Function at 0x44d0a0
Capabilities:
Check http status code
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x4054c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4017f8
xor esi, esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x68], esi
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edi, dword [ebp + 8]
push edi
call fcn.0045b590
mov byte [ebp - 0x3c], al
mov dword [ebp - 4], 4
movzx ax, al
cmp word [0x54b204], ax
jle 0x44d19e
mov dword [ebp - 4], 5
mov word [0x54b204], ax
mov ebx, 6
mov dword [ebp - 4], ebx
cmp dword [0x549a04], 0x1dc
jle 0x44d1e2
mov dword [ebp - 4], 7
cmp dword [0x549b3c], esi
jne 0x44d202
mov dword [ebp - 4], 8
mov dword [0x549b3c], 0x3e7
mov dword [ebp - 4], 9
mov word [0x549b3a], si
jmp 0x44d202
mov dword [ebp - 4], 0xa
cmp dword [0x549b3c], 0x3e7
jne 0x44d202
mov dword [ebp - 4], 0xb
mov dword [0x549b3c], esi
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 4], 0xd
cmp word [0x549984], si
je 0x44d272
mov dword [ebp - 4], 0xe
mov eax, dword [0x54b25c]
fld dword [0x549a80]
fadd dword [eax + 0x3c]
fstp dword [eax + 0x3c]
mov dword [ebp - 4], 0xf
mov ecx, dword [0x54b25c]
fld dword [ecx + 0x3c]
fcomp dword [0x401730]
fnstsw ax
test ah, 0x41
jne 0x44d272
mov dword [ebp - 4], 0x10
push edi
call fcn.004498e0
mov dword [ebp - 4], 0x11
mov edx, dword [0x54b25c]
mov dword [edx + 0x3c], esi
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov ax, word [0x54b204]
cmp word [0x54b20c], ax
je 0x450464
mov dword [ebp - 4], 0x14
call fcn.0044ce80
mov dword [ebp - 4], 0x15
call fcn.00537280
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, 0x54b210
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
mov dword [ebp - 4], 0x17
mov edx, dword [ebp + 0x10]
mov edx, dword [edx]
mov ecx, 0x54b214
call edi
mov dword [ebp - 4], 0x18
mov ax, word [0x54b204]
mov word [0x54b20c], ax
mov dword [ebp - 4], 0x19
push esi
call fcn.0043ec30
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x54b25c]
mov dword [ecx + 0x38], esi
mov dword [ebp - 4], 0x1b
mov dword [0x54a700], ebx
mov dword [ebp - 4], 0x1c
mov eax, dword [0x549b2c]
mov edx, dword [eax]
push 0xff
push eax
call dword [edx + 0x3c]
fnclex
cmp eax, esi
jge 0x44d346
push 0x3c
push 0x421ec4
mov ecx, dword [0x549b2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d
mov ebx, 1
mov dword [ebp - 0x24], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, 8
cmp ebx, eax
jg 0x45045c
mov dword [ebp - 4], 0x1e
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x54b204]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
xor edx, edx
mov dl, byte [eax]
cmp ebx, edx
jg 0x450446
mov dword [ebp - 4], 0x20
mov edx, dword [eax + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
mov dl, byte [eax]
mov dword [ebp - 4], 0x21
cmp dl, 1
jne 0x44d5da
mov dword [ebp - 4], 0x22
mov eax, dword [0x549b40]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
fnclex
test eax, eax
jge 0x44d417
push 0x44
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x23
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x54b204]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [0x54a574], ecx
mov dword [ebp - 4], 0x24
mov dword [0x54a57c], 0
mov dword [ebp - 4], 0x25
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
cmp byte [ecx], 0
jbe 0x450446
mov dword [ebp - 4], 0x26
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x27
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
add eax, edx
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x20], ecx
mov dword [ebp - 4], 0x28
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx]
add edx, 0x64
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x29
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
mov dword [ebp - 0x1d0], edx
fild dword [ebp - 0x1d0]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x2a
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
xor edx, edx
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0x2b
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
jmp 0x450446
mov dword [ebp - 4], 0x2c
cmp dl, 2
jne 0x44d5fc
mov dword [ebp - 4], 0x2d
movsx edx, word [eax + 2]
push edx
call fcn.0043ec30
jmp 0x450446
mov dword [ebp - 4], 0x2e
cmp dl, 3
jne 0x44d6af
mov dword [ebp - 4], 0x2f
movsx ecx, word [eax + 2]
sub ecx, 0
je 0x44d674
dec ecx
je 0x44d64d
dec ecx
jne 0x450446
mov dword [ebp - 4], 0x33
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x54b210
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x450446
mov dword [ebp - 4], 0x32
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x54b214
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x450446
mov dword [ebp - 4], 0x30
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x54b210
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x31
xor edx, edx
mov ecx, 0x54b214
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x450446
mov dword [ebp - 4], 0x34
cmp dl, 4
jne 0x44da33
mov dword [ebp - 4], 0x35
mov cx, word [eax + 2]
test cx, cx
jle 0x450446
mov dword [ebp - 4], 0x36
cmp word [0x5499a8], 0
je 0x44d7f0
mov dword [ebp - 4], 0x37
mov eax, dword [eax + 4]
mov edx, dword [0x549b40]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423cf4
movsx ecx, cx
mov eax, dword [0x549b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44d76c
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x38
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d910
push 0xec
push 0x420aa0
mov edx, dword [0x549b40]
push edx
jmp 0x44d909
mov dword [ebp - 4], 0x39
mov eax, dword [eax + 4]
mov edx, dword [0x549b40]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x423cf4
movsx ecx, cx
mov eax, dword [0x549b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44d880
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d910
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x54b200]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x549b98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x3c
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x3d
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x3e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x3f
jmp 0x450440
mov dword [ebp - 4], 0x40
cmp dl, 5
jne 0x44dc87
mov dword [ebp - 4], 0x41
mov dx, word [eax + 2]
test dx, dx
jle 0x450446
mov dword [ebp - 4], 0x42
cmp word [0x5499a8], 0
je 0x44dae0
mov dword [ebp - 4], 0x43
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44db82
jmp 0x44db6a
mov dword [ebp - 4], 0x44
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44db82
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x45
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x46
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x47
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x49
jmp 0x450440
mov dword [ebp - 4], 0x4a
cmp dl, 6
jne 0x44dffb
mov dword [ebp - 4], 0x4b
mov dx, word [eax + 2]
test dx, dx
jle 0x450446
mov dword [ebp - 4], 0x4c
cmp word [0x5499a8], 0
je 0x44ddc0
mov dword [ebp - 4], 0x4d
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44dd47
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44df02
jmp 0x44deea
mov dword [ebp - 4], 0x4f
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44de62
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x50
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44df02
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x51
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x52
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x53
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x55
jmp 0x450440
mov dword [ebp - 4], 0x56
cmp dl, 7
jne 0x44e536
mov dword [ebp - 4], 0x57
cmp word [eax + 2], 0
jle 0x450446
mov dword [ebp - 4], 0x58
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x59
xor eax, eax
mov al, byte [ecx + 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x5a
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov eax, dword [eax + 0xc]
sub eax, ecx
mov dword [eax], 0
mov dword [ebp - 4], 0x5b
cmp word [0x5499a8], 0
je 0x44e201
mov dword [ebp - 4], 0x5c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov ecx, dword [0x549b40]
mov ecx, dword [ecx]
push 0
push 0
push 0
push edx
mov edx, dword [ebp - 0x38]
push edx
push 0xffffffffffffffff
push 0x423454
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, dword [0x549b9c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
push edx
mov dword [ebp - 0x1f0], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov eax, dword [0x549b40]
push eax
mov ecx, dword [ebp - 0x1f0]
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x44e12f
push 0xe8
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x5d
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44e3a3
mov dword [ebp - 4], 0x5f
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x60
mov eax, dword [0x549b40]
mov ecx, dword [eax]
push 0
push 0
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x38]
push edx
push ebx
push eax
call dword [ecx + 0xec]
fnclex
test eax, eax
jge 0x44e1f5
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x61
jmp 0x44e142
mov dword [ebp - 4], 0x62
lea eax, [edx + edx*2]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x549b40]
mov edx, dword [edx]
push 0
push ecx
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 5
push ecx
push 0
push 0
push 0
push 0x423454
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*4 + 2]
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
mov dword [ebp - 0x1f8], edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edx, dword [0x549b40]
push edx
mov eax, dword [ebp - 0x1f8]
call dword [eax + 0xe8]
fnclex
test eax, eax
jge 0x44e2c4
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x63
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x64
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44e3a3
mov dword [ebp - 4], 0x65
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x66
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
push eax
push 0
push 0
push ebx
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e397
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x67
jmp 0x44e2d7
mov dword [ebp - 4], 0x68
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 4], 0
mov dword [ebp - 4], 0x69
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx + 3]
add edx, 5
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x6a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov dword [ebp - 0x1fc], edx
fild dword [ebp - 0x1fc]
fstp dword [ebp - 0x200]
fld dword [ebp - 0x200]
fmul dword [0x549a74]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x6b
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x6c
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*4], eax
mov dword [ebp - 4], 0x6d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x6e
jmp 0x450440
mov dword [ebp - 4], 0x6f
cmp dl, 8
jne 0x44e9b4
mov dword [ebp - 4], 0x70
mov cx, word [eax + 2]
test cx, cx
jle 0x450446
mov dword [ebp - 4], 0x71
cmp word [0x5499a8], 0
je 0x44e6ed
mov dword [ebp - 4], 0x72
mov eax, dword [eax + 4]
mov edx, dword [0x549b40]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423cf4
movsx ecx, cx
mov eax, dword [0x549b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e5f3
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x73
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e675
push 0xec
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x74
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e891
push 0xec
push 0x420aa0
mov edx, dword [0x549b40]
push edx
jmp 0x44e88a
mov dword [ebp - 4], 0x75
mov eax, dword [eax + 4]
mov edx, dword [0x549b40]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x423cf4
movsx ecx, cx
mov eax, dword [0x549b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e77d
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x76
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e80d
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x77
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e891
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x78
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x54b200]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x549b98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 3]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x79
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x7a
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x7b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x7c
jmp 0x450440
mov dword [ebp - 4], 0x7d
cmp dl, 9
jne 0x44ecf3
mov dword [ebp - 4], 0x7e
cmp word [0x5499a8], 0
je 0x44eb1f
mov dword [ebp - 4], 0x7f
mov eax, dword [eax + 4]
mov edx, dword [0x549b40]
mov ecx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423ce4
push ebx
mov edx, dword [0x549b40]
push edx
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x44ea31
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x80
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44eaa7
push 0xec
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x81
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44ec8a
push 0xec
push 0x420aa0
mov edx, dword [0x549b40]
push edx
jmp 0x44ec83
mov dword [ebp - 4], 0x82
mov eax, dword [eax + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push 0
push 0x424bd4
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44eb82
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x83
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44ec06
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x84
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44ec8a
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x85
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x86
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x63
mov dword [ebp - 4], 0x87
mov dword [0x54a700], 0xc8
mov dword [ebp - 4], 0x88
mov word [0x54b218], bx
jmp 0x450446
mov dword [ebp - 4], 0x89
cmp dl, 0xa
jne 0x44eeb6
mov dword [ebp - 4], 0x8a
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx]
test al, al
jbe 0x44ed2e
mov dword [ebp - 4], 0x8b
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54a5d4], edx
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 1]
test al, al
jbe 0x44ed7b
mov dword [ebp - 4], 0x8d
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54a5d8], edx
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 2]
test al, al
jbe 0x44edc8
mov dword [ebp - 4], 0x8f
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54a5dc], edx
mov dword [ebp - 4], 0x90
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 3]
test al, al
jbe 0x44ee15
mov dword [ebp - 4], 0x91
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54a5e0], edx
mov dword [ebp - 4], 0x92
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 4]
test al, al
jbe 0x44ee62
mov dword [ebp - 4], 0x93
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54a5e4], edx
mov dword [ebp - 4], 0x94
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
sub ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ecx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 5]
test al, al
jbe 0x450446
mov dword [ebp - 4], 0x95
movzx ax, al
dec eax
movsx ecx, ax
mov dword [0x54a5e8], ecx
jmp 0x450446
mov dword [ebp - 4], 0x96
cmp dl, 0xd
jne 0x44f62c
mov dword [ebp - 4], 0x97
mov ax, word [eax + 2]
test ax, ax
jle 0x450446
mov dword [ebp - 4], 0x98
push 0x423fd8
movsx edx, ax
mov eax, dword [0x549ba0]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x549b40]
mov edx, dword [eax]
lea ecx, [ebp - 0xa0]
push ecx
push ebx
push eax
call dword [edx + 0xe4]
fnclex
test eax, eax
jge 0x44ef40
push 0xe4
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x99
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 4], 0
mov dword [ebp - 4], 0x9a
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x9b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x20c], edx
fild dword [ebp - 0x20c]
fstp dword [ebp - 0x210]
fld dword [ebp - 0x210]
fmul dword [0x549a78]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x9c
mov edx, dword [0x54b200]
push edx
lea eax, [ebp - 0x9c]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
mov eax, dword [0x54b200]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [0x549b40]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
add eax, 4
push eax
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
push eax
push 0
push ebx
mov edx, dword [0x549b40]
push edx
call dword [ecx + 0xf0]
fnclex
test eax, eax
jge 0x44f0c7
push 0xf0
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
lea ecx, [ebp - 0x98]
push ecx
call edi
lea edx, [ebp - 0x9c]
push edx
call edi
mov dword [ebp - 4], 0x9d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx ecx, word [ecx + eax*4 + 2]
mov eax, dword [0x549ba0]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*8 + 4]
mov eax, 2
sub eax, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov dword [edx + eax*4], ecx
mov dword [ebp - 4], 0x9e
mov eax, dword [0x54b200]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
shl ecx, 4
mov edx, dword [eax + 0xc]
mov eax, dword [ecx + edx + 0x14]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x214], edx
mov ecx, dword [eax + 0xc]
lea eax, [edx*4]
mov ebx, ecx
sub ebx, eax
mov eax, dword [ebx + 4]
mov ebx, 2
sub ebx, edx
cdq
idiv dword [ecx + ebx*4]
dec eax
mov edx, 3
sub edx, dword [ebp - 0x214]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0x9f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0xa0
test al, al
je 0x44f529
cmp al, 1
je 0x44f529
cmp al, 2
je 0x44f529
cmp al, 3
je 0x44f529
mov dword [ebp - 4], 0xa5
cmp al, 4
je 0x44f447
cmp al, 5
je 0x44f447
cmp al, 6
je 0x44f447
cmp al, 7
je 0x44f447
mov dword [ebp - 4], 0xaa
cmp al, 8
je 0x44f34a
cmp al, 9
je 0x44f34a
cmp al, 0xa
je 0x44f34a
cmp al, 0xb
je 0x44f34a
mov dword [ebp - 4], 0xaf
cmp al, 0xc
je 0x44f26e
cmp al, 0xd
je 0x44f26e
cmp al, 0xe
je 0x44f26e
cmp al, 0xf
jne 0x450446
mov dword [ebp - 4], 0xb0
xor dx, dx
mov dl, al
sub edx, 3
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xb1
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xb2
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xb3
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 2
jmp 0x450446
mov dword [ebp - 4], 0xab
xor cx, cx
mov cl, al
inc ecx
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xac
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xad
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x214], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov ecx, 0x12c
sub ecx, dword [eax + edx*4]
mov edx, 5
sub edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x218]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xae
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 2
jmp 0x450446
mov dword [ebp - 4], 0xa6
movzx ax, al
add eax, 5
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa7
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa8
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xa9
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 1
jmp 0x450446
mov dword [ebp - 4], 0xa1
xor cx, cx
mov cl, al
add ecx, 9
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa2
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa3
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x12c
sub edx, eax
mov eax, 5
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa4
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 1
jmp 0x450446
mov dword [ebp - 4], 0xb4
cmp dl, 0xe
jne 0x44fab4
mov dword [ebp - 4], 0xb5
mov dx, word [eax + 2]
test dx, dx
jle 0x450446
mov dword [ebp - 4], 0xb6
cmp word [0x5499a8], 0
je 0x44f7e3
mov dword [ebp - 4], 0xb7
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44f6ec
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xb8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f774
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xb9
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
add ecx, 2
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 3]
push ecx
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f9bb
jmp 0x44f9a3
mov dword [ebp - 4], 0xba
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44f885
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xbb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f925
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
movzx cx, byte [eax]
add ecx, 2
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 3]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f9bb
push 0xec
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbd
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xbe
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0xbf
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xc0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xc1
jmp 0x450440
mov dword [ebp - 4], 0xc2
cmp dl, 0xf
jne 0x44ff69
mov dword [ebp - 4], 0xc3
cmp word [eax + 2], 0
jle 0x450446
mov dword [ebp - 4], 0xc4
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
shl eax, 3
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0xc5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea edx, [eax + eax*2]
shl edx, 1
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
mov dword [ebp - 4], 0xc6
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xc7
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54a790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
mov dword [ebp - 4], pe_nt_image_headers32
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54a790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 2
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xc9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54a790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 3
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 0xc]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xca
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax + 4], 0xffffffff
jne 0x44fdbb
mov dword [ebp - 4], 0xcb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x54b204]
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [eax], ecx
mov dword [ebp - 4], 0xcc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx + 2]
mov edx, 4
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xcd
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x62
jmp 0x450446
mov dword [ebp - 4], 0xce
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
movsx eax, word [edx + eax*4 + 2]
mov edx, dword [0x54a790]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*8]
mov edx, dword [edx + 0xc]
fild dword [edx + eax*4 + 0x18]
fstp qword [ebp - 0x228]
fld dword [0x549a74]
fmul qword [ebp - 0x228]
fstp dword [ecx + 8]
mov dword [ebp - 4], 0xcf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x54b200]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54a790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4 + 0x10]
mov dword [edx], eax
mov dword [ebp - 4], 0xd0
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 4
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd1
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 3
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 5
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd2
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax], 0
jne 0x44ff56
mov dword [ebp - 4], 0xd3
mov dword [ecx + 0xc], 0xf
jmp 0x450446
mov dword [ebp - 4], 0xd4
mov dword [ecx + 0xc], 0x13
jmp 0x450446
mov dword [ebp - 4], 0xd5
cmp dl, 0x10
jne 0x4501c7
mov dword [ebp - 4], 0xd6
mov dx, word [eax + 2]
test dx, dx
jle 0x450446
mov dword [ebp - 4], 0xd7
cmp word [0x5499a8], 0
je 0x450016
mov dword [ebp - 4], 0xd8
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x4500b8
jmp 0x4500a0
mov dword [ebp - 4], 0xd9
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423454
movsx ecx, dx
mov eax, dword [0x549b9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x4500b8
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xda
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xdb
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x10
mov dword [ebp - 4], 0xdc
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov edx, dword [ecx + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 0x14]
xor edx, edx
mov dl, byte [eax + 3]
push edx
push ebx
xor edx, edx
mov dl, byte [eax + 2]
push edx
movsx eax, word [ecx + 4]
push eax
movsx ecx, word [ecx + 2]
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
call fcn.00446a30
mov dword [ebp - 4], 0xde
mov eax, dword [0x54b25c]
mov dword [eax + 0x38], ebx
mov dword [ebp - 4], 0xdf
jmp 0x450440
mov dword [ebp - 4], 0xe0
cmp dl, 0x11
jne 0x450446
mov dword [ebp - 4], 0xe1
mov dx, word [eax + 2]
test dx, dx
jle 0x450446
mov dword [ebp - 4], 0xe2
cmp word [0x5499a8], 0
je 0x450274
mov dword [ebp - 4], 0xe3
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x423cf4
movsx ecx, dx
mov eax, dword [0x549b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450316
jmp 0x4502fe
mov dword [ebp - 4], 0xe4
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x549b40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423cf4
movsx ecx, dx
mov eax, dword [0x549b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450316
push 0xe8
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x54b200]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x549b98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0xe6
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xe7
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0xe8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xe9
push ebx
call fcn.0044cf70
mov dword [ebp - 4], 0xea
mov eax, 1
add ebx, eax
mov dword [ebp - 0x24], ebx
jmp 0x44d361
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x450476
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0xeb
cmp dword [0x549a04], 0x19a
jle 0x450515
mov dword [ebp - 4], 0xec
call fcn.0043f3c0
mov dword [ebp - 4], 0xed
mov edx, dword [0x54b25c]
mov edx, dword [edx + 0x38]
test edx, edx
jle 0x4504e4
mov dword [ebp - 4], 0xee
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
push edx
movsx edx, word [eax + 4]
push edx
movsx eax, word [eax + 2]
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
call fcn.0045ad90
mov dword [ebp - 4], 0xef
mov eax, dword [0x549a04]
cmp eax, 0x1ce
jle 0x450515
cmp eax, 0x1da
jge 0x450515
mov eax, dword [0x549a00]
cmp eax, 0x300
jle 0x450515
cmp eax, 0x316
jl 0x45acc8
mov dword [ebp - 4], 0xf0
push 0x3f800000
push 0x209
push 0x54b214
push 0x54b210
call fcn.0043e270
mov dword [ebp - 4], 0xf1
cmp dword [0x54a700], 0xc8
jne 0x4505c4
mov dword [ebp - 4], 0xf2
movsx eax, word [0x54b218]
mov edx, dword [0x549b40]
mov edx, dword [edx]
push 0xffffffffffffffff
push 0
push 0x3f800000
mov ecx, dword [0x54b200]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x18]
push eax
push 0x258
push 0x320
mov eax, dword [0x549b6c]
lea ecx, [eax - 0x3c]
push ecx
push eax
movsx eax, word [0x54b218]
push eax
mov eax, dword [0x549b40]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x4505c4
push 0xf4
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf3
mov eax, dword [0x549b40]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x33
push 0x1b5
push 0
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x450603
push 0x58
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf4
mov dword [ebp - 0xd4], 0x3f800000
mov edx, dword [0x54b204]
inc edx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call ebx
push eax
push 0x424004
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call ebx
push eax
movzx ax, byte [ebp - 0x3c]
inc eax
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa8]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call ebx
lea ecx, [ebp - 0xd4]
push ecx
push 0x16d
push 0x1b6
push 3
lea edx, [ebp - 0xac]
push edx
push 0xe
call fcn.004392d0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
lea eax, [ebp - 0xa0]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov dword [ebp - 4], 0xf5
mov eax, dword [0x54a700]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xf7
mov eax, 0x1e0
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0xf8
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xf9
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.00536ee0
mov dword [ebp - 4], 0xfa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
movsx ecx, word [eax + 4]
mov dword [ebp - 0x160], ecx
movsx edx, word [eax + 2]
mov dword [ebp - 0x24], edx
mov edx, dword [0x549f54]
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x24], eax
jg 0x4515ca
mov dword [ebp - 4], 0xfb
xor ebx, ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x88], ebx
mov dword [ebp - 4], 0xfd
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 4], 0xfe
mov dword [ebp - 0x78], 0x1dc
mov dword [ebp - 4], 0xff
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea eax, [eax + ecx*2]
mov cl, byte [eax + 1]
mov byte [ebp - 0x239], cl
mov dword [ebp - 4], 0x100
cmp cl, 9
jne 0x4507e4
mov dword [ebp - 4], 0x101
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x60], 0x2d7
jmp 0x450dd0
mov dword [ebp - 4], 0x103
cmp cl, 0xa
jne 0x450830
mov dword [ebp - 4], 0x104
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x8ca]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x105
mov dword [ebp - 0x60], 0x2ec
jmp 0x450dd0
mov dword [ebp - 4], 0x106
cmp cl, 0x61
jne 0x450995
mov dword [ebp - 4], 0x107
mov al, byte [eax]
mov byte [ebp - 0x240], al
xor cx, cx
mov cl, al
sub ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x108
mov dword [ebp - 0x60], 0x301
mov dword [ebp - 4], 0x109
xor ecx, ecx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 1]
cmp dword [ebp - 0x38], ecx
jg 0x45095c
mov dword [ebp - 4], 0x10a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
mov edx, dword [ebp - 0x38]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8 + 4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x549b54], eax
mov dword [ebp - 4], 0x10b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8 + 4]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x549b50], eax
mov dword [ebp - 4], 0x10c
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x549f54]
mov ecx, dword [0x549b54]
dec ecx
cmp eax, ecx
jg 0x450946
mov dword [ebp - 4], 0x10d
mov ecx, eax
mov eax, dword [0x549b5c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x10e
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4508e1
mov dword [ebp - 4], 0x10f
mov dword [ebp - 0x88], 0xffffffff
jmp 0x450dd0
mov dword [ebp - 4], 0x110
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
mov eax, dword [ebp - 0x240]
and eax, 0xff
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, ecx
mov dword [ebp - 0x5c], ebx
jmp 0x450dd0
mov dword [ebp - 4], 0x111
cmp cl, 0x62
jne 0x450a82
mov dword [ebp - 4], 0x112
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x170], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x170]
jg 0x450a60
mov dword [ebp - 4], 0x113
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
movzx cx, byte [ecx + ebx*4 + 2]
movzx bx, byte [eax]
add ebx, 0x20
cmp cx, bx
je 0x450a14
mov dword [ebp - 4], 0x117
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x4509be
mov dword [ebp - 4], 0x114
mov ecx, dword [0x549a00]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x450a60
add eax, 0x15
cmp ecx, eax
jge 0x450a60
mov ecx, dword [0x549a04]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x450a60
add eax, 0x15
cmp ecx, eax
jge 0x450a60
mov dword [ebp - 4], 0x115
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0x116
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x118
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x119
mov dword [ebp - 0x60], 0x2d7
jmp 0x450dd0
mov dword [ebp - 4], 0x11a
cmp cl, 0x63
jne 0x450cfc
mov dword [ebp - 4], 0x11b
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x178], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x178]
jg 0x450ca9
mov dword [ebp - 4], 0x11c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + ebx*4]
mov bl, byte [ecx + 2]
cmp bl, byte [eax]
je 0x450af9
mov dword [ebp - 4], 0x12b
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x450aab
mov dword [ebp - 4], 0x11d
movzx dx, byte [ecx]
lea eax, [edx*8]
sub eax, edx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x11e
cmp eax, 0x2fc
jne 0x450b3b
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x60], 0x15e
jmp 0x450b57
mov dword [ebp - 4], 0x120
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx edx, ax
mov dword [ebp - 0x60], edx
mov dword [ebp - 4], 0x121
mov eax, dword [ecx + 0x10]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x549b54], eax
mov dword [ebp - 4], 0x122
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x10]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x549b50], eax
mov dword [ebp - 4], 0x123
mov ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x124
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x450bf2
mov dword [ebp - 4], 0x125
push 0
push 0
push 0
mov cl, byte [eax + 0xc]
push ecx
call fcn.00448700
mov ebx, eax
add ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x126
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x549f54]
mov ecx, dword [0x549b54]
dec ecx
cmp eax, ecx
jg 0x450c69
mov dword [ebp - 4], 0x127
mov ecx, eax
mov eax, dword [0x549b5c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x59a]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x128
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x450c04
mov dword [ebp - 4], 0x129
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x549a00]
cmp ecx, eax
jle 0x450cac
add eax, ebx
cmp ecx, eax
jge 0x450cac
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x549a04]
cmp ecx, eax
jle 0x450cac
add eax, 0x15
cmp ecx, eax
jge 0x450cac
mov dword [ebp - 4], 0x12a
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x48], ecx
jmp 0x450cac
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x12c
test ebx, ebx
jne 0x450dd0
mov dword [ebp - 4], 0x12d
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x12e
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 4], 0x12f
mov dword [ebp - 0x60], 0x2d7
mov dword [ebp - 4], 0x130
mov dword [ebp - 0x88], 0x2fc
jmp 0x450dd0
mov dword [ebp - 4], 0x131
cmp cl, 0x64
jne 0x450d7e
mov dword [ebp - 4], 0x132
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
cmp dword [ebp - 0x24], eax
jle 0x450dd0
mov dword [ebp - 4], 0x133
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005370f0
mov dword [ebp - 4], 0x134
mov ecx, dword [0x54a700]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x135
add dword [ebp - 0x68], 0x17
mov edx, dword [0x549f54]
jmp 0x450dd0
mov dword [ebp - 4], 0x136
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x137
movzx cx, byte [ebp - 0x239]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2 + 0x21a]
movsx eax, cx
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0x138
test ebx, ebx
jle 0x451587
mov dword [ebp - 4], 0x139
mov ecx, dword [ebp - 0x8c]
add ecx, ebx
cmp ecx, 0x319
jle 0x450e39
mov dword [ebp - 4], 0x13a
mov byte [ebp - 0xd0], 0
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.005370f0
mov dword [ebp - 4], 0x13b
mov edx, dword [0x54a700]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 4], 0x13c
add dword [ebp - 0x68], 0x17
mov dword [ebp - 4], 0x13d
mov edx, dword [ebp - 0x68]
cmp edx, 0x244
jg 0x4515ca
mov dword [ebp - 4], 0x13e
mov eax, dword [ebp - 0x88]
cmp eax, 0xffffffff
je 0x45134a
test eax, eax
je 0x451289
mov dword [ebp - 4], 0x14d
mov ecx, dword [0x549a00]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x450fff
add eax, ebx
cmp ecx, eax
jge 0x450fff
mov eax, dword [0x549a04]
cmp eax, edx
jle 0x450fff
add edx, 0x15
cmp eax, edx
jge 0x450fff
mov dword [ebp - 4], 0x14e
mov eax, dword [ebp - 0x38]
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x14f
cmp word [0x549978], 0
je 0x450edb
mov dword [ebp - 4], 0x150
mov dword [ebp - 0x7c], 0x190
jmp 0x450ee9
mov dword [ebp - 4], 0x151
mov dword [ebp - 0x78], 0x1ed
mov dword [ebp - 4], 0x152
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 6], 0xfffe
jne 0x450f5f
mov dword [ebp - 4], 0x153
push ecx
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0xc]
push ecx
call fcn.0045dc70
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
movsx eax, word [ebp - 0xd0]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x154
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff9
jne 0x450f9f
mov dword [ebp - 4], 0x155
mov cx, word [eax + 4]
push ecx
call fcn.004a4ce0
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x156
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff7
jne 0x450fff
mov dword [ebp - 4], 0x157
movsx ecx, word [eax + 4]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0x158
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x14]
shl edx, 3
mov ecx, dword [ecx + 0xc]
sub ecx, edx
movsx edx, word [ecx + 0xa]
mov dword [ebp - 0x80], edx
mov dword [ebp - 4], 0x159
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x15a
mov eax, dword [0x549b40]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 0x15
push 5
mov edx, dword [ebp - 0x88]
push edx
mov edx, dword [ebp - 0x7c]
push edx
mov edx, dword [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x8c]
push edx
push 2
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x451054
push 0x7c
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15b
mov eax, dword [0x549b40]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
lea ecx, [ebx - 5]
push ecx
mov ecx, dword [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x7c]
sub ecx, ebx
add ecx, 0x195
push ecx
mov ecx, dword [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x8c]
add ecx, 5
push ecx
push 2
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x4510b6
push 0x7c
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15c
mov eax, dword [ebp - 0x38]
cmp eax, 0xa
jge 0x451574
mov dword [ebp - 4], 0x15d
mov dword [ebp - 0x88], 3
mov dword [ebp - 4], 0x15e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x45112c
mov dword [ebp - 4], 0x15f
mov ecx, dword [ebp - 0x68]
add ecx, 3
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 3
push edx
push 0xffffffffffffffff
mov al, byte [eax + 0xc]
push eax
call fcn.00448700
add eax, 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x160
mov ecx, dword [0x549b54]
dec ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x30], 0
mov edx, dword [0x549f54]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
jg 0x45157a
mov dword [ebp - 4], 0x161
mov eax, dword [0x549b5c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 4], 0x162
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x11
push 0xa
mov ecx, dword [ebp - 0x78]
push ecx
push ebx
mov eax, dword [ebp - 0x68]
add eax, 3
push eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
lea ecx, [ecx + eax - 1]
push ecx
push 5
mov eax, dword [0x549b40]
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x4511e5
push 0x7c
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x163
mov eax, dword [0x549b40]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0xf
push 0xa
mov ecx, dword [ebp - 0x60]
push ecx
push ebx
mov ecx, dword [ebp - 0x68]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x8c]
mov ebx, dword [ebp - 0x88]
add ecx, ebx
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x45123f
push 0x7c
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x164
mov edx, dword [0x549f54]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor eax, eax
mov ebx, dword [ebp - 0x64]
mov al, byte [ecx + ebx + 0x59a]
add dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x165
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x45114d
mov dword [ebp - 4], 0x13f
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov edx, dword [0x549b40]
mov edx, dword [edx]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
push 0x15
mov ecx, dword [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov eax, dword [ebp - 0x8c]
push eax
push 5
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451302
push 0x7c
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x140
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*2]
push ecx
call fcn.005370f0
lea edx, [ebp - 0x90]
push edx
call edi
jmp 0x451574
mov dword [ebp - 4], 0x141
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x142
mov ecx, dword [0x549b54]
dec ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x30]
cmp eax, edx
jg 0x451452
mov dword [ebp - 4], 0x143
mov ecx, eax
mov eax, dword [0x549b5c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 4], 0x144
mov ecx, dword [0x549b40]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x15
push 0x15
push 0x301
lea eax, [ebx*8]
sub eax, ebx
lea ecx, [eax + eax*2]
push ecx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
add eax, ecx
push eax
push 5
mov ecx, dword [0x549b40]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x45140b
push 0x7c
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x145
mov edx, dword [0x549f54]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor edx, edx
mov dl, byte [ecx + ebx + 0x798]
add dword [ebp - 0x88], edx
mov dword [ebp - 4], 0x146
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x451370
mov dword [ebp - 4], 0x147
mov eax, dword [0x549b40]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 4
push 2
push 0x216
push 0x4d4
mov edx, dword [ebp - 0x68]
add edx, 0xf
push edx
mov edx, dword [ebp - 0x8c]
add edx, 0xfffffffe
push edx
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x4514ac
push 0x7c
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x148
mov eax, dword [0x549b40]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 4
lea ecx, [ebx + 2]
push ecx
push 0x216
mov ecx, 0x7c9
sub ecx, ebx
push ecx
mov ecx, dword [ebp - 0x68]
add ecx, 0xf
push ecx
mov ecx, dword [ebp - 0x8c]
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451508
push 0x7c
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x149
mov eax, dword [0x549a00]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x451574
add ecx, ebx
cmp eax, ecx
jge 0x451574
mov ecx, dword [0x549a04]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x451574
add eax, 0x15
cmp ecx, eax
jge 0x451574
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
cmp byte [eax], 0
jne 0x451566
mov dword [ebp - 4], 0x14b
movsx eax, word [eax + 2]
mov dword [ebp - 0x44], eax
jmp 0x451574
mov dword [ebp - 4], 0x14c
movsx ecx, word [eax + 2]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x549f54]
mov dword [ebp - 4], 0x166
add dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x167
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x54b208]
jne 0x4515b6
mov dword [ebp - 4], 0x168
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 4], 0x169
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x16a
mov eax, 1
add dword [ebp - 0x24], eax
jmp 0x450754
mov dword [ebp - 4], 0x16b
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005370f0
mov dword [ebp - 4], 0x16c
call fcn.00537200
mov dword [ebp - 4], 0x16d
mov eax, dword [ebp - 0x40]
cmp eax, 0x253
jne 0x451632
mov dword [ebp - 4], 0x16e
inc word [0x54b204]
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45ad75
jmp 0x45ad5c
mov dword [ebp - 4], 0x16f
cmp dword [0x549b3c], 0x3e7
jne 0x451c11
mov dword [ebp - 4], 0x170
mov cx, word [0x549b3a]
mov dword [ebp - 4], 0x171
cmp cx, 7
jne 0x451679
mov dword [ebp - 4], 0x172
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045b9e0
jmp 0x451b16
mov dword [ebp - 4], 0x173
cmp cx, 8
jne 0x45169b
mov dword [ebp - 4], 0x174
mov edx, dword [ebp + 8]
push edx
call fcn.0045bc60
jmp 0x451b16
mov dword [ebp - 4], 0x175
cmp cx, 0x18
jne 0x4516e1
mov dword [ebp - 4], 0x176
mov word [0x54b204], 0
mov dword [ebp - 4], 0x177
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
movsx eax, word [edx + 2]
mov dword [0x54b208], eax
jmp 0x451b16
mov dword [ebp - 4], 0x178
cmp cx, 0x19
jne 0x451729
mov dword [ebp - 4], 0x179
movzx ax, byte [ebp - 0x3c]
mov word [0x54b204], ax
mov dword [ebp - 4], 0x17a
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 2]
mov dword [0x54b208], ecx
jmp 0x451b16
mov dword [ebp - 4], 0x17b
cmp cx, 0x1a
jne 0x451784
mov dword [ebp - 4], 0x17c
mov ax, word [0x54b204]
test ax, ax
jle 0x451b16
mov dword [ebp - 4], 0x17d
dec ax
mov word [0x54b204], ax
mov dword [ebp - 4], 0x17e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x54b208], edx
jmp 0x451b16
mov dword [ebp - 4], 0x17f
cmp cx, 0x1b
jne 0x4517e4
mov dword [ebp - 4], 0x180
movzx cx, byte [ebp - 0x3c]
mov ax, word [0x54b204]
cmp ax, cx
jge 0x451b16
mov dword [ebp - 4], 0x181
inc ax
mov word [0x54b204], ax
mov dword [ebp - 4], 0x182
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x54b208], edx
jmp 0x451b16
mov dword [ebp - 4], 0x183
cmp cx, 0x1c
jne 0x451810
mov dword [ebp - 4], 0x184
push 0
add eax, 0xffffffe9
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045af90
jmp 0x451b16
mov dword [ebp - 4], 0x185
cmp cx, 0x1d
jne 0x45183e
mov dword [ebp - 4], 0x186
mov edx, dword [ebp - 0x3c]
push edx
add eax, 0x17
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045af90
jmp 0x451b16
mov dword [ebp - 4], 0x187
cmp cx, 0x1e
jne 0x451871
mov dword [ebp - 4], 0x188
mov eax, dword [0x54b208]
test eax, eax
jle 0x451b16
mov dword [ebp - 4], 0x189
dec eax
mov dword [0x54b208], eax
jmp 0x451b16
mov dword [ebp - 4], 0x18a
cmp cx, 0x1f
jne 0x4518b6
mov dword [ebp - 4], 0x18b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [0x54b208]
cmp ecx, eax
jge 0x451b16
mov dword [ebp - 4], 0x18c
mov eax, ecx
inc eax
mov dword [0x54b208], eax
jmp 0x451b16
mov dword [ebp - 4], 0x18d
cmp cx, 0xd
je 0x4518d7
cmp cx, 0x20
jl 0x451b16
cmp cx, 0x7e
jg 0x451b16
mov dword [ebp - 4], 0x18e
mov ebx, dword [ebp + 8]
push ebx
call fcn.0045bac0
mov dword [ebp - 4], 0x18f
mov ax, word [0x549b3a]
cmp ax, 0xd
jne 0x45195f
mov dword [ebp - 4], 0x190
mov ebx, dword [ebx + 4]
mov ecx, dword [0x54b208]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2 + 1], 0x64
mov dword [ebp - 4], 0x191
cmp dword [ebp - 0x68], 0x23c
jne 0x451b16
mov dword [ebp - 4], 0x192
inc word [0x54b204]
mov dword [ebp - 4], 0x193
mov word [0x549b3a], 0
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45ad75
jmp 0x45ad5c
mov dword [ebp - 4], 0x194
mov ecx, dword [0x54b25c]
mov edx, dword [ecx + 0x2c]
sub edx, 9
je 0x451a43
sub edx, 2
je 0x4519c0
mov dword [ebp - 4], 0x1a4
mov eax, dword [ebx + 4]
mov edx, dword [0x54b208]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cl, byte [ecx + 0x2c]
mov byte [eax + edx*2 + 1], cl
mov dword [ebp - 4], 0x1a5
mov ebx, dword [ebx + 4]
mov dl, byte [0x549b3a]
sub dl, 0x20
mov eax, dword [0x54b208]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov byte [ecx + eax*2], dl
jmp 0x451b16
mov dword [ebp - 4], 0x19e
mov dword [ebp - 4], 0x19f
cmp ax, 0x31
jl 0x451a1c
cmp ax, 0x39
jg 0x451a1c
mov dword [ebp - 4], 0x1a0
mov eax, dword [ebx + 4]
mov edx, dword [0x54b208]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov byte [eax + edx*2 + 1], 0x61
mov dword [ebp - 4], 0x1a1
mov ebx, dword [ebx + 4]
mov cl, byte [0x549b3a]
sub cl, 0x20
mov edx, dword [0x54b208]
sub edx, dword [ebx + 0x14]
mov eax, dword [ebx + 0xc]
mov byte [eax + edx*2], cl
jmp 0x451b16
mov dword [ebp - 4], 0x1a2
mov eax, dword [ebx + 4]
mov ecx, dword [0x54b208]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0xb
mov dword [ebp - 4], 0x1a3
jmp 0x451afd
mov dword [ebp - 4], 0x195
mov dword [ebp - 4], 0x196
cmp ax, 0x31
jl 0x451a98
cmp ax, 0x39
jg 0x451a98
mov dword [ebp - 4], 0x197
mov eax, dword [ebx + 4]
mov ecx, dword [0x54b208]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x63
mov dword [ebp - 4], 0x198
mov ebx, dword [ebx + 4]
mov eax, dword [0x54b208]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov dl, byte [0x549b3a]
mov byte [ecx + eax*2], dl
jmp 0x451b16
mov dword [ebp - 4], 0x199
cmp ax, 0x41
jl 0x451aab
cmp ax, 0x5a
jle 0x451ab7
cmp ax, 0x61
jl 0x451adb
cmp ax, 0x7a
jg 0x451adb
mov dword [ebp - 4], 0x19a
mov eax, dword [ebx + 4]
mov ecx, dword [0x54b208]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x62
mov dword [ebp - 4], 0x19b
jmp 0x451afd
mov dword [ebp - 4], 0x19c
mov eax, dword [ebx + 4]
mov ecx, dword [0x54b208]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 9
mov dword [ebp - 4], 0x19d
mov ebx, dword [ebx + 4]
mov al, byte [0x549b3a]
sub al, 0x20
mov ecx, dword [0x54b208]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2], al
mov dword [ebp - 4], 0x1a6
cmp word [0x549b3a], 0
je 0x451b38
mov dword [ebp - 4], 0x1a7
mov dword [0x54a704], 0x42a20000
mov dword [ebp - 4], 0x1a8
fld dword [0x549a70]
fadd dword [0x54a704]
fstp dword [0x54a704]
mov dword [ebp - 4], 0x1a9
fld dword [0x54a704]
fcomp dword [0x401554]
fnstsw ax
test ah, 0x41
jne 0x451c01
mov dword [ebp - 4], 0x1aa
mov edx, dword [0x549b40]
mov ebx, dword [edx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x14
push 6
mov ecx, dword [0x54b25c]
mov ecx, dword [ecx + 0x2c]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2 + 0x21a]
push eax
push 0x78c
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x4c]
push eax
push 5
push edx
call dword [ebx + 0x7c]
fnclex
test eax, eax
jge 0x451bd6
push 0x7c
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1ab
fld dword [0x54a704]
fcomp dword [0x401550]
fnstsw ax
test ah, 0x41
jne 0x451c01
mov dword [ebp - 4], 0x1ac
mov dword [0x54a704], 0
mov dword [ebp - 4], 0x1ad
mov word [0x549b3a], 0
mov dword [ebp - 4], 0x1ae
mov edx, dword [0x54b25c]
mov al, byte [edx + 0x34]
mov dword [ebp - 4], 0x1af
test al, al
jne 0x4520d4
mov dword [ebp - 4], 0x1b0
mov edx, 0x424bf0
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451c90
mov dword [ebp - 4], 0x1b1
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1b2
mov eax, dword [0x549b40]
mov ecx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x26f
push 0x1a8
push 0x1bf
push eax
call dword [ecx + 0x58]
fnclex
test eax, eax
jge 0x451cd5
push 0x58
push 0x420aa0
mov edx, dword [0x549b40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1b3
mov edx, 0x424dc4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x241
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451d32
mov dword [ebp - 4], 0x1b4
mov dword [ebp - 0x34], 4
mov dword [ebp - 4], 0x1b5
mov edx, 0x424a00
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b8
push 0x243
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451d8f
mov dword [ebp - 4], 0x1b6
mov dword [ebp - 0x34], 3
mov dword [ebp - 4], 0x1b7
cmp word [0x54b21a], 0
je 0x451e5e
mov dword [ebp - 4], 0x1b8
mov edx, 0x424a14
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451e01
mov dword [ebp - 4], 0x1b9
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1ba
mov edx, 0x424dd8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x1c0
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x451ef9
mov dword [ebp - 4], 0x1bb
mov dword [ebp - 0x34], 2
jmp 0x451ef9
mov dword [ebp - 4], 0x1bc
mov edx, 0x424df4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451ebb
mov dword [ebp - 4], 0x1bd
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1be
mov edx, 0x424dd8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1c8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1bf
mov eax, dword [0x549b40]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f000000
push 0x31
push 0xae
push 0x1e5
push 0x640
push 0x1a8
push 0x271
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x451f4f
push 0x7c
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1c0
mov edx, dword [0x549a00]
cmp edx, 0x270
jle 0x452056
mov dword [ebp - 4], 0x1c1
xor eax, eax
mov dword [ebp - 4], 0x1c2
mov ecx, dword [0x549a04]
cmp ecx, 0x1a7
jle 0x451fcb
cmp ecx, 0x1c0
jge 0x451fcb
mov dword [ebp - 4], 0x1c3
add edx, 0xfffffd9c
mov dword [ebp - 0x244], edx
fild dword [ebp - 0x244]
fstp qword [ebp - 0x24c]
fld qword [ebp - 0x24c]
fdiv qword [0x4020c8]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [0x549a04]
mov edx, dword [0x549a00]
mov dword [ebp - 4], 0x1c4
cmp ecx, 0x1c2
jle 0x452013
cmp ecx, 0x1e0
jge 0x452013
mov dword [ebp - 4], 0x1c5
add edx, 0xfffffe4b
mov dword [ebp - 0x250], edx
fild dword [ebp - 0x250]
fstp qword [ebp - 0x258]
fld qword [ebp - 0x258]
fdiv qword [0x4020c8]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 4], 0x1c6
test eax, eax
jle 0x452056
cmp eax, 0xe
jge 0x452056
mov dword [ebp - 4], 0x1c7
lea ebx, [eax - 1]
push 0
push ebx
call fcn.0043e120
mov dword [ebp - 4], 0x1c8
cmp word [0x549978], 0
je 0x452056
mov dword [ebp - 4], 0x1c9
mov edx, dword [0x54b25c]
mov dword [edx + 0x2c], ebx
mov dword [ebp - 4], 0x1ca
push 0xffffffffffffffff
mov eax, dword [0x54b25c]
mov ecx, dword [eax + 0x2c]
push ecx
call fcn.0043e120
mov dword [ebp - 4], 0x39d
cmp word [0x549978], 0
jne 0x45abe5
mov dword [ebp - 4], 0x39e
mov eax, dword [0x54b25c]
mov eax, dword [eax + 0x30]
mov ebx, dword [ebp - 0x34]
cmp eax, ebx
jne 0x45ac05
mov dword [ebp - 4], 0x39f
mov dword [ebp - 4], 0x3a0
mov edx, 1
cmp eax, edx
jne 0x458fd6
mov dword [ebp - 4], 0x3a1
mov cx, word [0x54b21a]
not cx
mov word [0x54b21a], cx
jmp 0x45abcf
mov dword [ebp - 4], 0x1cb
cmp al, 1
jne 0x45206d
mov dword [ebp - 4], 0x1cc
mov edx, 0x424e08
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45213f
mov dword [ebp - 4], 0x1cd
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1ce
mov edx, 0x424e10
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x196
push 0x16
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452199
mov dword [ebp - 4], 0x1cf
mov dword [ebp - 0x34], 5
mov dword [ebp - 4], 0x1d0
cmp word [0x54b232], 0
je 0x452227
mov dword [ebp - 4], 0x1d1
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp byte [eax + edx*4], 8
jae 0x452227
mov dword [ebp - 4], 0x1d2
mov edx, 0x424e20
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x16
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452227
mov dword [ebp - 4], 0x1d3
mov dword [ebp - 0x34], 8
mov dword [ebp - 4], 0x1d4
mov eax, dword [0x549b40]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x320
push 0x19d
push 0x120
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x45226c
push 0x58
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
cmp byte [ecx + eax*4], 8
jae 0x452bcc
mov dword [ebp - 4], 0x1d6
mov eax, dword [0x549b40]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x11d
push 0x197
push 0x44
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x4522d5
push 0x58
push 0x420aa0
mov ecx, dword [0x549b40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d7
mov edx, 0x424e30
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1d8
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x58
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45236a
mov dword [ebp - 4], 0x1d9
mov dword [ebp - 0x34], 0x12
mov dword [ebp - 4], 0x1da
mov edx, 0x424e3c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x6b
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1db
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x7e
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4523ff
mov dword [ebp - 4], 0x1dc
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 4], 0x1dd
mov edx, 0x424e48
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x91
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1de
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xaa
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45249a
mov dword [ebp - 4], 0x1df
mov dword [ebp - 0x34], 0x14
mov dword [ebp - 4], 0x1e0
mov edx, 0x424e54
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xbd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e1
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xd7
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452535
mov dword [ebp - 4], 0x1e2
mov dword [ebp - 0x34], 0x15
mov dword [ebp - 4], 0x1e3
mov edx, 0x424e60
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xe8
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e4
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 9
push 0
push 0x197
push 0xfd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4525d0
mov dword [ebp - 4], 0x1e5
mov dword [ebp - 0x34], 0x16
mov dword [ebp - 4], 0x1e6
mov edx, 0x424e6c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0x44
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e7
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x5d
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452665
mov dword [ebp - 4], 0x1e8
mov dword [ebp - 0x34], 0xe
mov dword [ebp - 4], 0x1e9
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 1
push 0
push 0x1a6
push 0x70
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4526bf
mov dword [ebp - 4], 0x1ea
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 4], 0x1eb
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 0
push 0x1a6
push 0x83
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45271c
mov dword [ebp - 4], 0x1ec
mov dword [ebp - 0x34], 0x17
mov dword [ebp - 4], 0x1ed
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 3
push 0
push 0x1a6
push 0x96
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452779
mov dword [ebp - 4], 0x1ee
mov dword [ebp - 0x34], 0x19
mov dword [ebp - 4], 0x1ef
mov edx, 0x424e78
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0xe
push 0x1a6
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f0
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 4
push 0
push 0x1a6
push 0xc2
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452814
mov dword [ebp - 4], 0x1f1
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 4], 0x1f2
mov edx, 0x424e88
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0xd5
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f3
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 0
push 0x1a6
push 0xe8
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4528af
mov dword [ebp - 4], 0x1f4
mov dword [ebp - 0x34], 0x11
mov dword [ebp - 4], 0x1f5
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 7
push 0
push 0x1a6
push 0xfb
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45290c
mov dword [ebp - 4], 0x1f6
mov dword [ebp - 0x34], 0xd
mov dword [ebp - 4], 0x1f7
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x1a6
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452969
mov dword [ebp - 4], 0x1f8
mov dword [ebp - 0x34], 0x1a
mov dword [ebp - 4], 0x1f9
mov edx, 0x424e94
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fa
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0x69
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4529fe
mov dword [ebp - 4], 0x1fb
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 4], 0x1fc
mov edx, 0x424ea8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x7c
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fd
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452a96
mov dword [ebp - 4], 0x1fe
mov dword [ebp - 0x34], 0xb
mov dword [ebp - 4], 0x1ff
mov edx, 0x424ebc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xbd
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x200
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xdc
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452b31
mov dword [ebp - 4], 0x201
mov dword [ebp - 0x34], 0xc
mov dword [ebp - 4], 0x202
mov edx, 0x424ecc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xee
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x203
mov edx, 0x423f34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 8
push 0
push 0x1b5
push 0x104
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452bcc
mov dword [ebp - 4], 0x204
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 4], 0x205
mov edx, 0x424ed8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 5
push 0x197
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452c29
mov dword [ebp - 4], 0x206
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0x207
mov edx, dword [0x54b25c]
mov al, byte [edx + 0x35]
test al, al
jbe 0x453034
mov dword [ebp - 4], 0x208
cmp al, 5
jae 0x452e5a
mov dword [ebp - 4], 0x209
mov dword [ebp - 0x8c], 0x120
mov dword [ebp - 4], 0x20a
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x18e]
movsx ecx, ax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0x20b
mov cl, byte [edx + 0x35]
cmp cl, 1
jbe 0x452d8b
mov dword [ebp - 4], 0x20c
mov edx, 0x424ee0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xff
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452d02
mov dword [ebp - 4], 0x20d
mov edx, dword [0x54b25c]
movzx ax, byte [edx + 0x35]
add eax, 0x3e8
movsx ecx, ax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x20e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [0x54b25c]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x452e17
mov dword [ebp - 4], 0x20f
mov edx, 0x424ee8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x10a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x452e17
mov dword [ebp - 4], 0x210
jmp 0x452e01
mov dword [ebp - 4], 0x211
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
cmp cl, byte [edx + eax*4]
jae 0x452e17
mov dword [ebp - 4], 0x212
mov edx, 0x424ee8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xff
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x452e17
mov dword [ebp - 4], 0x213
mov eax, dword [0x54b25c]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x214
mov eax, dword [0x549a00]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x452e4e
add ecx, 0x116
cmp eax, ecx
jge 0x452e4e
mov eax, dword [0x549a04]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x452e4e
add ecx, 0xf
cmp eax, ecx
jl 0x453034
mov dword [ebp - 4], 0x215
jmp 0x45302b
mov dword [ebp - 4], 0x216
mov dword [ebp - 0x8c], 0x220
mov dword [ebp - 4], 0x217
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4 + 0x152]
movsx eax, cx
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0x218
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x452f87
mov dword [ebp - 4], 0x219
mov edx, 0x424ee0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xffffffea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452f20
mov dword [ebp - 4], 0x21a
mov eax, dword [0x54b25c]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21b
mov edx, 0x424ee8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x452fee
mov dword [ebp - 4], 0x21c
mov eax, dword [0x54b25c]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
jmp 0x452fe8
mov dword [ebp - 4], 0x21d
mov edx, 0x424ee0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x452fee
mov dword [ebp - 4], 0x21e
mov eax, dword [0x54b25c]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21f
mov ecx, dword [ebp - 0x8c]
lea edx, [ecx - 0x16]
mov eax, dword [0x549a00]
cmp eax, edx
jle 0x453024
add ecx, 0x100
cmp eax, ecx
jge 0x453024
mov eax, dword [0x549a04]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x453024
add ecx, 0xf
cmp eax, ecx
jl 0x453034
mov dword [ebp - 4], 0x220
mov eax, dword [0x54b25c]
mov byte [eax + 0x35], 0
mov dword [ebp - 4], 0x221
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [eax + edx*4]
mov dword [ebp - 0x1a0], ecx
mov ebx, 1
cmp ebx, dword [ebp - 0x1a0]
jg 0x45206d
mov dword [ebp - 4], 0x222
cmp ebx, 5
jge 0x45309e
mov dword [ebp - 4], 0x223
mov ecx, 0x120
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x224
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x18e]
jmp 0x4530c1
mov dword [ebp - 4], 0x225
mov ecx, 0x220
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x226
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x152]
mov dword [ebp - 0x68], edx
mov dword [ebp - 4], 0x227
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 4], 0x228
mov eax, dword [0x54b25c]
mov al, byte [eax + 0x35]
mov dword [ebp - 4], 0x229
test al, al
jne 0x4533f0
mov dword [ebp - 4], 0x22a
mov eax, dword [0x549a00]
cmp eax, ecx
jle 0x45312a
add ecx, 0x100
cmp eax, ecx
jge 0x45312a
mov eax, dword [0x549a04]
cmp eax, edx
jle 0x45312a
add edx, 0xf
cmp eax, edx
jge 0x45312a
mov dword [ebp - 4], 0x22b
mov ecx, dword [0x54b25c]
mov byte [ecx + 0x35], bl
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x244
test ax, ax
je 0x458fc3
mov dword [ebp - 4], 0x245
mov edx, 0x424ef0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 9
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45319e
mov dword [ebp - 4], 0x246
lea edx, [ebx + 0x3c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x247
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov al, byte [eax + edx*4]
mov dword [ebp - 4], 0x248
cmp al, 1
jne 0x453bd2
mov dword [ebp - 4], 0x249
mov edx, 0x424ef8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24a
mov edx, 0x424f08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x55
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24b
mov edx, 0x424f1c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 1
jne 0x453338
mov dword [ebp - 4], 0x24d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
push 0
push 2
push 1
push 0x11
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x24e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x4535a5
dec eax
je 0x45353c
dec eax
jne 0x45360c
mov dword [ebp - 4], 0x253
mov edx, 0x424e88
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x38
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45360c
mov dword [ebp - 4], 0x254
lea ecx, [ebx + 0xd2]
mov dword [ebp - 0x34], ecx
jmp 0x45360c
mov dword [ebp - 4], 0x22c
cmp al, 1
jne 0x453419
mov dword [ebp - 4], 0x22d
cmp ebx, 5
jne 0x45312a
mov dword [ebp - 4], 0x22e
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x22f
cmp al, 2
jne 0x453442
mov dword [ebp - 4], 0x230
cmp ebx, 6
jne 0x45312a
mov dword [ebp - 4], 0x231
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x232
cmp al, 3
jne 0x45346b
mov dword [ebp - 4], 0x233
cmp ebx, 7
jne 0x45312a
mov dword [ebp - 4], 0x234
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x235
cmp al, 4
jne 0x453494
mov dword [ebp - 4], 0x236
cmp ebx, 8
jne 0x45312a
mov dword [ebp - 4], 0x237
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x238
cmp al, 5
jne 0x4534bd
mov dword [ebp - 4], 0x239
cmp ebx, 1
jne 0x45312a
mov dword [ebp - 4], 0x23a
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x23b
cmp al, 6
jne 0x4534e6
mov dword [ebp - 4], 0x23c
cmp ebx, 2
jne 0x45312a
mov dword [ebp - 4], 0x23d
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x23e
cmp al, 7
jne 0x45350f
mov dword [ebp - 4], 0x23f
cmp ebx, 3
jne 0x45312a
mov dword [ebp - 4], 0x240
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x241
cmp al, 8
jne 0x45312a
mov dword [ebp - 4], 0x242
cmp ebx, 4
jne 0x45312a
mov dword [ebp - 4], 0x243
xor eax, eax
jmp 0x45312d
mov dword [ebp - 4], 0x251
mov edx, 0x424f2c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x38
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45360c
mov dword [ebp - 4], 0x252
lea edx, [ebx + 0xc8]
mov dword [ebp - 0x34], edx
jmp 0x45360c
mov dword [ebp - 4], 0x24f
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x38
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45360c
mov dword [ebp - 4], 0x250
lea eax, [ebx + 0xdc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x255
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x256
test al, al
je 0x453873
cmp al, 5
je 0x453873
mov dword [ebp - 4], 0x259
cmp al, 1
je 0x453808
cmp al, 6
je 0x453808
mov dword [ebp - 4], 0x25c
cmp al, 2
je 0x453795
cmp al, 7
je 0x453795
mov dword [ebp - 4], 0x25f
cmp al, 3
je 0x453725
cmp al, 8
je 0x453725
mov dword [ebp - 4], 0x262
cmp al, 4
je 0x4536b3
cmp al, 9
jne 0x4538dd
mov dword [ebp - 4], 0x263
mov edx, 0x423468
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4538dd
mov dword [ebp - 4], 0x264
lea edx, [ebx + 0x10e]
mov dword [ebp - 0x34], edx
jmp 0x4538dd
mov dword [ebp - 4], 0x260
mov edx, 0x424f58
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4538dd
mov dword [ebp - 4], 0x261
lea eax, [ebx + 0x104]
jmp 0x4538da
mov dword [ebp - 4], 0x25d
mov edx, 0x424f48
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x8b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4538dd
mov dword [ebp - 4], 0x25e
lea ecx, [ebx + 0xfa]
mov dword [ebp - 0x34], ecx
jmp 0x4538dd
mov dword [ebp - 4], 0x25a
mov edx, 0x424f38
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4538dd
mov dword [ebp - 4], 0x25b
lea edx, [ebx + 0xf0]
mov dword [ebp - 0x34], edx
jmp 0x4538dd
mov dword [ebp - 4], 0x257
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4538dd
mov dword [ebp - 4], 0x258
lea eax, [ebx + 0xe6]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x265
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
cmp byte [edx], 0
jbe 0x4539db
mov dword [ebp - 4], 0x266
push ecx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa7
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x267
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x268
test al, al
jne 0x453aaa
mov dword [ebp - 4], 0x269
mov edx, dword [0x549e8c]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043cc40
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x458fc3
mov dword [ebp - 4], 0x26a
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x26b
cmp al, 1
jne 0x453b43
mov dword [ebp - 4], 0x26c
mov edx, dword [0x549e8c]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
add edx, 8
push edx
call fcn.0043cc40
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x458fc3
mov dword [ebp - 4], 0x26d
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x26e
cmp al, 2
jne 0x458fc3
mov dword [ebp - 4], 0x26f
mov edx, 0x423648
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x10
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x270
lea edx, [ebx + 0x118]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x271
cmp al, 2
jne 0x454437
mov dword [ebp - 4], 0x272
mov edx, 0x424ea8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x273
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
mov dword [ebp - 4], 0x274
test ax, ax
jne 0x453cdf
mov dword [ebp - 4], 0x275
mov edx, 0x423db4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x41
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x276
lea ecx, [ebx + 0x1e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x277
cmp ax, 1
jl 0x453e53
cmp ax, 0xa
jg 0x453e53
mov dword [ebp - 4], 0x278
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x41
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453d5e
mov dword [ebp - 4], 0x279
lea edx, [ebx + 0x28]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x27a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424f68
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
imul cx, cx, 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x27b
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x27c
cmp ax, 0xb
jl 0x453fcc
cmp ax, 0x14
jg 0x453fcc
mov dword [ebp - 4], 0x27d
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453ed2
mov dword [ebp - 4], 0x27e
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x27f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424f7c
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0xa
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x280
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x281
cmp ax, 0x15
jl 0x454145
cmp ax, 0x1e
jg 0x454145
mov dword [ebp - 4], 0x282
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45404b
mov dword [ebp - 4], 0x283
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x284
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424f8c
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x14
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x285
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x286
cmp ax, 0x1f
jl 0x4542be
cmp ax, 0x28
jg 0x4542be
mov dword [ebp - 4], 0x287
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4541c4
mov dword [ebp - 4], 0x288
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x289
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424fa0
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x1e
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x28a
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x28b
cmp ax, 0x29
jl 0x458fc3
cmp ax, 0x32
jg 0x458fc3
mov dword [ebp - 4], 0x28c
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45433d
mov dword [ebp - 4], 0x28d
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424fb0
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x28
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x28f
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x290
cmp al, 3
jne 0x4546dd
mov dword [ebp - 4], 0x291
mov dword [ebp - 0xb4], 0x80020004
mov dword [ebp - 0xbc], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
push 0x1c6
push 0xed
push 0
push 0
lea eax, [ebp - 0xbc]
push eax
push 1
push 0xd7
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x292
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x45465f
dec eax
je 0x4545e2
dec eax
jne 0x458fc3
mov dword [ebp - 4], 0x297
mov edx, 0x424fd0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xef
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x298
lea ecx, [ebx + 0x32]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x295
mov edx, 0x424fc8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xef
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x296
lea edx, [ebx + 0x32]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x293
mov edx, 0x424fc0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xef
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x294
lea eax, [ebx + 0x32]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x299
cmp al, 4
jne 0x454a5e
mov dword [ebp - 4], 0x29a
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 7
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454750
mov dword [ebp - 4], 0x29b
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x29c
mov edx, 0x424fe4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29d
mov edx, 0x424ff4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29e
mov edx, 0x425004
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a2
jmp 0x458f03
mov dword [ebp - 4], 0x2a3
cmp al, 5
jne 0x454d6b
mov dword [ebp - 4], 0x2a4
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454ad1
mov dword [ebp - 4], 0x2a5
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2a6
mov edx, 0x42500c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a7
mov edx, 0x425018
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2aa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa8
jmp 0x458f9e
mov dword [ebp - 4], 0x2ab
cmp al, 6
jne 0x455188
mov dword [ebp - 4], 0x2ac
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 1
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454dde
mov dword [ebp - 4], 0x2ad
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2ae
mov edx, 0x42500c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2af
mov edx, 0x42502c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b0
mov edx, 0x425038
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2b2
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
jmp 0x458f9e
mov dword [ebp - 4], 0x2b5
cmp al, 7
jne 0x4558d3
mov dword [ebp - 4], 0x2b6
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 4
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4551fb
mov dword [ebp - 4], 0x2b7
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2b8
mov edx, 0x425044
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45526f
mov dword [ebp - 4], 0x2b9
mov dword [0x549b70], 0x12
mov dword [ebp - 4], 0x2ba
call fcn.0043dab0
mov dword [ebp - 4], 0x2bb
mov edx, 0x425054
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2bc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2bd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x68
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2be
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 4
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x81
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2bf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x9a
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x2c2
test al, al
jne 0x455735
mov dword [ebp - 4], 0x2c3
mov edx, 0x425060
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x2c4
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x2c5
cmp al, 1
jne 0x4557be
mov dword [ebp - 4], 0x2c6
mov edx, 0x42506c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x2c7
lea eax, [ebx + 0x64]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x2c8
cmp al, 2
jne 0x455847
mov dword [ebp - 4], 0x2c9
mov edx, 0x425078
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x2ca
lea ecx, [ebx + 0x64]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x2cb
cmp al, 3
jne 0x458fc3
mov dword [ebp - 4], 0x2cc
mov edx, 0x425084
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x2cd
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x2ce
cmp al, 8
jne 0x455e00
mov dword [ebp - 4], 0x2cf
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 6
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455946
mov dword [ebp - 4], 0x2d0
lea eax, [ebx + 0x46]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2d1
mov edx, 0x42502c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d2
mov edx, 0x425038
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6f
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d3
mov edx, 0x425090
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x9c
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d4
mov edx, 0x425004
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc9
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2d6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x83
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd8
jmp 0x458f9e
mov dword [ebp - 4], 0x2da
cmp al, 9
jne 0x45610e
mov dword [ebp - 4], 0x2db
mov edx, 0x42509c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dc
mov edx, 0x424ff4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dd
mov edx, 0x4250b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2de
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb9
jmp 0x458f9e
mov dword [ebp - 4], 0x2e1
cmp al, 0xa
jne 0x456d22
mov dword [ebp - 4], 0x2e2
mov edx, 0x4250c0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e3
mov edx, 0x4250d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x40
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x2e5
test al, al
jne 0x45625c
mov dword [ebp - 4], 0x2e6
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x4d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456346
mov dword [ebp - 4], 0x2e7
lea edx, [ebx + 0x12c]
mov dword [ebp - 0x34], edx
jmp 0x456346
mov dword [ebp - 4], 0x2e8
cmp al, 1
jne 0x4562d4
mov dword [ebp - 4], 0x2e9
mov edx, 0x423fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x4d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456346
mov dword [ebp - 4], 0x2ea
lea eax, [ebx + 0x12c]
mov dword [ebp - 0x34], eax
jmp 0x456346
mov dword [ebp - 4], 0x2eb
cmp al, 2
jne 0x456346
mov dword [ebp - 4], 0x2ec
mov edx, 0x4250dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x4d
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456346
mov dword [ebp - 4], 0x2ed
lea ecx, [ebx + 0x12c]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2ee
mov edx, 0x424fd0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x5d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2ef
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x2f0
test al, al
jne 0x456440
mov dword [ebp - 4], 0x2f1
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x6a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45652a
mov dword [ebp - 4], 0x2f2
lea edx, [ebx + 0x136]
mov dword [ebp - 0x34], edx
jmp 0x45652a
mov dword [ebp - 4], 0x2f3
cmp al, 1
jne 0x4564b8
mov dword [ebp - 4], 0x2f4
mov edx, 0x423fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x6a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45652a
mov dword [ebp - 4], 0x2f5
lea eax, [ebx + 0x136]
mov dword [ebp - 0x34], eax
jmp 0x45652a
mov dword [ebp - 4], 0x2f6
cmp al, 2
jne 0x45652a
mov dword [ebp - 4], 0x2f7
mov edx, 0x4250dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6a
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45652a
mov dword [ebp - 4], 0x2f8
lea ecx, [ebx + 0x136]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2f9
mov edx, 0x4250e4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2fa
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x2fb
test al, al
jne 0x456626
mov dword [ebp - 4], 0x2fc
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x87
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456716
mov dword [ebp - 4], 0x2fd
lea edx, [ebx + 0x140]
mov dword [ebp - 0x34], edx
jmp 0x456716
mov dword [ebp - 4], 0x2fe
cmp al, 1
jne 0x4566a1
mov dword [ebp - 4], 0x2ff
mov edx, 0x423fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x87
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456716
mov dword [ebp - 4], 0x300
lea eax, [ebx + 0x140]
mov dword [ebp - 0x34], eax
jmp 0x456716
mov dword [ebp - 4], 0x301
cmp al, 2
jne 0x456716
mov dword [ebp - 4], 0x302
mov edx, 0x4250dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x87
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456716
mov dword [ebp - 4], 0x303
lea ecx, [ebx + 0x140]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x304
mov edx, 0x424170
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x97
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x305
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x306
test al, al
jne 0x456814
mov dword [ebp - 4], 0x307
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xa4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456904
mov dword [ebp - 4], 0x308
lea edx, [ebx + 0x14a]
mov dword [ebp - 0x34], edx
jmp 0x456904
mov dword [ebp - 4], 0x309
cmp al, 1
jne 0x45688f
mov dword [ebp - 4], 0x30a
mov edx, 0x423fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa4
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456904
mov dword [ebp - 4], 0x30b
lea eax, [ebx + 0x14a]
mov dword [ebp - 0x34], eax
jmp 0x456904
mov dword [ebp - 4], 0x30c
cmp al, 2
jne 0x456904
mov dword [ebp - 4], 0x30d
mov edx, 0x4250dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa4
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456904
mov dword [ebp - 4], 0x30e
lea ecx, [ebx + 0x14a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x30f
mov edx, 0x423e78
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x310
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 4]
mov dword [ebp - 4], 0x311
test al, al
jne 0x456a02
mov dword [ebp - 4], 0x312
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456af2
mov dword [ebp - 4], 0x313
lea edx, [ebx + 0x154]
mov dword [ebp - 0x34], edx
jmp 0x456af2
mov dword [ebp - 4], 0x314
cmp al, 1
jne 0x456a7d
mov dword [ebp - 4], 0x315
mov edx, 0x423fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456af2
mov dword [ebp - 4], 0x316
lea eax, [ebx + 0x154]
mov dword [ebp - 0x34], eax
jmp 0x456af2
mov dword [ebp - 4], 0x317
cmp al, 2
jne 0x456af2
mov dword [ebp - 4], 0x318
mov edx, 0x4250dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456af2
mov dword [ebp - 4], 0x319
lea ecx, [ebx + 0x154]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x31a
mov edx, 0x423a10
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xd1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x31b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 5]
mov dword [ebp - 4], 0x31c
test al, al
jne 0x456c02
mov dword [ebp - 4], 0x31d
mov edx, 0x41d938
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xde
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x31e
lea edx, [ebx + 0x15e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x31f
cmp al, 1
jne 0x456c92
mov dword [ebp - 4], 0x320
mov edx, 0x423fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xde
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x321
lea eax, [ebx + 0x15e]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x322
cmp al, 2
jne 0x458fc3
mov dword [ebp - 4], 0x323
mov edx, 0x4250dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xde
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x324
lea ecx, [ebx + 0x15e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x325
cmp al, 0xb
jne 0x45706c
mov dword [ebp - 4], 0x326
mov edx, 0x4250ec
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456d98
mov dword [ebp - 4], 0x327
lea edx, [ebx + 0x8c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x328
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 2]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
mov edx, dword [0x549f44]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx ecx, word [0x549e98]
sub eax, ecx
push eax
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x37
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
mov dword [ebp - 4], 0x329
mov edx, dword [0x549f44]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x70
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
add cx, word [0x549e98]
movsx eax, cx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0043c890
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x456ef4
mov dword [ebp - 4], 0x32a
lea eax, [ebx + 0x19a]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x32b
push 0x41d938
mov ecx, dword [0x549f44]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x549e98]
sub eax, edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043c890
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x32c
mov edx, 0x4250fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xbf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x32d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xff
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xdf
jmp 0x458f9e
mov dword [ebp - 4], 0x32e
cmp al, 0xc
jne 0x4572bd
mov dword [ebp - 4], 0x32f
mov edx, 0x424e54
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4570e2
mov dword [ebp - 4], 0x330
lea eax, [ebx + 0x96]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x331
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 2], 2
jge 0x4571ca
mov dword [ebp - 4], 0x332
mov ecx, dword [0x549f28]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x2d
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0043c890
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x458fc3
mov dword [ebp - 4], 0x333
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x334
mov ecx, dword [0x549f28]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.00536cb0
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x90]
push edx
call edi
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x2d
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x335
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x336
cmp al, 0xd
jne 0x457a01
mov dword [ebp - 4], 0x337
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 9
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457330
mov dword [ebp - 4], 0x338
lea ecx, [ebx + 0x5a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x339
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b94]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x33a
mov edx, 0x42510c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xaa
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x33b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x33c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x33d
test al, al
je 0x4576f0
cmp al, 4
je 0x4576f0
cmp al, 8
je 0x4576f0
cmp al, 0xc
je 0x4576f0
mov dword [ebp - 4], 0x340
cmp al, 1
je 0x457687
cmp al, 5
je 0x457687
cmp al, 9
je 0x457687
cmp al, 0xd
je 0x457687
mov dword [ebp - 4], 0x343
cmp al, 2
je 0x457617
cmp al, 6
je 0x457617
cmp al, 0xa
je 0x457617
cmp al, 0xe
je 0x457617
mov dword [ebp - 4], 0x346
cmp al, 3
je 0x4575ae
cmp al, 7
je 0x4575ae
cmp al, 0xb
je 0x4575ae
cmp al, 0xf
jne 0x457756
mov dword [ebp - 4], 0x347
mov edx, 0x425084
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457756
mov dword [ebp - 4], 0x348
jmp 0x457750
mov dword [ebp - 4], 0x344
mov edx, 0x425078
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457756
mov dword [ebp - 4], 0x345
lea eax, [ebx + 0x6e]
mov dword [ebp - 0x34], eax
jmp 0x457756
mov dword [ebp - 4], 0x341
mov edx, 0x42506c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457756
mov dword [ebp - 4], 0x342
lea ecx, [ebx + 0x6e]
mov dword [ebp - 0x34], ecx
jmp 0x457756
mov dword [ebp - 4], 0x33e
mov edx, 0x425060
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457756
mov dword [ebp - 4], 0x33f
lea edx, [ebx + 0x6e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x349
mov edx, 0x42511c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x34a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x34b
cmp al, 3
ja 0x45785b
mov dword [ebp - 4], 0x34c
mov edx, 0x42512c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x34d
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x34e
cmp al, 4
jb 0x4578e5
cmp al, 7
ja 0x4578e5
mov dword [ebp - 4], 0x34f
mov edx, 0x425140
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x69
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x350
lea eax, [ebx + 0x78]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x351
cmp al, 8
jb 0x45796f
cmp al, 0xb
ja 0x45796f
mov dword [ebp - 4], 0x352
mov edx, 0x42514c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x69
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x353
lea ecx, [ebx + 0x78]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x354
cmp al, 0xc
jb 0x458fc3
cmp al, 0xf
ja 0x458fc3
mov dword [ebp - 4], 0x355
mov edx, 0x425164
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x356
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x357
cmp al, 0xe
jne 0x457f2e
mov dword [ebp - 4], 0x358
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 2
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457a74
mov dword [ebp - 4], 0x359
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x35a
mov edx, 0x42500c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35b
mov edx, 0x42502c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35c
mov edx, 0x425038
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35d
mov edx, 0x425090
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xd1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x35f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x360
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x361
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x362
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
jmp 0x458f9e
mov dword [ebp - 4], 0x363
cmp al, 0xf
jne 0x45835f
mov dword [ebp - 4], 0x364
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 8
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457fa4
mov dword [ebp - 4], 0x365
lea eax, [ebx + 0x82]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x366
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54a794]
push eax
push 0
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x18
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x367
mov edx, 0x425174
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x43
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x368
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x14
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x369
mov edx, 0x425180
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36b
mov edx, 0x42518c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36c
mov eax, dword [0x549ed8]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xce
push edx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.0043c890
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x458fc3
mov dword [ebp - 4], 0x36d
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x36e
cmp al, 0x10
jne 0x458b87
mov dword [ebp - 4], 0x36f
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 3
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4583d2
mov dword [ebp - 4], 0x370
lea ecx, [ebx + 0x50]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x371
mov edx, 0x425004
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x372
mov edx, 0x42519c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x373
mov edx, 0x42511c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8e
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x374
mov edx, 0x4251a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x375
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x376
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x50
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x377
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x75
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x378
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x379
test al, al
jne 0x4587cf
mov dword [ebp - 4], 0x37a
mov edx, 0x42519c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a2f
mov dword [ebp - 4], 0x37b
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x458a2f
mov dword [ebp - 4], 0x37c
cmp al, 1
jne 0x45884d
mov dword [ebp - 4], 0x37d
mov edx, 0x4251b4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a2f
mov dword [ebp - 4], 0x37e
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x458a2f
mov dword [ebp - 4], 0x37f
cmp al, 2
jne 0x4588c2
mov dword [ebp - 4], 0x380
mov edx, 0x4251c0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a2f
mov dword [ebp - 4], 0x381
jmp 0x458a26
mov dword [ebp - 4], 0x382
cmp al, 3
jne 0x45893f
mov dword [ebp - 4], 0x383
mov edx, 0x4251cc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a2f
mov dword [ebp - 4], 0x384
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x458a2f
mov dword [ebp - 4], 0x385
cmp al, 4
jne 0x4589ba
mov dword [ebp - 4], 0x386
mov edx, 0x4251d8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a2f
mov dword [ebp - 4], 0x387
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x458a2f
mov dword [ebp - 4], 0x388
cmp al, 5
jne 0x458a2f
mov dword [ebp - 4], 0x389
mov edx, 0x4251e4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a2f
mov dword [ebp - 4], 0x38a
lea ecx, [ebx + 0x122]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x38b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x38c
test al, al
jne 0x458af7
mov dword [ebp - 4], 0x38d
mov edx, 0x4251f0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x38e
lea edx, [ebx + 0xbe]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x38f
cmp al, 1
jne 0x458fc3
mov dword [ebp - 4], 0x390
mov edx, 0x4251fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fc3
mov dword [ebp - 4], 0x391
lea eax, [ebx + 0xbe]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x392
cmp al, 0x11
jne 0x458fc3
mov dword [ebp - 4], 0x393
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043c890
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458bfa
mov dword [ebp - 4], 0x394
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x395
mov edx, 0x424fe4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x396
mov edx, 0x42500c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x397
mov edx, 0x425004
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043c890
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x398
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x549b90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b610
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x399
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc8
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b610
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x453061
mov dword [ebp - 4], 0x3a2
cmp eax, 2
jne 0x459001
mov dword [ebp - 4], 0x3a3
mov edx, dword [ebp - 0x3c]
push edx
mov al, byte [0x54b204]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044cc80
jmp 0x45abcf
mov dword [ebp - 4], 0x3a4
cmp eax, 3
jne 0x459022
mov dword [ebp - 4], 0x3a5
mov edx, dword [ebp + 8]
push edx
call fcn.00448aa0
jmp 0x45abcf
mov dword [ebp - 4], 0x3a6
cmp eax, 4
jne 0x459043
mov dword [ebp - 4], 0x3a7
mov eax, dword [ebp + 8]
push eax
call fcn.004491b0
jmp 0x45abcf
mov dword [ebp - 4], 0x3a8
cmp eax, 5
jne 0x4590b7
mov dword [ebp - 4], 0x3a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
cmp byte [edx + ecx*4], 0
jbe 0x45abcf
mov dword [ebp - 4], 0x3aa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
push 0x54b234
push 0x41f1d8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ab
mov word [0x54b232], 0xffff
jmp 0x45abcf
mov dword [ebp - 4], 0x3ac
cmp eax, 6
jne 0x4590f6
mov dword [ebp - 4], 0x3ad
mov eax, dword [0x54b25c]
mov cl, byte [eax + 0x34]
test cl, cl
jne 0x4590e6
mov dword [ebp - 4], 0x3ae
mov byte [eax + 0x34], 1
jmp 0x45abcf
mov dword [ebp - 4], 0x3af
mov byte [eax + 0x34], 0
jmp 0x45abcf
mov dword [ebp - 4], 0x3b0
cmp eax, 7
jne 0x459113
mov dword [ebp - 4], 0x3b1
call fcn.0043ede0
jmp 0x45abcf
mov dword [ebp - 4], 0x3b2
cmp eax, 8
jne 0x459229
mov dword [ebp - 4], 0x3b3
mov ebx, dword [0x54b234]
and ebx, 0xff
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x24], edx
cmp edx, ebx
jg 0x45abcf
mov dword [ebp - 4], 0x3b4
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov al, byte [ecx]
cmp al, 8
jae 0x459213
mov dword [ebp - 4], 0x3b5
inc al
mov byte [ecx], al
mov dword [ebp - 4], 0x3b6
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f1b8
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3b7
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ebx, dword [0x54b23c]
sub eax, dword [ebx + 0x14]
lea eax, [eax + eax*2]
mov ebx, dword [ebx + 0xc]
lea eax, [ebx + eax*4]
push eax
xor eax, eax
mov al, byte [ecx]
sub eax, dword [edx + 0x14]
lea ecx, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov ebx, dword [ebp - 0x1ac]
mov dword [ebp - 4], 0x3b8
mov eax, 1
mov edx, dword [ebp - 0x24]
add edx, eax
jmp 0x45913c
mov dword [ebp - 4], 0x3b9
cmp eax, 0xa
jl 0x459707
cmp eax, 0x1a
jg 0x459707
mov dword [ebp - 4], 0x3ba
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
inc cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3bb
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f1b8
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3bc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
add ebx, 0xfffffff7
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov byte [ecx + eax*4], bl
mov dword [ebp - 4], 0x3bd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
mov dword [ebp - 4], 0x3be
cmp cl, 1
jne 0x459380
mov dword [ebp - 4], 0x3bf
mov word [eax + 2], 0
mov dword [ebp - 4], 0x3c0
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
push 0
push 2
push 1
push 0x11
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 4]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
jmp 0x45abcf
mov dword [ebp - 4], 0x3c1
cmp cl, 3
jne 0x459446
mov dword [ebp - 4], 0x3c2
push 0
push 0
push 1
push 8
add eax, 8
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c3
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, 0x423f18
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov dword [ebp - 0x25c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x25c]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x3c4
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov word [ecx + eax*4 + 2], 2
jmp 0x45abcf
mov dword [ebp - 4], 0x3c5
cmp cl, 4
jne 0x4594ba
mov dword [ebp - 4], 0x3c6
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c7
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x45abcf
mov dword [ebp - 4], 0x3c8
cmp cl, 5
jne 0x4594de
mov dword [ebp - 4], 0x3c9
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3ca
cmp cl, 6
je 0x4596ef
cmp cl, 9
je 0x4596ef
mov dword [ebp - 4], 0x3cc
cmp cl, 7
jne 0x45951b
mov dword [ebp - 4], 0x3cd
push 0
push 4
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3ce
cmp cl, 8
jne 0x45958f
mov dword [ebp - 4], 0x3cf
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3d0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 3], 0x42
jmp 0x45abcf
mov dword [ebp - 4], 0x3d1
cmp cl, 0xa
jne 0x4595b3
mov dword [ebp - 4], 0x3d2
push 0
push 5
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3d3
cmp cl, 0xb
jne 0x4595d7
mov dword [ebp - 4], 0x3d4
push 0
push 0
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3d5
cmp cl, 0xc
je 0x45abcf
mov dword [ebp - 4], 0x3d6
cmp cl, 0xd
jne 0x45960b
mov dword [ebp - 4], 0x3d7
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3d8
cmp cl, 0xe
jne 0x45962f
mov dword [ebp - 4], 0x3d9
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3da
cmp cl, 0xf
jne 0x459653
mov dword [ebp - 4], 0x3db
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3dc
cmp cl, 0x10
jne 0x459677
mov dword [ebp - 4], 0x3dd
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3de
cmp cl, 0x11
jne 0x45abcf
mov dword [ebp - 4], 0x3df
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x45abcf
mov dword [ebp - 4], 0x3cb
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x45936b
mov dword [ebp - 4], 0x3e1
cmp eax, 0x1f
jl 0x4597ac
cmp eax, 0x26
jg 0x4597ac
mov dword [ebp - 4], 0x3e2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x166]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 0x32
push 0
push 1
lea ecx, [ebp - 0xcc]
push ecx
call fcn.00435d50
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x3e3
cmp eax, 0x29
jl 0x45982b
cmp eax, 0x30
jg 0x45982b
mov dword [ebp - 4], 0x3e4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x1de]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0
push 0x33
push 0
push 0xffffffffffffffff
jmp 0x459789
mov dword [ebp - 4], 0x3e5
cmp eax, 0x33
jl 0x4598a6
cmp eax, 0x3a
jg 0x4598a6
mov dword [ebp - 4], 0x3e6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x256]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 2
jmp 0x459785
mov dword [ebp - 4], 0x3e7
cmp eax, 0x3d
jl 0x459a00
cmp eax, 0x44
jg 0x459a00
mov dword [ebp - 4], 0x3e8
add ebx, 0xffffffc4
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x3e9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov al, byte [ecx + eax*4]
mov ecx, eax
and ecx, 0xff
cmp ebx, ecx
jge 0x459970
mov dword [ebp - 4], 0x3ea
movzx ax, al
dec eax
movsx ecx, ax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], edx
cmp ebx, dword [ebp - 0x1b4]
jg 0x459970
mov dword [ebp - 4], 0x3eb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ec
add ebx, dword [ebp - 0x1b0]
jmp 0x459916
mov dword [ebp - 4], 0x3ed
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3ee
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov al, byte [ecx]
test al, al
jne 0x4599d4
mov dword [ebp - 4], 0x3ef
add ecx, 8
push ecx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
jmp 0x45abcf
mov dword [ebp - 4], 0x3f0
push 1
and eax, 0xff
push eax
push 1
push 0x41f1b8
add ecx, 8
push ecx
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
jmp 0x45abcf
mov dword [ebp - 4], 0x3f1
cmp eax, 0x47
jl 0x459a30
cmp eax, 0x4e
jg 0x459a30
mov dword [ebp - 4], 0x3f2
push 0
mov cx, word [0x54b204]
push ecx
add ebx, 0xffffffba
push ebx
call fcn.0051e7a0
jmp 0x45abcf
mov dword [ebp - 4], 0x3f3
cmp eax, 0x51
jl 0x459a60
cmp eax, 0x58
jg 0x459a60
mov dword [ebp - 4], 0x3f4
push 1
mov dx, word [0x54b204]
push edx
add ebx, 0xffffffb0
push ebx
call fcn.0051e7a0
jmp 0x45abcf
mov dword [ebp - 4], 0x3f5
cmp eax, 0x5b
jl 0x459a8f
cmp eax, 0x62
jg 0x459a8f
mov dword [ebp - 4], 0x3f6
push 2
mov ax, word [0x54b204]
push eax
add ebx, 0xffffffa6
push ebx
call fcn.0051e7a0
jmp 0x45abcf
mov dword [ebp - 4], 0x3f7
cmp eax, 0x83
jl 0x459ac6
cmp eax, 0x8a
jg 0x459ac6
mov dword [ebp - 4], 0x3f8
push 3
mov cx, word [0x54b204]
push ecx
add ebx, 0xffffff7e
push ebx
call fcn.0051e7a0
jmp 0x45abcf
mov dword [ebp - 4], 0x3f9
cmp eax, 0x8d
jl 0x459afd
cmp eax, 0x94
jg 0x459afd
mov dword [ebp - 4], 0x3fa
push 4
mov dx, word [0x54b204]
push edx
add ebx, 0xffffff74
push ebx
call fcn.0051e7a0
jmp 0x45abcf
mov dword [ebp - 4], 0x3fb
cmp eax, 0x97
jl 0x459b33
cmp eax, 0x9e
jg 0x459b33
mov dword [ebp - 4], 0x3fc
push 5
mov ax, word [0x54b204]
push eax
add ebx, 0xffffff6a
push ebx
call fcn.0051e7a0
jmp 0x45abcf
mov dword [ebp - 4], 0x3fd
cmp eax, 0x65
jl 0x459bcf
cmp eax, 0x6c
jg 0x459bcf
mov dword [ebp - 4], 0x3fe
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x4ac]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45a7ac
mov dword [ebp - 4], 0x3ff
cmp eax, 0x6f
jl 0x459f30
cmp eax, 0x76
jg 0x459f30
mov dword [ebp - 4], 0x400
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
movsx ecx, word [0x54b204]
sub ecx, dword [eax + 0x14]
lea edx, [ecx + ecx*2]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov ecx, dword [edx + ecx*4 - 0x524]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
mov cl, byte [edx + 1]
mov dword [ebp - 4], 0x401
test cl, cl
je 0x459eb5
cmp cl, 1
je 0x459eb5
cmp cl, 2
je 0x459eb5
cmp cl, 3
je 0x459eb5
mov dword [ebp - 4], 0x403
cmp cl, 4
je 0x459e0f
cmp cl, 5
je 0x459e0f
cmp cl, 6
je 0x459e0f
cmp cl, 7
je 0x459e0f
mov dword [ebp - 4], 0x405
cmp cl, 8
je 0x459d69
cmp cl, 9
je 0x459d69
cmp cl, 0xa
je 0x459d69
cmp cl, 0xb
je 0x459d69
mov dword [ebp - 4], 0x407
cmp cl, 0xc
je 0x459cc3
cmp cl, 0xd
je 0x459cc3
cmp cl, 0xe
je 0x459cc3
cmp cl, 0xf
jne 0x45abcf
mov dword [ebp - 4], 0x408
push eax
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xf
push 0xc
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x406
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 8
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x404
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 7
push 4
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x402
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45a7ac
mov dword [ebp - 4], 0x409
cmp eax, 0x79
jl 0x459fdd
cmp eax, 0x80
jg 0x459fdd
mov dword [ebp - 4], 0x40a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
lea eax, [ecx + 1]
mov cl, byte [eax]
add cl, 4
mov byte [eax], cl
mov dword [ebp - 4], 0x40b
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov al, byte [ecx]
cmp al, 0xf
jbe 0x45abcf
mov dword [ebp - 4], 0x40c
sub al, 0x10
mov byte [ecx], al
jmp 0x45abcf
mov dword [ebp - 4], 0x40d
cmp eax, 0xbf
jl 0x45a0b4
cmp eax, 0xc6
jg 0x45a0b4
mov dword [ebp - 4], 0x40e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x8e4]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 1
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x40f
call fcn.0043ede0
jmp 0x45abcf
mov dword [ebp - 4], 0x410
cmp eax, 0xc9
jl 0x45a102
cmp eax, 0xd0
jg 0x45a102
mov dword [ebp - 4], 0x411
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x95e], 2
jmp 0x45abcf
mov dword [ebp - 4], 0x412
cmp eax, 0xd3
jl 0x45a150
cmp eax, 0xda
jg 0x45a150
mov dword [ebp - 4], 0x413
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x9d6], 0
jmp 0x45abcf
mov dword [ebp - 4], 0x414
cmp eax, 0xdd
jl 0x45a19c
cmp eax, 0xe4
jg 0x45a19c
mov dword [ebp - 4], 0x415
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov word [eax + ecx*4 - 0xa4e], dx
jmp 0x45abcf
mov dword [ebp - 4], 0x416
cmp eax, 0xe7
jl 0x45a1f0
cmp eax, 0xee
jg 0x45a1f0
mov dword [ebp - 4], 0x417
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xac4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 1
jmp 0x45abcf
mov dword [ebp - 4], 0x418
cmp eax, 0xf1
jl 0x45a244
cmp eax, 0xf8
jg 0x45a244
mov dword [ebp - 4], 0x419
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xb3c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 2
jmp 0x45abcf
mov dword [ebp - 4], 0x41a
cmp eax, 0xfb
jl 0x45a298
cmp eax, 0x102
jg 0x45a298
mov dword [ebp - 4], 0x41b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xbb4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 3
jmp 0x45abcf
mov dword [ebp - 4], 0x41c
cmp eax, 0x105
jl 0x45a2ec
cmp eax, 0x10c
jg 0x45a2ec
mov dword [ebp - 4], 0x41d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xc2c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 4
jmp 0x45abcf
mov dword [ebp - 4], 0x41e
cmp eax, 0x10f
jl 0x45a340
cmp eax, 0x116
jg 0x45a340
mov dword [ebp - 4], 0x41f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xca4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 0
jmp 0x45abcf
mov dword [ebp - 4], 0x420
cmp eax, 0x119
jl 0x45a3c4
cmp eax, 0x120
jg 0x45a3c4
mov dword [ebp - 4], 0x421
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd1c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
jmp 0x45a798
mov dword [ebp - 4], 0x422
cmp eax, 0x123
jl 0x45a49b
cmp eax, 0x12a
jg 0x45a49b
mov dword [ebp - 4], 0x423
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd94]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x424
call fcn.0043ede0
jmp 0x45abcf
mov dword [ebp - 4], 0x425
cmp eax, 0x12d
jl 0x45a51c
cmp eax, 0x134
jg 0x45a51c
mov dword [ebp - 4], 0x426
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe0c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
jmp 0x45a798
mov dword [ebp - 4], 0x427
cmp eax, 0x137
jl 0x45a59e
cmp eax, 0x13e
jg 0x45a59e
mov dword [ebp - 4], 0x428
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe84]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
jmp 0x45a798
mov dword [ebp - 4], 0x429
cmp eax, 0x141
jl 0x45a609
cmp eax, 0x148
jg 0x45a609
mov dword [ebp - 4], 0x42a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xefc]
jmp 0x45a3a6
mov dword [ebp - 4], 0x42b
cmp eax, 0x14b
jl 0x45a68d
cmp eax, 0x152
jg 0x45a68d
mov dword [ebp - 4], 0x42c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xf74]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
jmp 0x45a798
mov dword [ebp - 4], 0x42d
cmp eax, 0x155
jl 0x45a711
cmp eax, 0x15c
jg 0x45a711
mov dword [ebp - 4], 0x42e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xfec]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 4
jmp 0x45a798
mov dword [ebp - 4], 0x42f
cmp eax, 0x15f
jl 0x45a7dc
cmp eax, 0x166
jg 0x45a7dc
mov dword [ebp - 4], 0x430
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x1064]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 5
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 2
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x431
cmp eax, 0x191
jl 0x45a89c
cmp eax, 0x198
jg 0x45a89c
mov dword [ebp - 4], 0x432
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x12be]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
mov ecx, dword [0x549f44]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x549e98]
sub eax, edx
push eax
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435d50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x433
cmp eax, 0x19b
jl 0x45a95c
cmp eax, 0x1a2
jg 0x45a95c
mov dword [ebp - 4], 0x434
mov eax, dword [0x549b2c]
mov ecx, dword [eax]
push 0xff
push eax
call dword [ecx + 0x3c]
fnclex
test eax, eax
jge 0x45a8eb
push 0x3c
push 0x421ec4
mov edx, dword [0x549b2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x435
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x549b2c]
mov edx, dword [ecx]
push 0xffffffffffffffff
push 2
sub ebx, dword [eax + 0x14]
lea ebx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov ax, word [eax + ebx*4 - 0x1336]
add ax, word [0x549e98]
movsx eax, ax
push eax
push ecx
call dword [edx + 0x40]
fnclex
test eax, eax
jge 0x45abcf
push 0x40
push 0x421ec4
mov ecx, dword [0x549b2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x45abcf
mov dword [ebp - 4], 0x436
cmp eax, 0x1f5
jl 0x45aa0b
cmp eax, 0x1fc
jg 0x45aa0b
mov dword [ebp - 4], 0x437
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x54b204]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x176e]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
movsx ecx, word [0x549e90]
push ecx
push 0
push 1
lea edx, [ebp - 0xcc]
push edx
call fcn.00435d50
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
jmp 0x45abcf
mov dword [ebp - 4], 0x438
cmp eax, 0x3e9
jl 0x45aae5
cmp eax, 0x3f0
jg 0x45aae5
mov dword [ebp - 4], 0x439
add ebx, 0xfffffc18
mov dword [ebp - 4], 0x43a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2]
lea edx, [ecx + edx*4 - 0xc]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
dec ebx
jmp 0x45abba
mov dword [ebp - 4], 0x43d
cmp eax, 0x44d
jl 0x45abcf
cmp eax, 0x454
jg 0x45abcf
mov dword [ebp - 4], 0x43e
add ebx, 0xfffffbb4
mov dword [ebp - 4], 0x43f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x440
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x441
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x54b204]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
inc ebx
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x442
mov ecx, dword [0x54b25c]
mov dword [ecx + 0x30], 0
jmp 0x45ac05
mov dword [ebp - 4], 0x443
mov eax, dword [0x54b25c]
mov ecx, dword [eax + 0x30]
test ecx, ecx
jne 0x45ac05
mov dword [ebp - 4], 0x444
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x30], edx
mov dword [ebp - 4], 0x445
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jle 0x45ac86
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x45ac86
mov dword [ebp - 4], 0x446
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push 0
push 0xa7
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea edx, [ebx*8]
sub edx, ebx
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.0043e800
lea eax, [ebp - 0x90]
push eax
call edi
mov dword [ebp - 4], 0x447
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x45acad
mov dword [ebp - 4], 0x448
push 0
push 0
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
push eax
call fcn.004db5f0
mov dword [ebp - 4], 0x449
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x45acc8
mov dword [ebp - 4], 0x44a
push eax
call fcn.004d8100
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45ad75
jmp 0x45ad5c
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x74]
push edx
push 0x41f1b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
ret