Function at 0x501440
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405426
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4046a8
mov ax, word [0x5456e6]
xor ebx, ebx
cmp word [0x5456e4], ax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
jne 0x505160
cmp ax, 0x7fbc
jne 0x5014be
push ebx
call fcn.0042f980
push 0x5051b7
jmp 0x505192
cmp ax, 0x7fbd
jne 0x5014da
push ebx
call fcn.005270e0
push ebx
call fcn.0042f980
push 0x5051b7
jmp 0x505192
mov edi, dword [ebp + 8]
cmp di, 2
jne 0x5014e8
mov edi, 0xa
mov cx, word [0x546012]
cmp cx, 0x62
je 0x505024
cmp cx, 0x63
je 0x505024
cmp cx, 0xffff
je 0x504e01
cmp cx, 0x5b
je 0x504e01
cmp cx, bx
jne 0x5015f3
movsx ecx, ax
mov edx, ecx
sub edx, ebx
je 0x5015b8
sub edx, 0x3e6
je 0x501594
dec edx
je 0x501577
mov word [0x546014], ax
mov eax, dword [0x5456d4]
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, edx
mov edx, ecx
shl edx, 6
add edx, ecx
cmp word [eax + edx*4 + 2], bx
jge 0x504b44
push 0xffffffffffffffff
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
push 0x3e7
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
mov cx, word [0x546016]
mov word [0x5456e4], 0xfffe
not cx
mov word [0x546016], cx
push 0x5051b7
jmp 0x505192
push 3
call fcn.00500610
xor edx, edx
mov ecx, 0x546020
mov word [0x546028], bx
mov word [0x546018], bx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [0x544b38], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp cx, 1
je 0x504a36
cmp cx, 2
je 0x504a36
cmp cx, 3
je 0x5048b3
cmp cx, 4
je 0x5048b3
cmp cx, 0x3e7
je 0x5048b3
cmp cx, 5
jl 0x505157
cmp cx, 0xc
jg 0x505157
cmp ax, bx
jne 0x50165f
push 1
call fcn.00500610
mov dword [0x544b38], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 1
jne 0x501771
movsx ecx, word [0x546014]
mov eax, dword [0x5456d4]
mov edx, ecx
sub edx, dword [eax + 0x14]
mov esi, edx
shl esi, 6
add esi, edx
mov edx, dword [eax + 0xc]
mov edi, dword [edx + esi*4 + 0x100]
movsx edx, word [0x546018]
mov ebx, dword [edi + 0x14]
mov esi, edx
sub esi, ebx
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [edi + 0xc]
shl ebx, 4
lea esi, [ebx + esi + 0x20]
mov bl, byte [esi]
inc bl
mov byte [esi], bl
mov edi, dword [eax + 0x14]
mov esi, ecx
sub esi, edi
mov edi, esi
shl edi, 6
add edi, esi
mov esi, dword [eax + 0xc]
mov edi, dword [esi + edi*4 + 0x100]
mov esi, edx
sub esi, dword [edi + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [edi + 0xc]
shl ebx, 4
lea esi, [ebx + esi + 0x20]
cmp byte [esi], 3
jne 0x5016ea
mov byte [esi], 7
mov edi, dword [eax + 0x14]
mov esi, ecx
sub esi, edi
mov edi, esi
shl edi, 6
add edi, esi
mov esi, dword [eax + 0xc]
mov edi, dword [esi + edi*4 + 0x100]
mov esi, edx
sub esi, dword [edi + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [edi + 0xc]
shl ebx, 4
lea esi, [ebx + esi + 0x20]
cmp byte [esi], 8
jne 0x501722
mov byte [esi], 9
mov ebx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, ebx
mov esi, ecx
shl esi, 6
add esi, ecx
mov eax, dword [eax + esi*4 + 0x100]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
shl ecx, 4
lea eax, [ecx + edx + 0x20]
mov cl, byte [ecx + edx + 0x20]
cmp cl, 0xb
jne 0x505157
mov byte [eax], 0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 2
jne 0x50178f
call fcn.004fed00
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 3
jne 0x5017ad
call fcn.005004d0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 4
jne 0x5017cd
push 2
call fcn.004ff690
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 5
jne 0x501844
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 8
sub eax, edx
push ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x25]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x505123
cmp ax, 6
jne 0x5018bb
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 0x10
sub eax, edx
push ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x5e]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x505123
cmp ax, 7
jne 0x50195d
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 3
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x5f]
mov dword [ebp - 0x30], ecx
push ebx
lea edx, [ebp - 0x38]
push 1
push edx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 8
jne 0x50197d
push 1
call fcn.004ff690
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 9
jne 0x50199b
call fcn.004fe3a0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xa
jl 0x5019c4
cmp ax, 0x12
jg 0x5019c4
sub ax, 0xa
mov word [0x5456e4], 0xfffe
mov word [0x54601e], ax
push 0x5051b7
jmp 0x505192
cmp ax, 0x13
jne 0x5019e3
push ebx
call fcn.004ff690
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x14
jne 0x501a5b
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 0xf
sub eax, edx
push ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x60]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x505123
cmp ax, 0x15
jne 0x501a7b
push 4
call fcn.004ff690
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x16
jne 0x501b1d
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 3
sub eax, edx
push ebx
push 1
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x21]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x30], ecx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x17
jne 0x501b90
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 1
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x2b]
mov dword [ebp - 0x30], ecx
jmp 0x50192c
cmp ax, 0x18
jne 0x501baf
push ebx
call fcn.004ff790
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x19
jne 0x501bcf
push 1
call fcn.004ff790
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x1a
jne 0x501bee
push ebx
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
mov ebx, 0x1b
cmp ax, bx
jne 0x501c15
push 0x2af8
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x1c
jne 0x501c38
push 0xffffd508
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x1d
jne 0x501c5b
push 0x5209
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x1e
jne 0x501cbe
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
lea ecx, [edx + eax + 0x26]
jmp 0x501df4
cmp ax, 0x1f
jl 0x501cea
cmp ax, 0x27
jg 0x501cea
sub ax, 0x1e
movsx edx, ax
push edx
call fcn.004ffb50
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x28
jl 0x501d78
cmp ax, 0x30
jg 0x501d78
mov edx, dword [0x5456d4]
sub ax, 0x28
movsx ecx, word [0x546014]
mov esi, dword [edx + 0x14]
mov word [0x5456e4], 0xfffe
sub ecx, esi
push 0x5051b7
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + 0xc]
movsx eax, ax
mov edx, dword [ecx + esi*4 + 0x100]
movsx ecx, word [0x546018]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, ebx
lea esi, [ecx*8]
sub esi, ecx
shl esi, 4
mov ecx, dword [esi + edx + 0x6c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*2]
lea eax, [eax + edx*2]
neg cx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
mov word [eax], cx
jmp 0x505192
cmp ax, 0x31
jne 0x501d96
call fcn.004fff70
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x32
jne 0x501e09
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
lea ecx, [edx + eax + 0x28]
push 0xffffffffffffffff
push 3
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], 0x4011
push 0
jmp 0x50192d
cmp ax, 0x33
jl 0x501e35
cmp ax, 0x3b
jg 0x501e35
sub ax, 0x32
movsx edx, ax
push edx
call fcn.005000e0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x3c
jne 0x501ead
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov edx, dword [ecx + 0x14]
push 9
sub eax, edx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x2c]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x505123
cmp ax, 0x3d
jl 0x5020a3
cmp ax, 0x45
jg 0x5020a3
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x3c
push 0xffffffffffffffff
mov edx, dword [ecx + 0x14]
push 8
movsx eax, ax
sub eax, edx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4]
lea eax, [ebp - 0x38]
movsx edx, di
push edx
push eax
mov dword [ebp - 0x30], ecx
call fcn.00434fd0
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call edi
lea edx, [ebp - 0x18]
push edx
call edi
lea eax, [ebp - 0x1c]
push eax
call edi
mov ecx, dword [0x5456d4]
lea edx, [ebp - 0x28]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x28]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x24]
push ecx
push edx
call esi
movsx eax, word [0x546018]
mov ecx, dword [ebp - 0x24]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov eax, dword [0x5456d4]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov edx, dword [ebp - 0x20]
sub ax, 0x3c
mov esi, dword [edx + 0x14]
movsx eax, ax
mov ecx, eax
sub ecx, esi
lea esi, [ecx*8]
sub esi, ecx
mov ecx, dword [edx + 0xc]
lea edx, [ecx + esi*4 + 6]
mov ecx, dword [ebp - 0x14]
push edx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.005005e0
lea edx, [ebp - 0x14]
push edx
call edi
lea eax, [ebp - 0x18]
push eax
call edi
lea ecx, [ebp - 0x1c]
push ecx
call edi
lea edx, [ebp - 0x20]
push edx
call edi
lea eax, [ebp - 0x24]
push eax
call edi
lea ecx, [ebp - 0x28]
push ecx
call edi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x46
jne 0x5020c3
push 0
call fcn.004fefd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x47
jl 0x5020ef
cmp ax, 0x4f
jg 0x5020ef
sub ax, 0x46
movsx edx, ax
push edx
call fcn.00500380
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x50
jne 0x502112
push 0x7d7c
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x51
jl 0x50213e
cmp ax, 0x58
jg 0x50213e
sub ax, 0x50
movsx eax, ax
push eax
call fcn.00500240
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x59
jne 0x50215e
push 1
call fcn.004fefd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x5a
jne 0x50217e
push 2
call fcn.004fefd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x5b
jl 0x502229
cmp ax, 0x63
jg 0x502229
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x5a
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 0xb
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 1]
mov dword [ebp - 0x30], ecx
jmp 0x502b22
cmp ax, 0x64
jne 0x502251
mov ecx, dword [0x54601c]
mov word [0x5456e4], 0xfffe
not ecx
mov word [0x54601c], cx
push 0x5051b7
jmp 0x505192
cmp ax, 0x65
jl 0x502348
cmp ax, 0x6d
jg 0x502348
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x50]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x50]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x4c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x4c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x48]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x48]
sub ax, 0x64
mov edi, dword [ecx + 0x14]
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov dl, byte [eax + 0xc]
inc dl
mov cl, dl
mov byte [eax + 0xc], dl
cmp cl, 7
jne 0x5022fb
mov byte [eax + 0xc], 0x15
cmp byte [eax + 0xc], 0x17
jne 0x502305
mov byte [eax + 0xc], 0x1a
cmp byte [eax + 0xc], bl
jne 0x50230e
mov byte [eax + 0xc], 0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x48]
push ecx
mov dword [eax + 8], 0
mov byte [eax + 0xd], 0
mov byte [eax + 0xe], 0
call esi
lea edx, [ebp - 0x4c]
push edx
call esi
lea eax, [ebp - 0x50]
push eax
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x6e
jne 0x502368
push 3
call fcn.004ff690
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x6f
jl 0x5024d8
cmp ax, 0x77
jg 0x5024d8
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x6e
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 3
push 0
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
lea eax, [ebp - 0x38]
add edx, 8
push 1
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4011
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
call esi
movsx eax, word [0x546014]
mov edi, dword [0x5456d4]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x546018]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x5456e6]
sub dx, 0x6e
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
jmp 0x503836
cmp ax, 0x78
jne 0x50257b
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov ebx, dword [ecx + 0x14]
push 3
sub eax, ebx
push 0
push 1
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x27]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x30], ecx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x79
jl 0x50274c
cmp ax, 0x81
jg 0x50274c
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x78
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
mov ecx, 2
push 0xffffffffffffffff
push 3
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
push 0
push 1
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*8]
lea ecx, [ebp - 0x38]
push ecx
mov dword [ebp - 0x30], eax
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx eax, word [0x546014]
mov edi, dword [0x5456d4]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov word [0x5456e4], 0xfffe
push 0x5051b7
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x546018]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x5456e6]
sub dx, 0x78
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x14], esi
mov ebx, dword [edi + 0x14]
sub eax, ebx
mov ebx, eax
shl ebx, 6
add ebx, eax
mov eax, dword [edi + 0xc]
mov eax, dword [eax + ebx*4 + 0x100]
sub ecx, dword [eax + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + 0xc]
shl edi, 4
mov eax, dword [edi + ecx + 0x10]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov word [edx + 0x12], si
jmp 0x505192
cmp ax, 0x82
jne 0x5027df
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 2
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x5047c6
cmp ax, 0x83
jl 0x5029b0
cmp ax, 0x8b
jg 0x5029b0
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x82
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
mov ecx, 3
push 0xffffffffffffffff
push 3
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
push 0
push 1
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*8]
lea ecx, [ebp - 0x38]
push ecx
mov dword [ebp - 0x30], eax
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx eax, word [0x546014]
mov edi, dword [0x5456d4]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov word [0x5456e4], 0xfffe
push 0x5051b7
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x546018]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x5456e6]
sub dx, 0x82
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x1c], esi
mov ebx, dword [edi + 0x14]
sub eax, ebx
mov ebx, eax
shl ebx, 6
add ebx, eax
mov eax, dword [edi + 0xc]
mov eax, dword [eax + ebx*4 + 0x100]
sub ecx, dword [eax + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + 0xc]
shl edi, 4
mov eax, dword [edi + ecx + 0x10]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov word [edx + 0x1a], si
jmp 0x505192
cmp ax, 0x8c
jne 0x502a1e
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 5
jmp 0x5027b9
cmp ax, 0x8d
jl 0x502bde
cmp ax, 0x95
jg 0x502bde
mov ecx, dword [0x5456d4]
sub ax, 0x8c
movsx edx, word [0x546014]
mov esi, dword [ecx + 0x14]
push ecx
sub edx, esi
mov esi, edx
shl esi, 6
add esi, edx
mov edx, dword [ecx + 0xc]
movsx eax, ax
mov esi, dword [edx + esi*4 + 0x100]
lea ecx, [ebp - 0x1c]
movsx edx, word [0x546018]
mov ebx, dword [esi + 0x14]
push ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov edx, dword [ebx + edx + 0x10]
sub eax, dword [edx + 0x14]
lea esi, [eax*8]
sub esi, eax
mov eax, dword [edx + 0xc]
cmp word [eax + esi*4 + 6], 0xffff
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
jne 0x502b5c
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x8c
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4003
lea ecx, [eax + edx*4 + 8]
mov dword [ebp - 0x30], ecx
push 0xffffffffffffffff
push 8
movsx edx, di
push 0
push edx
lea eax, [ebp - 0x38]
push eax
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x8c
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x502b1e
cmp ax, 0x96
jl 0x502c0a
cmp ax, 0xb3
jg 0x502c0a
sub ax, 0x95
movsx ecx, ax
push ecx
call fcn.004ffa00
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xb4
jne 0x502c9e
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 8
push 0xffffffffffffffff
push 4
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x5042c5
cmp ax, 0xb5
jl 0x502cca
cmp ax, 0xbc
jg 0x502cca
sub ax, 0xb4
movsx eax, ax
push eax
call fcn.004ff8b0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xbd
jne 0x502ced
push 0x7fd7
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xbe
jne 0x502d10
push 0x7e78
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xbf
jl 0x502db7
cmp ax, 0xc6
jg 0x502db7
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x54]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
push 0xffffffffffffffff
sub ax, 0xbe
push 0xf
movsx ecx, ax
mov eax, dword [ebp - 0x14]
push 0
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*4]
movsx ecx, di
mov dword [ebp - 0x30], eax
push ecx
jmp 0x5042c9
cmp ax, 0xc7
jne 0x502dda
push 0xffff8000
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xc8
jne 0x502e4e
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov ebx, dword [ecx + 0x14]
push 2
sub eax, ebx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4002
lea ecx, [edx + eax + 0x4c]
mov dword [ebp - 0x30], ecx
jmp 0x50192d
cmp ax, 0xc9
jl 0x502e7a
cmp ax, 0xd1
jg 0x502e7a
sub ax, 0xc8
movsx edx, ax
push edx
call fcn.004ff400
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xd2
jne 0x502eee
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov ebx, dword [ecx + 0x14]
push 1
sub eax, ebx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x2b]
mov dword [ebp - 0x30], ecx
jmp 0x50192d
cmp ax, 0xd3
jl 0x502f22
cmp ax, 0xd8
jg 0x502f22
sub ax, 0xd2
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 1
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xd9
jne 0x502fa4
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 2
mov ecx, dword [ebp - 0x14]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*2]
jmp 0x5042b7
cmp ax, 0xda
jne 0x503037
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 3
push 0xffffffffffffffff
push 3
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x5042c5
cmp ax, 0xdb
jne 0x5030a5
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 4
jmp 0x502f8c
cmp ax, 0xdc
jne 0x5030c5
push 2
call fcn.004ff790
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xdd
jl 0x5030f9
cmp ax, 0xe2
jg 0x5030f9
sub ax, 0xdc
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 2
mov dword [ebp - 0x3c], eax
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xe3
jne 0x503117
call fcn.0051b080
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xe4
jne 0x503137
push 3
call fcn.004ff790
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xe5
jne 0x5031d0
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
mov dword [ebp - 0x38], 0x4002
movsx ecx, di
add eax, 0x36
push ecx
mov dword [ebp - 0x30], eax
jmp 0x5042c9
cmp ax, 0xe6
jne 0x503268
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
mov dword [ebp - 0x38], 0x4002
movsx ecx, di
add eax, 0x38
push ecx
mov dword [ebp - 0x30], eax
jmp 0x5042c9
cmp ax, 0xe7
jl 0x50329c
cmp ax, 0xec
jg 0x50329c
sub ax, 0xe6
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 3
mov dword [ebp - 0x3c], eax
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xed
jne 0x50331d
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3a
jmp 0x50487d
cmp ax, 0xee
jne 0x503333
mov edx, dword [0x5456d4]
lea eax, [ebp - 0x1c]
push edx
push eax
jmp 0x504812
cmp ax, 0xef
jne 0x5033b4
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x7a
jmp 0x50487d
cmp ax, 0xf0
jne 0x5033d4
push 3
call fcn.004fefd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xf1
jl 0x503408
cmp ax, 0xf6
jg 0x503408
sub ax, 0xf0
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 4
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xf7
jne 0x503428
push 4
call fcn.004fefd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xf8
jne 0x503448
push 4
call fcn.004ff790
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xfb
jl 0x50347c
cmp ax, 0x100
jg 0x50347c
sub ax, 0xfa
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 5
mov dword [ebp - 0x3c], ecx
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x101
jl 0x5034a5
cmp ax, 0x104
jg 0x5034a5
sub ax, 0x101
push eax
call fcn.0051ae40
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x105
jl 0x5034d9
cmp ax, 0x10a
jg 0x5034d9
sub ax, 0x104
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 6
mov dword [ebp - 0x3c], eax
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x10f
jl 0x50350d
cmp ax, 0x114
jg 0x50350d
sub ax, 0x10e
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 7
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x119
jl 0x503541
cmp ax, 0x11e
jg 0x503541
sub ax, 0x118
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 8
mov dword [ebp - 0x3c], ecx
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x123
jl 0x503575
cmp ax, 0x128
jg 0x503575
sub ax, 0x122
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 9
mov dword [ebp - 0x3c], eax
call fcn.004ff520
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x12d
jl 0x5035ef
cmp ax, 0x135
jg 0x5035ef
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
sub ax, 0x12c
jmp 0x50429e
cmp ax, 0x136
jne 0x50360e
mov dword [0x5449f8], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x137
jl 0x5036a6
cmp ax, 0x13e
jg 0x5036a6
mov edx, dword [0x5456d4]
sub ax, 0x136
movsx ecx, word [0x546014]
mov esi, dword [edx + 0x14]
mov word [0x5456e4], 0xfffe
sub ecx, esi
push 0x5051b7
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + 0xc]
movsx eax, ax
mov edx, dword [ecx + esi*4 + 0x100]
movsx ecx, word [0x546018]
mov esi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, esi
lea esi, [ecx*8]
sub esi, ecx
shl esi, 4
mov ecx, dword [esi + edx + 0x68]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dx, word [ecx + eax*2]
lea eax, [ecx + eax*2]
sub dx, 0x7fd7
neg dx
sbb edx, edx
and edx, 0x160
add edx, 0x7e77
mov word [eax], dx
jmp 0x505192
cmp ax, 0x13f
jne 0x5036c9
mov dword [0x5449f8], 0x14
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x141
jl 0x50389a
cmp ax, 0x149
jg 0x50389a
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x140
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 9
push 0
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
movsx eax, di
sub edx, ecx
lea ecx, [ebp - 0x38]
add edx, 8
push eax
push ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4011
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx eax, word [0x546014]
mov edi, dword [0x5456d4]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x546018]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x5456e6]
sub dx, 0x140
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0xc], esi
mov ebx, dword [edi + 0x14]
sub eax, ebx
mov word [0x5456e4], 0xfffe
mov ebx, eax
push 0x5051b7
shl ebx, 6
add ebx, eax
mov eax, dword [edi + 0xc]
mov eax, dword [eax + ebx*4 + 0x100]
sub ecx, dword [eax + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + 0xc]
shl edi, 4
mov eax, dword [edi + ecx + 0x10]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov word [edx + 0xa], si
jmp 0x505192
cmp ax, 0x14a
jne 0x50391a
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3e
jmp 0x50487d
cmp ax, 0x14b
jl 0x5039dd
cmp ax, 0x153
jg 0x5039dd
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x14a
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 0xf
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov dword [ebp - 0x38], 0x4002
add edx, 0xa
mov dword [ebp - 0x30], edx
jmp 0x503c40
cmp ax, 0x154
jne 0x503a00
push 0x7993
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x155
jl 0x503aaa
cmp ax, 0x15d
jg 0x503aaa
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x154
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 5
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xc]
mov dword [ebp - 0x30], ecx
jmp 0x502b22
cmp ax, 0x15e
jne 0x503acd
push 0x791a
call fcn.004feed0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x15f
jl 0x503b82
cmp ax, 0x17d
jg 0x503b82
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 7
push 0xffffffffffffffff
push 7
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
push 0
mov edx, eax
mov dword [ebp - 0x38], 0x4002
shl edx, 5
sub edx, eax
mov ax, word [0x5456e6]
sub ax, 0x15e
movsx eax, ax
add edx, eax
movsx eax, di
lea edx, [ecx + edx*2]
push eax
mov dword [ebp - 0x30], edx
jmp 0x50488f
cmp ax, 0x17e
jl 0x503c70
cmp ax, 0x190
jg 0x503c70
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x17d
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 9
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov dword [ebp - 0x38], 0x4002
add edx, 0xa
mov dword [ebp - 0x30], edx
movsx eax, di
push 0
lea ecx, [ebp - 0x38]
push eax
push ecx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
jmp 0x502b47
cmp ax, 0x191
jl 0x503d24
cmp ax, 0x1ae
jg 0x503d24
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 4
push 0xffffffffffffffff
push 8
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
push 0
mov edx, eax
mov dword [ebp - 0x38], 0x4002
shl edx, 5
sub edx, eax
mov ax, word [0x5456e6]
sub ax, 0x190
movsx eax, ax
add edx, eax
movsx eax, di
lea edx, [ecx + edx*2]
push eax
mov dword [ebp - 0x30], edx
jmp 0x50488f
cmp ax, 0x1af
jl 0x503dd7
cmp ax, 0x1cc
jg 0x503dd7
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 2
push 0xffffffffffffffff
push 2
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
push 0
mov edx, eax
mov dword [ebp - 0x38], 0x4002
shl edx, 5
sub edx, eax
mov ax, word [0x5456e6]
sub ax, 0x1ae
push 1
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x502b28
cmp ax, 0x1cd
jl 0x503e82
cmp ax, 0x1d6
jg 0x503e82
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x1cc
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 9
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4003
lea ecx, [eax + edx*4 + 8]
mov dword [ebp - 0x30], ecx
jmp 0x502b22
cmp ax, 0x1d7
jl 0x503f6e
cmp ax, 0x1df
jg 0x503f6e
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x1d6
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 2
push 1
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
lea eax, [ebp - 0x38]
add edx, 8
push 1
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4011
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
jmp 0x502b47
cmp ax, 0x1e0
jl 0x504081
cmp ax, 0x3de
jg 0x504081
mov di, word [0x546060]
cmp di, 6
jge 0x504007
mov edx, dword [0x5456d4]
movsx ecx, word [0x546014]
sub ecx, dword [edx + 0x14]
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + 0xc]
mov esi, dword [ecx + esi*4 + 0x100]
movsx ecx, word [0x546018]
sub ecx, dword [esi + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [esi + 0xc]
shl ebx, 4
mov esi, dword [ebx + ecx + 0x18]
movsx ecx, word [0x54605e]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub ecx, ebx
mov bx, ax
sub bx, 0x1e0
lea ecx, [ecx + ecx*2]
mov esi, dword [esi + ecx*4 + 8]
movsx ecx, word [0x54605c]
sub ecx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ecx, [ecx + ecx*2]
mov word [esi + ecx*4 + 2], bx
mov ebx, 0x1b
jmp 0x50400d
mov edx, dword [0x5456d4]
cmp di, 6
jne 0x504068
movsx ecx, word [0x546014]
mov esi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, esi
sub ax, 0x1e0
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + esi*4 + 0x100]
movsx edx, ax
mov eax, dword [0x546058]
mov edi, dword [ecx + 0x14]
mov esi, dword [eax + 0x14]
sub edx, esi
mov esi, dword [eax + 0xc]
movsx eax, word [0x546018]
sub eax, edi
lea edi, [eax*8]
sub edi, eax
mov eax, dword [ecx + 0xc]
mov cx, word [esi + edx*2]
shl edi, 4
mov word [edi + eax + 4], cx
mov dword [0x5449f8], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x3df
jl 0x50412c
cmp ax, 0x3e6
jg 0x50412c
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x3de
push 0xffffffffffffffff
mov edi, dword [ecx + 0x14]
push 0xe
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xc]
mov dword [ebp - 0x30], ecx
jmp 0x5042c5
cmp ax, 0x3e7
jne 0x50414a
call fcn.004fe2b0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x3e9
jl 0x504176
cmp ax, 0x7530
jg 0x504176
sub ax, 0x3e8
movsx eax, ax
push eax
call fcn.004fe1f0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x7531
jl 0x504221
cmp ax, 0x7539
jg 0x504221
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x7530
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 0xf
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x502b22
cmp ax, 0x753b
jl 0x5042ed
cmp ax, 0x7542
jg 0x5042ed
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
sub ax, 0x753a
mov ecx, dword [ebp - 0x14]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push 0xffffffffffffffff
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], 0x4002
push 1
push 0
push 1
lea edx, [ebp - 0x38]
push edx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
jmp 0x502b47
cmp ax, 0x7544
jl 0x504391
cmp ax, 0x754d
jg 0x504391
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x7544
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x502b1e
cmp ax, 0x754e
jl 0x504442
cmp ax, 0x7555
jg 0x504442
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 8
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x5456e6]
sub ax, 0x753a
mov ecx, dword [ecx + 0xc]
push 0xffffffffffffffff
movsx eax, ax
add edx, eax
push 1
push 0
mov dword [ebp - 0x38], 0x4002
lea edx, [ecx + edx*2]
push 1
mov dword [ebp - 0x30], edx
jmp 0x502b28
cmp ax, 0x7558
jl 0x5044d6
cmp ax, 0x755f
jg 0x5044d6
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 9
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x5456e6]
sub ax, 0x7544
jmp 0x504420
cmp ax, 0x7595
jl 0x50457d
cmp ax, 0x759d
jg 0x50457d
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x7594
mov edi, dword [ecx + 0x14]
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xd]
mov dword [ebp - 0x30], ecx
jmp 0x5047c2
cmp ax, 0x759f
jl 0x504627
cmp ax, 0x75a7
jg 0x504627
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x759e
push 0xffffffffffffffff
mov edi, dword [ecx + 0x14]
push 3
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x5047c6
cmp ax, 0x75f9
jl 0x504722
cmp ax, 0x7601
jg 0x504722
mov eax, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x18]
sub ax, 0x75f8
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 1
push 0
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
lea eax, [ebp - 0x38]
add edx, 0xa
push 1
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4002
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x765d
jl 0x5047fe
cmp ax, 0x7665
jg 0x5047fe
mov edx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x5456e6]
mov ecx, dword [ebp - 0x14]
sub ax, 0x765c
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2 + 0xa]
mov dword [ebp - 0x30], ecx
push 0xffffffffffffffff
push 1
push 0
lea edx, [ebp - 0x38]
push 1
push edx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x7666
jne 0x505157
mov eax, dword [0x5456d4]
lea ecx, [ebp - 0x1c]
push eax
push ecx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546018]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3c
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0x4002
push 1
lea ecx, [ebp - 0x38]
push ecx
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
jmp 0x502b47
cmp ax, bx
jne 0x5048d7
push ebx
call fcn.00500610
mov dword [0x544b38], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 2
jne 0x504917
cmp cx, 3
jne 0x5048fd
push 4
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
push 3
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 3
jne 0x50496b
mov ax, word [0x546028]
mov ecx, dword [0x546004]
mov word [0x546018], ax
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
mov ecx, 0x546020
mov edx, dword [eax + edx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 3
call fcn.00500610
mov dword [0x544b38], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 4
jne 0x50498b
mov word [0x546018], bx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 5
jne 0x5049cb
cmp word [0x546018], bx
push ebx
jne 0x5049b3
call fcn.004fd050
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
call fcn.004fd210
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 6
jne 0x5049f4
cmp word [0x546018], bx
push 0xffffffffffffffff
jne 0x5049b3
call fcn.004fd050
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xb
jl 0x504a1d
cmp ax, 0x13
jg 0x504a1d
sub ax, 0xb
mov word [0x5456e4], 0xfffe
mov word [0x546024], ax
push 0x5051b7
jmp 0x505192
cmp ax, 0x65
jl 0x505157
cmp ax, 0xc7
jg 0x505157
jmp 0x504cd4
cmp ax, bx
je 0x504e06
cmp ax, 1
jne 0x504a5e
push ebx
call fcn.004fe960
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 2
jne 0x504acc
mov eax, dword [0x5456d4]
lea ecx, [ebp - 0x44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x44]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4 + 8]
mov dl, byte [eax + 1]
inc dl
mov cl, dl
mov byte [eax + 1], dl
cmp cl, 3
jne 0x504aa2
mov byte [eax + 1], 0
mov cx, word [0x54601a]
push ecx
call fcn.004a6ad0
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 3
jne 0x504aec
push 0xfffffffffffffff6
call fcn.004fcef0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 4
jne 0x504b0c
push 0xa
call fcn.004fcef0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 5
jne 0x504b19
push 0x63
jmp 0x504f03
cmp ax, 6
jne 0x504b3e
push 2
call fcn.00500610
call fcn.004fcfd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 7
jne 0x504b5e
push 1
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 8
jne 0x504b7c
call fcn.004fd510
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 9
jne 0x504bcf
mov eax, dword [0x5456d4]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.00448d80
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xa
jne 0x504c22
mov eax, dword [0x5456d4]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.00448940
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xb
jl 0x504cc8
cmp ax, 0x63
jg 0x504cc8
call fcn.0043dd80
mov edx, dword [0x5456d4]
mov cx, word [0x5456e6]
movsx eax, word [0x546014]
mov esi, dword [edx + 0x14]
sub cx, 0xa
sub eax, esi
mov word [0x546018], cx
mov esi, eax
mov word [0x546028], bx
shl esi, 6
add esi, eax
mov eax, dword [edx + 0xc]
mov edx, dword [eax + esi*4 + 0x100]
movsx eax, cx
mov ecx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub eax, ecx
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 4
movzx ax, byte [ecx + edx]
add eax, 5
push eax
call fcn.00500610
mov dword [0x544b38], ebx
mov word [0x54601e], bx
mov word [0x544cc8], bx
call fcn.0043d790
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x65
jl 0x504d1c
cmp ax, 0xc7
jg 0x504d1c
mov edx, dword [0x546004]
sub ax, 0x64
movsx ecx, word [0x546028]
mov edi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, edi
movsx eax, ax
lea ecx, [ecx + ecx*4]
mov ecx, dword [edx + ecx*4 + 0x10]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
movsx edx, word [ecx + eax*2]
push edx
call fcn.004a2cb0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xc9
jl 0x504d45
cmp ax, 0x12b
jg 0x504d45
sub ax, 0xc9
mov word [0x5456e4], 0xfffe
mov word [0x546026], ax
push 0x5051b7
jmp 0x505192
cmp ax, 0x1f4
jne 0x504d63
call fcn.004fd570
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x258
jne 0x504d81
call fcn.004ffe10
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x2bc
jne 0x504da1
push 0xffffffffffffffff
call fcn.004fe960
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x3e9
jl 0x504dcd
cmp ax, 0x7cf
jg 0x504dcd
sub ax, 0x3e8
movsx eax, ax
push eax
call fcn.004fe740
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0x7d1
jl 0x505157
cmp ax, 0xbb7
jg 0x505157
sub ax, 0x7d0
movsx ecx, ax
push ecx
call fcn.004fe850
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, bx
jne 0x504e2c
push ebx
call fcn.00500610
mov word [0x546014], bx
mov dword [0x544b38], ebx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 1
jne 0x504e4c
push 0x5b
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 2
jne 0x504ebb
mov edx, dword [0x5456d4]
lea eax, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x40]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4 + 8]
mov dl, byte [eax + 1]
inc dl
mov cl, dl
mov byte [eax + 1], dl
cmp cl, 3
jne 0x504e91
mov byte [eax + 1], 0
mov cx, word [0x54601a]
push ecx
call fcn.004a6ad0
lea edx, [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 3
jne 0x504edb
push 0xfffffffffffffff6
call fcn.004fcef0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 4
jne 0x504efb
push 0xa
call fcn.004fcef0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 5
jne 0x504f2f
push 0x62
call fcn.00500610
mov word [0x546018], bx
mov dword [0x544b38], ebx
mov word [0x544b36], bx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 6
jne 0x504f54
push 2
call fcn.00500610
call fcn.004fcfd0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 7
jne 0x504f74
push 0xffffffffffffffff
call fcn.00500610
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 8
jne 0x504f92
call fcn.004fd510
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 0xb
jl 0x504fbb
cmp ax, 0x13
jg 0x504fbb
sub ax, 0xb
mov word [0x5456e4], 0xfffe
mov word [0x546024], ax
push 0x5051b7
jmp 0x505192
cmp ax, 0x64
jle 0x505157
mov edx, dword [0x5456d4]
mov si, 0x64
movsx ecx, word [0x546014]
mov edi, dword [edx + 0x14]
sub si, ax
sub ecx, edi
sub ax, 0x64
mov edi, ecx
mov word [0x5456e4], 0xfffe
shl edi, 6
add edi, ecx
mov ecx, dword [edx + 0xc]
mov edx, dword [0x5456d8]
push 0x5051b7
mov word [ecx + edi*4 + 2], si
movsx ecx, word [0x54601a]
mov edi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, edi
lea ecx, [ecx + ecx*2]
shl ecx, 5
mov word [ecx + edx + 0x42], ax
jmp 0x505192
cmp ax, bx
jne 0x505071
cmp cx, 0x62
jne 0x505050
push 0xffffffffffffffff
call fcn.00500610
mov word [0x546018], bx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
push 1
call fcn.00500610
mov word [0x546018], bx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 1
jne 0x50508f
call fcn.004ff0e0
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 2
jne 0x5050bc
movsx eax, word [0x546018]
push eax
call fcn.004ff2e0
mov word [0x546018], bx
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
cmp ax, 3
jne 0x505141
mov ecx, dword [0x5456d4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x546014]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0xfc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x546018]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, esi
push 2
push ebx
mov dword [ebp - 0x38], 0x4011
lea eax, [eax + eax*2]
push 1
lea edx, [ecx + eax*4]
mov dword [ebp - 0x30], edx
lea eax, [ebp - 0x38]
push eax
call fcn.00434fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
jmp 0x502b47
cmp ax, 0xb
jl 0x505157
cmp ax, 0x14
jg 0x505157
sub ax, 0xa
mov word [0x546018], ax
mov word [0x5456e4], 0xfffe
push 0x5051b7
jmp 0x505192
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x40]
push eax
call esi
lea ecx, [ebp - 0x44]
push ecx
call esi
lea edx, [ebp - 0x48]
push edx
call esi
lea eax, [ebp - 0x4c]
push eax
call esi
lea ecx, [ebp - 0x50]
push ecx
call esi
ret