Function at 0x52ddc0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405996
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x70
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x404ba0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
xor edi, edi
mov edx, 0x42b088
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], edi
call esi
mov ebx, dword [ebp + 8]
push edi
push 6
push 5
lea eax, [ebx + 0x50]
push edi
mov dword [ebp - 0x6c], eax
push eax
lea eax, [ebp - 0x34]
push 0xfa
push eax
call fcn.004403b0
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x34]
call edi
mov ecx, dword [0x563668]
lea edx, [ebp - 0x50]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x50]
movsx eax, word [0x564650]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x4c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, dword [ebp - 0x4c]
movsx eax, word [0x564654]
sub eax, dword [edx + 0x14]
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + 0xc]
shl ecx, 4
add ecx, eax
mov dword [ebp - 0x58], ecx
mov al, byte [ecx + 0x2b]
test al, al
jne 0x52e150
mov edx, 0x42b7a4
lea ecx, [ebp - 0x34]
call esi
mov eax, dword [ebp - 0x6c]
push 0
push 0
push 0
push 0
push eax
lea ecx, [ebp - 0x34]
push 0x11f
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52ded8
mov word [0x56367a], 0xd2
mov edx, 0x42b990
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
push 0
push ebx
lea edx, [ebp - 0x34]
push 0x168
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42b9c4
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
lea eax, [ebx + 0x14]
push 5
push 0
mov dword [ebp - 0x70], eax
push eax
lea eax, [ebp - 0x34]
push 0x168
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42ba04
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
lea eax, [ebx + 0x28]
push 5
push 0
push eax
lea ecx, [ebp - 0x34]
push 0x168
push ecx
mov dword [ebp - 0x74], eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42ba34
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
lea eax, [ebx + 0x3c]
push 5
push 0
push eax
lea edx, [ebp - 0x34]
push 0x168
push edx
mov dword [ebp - 0x78], eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42ba74
lea ecx, [ebp - 0x34]
call esi
mov eax, dword [ebp - 0x6c]
push 0
push 6
push 5
push 0
push eax
lea ecx, [ebp - 0x34]
push 0x168
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bab4
lea ecx, [ebp - 0x34]
call esi
lea eax, [ebx + 0x64]
push 0
push 6
push 5
push 0
push eax
lea edx, [ebp - 0x34]
push 0x168
push edx
mov dword [ebp - 0x7c], eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42baf8
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
lea eax, [ebx + 0x78]
push 5
push 0
mov dword [ebp - 0x80], eax
push eax
lea eax, [ebp - 0x34]
push 0x168
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bb6c
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
lea ecx, [ebx + 0xa0]
push 0
push ecx
lea edx, [ebp - 0x34]
push 0x168
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bbb0
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
push 0
push ebx
lea eax, [ebp - 0x34]
push 0x23a
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bbc4
lea ecx, [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x70]
push 0
push 6
push 5
push 0
push ecx
lea edx, [ebp - 0x34]
push 0x23a
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bbf4
lea ecx, [ebp - 0x34]
call esi
mov eax, dword [ebp - 0x74]
push 0
push 6
push 5
push 0
push eax
lea ecx, [ebp - 0x34]
push 0x23a
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bc24
lea ecx, [ebp - 0x34]
call esi
mov edx, dword [ebp - 0x78]
push 0
push 6
push 5
push 0
push edx
lea eax, [ebp - 0x34]
push 0x23a
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bc54
lea ecx, [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x6c]
push 0
push 6
push 5
push 0
push ecx
lea edx, [ebp - 0x34]
push 0x23a
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bc60
lea ecx, [ebp - 0x34]
call esi
mov eax, dword [ebp - 0x7c]
push 0
push 6
push 5
push 0
push eax
lea ecx, [ebp - 0x34]
push 0x23a
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bc90
lea ecx, [ebp - 0x34]
call esi
mov edx, dword [ebp - 0x80]
push 0
push 6
push 5
push 0
push edx
lea eax, [ebp - 0x34]
push 0x23a
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
jmp 0x52e9f8
mov edx, 0x42b204
lea ecx, [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x6c]
push 0
push 0
push 0
push 0
push ecx
lea edx, [ebp - 0x34]
push 0x11f
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52e18c
mov word [0x56367a], 0x17
mov edx, 0x429eb0
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
push 0
push ebx
lea eax, [ebp - 0x34]
push 0x168
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x429ed8
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
push 0
push ebx
lea ecx, [ebp - 0x34]
push 0x244
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x429f04
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
lea eax, [ebx + 0x6e]
push 5
push 0
push eax
lea edx, [ebp - 0x34]
push 0x168
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x429f38
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
lea eax, [ebx + 0x6e]
push 0
push eax
lea eax, [ebp - 0x34]
push 0x244
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x429f60
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
lea ecx, [ebx + 0xdc]
push 0
push ecx
lea edx, [ebp - 0x34]
push 0x168
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov eax, 1
mov dword [ebp - 0x30], 0x168
add ebx, 0x14
mov dword [ebp - 0x14], eax
mov ecx, 5
cmp eax, ecx
jg 0x52e9c1
movsx ecx, word [0x56465a]
lea eax, [eax + eax*4 - 4]
mov edx, 0x42bcc0
cmp eax, ecx
lea ecx, [ebp - 0x34]
jne 0x52e2ab
call esi
mov edx, dword [ebp - 0x30]
push 0
push 6
push 2
push 0
push ebx
lea eax, [ebp - 0x34]
push edx
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
jmp 0x52e2e3
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
push 5
push 0
push ebx
lea edx, [ebp - 0x34]
push ecx
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52e2e3
mov eax, dword [ebp - 0x14]
mov word [0x56367a], 0xd5
mov dword [0x564698], eax
mov eax, dword [ebp - 0x14]
movsx edx, word [0x56465a]
lea ecx, [eax + eax*4 - 3]
cmp ecx, edx
mov edx, 0x42bcd0
lea ecx, [ebp - 0x34]
jne 0x52e31f
call esi
push 0
push 6
lea eax, [ebx + 0x10]
push 2
push 0
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x34]
push eax
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
jmp 0x52e35b
call esi
mov edx, dword [ebp - 0x30]
push 0
push 6
lea eax, [ebx + 0x10]
push 5
push 0
push eax
lea eax, [ebp - 0x34]
push edx
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52e35b
mov ecx, dword [ebp - 0x14]
mov word [0x56367a], 0xd6
mov dword [0x564698], ecx
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x34]
lea edx, [eax + eax*4 - 2]
movsx eax, word [0x56465a]
cmp edx, eax
mov edx, 0x42bce0
jne 0x52e397
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
lea eax, [ebx + 0x20]
push 2
push 0
push eax
lea edx, [ebp - 0x34]
push ecx
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
jmp 0x52e3d3
call esi
push 0
push 6
lea eax, [ebx + 0x20]
push 5
push 0
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x34]
push eax
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52e3d3
mov edx, dword [ebp - 0x14]
mov word [0x56367a], 0xd7
mov dword [0x564698], edx
mov eax, dword [ebp - 0x14]
mov edx, 0x42bcf0
movsx ecx, word [0x56465a]
lea eax, [eax + eax*4 - 1]
cmp eax, ecx
lea ecx, [ebp - 0x34]
jne 0x52e40f
call esi
mov edx, dword [ebp - 0x30]
push 0
push 6
lea eax, [ebx + 0x30]
push 2
push 0
push eax
lea eax, [ebp - 0x34]
push edx
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
jmp 0x52e44a
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
lea eax, [ebx + 0x30]
push 5
push 0
push eax
lea edx, [ebp - 0x34]
push ecx
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52e44a
mov eax, dword [ebp - 0x14]
mov word [0x56367a], 0xd8
mov dword [0x564698], eax
mov eax, dword [ebp - 0x14]
movsx edx, word [0x56465a]
lea ecx, [eax + eax*4]
cmp ecx, edx
mov edx, 0x4258d8
lea ecx, [ebp - 0x34]
jne 0x52e485
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
push 2
lea eax, [ebx + 0x40]
push 0
push eax
lea edx, [ebp - 0x34]
push ecx
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
jmp 0x52e4c0
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
push 5
lea eax, [ebx + 0x40]
push 0
push eax
lea edx, [ebp - 0x34]
push ecx
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x48], eax
call edi
cmp word [ebp - 0x48], 0
je 0x52e4c0
mov eax, dword [ebp - 0x14]
mov word [0x56367a], 0xdd
mov dword [0x564698], eax
mov edx, 0x42bd00
lea ecx, [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
push 5
lea eax, [ecx + 0x4e]
push 0
push ebx
lea edx, [ebp - 0x34]
push eax
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd0c
lea ecx, [ebp - 0x34]
call esi
mov eax, dword [ebp - 0x30]
push 0
push 6
push 5
add eax, 0x84
push 0
push ebx
lea ecx, [ebp - 0x34]
push eax
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd00
lea ecx, [ebp - 0x34]
call esi
mov edx, dword [ebp - 0x30]
push 0
push 6
push 5
lea eax, [ebx + 0x10]
push 0
push eax
lea eax, [edx + 0x4e]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd0c
lea ecx, [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
push 5
lea eax, [ebx + 0x10]
push 0
push eax
lea eax, [ecx + 0x84]
lea edx, [ebp - 0x34]
push eax
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd00
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
lea eax, [ebx + 0x20]
push 0
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x34]
add eax, 0x4e
push eax
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd0c
lea ecx, [ebp - 0x34]
call esi
mov edx, dword [ebp - 0x30]
push 0
push 6
push 5
lea eax, [ebx + 0x20]
push 0
push eax
lea eax, [edx + 0x84]
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd00
lea ecx, [ebp - 0x34]
call esi
mov ecx, dword [ebp - 0x30]
push 0
push 6
push 5
lea eax, [ebx + 0x30]
push 0
push eax
lea eax, [ecx + 0x4e]
lea edx, [ebp - 0x34]
push eax
push edx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, 0x42bd0c
lea ecx, [ebp - 0x34]
call esi
push 0
push 6
push 5
lea eax, [ebx + 0x30]
push 0
push eax
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x34]
add eax, 0x84
push eax
push ecx
call fcn.004403b0
lea ecx, [ebp - 0x34]
call edi
mov edx, dword [ebp - 0x58]
lea ecx, [ebp - 0x54]
mov eax, dword [edx + 0x6c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x14]
push 0x1c6
push 0xed
mov edx, dword [ecx + 0x14]
push 0x7530
sub eax, edx
push 0
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x44], 0x4002
lea eax, [eax + edx*2]
lea edx, [ebp - 0x44]
mov dword [ebp - 0x5c], eax
add eax, 2
mov dword [ebp - 0x3c], eax
push edx
lea eax, [ecx + 0x1f]
push 4
push 0x28
push ebx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7c0
test ax, ax
je 0x52e698
mov ecx, dword [ebp - 0x5c]
push 0
movsx edx, word [ecx + 2]
lea eax, [ecx + 2]
push edx
push 0xe
call fcn.005275a0
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
push 0x1c6
push 0xed
add eax, 4
push 0x7530
lea ecx, [ebp - 0x44]
push 0
mov dword [ebp - 0x3c], eax
push ecx
push 4
lea eax, [ebx + 0x10]
push 0x28
push eax
lea eax, [edx + 0x1f]
mov dword [ebp - 0x44], 0x4002
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7c0
test ax, ax
je 0x52e6ee
mov ecx, dword [ebp - 0x5c]
push 0
movsx edx, word [ecx + 4]
lea eax, [ecx + 4]
push edx
push 0xe
call fcn.005275a0
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
push 0x1c6
push 0xed
add eax, 6
push 0x7530
lea ecx, [ebp - 0x44]
push 0
mov dword [ebp - 0x3c], eax
push ecx
push 4
lea eax, [ebx + 0x20]
push 0x28
push eax
lea eax, [edx + 0x1f]
mov dword [ebp - 0x44], 0x4002
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7c0
test ax, ax
je 0x52e744
mov ecx, dword [ebp - 0x5c]
push 0
movsx edx, word [ecx + 6]
lea eax, [ecx + 6]
push edx
push 0xe
call fcn.005275a0
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
push 0x1c6
push 0xed
add eax, 8
push 0x7530
lea ecx, [ebp - 0x44]
push 0
mov dword [ebp - 0x3c], eax
push ecx
push 4
lea eax, [ebx + 0x30]
push 0x28
push eax
lea eax, [edx + 0x1f]
mov dword [ebp - 0x44], 0x4002
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7c0
test ax, ax
je 0x52e79a
mov ecx, dword [ebp - 0x5c]
push 0
movsx edx, word [ecx + 8]
lea eax, [ecx + 8]
push edx
push 0xe
call fcn.005275a0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x30]
push 0x1c6
push 0xed
push 0xc8
lea edx, [ebp - 0x44]
add eax, 0xa
push 0
push edx
mov dword [ebp - 0x3c], eax
push 4
lea eax, [ecx + 0x69]
push 0x14
push ebx
push eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x44], 0x4002
call fcn.0043e7c0
mov ecx, dword [ebp - 0x5c]
push 0x1c6
push 0xed
push 0xc8
lea edx, [ebp - 0x44]
push 0
push edx
push 4
lea eax, [ebx + 0x10]
push 0x14
push eax
mov eax, dword [ebp - 0x30]
add ecx, 0xc
add eax, 0x69
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x44], 0x4002
call fcn.0043e7c0
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x30]
push 0x1c6
push 0xed
push 0xc8
lea eax, [ebp - 0x44]
push 0
push eax
push 4
lea eax, [ebx + 0x20]
add edx, 0xe
push 0x14
push eax
mov dword [ebp - 0x3c], edx
lea eax, [ecx + 0x69]
lea edx, [ebp - 0x20]
push eax
push edx
mov dword [ebp - 0x44], 0x4002
call fcn.0043e7c0
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
push 0x1c6
push 0xed
add eax, 0x10
push 0xc8
lea ecx, [ebp - 0x44]
push 0
mov dword [ebp - 0x3c], eax
push ecx
push 4
lea eax, [ebx + 0x30]
push 0x14
push eax
lea eax, [edx + 0x69]
mov dword [ebp - 0x44], 0x4002
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7c0
mov ecx, dword [ebp - 0x5c]
add ecx, 0x12
mov edx, dword [ebp - 0x30]
push 0x1c6
mov dword [ebp - 0x3c], ecx
push 0xed
push 0x3e7
lea ecx, [ebp - 0x44]
push 0
push ecx
push 4
lea eax, [edx + 0x9b]
push 0x19
push ebx
lea edx, [ebp - 0x20]
push eax
push edx
mov dword [ebp - 0x44], 0x4002
call fcn.0043e7c0
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x30]
push 0x1c6
push 0xed
add eax, 0x14
push 0x3e7
lea ecx, [ebp - 0x44]
push 0
mov dword [ebp - 0x3c], eax
push ecx
push 4
lea eax, [ebx + 0x10]
push 0x19
push eax
lea eax, [edx + 0x9b]
mov dword [ebp - 0x44], 0x4002
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0043e7c0
mov ecx, dword [ebp - 0x5c]
push 0x1c6
push 0xed
push 0x3e7
lea edx, [ebp - 0x44]
push 0
push edx
push 4
lea eax, [ebx + 0x20]
push 0x19
push eax
mov eax, dword [ebp - 0x30]
add ecx, 0x16
add eax, 0x9b
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x44], 0x4002
call fcn.0043e7c0
mov edx, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x30]
push 0x1c6
push 0xed
push 0x3e7
lea eax, [ebp - 0x44]
push 0
push eax
push 4
lea eax, [ebx + 0x30]
add edx, 0x18
push 0x19
push eax
mov dword [ebp - 0x3c], edx
lea eax, [ecx + 0x9b]
lea edx, [ebp - 0x20]
push eax
push edx
mov dword [ebp - 0x44], 0x4002
call fcn.0043e7c0
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x30]
add eax, 0xdc
cmp eax, 0x320
mov dword [ebp - 0x30], eax
jne 0x52e9ad
mov dword [ebp - 0x30], 0x168
add ebx, 0x6e
mov ecx, dword [ebp - 0x14]
mov eax, 1
add ecx, eax
mov dword [ebp - 0x14], ecx
mov eax, ecx
jmp 0x52e268
mov ax, word [0x56465a]
test ax, ax
jle 0x52e9ef
imul ax, ax, 0x64
mov edx, dword [ebp - 0x58]
sub eax, 0x64
movsx ecx, ax
add edx, 0xc
push ecx
push edx
push 0x14a
push 0x244
call fcn.0054b200
jmp 0x52e9f8
mov word [0x56465a], 1
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x4c]
push eax
call esi
lea ecx, [ebp - 0x50]
push ecx
call esi
push 0x52ea3d
jmp 0x52ea1b
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x4c]
push edx
call esi
lea eax, [ebp - 0x50]
push eax
call esi
lea ecx, [ebp - 0x54]
push ecx
call esi
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret