Function at 0x454330
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x30
mov eax, dword [0x48405c]
push ebx
push ebp
xor ebp, ebp
push esi
xor esi, esi
cmp eax, ebp
push edi
mov dword [esp + 0x30], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x20], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x2c], eax
mov dword [esp + 0x10], esi
jl 0x454967
mov edi, dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [0x484064]
jmp 0x454370
xor ebp, ebp
cmp ecx, ebp
je 0x45439c
cmp word [ecx], 1
jne 0x45439c
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x45438e
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x4543a4
call edi
mov ecx, dword [0x484064]
mov edx, dword [ecx + 0xc]
cmp word [edx + eax + 0x18], bp
je 0x454907
cmp ecx, ebp
je 0x4543e6
cmp word [ecx], 1
jne 0x4543e6
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4543d4
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
mov dword [esp + 0x14], eax
jmp 0x4543f2
call edi
mov ecx, dword [0x484064]
mov dword [esp + 0x14], eax
cmp ecx, ebp
je 0x454422
cmp word [ecx], 1
jne 0x454422
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x454414
call edi
mov ecx, dword [0x484064]
lea ebx, [esi*8]
sub ebx, esi
shl ebx, 2
jmp 0x45442c
call edi
mov ecx, dword [0x484064]
mov ebx, eax
cmp ecx, ebp
je 0x454460
cmp word [ecx], 1
jne 0x454460
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x45444e
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
mov dword [esp + 0x18], eax
jmp 0x45446c
call edi
mov ecx, dword [0x484064]
mov dword [esp + 0x18], eax
cmp ecx, ebp
je 0x4544a0
cmp word [ecx], 1
jne 0x4544a0
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x45448e
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
mov dword [esp + 0x1c], eax
jmp 0x4544ac
call edi
mov ecx, dword [0x484064]
mov dword [esp + 0x1c], eax
mov esi, dword [ecx + 0xc]
mov eax, dword [esp + 0x44]
mov ebp, dword [eax]
mov eax, dword [esi + ebx + 0xc]
mov ebx, dword [esp + 0x14]
xor edx, edx
cmp ebp, eax
setge dl
xor eax, eax
cmp ebp, dword [esi + ebx + 4]
mov ebx, dword [esp + 0x48]
mov ebp, dword [ebx]
mov ebx, dword [esp + 0x18]
setle al
or edx, eax
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp ebp, dword [esi + ebx + 0x10]
mov ebx, dword [esp + 0x1c]
setle al
or edx, eax
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp ebp, dword [esi + ebx + 0x14]
setge al
or edx, eax
jne 0x454907
mov eax, dword [0x484054]
test eax, eax
je 0x454574
cmp word [eax], 1
jne 0x454574
test ecx, ecx
je 0x454544
cmp word [ecx], 1
jne 0x454544
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x454536
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x45454c
call edi
mov ecx, dword [0x484064]
mov edx, dword [ecx + 0xc]
mov esi, dword [edx + eax]
mov eax, dword [0x484054]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
sub esi, ebx
cmp esi, edx
jb 0x45456b
call edi
mov ecx, dword [0x484064]
lea eax, [esi*4]
jmp 0x45457c
call edi
mov ecx, dword [0x484064]
mov edx, dword [0x484054]
mov edx, dword [edx + 0xc]
cmp dword [edx + eax], 2
je 0x45492a
mov edx, dword [0x484050]
test edx, edx
je 0x454637
cmp word [edx], 2
jne 0x454637
test ecx, ecx
je 0x4545dd
cmp word [ecx], 1
jne 0x4545dd
mov esi, dword [esp + 0x10]
mov ebx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, ebx
cmp esi, eax
jb 0x4545cf
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x4545eb
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov esi, dword [ecx + 0xc]
mov esi, dword [esi + eax]
mov ebx, dword [edx + 0x1c]
mov eax, dword [edx + 0x18]
sub esi, ebx
cmp esi, eax
jb 0x45460b
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov ebp, dword [edx + 0x14]
mov eax, dword [edx + 0x10]
mov ebx, 1
sub ebx, ebp
cmp ebx, eax
jb 0x45462a
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov eax, dword [edx + 0x18]
imul eax, ebx
add eax, esi
shl eax, 2
jmp 0x454645
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov esi, dword [edx + 0xc]
cmp dword [esi + eax], 0
jne 0x454777
test edx, edx
je 0x4546e8
cmp word [edx], 2
jne 0x4546e8
test ecx, ecx
je 0x45469a
cmp word [ecx], 1
jne 0x45469a
mov esi, dword [esp + 0x10]
mov ebx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, ebx
cmp esi, eax
jb 0x45468c
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x4546a8
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov ecx, dword [ecx + 0xc]
mov esi, dword [ecx + eax]
mov ecx, dword [edx + 0x1c]
mov eax, dword [edx + 0x18]
sub esi, ecx
cmp esi, eax
jb 0x4546c2
call edi
mov edx, dword [0x484050]
mov ecx, dword [edx + 0x14]
mov eax, dword [edx + 0x10]
mov ebx, 1
sub ebx, ecx
cmp ebx, eax
jb 0x4546db
call edi
mov edx, dword [0x484050]
mov eax, dword [edx + 0x18]
imul eax, ebx
add eax, esi
shl eax, 2
jmp 0x4546f0
call edi
mov edx, dword [0x484050]
mov edx, dword [edx + 0xc]
add edx, eax
push edx
push 0x406810
call dword [sym.imp.msvbvm60.dll___vbaNew2]
mov edx, dword [0x484050]
test edx, edx
je 0x454819
cmp word [edx], 2
jne 0x454819
mov ecx, dword [0x484064]
test ecx, ecx
je 0x454755
cmp word [ecx], 1
jne 0x454755
mov esi, dword [esp + 0x10]
mov ebx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, ebx
cmp esi, eax
jb 0x454747
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x454763
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov esi, dword [ecx + 0xc]
mov esi, dword [esi + eax]
mov ebx, dword [edx + 0x1c]
mov eax, dword [edx + 0x18]
sub esi, ebx
cmp esi, eax
jb 0x4547ed
jmp 0x4547df
test edx, edx
je 0x454819
cmp word [edx], 2
jne 0x454819
test ecx, ecx
je 0x4547bf
cmp word [ecx], 1
jne 0x4547bf
mov esi, dword [esp + 0x10]
mov ebx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, ebx
cmp esi, eax
jb 0x4547b1
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x4547cd
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov esi, dword [ecx + 0xc]
mov esi, dword [esi + eax]
mov ebx, dword [edx + 0x1c]
mov eax, dword [edx + 0x18]
sub esi, ebx
cmp esi, eax
jb 0x4547ed
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov ebp, dword [edx + 0x14]
mov eax, dword [edx + 0x10]
mov ebx, 1
sub ebx, ebp
cmp ebx, eax
jb 0x45480c
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov eax, dword [edx + 0x18]
imul eax, ebx
add eax, esi
shl eax, 2
jmp 0x454827
call edi
mov edx, dword [0x484050]
mov ecx, dword [0x484064]
mov edx, dword [edx + 0xc]
mov ebx, dword [edx + eax]
add edx, eax
test ecx, ecx
je 0x45485f
cmp word [ecx], 1
jne 0x45485f
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x454851
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x454867
call edi
mov ecx, dword [0x484064]
mov edx, dword [ecx + 0xc]
mov esi, dword [esp + 0x48]
mov esi, dword [esi]
sub esi, dword [edx + eax + 0x10]
jo 0x454971
test ecx, ecx
mov dword [esp + 0x20], esi
je 0x4548ae
cmp word [ecx], 1
jne 0x4548ae
mov esi, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4548a0
call edi
mov ecx, dword [0x484064]
lea eax, [esi*8]
sub eax, esi
shl eax, 2
jmp 0x4548b6
call edi
mov ecx, dword [0x484064]
mov ecx, dword [ecx + 0xc]
mov esi, dword [ecx + eax + 4]
mov edx, dword [esp + 0x44]
mov edx, dword [edx]
sub edx, esi
jo 0x454971
mov dword [esp + 0x24], edx
mov eax, dword [ebx]
lea ecx, [esp + 0x28]
push ecx
lea edx, [esp + 0x24]
push edx
lea ecx, [esp + 0x2c]
push ecx
push ebx
call dword [eax + 0x3c]
fnclex
test eax, eax
jge 0x4548f9
push 0x3c
push 0x40a894
push ebx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov eax, dword [esp + 0x28]
test eax, eax
jne 0x45492a
mov ecx, dword [0x484064]
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x2c]
add esi, 1
jo 0x454971
cmp esi, eax
mov dword [esp + 0x10], esi
jle 0x45436e
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 8
sub esp, 0x10
mov edx, esp
mov ecx, 0x4003
mov dword [edx], ecx
mov ecx, dword [esp + 0x44]
mov dword [edx + 4], ecx
push 1
lea eax, [esp + 0x24]
mov dword [edx + 8], eax
mov eax, dword [esp + 0x50]
push 0x40b068
push 0x484164
mov dword [edx + 0xc], eax
call dword [sym.imp.msvbvm60.dll___vbaObjVar]
push eax
call dword [sym.imp.msvbvm60.dll___vbaLateMemCall]
add esp, 0x1c
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x30
ret 8
call dword [sym.imp.msvbvm60.dll___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4032c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x9c
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4028c8
xor ebx, ebx
mov dword [ebp - 4], ebx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
push ebx
push 0xc7
push 1
push 0x40fcb0
push 0x484404
push 4
push 0x440
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x7c], ebx
call dword [sym.imp.msvbvm60.dll___vbaRedim]
mov edx, dword [0x4842c0]
add esp, 0x1c
mov dword [0x4842e8], ebx
mov dword [ebp - 0x88], edx
mov edi, 1
xor esi, esi
cmp esi, dword [ebp - 0x88]
jg 0x454a4e
cmp esi, 0x64
jb 0x454a38
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov eax, dword [0x4842dc]
mov ecx, edi
add ecx, esi
mov dword [eax + esi*4], ebx
jo 0x455021
mov esi, ecx
jmp 0x454a25
mov edi, dword [sym.imp.msvbvm60.dll___vbaStrCat]
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov ecx, dword [0x4842ac]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x4c]
push eax
or esi, 0xffffffff
push ecx
push 0x410448
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], 0x64
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0xd
mov dword [ebp - 0x44], 2
call edi
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.msvbvm60.dll___vbaStrMove]
push eax
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00432f40
lea ecx, [ebp - 0x20]
call dword [sym.imp.msvbvm60.dll___vbaFreeStr]
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x58]
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], 0x65
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0xd
mov dword [ebp - 0x44], 2
push edx
lea eax, [ebp - 0x54]
push eax
mov eax, dword [0x4842ac]
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x4c]
push edx
push eax
push 0x410518
call edi
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.msvbvm60.dll___vbaStrMove]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00432f40
lea ecx, [ebp - 0x20]
call dword [sym.imp.msvbvm60.dll___vbaFreeStr]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x54]
push edx
mov edx, dword [0x4842ac]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x4c]
push ecx
push edx
push 0x4108f8
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], 0x66
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0xd
mov dword [ebp - 0x44], 2
call edi
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.msvbvm60.dll___vbaStrMove]
push eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00432f40
lea ecx, [ebp - 0x20]
call dword [sym.imp.msvbvm60.dll___vbaFreeStr]
mov dword [ebp - 0x74], 0x65
mov dword [ebp - 0x70], 0x64
mov dword [ebp - 0x6c], 3
mov dword [ebp - 0x68], 0x1bc
mov dword [ebp - 0x64], 0x27c
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], 0x3e
mov dword [ebp - 0x54], 0x56
mov dword [ebp - 0x50], esi
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x4c]
push eax
push 0x4104f4
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x44], 2
call fcn.00432f40
mov ecx, dword [0x4842c8]
mov eax, dword [0x4842c4]
add ecx, 1
jo 0x455021
imul ecx, ecx, 0x4b0
jo 0x455021
sub eax, ecx
jo 0x455021
cmp word [0x484304], bx
mov dword [0x4842c4], eax
jne 0x454cd2
sub eax, 0x1f4
jo 0x455021
mov dword [0x4842c4], eax
mov edx, dword [0x4842c0]
mov eax, dword [ebp + 8]
push ebx
push edx
push 1
push ebx
add eax, 0x38
push eax
push 0x10
push ebx
call dword [sym.imp.msvbvm60.dll___vbaRedim]
mov ecx, dword [0x4842c0]
mov edi, dword [sym.imp.msvbvm60.dll___vbaFreeVar]
add esp, 0x1c
xor esi, esi
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x18], esi
cmp esi, dword [ebp - 0x90]
jg 0x454fd7
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x38]
push eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaAryLock]
mov ecx, dword [ebp - 0x7c]
cmp ecx, ebx
je 0x454d4d
cmp word [ecx], 1
jne 0x454d4d
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x454d46
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x7c]
shl esi, 4
mov eax, esi
jmp 0x454d56
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x7c]
mov esi, dword [ecx + 0xc]
lea edx, [ebp - 0x30]
push edx
add esi, eax
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomize]
lea ecx, [ebp - 0x30]
call edi
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomNext]
fstp dword [ebp - 0x44]
mov eax, dword [0x4842c8]
mov ecx, eax
add ecx, 1
jo 0x455021
mov dword [ebp - 0x9c], ecx
fild dword [ebp - 0x9c]
add eax, 2
jo 0x455021
mov dword [ebp - 0xa8], eax
fstp qword [ebp - 0xa4]
fild dword [ebp - 0xa8]
fstp qword [ebp - 0xb0]
fld dword [ebp - 0x44]
fmul qword [ebp - 0xb0]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFPFix]
fsubr qword [ebp - 0xa4]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
lea ecx, [ebp - 0x30]
mov dword [esi + 8], eax
call edi
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomize]
lea ecx, [ebp - 0x30]
call edi
lea eax, [ebp - 0x30]
push eax
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomNext]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x44]
fmul dword [0x4028c0]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFPFix]
fsubr dword [0x4028bc]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
lea ecx, [ebp - 0x30]
mov dword [esi], eax
call edi
lea ecx, [ebp - 0x30]
push ecx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomize]
lea ecx, [ebp - 0x30]
call edi
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomNext]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x44]
fmul dword [0x4028c0]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFPFix]
fsubr dword [0x4028bc]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
lea ecx, [ebp - 0x30]
mov dword [esi + 4], eax
call edi
mov eax, dword [esi + 8]
cmp eax, 3
jne 0x454efd
cmp dword [esi], ebx
je 0x454e07
cmp dword [esi + 4], ebx
je 0x454e07
cmp word [0x484304], bx
je 0x454f1c
cmp eax, 2
jne 0x454f1c
cmp dword [esi], ebx
je 0x454e07
cmp dword [esi + 4], ebx
je 0x454e07
mov eax, dword [esi + 8]
cmp eax, 1
jne 0x454f34
mov eax, dword [esi]
mov ecx, dword [esi + 4]
cmp eax, ecx
jge 0x454f47
mov dword [esi], ecx
mov dword [esi + 4], eax
jmp 0x454f47
cmp eax, 3
jne 0x454f47
mov eax, dword [esi + 4]
imul eax, dword [esi]
jo 0x455021
mov dword [esi], eax
cmp word [0x484304], bx
je 0x454fb7
lea ecx, [ebp - 0x30]
push ecx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomize]
lea ecx, [ebp - 0x30]
call edi
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomNext]
fstp dword [ebp - 0x44]
fld dword [ebp - 0x44]
fadd st(0), st(0)
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFPFix]
fsubr dword [0x4028b8]
fnstsw ax
test al, 0xd
jne 0x45501c
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
lea ecx, [ebp - 0x30]
mov dword [esi + 0xc], eax
call edi
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.msvbvm60.dll___vbaAryUnlock]
mov ecx, dword [ebp - 0x18]
mov eax, 1
add eax, ecx
jo 0x455021
mov dword [ebp - 0x18], eax
mov esi, eax
jmp 0x454d07
wait
push 0x454ffd
jmp 0x454ff2
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaAryUnlock]
ret
jmp fcn.004032cc
call dword [sym.imp.msvbvm60.dll___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4032c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4028d8
xor esi, esi
mov dword [ebp - 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp + 0x14]
mov eax, dword [edx]
cmp eax, 3
mov dword [ebp - 0x18], esi
ja case.default.0x455074
jmp dword [eax*4 + 0x4550e4]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
add ecx, dword [edx]
jo 0x4550f4
mov dword [ebp - 0x18], ecx
jmp case.default.0x455074
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
sub ecx, dword [edx]
jo 0x4550f4
mov dword [ebp - 0x18], ecx
jmp case.default.0x455074
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ebp + 0x10]
imul ecx, dword [edx]
jo 0x4550f4
mov dword [ebp - 0x18], ecx
jmp case.default.0x455074
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
mov ecx, dword [ebp + 0x10]
cdq
idiv dword [ecx]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov edx, dword [eax]
push eax
call dword [edx + 8]
mov eax, dword [ebp + 0x18]
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x14]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 0x14
call dword [sym.imp.msvbvm60.dll___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4032c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4028e0
xor edi, edi
mov dword [ebp - 4], edi
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
push ebx
call dword [eax + 4]
mov ecx, dword [ebx + 0x38]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0xbc], edi
mov dword [ebx + 0x3c], 0xffffffff
call dword [sym.imp.msvbvm60.dll___vbaAryLock]
mov ecx, dword [ebp - 0xbc]
cmp ecx, edi
je 0x4551c0
cmp word [ecx], 1
jne 0x4551c0
mov esi, dword [0x4842e8]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub esi, edx
cmp esi, eax
jb 0x4551b9
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xbc]
shl esi, 4
mov eax, esi
jmp 0x4551cc
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ecx + 0xc]
add ecx, eax
cmp word [0x484304], di
je 0x4551eb
cmp dword [ecx + 0xc], edi
jne 0x4551e6
mov eax, dword [ecx]
mov dword [ebx + 0x34], eax
jmp 0x455217
mov ecx, dword [ecx + 4]
jmp 0x455214
mov edx, dword [ebx]
lea eax, [ebp - 0x54]
push eax
lea eax, [ecx + 8]
push eax
lea eax, [ecx + 4]
push eax
push ecx
push ebx
call dword [edx + 0x20]
cmp eax, edi
jge 0x455211
push 0x20
push 0x40f21c
push ebx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x54]
mov dword [ebx + 0x34], ecx
mov edx, dword [ebx + 0x50]
mov eax, dword [ebx + 0x34]
mov dword [edx], eax
mov esi, 1
mov eax, 3
cmp esi, eax
jg 0x4553e2
lea ecx, [ebp - 0x30]
push ecx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomize]
mov edi, dword [sym.imp.msvbvm60.dll___vbaFreeVar]
lea ecx, [ebp - 0x30]
call edi
lea edx, [ebp - 0x30]
push edx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], 0xa
call dword [sym.imp.msvbvm60.dll_rtcRandomNext]
fstp dword [ebp - 0x54]
cmp esi, 4
jb 0x45527a
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov eax, dword [ebx + 0x50]
mov ecx, dword [eax]
add ecx, 5
jo 0x455652
mov dword [ebp - 0xdc], ecx
fild dword [ebp - 0xdc]
fstp qword [ebp - 0xe4]
fld dword [ebp - 0x54]
fmul dword [0x40273c]
fnstsw ax
test al, 0xd
jne 0x45564d
call dword [sym.imp.msvbvm60.dll___vbaFPFix]
fsubr qword [ebp - 0xe4]
fnstsw ax
test al, 0xd
jne 0x45564d
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
mov edx, dword [ebx + 0x50]
lea ecx, [ebp - 0x30]
mov dword [edx + esi*4], eax
call edi
cmp esi, 4
mov edi, dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
jb 0x4552e1
call edi
cmp esi, 4
jb 0x4552e8
call edi
mov eax, dword [ebx + 0x50]
mov ecx, dword [eax + esi*4]
cmp ecx, dword [eax]
jne 0x455301
cmp esi, 1
mov dword [ebp - 0xe8], 0
je 0x45530b
mov dword [ebp - 0xe8], 1
cmp esi, 4
jb 0x455319
call edi
cmp esi, 4
jb 0x455319
call edi
mov eax, dword [ebx + 0x50]
mov edi, dword [eax + esi*4]
mov ecx, dword [eax + 4]
xor edx, edx
cmp edi, ecx
setne dl
xor ecx, ecx
cmp edi, dword [eax]
setne cl
test ecx, edx
jne 0x455343
cmp esi, 2
mov dword [ebp - 0xec], 0
je 0x45534d
mov dword [ebp - 0xec], 1
cmp esi, 4
mov edi, dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
jb 0x45535a
call edi
cmp esi, 4
jb 0x455368
call edi
cmp esi, 4
jb 0x455368
call edi
mov eax, dword [ebx + 0x50]
mov edi, dword [eax + esi*4]
mov ecx, dword [eax + 4]
xor edx, edx
cmp edi, ecx
setne dl
xor ecx, ecx
cmp edi, dword [eax]
setne cl
and edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edi, dword [eax + 8]
setne cl
test ecx, edx
jne 0x45539c
cmp esi, 3
jne 0x45539c
xor eax, eax
jmp 0x4553a1
mov eax, 1
mov ecx, dword [ebp - 0xe8]
xor edx, edx
test edi, edi
mov edi, dword [ebp - 0xec]
setg dl
and edx, ecx
neg edx
sbb edx, edx
neg edx
and edx, edi
neg edx
sbb edx, edx
neg edx
test eax, edx
je 0x455231
mov eax, 1
add eax, esi
jo 0x455652
mov esi, eax
xor edi, edi
jmp 0x455224
mov dword [ebp - 0xd0], 3
mov dword [ebp - 0xcc], 1
cmp edi, dword [ebp - 0xd0]
jg 0x4554ca
lea eax, [ebp - 0x30]
mov esi, 0xa
push eax
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], esi
call dword [sym.imp.msvbvm60.dll_rtcRandomize]
lea ecx, [ebp - 0x30]
call dword [sym.imp.msvbvm60.dll___vbaFreeVar]
lea ecx, [ebp - 0x30]
push ecx
mov dword [ebp - 0x28], 0x80020004
mov dword [ebp - 0x30], esi
call dword [sym.imp.msvbvm60.dll_rtcRandomNext]
fstp dword [ebp - 0x54]
fld dword [ebp - 0x54]
fmul dword [0x402738]
fnstsw ax
test al, 0xd
jne 0x45564d
call dword [sym.imp.msvbvm60.dll___vbaFPFix]
fsubr dword [0x402180]
fnstsw ax
test al, 0xd
jne 0x45564d
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
lea ecx, [ebp - 0x30]
mov esi, eax
call dword [sym.imp.msvbvm60.dll___vbaFreeVar]
cmp esi, 4
jb 0x455480
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
cmp edi, 4
mov edx, dword [ebx + 0x50]
lea eax, [edx + esi*4]
mov esi, 0x4003
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x50], esi
jb 0x45549c
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebx + 0x50]
lea edx, [ecx + edi*4]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x40]
push ecx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x40], esi
call fcn.00432e00
mov edx, dword [ebp - 0xcc]
add edx, edi
jo 0x455652
mov edi, edx
jmp 0x4553f6
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.msvbvm60.dll___vbaAryUnlock]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
xor esi, esi
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
push esi
or edi, 0xffffffff
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], 0x40
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], 8
call fcn.00432f40
mov eax, dword [0x4842c4]
cmp eax, esi
jle 0x455572
mov dword [0x4842ec], eax
call fcn.00409f48
mov dword [ebp - 0x54], eax
call dword [sym.imp.msvbvm60.dll___vbaSetSystemError]
mov edx, dword [ebp - 0x54]
mov dword [0x4842f0], edx
jmp 0x455596
cmp dword [0x4842e8], esi
jne 0x455580
mov dword [0x4842f4], esi
call fcn.00409f48
mov dword [ebp - 0x54], eax
call dword [sym.imp.msvbvm60.dll___vbaSetSystemError]
mov eax, dword [ebp - 0x54]
mov dword [0x4842f0], eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
push esi
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov word [0x484306], di
mov dword [0x484308], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], 5
call fcn.00432f40
wait
push 0x45562e
jmp 0x455620
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.msvbvm60.dll___vbaAryUnlock]
ret
jmp fcn.004032cc
call dword [sym.imp.msvbvm60.dll___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4032c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xbc
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4028f0
xor esi, esi
mov dword [ebp - 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x58]
push eax
push esi
lea ecx, [ebp - 0x54]
or edi, 0xffffffff
push ecx
lea edx, [ebp - 0x50]
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x80], esi
push edx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], 3
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], 6
mov dword [ebp - 0x50], 2
call fcn.00432f40
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x54]
push ecx
push esi
push 0x4842ec
lea edx, [ebp - 0x50]
push edx
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 0xb
call fcn.00432f40
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x54]
push ecx
push esi
push 0x4842c0
lea edx, [ebp - 0x50]
push edx
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 0xc
call fcn.00432f40
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x70], edi
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x58]
push ecx
push esi
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 0xa
call fcn.00432f40
mov eax, dword [0x4842e8]
mov ebx, dword [sym.imp.msvbvm60.dll___vbaStrMove]
mov edi, dword [sym.imp.msvbvm60.dll___vbaStrCat]
mov ecx, eax
add ecx, 2
jo 0x456227
sub eax, 2
jo 0x456227
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x28], eax
cmp eax, ecx
jg 0x455d69
cmp eax, esi
jl 0x455d43
cmp eax, dword [0x4842c0]
jg 0x455d43
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x38]
push edx
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.msvbvm60.dll___vbaAryLock]
mov ecx, dword [ebp - 0x8c]
cmp ecx, esi
je 0x455921
cmp word [ecx], 1
jne 0x455921
mov edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0x28]
sub eax, edx
cmp eax, dword [ecx + 0x10]
mov dword [ebp - 0x84], eax
jb 0x45591c
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x84]
shl eax, 4
jmp 0x45592d
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x8c]
mov ecx, dword [ecx + 0xc]
add ecx, eax
mov eax, dword [ebp - 0x2c]
mov edx, eax
imul edx, edx, 0x42
jo 0x456227
add edx, 0x78
jo 0x456227
cmp eax, esi
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x30], edx
je 0x455980
cmp eax, 4
je 0x455980
cmp eax, 2
jne 0x455970
mov dword [ebp - 0x24], 0x69efff
mov dword [ebp - 0x18], 0xb4
jmp 0x45598e
mov dword [ebp - 0x24], 0x2c5d8
mov dword [ebp - 0x18], 0x9c
jmp 0x45598e
mov dword [ebp - 0x24], 0x1099a8
mov dword [ebp - 0x18], 0x80
cmp word [0x484304], si
je 0x455b80
cmp dword [ecx + 0xc], esi
lea eax, [ecx + 8]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
jne 0x455a9d
lea ecx, [ebp - 0x34]
push ecx
push eax
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x2c]
cmp eax, esi
jge 0x4559ce
mov ecx, dword [ebp + 8]
push 0x2c
push 0x40f21c
push ecx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp + 8]
lea edx, [eax + 4]
mov dword [ebp - 0xb4], edx
mov edx, dword [ecx]
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [eax + 8]
push ecx
mov ecx, dword [ebp - 0xb4]
push ecx
push eax
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x20]
cmp eax, esi
jge 0x455a0f
mov ecx, dword [ebp + 8]
push 0x20
push 0x40f21c
push ecx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov edx, dword [ebp - 0x34]
push 0x410910
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call ebx
push eax
push 0x41091c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call ebx
push eax
mov eax, dword [ebp - 0xb4]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x40]
call ebx
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call ebx
push eax
push 0x410924
call edi
mov edx, eax
lea ecx, [ebp - 0x48]
call ebx
mov edx, dword [ebp - 0x50]
push eax
push edx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x4c]
call ebx
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x1c]
call ebx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x34]
push eax
jmp 0x455c39
lea ecx, [ebp - 0x38]
push ecx
push eax
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x2c]
cmp eax, esi
jge 0x455abf
mov ecx, dword [ebp + 8]
push 0x2c
push 0x40f21c
push ecx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0x50]
push edx
add eax, 8
push eax
mov eax, dword [ebp - 0x90]
lea edx, [eax + 4]
push edx
push eax
mov eax, dword [ebp + 8]
push eax
call dword [ecx + 0x20]
cmp eax, esi
jge 0x455afa
mov ecx, dword [ebp + 8]
push 0x20
push 0x40f21c
push ecx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov edx, dword [ebp - 0x90]
mov eax, dword [edx]
push eax
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x34]
call ebx
push eax
push 0x41091c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call ebx
mov ecx, dword [ebp - 0x38]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x40]
call ebx
push eax
push 0x410930
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call ebx
mov edx, dword [ebp - 0x50]
push eax
push edx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x48]
call ebx
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x1c]
call ebx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x34]
push edx
push 6
call dword [sym.imp.msvbvm60.dll___vbaFreeStrList]
add esp, 0x1c
jmp 0x455c44
mov eax, dword [ebp + 8]
mov edx, dword [eax]
lea eax, [ebp - 0x38]
push eax
add ecx, 8
push ecx
mov ecx, dword [ebp + 8]
push ecx
call dword [edx + 0x2c]
cmp eax, esi
jge 0x455baa
mov edx, dword [ebp + 8]
push 0x2c
push 0x40f21c
push edx
push eax
call dword [sym.imp.msvbvm60.dll___vbaHresultCheckObj]
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x34]
call ebx
push eax
push 0x41091c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call ebx
mov edx, dword [ebp - 0x38]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x40]
call ebx
push eax
push 0x41091c
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call ebx
push eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 4]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x48]
call ebx
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x4c]
call ebx
push eax
push 0x410940
call edi
mov edx, eax
lea ecx, [ebp - 0x1c]
call ebx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x34]
push edx
push 7
call dword [sym.imp.msvbvm60.dll___vbaFreeStrList]
add esp, 0x20
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x18]
or eax, 0xffffffff
add ecx, 2
jo 0x456227
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x5c], eax
add edx, 2
mov dword [ebp - 0x64], ecx
jo 0x456227
mov dword [ebp - 0x60], edx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x58]
push ecx
push edx
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x50]
push ecx
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], 0x646464
mov dword [ebp - 0x50], 9
call fcn.00432f40
or eax, 0xffffffff
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x58], eax
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x18]
push ecx
lea edx, [ebp - 0x58]
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 9
push edx
lea eax, [ebp - 0x54]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x50]
push eax
call fcn.00432f40
lea ecx, [ebp - 0x8c]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaAryUnlock]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x2c]
add edx, 1
jo 0x456227
mov dword [ebp - 0x2c], edx
mov edx, 1
add edx, eax
jo 0x456227
mov dword [ebp - 0x28], edx
mov eax, edx
jmp 0x4558b7
mov eax, dword [0x484208]
cdq
sub eax, edx
sar eax, 1
cdq
mov ecx, 3
idiv ecx
mov ecx, 0xf6
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], 0x66
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x6c], 0x148
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], 0x7d
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x50], 2
imul edx, edx, 0x50
jo 0x456227
mov eax, edx
add eax, 0x50
jo 0x456227
sub ecx, edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x70], eax
jo 0x456227
mov dword [ebp - 0x64], ecx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0x58]
push eax
push esi
lea ecx, [ebp - 0x54]
push ecx
lea edx, [ebp - 0x50]
push edx
call fcn.00432f40
xor edi, edi
mov dword [ebp - 0x20], edi
mov eax, 1
cmp edi, eax
jg 0x4560f1
xor edx, edx
mov dword [ebp - 0x28], edx
mov eax, 1
cmp edx, eax
jg 0x4560da
mov eax, edi
imul eax, eax, 0x60
jo 0x456227
add eax, 0x20f
jo 0x456227
mov ecx, edx
imul ecx, ecx, 0x59
jo 0x456227
add ecx, 0xd0
jo 0x456227
imul edi, edi, 2
jo 0x456227
add edi, edx
jo 0x456227
cmp edi, 4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], ecx
jb 0x455e8e
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x50]
cmp dword [edx + edi*4], 0xa
jge 0x455ea6
add eax, 0x10
jo 0x456227
mov dword [ebp - 0x18], eax
mov edi, dword [ebp - 0x20]
or edx, 0xffffffff
add ecx, 2
jo 0x456227
add eax, 2
jo 0x456227
imul edi, edi, 2
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 0x28]
jo 0x456227
add edi, ecx
jo 0x456227
cmp edi, 4
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x6c], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x58], esi
jb 0x455efe
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [edx + 0x50]
lea ecx, [ebp - 0x58]
push ecx
mov dword [ebp - 0x54], 0x646464
mov dword [ebp - 0x50], 9
mov ecx, dword [eax + edi*4]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x34]
call ebx
push eax
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x50]
push eax
call fcn.00432f40
lea ecx, [ebp - 0x34]
call dword [sym.imp.msvbvm60.dll___vbaFreeStr]
mov edi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + 8]
mov ecx, edi
imul ecx, ecx, 2
jo 0x456227
add ecx, eax
jo 0x456227
cmp dword [edx + 0x3c], ecx
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x70], esi
jne 0x456024
or ecx, 0xffffffff
imul edi, edi, 2
jo 0x456227
add edi, eax
jo 0x456227
cmp edi, 4
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], esi
jb 0x455fc5
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x18]
push edx
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [edx + 0x50]
lea ecx, [ebp - 0x58]
push ecx
mov dword [ebp - 0x54], 0x1111f0
mov dword [ebp - 0x50], 9
mov ecx, dword [eax + edi*4]
push ecx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x34]
call ebx
push eax
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x50]
push eax
jmp 0x4560af
or ecx, 0xffffffff
imul edi, edi, 2
jo 0x456227
add edi, eax
jo 0x456227
cmp edi, 4
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], esi
jb 0x456055
call dword [sym.imp.msvbvm60.dll___vbaGenerateBoundsError]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x5c]
push ecx
mov ecx, dword [eax + 0x50]
lea edx, [ebp - 0x58]
push edx
mov dword [ebp - 0x54], 0xabfeff
mov dword [ebp - 0x50], 9
mov edx, dword [ecx + edi*4]
push edx
call dword [sym.imp.msvbvm60.dll___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x34]
call ebx
push eax
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x50]
push ecx
call fcn.00432f40
lea ecx, [ebp - 0x34]
call dword [sym.imp.msvbvm60.dll___vbaFreeStr]
mov ecx, dword [ebp - 0x28]
mov edi, dword [ebp - 0x20]
mov eax, 1
add eax, ecx
jo 0x456227
mov dword [ebp - 0x28], eax
mov edx, eax
jmp 0x455e2c
mov eax, 1
add eax, edi
jo 0x456227
mov dword [ebp - 0x20], eax
mov edi, eax
jmp 0x455e1a
cmp dword [0x484308], esi
je 0x4561bc
or eax, 0xffffffff
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], eax
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x54]
push eax
push esi
push 0x484308
lea ecx, [ebp - 0x50]
push ecx
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x74], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], 0xd
call fcn.00432f40
fild dword [0x484308]
mov ecx, dword [0x484308]
fstp qword [ebp - 0xbc]
call dword [sym.imp.msvbvm60.dll___vbaI4Abs]
mov dword [ebp - 0xc0], eax
fild dword [ebp - 0xc0]
fstp qword [ebp - 0xc8]
fld qword [ebp - 0xbc]
fdiv qword [ebp - 0xc8]
fild dword [0x484308]
fstp qword [ebp - 0xd0]
fadd qword [ebp - 0xd0]
fnstsw ax
test al, 0xd
jne 0x456222
call dword [sym.imp.msvbvm60.dll___vbaFpI4]
mov dword [0x484308], eax
wait
push 0x456203
jmp 0x4561ec
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.msvbvm60.dll___vbaAryUnlock]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.msvbvm60.dll___vbaFreeStr]
ret
jmp fcn.004032cc
call dword [sym.imp.msvbvm60.dll___vbaErrorOverflow]
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4032c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x10
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402900
xor esi, esi
mov dword [ebp - 4], esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp + 0xc]
mov dword [edx], esi
mov eax, dword [eax]
cmp eax, 3
mov dword [ebp - 0x18], esi
ja case.default.0x456279
jmp dword [eax*4 + 0x4562dc]
mov edx, 0x410950
jmp 0x45629a
mov edx, 0x410958
jmp 0x45629a
mov edx, 0x410960
jmp 0x45629a
mov edx, 0x410968
lea ecx, [ebp - 0x18]
call dword [sym.imp.msvbvm60.dll___vbaStrCopy]
push 0x4562b5
jmp 0x4562b4
ret