Function at 0x451940
Capabilities:
Check http status code
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x405996
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401858
xor esi, esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x68], esi
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edi, dword [ebp + 8]
push edi
call fcn.0045fe30
mov byte [ebp - 0x3c], al
mov dword [ebp - 4], 4
movzx ax, al
cmp word [0x5644e0], ax
jle 0x451a3e
mov dword [ebp - 4], 5
mov word [0x5644e0], ax
mov ebx, 6
mov dword [ebp - 4], ebx
cmp dword [0x561110], 0x1dc
jle 0x451a82
mov dword [ebp - 4], 7
cmp dword [0x562a9c], esi
jne 0x451aa2
mov dword [ebp - 4], 8
mov dword [0x562a9c], 0x3e7
mov dword [ebp - 4], 9
mov word [0x562a98], si
jmp 0x451aa2
mov dword [ebp - 4], 0xa
cmp dword [0x562a9c], 0x3e7
jne 0x451aa2
mov dword [ebp - 4], 0xb
mov dword [0x562a9c], esi
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 4], 0xd
cmp word [0x56108c], si
je 0x451b12
mov dword [ebp - 4], 0xe
mov eax, dword [0x564560]
fld dword [0x56118c]
fadd dword [eax + 0x3c]
fstp dword [eax + 0x3c]
mov dword [ebp - 4], 0xf
mov ecx, dword [0x564560]
fld dword [ecx + 0x3c]
fcomp dword [0x401780]
fnstsw ax
test ah, 0x41
jne 0x451b12
mov dword [ebp - 4], 0x10
push edi
call fcn.0044d790
mov dword [ebp - 4], 0x11
mov edx, dword [0x564560]
mov dword [edx + 0x3c], esi
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov ax, word [0x5644e0]
cmp word [0x5644e8], ax
je 0x454d04
mov dword [ebp - 4], 0x14
call fcn.00451720
mov dword [ebp - 4], 0x15
call fcn.00550c30
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, 0x5644ec
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
mov dword [ebp - 4], 0x17
mov edx, dword [ebp + 0x10]
mov edx, dword [edx]
mov ecx, 0x5644f0
call edi
mov dword [ebp - 4], 0x18
mov ax, word [0x5644e0]
mov word [0x5644e8], ax
mov dword [ebp - 4], 0x19
push esi
call fcn.00442570
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x564560]
mov dword [ecx + 0x38], esi
mov dword [ebp - 4], 0x1b
mov dword [0x563660], ebx
mov dword [ebp - 4], 0x1c
mov eax, dword [0x562a88]
mov edx, dword [eax]
push 0xff
push eax
call dword [edx + 0x3c]
fnclex
cmp eax, esi
jge 0x451be6
push 0x3c
push 0x4212ac
mov ecx, dword [0x562a88]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d
mov ebx, 1
mov dword [ebp - 0x24], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, 8
cmp ebx, eax
jg 0x454cfc
mov dword [ebp - 4], 0x1e
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x5644e0]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
xor edx, edx
mov dl, byte [eax]
cmp ebx, edx
jg 0x454ce6
mov dword [ebp - 4], 0x20
mov edx, dword [eax + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
mov dl, byte [eax]
mov dword [ebp - 4], 0x21
cmp dl, 1
jne 0x451e7a
mov dword [ebp - 4], 0x22
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
fnclex
test eax, eax
jge 0x451cb7
push 0x44
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x23
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [0x5634d4], ecx
mov dword [ebp - 4], 0x24
mov dword [0x5634dc], 0
mov dword [ebp - 4], 0x25
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
cmp byte [ecx], 0
jbe 0x454ce6
mov dword [ebp - 4], 0x26
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x27
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
add eax, edx
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x20], ecx
mov dword [ebp - 4], 0x28
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx]
add edx, 0x64
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x29
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
mov dword [ebp - 0x1d0], edx
fild dword [ebp - 0x1d0]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x2a
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
xor edx, edx
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0x2b
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
jmp 0x454ce6
mov dword [ebp - 4], 0x2c
cmp dl, 2
jne 0x451e9c
mov dword [ebp - 4], 0x2d
movsx edx, word [eax + 2]
push edx
call fcn.00442570
jmp 0x454ce6
mov dword [ebp - 4], 0x2e
cmp dl, 3
jne 0x451f4f
mov dword [ebp - 4], 0x2f
movsx ecx, word [eax + 2]
sub ecx, 0
je 0x451f14
dec ecx
je 0x451eed
dec ecx
jne 0x454ce6
mov dword [ebp - 4], 0x33
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x5644ec
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x454ce6
mov dword [ebp - 4], 0x32
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x5644f0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x454ce6
mov dword [ebp - 4], 0x30
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x5644ec
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x31
xor edx, edx
mov ecx, 0x5644f0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x454ce6
mov dword [ebp - 4], 0x34
cmp dl, 4
jne 0x4522d3
mov dword [ebp - 4], 0x35
mov cx, word [eax + 2]
test cx, cx
jle 0x454ce6
mov dword [ebp - 4], 0x36
cmp word [0x5610b2], 0
je 0x452090
mov dword [ebp - 4], 0x37
mov eax, dword [eax + 4]
mov edx, dword [0x562aa0]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x424408
movsx ecx, cx
mov eax, dword [0x562af8]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x45200c
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x38
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4521b0
push 0xec
push 0x420714
mov edx, dword [0x562aa0]
push edx
jmp 0x4521a9
mov dword [ebp - 4], 0x39
mov eax, dword [eax + 4]
mov edx, dword [0x562aa0]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x424408
movsx ecx, cx
mov eax, dword [0x562af8]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x452120
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4521b0
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x5644dc]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x562af8]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x3c
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x3d
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x3e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x3f
jmp 0x454ce0
mov dword [ebp - 4], 0x40
cmp dl, 5
jne 0x452527
mov dword [ebp - 4], 0x41
mov dx, word [eax + 2]
test dx, dx
jle 0x454ce6
mov dword [ebp - 4], 0x42
cmp word [0x5610b2], 0
je 0x452380
mov dword [ebp - 4], 0x43
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x452422
jmp 0x45240a
mov dword [ebp - 4], 0x44
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x452422
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x45
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x46
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x47
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x49
jmp 0x454ce0
mov dword [ebp - 4], 0x4a
cmp dl, 6
jne 0x45289b
mov dword [ebp - 4], 0x4b
mov dx, word [eax + 2]
test dx, dx
jle 0x454ce6
mov dword [ebp - 4], 0x4c
cmp word [0x5610b2], 0
je 0x452660
mov dword [ebp - 4], 0x4d
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x4525e7
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4527a2
jmp 0x45278a
mov dword [ebp - 4], 0x4f
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x452702
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x50
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4527a2
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x51
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x52
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x53
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x55
jmp 0x454ce0
mov dword [ebp - 4], 0x56
cmp dl, 7
jne 0x452dd6
mov dword [ebp - 4], 0x57
cmp word [eax + 2], 0
jle 0x454ce6
mov dword [ebp - 4], 0x58
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x59
xor eax, eax
mov al, byte [ecx + 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x5a
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov eax, dword [eax + 0xc]
sub eax, ecx
mov dword [eax], 0
mov dword [ebp - 4], 0x5b
cmp word [0x5610b2], 0
je 0x452aa1
mov dword [ebp - 4], 0x5c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov ecx, dword [0x562aa0]
mov ecx, dword [ecx]
push 0
push 0
push 0
push edx
mov edx, dword [ebp - 0x38]
push edx
push 0xffffffffffffffff
push 0x424414
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, dword [0x562afc]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
push edx
mov dword [ebp - 0x1f0], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov eax, dword [0x562aa0]
push eax
mov ecx, dword [ebp - 0x1f0]
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x4529cf
push 0xe8
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x5d
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x452c43
mov dword [ebp - 4], 0x5f
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x60
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
push 0
push 0
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x38]
push edx
push ebx
push eax
call dword [ecx + 0xec]
fnclex
test eax, eax
jge 0x452a95
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x61
jmp 0x4529e2
mov dword [ebp - 4], 0x62
lea eax, [edx + edx*2]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x562aa0]
mov edx, dword [edx]
push 0
push ecx
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 5
push ecx
push 0
push 0
push 0
push 0x424414
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*4 + 2]
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
mov dword [ebp - 0x1f8], edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edx, dword [0x562aa0]
push edx
mov eax, dword [ebp - 0x1f8]
call dword [eax + 0xe8]
fnclex
test eax, eax
jge 0x452b64
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x63
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x64
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x452c43
mov dword [ebp - 4], 0x65
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x66
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
push eax
push 0
push 0
push ebx
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x452c37
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x67
jmp 0x452b77
mov dword [ebp - 4], 0x68
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 4], 0
mov dword [ebp - 4], 0x69
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx + 3]
add edx, 5
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x6a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov dword [ebp - 0x1fc], edx
fild dword [ebp - 0x1fc]
fstp dword [ebp - 0x200]
fld dword [ebp - 0x200]
fmul dword [0x561180]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x6b
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x6c
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*4], eax
mov dword [ebp - 4], 0x6d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x6e
jmp 0x454ce0
mov dword [ebp - 4], 0x6f
cmp dl, 8
jne 0x453254
mov dword [ebp - 4], 0x70
mov cx, word [eax + 2]
test cx, cx
jle 0x454ce6
mov dword [ebp - 4], 0x71
cmp word [0x5610b2], 0
je 0x452f8d
mov dword [ebp - 4], 0x72
mov eax, dword [eax + 4]
mov edx, dword [0x562aa0]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x424408
movsx ecx, cx
mov eax, dword [0x562af8]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x452e93
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x73
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x452f15
push 0xec
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x74
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x453131
push 0xec
push 0x420714
mov edx, dword [0x562aa0]
push edx
jmp 0x45312a
mov dword [ebp - 4], 0x75
mov eax, dword [eax + 4]
mov edx, dword [0x562aa0]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x424408
movsx ecx, cx
mov eax, dword [0x562af8]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x45301d
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x76
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4530ad
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x77
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x453131
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x78
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x5644dc]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x562af8]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 3]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x79
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x7a
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x7b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x7c
jmp 0x454ce0
mov dword [ebp - 4], 0x7d
cmp dl, 9
jne 0x453593
mov dword [ebp - 4], 0x7e
cmp word [0x5610b2], 0
je 0x4533bf
mov dword [ebp - 4], 0x7f
mov eax, dword [eax + 4]
mov edx, dword [0x562aa0]
mov ecx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x4243e4
push ebx
mov edx, dword [0x562aa0]
push edx
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x4532d1
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x80
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x453347
push 0xec
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x81
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x45352a
push 0xec
push 0x420714
mov edx, dword [0x562aa0]
push edx
jmp 0x453523
mov dword [ebp - 4], 0x82
mov eax, dword [eax + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push 0
push 0x42522c
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x453422
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x83
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4534a6
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x84
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x45352a
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x85
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x86
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x63
mov dword [ebp - 4], 0x87
mov dword [0x563660], 0xc8
mov dword [ebp - 4], 0x88
mov word [0x5644f4], bx
jmp 0x454ce6
mov dword [ebp - 4], 0x89
cmp dl, 0xa
jne 0x453756
mov dword [ebp - 4], 0x8a
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx]
test al, al
jbe 0x4535ce
mov dword [ebp - 4], 0x8b
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x563534], edx
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 1]
test al, al
jbe 0x45361b
mov dword [ebp - 4], 0x8d
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x563538], edx
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 2]
test al, al
jbe 0x453668
mov dword [ebp - 4], 0x8f
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x56353c], edx
mov dword [ebp - 4], 0x90
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 3]
test al, al
jbe 0x4536b5
mov dword [ebp - 4], 0x91
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x563540], edx
mov dword [ebp - 4], 0x92
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 4]
test al, al
jbe 0x453702
mov dword [ebp - 4], 0x93
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x563544], edx
mov dword [ebp - 4], 0x94
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
sub ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ecx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 5]
test al, al
jbe 0x454ce6
mov dword [ebp - 4], 0x95
movzx ax, al
dec eax
movsx ecx, ax
mov dword [0x563548], ecx
jmp 0x454ce6
mov dword [ebp - 4], 0x96
cmp dl, 0xd
jne 0x453ecc
mov dword [ebp - 4], 0x97
mov ax, word [eax + 2]
test ax, ax
jle 0x454ce6
mov dword [ebp - 4], 0x98
push 0x424440
movsx edx, ax
mov eax, dword [0x562b00]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x562aa0]
mov edx, dword [eax]
lea ecx, [ebp - 0xa0]
push ecx
push ebx
push eax
call dword [edx + 0xe4]
fnclex
test eax, eax
jge 0x4537e0
push 0xe4
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x99
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 4], 0
mov dword [ebp - 4], 0x9a
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x9b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x20c], edx
fild dword [ebp - 0x20c]
fstp dword [ebp - 0x210]
fld dword [ebp - 0x210]
fmul dword [0x561184]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x9c
mov edx, dword [0x5644dc]
push edx
lea eax, [ebp - 0x9c]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
mov eax, dword [0x5644dc]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
add eax, 4
push eax
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
push eax
push 0
push ebx
mov edx, dword [0x562aa0]
push edx
call dword [ecx + 0xf0]
fnclex
test eax, eax
jge 0x453967
push 0xf0
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
lea ecx, [ebp - 0x98]
push ecx
call edi
lea edx, [ebp - 0x9c]
push edx
call edi
mov dword [ebp - 4], 0x9d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx ecx, word [ecx + eax*4 + 2]
mov eax, dword [0x562b00]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*8 + 4]
mov eax, 2
sub eax, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov dword [edx + eax*4], ecx
mov dword [ebp - 4], 0x9e
mov eax, dword [0x5644dc]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
shl ecx, 4
mov edx, dword [eax + 0xc]
mov eax, dword [ecx + edx + 0x14]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x214], edx
mov ecx, dword [eax + 0xc]
lea eax, [edx*4]
mov ebx, ecx
sub ebx, eax
mov eax, dword [ebx + 4]
mov ebx, 2
sub ebx, edx
cdq
idiv dword [ecx + ebx*4]
dec eax
mov edx, 3
sub edx, dword [ebp - 0x214]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0x9f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0xa0
test al, al
je 0x453dc9
cmp al, 1
je 0x453dc9
cmp al, 2
je 0x453dc9
cmp al, 3
je 0x453dc9
mov dword [ebp - 4], 0xa5
cmp al, 4
je 0x453ce7
cmp al, 5
je 0x453ce7
cmp al, 6
je 0x453ce7
cmp al, 7
je 0x453ce7
mov dword [ebp - 4], 0xaa
cmp al, 8
je 0x453bea
cmp al, 9
je 0x453bea
cmp al, 0xa
je 0x453bea
cmp al, 0xb
je 0x453bea
mov dword [ebp - 4], 0xaf
cmp al, 0xc
je 0x453b0e
cmp al, 0xd
je 0x453b0e
cmp al, 0xe
je 0x453b0e
cmp al, 0xf
jne 0x454ce6
mov dword [ebp - 4], 0xb0
xor dx, dx
mov dl, al
sub edx, 3
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xb1
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xb2
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xb3
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 2
jmp 0x454ce6
mov dword [ebp - 4], 0xab
xor cx, cx
mov cl, al
inc ecx
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xac
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xad
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x214], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov ecx, 0x12c
sub ecx, dword [eax + edx*4]
mov edx, 5
sub edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x218]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xae
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 2
jmp 0x454ce6
mov dword [ebp - 4], 0xa6
movzx ax, al
add eax, 5
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa7
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa8
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xa9
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 1
jmp 0x454ce6
mov dword [ebp - 4], 0xa1
xor cx, cx
mov cl, al
add ecx, 9
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa2
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa3
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x12c
sub edx, eax
mov eax, 5
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa4
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 1
jmp 0x454ce6
mov dword [ebp - 4], 0xb4
cmp dl, 0xe
jne 0x454354
mov dword [ebp - 4], 0xb5
mov dx, word [eax + 2]
test dx, dx
jle 0x454ce6
mov dword [ebp - 4], 0xb6
cmp word [0x5610b2], 0
je 0x454083
mov dword [ebp - 4], 0xb7
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x453f8c
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xb8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x454014
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xb9
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
add ecx, 2
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 3]
push ecx
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x45425b
jmp 0x454243
mov dword [ebp - 4], 0xba
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x454125
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xbb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4541c5
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
movzx cx, byte [eax]
add ecx, 2
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 3]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x45425b
push 0xec
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbd
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xbe
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0xbf
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], pe_nt_image_headers32
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xc1
jmp 0x454ce0
mov dword [ebp - 4], 0xc2
cmp dl, 0xf
jne 0x454809
mov dword [ebp - 4], 0xc3
cmp word [eax + 2], 0
jle 0x454ce6
mov dword [ebp - 4], 0xc4
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
shl eax, 3
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0xc5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea edx, [eax + eax*2]
shl edx, 1
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
mov dword [ebp - 4], 0xc6
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xc7
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x563704]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
mov dword [ebp - 4], 0xc8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x563704]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 2
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xc9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x563704]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 3
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 0xc]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xca
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax + 4], 0xffffffff
jne 0x45465b
mov dword [ebp - 4], 0xcb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x5644e0]
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [eax], ecx
mov dword [ebp - 4], 0xcc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx + 2]
mov edx, 4
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xcd
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x62
jmp 0x454ce6
mov dword [ebp - 4], 0xce
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
movsx eax, word [edx + eax*4 + 2]
mov edx, dword [0x563704]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*8]
mov edx, dword [edx + 0xc]
fild dword [edx + eax*4 + 0x18]
fstp qword [ebp - 0x228]
fld dword [0x561180]
fmul qword [ebp - 0x228]
fstp dword [ecx + 8]
mov dword [ebp - 4], 0xcf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x5644dc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x563704]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4 + 0x10]
mov dword [edx], eax
mov dword [ebp - 4], 0xd0
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 4
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd1
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 3
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 5
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd2
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax], 0
jne 0x4547f6
mov dword [ebp - 4], 0xd3
mov dword [ecx + 0xc], 0xf
jmp 0x454ce6
mov dword [ebp - 4], 0xd4
mov dword [ecx + 0xc], 0x13
jmp 0x454ce6
mov dword [ebp - 4], 0xd5
cmp dl, 0x10
jne 0x454a67
mov dword [ebp - 4], 0xd6
mov dx, word [eax + 2]
test dx, dx
jle 0x454ce6
mov dword [ebp - 4], 0xd7
cmp word [0x5610b2], 0
je 0x4548b6
mov dword [ebp - 4], 0xd8
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x454958
jmp 0x454940
mov dword [ebp - 4], 0xd9
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x424414
movsx ecx, dx
mov eax, dword [0x562afc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x454958
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xda
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xdb
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x10
mov dword [ebp - 4], 0xdc
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov edx, dword [ecx + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 0x14]
xor edx, edx
mov dl, byte [eax + 3]
push edx
push ebx
xor edx, edx
mov dl, byte [eax + 2]
push edx
movsx eax, word [ecx + 4]
push eax
movsx ecx, word [ecx + 2]
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
call fcn.0044a380
mov dword [ebp - 4], 0xde
mov eax, dword [0x564560]
mov dword [eax + 0x38], ebx
mov dword [ebp - 4], 0xdf
jmp 0x454ce0
mov dword [ebp - 4], 0xe0
cmp dl, 0x11
jne 0x454ce6
mov dword [ebp - 4], 0xe1
mov dx, word [eax + 2]
test dx, dx
jle 0x454ce6
mov dword [ebp - 4], 0xe2
cmp word [0x5610b2], 0
je 0x454b14
mov dword [ebp - 4], 0xe3
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x424408
movsx ecx, dx
mov eax, dword [0x562af8]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x454bb6
jmp 0x454b9e
mov dword [ebp - 4], 0xe4
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x562aa0]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x424408
movsx ecx, dx
mov eax, dword [0x562af8]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x454bb6
push 0xe8
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x5644dc]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x562af8]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0xe6
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xe7
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0xe8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xe9
push ebx
call fcn.00451810
mov dword [ebp - 4], 0xea
mov eax, 1
add ebx, eax
mov dword [ebp - 0x24], ebx
jmp 0x451c01
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x454d16
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0xeb
cmp dword [0x561110], 0x19a
jle 0x454db5
mov dword [ebp - 4], 0xec
call fcn.00442d10
mov dword [ebp - 4], 0xed
mov edx, dword [0x564560]
mov edx, dword [edx + 0x38]
test edx, edx
jle 0x454d84
mov dword [ebp - 4], 0xee
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
push edx
movsx edx, word [eax + 4]
push edx
movsx eax, word [eax + 2]
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
call fcn.0045f630
mov dword [ebp - 4], 0xef
mov eax, dword [0x561110]
cmp eax, 0x1ce
jle 0x454db5
cmp eax, 0x1da
jge 0x454db5
mov eax, dword [0x56110c]
cmp eax, 0x300
jle 0x454db5
cmp eax, 0x316
jl 0x45f564
mov dword [ebp - 4], 0xf0
push 0x3f800000
push 0x209
push 0x5644f0
push 0x5644ec
call fcn.00441ac0
mov dword [ebp - 4], 0xf1
cmp dword [0x563660], 0xc8
jne 0x454e64
mov dword [ebp - 4], 0xf2
movsx eax, word [0x5644f4]
mov edx, dword [0x562aa0]
mov edx, dword [edx]
push 0xffffffffffffffff
push 0
push 0x3f800000
mov ecx, dword [0x5644dc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x18]
push eax
push 0x258
push 0x320
mov eax, dword [0x562acc]
lea ecx, [eax - 0x3c]
push ecx
push eax
movsx eax, word [0x5644f4]
push eax
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x454e64
push 0xf4
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf3
mov eax, dword [0x562aa0]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x33
push 0x1b5
push 0
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x454ea3
push 0x58
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf4
mov dword [ebp - 0xd4], 0x3f800000
mov edx, dword [0x5644e0]
inc edx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call ebx
push eax
push 0x42446c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call ebx
push eax
movzx ax, byte [ebp - 0x3c]
inc eax
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa8]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call ebx
lea ecx, [ebp - 0xd4]
push ecx
push 0x16d
push 0x1b6
push 3
lea edx, [ebp - 0xac]
push edx
push 0xe
call fcn.0043c200
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
lea eax, [ebp - 0xa0]
push eax
push 4
call dword [fcn.00401250]
add esp, 0x14
mov dword [ebp - 4], 0xf5
mov eax, dword [0x563660]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xf7
mov eax, 0x1e0
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0xf8
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xf9
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005508c0
mov dword [ebp - 4], 0xfa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
movsx ecx, word [eax + 4]
mov dword [ebp - 0x160], ecx
movsx edx, word [eax + 2]
mov dword [ebp - 0x24], edx
mov edx, dword [0x562eb4]
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x24], eax
jg 0x455e71
mov dword [ebp - 4], 0xfb
xor ebx, ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x88], ebx
mov dword [ebp - 4], 0xfd
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 4], 0xfe
mov dword [ebp - 0x78], 0x1dc
mov dword [ebp - 4], 0xff
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea eax, [eax + ecx*2]
mov cl, byte [eax + 1]
mov byte [ebp - 0x239], cl
mov dword [ebp - 4], 0x100
cmp cl, 9
jne 0x455084
mov dword [ebp - 4], 0x101
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x60], 0x2d7
jmp 0x455677
mov dword [ebp - 4], 0x103
cmp cl, 0xa
jne 0x4550d0
mov dword [ebp - 4], 0x104
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x8ca]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x105
mov dword [ebp - 0x60], 0x2ec
jmp 0x455677
mov dword [ebp - 4], 0x106
cmp cl, 0x61
jne 0x455235
mov dword [ebp - 4], 0x107
mov al, byte [eax]
mov byte [ebp - 0x240], al
xor cx, cx
mov cl, al
sub ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x108
mov dword [ebp - 0x60], 0x301
mov dword [ebp - 4], 0x109
xor ecx, ecx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 1]
cmp dword [ebp - 0x38], ecx
jg 0x4551fc
mov dword [ebp - 4], 0x10a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
mov edx, dword [ebp - 0x38]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8 + 4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x562ab4], eax
mov dword [ebp - 4], 0x10b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8 + 4]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x562ab0], eax
mov dword [ebp - 4], 0x10c
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x562eb4]
mov ecx, dword [0x562ab4]
dec ecx
cmp eax, ecx
jg 0x4551e6
mov dword [ebp - 4], 0x10d
mov ecx, eax
mov eax, dword [0x562abc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x10e
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x455181
mov dword [ebp - 4], 0x10f
mov dword [ebp - 0x88], 0xffffffff
jmp 0x455677
mov dword [ebp - 4], 0x110
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
mov eax, dword [ebp - 0x240]
and eax, 0xff
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, ecx
mov dword [ebp - 0x5c], ebx
jmp 0x455677
mov dword [ebp - 4], 0x111
cmp cl, 0x62
jne 0x455322
mov dword [ebp - 4], 0x112
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x170], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x170]
jg 0x455300
mov dword [ebp - 4], 0x113
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
movzx cx, byte [ecx + ebx*4 + 2]
movzx bx, byte [eax]
add ebx, 0x20
cmp cx, bx
je 0x4552b4
mov dword [ebp - 4], 0x117
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x45525e
mov dword [ebp - 4], 0x114
mov ecx, dword [0x56110c]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x455300
add eax, 0x15
cmp ecx, eax
jge 0x455300
mov ecx, dword [0x561110]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x455300
add eax, 0x15
cmp ecx, eax
jge 0x455300
mov dword [ebp - 4], 0x115
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0x116
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x118
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x119
mov dword [ebp - 0x60], 0x2d7
jmp 0x455677
mov dword [ebp - 4], 0x11a
cmp cl, 0x63
jne 0x4555a3
mov dword [ebp - 4], 0x11b
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x178], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x178]
jg 0x455549
mov dword [ebp - 4], 0x11c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + ebx*4]
mov bl, byte [ecx + 2]
cmp bl, byte [eax]
je 0x455399
mov dword [ebp - 4], 0x12b
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x45534b
mov dword [ebp - 4], 0x11d
movzx dx, byte [ecx]
lea eax, [edx*8]
sub eax, edx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x11e
cmp eax, 0x2fc
jne 0x4553db
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x60], 0x15e
jmp 0x4553f7
mov dword [ebp - 4], 0x120
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx edx, ax
mov dword [ebp - 0x60], edx
mov dword [ebp - 4], 0x121
mov eax, dword [ecx + 0x10]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x562ab4], eax
mov dword [ebp - 4], 0x122
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x10]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x562ab0], eax
mov dword [ebp - 4], 0x123
mov ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x124
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x455492
mov dword [ebp - 4], 0x125
push 0
push 0
push 0
mov cl, byte [eax + 0xc]
push ecx
call fcn.0044c600
mov ebx, eax
add ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x126
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x562eb4]
mov ecx, dword [0x562ab4]
dec ecx
cmp eax, ecx
jg 0x455509
mov dword [ebp - 4], 0x127
mov ecx, eax
mov eax, dword [0x562abc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x59a]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x128
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4554a4
mov dword [ebp - 4], 0x129
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x56110c]
cmp ecx, eax
jle 0x45554c
add eax, ebx
cmp ecx, eax
jge 0x45554c
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x561110]
cmp ecx, eax
jle 0x45554c
add eax, 0x15
cmp ecx, eax
jge 0x45554c
mov dword [ebp - 4], 0x12a
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x48], ecx
jmp 0x45554c
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x12c
test ebx, ebx
jne 0x455677
mov dword [ebp - 4], 0x12d
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x12e
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 4], 0x12f
mov dword [ebp - 0x60], 0x2d7
mov dword [ebp - 4], 0x130
mov dword [ebp - 4], 0x131
mov dword [ebp - 0x88], 0
jmp 0x455677
mov dword [ebp - 4], 0x132
cmp cl, 0x64
jne 0x455625
mov dword [ebp - 4], 0x133
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
cmp dword [ebp - 0x24], eax
jle 0x455677
mov dword [ebp - 4], 0x134
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.00550ad0
mov dword [ebp - 4], 0x135
mov ecx, dword [0x563660]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x136
add dword [ebp - 0x68], 0x17
mov edx, dword [0x562eb4]
jmp 0x455677
mov dword [ebp - 4], 0x137
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x138
movzx cx, byte [ebp - 0x239]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2 + 0x21a]
movsx eax, cx
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0x139
test ebx, ebx
jle 0x455e2e
mov dword [ebp - 4], 0x13a
mov ecx, dword [ebp - 0x8c]
add ecx, ebx
cmp ecx, 0x319
jle 0x4556e0
mov dword [ebp - 4], 0x13b
mov byte [ebp - 0xd0], 0
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.00550ad0
mov dword [ebp - 4], 0x13c
mov edx, dword [0x563660]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 4], 0x13d
add dword [ebp - 0x68], 0x17
mov dword [ebp - 4], 0x13e
mov edx, dword [ebp - 0x68]
cmp edx, 0x244
jg 0x455e71
mov dword [ebp - 4], 0x13f
mov eax, dword [ebp - 0x88]
cmp eax, 0xffffffff
je 0x455bf1
test eax, eax
je 0x455b30
mov dword [ebp - 4], 0x14e
mov ecx, dword [0x56110c]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x4558a6
add eax, ebx
cmp ecx, eax
jge 0x4558a6
mov eax, dword [0x561110]
cmp eax, edx
jle 0x4558a6
add edx, 0x15
cmp eax, edx
jge 0x4558a6
mov dword [ebp - 4], 0x14f
mov eax, dword [ebp - 0x38]
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x150
cmp word [0x561080], 0
je 0x455782
mov dword [ebp - 4], 0x151
mov dword [ebp - 0x7c], 0x190
jmp 0x455790
mov dword [ebp - 4], 0x152
mov dword [ebp - 0x78], 0x1ed
mov dword [ebp - 4], 0x153
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 6], 0xfffe
jne 0x455806
mov dword [ebp - 4], 0x154
push ecx
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0xc]
push ecx
call fcn.00463110
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
movsx eax, word [ebp - 0xd0]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x155
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff9
jne 0x455846
mov dword [ebp - 4], 0x156
mov cx, word [eax + 4]
push ecx
call fcn.004ad250
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x157
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff7
jne 0x4558a6
mov dword [ebp - 4], 0x158
movsx ecx, word [eax + 4]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0x159
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x14]
shl edx, 3
mov ecx, dword [ecx + 0xc]
sub ecx, edx
movsx edx, word [ecx + 0xa]
mov dword [ebp - 0x80], edx
mov dword [ebp - 4], 0x15a
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x15b
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 0x15
push 5
mov edx, dword [ebp - 0x88]
push edx
mov edx, dword [ebp - 0x7c]
push edx
mov edx, dword [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x8c]
push edx
push 2
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x4558fb
push 0x7c
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15c
mov eax, dword [0x562aa0]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
lea ecx, [ebx - 5]
push ecx
mov ecx, dword [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x7c]
sub ecx, ebx
add ecx, 0x195
push ecx
mov ecx, dword [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x8c]
add ecx, 5
push ecx
push 2
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x45595d
push 0x7c
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15d
mov eax, dword [ebp - 0x38]
cmp eax, 0x12
jge 0x455e1b
mov dword [ebp - 4], 0x15e
mov dword [ebp - 0x88], 3
mov dword [ebp - 4], 0x15f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x4559d3
mov dword [ebp - 4], 0x160
mov ecx, dword [ebp - 0x68]
add ecx, 3
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 3
push edx
push 0xffffffffffffffff
mov al, byte [eax + 0xc]
push eax
call fcn.0044c600
add eax, 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x161
mov ecx, dword [0x562ab4]
dec ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x30], 0
mov edx, dword [0x562eb4]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
jg 0x455e21
mov dword [ebp - 4], 0x162
mov eax, dword [0x562abc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 4], 0x163
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x11
push 0xa
mov ecx, dword [ebp - 0x78]
push ecx
push ebx
mov eax, dword [ebp - 0x68]
add eax, 3
push eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
lea ecx, [ecx + eax - 1]
push ecx
push 5
mov eax, dword [0x562aa0]
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x455a8c
push 0x7c
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x164
mov eax, dword [0x562aa0]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0xf
push 0xa
mov ecx, dword [ebp - 0x60]
push ecx
push ebx
mov ecx, dword [ebp - 0x68]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x8c]
mov ebx, dword [ebp - 0x88]
add ecx, ebx
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x455ae6
push 0x7c
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x165
mov edx, dword [0x562eb4]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor eax, eax
mov ebx, dword [ebp - 0x64]
mov al, byte [ecx + ebx + 0x59a]
add dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x166
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x4559f4
mov dword [ebp - 4], 0x140
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov edx, dword [0x562aa0]
mov edx, dword [edx]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
push 0x15
mov ecx, dword [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov eax, dword [ebp - 0x8c]
push eax
push 5
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x455ba9
push 0x7c
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x141
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*2]
push ecx
call fcn.00550ad0
lea edx, [ebp - 0x90]
push edx
call edi
jmp 0x455e1b
mov dword [ebp - 4], 0x142
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x143
mov ecx, dword [0x562ab4]
dec ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x30]
cmp eax, edx
jg 0x455cf9
mov dword [ebp - 4], 0x144
mov ecx, eax
mov eax, dword [0x562abc]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 4], 0x145
mov ecx, dword [0x562aa0]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x15
push 0x15
push 0x301
lea eax, [ebx*8]
sub eax, ebx
lea ecx, [eax + eax*2]
push ecx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
add eax, ecx
push eax
push 5
mov ecx, dword [0x562aa0]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x455cb2
push 0x7c
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x146
mov edx, dword [0x562eb4]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor edx, edx
mov dl, byte [ecx + ebx + 0x798]
add dword [ebp - 0x88], edx
mov dword [ebp - 4], 0x147
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x455c17
mov dword [ebp - 4], 0x148
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 4
push 2
push 0x216
push 0x4d4
mov edx, dword [ebp - 0x68]
add edx, 0xf
push edx
mov edx, dword [ebp - 0x8c]
add edx, 0xfffffffe
push edx
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x455d53
push 0x7c
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x149
mov eax, dword [0x562aa0]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 4
lea ecx, [ebx + 2]
push ecx
push 0x216
mov ecx, 0x7c9
sub ecx, ebx
push ecx
mov ecx, dword [ebp - 0x68]
add ecx, 0xf
push ecx
mov ecx, dword [ebp - 0x8c]
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x455daf
push 0x7c
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x14a
mov eax, dword [0x56110c]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x455e1b
add ecx, ebx
cmp eax, ecx
jge 0x455e1b
mov ecx, dword [0x561110]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x455e1b
add eax, 0x15
cmp ecx, eax
jge 0x455e1b
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
cmp byte [eax], 0
jne 0x455e0d
mov dword [ebp - 4], 0x14c
movsx eax, word [eax + 2]
mov dword [ebp - 0x44], eax
jmp 0x455e1b
mov dword [ebp - 4], 0x14d
movsx ecx, word [eax + 2]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x562eb4]
mov dword [ebp - 4], 0x167
add dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x168
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x5644e4]
jne 0x455e5d
mov dword [ebp - 4], 0x169
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 4], 0x16a
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x16b
mov eax, 1
add dword [ebp - 0x24], eax
jmp 0x454ff4
mov dword [ebp - 4], 0x16c
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.00550ad0
mov dword [ebp - 4], 0x16d
call fcn.00550be0
mov dword [ebp - 4], 0x16e
mov ecx, dword [ebp - 0x40]
cmp ecx, 0x253
jne 0x455eda
mov dword [ebp - 4], 0x16f
inc word [0x5644e0]
mov dword [ebp - 4], 0x44c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45f611
jmp 0x45f5f8
mov dword [ebp - 4], 0x170
cmp dword [0x562a9c], 0x3e7
jne 0x4564ad
mov dword [ebp - 4], 0x171
mov eax, dword [0x562a98]
mov dword [ebp - 4], 0x172
cmp ax, 7
jne 0x455f1f
mov dword [ebp - 4], 0x173
mov ecx, dword [ebp + 8]
push ecx
call fcn.00460280
jmp 0x4563b2
mov dword [ebp - 4], 0x174
cmp ax, 8
jne 0x455f41
mov dword [ebp - 4], 0x175
mov edx, dword [ebp + 8]
push edx
call fcn.00460500
jmp 0x4563b2
mov dword [ebp - 4], 0x176
cmp ax, 0x18
jne 0x455f87
mov dword [ebp - 4], 0x177
mov word [0x5644e0], 0
mov dword [ebp - 4], 0x178
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
movsx eax, word [edx + 2]
mov dword [0x5644e4], eax
jmp 0x4563b2
mov dword [ebp - 4], 0x179
cmp ax, 0x19
jne 0x455fcf
mov dword [ebp - 4], 0x17a
movzx ax, byte [ebp - 0x3c]
mov word [0x5644e0], ax
mov dword [ebp - 4], 0x17b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 2]
mov dword [0x5644e4], ecx
jmp 0x4563b2
mov dword [ebp - 4], 0x17c
cmp ax, 0x1a
jne 0x45602a
mov dword [ebp - 4], 0x17d
mov ax, word [0x5644e0]
test ax, ax
jle 0x4563b2
mov dword [ebp - 4], 0x17e
dec ax
mov word [0x5644e0], ax
mov dword [ebp - 4], 0x17f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x5644e4], edx
jmp 0x4563b2
mov dword [ebp - 4], 0x180
cmp ax, 0x1b
jne 0x45608a
mov dword [ebp - 4], 0x181
movzx cx, byte [ebp - 0x3c]
mov ax, word [0x5644e0]
cmp ax, cx
jge 0x4563b2
mov dword [ebp - 4], 0x182
inc ax
mov word [0x5644e0], ax
mov dword [ebp - 4], 0x183
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x5644e4], edx
jmp 0x4563b2
mov dword [ebp - 4], 0x184
cmp ax, 0x1c
jne 0x4560b6
mov dword [ebp - 4], 0x185
push 0
add ecx, 0xffffffe9
push ecx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045f830
jmp 0x4563b2
mov dword [ebp - 4], 0x186
cmp ax, 0x1d
jne 0x4560e4
mov dword [ebp - 4], 0x187
mov edx, dword [ebp - 0x3c]
push edx
add ecx, 0x17
push ecx
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045f830
jmp 0x4563b2
mov dword [ebp - 4], 0x188
cmp ax, 0x1e
jne 0x456117
mov dword [ebp - 4], 0x189
mov eax, dword [0x5644e4]
test eax, eax
jle 0x4563b2
mov dword [ebp - 4], 0x18a
dec eax
mov dword [0x5644e4], eax
jmp 0x4563b2
mov dword [ebp - 4], 0x18b
cmp ax, 0x1f
jne 0x45615c
mov dword [ebp - 4], 0x18c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [0x5644e4]
cmp ecx, eax
jge 0x4563b2
mov dword [ebp - 4], 0x18d
mov eax, ecx
inc eax
mov dword [0x5644e4], eax
jmp 0x4563b2
mov dword [ebp - 4], 0x18e
cmp ax, 0xd
je 0x45617d
cmp ax, 0x20
jl 0x4563b2
cmp ax, 0x7e
jg 0x4563b2
mov dword [ebp - 4], 0x18f
mov ebx, dword [ebp + 8]
push ebx
call fcn.00460360
mov dword [ebp - 4], 0x190
cmp word [0x562a98], 0xd
jne 0x456203
mov dword [ebp - 4], 0x191
mov ebx, dword [ebx + 4]
mov ecx, dword [0x5644e4]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2 + 1], 0x64
mov dword [ebp - 4], 0x192
cmp dword [ebp - 0x68], 0x23c
jne 0x4563b2
mov dword [ebp - 4], 0x193
inc word [0x5644e0]
mov dword [ebp - 4], 0x194
mov word [0x562a98], 0
mov dword [ebp - 4], 0x44c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45f611
jmp 0x45f5f8
mov dword [ebp - 4], 0x195
mov ecx, dword [0x564560]
mov eax, dword [ecx + 0x2c]
sub eax, 9
je 0x4562ec
sub eax, 2
je 0x456264
mov dword [ebp - 4], 0x1a5
mov eax, dword [ebx + 4]
mov edx, dword [0x5644e4]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cl, byte [ecx + 0x2c]
mov byte [eax + edx*2 + 1], cl
mov dword [ebp - 4], 0x1a6
mov ebx, dword [ebx + 4]
mov dl, byte [0x562a98]
sub dl, 0x20
mov eax, dword [0x5644e4]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov byte [ecx + eax*2], dl
jmp 0x4563b2
mov dword [ebp - 4], 0x19f
mov eax, dword [0x562a98]
mov dword [ebp - 4], 0x1a0
cmp ax, 0x31
jl 0x4562c5
cmp ax, 0x39
jg 0x4562c5
mov dword [ebp - 4], 0x1a1
mov eax, dword [ebx + 4]
mov edx, dword [0x5644e4]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov byte [eax + edx*2 + 1], 0x61
mov dword [ebp - 4], 0x1a2
mov ebx, dword [ebx + 4]
mov cl, byte [0x562a98]
sub cl, 0x20
mov edx, dword [0x5644e4]
sub edx, dword [ebx + 0x14]
mov eax, dword [ebx + 0xc]
mov byte [eax + edx*2], cl
jmp 0x4563b2
mov dword [ebp - 4], 0x1a3
mov eax, dword [ebx + 4]
mov ecx, dword [0x5644e4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0xb
mov dword [ebp - 4], 0x1a4
jmp 0x456399
mov dword [ebp - 4], 0x196
mov eax, dword [0x562a98]
mov dword [ebp - 4], 0x197
cmp ax, 0x2f
jl 0x456346
cmp ax, 0x40
jg 0x456346
mov dword [ebp - 4], 0x198
mov eax, dword [ebx + 4]
mov ecx, dword [0x5644e4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x63
mov dword [ebp - 4], 0x199
mov ebx, dword [ebx + 4]
mov eax, dword [0x5644e4]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov dl, byte [0x562a98]
mov byte [ecx + eax*2], dl
jmp 0x4563b2
mov dword [ebp - 4], 0x19a
cmp ax, 0x20
jne 0x456377
mov dword [ebp - 4], 0x19b
mov eax, dword [ebx + 4]
mov ecx, dword [0x5644e4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 9
mov dword [ebp - 4], 0x19c
jmp 0x456399
mov dword [ebp - 4], 0x19d
mov eax, dword [ebx + 4]
mov ecx, dword [0x5644e4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x62
mov dword [ebp - 4], 0x19e
mov ebx, dword [ebx + 4]
mov al, byte [0x562a98]
sub al, 0x20
mov ecx, dword [0x5644e4]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2], al
mov dword [ebp - 4], 0x1a7
cmp word [0x562a98], 0
je 0x4563d4
mov dword [ebp - 4], 0x1a8
mov dword [0x563664], 0x42a20000
mov dword [ebp - 4], 0x1a9
fld dword [0x56117c]
fadd dword [0x563664]
fstp dword [0x563664]
mov dword [ebp - 4], 0x1aa
fld dword [0x563664]
fcomp dword [0x40158c]
fnstsw ax
test ah, 0x41
jne 0x45649d
mov dword [ebp - 4], 0x1ab
mov edx, dword [0x562aa0]
mov ebx, dword [edx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x14
push 6
mov ecx, dword [0x564560]
mov ecx, dword [ecx + 0x2c]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2 + 0x21a]
push eax
push 0x78c
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x4c]
push eax
push 5
push edx
call dword [ebx + 0x7c]
fnclex
test eax, eax
jge 0x456472
push 0x7c
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1ac
fld dword [0x563664]
fcomp dword [0x401588]
fnstsw ax
test ah, 0x41
jne 0x45649d
mov dword [ebp - 4], 0x1ad
mov dword [0x563664], 0
mov dword [ebp - 4], 0x1ae
mov word [0x562a98], 0
mov dword [ebp - 4], 0x1af
mov edx, dword [0x564560]
mov al, byte [edx + 0x34]
mov dword [ebp - 4], 0x1b0
test al, al
jne 0x456970
mov dword [ebp - 4], 0x1b1
mov edx, 0x425248
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45652c
mov dword [ebp - 4], 0x1b2
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1b3
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x26f
push 0x1a8
push 0x1bf
push eax
call dword [ecx + 0x58]
fnclex
test eax, eax
jge 0x456571
push 0x58
push 0x420714
mov edx, dword [0x562aa0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1b4
mov edx, 0x425250
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x241
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4565ce
mov dword [ebp - 4], 0x1b5
mov dword [ebp - 0x34], 4
mov dword [ebp - 4], 0x1b6
mov edx, 0x425264
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b8
push 0x243
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45662b
mov dword [ebp - 4], 0x1b7
mov dword [ebp - 0x34], 3
mov dword [ebp - 4], 0x1b8
cmp word [0x5644f6], 0
je 0x4566fa
mov dword [ebp - 4], 0x1b9
mov edx, 0x425278
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45669d
mov dword [ebp - 4], 0x1ba
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1bb
mov edx, 0x425288
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x1c0
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x456795
mov dword [ebp - 4], 0x1bc
mov dword [ebp - 0x34], 2
jmp 0x456795
mov dword [ebp - 4], 0x1bd
mov edx, 0x4252a4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456757
mov dword [ebp - 4], 0x1be
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1bf
mov edx, 0x425288
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1c8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1c0
mov eax, dword [0x562aa0]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f000000
push 0x31
push 0xae
push 0x1e5
push 0x640
push 0x1a8
push 0x271
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x4567eb
push 0x7c
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1c1
mov edx, dword [0x56110c]
cmp edx, 0x270
jle 0x4568f2
mov dword [ebp - 4], 0x1c2
xor eax, eax
mov dword [ebp - 4], 0x1c3
mov ecx, dword [0x561110]
cmp ecx, 0x1a7
jle 0x456867
cmp ecx, 0x1c0
jge 0x456867
mov dword [ebp - 4], 0x1c4
add edx, 0xfffffd9c
mov dword [ebp - 0x244], edx
fild dword [ebp - 0x244]
fstp qword [ebp - 0x24c]
fld qword [ebp - 0x24c]
fdiv qword [0x402128]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov edx, dword [0x56110c]
mov ecx, dword [0x561110]
mov dword [ebp - 4], 0x1c5
cmp ecx, 0x1c2
jle 0x4568af
cmp ecx, 0x1e0
jge 0x4568af
mov dword [ebp - 4], 0x1c6
add edx, 0xfffffe4b
mov dword [ebp - 0x250], edx
fild dword [ebp - 0x250]
fstp qword [ebp - 0x258]
fld qword [ebp - 0x258]
fdiv qword [0x402128]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 4], 0x1c7
test eax, eax
jle 0x4568f2
cmp eax, 0xe
jge 0x4568f2
mov dword [ebp - 4], 0x1c8
lea ebx, [eax - 1]
push 0
push ebx
call fcn.00441970
mov dword [ebp - 4], 0x1c9
cmp word [0x561080], 0
je 0x4568f2
mov dword [ebp - 4], 0x1ca
mov edx, dword [0x564560]
mov dword [edx + 0x2c], ebx
mov dword [ebp - 4], 0x1cb
push 0xffffffffffffffff
mov eax, dword [0x564560]
mov ecx, dword [eax + 0x2c]
push ecx
call fcn.00441970
mov dword [ebp - 4], 0x39e
cmp word [0x561080], 0
jne 0x45f481
mov dword [ebp - 4], 0x39f
mov eax, dword [0x564560]
mov eax, dword [eax + 0x30]
mov ebx, dword [ebp - 0x34]
cmp eax, ebx
jne 0x45f4a1
mov dword [ebp - 4], 0x3a0
mov dword [ebp - 4], 0x3a1
mov edx, 1
cmp eax, edx
jne 0x45d872
mov dword [ebp - 4], 0x3a2
mov cx, word [0x5644f6]
not cx
mov word [0x5644f6], cx
jmp 0x45f46b
mov dword [ebp - 4], 0x1cc
cmp al, 1
jne 0x456909
mov dword [ebp - 4], 0x1cd
mov edx, 0x4252b8
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4569db
mov dword [ebp - 4], 0x1ce
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1cf
mov edx, 0x4252c0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x196
push 0x16
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456a35
mov dword [ebp - 4], 0x1d0
mov dword [ebp - 0x34], 5
mov dword [ebp - 4], 0x1d1
cmp word [0x564530], 0
je 0x456ac3
mov dword [ebp - 4], 0x1d2
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp byte [eax + edx*4], 8
jae 0x456ac3
mov dword [ebp - 4], 0x1d3
mov edx, 0x4252d0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x16
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456ac3
mov dword [ebp - 4], 0x1d4
mov dword [ebp - 0x34], 8
mov dword [ebp - 4], 0x1d5
mov eax, dword [0x562aa0]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x320
push 0x19d
push 0x120
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x456b08
push 0x58
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d6
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
cmp byte [ecx + eax*4], 8
jae 0x457468
mov dword [ebp - 4], 0x1d7
mov eax, dword [0x562aa0]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x11d
push 0x197
push 0x44
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x456b71
push 0x58
push 0x420714
mov ecx, dword [0x562aa0]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d8
mov edx, 0x4252e0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1d9
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x58
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456c06
mov dword [ebp - 4], 0x1da
mov dword [ebp - 0x34], 0x12
mov dword [ebp - 4], 0x1db
mov edx, 0x4252ec
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x6b
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1dc
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x7e
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456c9b
mov dword [ebp - 4], 0x1dd
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 4], 0x1de
mov edx, 0x4252f8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x91
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1df
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xaa
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456d36
mov dword [ebp - 4], 0x1e0
mov dword [ebp - 0x34], 0x14
mov dword [ebp - 4], 0x1e1
mov edx, 0x425304
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xbd
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e2
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xd7
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456dd1
mov dword [ebp - 4], 0x1e3
mov dword [ebp - 0x34], 0x15
mov dword [ebp - 4], 0x1e4
mov edx, 0x425310
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xe8
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e5
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 9
push 0
push 0x197
push 0xfd
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456e6c
mov dword [ebp - 4], 0x1e6
mov dword [ebp - 0x34], 0x16
mov dword [ebp - 4], 0x1e7
mov edx, 0x42531c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0x44
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e8
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x5d
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456f01
mov dword [ebp - 4], 0x1e9
mov dword [ebp - 0x34], 0xe
mov dword [ebp - 4], 0x1ea
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 1
push 0
push 0x1a6
push 0x70
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456f5b
mov dword [ebp - 4], 0x1eb
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 4], 0x1ec
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 0
push 0x1a6
push 0x83
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456fb8
mov dword [ebp - 4], 0x1ed
mov dword [ebp - 0x34], 0x17
mov dword [ebp - 4], 0x1ee
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 3
push 0
push 0x1a6
push 0x96
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457015
mov dword [ebp - 4], 0x1ef
mov dword [ebp - 0x34], 0x19
mov dword [ebp - 4], 0x1f0
mov edx, 0x425328
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0xe
push 0x1a6
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f1
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 4
push 0
push 0x1a6
push 0xc2
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4570b0
mov dword [ebp - 4], 0x1f2
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 4], 0x1f3
mov edx, 0x425338
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0xd5
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f4
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 0
push 0x1a6
push 0xe8
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45714b
mov dword [ebp - 4], 0x1f5
mov dword [ebp - 0x34], 0x11
mov dword [ebp - 4], 0x1f6
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 7
push 0
push 0x1a6
push 0xfb
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4571a8
mov dword [ebp - 4], 0x1f7
mov dword [ebp - 0x34], 0xd
mov dword [ebp - 4], 0x1f8
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x1a6
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457205
mov dword [ebp - 4], 0x1f9
mov dword [ebp - 0x34], 0x1a
mov dword [ebp - 4], 0x1fa
mov edx, 0x425344
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fb
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0x69
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45729a
mov dword [ebp - 4], 0x1fc
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 4], 0x1fd
mov edx, 0x425358
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x7c
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fe
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457332
mov dword [ebp - 4], 0x1ff
mov dword [ebp - 0x34], 0xb
mov dword [ebp - 4], 0x200
mov edx, 0x4251a8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xbd
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x201
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xdc
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4573cd
mov dword [ebp - 4], 0x202
mov dword [ebp - 0x34], 0xc
mov dword [ebp - 4], 0x203
mov edx, 0x4251b8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xee
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x204
mov edx, 0x423cfc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 8
push 0
push 0x1b5
push 0x104
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457468
mov dword [ebp - 4], 0x205
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 4], 0x206
mov edx, 0x424fd4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 5
push 0x197
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4574c5
mov dword [ebp - 4], 0x207
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0x208
mov edx, dword [0x564560]
mov al, byte [edx + 0x35]
test al, al
jbe 0x4578d0
mov dword [ebp - 4], 0x209
cmp al, 5
jae 0x4576f6
mov dword [ebp - 4], 0x20a
mov dword [ebp - 0x8c], 0x120
mov dword [ebp - 4], 0x20b
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x18e]
movsx ecx, ax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0x20c
mov cl, byte [edx + 0x35]
cmp cl, 1
jbe 0x457627
mov dword [ebp - 4], 0x20d
mov edx, 0x424fdc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xff
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45759e
mov dword [ebp - 4], 0x20e
mov edx, dword [0x564560]
movzx ax, byte [edx + 0x35]
add eax, 0x3e8
movsx ecx, ax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x20f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [0x564560]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x4576b3
mov dword [ebp - 4], 0x210
mov edx, 0x424fe4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x10a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4576b3
mov dword [ebp - 4], 0x211
jmp 0x45769d
mov dword [ebp - 4], 0x212
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
cmp cl, byte [edx + eax*4]
jae 0x4576b3
mov dword [ebp - 4], 0x213
mov edx, 0x424fe4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xff
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4576b3
mov dword [ebp - 4], 0x214
mov eax, dword [0x564560]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x215
mov eax, dword [0x56110c]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x4576ea
add ecx, 0x116
cmp eax, ecx
jge 0x4576ea
mov eax, dword [0x561110]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x4576ea
add ecx, 0xf
cmp eax, ecx
jl 0x4578d0
mov dword [ebp - 4], 0x216
jmp 0x4578c7
mov dword [ebp - 4], 0x217
mov dword [ebp - 0x8c], 0x220
mov dword [ebp - 4], 0x218
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4 + 0x152]
movsx eax, cx
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0x219
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x457823
mov dword [ebp - 4], 0x21a
mov edx, 0x424fdc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xffffffea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4577bc
mov dword [ebp - 4], 0x21b
mov eax, dword [0x564560]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21c
mov edx, 0x424fe4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x45788a
mov dword [ebp - 4], 0x21d
mov eax, dword [0x564560]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
jmp 0x457884
mov dword [ebp - 4], 0x21e
mov edx, 0x424fdc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x45788a
mov dword [ebp - 4], 0x21f
mov eax, dword [0x564560]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x220
mov eax, dword [ebp - 0x8c]
lea edx, [eax - 0x16]
mov ecx, dword [0x56110c]
cmp ecx, edx
jle 0x4578c0
add eax, 0x100
cmp ecx, eax
jge 0x4578c0
mov eax, dword [0x561110]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x4578c0
add ecx, 0xf
cmp eax, ecx
jl 0x4578d0
mov dword [ebp - 4], 0x221
mov eax, dword [0x564560]
mov byte [eax + 0x35], 0
mov dword [ebp - 4], 0x222
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [eax + edx*4]
mov dword [ebp - 0x1a0], ecx
mov ebx, 1
cmp ebx, dword [ebp - 0x1a0]
jg 0x456909
mov dword [ebp - 4], 0x223
cmp ebx, 5
jge 0x45793a
mov dword [ebp - 4], 0x224
mov ecx, 0x120
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x225
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x18e]
jmp 0x45795d
mov dword [ebp - 4], 0x226
mov ecx, 0x220
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x227
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x152]
mov dword [ebp - 0x68], edx
mov dword [ebp - 4], 0x228
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 4], 0x229
mov eax, dword [0x564560]
mov al, byte [eax + 0x35]
mov dword [ebp - 4], 0x22a
test al, al
jne 0x457c8c
mov dword [ebp - 4], 0x22b
mov eax, dword [0x56110c]
cmp eax, ecx
jle 0x4579c6
add ecx, 0x100
cmp eax, ecx
jge 0x4579c6
mov eax, dword [0x561110]
cmp eax, edx
jle 0x4579c6
add edx, 0xf
cmp eax, edx
jge 0x4579c6
mov dword [ebp - 4], 0x22c
mov ecx, dword [0x564560]
mov byte [ecx + 0x35], bl
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x245
test ax, ax
je 0x45d85f
mov dword [ebp - 4], 0x246
mov edx, 0x424ab0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 9
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457a3a
mov dword [ebp - 4], 0x247
lea edx, [ebx + 0x3c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x248
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov al, byte [eax + edx*4]
mov dword [ebp - 4], 0x249
cmp al, 1
jne 0x45846e
mov dword [ebp - 4], 0x24a
mov edx, 0x425370
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24b
mov edx, 0x425380
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x55
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24c
mov edx, 0x425394
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 1
jne 0x457bd4
mov dword [ebp - 4], 0x24e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
push 0
push 2
push 1
push 0x11
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x24f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x457e41
dec eax
je 0x457dd8
dec eax
jne 0x457ea8
mov dword [ebp - 4], 0x254
mov edx, 0x425338
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x38
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457ea8
mov dword [ebp - 4], 0x255
lea ecx, [ebx + 0xd2]
mov dword [ebp - 0x34], ecx
jmp 0x457ea8
mov dword [ebp - 4], 0x22d
cmp al, 1
jne 0x457cb5
mov dword [ebp - 4], 0x22e
cmp ebx, 5
jne 0x4579c6
mov dword [ebp - 4], 0x22f
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x230
cmp al, 2
jne 0x457cde
mov dword [ebp - 4], 0x231
cmp ebx, 6
jne 0x4579c6
mov dword [ebp - 4], 0x232
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x233
cmp al, 3
jne 0x457d07
mov dword [ebp - 4], 0x234
cmp ebx, 7
jne 0x4579c6
mov dword [ebp - 4], 0x235
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x236
cmp al, 4
jne 0x457d30
mov dword [ebp - 4], 0x237
cmp ebx, 8
jne 0x4579c6
mov dword [ebp - 4], 0x238
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x239
cmp al, 5
jne 0x457d59
mov dword [ebp - 4], 0x23a
cmp ebx, 1
jne 0x4579c6
mov dword [ebp - 4], 0x23b
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x23c
cmp al, 6
jne 0x457d82
mov dword [ebp - 4], 0x23d
cmp ebx, 2
jne 0x4579c6
mov dword [ebp - 4], 0x23e
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x23f
cmp al, 7
jne 0x457dab
mov dword [ebp - 4], 0x240
cmp ebx, 3
jne 0x4579c6
mov dword [ebp - 4], 0x241
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x242
cmp al, 8
jne 0x4579c6
mov dword [ebp - 4], 0x243
cmp ebx, 4
jne 0x4579c6
mov dword [ebp - 4], 0x244
xor eax, eax
jmp 0x4579c9
mov dword [ebp - 4], 0x252
mov edx, 0x4253a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x38
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457ea8
mov dword [ebp - 4], 0x253
lea edx, [ebx + 0xc8]
mov dword [ebp - 0x34], edx
jmp 0x457ea8
mov dword [ebp - 4], 0x250
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x38
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457ea8
mov dword [ebp - 4], 0x251
lea eax, [ebx + 0xdc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x256
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x257
test al, al
je 0x45810f
cmp al, 5
je 0x45810f
mov dword [ebp - 4], 0x25a
cmp al, 1
je 0x4580a4
cmp al, 6
je 0x4580a4
mov dword [ebp - 4], 0x25d
cmp al, 2
je 0x458031
cmp al, 7
je 0x458031
mov dword [ebp - 4], 0x260
cmp al, 3
je 0x457fc1
cmp al, 8
je 0x457fc1
mov dword [ebp - 4], 0x263
cmp al, 4
je 0x457f4f
cmp al, 9
jne 0x458179
mov dword [ebp - 4], 0x264
mov edx, 0x4253dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458179
mov dword [ebp - 4], 0x265
lea edx, [ebx + 0x10e]
mov dword [ebp - 0x34], edx
jmp 0x458179
mov dword [ebp - 4], 0x261
mov edx, 0x4253d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458179
mov dword [ebp - 4], 0x262
lea eax, [ebx + 0x104]
jmp 0x458176
mov dword [ebp - 4], 0x25e
mov edx, 0x4253c0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x8b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458179
mov dword [ebp - 4], 0x25f
lea ecx, [ebx + 0xfa]
mov dword [ebp - 0x34], ecx
jmp 0x458179
mov dword [ebp - 4], 0x25b
mov edx, 0x4253b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458179
mov dword [ebp - 4], 0x25c
lea edx, [ebx + 0xf0]
mov dword [ebp - 0x34], edx
jmp 0x458179
mov dword [ebp - 4], 0x258
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458179
mov dword [ebp - 4], 0x259
lea eax, [ebx + 0xe6]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x266
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
cmp byte [edx], 0
jbe 0x458277
mov dword [ebp - 4], 0x267
push ecx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa7
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x268
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x269
test al, al
jne 0x458346
mov dword [ebp - 4], 0x26a
mov edx, dword [0x562dec]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.00440760
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x45d85f
mov dword [ebp - 4], 0x26b
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x26c
cmp al, 1
jne 0x4583df
mov dword [ebp - 4], 0x26d
mov edx, dword [0x562dec]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
add edx, 8
push edx
call fcn.00440760
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x45d85f
mov dword [ebp - 4], 0x26e
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x26f
cmp al, 2
jne 0x45d85f
mov dword [ebp - 4], 0x270
mov edx, 0x4253ec
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x10
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x271
lea edx, [ebx + 0x118]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x272
cmp al, 2
jne 0x458cd3
mov dword [ebp - 4], 0x273
mov edx, 0x425358
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x274
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
mov dword [ebp - 4], 0x275
test ax, ax
jne 0x45857b
mov dword [ebp - 4], 0x276
mov edx, 0x4253fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x41
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x277
lea ecx, [ebx + 0x1e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x278
cmp ax, 1
jl 0x4586ef
cmp ax, 0xa
jg 0x4586ef
mov dword [ebp - 4], 0x279
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x41
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4585fa
mov dword [ebp - 4], 0x27a
lea edx, [ebx + 0x28]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x27b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x425408
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
imul cx, cx, 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41dc58
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401250]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x27c
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x27d
cmp ax, 0xb
jl 0x458868
cmp ax, 0x14
jg 0x458868
mov dword [ebp - 4], 0x27e
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45876e
mov dword [ebp - 4], 0x27f
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x280
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x42541c
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0xa
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41dc58
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401250]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x281
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x282
cmp ax, 0x15
jl 0x4589e1
cmp ax, 0x1e
jg 0x4589e1
mov dword [ebp - 4], 0x283
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4588e7
mov dword [ebp - 4], 0x284
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x285
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x42542c
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x14
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41dc58
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401250]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x286
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x287
cmp ax, 0x1f
jl 0x458b5a
cmp ax, 0x28
jg 0x458b5a
mov dword [ebp - 4], 0x288
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458a60
mov dword [ebp - 4], 0x289
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28a
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x425440
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x1e
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41dc58
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401250]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x28b
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x28c
cmp ax, 0x29
jl 0x45d85f
cmp ax, 0x32
jg 0x45d85f
mov dword [ebp - 4], 0x28d
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458bd9
mov dword [ebp - 4], 0x28e
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x425450
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x28
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41dc58
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401250]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x290
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x291
cmp al, 3
jne 0x458f79
mov dword [ebp - 4], 0x292
mov dword [ebp - 0xb4], 0x80020004
mov dword [ebp - 0xbc], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
push 0x1c6
push 0xed
push 0
push 0
lea eax, [ebp - 0xbc]
push eax
push 1
push 0xd7
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x293
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x458efb
dec eax
je 0x458e7e
dec eax
jne 0x45d85f
mov dword [ebp - 4], 0x298
mov edx, 0x425470
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xef
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x299
lea ecx, [ebx + 0x32]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x296
mov edx, 0x425468
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xef
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x297
lea edx, [ebx + 0x32]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x294
mov edx, 0x425460
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xef
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x295
lea eax, [ebx + 0x32]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x29a
cmp al, 4
jne 0x4592fa
mov dword [ebp - 4], 0x29b
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 7
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458fec
mov dword [ebp - 4], 0x29c
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x29d
mov edx, 0x425484
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29e
mov edx, 0x425494
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29f
mov edx, 0x4254a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af0]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a3
jmp 0x45d79f
mov dword [ebp - 4], 0x2a4
cmp al, 5
jne 0x459607
mov dword [ebp - 4], 0x2a5
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45936d
mov dword [ebp - 4], 0x2a6
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2a7
mov edx, 0x4254ac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a8
mov edx, 0x4254b8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af2]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2aa
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2ab
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa8
jmp 0x45d83a
mov dword [ebp - 4], 0x2ac
cmp al, 6
jne 0x459a24
mov dword [ebp - 4], 0x2ad
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 1
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45967a
mov dword [ebp - 4], 0x2ae
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2af
mov edx, 0x4254ac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b0
mov edx, 0x4254cc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b1
mov edx, 0x4254d8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b2
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af2]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2b3
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
jmp 0x45d83a
mov dword [ebp - 4], 0x2b6
cmp al, 7
jne 0x45a16f
mov dword [ebp - 4], 0x2b7
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 4
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459a97
mov dword [ebp - 4], 0x2b8
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2b9
mov edx, 0x4254e4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459b0b
mov dword [ebp - 4], 0x2ba
mov dword [0x562ad0], 0x12
mov dword [ebp - 4], 0x2bb
call fcn.004412c0
mov dword [ebp - 4], 0x2bc
mov edx, 0x4254f4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2bd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af2]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2be
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x68
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2bf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 4
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x81
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x9a
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x2c3
test al, al
jne 0x459fd1
mov dword [ebp - 4], 0x2c4
mov edx, 0x425500
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x2c5
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x2c6
cmp al, 1
jne 0x45a05a
mov dword [ebp - 4], 0x2c7
mov edx, 0x42550c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x2c8
lea eax, [ebx + 0x64]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x2c9
cmp al, 2
jne 0x45a0e3
mov dword [ebp - 4], 0x2ca
mov edx, 0x425518
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x2cb
lea ecx, [ebx + 0x64]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x2cc
cmp al, 3
jne 0x45d85f
mov dword [ebp - 4], 0x2cd
mov edx, 0x425524
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x2ce
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x2cf
cmp al, 8
jne 0x45a69c
mov dword [ebp - 4], 0x2d0
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 6
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45a1e2
mov dword [ebp - 4], 0x2d1
lea eax, [ebx + 0x46]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2d2
mov edx, 0x4254cc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d3
mov edx, 0x4254d8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6f
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d4
mov edx, 0x425530
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x9c
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d5
mov edx, 0x4254a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc9
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af0]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2d7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x83
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2da
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd8
jmp 0x45d83a
mov dword [ebp - 4], 0x2db
cmp al, 9
jne 0x45a9aa
mov dword [ebp - 4], 0x2dc
mov edx, 0x42553c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dd
mov edx, 0x425494
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2de
mov edx, 0x425550
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb9
jmp 0x45d83a
mov dword [ebp - 4], 0x2e2
cmp al, 0xa
jne 0x45b5be
mov dword [ebp - 4], 0x2e3
mov edx, 0x425560
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e4
mov edx, 0x425574
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x40
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x2e6
test al, al
jne 0x45aaf8
mov dword [ebp - 4], 0x2e7
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x4d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45abe2
mov dword [ebp - 4], 0x2e8
lea edx, [ebx + 0x12c]
mov dword [ebp - 0x34], edx
jmp 0x45abe2
mov dword [ebp - 4], 0x2e9
cmp al, 1
jne 0x45ab70
mov dword [ebp - 4], 0x2ea
mov edx, 0x4241a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x4d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45abe2
mov dword [ebp - 4], 0x2eb
lea eax, [ebx + 0x12c]
mov dword [ebp - 0x34], eax
jmp 0x45abe2
mov dword [ebp - 4], 0x2ec
cmp al, 2
jne 0x45abe2
mov dword [ebp - 4], 0x2ed
mov edx, 0x42557c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x4d
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45abe2
mov dword [ebp - 4], 0x2ee
lea ecx, [ebx + 0x12c]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2ef
mov edx, 0x425470
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x5d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2f0
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x2f1
test al, al
jne 0x45acdc
mov dword [ebp - 4], 0x2f2
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x6a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45adc6
mov dword [ebp - 4], 0x2f3
lea edx, [ebx + 0x136]
mov dword [ebp - 0x34], edx
jmp 0x45adc6
mov dword [ebp - 4], 0x2f4
cmp al, 1
jne 0x45ad54
mov dword [ebp - 4], 0x2f5
mov edx, 0x4241a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x6a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45adc6
mov dword [ebp - 4], 0x2f6
lea eax, [ebx + 0x136]
mov dword [ebp - 0x34], eax
jmp 0x45adc6
mov dword [ebp - 4], 0x2f7
cmp al, 2
jne 0x45adc6
mov dword [ebp - 4], 0x2f8
mov edx, 0x42557c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6a
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45adc6
mov dword [ebp - 4], 0x2f9
lea ecx, [ebx + 0x136]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2fa
mov edx, 0x425584
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2fb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x2fc
test al, al
jne 0x45aec2
mov dword [ebp - 4], 0x2fd
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x87
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45afb2
mov dword [ebp - 4], 0x2fe
lea edx, [ebx + 0x140]
mov dword [ebp - 0x34], edx
jmp 0x45afb2
mov dword [ebp - 4], 0x2ff
cmp al, 1
jne 0x45af3d
mov dword [ebp - 4], 0x300
mov edx, 0x4241a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x87
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45afb2
mov dword [ebp - 4], 0x301
lea eax, [ebx + 0x140]
mov dword [ebp - 0x34], eax
jmp 0x45afb2
mov dword [ebp - 4], 0x302
cmp al, 2
jne 0x45afb2
mov dword [ebp - 4], 0x303
mov edx, 0x42557c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x87
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45afb2
mov dword [ebp - 4], 0x304
lea ecx, [ebx + 0x140]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x305
mov edx, 0x42558c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x97
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x306
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x307
test al, al
jne 0x45b0b0
mov dword [ebp - 4], 0x308
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xa4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b1a0
mov dword [ebp - 4], 0x309
lea edx, [ebx + 0x14a]
mov dword [ebp - 0x34], edx
jmp 0x45b1a0
mov dword [ebp - 4], 0x30a
cmp al, 1
jne 0x45b12b
mov dword [ebp - 4], 0x30b
mov edx, 0x4241a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa4
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b1a0
mov dword [ebp - 4], 0x30c
lea eax, [ebx + 0x14a]
mov dword [ebp - 0x34], eax
jmp 0x45b1a0
mov dword [ebp - 4], 0x30d
cmp al, 2
jne 0x45b1a0
mov dword [ebp - 4], 0x30e
mov edx, 0x42557c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa4
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b1a0
mov dword [ebp - 4], 0x30f
lea ecx, [ebx + 0x14a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x310
mov edx, 0x425594
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x311
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 4]
mov dword [ebp - 4], 0x312
test al, al
jne 0x45b29e
mov dword [ebp - 4], 0x313
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b38e
mov dword [ebp - 4], 0x314
lea edx, [ebx + 0x154]
mov dword [ebp - 0x34], edx
jmp 0x45b38e
mov dword [ebp - 4], 0x315
cmp al, 1
jne 0x45b319
mov dword [ebp - 4], 0x316
mov edx, 0x4241a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b38e
mov dword [ebp - 4], 0x317
lea eax, [ebx + 0x154]
mov dword [ebp - 0x34], eax
jmp 0x45b38e
mov dword [ebp - 4], 0x318
cmp al, 2
jne 0x45b38e
mov dword [ebp - 4], 0x319
mov edx, 0x42557c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b38e
mov dword [ebp - 4], 0x31a
lea ecx, [ebx + 0x154]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x31b
mov edx, 0x42559c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xd1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x31c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 5]
mov dword [ebp - 4], 0x31d
test al, al
jne 0x45b49e
mov dword [ebp - 4], 0x31e
mov edx, 0x41dc68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xde
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x31f
lea edx, [ebx + 0x15e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x320
cmp al, 1
jne 0x45b52e
mov dword [ebp - 4], 0x321
mov edx, 0x4241a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xde
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x322
lea eax, [ebx + 0x15e]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x323
cmp al, 2
jne 0x45d85f
mov dword [ebp - 4], 0x324
mov edx, 0x42557c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xde
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x325
lea ecx, [ebx + 0x15e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x326
cmp al, 0xb
jne 0x45b908
mov dword [ebp - 4], 0x327
mov edx, 0x4255a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b634
mov dword [ebp - 4], 0x328
lea edx, [ebx + 0x8c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x329
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 2]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
mov edx, dword [0x562ea4]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx ecx, word [0x562df8]
sub eax, ecx
push eax
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x37
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
mov dword [ebp - 4], 0x32a
mov edx, dword [0x562ea4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x70
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
add cx, word [0x562df8]
movsx eax, cx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.004403b0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x45b790
mov dword [ebp - 4], 0x32b
lea eax, [ebx + 0x19a]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x32c
push 0x41dc68
mov ecx, dword [0x562ea4]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x562df8]
sub eax, edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.004403b0
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 2
call dword [fcn.00401250]
add esp, 0xc
mov dword [ebp - 4], 0x32d
mov edx, 0x4255b4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xbf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x32e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xff
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xdf
jmp 0x45d83a
mov dword [ebp - 4], 0x32f
cmp al, 0xc
jne 0x45bb59
mov dword [ebp - 4], 0x330
mov edx, 0x425304
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45b97e
mov dword [ebp - 4], 0x331
lea eax, [ebx + 0x96]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x332
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 2], 2
jge 0x45ba66
mov dword [ebp - 4], 0x333
mov ecx, dword [0x562e88]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x2d
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.004403b0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x45d85f
mov dword [ebp - 4], 0x334
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x335
mov ecx, dword [0x562e88]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.00547b30
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x90]
push edx
call edi
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x2d
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x336
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x337
cmp al, 0xd
jne 0x45c29d
mov dword [ebp - 4], 0x338
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 9
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45bbcc
mov dword [ebp - 4], 0x339
lea ecx, [ebx + 0x5a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x33a
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af4]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x33b
mov edx, 0x4255c4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xaa
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x33c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x33d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x33e
test al, al
je 0x45bf8c
cmp al, 4
je 0x45bf8c
cmp al, 8
je 0x45bf8c
cmp al, 0xc
je 0x45bf8c
mov dword [ebp - 4], 0x341
cmp al, 1
je 0x45bf23
cmp al, 5
je 0x45bf23
cmp al, 9
je 0x45bf23
cmp al, 0xd
je 0x45bf23
mov dword [ebp - 4], 0x344
cmp al, 2
je 0x45beb3
cmp al, 6
je 0x45beb3
cmp al, 0xa
je 0x45beb3
cmp al, 0xe
je 0x45beb3
mov dword [ebp - 4], 0x347
cmp al, 3
je 0x45be4a
cmp al, 7
je 0x45be4a
cmp al, 0xb
je 0x45be4a
cmp al, 0xf
jne 0x45bff2
mov dword [ebp - 4], 0x348
mov edx, 0x425524
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45bff2
mov dword [ebp - 4], 0x349
jmp 0x45bfec
mov dword [ebp - 4], 0x345
mov edx, 0x425518
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45bff2
mov dword [ebp - 4], 0x346
lea eax, [ebx + 0x6e]
mov dword [ebp - 0x34], eax
jmp 0x45bff2
mov dword [ebp - 4], 0x342
mov edx, 0x42550c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45bff2
mov dword [ebp - 4], 0x343
lea ecx, [ebx + 0x6e]
mov dword [ebp - 0x34], ecx
jmp 0x45bff2
mov dword [ebp - 4], 0x33f
mov edx, 0x425500
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45bff2
mov dword [ebp - 4], 0x340
lea edx, [ebx + 0x6e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x34a
mov edx, 0x4255d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x34b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x34c
cmp al, 3
ja 0x45c0f7
mov dword [ebp - 4], 0x34d
mov edx, 0x4255e4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x34e
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x34f
cmp al, 4
jb 0x45c181
cmp al, 7
ja 0x45c181
mov dword [ebp - 4], 0x350
mov edx, 0x4255f8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x69
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x351
lea eax, [ebx + 0x78]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x352
cmp al, 8
jb 0x45c20b
cmp al, 0xb
ja 0x45c20b
mov dword [ebp - 4], 0x353
mov edx, 0x425604
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x69
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x354
lea ecx, [ebx + 0x78]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x355
cmp al, 0xc
jb 0x45d85f
cmp al, 0xf
ja 0x45d85f
mov dword [ebp - 4], 0x356
mov edx, 0x42561c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x357
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x358
cmp al, 0xe
jne 0x45c7ca
mov dword [ebp - 4], 0x359
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 2
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45c310
mov dword [ebp - 4], 0x35a
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x35b
mov edx, 0x4254ac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35c
mov edx, 0x4254cc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35d
mov edx, 0x4254d8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35e
mov edx, 0x425530
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xd1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af2]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x360
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x361
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x362
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x363
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
jmp 0x45d83a
mov dword [ebp - 4], 0x364
cmp al, 0xf
jne 0x45cbfb
mov dword [ebp - 4], 0x365
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 8
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45c840
mov dword [ebp - 4], 0x366
lea eax, [ebx + 0x82]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x367
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x563708]
push eax
push 0
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x18
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x368
mov edx, 0x42562c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x43
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x369
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x14
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36a
mov edx, 0x425638
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36c
mov edx, 0x425644
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36d
mov eax, dword [0x562e38]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xce
push edx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.004403b0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x45d85f
mov dword [ebp - 4], 0x36e
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x36f
cmp al, 0x10
jne 0x45d423
mov dword [ebp - 4], 0x370
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 3
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45cc6e
mov dword [ebp - 4], 0x371
lea ecx, [ebx + 0x50]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x372
mov edx, 0x4254a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x373
mov edx, 0x425654
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x374
mov edx, 0x4255d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8e
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x375
mov edx, 0x42565c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x376
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af2]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x377
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x50
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x378
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x75
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x379
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x37a
test al, al
jne 0x45d06b
mov dword [ebp - 4], 0x37b
mov edx, 0x425654
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d2cb
mov dword [ebp - 4], 0x37c
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x45d2cb
mov dword [ebp - 4], 0x37d
cmp al, 1
jne 0x45d0e9
mov dword [ebp - 4], 0x37e
mov edx, 0x42566c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d2cb
mov dword [ebp - 4], 0x37f
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x45d2cb
mov dword [ebp - 4], 0x380
cmp al, 2
jne 0x45d15e
mov dword [ebp - 4], 0x381
mov edx, 0x425678
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d2cb
mov dword [ebp - 4], 0x382
jmp 0x45d2c2
mov dword [ebp - 4], 0x383
cmp al, 3
jne 0x45d1db
mov dword [ebp - 4], 0x384
mov edx, 0x425684
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d2cb
mov dword [ebp - 4], 0x385
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x45d2cb
mov dword [ebp - 4], 0x386
cmp al, 4
jne 0x45d256
mov dword [ebp - 4], 0x387
mov edx, 0x425690
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d2cb
mov dword [ebp - 4], 0x388
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x45d2cb
mov dword [ebp - 4], 0x389
cmp al, 5
jne 0x45d2cb
mov dword [ebp - 4], 0x38a
mov edx, 0x42569c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d2cb
mov dword [ebp - 4], 0x38b
lea ecx, [ebx + 0x122]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x38c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x38d
test al, al
jne 0x45d393
mov dword [ebp - 4], 0x38e
mov edx, 0x4256a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x38f
lea edx, [ebx + 0xbe]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x390
cmp al, 1
jne 0x45d85f
mov dword [ebp - 4], 0x391
mov edx, 0x4256b4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d85f
mov dword [ebp - 4], 0x392
lea eax, [ebx + 0xbe]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x393
cmp al, 0x11
jne 0x45d85f
mov dword [ebp - 4], 0x394
mov edx, 0x425478
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004403b0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45d496
mov dword [ebp - 4], 0x395
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x396
mov edx, 0x425484
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x397
mov edx, 0x4254ac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x398
mov edx, 0x4254a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.004403b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x399
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x562af0]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043e7c0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x39a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc8
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043e7c0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x4578fd
mov dword [ebp - 4], 0x3a3
cmp eax, 2
jne 0x45d89d
mov dword [ebp - 4], 0x3a4
mov edx, dword [ebp - 0x3c]
push edx
mov al, byte [0x5644e0]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00451520
jmp 0x45f46b
mov dword [ebp - 4], 0x3a5
cmp eax, 3
jne 0x45d8be
mov dword [ebp - 4], 0x3a6
mov edx, dword [ebp + 8]
push edx
call fcn.0044c9a0
jmp 0x45f46b
mov dword [ebp - 4], 0x3a7
cmp eax, 4
jne 0x45d8df
mov dword [ebp - 4], 0x3a8
mov eax, dword [ebp + 8]
push eax
call fcn.0044d070
jmp 0x45f46b
mov dword [ebp - 4], 0x3a9
cmp eax, 5
jne 0x45d953
mov dword [ebp - 4], 0x3aa
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
cmp byte [edx + ecx*4], 0
jbe 0x45f46b
mov dword [ebp - 4], 0x3ab
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
push 0x564534
push 0x41f2b0
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ac
mov word [0x564530], 0xffff
jmp 0x45f46b
mov dword [ebp - 4], 0x3ad
cmp eax, 6
jne 0x45d992
mov dword [ebp - 4], 0x3ae
mov eax, dword [0x564560]
mov cl, byte [eax + 0x34]
test cl, cl
jne 0x45d982
mov dword [ebp - 4], 0x3af
mov byte [eax + 0x34], 1
jmp 0x45f46b
mov dword [ebp - 4], 0x3b0
mov byte [eax + 0x34], 0
jmp 0x45f46b
mov dword [ebp - 4], 0x3b1
cmp eax, 7
jne 0x45d9af
mov dword [ebp - 4], 0x3b2
call fcn.00442720
jmp 0x45f46b
mov dword [ebp - 4], 0x3b3
cmp eax, 8
jne 0x45dac5
mov dword [ebp - 4], 0x3b4
mov ebx, dword [0x564534]
and ebx, 0xff
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x24], edx
cmp edx, ebx
jg 0x45f46b
mov dword [ebp - 4], 0x3b5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov al, byte [ecx]
cmp al, 8
jae 0x45daaf
mov dword [ebp - 4], 0x3b6
inc al
mov byte [ecx], al
mov dword [ebp - 4], 0x3b7
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f290
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3b8
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ebx, dword [0x56453c]
sub eax, dword [ebx + 0x14]
lea eax, [eax + eax*2]
mov ebx, dword [ebx + 0xc]
lea eax, [ebx + eax*4]
push eax
xor eax, eax
mov al, byte [ecx]
sub eax, dword [edx + 0x14]
lea ecx, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov ebx, dword [ebp - 0x1ac]
mov dword [ebp - 4], 0x3b9
mov eax, 1
mov edx, dword [ebp - 0x24]
add edx, eax
jmp 0x45d9d8
mov dword [ebp - 4], 0x3ba
cmp eax, 0xa
jl 0x45dfa3
cmp eax, 0x1a
jg 0x45dfa3
mov dword [ebp - 4], 0x3bb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
inc cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3bc
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f290
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3bd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
add ebx, 0xfffffff7
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov byte [ecx + eax*4], bl
mov dword [ebp - 4], 0x3be
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
mov dword [ebp - 4], 0x3bf
cmp cl, 1
jne 0x45dc1c
mov dword [ebp - 4], 0x3c0
mov word [eax + 2], 0
mov dword [ebp - 4], 0x3c1
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
push 0
push 2
push 1
push 0x11
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 4]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
jmp 0x45f46b
mov dword [ebp - 4], 0x3c2
cmp cl, 3
jne 0x45dce2
mov dword [ebp - 4], 0x3c3
push 0
push 0
push 1
push 8
add eax, 8
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c4
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, 0x423cf0
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov dword [ebp - 0x25c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x25c]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x3c5
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov word [ecx + eax*4 + 2], 2
jmp 0x45f46b
mov dword [ebp - 4], 0x3c6
cmp cl, 4
jne 0x45dd56
mov dword [ebp - 4], 0x3c7
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x45f46b
mov dword [ebp - 4], 0x3c9
cmp cl, 5
jne 0x45dd7a
mov dword [ebp - 4], 0x3ca
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3cb
cmp cl, 6
je 0x45df8b
cmp cl, 9
je 0x45df8b
mov dword [ebp - 4], 0x3cd
cmp cl, 7
jne 0x45ddb7
mov dword [ebp - 4], 0x3ce
push 0
push 4
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3cf
cmp cl, 8
jne 0x45de2b
mov dword [ebp - 4], 0x3d0
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3d1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 3], 0x42
jmp 0x45f46b
mov dword [ebp - 4], 0x3d2
cmp cl, 0xa
jne 0x45de4f
mov dword [ebp - 4], 0x3d3
push 0
push 5
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3d4
cmp cl, 0xb
jne 0x45de73
mov dword [ebp - 4], 0x3d5
push 0
push 0
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3d6
cmp cl, 0xc
je 0x45f46b
mov dword [ebp - 4], 0x3d7
cmp cl, 0xd
jne 0x45dea7
mov dword [ebp - 4], 0x3d8
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3d9
cmp cl, 0xe
jne 0x45decb
mov dword [ebp - 4], 0x3da
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3db
cmp cl, 0xf
jne 0x45deef
mov dword [ebp - 4], 0x3dc
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3dd
cmp cl, 0x10
jne 0x45df13
mov dword [ebp - 4], 0x3de
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3df
cmp cl, 0x11
jne 0x45f46b
mov dword [ebp - 4], 0x3e0
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3e1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x45f46b
mov dword [ebp - 4], 0x3cc
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x45dc07
mov dword [ebp - 4], 0x3e2
cmp eax, 0x1f
jl 0x45e048
cmp eax, 0x26
jg 0x45e048
mov dword [ebp - 4], 0x3e3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x166]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 0x32
push 0
push 1
lea ecx, [ebp - 0xcc]
push ecx
call fcn.00437e50
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x3e4
cmp eax, 0x29
jl 0x45e0c7
cmp eax, 0x30
jg 0x45e0c7
mov dword [ebp - 4], 0x3e5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x1de]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0
push 0x33
push 0
push 0xffffffffffffffff
jmp 0x45e025
mov dword [ebp - 4], 0x3e6
cmp eax, 0x33
jl 0x45e142
cmp eax, 0x3a
jg 0x45e142
mov dword [ebp - 4], 0x3e7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x256]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 2
jmp 0x45e021
mov dword [ebp - 4], 0x3e8
cmp eax, 0x3d
jl 0x45e29c
cmp eax, 0x44
jg 0x45e29c
mov dword [ebp - 4], 0x3e9
add ebx, 0xffffffc4
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x3ea
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov al, byte [ecx + eax*4]
mov ecx, eax
and ecx, 0xff
cmp ebx, ecx
jge 0x45e20c
mov dword [ebp - 4], 0x3eb
movzx ax, al
dec eax
movsx ecx, ax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], edx
cmp ebx, dword [ebp - 0x1b4]
jg 0x45e20c
mov dword [ebp - 4], 0x3ec
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ed
add ebx, dword [ebp - 0x1b0]
jmp 0x45e1b2
mov dword [ebp - 4], 0x3ee
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3ef
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov al, byte [ecx]
test al, al
jne 0x45e270
mov dword [ebp - 4], 0x3f0
add ecx, 8
push ecx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
jmp 0x45f46b
mov dword [ebp - 4], 0x3f1
push 1
and eax, 0xff
push eax
push 1
push 0x41f290
add ecx, 8
push ecx
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
jmp 0x45f46b
mov dword [ebp - 4], 0x3f2
cmp eax, 0x47
jl 0x45e2cc
cmp eax, 0x4e
jg 0x45e2cc
mov dword [ebp - 4], 0x3f3
push 0
mov cx, word [0x5644e0]
push ecx
add ebx, 0xffffffba
push ebx
call fcn.00531170
jmp 0x45f46b
mov dword [ebp - 4], 0x3f4
cmp eax, 0x51
jl 0x45e2fc
cmp eax, 0x58
jg 0x45e2fc
mov dword [ebp - 4], 0x3f5
push 1
mov dx, word [0x5644e0]
push edx
add ebx, 0xffffffb0
push ebx
call fcn.00531170
jmp 0x45f46b
mov dword [ebp - 4], 0x3f6
cmp eax, 0x5b
jl 0x45e32b
cmp eax, 0x62
jg 0x45e32b
mov dword [ebp - 4], 0x3f7
push 2
mov ax, word [0x5644e0]
push eax
add ebx, 0xffffffa6
push ebx
call fcn.00531170
jmp 0x45f46b
mov dword [ebp - 4], 0x3f8
cmp eax, 0x83
jl 0x45e362
cmp eax, 0x8a
jg 0x45e362
mov dword [ebp - 4], 0x3f9
push 3
mov cx, word [0x5644e0]
push ecx
add ebx, 0xffffff7e
push ebx
call fcn.00531170
jmp 0x45f46b
mov dword [ebp - 4], 0x3fa
cmp eax, 0x8d
jl 0x45e399
cmp eax, 0x94
jg 0x45e399
mov dword [ebp - 4], 0x3fb
push 4
mov dx, word [0x5644e0]
push edx
add ebx, 0xffffff74
push ebx
call fcn.00531170
jmp 0x45f46b
mov dword [ebp - 4], 0x3fc
cmp eax, 0x97
jl 0x45e3cf
cmp eax, 0x9e
jg 0x45e3cf
mov dword [ebp - 4], 0x3fd
push 5
mov ax, word [0x5644e0]
push eax
add ebx, 0xffffff6a
push ebx
call fcn.00531170
jmp 0x45f46b
mov dword [ebp - 4], 0x3fe
cmp eax, 0x65
jl 0x45e46b
cmp eax, 0x6c
jg 0x45e46b
mov dword [ebp - 4], 0x3ff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x4ac]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45f048
mov dword [ebp - 4], 0x400
cmp eax, 0x6f
jl 0x45e7cc
cmp eax, 0x76
jg 0x45e7cc
mov dword [ebp - 4], 0x401
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
movsx ecx, word [0x5644e0]
sub ecx, dword [eax + 0x14]
lea edx, [ecx + ecx*2]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov ecx, dword [edx + ecx*4 - 0x524]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
mov cl, byte [edx + 1]
mov dword [ebp - 4], 0x402
test cl, cl
je 0x45e751
cmp cl, 1
je 0x45e751
cmp cl, 2
je 0x45e751
cmp cl, 3
je 0x45e751
mov dword [ebp - 4], 0x404
cmp cl, 4
je 0x45e6ab
cmp cl, 5
je 0x45e6ab
cmp cl, 6
je 0x45e6ab
cmp cl, 7
je 0x45e6ab
mov dword [ebp - 4], 0x406
cmp cl, 8
je 0x45e605
cmp cl, 9
je 0x45e605
cmp cl, 0xa
je 0x45e605
cmp cl, 0xb
je 0x45e605
mov dword [ebp - 4], 0x408
cmp cl, 0xc
je 0x45e55f
cmp cl, 0xd
je 0x45e55f
cmp cl, 0xe
je 0x45e55f
cmp cl, 0xf
jne 0x45f46b
mov dword [ebp - 4], 0x409
push eax
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xf
push 0xc
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x407
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 8
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x405
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 7
push 4
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x403
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45f048
mov dword [ebp - 4], 0x40a
cmp eax, 0x79
jl 0x45e879
cmp eax, 0x80
jg 0x45e879
mov dword [ebp - 4], 0x40b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
lea eax, [ecx + 1]
mov cl, byte [eax]
add cl, 4
mov byte [eax], cl
mov dword [ebp - 4], 0x40c
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov al, byte [ecx]
cmp al, 0xf
jbe 0x45f46b
mov dword [ebp - 4], 0x40d
sub al, 0x10
mov byte [ecx], al
jmp 0x45f46b
mov dword [ebp - 4], 0x40e
cmp eax, 0xbf
jl 0x45e950
cmp eax, 0xc6
jg 0x45e950
mov dword [ebp - 4], 0x40f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x8e4]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 1
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x410
call fcn.00442720
jmp 0x45f46b
mov dword [ebp - 4], 0x411
cmp eax, 0xc9
jl 0x45e99e
cmp eax, 0xd0
jg 0x45e99e
mov dword [ebp - 4], 0x412
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x95e], 2
jmp 0x45f46b
mov dword [ebp - 4], 0x413
cmp eax, 0xd3
jl 0x45e9ec
cmp eax, 0xda
jg 0x45e9ec
mov dword [ebp - 4], 0x414
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x9d6], 0
jmp 0x45f46b
mov dword [ebp - 4], 0x415
cmp eax, 0xdd
jl 0x45ea38
cmp eax, 0xe4
jg 0x45ea38
mov dword [ebp - 4], 0x416
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov word [eax + ecx*4 - 0xa4e], dx
jmp 0x45f46b
mov dword [ebp - 4], 0x417
cmp eax, 0xe7
jl 0x45ea8c
cmp eax, 0xee
jg 0x45ea8c
mov dword [ebp - 4], 0x418
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xac4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 1
jmp 0x45f46b
mov dword [ebp - 4], 0x419
cmp eax, 0xf1
jl 0x45eae0
cmp eax, 0xf8
jg 0x45eae0
mov dword [ebp - 4], 0x41a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xb3c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 2
jmp 0x45f46b
mov dword [ebp - 4], 0x41b
cmp eax, 0xfb
jl 0x45eb34
cmp eax, 0x102
jg 0x45eb34
mov dword [ebp - 4], 0x41c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xbb4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 3
jmp 0x45f46b
mov dword [ebp - 4], 0x41d
cmp eax, 0x105
jl 0x45eb88
cmp eax, 0x10c
jg 0x45eb88
mov dword [ebp - 4], 0x41e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xc2c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 4
jmp 0x45f46b
mov dword [ebp - 4], 0x41f
cmp eax, 0x10f
jl 0x45ebdc
cmp eax, 0x116
jg 0x45ebdc
mov dword [ebp - 4], 0x420
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xca4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 0
jmp 0x45f46b
mov dword [ebp - 4], 0x421
cmp eax, 0x119
jl 0x45ec60
cmp eax, 0x120
jg 0x45ec60
mov dword [ebp - 4], 0x422
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd1c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
jmp 0x45f034
mov dword [ebp - 4], 0x423
cmp eax, 0x123
jl 0x45ed37
cmp eax, 0x12a
jg 0x45ed37
mov dword [ebp - 4], 0x424
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd94]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x425
call fcn.00442720
jmp 0x45f46b
mov dword [ebp - 4], 0x426
cmp eax, 0x12d
jl 0x45edb8
cmp eax, 0x134
jg 0x45edb8
mov dword [ebp - 4], 0x427
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe0c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
jmp 0x45f034
mov dword [ebp - 4], 0x428
cmp eax, 0x137
jl 0x45ee3a
cmp eax, 0x13e
jg 0x45ee3a
mov dword [ebp - 4], 0x429
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe84]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
jmp 0x45f034
mov dword [ebp - 4], 0x42a
cmp eax, 0x141
jl 0x45eea5
cmp eax, 0x148
jg 0x45eea5
mov dword [ebp - 4], 0x42b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xefc]
jmp 0x45ec42
mov dword [ebp - 4], 0x42c
cmp eax, 0x14b
jl 0x45ef29
cmp eax, 0x152
jg 0x45ef29
mov dword [ebp - 4], 0x42d
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xf74]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
jmp 0x45f034
mov dword [ebp - 4], 0x42e
cmp eax, 0x155
jl 0x45efad
cmp eax, 0x15c
jg 0x45efad
mov dword [ebp - 4], 0x42f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xfec]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 4
jmp 0x45f034
mov dword [ebp - 4], 0x430
cmp eax, 0x15f
jl 0x45f078
cmp eax, 0x166
jg 0x45f078
mov dword [ebp - 4], 0x431
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x1064]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 5
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 2
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x432
cmp eax, 0x191
jl 0x45f138
cmp eax, 0x198
jg 0x45f138
mov dword [ebp - 4], 0x433
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x12be]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
mov ecx, dword [0x562ea4]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x562df8]
sub eax, edx
push eax
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00437e50
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x434
cmp eax, 0x19b
jl 0x45f1f8
cmp eax, 0x1a2
jg 0x45f1f8
mov dword [ebp - 4], 0x435
mov eax, dword [0x562a88]
mov ecx, dword [eax]
push 0xff
push eax
call dword [ecx + 0x3c]
fnclex
test eax, eax
jge 0x45f187
push 0x3c
push 0x4212ac
mov edx, dword [0x562a88]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x436
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x562a88]
mov edx, dword [ecx]
push 0xffffffffffffffff
push 2
sub ebx, dword [eax + 0x14]
lea ebx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov ax, word [eax + ebx*4 - 0x1336]
add ax, word [0x562df8]
movsx eax, ax
push eax
push ecx
call dword [edx + 0x40]
fnclex
test eax, eax
jge 0x45f46b
push 0x40
push 0x4212ac
mov ecx, dword [0x562a88]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x45f46b
mov dword [ebp - 4], 0x437
cmp eax, 0x1f5
jl 0x45f2a7
cmp eax, 0x1fc
jg 0x45f2a7
mov dword [ebp - 4], 0x438
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x5644e0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x176e]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
movsx ecx, word [0x562df0]
push ecx
push 0
push 1
lea edx, [ebp - 0xcc]
push edx
call fcn.00437e50
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
jmp 0x45f46b
mov dword [ebp - 4], 0x439
cmp eax, 0x3e9
jl 0x45f381
cmp eax, 0x3f0
jg 0x45f381
mov dword [ebp - 4], 0x43a
add ebx, 0xfffffc18
mov dword [ebp - 4], 0x43b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2]
lea edx, [ecx + edx*4 - 0xc]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
dec ebx
jmp 0x45f456
mov dword [ebp - 4], 0x43e
cmp eax, 0x44d
jl 0x45f46b
cmp eax, 0x454
jg 0x45f46b
mov dword [ebp - 4], 0x43f
add ebx, 0xfffffbb4
mov dword [ebp - 4], 0x440
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x441
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x442
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x5644e0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
inc ebx
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x443
mov ecx, dword [0x564560]
mov dword [ecx + 0x30], 0
jmp 0x45f4a1
mov dword [ebp - 4], 0x444
mov eax, dword [0x564560]
mov ecx, dword [eax + 0x30]
test ecx, ecx
jne 0x45f4a1
mov dword [ebp - 4], 0x445
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x30], edx
mov dword [ebp - 4], 0x446
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jle 0x45f522
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x45f522
mov dword [ebp - 4], 0x447
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push 0
push 0xa7
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea edx, [ebx*8]
sub edx, ebx
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.00442050
lea eax, [ebp - 0x90]
push eax
call edi
mov dword [ebp - 4], 0x448
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x45f549
mov dword [ebp - 4], 0x449
push 0
push 0
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
push eax
call fcn.004e60e0
mov dword [ebp - 4], 0x44a
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x45f564
mov dword [ebp - 4], 0x44b
push eax
call fcn.004e2b00
mov dword [ebp - 4], 0x44c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45f611
jmp 0x45f5f8
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x74]
push edx
push 0x41f290
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
ret