Function at 0x5046f0
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4054c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x84
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x404718
mov ax, word [0x54a71a]
xor ebx, ebx
cmp word [0x54a718], ax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
jne 0x508410
cmp ax, 0x7fbc
jne 0x50476e
push ebx
call fcn.004306f0
push 0x508467
jmp 0x508442
cmp ax, 0x7fbd
jne 0x50478a
push ebx
call fcn.0052aa30
push ebx
call fcn.004306f0
push 0x508467
jmp 0x508442
mov edi, dword [ebp + 8]
cmp di, 2
jne 0x504798
mov edi, 0xa
mov cx, word [0x54b27a]
cmp cx, 0x62
je 0x5082d4
cmp cx, 0x63
je 0x5082d4
cmp cx, 0xffff
je 0x5080b1
cmp cx, 0x5b
je 0x5080b1
cmp cx, bx
jne 0x5048a3
movsx ecx, ax
mov edx, ecx
sub edx, ebx
je 0x504868
sub edx, 0x3e6
je 0x504844
dec edx
je 0x504827
mov word [0x54b27c], ax
mov eax, dword [0x54a708]
mov edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, edx
mov edx, ecx
shl edx, 6
add edx, ecx
cmp word [eax + edx*4 + 2], bx
jge 0x507df4
push 0xffffffffffffffff
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
push 0x3e7
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
mov cx, word [0x54b27e]
mov word [0x54a718], 0xfffe
not cx
mov word [0x54b27e], cx
push 0x508467
jmp 0x508442
push 3
call fcn.005038c0
xor edx, edx
mov ecx, 0x54b288
mov word [0x54b290], bx
mov word [0x54b280], bx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [0x549b3c], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp cx, 1
je 0x507ce6
cmp cx, 2
je 0x507ce6
cmp cx, 3
je 0x507b63
cmp cx, 4
je 0x507b63
cmp cx, 0x3e7
je 0x507b63
cmp cx, 5
jl 0x508407
cmp cx, 0xc
jg 0x508407
cmp ax, bx
jne 0x50490f
push 1
call fcn.005038c0
mov dword [0x549b3c], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 1
jne 0x504a21
movsx ecx, word [0x54b27c]
mov eax, dword [0x54a708]
mov edx, ecx
sub edx, dword [eax + 0x14]
mov esi, edx
shl esi, 6
add esi, edx
mov edx, dword [eax + 0xc]
mov edi, dword [edx + esi*4 + 0x100]
movsx edx, word [0x54b280]
mov ebx, dword [edi + 0x14]
mov esi, edx
sub esi, ebx
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [edi + 0xc]
shl ebx, 4
lea esi, [ebx + esi + 0x20]
mov bl, byte [esi]
inc bl
mov byte [esi], bl
mov edi, dword [eax + 0x14]
mov esi, ecx
sub esi, edi
mov edi, esi
shl edi, 6
add edi, esi
mov esi, dword [eax + 0xc]
mov edi, dword [esi + edi*4 + 0x100]
mov esi, edx
sub esi, dword [edi + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [edi + 0xc]
shl ebx, 4
lea esi, [ebx + esi + 0x20]
cmp byte [esi], 3
jne 0x50499a
mov byte [esi], 7
mov edi, dword [eax + 0x14]
mov esi, ecx
sub esi, edi
mov edi, esi
shl edi, 6
add edi, esi
mov esi, dword [eax + 0xc]
mov edi, dword [esi + edi*4 + 0x100]
mov esi, edx
sub esi, dword [edi + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [edi + 0xc]
shl ebx, 4
lea esi, [ebx + esi + 0x20]
cmp byte [esi], 8
jne 0x5049d2
mov byte [esi], 9
mov ebx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, ebx
mov esi, ecx
shl esi, 6
add esi, ecx
mov eax, dword [eax + esi*4 + 0x100]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
shl ecx, 4
lea eax, [ecx + edx + 0x20]
mov cl, byte [ecx + edx + 0x20]
cmp cl, 0xb
jne 0x508407
mov byte [eax], 0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 2
jne 0x504a3f
call fcn.00501fb0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 3
jne 0x504a5d
call fcn.00503780
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 4
jne 0x504a7d
push 2
call fcn.00502940
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 5
jne 0x504af4
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 8
sub eax, edx
push ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x25]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x5083d3
cmp ax, 6
jne 0x504b6b
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 0x10
sub eax, edx
push ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x5e]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x5083d3
cmp ax, 7
jne 0x504c0d
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 3
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x5f]
mov dword [ebp - 0x30], ecx
push ebx
lea edx, [ebp - 0x38]
push 1
push edx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 8
jne 0x504c2d
push 1
call fcn.00502940
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 9
jne 0x504c4b
call fcn.00501650
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xa
jl 0x504c74
cmp ax, 0x12
jg 0x504c74
sub ax, 0xa
mov word [0x54a718], 0xfffe
mov word [0x54b286], ax
push 0x508467
jmp 0x508442
cmp ax, 0x13
jne 0x504c93
push ebx
call fcn.00502940
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x14
jne 0x504d0b
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 0xf
sub eax, edx
push ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x60]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x5083d3
cmp ax, 0x15
jne 0x504d2b
push 4
call fcn.00502940
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x16
jne 0x504dcd
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 3
sub eax, edx
push ebx
push 1
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x21]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x30], ecx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x17
jne 0x504e40
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 1
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x2b]
mov dword [ebp - 0x30], ecx
jmp 0x504bdc
cmp ax, 0x18
jne 0x504e5f
push ebx
call fcn.00502a40
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x19
jne 0x504e7f
push 1
call fcn.00502a40
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x1a
jne 0x504e9e
push ebx
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
mov ebx, 0x1b
cmp ax, bx
jne 0x504ec5
push 0x2af8
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x1c
jne 0x504ee8
push 0xffffd508
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x1d
jne 0x504f0b
push 0x5209
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x1e
jne 0x504f6e
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
lea ecx, [edx + eax + 0x26]
jmp 0x5050a4
cmp ax, 0x1f
jl 0x504f9a
cmp ax, 0x27
jg 0x504f9a
sub ax, 0x1e
movsx edx, ax
push edx
call fcn.00502e00
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x28
jl 0x505028
cmp ax, 0x30
jg 0x505028
mov edx, dword [0x54a708]
sub ax, 0x28
movsx ecx, word [0x54b27c]
mov esi, dword [edx + 0x14]
mov word [0x54a718], 0xfffe
sub ecx, esi
push 0x508467
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + 0xc]
movsx eax, ax
mov edx, dword [ecx + esi*4 + 0x100]
movsx ecx, word [0x54b280]
mov ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, ebx
lea esi, [ecx*8]
sub esi, ecx
shl esi, 4
mov ecx, dword [esi + edx + 0x6c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*2]
lea eax, [eax + edx*2]
neg cx
sbb ecx, ecx
and ecx, 0xfffffffe
add ecx, 2
mov word [eax], cx
jmp 0x508442
cmp ax, 0x31
jne 0x505046
call fcn.00503220
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x32
jne 0x5050b9
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x18]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
lea ecx, [edx + eax + 0x28]
push 0xffffffffffffffff
push 3
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], 0x4011
push 0
jmp 0x504bdd
cmp ax, 0x33
jl 0x5050e5
cmp ax, 0x3b
jg 0x5050e5
sub ax, 0x32
movsx edx, ax
push edx
call fcn.00503390
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x3c
jne 0x50515d
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov edx, dword [ecx + 0x14]
push 9
sub eax, edx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x2c]
movsx edx, di
mov dword [ebp - 0x30], ecx
push edx
jmp 0x5083d3
cmp ax, 0x3d
jl 0x505353
cmp ax, 0x45
jg 0x505353
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x3c
push 0xffffffffffffffff
mov edx, dword [ecx + 0x14]
push 8
movsx eax, ax
sub eax, edx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4]
lea eax, [ebp - 0x38]
movsx edx, di
push edx
push eax
mov dword [ebp - 0x30], ecx
call fcn.00435d50
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call edi
lea edx, [ebp - 0x18]
push edx
call edi
lea eax, [ebp - 0x1c]
push eax
call edi
mov ecx, dword [0x54a708]
lea edx, [ebp - 0x28]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x28]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x24]
push ecx
push edx
call esi
movsx eax, word [0x54b280]
mov ecx, dword [ebp - 0x24]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov eax, dword [0x54a708]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov edx, dword [ebp - 0x20]
sub ax, 0x3c
mov esi, dword [edx + 0x14]
movsx eax, ax
mov ecx, eax
sub ecx, esi
lea esi, [ecx*8]
sub esi, ecx
mov ecx, dword [edx + 0xc]
lea edx, [ecx + esi*4 + 6]
mov ecx, dword [ebp - 0x14]
push edx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.00503890
lea edx, [ebp - 0x14]
push edx
call edi
lea eax, [ebp - 0x18]
push eax
call edi
lea ecx, [ebp - 0x1c]
push ecx
call edi
lea edx, [ebp - 0x20]
push edx
call edi
lea eax, [ebp - 0x24]
push eax
call edi
lea ecx, [ebp - 0x28]
push ecx
call edi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x46
jne 0x505373
push 0
call fcn.00502280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x47
jl 0x50539f
cmp ax, 0x4f
jg 0x50539f
sub ax, 0x46
movsx edx, ax
push edx
call fcn.00503630
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x50
jne 0x5053c2
push 0x7d7c
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x51
jl 0x5053ee
cmp ax, 0x58
jg 0x5053ee
sub ax, 0x50
movsx eax, ax
push eax
call fcn.005034f0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x59
jne 0x50540e
push 1
call fcn.00502280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x5a
jne 0x50542e
push 2
call fcn.00502280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x5b
jl 0x5054d9
cmp ax, 0x63
jg 0x5054d9
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x5a
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 0xb
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 1]
mov dword [ebp - 0x30], ecx
jmp 0x505dd2
cmp ax, 0x64
jne 0x505501
mov ecx, dword [0x54b284]
mov word [0x54a718], 0xfffe
not ecx
mov word [0x54b284], cx
push 0x508467
jmp 0x508442
cmp ax, 0x65
jl 0x5055f8
cmp ax, 0x6d
jg 0x5055f8
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x50]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x50]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x4c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x4c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x48]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x48]
sub ax, 0x64
mov edi, dword [ecx + 0x14]
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov dl, byte [eax + 0xc]
inc dl
mov cl, dl
mov byte [eax + 0xc], dl
cmp cl, 7
jne 0x5055ab
mov byte [eax + 0xc], 0x15
cmp byte [eax + 0xc], 0x17
jne 0x5055b5
mov byte [eax + 0xc], 0x1a
cmp byte [eax + 0xc], bl
jne 0x5055be
mov byte [eax + 0xc], 0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x48]
push ecx
mov dword [eax + 8], 0
mov byte [eax + 0xd], 0
mov byte [eax + 0xe], 0
call esi
lea edx, [ebp - 0x4c]
push edx
call esi
lea eax, [ebp - 0x50]
push eax
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x6e
jne 0x505618
push 3
call fcn.00502940
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x6f
jl 0x505788
cmp ax, 0x77
jg 0x505788
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x6e
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 3
push 0
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
lea eax, [ebp - 0x38]
add edx, 8
push 1
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4011
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
call esi
movsx eax, word [0x54b27c]
mov edi, dword [0x54a708]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x54b280]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x54a71a]
sub dx, 0x6e
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
jmp 0x506ae6
cmp ax, 0x78
jne 0x50582b
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov ebx, dword [ecx + 0x14]
push 3
sub eax, ebx
push 0
push 1
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x27]
lea edx, [ebp - 0x38]
push edx
mov dword [ebp - 0x30], ecx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x79
jl 0x5059fc
cmp ax, 0x81
jg 0x5059fc
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x78
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
mov ecx, 2
push 0xffffffffffffffff
push 3
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
push 0
push 1
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*8]
lea ecx, [ebp - 0x38]
push ecx
mov dword [ebp - 0x30], eax
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx eax, word [0x54b27c]
mov edi, dword [0x54a708]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov word [0x54a718], 0xfffe
push 0x508467
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x54b280]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x54a71a]
sub dx, 0x78
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x14], esi
mov ebx, dword [edi + 0x14]
sub eax, ebx
mov ebx, eax
shl ebx, 6
add ebx, eax
mov eax, dword [edi + 0xc]
mov eax, dword [eax + ebx*4 + 0x100]
sub ecx, dword [eax + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + 0xc]
shl edi, 4
mov eax, dword [edi + ecx + 0x10]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov word [edx + 0x12], si
jmp 0x508442
cmp ax, 0x82
jne 0x505a8f
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 2
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x507a76
cmp ax, 0x83
jl 0x505c60
cmp ax, 0x8b
jg 0x505c60
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x82
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
mov ecx, 3
push 0xffffffffffffffff
push 3
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
push 0
push 1
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*8]
lea ecx, [ebp - 0x38]
push ecx
mov dword [ebp - 0x30], eax
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx eax, word [0x54b27c]
mov edi, dword [0x54a708]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov word [0x54a718], 0xfffe
push 0x508467
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x54b280]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x54a71a]
sub dx, 0x82
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0x1c], esi
mov ebx, dword [edi + 0x14]
sub eax, ebx
mov ebx, eax
shl ebx, 6
add ebx, eax
mov eax, dword [edi + 0xc]
mov eax, dword [eax + ebx*4 + 0x100]
sub ecx, dword [eax + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + 0xc]
shl edi, 4
mov eax, dword [edi + ecx + 0x10]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov word [edx + 0x1a], si
jmp 0x508442
cmp ax, 0x8c
jne 0x505cce
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 5
jmp 0x505a69
cmp ax, 0x8d
jl 0x505e8e
cmp ax, 0x95
jg 0x505e8e
mov ecx, dword [0x54a708]
sub ax, 0x8c
movsx edx, word [0x54b27c]
mov esi, dword [ecx + 0x14]
push ecx
sub edx, esi
mov esi, edx
shl esi, 6
add esi, edx
mov edx, dword [ecx + 0xc]
movsx eax, ax
mov esi, dword [edx + esi*4 + 0x100]
lea ecx, [ebp - 0x1c]
movsx edx, word [0x54b280]
mov ebx, dword [esi + 0x14]
push ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov edx, dword [ebx + edx + 0x10]
sub eax, dword [edx + 0x14]
lea esi, [eax*8]
sub esi, eax
mov eax, dword [edx + 0xc]
cmp word [eax + esi*4 + 6], 0xffff
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
jne 0x505e0c
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x8c
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4003
lea ecx, [eax + edx*4 + 8]
mov dword [ebp - 0x30], ecx
push 0xffffffffffffffff
push 8
movsx edx, di
push 0
push edx
lea eax, [ebp - 0x38]
push eax
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x8c
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x505dce
cmp ax, 0x96
jl 0x505eba
cmp ax, 0xb3
jg 0x505eba
sub ax, 0x95
movsx ecx, ax
push ecx
call fcn.00502cb0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xb4
jne 0x505f4e
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 8
push 0xffffffffffffffff
push 4
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x507575
cmp ax, 0xb5
jl 0x505f7a
cmp ax, 0xbc
jg 0x505f7a
sub ax, 0xb4
movsx eax, ax
push eax
call fcn.00502b60
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xbd
jne 0x505f9d
push 0x7fd7
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xbe
jne 0x505fc0
push 0x7e78
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xbf
jl 0x506067
cmp ax, 0xc6
jg 0x506067
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x54]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
push 0xffffffffffffffff
sub ax, 0xbe
push 0xf
movsx ecx, ax
mov eax, dword [ebp - 0x14]
push 0
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub ecx, esi
mov dword [ebp - 0x38], 0x4011
lea eax, [edx + ecx*4]
movsx ecx, di
mov dword [ebp - 0x30], eax
push ecx
jmp 0x507579
cmp ax, 0xc7
jne 0x50608a
push 0xffff8000
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xc8
jne 0x5060fe
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov ebx, dword [ecx + 0x14]
push 2
sub eax, ebx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4002
lea ecx, [edx + eax + 0x4c]
mov dword [ebp - 0x30], ecx
jmp 0x504bdd
cmp ax, 0xc9
jl 0x50612a
cmp ax, 0xd1
jg 0x50612a
sub ax, 0xc8
movsx edx, ax
push edx
call fcn.005026b0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xd2
jne 0x50619e
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x18]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov ebx, dword [ecx + 0x14]
push 1
sub eax, ebx
push 0
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov dword [ebp - 0x38], 0x4011
lea ecx, [edx + eax + 0x2b]
mov dword [ebp - 0x30], ecx
jmp 0x504bdd
cmp ax, 0xd3
jl 0x5061d2
cmp ax, 0xd8
jg 0x5061d2
sub ax, 0xd2
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 1
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xd9
jne 0x506254
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 2
mov ecx, dword [ebp - 0x14]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*2]
jmp 0x507567
cmp ax, 0xda
jne 0x5062e7
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 3
push 0xffffffffffffffff
push 3
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2]
mov dword [ebp - 0x30], ecx
jmp 0x507575
cmp ax, 0xdb
jne 0x506355
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, 4
jmp 0x50623c
cmp ax, 0xdc
jne 0x506375
push 2
call fcn.00502a40
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xdd
jl 0x5063a9
cmp ax, 0xe2
jg 0x5063a9
sub ax, 0xdc
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 2
mov dword [ebp - 0x3c], eax
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xe3
jne 0x5063c7
call fcn.0051e990
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xe4
jne 0x5063e7
push 3
call fcn.00502a40
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xe5
jne 0x506480
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
mov dword [ebp - 0x38], 0x4002
movsx ecx, di
add eax, 0x36
push ecx
mov dword [ebp - 0x30], eax
jmp 0x507579
cmp ax, 0xe6
jne 0x506518
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
push 8
push 0
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
mov dword [ebp - 0x38], 0x4002
movsx ecx, di
add eax, 0x38
push ecx
mov dword [ebp - 0x30], eax
jmp 0x507579
cmp ax, 0xe7
jl 0x50654c
cmp ax, 0xec
jg 0x50654c
sub ax, 0xe6
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 3
mov dword [ebp - 0x3c], eax
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xed
jne 0x5065cd
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3a
jmp 0x507b2d
cmp ax, 0xee
jne 0x5065e3
mov edx, dword [0x54a708]
lea eax, [ebp - 0x1c]
push edx
push eax
jmp 0x507ac2
cmp ax, 0xef
jne 0x506664
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x7a
jmp 0x507b2d
cmp ax, 0xf0
jne 0x506684
push 3
call fcn.00502280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xf1
jl 0x5066b8
cmp ax, 0xf6
jg 0x5066b8
sub ax, 0xf0
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 4
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xf7
jne 0x5066d8
push 4
call fcn.00502280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xf8
jne 0x5066f8
push 4
call fcn.00502a40
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xfb
jl 0x50672c
cmp ax, 0x100
jg 0x50672c
sub ax, 0xfa
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 5
mov dword [ebp - 0x3c], ecx
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x101
jl 0x506755
cmp ax, 0x104
jg 0x506755
sub ax, 0x101
push eax
call fcn.0051e750
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x105
jl 0x506789
cmp ax, 0x10a
jg 0x506789
sub ax, 0x104
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 6
mov dword [ebp - 0x3c], eax
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x10f
jl 0x5067bd
cmp ax, 0x114
jg 0x5067bd
sub ax, 0x10e
movsx edx, ax
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
push eax
push 7
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x119
jl 0x5067f1
cmp ax, 0x11e
jg 0x5067f1
sub ax, 0x118
lea edx, [ebp - 0x3c]
movsx ecx, ax
push edx
push 8
mov dword [ebp - 0x3c], ecx
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x123
jl 0x506825
cmp ax, 0x128
jg 0x506825
sub ax, 0x122
lea ecx, [ebp - 0x3c]
movsx eax, ax
push ecx
push 9
mov dword [ebp - 0x3c], eax
call fcn.005027d0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x12d
jl 0x50689f
cmp ax, 0x135
jg 0x50689f
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
sub ax, 0x12c
jmp 0x50754e
cmp ax, 0x136
jne 0x5068be
mov dword [0x5499f8], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x137
jl 0x506956
cmp ax, 0x13e
jg 0x506956
mov edx, dword [0x54a708]
sub ax, 0x136
movsx ecx, word [0x54b27c]
mov esi, dword [edx + 0x14]
mov word [0x54a718], 0xfffe
sub ecx, esi
push 0x508467
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + 0xc]
movsx eax, ax
mov edx, dword [ecx + esi*4 + 0x100]
movsx ecx, word [0x54b280]
mov esi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, esi
lea esi, [ecx*8]
sub esi, ecx
shl esi, 4
mov ecx, dword [esi + edx + 0x68]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
mov dx, word [ecx + eax*2]
lea eax, [ecx + eax*2]
sub dx, 0x7fd7
neg dx
sbb edx, edx
and edx, 0x160
add edx, 0x7e77
mov word [eax], dx
jmp 0x508442
cmp ax, 0x13f
jne 0x506979
mov dword [0x5499f8], 0x14
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x141
jl 0x506b4a
cmp ax, 0x149
jg 0x506b4a
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x140
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 9
push 0
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
movsx eax, di
sub edx, ecx
lea ecx, [ebp - 0x38]
add edx, 8
push eax
push ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4011
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
call esi
movsx eax, word [0x54b27c]
mov edi, dword [0x54a708]
mov ecx, eax
sub ecx, dword [edi + 0x14]
mov edx, ecx
shl edx, 6
add edx, ecx
mov ecx, dword [edi + 0xc]
mov esi, dword [ecx + edx*4 + 0x100]
movsx ecx, word [0x54b280]
mov ebx, dword [esi + 0x14]
mov edx, ecx
sub edx, ebx
lea ebx, [edx*8]
sub ebx, edx
mov edx, dword [esi + 0xc]
shl ebx, 4
mov ebx, dword [ebx + edx + 0x10]
mov dx, word [0x54a71a]
sub dx, 0x140
mov dword [ebp - 0x84], ebx
movsx edx, dx
mov esi, edx
sub esi, dword [ebx + 0x14]
lea ebx, [esi*8]
sub ebx, esi
mov esi, dword [ebp - 0x84]
mov esi, dword [esi + 0xc]
mov esi, dword [esi + ebx*4 + 0x18]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
shl ebx, 3
sub esi, ebx
mov ebx, esi
xor esi, esi
mov dword [ebx + 0xc], esi
mov ebx, dword [edi + 0x14]
sub eax, ebx
mov word [0x54a718], 0xfffe
mov ebx, eax
push 0x508467
shl ebx, 6
add ebx, eax
mov eax, dword [edi + 0xc]
mov eax, dword [eax + ebx*4 + 0x100]
sub ecx, dword [eax + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [eax + 0xc]
shl edi, 4
mov eax, dword [edi + ecx + 0x10]
sub edx, dword [eax + 0x14]
lea ecx, [edx*8]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 + 0x18]
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov word [edx + 0xa], si
jmp 0x508442
cmp ax, 0x14a
jne 0x506bca
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3e
jmp 0x507b2d
cmp ax, 0x14b
jl 0x506c8d
cmp ax, 0x153
jg 0x506c8d
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x14a
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 0xf
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov dword [ebp - 0x38], 0x4002
add edx, 0xa
mov dword [ebp - 0x30], edx
jmp 0x506ef0
cmp ax, 0x154
jne 0x506cb0
push 0x7993
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x155
jl 0x506d5a
cmp ax, 0x15d
jg 0x506d5a
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x154
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 5
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xc]
mov dword [ebp - 0x30], ecx
jmp 0x505dd2
cmp ax, 0x15e
jne 0x506d7d
push 0x791a
call fcn.00502180
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x15f
jl 0x506e32
cmp ax, 0x17d
jg 0x506e32
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 7
push 0xffffffffffffffff
push 9
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
push 0
mov edx, eax
mov dword [ebp - 0x38], 0x4002
shl edx, 5
sub edx, eax
mov ax, word [0x54a71a]
sub ax, 0x15e
movsx eax, ax
add edx, eax
movsx eax, di
lea edx, [ecx + edx*2]
push eax
mov dword [ebp - 0x30], edx
jmp 0x507b3f
cmp ax, 0x17e
jl 0x506f20
cmp ax, 0x190
jg 0x506f20
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x20]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x17d
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 9
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
mov dword [ebp - 0x38], 0x4002
add edx, 0xa
mov dword [ebp - 0x30], edx
movsx eax, di
push 0
lea ecx, [ebp - 0x38]
push eax
push ecx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
call esi
lea edx, [ebp - 0x20]
push edx
jmp 0x505df7
cmp ax, 0x191
jl 0x506fd4
cmp ax, 0x1ae
jg 0x506fd4
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 4
push 0xffffffffffffffff
push 8
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
push 0
mov edx, eax
mov dword [ebp - 0x38], 0x4002
shl edx, 5
sub edx, eax
mov ax, word [0x54a71a]
sub ax, 0x190
movsx eax, ax
add edx, eax
movsx eax, di
lea edx, [ecx + edx*2]
push eax
mov dword [ebp - 0x30], edx
jmp 0x507b3f
cmp ax, 0x1af
jl 0x507087
cmp ax, 0x1cc
jg 0x507087
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 2
push 0xffffffffffffffff
push 3
mov edi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edi
push 0
mov edx, eax
mov dword [ebp - 0x38], 0x4002
shl edx, 5
sub edx, eax
mov ax, word [0x54a71a]
sub ax, 0x1ae
push 1
movsx eax, ax
add edx, eax
lea edx, [ecx + edx*2]
mov dword [ebp - 0x30], edx
jmp 0x505dd8
cmp ax, 0x1cd
jl 0x507132
cmp ax, 0x1d6
jg 0x507132
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x1cc
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 9
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4003
lea ecx, [eax + edx*4 + 8]
mov dword [ebp - 0x30], ecx
jmp 0x505dd2
cmp ax, 0x1d7
jl 0x50721e
cmp ax, 0x1df
jg 0x50721e
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x20]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x1d6
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 2
push 1
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
lea eax, [ebp - 0x38]
add edx, 8
push 1
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4011
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
jmp 0x505df7
cmp ax, 0x1e0
jl 0x507331
cmp ax, 0x3de
jg 0x507331
mov di, word [0x54b2c8]
cmp di, 6
jge 0x5072b7
mov edx, dword [0x54a708]
movsx ecx, word [0x54b27c]
sub ecx, dword [edx + 0x14]
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + 0xc]
mov esi, dword [ecx + esi*4 + 0x100]
movsx ecx, word [0x54b280]
sub ecx, dword [esi + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [esi + 0xc]
shl ebx, 4
mov esi, dword [ebx + ecx + 0x18]
movsx ecx, word [0x54b2c6]
mov ebx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub ecx, ebx
mov bx, ax
sub bx, 0x1e0
lea ecx, [ecx + ecx*2]
mov esi, dword [esi + ecx*4 + 8]
movsx ecx, word [0x54b2c4]
sub ecx, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
lea ecx, [ecx + ecx*2]
mov word [esi + ecx*4 + 2], bx
mov ebx, 0x1b
jmp 0x5072bd
mov edx, dword [0x54a708]
cmp di, 6
jne 0x507318
movsx ecx, word [0x54b27c]
mov esi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, esi
sub ax, 0x1e0
mov esi, ecx
shl esi, 6
add esi, ecx
mov ecx, dword [edx + esi*4 + 0x100]
movsx edx, ax
mov eax, dword [0x54b2c0]
mov edi, dword [ecx + 0x14]
mov esi, dword [eax + 0x14]
sub edx, esi
mov esi, dword [eax + 0xc]
movsx eax, word [0x54b280]
sub eax, edi
lea edi, [eax*8]
sub edi, eax
mov eax, dword [ecx + 0xc]
mov cx, word [esi + edx*2]
shl edi, 4
mov word [edi + eax + 4], cx
mov dword [0x5499f8], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x3df
jl 0x5073dc
cmp ax, 0x3e6
jg 0x5073dc
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x3de
push 0xffffffffffffffff
mov edi, dword [ecx + 0x14]
push 0xe
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xc]
mov dword [ebp - 0x30], ecx
jmp 0x507575
cmp ax, 0x3e7
jne 0x5073fa
call fcn.00501560
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x3e9
jl 0x507426
cmp ax, 0x7530
jg 0x507426
sub ax, 0x3e8
movsx eax, ax
push eax
call fcn.005014a0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x7531
jl 0x5074d1
cmp ax, 0x7539
jg 0x5074d1
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x7530
push 0xffffffffffffffff
mov ebx, dword [ecx + 0x14]
push 0xf
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x505dd2
cmp ax, 0x753b
jl 0x50759d
cmp ax, 0x7542
jg 0x50759d
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
sub ax, 0x753a
mov ecx, dword [ebp - 0x14]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push 0xffffffffffffffff
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x38], 0x4002
push 1
push 0
push 1
lea edx, [ebp - 0x38]
push edx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
jmp 0x505df7
cmp ax, 0x7544
jl 0x507641
cmp ax, 0x754d
jg 0x507641
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x7544
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x505dce
cmp ax, 0x754e
jl 0x5076f2
cmp ax, 0x7555
jg 0x5076f2
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 8
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x54a71a]
sub ax, 0x753a
mov ecx, dword [ecx + 0xc]
push 0xffffffffffffffff
movsx eax, ax
add edx, eax
push 1
push 0
mov dword [ebp - 0x38], 0x4002
lea edx, [ecx + edx*2]
push 1
mov dword [ebp - 0x30], edx
jmp 0x505dd8
cmp ax, 0x7558
jl 0x507786
cmp ax, 0x755f
jg 0x507786
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, 9
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov ax, word [0x54a71a]
sub ax, 0x7544
jmp 0x5076d0
cmp ax, 0x7595
jl 0x50782d
cmp ax, 0x759d
jg 0x50782d
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x7594
mov edi, dword [ecx + 0x14]
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xd]
mov dword [ebp - 0x30], ecx
jmp 0x507a72
cmp ax, 0x759f
jl 0x5078d7
cmp ax, 0x75a7
jg 0x5078d7
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x1c]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x759e
push 0xffffffffffffffff
mov edi, dword [ecx + 0x14]
push 3
movsx eax, ax
sub eax, edi
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4011
lea ecx, [eax + edx*4 + 0xe]
mov dword [ebp - 0x30], ecx
jmp 0x507a76
cmp ax, 0x75f9
jl 0x5079d2
cmp ax, 0x7601
jg 0x5079d2
mov eax, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x20]
push eax
push ecx
call esi
mov ecx, dword [ebp - 0x20]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x1c]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x10]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x18]
sub ax, 0x75f8
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x18]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov eax, dword [ebp - 0x14]
push 0xffffffffffffffff
push 1
push 0
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
lea eax, [ebp - 0x38]
add edx, 0xa
push 1
push eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0x4002
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
call esi
lea eax, [ebp - 0x1c]
push eax
call esi
lea ecx, [ebp - 0x20]
push ecx
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x765c
jl 0x507aae
cmp ax, 0x7665
jg 0x507aae
mov edx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x1c]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ax, word [0x54a71a]
mov ecx, dword [ebp - 0x14]
sub ax, 0x765c
mov ebx, dword [ecx + 0x14]
movsx eax, ax
sub eax, ebx
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
mov dword [ebp - 0x38], 0x4002
lea ecx, [eax + edx*2 + 0xa]
mov dword [ebp - 0x30], ecx
push 0xffffffffffffffff
push 1
push 0
lea edx, [ebp - 0x38]
push 1
push edx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x14]
push eax
call esi
lea ecx, [ebp - 0x18]
push ecx
call esi
lea edx, [ebp - 0x1c]
push edx
call esi
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x7666
jne 0x508407
mov eax, dword [0x54a708]
lea ecx, [ebp - 0x1c]
push eax
push ecx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
call esi
mov ecx, dword [ebp - 0x1c]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x100]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b280]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 4
mov ecx, dword [edx + eax + 0x6c]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 5
sub edx, eax
mov eax, dword [ecx + 0xc]
shl edx, 1
sub eax, edx
add eax, 0x3c
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0x4002
push 1
lea ecx, [ebp - 0x38]
push ecx
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x14]
push edx
call esi
lea eax, [ebp - 0x18]
push eax
call esi
lea ecx, [ebp - 0x1c]
push ecx
jmp 0x505df7
cmp ax, bx
jne 0x507b87
push ebx
call fcn.005038c0
mov dword [0x549b3c], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 2
jne 0x507bc7
cmp cx, 3
jne 0x507bad
push 4
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
push 3
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 3
jne 0x507c1b
mov ax, word [0x54b290]
mov ecx, dword [0x54b26c]
mov word [0x54b280], ax
mov edx, dword [ecx + 0x14]
movsx eax, ax
sub eax, edx
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
mov ecx, 0x54b288
mov edx, dword [eax + edx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 3
call fcn.005038c0
mov dword [0x549b3c], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 4
jne 0x507c3b
mov word [0x54b280], bx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 5
jne 0x507c7b
cmp word [0x54b280], bx
push ebx
jne 0x507c63
call fcn.00500300
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
call fcn.005004c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 6
jne 0x507ca4
cmp word [0x54b280], bx
push 0xffffffffffffffff
jne 0x507c63
call fcn.00500300
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xb
jl 0x507ccd
cmp ax, 0x13
jg 0x507ccd
sub ax, 0xb
mov word [0x54a718], 0xfffe
mov word [0x54b28c], ax
push 0x508467
jmp 0x508442
cmp ax, 0x65
jl 0x508407
cmp ax, 0xc7
jg 0x508407
jmp 0x507f84
cmp ax, bx
je 0x5080b6
cmp ax, 1
jne 0x507d0e
push ebx
call fcn.00501c10
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 2
jne 0x507d7c
mov eax, dword [0x54a708]
lea ecx, [ebp - 0x44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x44]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4 + 8]
mov dl, byte [eax + 1]
inc dl
mov cl, dl
mov byte [eax + 1], dl
cmp cl, 3
jne 0x507d52
mov byte [eax + 1], 0
mov cx, word [0x54b282]
push ecx
call fcn.004a8c40
lea edx, [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 3
jne 0x507d9c
push 0xfffffffffffffff6
call fcn.005001a0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 4
jne 0x507dbc
push 0xa
call fcn.005001a0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 5
jne 0x507dc9
push 0x63
jmp 0x5081b3
cmp ax, 6
jne 0x507dee
push 2
call fcn.005038c0
call fcn.00500280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 7
jne 0x507e0e
push 1
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 8
jne 0x507e2c
call fcn.005007c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 9
jne 0x507e7f
mov eax, dword [0x54a708]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.00449e40
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xa
jne 0x507ed2
mov eax, dword [0x54a708]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x14]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.00449a00
lea edx, [ebp - 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xb
jl 0x507f78
cmp ax, 0x63
jg 0x507f78
call fcn.0043ede0
mov edx, dword [0x54a708]
mov cx, word [0x54a71a]
movsx eax, word [0x54b27c]
mov esi, dword [edx + 0x14]
sub cx, 0xa
sub eax, esi
mov word [0x54b280], cx
mov esi, eax
mov word [0x54b290], bx
shl esi, 6
add esi, eax
mov eax, dword [edx + 0xc]
mov edx, dword [eax + esi*4 + 0x100]
movsx eax, cx
mov ecx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub eax, ecx
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 4
movzx ax, byte [ecx + edx]
add eax, 5
push eax
call fcn.005038c0
mov dword [0x549b3c], ebx
mov word [0x54b286], bx
mov word [0x549cdc], bx
call fcn.0043e7f0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x65
jl 0x507fcc
cmp ax, 0xc7
jg 0x507fcc
mov edx, dword [0x54b26c]
sub ax, 0x64
movsx ecx, word [0x54b290]
mov edi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, edi
movsx eax, ax
lea ecx, [ecx + ecx*4]
mov ecx, dword [edx + ecx*4 + 0x10]
mov edx, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, edx
movsx edx, word [ecx + eax*2]
push edx
call fcn.004a4d80
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xc9
jl 0x507ff5
cmp ax, 0x12b
jg 0x507ff5
sub ax, 0xc9
mov word [0x54a718], 0xfffe
mov word [0x54b28e], ax
push 0x508467
jmp 0x508442
cmp ax, 0x1f4
jne 0x508013
call fcn.00500820
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x258
jne 0x508031
call fcn.005030c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x2bc
jne 0x508051
push 0xffffffffffffffff
call fcn.00501c10
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x3e9
jl 0x50807d
cmp ax, 0x7cf
jg 0x50807d
sub ax, 0x3e8
movsx eax, ax
push eax
call fcn.005019f0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0x7d1
jl 0x508407
cmp ax, 0xbb7
jg 0x508407
sub ax, 0x7d0
movsx ecx, ax
push ecx
call fcn.00501b00
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, bx
jne 0x5080dc
push ebx
call fcn.005038c0
mov word [0x54b27c], bx
mov dword [0x549b3c], ebx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 1
jne 0x5080fc
push 0x5b
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 2
jne 0x50816b
mov edx, dword [0x54a708]
lea eax, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x40]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4 + 8]
mov dl, byte [eax + 1]
inc dl
mov cl, dl
mov byte [eax + 1], dl
cmp cl, 3
jne 0x508141
mov byte [eax + 1], 0
mov cx, word [0x54b282]
push ecx
call fcn.004a8c40
lea edx, [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 3
jne 0x50818b
push 0xfffffffffffffff6
call fcn.005001a0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 4
jne 0x5081ab
push 0xa
call fcn.005001a0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 5
jne 0x5081df
push 0x62
call fcn.005038c0
mov word [0x54b280], bx
mov dword [0x549b3c], ebx
mov word [0x549b3a], bx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 6
jne 0x508204
push 2
call fcn.005038c0
call fcn.00500280
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 7
jne 0x508224
push 0xffffffffffffffff
call fcn.005038c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 8
jne 0x508242
call fcn.005007c0
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 0xb
jl 0x50826b
cmp ax, 0x1d
jg 0x50826b
sub ax, 0xb
mov word [0x54a718], 0xfffe
mov word [0x54b28c], ax
push 0x508467
jmp 0x508442
cmp ax, 0x64
jle 0x508407
mov edx, dword [0x54a708]
mov si, 0x64
movsx ecx, word [0x54b27c]
mov edi, dword [edx + 0x14]
sub si, ax
sub ecx, edi
sub ax, 0x64
mov edi, ecx
mov word [0x54a718], 0xfffe
shl edi, 6
add edi, ecx
mov ecx, dword [edx + 0xc]
mov edx, dword [0x54a70c]
push 0x508467
mov word [ecx + edi*4 + 2], si
movsx ecx, word [0x54b282]
mov edi, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
sub ecx, edi
lea ecx, [ecx + ecx*2]
shl ecx, 5
mov word [ecx + edx + 0x42], ax
jmp 0x508442
cmp ax, bx
jne 0x508321
cmp cx, 0x62
jne 0x508300
push 0xffffffffffffffff
call fcn.005038c0
mov word [0x54b280], bx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
push 1
call fcn.005038c0
mov word [0x54b280], bx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 1
jne 0x50833f
call fcn.00502390
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 2
jne 0x50836c
movsx eax, word [0x54b280]
push eax
call fcn.00502590
mov word [0x54b280], bx
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
cmp ax, 3
jne 0x5083f1
mov ecx, dword [0x54a708]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x18]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x18]
movsx eax, word [0x54b27c]
sub eax, dword [ecx + 0x14]
mov edx, eax
shl edx, 6
add edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0xfc]
lea edx, [ebp - 0x14]
push ecx
push edx
call esi
mov ecx, dword [ebp - 0x14]
push 0xffffffffffffffff
movsx eax, word [0x54b280]
mov esi, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
sub eax, esi
push 2
push ebx
mov dword [ebp - 0x38], 0x4011
lea eax, [eax + eax*2]
push 1
lea edx, [ecx + eax*4]
mov dword [ebp - 0x30], edx
lea eax, [ebp - 0x38]
push eax
call fcn.00435d50
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x14]
push ecx
call esi
lea edx, [ebp - 0x18]
push edx
jmp 0x505df7
cmp ax, 0xb
jl 0x508407
cmp ax, 0x14
jg 0x508407
sub ax, 0xa
mov word [0x54b280], ax
mov word [0x54a718], 0xfffe
push 0x508467
jmp 0x508442
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x40]
push eax
call esi
lea ecx, [ebp - 0x44]
push ecx
call esi
lea edx, [ebp - 0x48]
push edx
call esi
lea eax, [ebp - 0x4c]
push eax
call esi
lea ecx, [ebp - 0x50]
push ecx
call esi
ret