstsw ax
test al, 0xd
jne 0x434db2
jmp 0x434a2f
test ecx, ecx
je 0x434997
cmp word [ecx], 1
jne 0x434997
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x43498c
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x43499f
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x3c]
mov dword [ebp - 0x3c], eax
test ecx, ecx
je 0x4349d1
cmp word [ecx], 1
jne 0x4349d1
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4349c6
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x4349d9
call ebx
mov ecx, dword [0x48e3ec]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x40]
mov dword [ebp - 0x38], edx
mov ecx, dword [0x48e3e4]
test ecx, ecx
je 0x434a0d
cmp word [ecx], 1
jne 0x434a0d
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434a06
call ebx
mov ecx, dword [0x48e3e4]
shl esi, 4
mov eax, esi
jmp 0x434a15
call ebx
mov ecx, dword [0x48e3e4]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
lea eax, [ebp - 0x2c]
push eax
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434a57
cmp word [ecx], 1
jne 0x434a57
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434a4c
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
jmp 0x434a5f
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x24], 0
je 0x434d49
test ecx, ecx
je 0x434a9c
cmp word [ecx], 1
jne 0x434a9c
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434a8b
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea esi, [esi + esi*8]
shl esi, 2
mov dword [ebp - 0x150], esi
jmp 0x434aaa
call ebx
mov dword [ebp - 0x150], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434ad8
cmp word [ecx], 1
jne 0x434ad8
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434ac7
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x154], eax
jmp 0x434ae6
call ebx
mov dword [ebp - 0x154], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434b14
cmp word [ecx], 1
jne 0x434b14
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434b03
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x158], eax
jmp 0x434b22
call ebx
mov dword [ebp - 0x158], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434b50
cmp word [ecx], 1
jne 0x434b50
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434b3f
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x15c], eax
jmp 0x434b5e
call ebx
mov dword [ebp - 0x15c], eax
mov ecx, dword [0x48e3ec]
test ecx, ecx
je 0x434b8c
cmp word [ecx], 1
jne 0x434b8c
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434b7b
call ebx
mov ecx, dword [0x48e3ec]
lea esi, [esi + esi*4]
lea eax, [esi + esi*8]
shl eax, 2
mov dword [ebp - 0x160], eax
jmp 0x434b9a
call ebx
mov dword [ebp - 0x160], eax
mov ecx, dword [0x48e3ec]
mov eax, dword [0x48e3e4]
test eax, eax
je 0x434bfc
cmp word [eax], 1
jne 0x434bfc
test ecx, ecx
je 0x434bd1
cmp word [ecx], 1
jne 0x434bd1
mov esi, dword [ebp + 8]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x434bc6
call ebx
mov ecx, dword [0x48e3ec]
lea eax, [esi + esi*4]
lea eax, [eax + eax*8]
shl eax, 2
jmp 0x434bd9
call ebx
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov esi, dword [edx + eax + 0x28]
mov eax, dword [0x48e3e4]
sub esi, dword [eax + 0x14]
cmp esi, dword [eax + 0x10]
jb 0x434bf5
call ebx
mov ecx, dword [0x48e3ec]
shl esi, 4
mov edi, esi
jmp 0x434c06
call ebx
mov edi, eax
mov ecx, dword [0x48e3ec]
mov eax, dword [0x48e2c0]
mov ebx, dword [eax]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ebp - 0x150]
fld dword [ecx + edx + 0x2c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
call esi
push eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x154]
fld dword [ecx + edx + 0x38]
call esi
push eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x158]
fld dword [ecx + edx + 0x34]
call esi
push eax
mov eax, dword [0x48e3ec]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x15c]
fld dword [ecx + edx + 0x30]
call esi
push eax
call dword [sym.imp.dx8vb.dll_Ordinal_130]
push eax
lea eax, [ebp - 0x34]
push eax
mov ecx, dword [0x48e3ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x160]
mov ecx, dword [edx + eax + 0x1c]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x4c]
push ecx
mov edx, dword [0x48e3e4]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + edi]
push ecx
lea edx, [ebp - 0x60]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov eax, dword [0x48e2c0]
push eax
call dword [ebx + 0x14]
fnclex
test eax, eax
jge 0x434d40
push 0x14
push 0x413028
mov ecx, dword [0x48e2c0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x434d40
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x434d9f
jmp 0x434d74
lea eax, [ebp - 0x8c]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call esi
lea ecx, [ebp - 0x90]
push ecx
call esi
lea edx, [ebp - 0x94]
push edx
call esi
lea eax, [ebp - 0x98]
push eax
call esi
ret
jmp fcn.004066fc
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop