Function at 0x44ad70
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405996
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x124
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4016e0
xor ecx, ecx
cmp word [0x564550], cx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], ecx
jne 0x44c51a
fld dword [0x564548]
fcomp dword [0x4013e8]
mov eax, dword [0x563660]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x58], 0x1e0
fnstsw ax
test ah, 1
je 0x44ae3f
mov edx, dword [ebp + 0xc]
mov al, byte [edx]
dec al
mov byte [ebp + 0x10], al
jmp 0x44ae42
mov al, byte [ebp + 0x10]
test al, al
jne 0x44ae98
mov ecx, dword [ebp + 0xc]
xor eax, eax
mov al, byte [ecx]
mov esi, eax
push esi
call fcn.00448ae0
mov ecx, dword [edi + 0x10]
dec esi
mov eax, esi
mov dword [ebp - 0x6c], esi
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x562ac8]
lea eax, [eax + edx*4]
movsx edx, word [eax + 4]
cmp ecx, edx
jge 0x44ae8f
movsx esi, word [0x562ef4]
add ecx, esi
cmp ecx, edx
mov dword [0x562ac8], ecx
jle 0x44aed4
mov ecx, edx
jmp 0x44aece
mov dword [ebp - 0x38], 0xffffffff
jmp 0x44aed4
mov esi, dword [ebp + 0x10]
and esi, 0xff
cmp word [0x561090], cx
je 0x44aeae
push 0xfffffffffffffffe
jmp 0x44aeaf
push esi
call fcn.00448ae0
mov ecx, dword [edi + 0x10]
dec esi
mov eax, esi
mov dword [ebp - 0x6c], esi
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 4]
lea eax, [eax + edx*4]
mov dword [0x562ac8], ecx
mov dword [ebp - 0xe4], ecx
movsx ecx, word [eax + 2]
mov edx, dword [ebp - 0xe4]
mov edi, dword [0x562eb4]
mov eax, ecx
mov dword [ebp - 0x14], ecx
cmp eax, edx
jg 0x44c16f
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x7c], eax
mov esi, dword [ecx + 4]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x60], 0x1dc
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x12c], esi
sub eax, edx
mov edx, dword [esi + 0xc]
mov bl, byte [edx + eax*2 + 1]
cmp bl, 9
jne 0x44af3c
mov dword [ebp - 0x48], 0x15
mov dword [ebp - 0x50], 0x2d7
jmp 0x44b940
cmp bl, 0xa
jne 0x44af72
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x50], 0x2ec
mov ecx, esi
shl ecx, 4
add ecx, esi
mov esi, dword [edi + 0xc]
lea ecx, [ecx + ecx*2]
shl ecx, 1
sub esi, ecx
xor ecx, ecx
mov cl, byte [edx + eax*2]
xor edx, edx
mov dl, byte [esi + ecx + 0x8ca]
mov dword [ebp - 0x48], edx
jmp 0x44b940
cmp bl, 0x61
jne 0x44b06f
mov al, byte [edx + eax*2]
xor dx, dx
mov dl, al
mov dword [ebp - 0x50], 0x301
sub edx, 0x10
movsx esi, dx
xor edx, edx
mov dword [ebp - 0x28], esi
mov dl, byte [ecx + 1]
cmp esi, edx
jg 0x44b045
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x14]
mov ecx, dword [eax + 0xc]
sub esi, ebx
mov edx, dword [ecx + esi*8 + 4]
lea esi, [ecx + esi*8 + 4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x562ab4], eax
mov eax, dword [esi]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov ecx, dword [0x562ab4]
mov esi, dword [0x562abc]
mov edi, dword [0x562eb4]
xor edx, edx
dec ecx
mov dword [0x562ab0], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0xec], ecx
cmp edx, dword [ebp - 0xec]
jg 0x44b039
mov ebx, dword [esi + 0x14]
mov ecx, dword [esi + 0xc]
mov eax, edx
sub eax, ebx
mov ax, word [ecx + eax*2]
mov ecx, dword [edi + 0x14]
sub ax, 0x20
movsx ebx, ax
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [edi + 0xc]
shl ecx, 1
sub ebx, ecx
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, dword [ebp - 0x48]
add ebx, ecx
mov eax, 1
mov dword [ebp - 0x48], ebx
add edx, eax
jmp 0x44afee
mov dword [ebp - 0x7c], 0xffffffff
jmp 0x44b940
mov edx, dword [edi + 0x14]
and eax, 0xff
mov ecx, edx
shl ecx, 4
add ecx, edx
lea edx, [ecx + ecx*2]
mov ecx, dword [edi + 0xc]
shl edx, 1
sub ecx, edx
xor edx, edx
mov dl, byte [ecx + eax + 0x798]
mov dword [ebp - 0x48], edx
jmp 0x44b940
cmp bl, 0x62
jne 0x44b524
mov eax, dword [0x564548]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x48], 0x15
mov dword [ebp - 0x7c], 0xfffffffe
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
jg 0x44b940
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
mov edi, dword [ecx + 8]
mov ecx, dword [ebp - 0x14]
sub eax, dword [edi + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
lea ebx, [eax + edx*4]
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
sub ecx, eax
movzx ax, byte [edx + ecx*2]
movzx cx, byte [ebx + 2]
add eax, 0x20
cmp cx, ax
jne 0x44b50c
movsx eax, word [ebx + 6]
add eax, 0xf
cmp eax, 7
ja case.0x44b0fc.12
jmp dword [eax*4 + 0x44c580]
mov bl, byte [ebx + 0xe]
test bl, bl
jbe case.0x44b0fc.12
xor dx, dx
mov dword [ebp - 0x7c], 0xfffffffc
mov dl, bl
jmp 0x44b3ad
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xa4]
inc eax
push ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xa4], 2
mov edx, dword [edi + 0x14]
push eax
mov eax, dword [ebp - 0x28]
sub eax, edx
mov dword [ebp - 0x7c], 0xfffffffc
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + edx*4 + 0x10]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
movsx ecx, ax
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [ebp - 0x8c]
lea edx, [eax + eax*2]
mov dword [ebp - 0x40], edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp case.0x44b0fc.12
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c], 0xfffffffc
inc eax
mov dword [ebp - 0x20], eax
lea ecx, [eax + 0xf]
jmp 0x44b3b3
mov eax, dword [ebx + 8]
test eax, eax
jne 0x44b306
lea ecx, [ebp - 0x84]
push edi
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x84]
mov ebx, dword [ebp - 0x28]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
lea edx, [ebp - 0x2c]
push ecx
push edx
call fcn.0044ac30
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x563734]
push 1
inc eax
push ecx
push 0x424520
push eax
mov dword [ebp - 0x20], eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
push eax
push 0x424528
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov esi, eax
lea edx, [ebp - 0x94]
neg esi
lea eax, [ebp - 0x90]
push edx
sbb esi, esi
lea ecx, [ebp - 0x8c]
push eax
push ecx
neg esi
push 3
neg esi
call dword [fcn.00401250]
add esp, 0x10
test si, si
je 0x44b2d4
mov ecx, dword [edi + 0x14]
mov eax, ebx
sub eax, ecx
mov dword [ebp - 0x7c], 0xfffffffc
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
movzx cx, byte [eax + edx*4 + 0xe]
sub ecx, 0x20
movsx ecx, cx
lea eax, [ecx*8]
sub eax, ecx
lea edx, [eax + eax*2]
mov dword [ebp - 0x40], edx
jmp case.0x44b0fc.12
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x5e
jle 0x44b2eb
mov dword [ebp - 0x7c], 0xfffffffc
add ecx, 0xffffffa2
jmp 0x44b3b3
mov dword [ebp - 0x7c], 0xfffffffb
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
mov dword [ebp - 0x40], ecx
jmp case.0x44b0fc.12
mov eax, dword [ebp - 0x20]
mov edx, dword [0x563734]
push 1
inc eax
push edx
push 0x424520
push eax
mov dword [ebp - 0x7c], 0xfffffffc
mov dword [ebp - 0x20], eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
push eax
push 0x424528
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov esi, eax
lea eax, [ebp - 0x94]
neg esi
lea ecx, [ebp - 0x90]
push eax
sbb esi, esi
lea edx, [ebp - 0x8c]
push ecx
push edx
neg esi
push 3
neg esi
call dword [fcn.00401250]
add esp, 0x10
test si, si
je 0x44b3a8
movzx ax, byte [ebx + 0xe]
sub eax, 0x20
movsx ecx, ax
jmp 0x44b2f2
movzx dx, byte [ebx + 0xc]
sub edx, 0x20
movsx ecx, dx
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x80]
mov ecx, dword [0x56110c]
cmp ecx, eax
jle 0x44b50c
add eax, 0x15
cmp ecx, eax
jge 0x44b50c
mov eax, dword [ebp - 0x58]
mov ecx, dword [0x561110]
cmp ecx, eax
jle 0x44b50c
add eax, 0x15
cmp ecx, eax
jge 0x44b50c
mov ebx, dword [ebp - 0x28]
mov esi, dword [edi + 0x14]
mov edx, dword [edi + 0xc]
mov eax, ebx
sub eax, esi
lea ecx, [eax*8]
sub ecx, eax
movsx eax, word [edx + ecx*4 + 6]
lea esi, [edx + ecx*4]
add eax, 0xf
cmp eax, 7
ja case.0x44b420.11
jmp dword [eax*4 + 0x44c5a0]
mov al, byte [esi + 0xd]
neg al
sbb eax, eax
not eax
and eax, ebx
mov dword [ebp - 0x34], eax
jmp 0x44b473
mov al, byte [esi + 0xd]
test al, al
jne case.0x44b420.15
mov al, byte [esi + 0xc]
test al, al
jne 0x44b451
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x78], 0x7b
jmp 0x44b473
mov ecx, dword [0x563734]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
xor edx, edx
mov dl, byte [esi + 0xc]
cmp eax, edx
jge 0x44b445
mov dword [ebp - 0x34], 0
jmp 0x44b473
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], ebx
fld dword [0x4016d8]
mov dword [0x563738], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [0x564548]
fnstsw ax
test ah, 0x41
je 0x44b4a8
cmp word [0x561080], 0
je 0x44b4a8
mov dword [ebp - 0x54], 0x3f333333
fld dword [ebp - 0x54]
fsub qword [0x4016d0]
mov eax, dword [0x562aa0]
lea edx, [ebp - 0xb8]
push edx
mov edx, dword [ebp - 0x58]
mov ecx, dword [eax]
add edx, 0xfffffffe
fstp dword [ebp - 0x130]
fld dword [ebp - 0x130]
push ecx
fstp dword [esp]
push 0x19
push 0x19
push 0x17c
push 0x140
push edx
mov edx, dword [ebp - 0x80]
add edx, 0xfffffffe
push edx
push 2
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x44b50c
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x12c]
mov eax, 1
add ecx, eax
mov dword [ebp - 0x28], ecx
jmp 0x44b09f
cmp bl, 0x63
jne 0x44b770
xor ebx, ebx
mov dword [ebp - 0x48], 0
mov bl, byte [ecx]
mov dword [ebp - 0xfc], ebx
mov ebx, 1
mov dword [ebp - 0x28], ebx
cmp ebx, dword [ebp - 0xfc]
jg 0x44b741
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 8]
mov ecx, ebx
sub ecx, dword [esi + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [esi + 0xc]
lea esi, [ecx + edi*4]
mov cl, byte [ecx + edi*4 + 2]
cmp cl, byte [edx + eax*2]
je 0x44b57e
mov ecx, 1
add ebx, ecx
jmp 0x44b546
movzx cx, byte [esi]
mov dword [ebp - 0x28], ebx
lea eax, [ecx*8]
sub eax, ecx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
cmp eax, 0x2fc
mov dword [ebp - 0x7c], eax
jne 0x44b5ab
mov dword [ebp - 0x50], 0x15e
jmp 0x44b5c0
movzx ax, byte [esi + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx ecx, ax
mov dword [ebp - 0x50], ecx
mov edx, dword [esi + 0x10]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x562ab4], eax
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov ecx, dword [0x562ab4]
mov esi, dword [0x562abc]
mov edi, dword [0x562eb4]
dec ecx
mov dword [0x562ab0], eax
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x104], ecx
xor edx, edx
cmp edx, dword [ebp - 0x104]
jg 0x44b64e
mov ebx, dword [esi + 0x14]
mov ecx, dword [esi + 0xc]
mov eax, edx
sub eax, ebx
mov ax, word [ecx + eax*2]
mov ecx, dword [edi + 0x14]
sub ax, 0x20
movsx ebx, ax
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [edi + 0xc]
shl ecx, 1
sub ebx, ecx
xor ecx, ecx
mov cl, byte [ebx + eax + 0x59a]
mov ebx, dword [ebp - 0x48]
add ebx, ecx
mov eax, 1
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x28]
add edx, eax
jmp 0x44b600
mov edx, dword [ebp + 8]
mov eax, ebx
mov edi, dword [edx + 8]
mov esi, dword [edi + 0x14]
mov edx, dword [edi + 0xc]
sub eax, esi
lea ecx, [eax*8]
sub ecx, eax
mov ax, word [edx + ecx*4 + 6]
cmp ax, 0xfffc
lea esi, [edx + ecx*4]
jne 0x44b6a1
mov eax, dword [ebp + 0xc]
cmp word [eax + 4], 0
jle 0x44b71f
mov dword [ebp - 0x60], 0x1dc
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], 0x38f
mov dword [ebp - 0x50], 0x122
jmp 0x44b71f
cmp ax, 0xfff7
jne 0x44b6e8
mov eax, dword [0x562ad4]
mov ecx, dword [esi + 8]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb4], 0x8003
lea edx, [eax + eax*4]
shl edx, 0xa
add edx, eax
mov eax, dword [0x562ec8]
lea ecx, [eax + edx*8 + 0xde8]
lea edx, [ebp - 0xb4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je 0x44b71f
jmp 0x44b683
test ax, ax
jl 0x44b71f
mov eax, dword [esi + 8]
test eax, eax
je 0x44b706
push eax
call fcn.004ad630
test ax, ax
je 0x44b706
mov dword [ebp - 0x7c], 0xfffffffd
mov eax, dword [ebp - 0x7c]
test eax, eax
jl 0x44b71f
mov cl, byte [esi + 0xc]
push 0
push 0
push 0
push ecx
call fcn.0044c600
add dword [ebp - 0x48], eax
mov eax, ebx
mov ebx, dword [edi + 0x14]
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
cmp byte [eax + edx*4], 0
jne 0x44b744
mov dword [ebp - 0x7c], 0xfffffffd
jmp 0x44b744
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x44b940
mov dword [ebp - 0x48], 0x15
mov dword [ebp - 0x28], 0xa
mov dword [ebp - 0x50], 0x2d7
mov dword [ebp - 0x7c], 0x2fc
jmp 0x44b940
cmp bl, 0x64
jne 0x44b7a9
mov ecx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x6c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 2]
cmp dword [ebp - 0x14], ecx
jle 0x44b940
mov eax, dword [ebp - 0x58]
mov edx, dword [0x563660]
add eax, 0x17
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x58], eax
jmp 0x44b940
mov cl, byte [edx + eax*2]
mov esi, dword [edi + 0x14]
mov byte [ebp - 0x134], cl
mov ecx, esi
shl ecx, 4
add ecx, esi
mov esi, dword [edi + 0xc]
mov edi, dword [ebp - 0x134]
lea ecx, [ecx + ecx*2]
and edi, 0xff
shl ecx, 1
sub esi, ecx
xor ecx, ecx
mov cl, byte [esi + edi + 0x798]
movzx si, bl
mov dword [ebp - 0x48], ecx
lea ecx, [esi*8]
sub ecx, esi
lea ecx, [ecx + ecx*2 + 0x21a]
movsx ecx, cx
mov dword [ebp - 0x50], ecx
mov cl, byte [ebp - 0x134]
cmp cl, 4
jne 0x44b940
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 0x10]
mov ecx, dword [ebp - 0x6c]
mov edi, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub ecx, edi
lea ecx, [ecx + ecx*2]
movsx ecx, word [esi + ecx*4 + 4]
cmp dword [ebp - 0x14], ecx
jge 0x44b940
mov al, byte [edx + eax*2 + 2]
cmp al, 4
jne 0x44b927
mov eax, dword [0x562ad4]
mov ecx, dword [0x562ec8]
mov ebx, 1
lea edx, [eax + eax*4]
mov edi, ebx
shl edx, 0xa
add edx, eax
xor eax, eax
mov al, byte [ecx + edx*8 + 0xe08]
mov dword [ebp - 0x10c], eax
cmp edi, dword [ebp - 0x10c]
jg 0x44b917
mov eax, dword [0x562ad4]
lea edx, [eax + eax*4]
shl edx, 0xa
add edx, eax
mov eax, dword [0x562ec8]
mov eax, dword [eax + edx*8 + 0xe00]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x14]
lea eax, [ebp - 0xb8]
sub ecx, edx
xor edx, edx
push eax
mov eax, dword [0x564548]
mov dl, byte [ecx + edi]
push eax
mov eax, dword [ebp - 0x50]
mov esi, edx
push 0x15
push 0x15
push eax
lea eax, [esi*8]
mov ecx, dword [0x562aa0]
sub eax, esi
mov edx, dword [ecx]
lea eax, [eax + eax*2]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x80]
push eax
push 5
push ecx
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x44b8e5
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x562eb4]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [edx + 0xc]
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 1
sub ecx, eax
mov dl, byte [ecx + esi + 0x798]
mov ecx, dword [ebp - 0x80]
add ecx, edx
add edi, ebx
mov dword [ebp - 0x80], ecx
jmp 0x44b85e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x48], 0
inc eax
mov dword [ebp - 0x14], eax
jmp 0x44b940
cmp al, 0x5c
jne 0x44b940
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x48], 0
inc eax
mov dword [ebp - 0x80], 0x190
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x48]
test eax, eax
jle 0x44bc1b
mov ecx, dword [ebp - 0x80]
add ecx, eax
cmp ecx, 0x319
jle 0x44b96a
mov eax, dword [ebp - 0x58]
mov edx, dword [0x563660]
add eax, 0x17
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x244
jg 0x44c16f
mov eax, dword [ebp - 0x7c]
add eax, 5
cmp eax, 5
ja case.default.0x44b986
jmp dword [eax*4 + 0x44c5c0]
mov ecx, dword [ebp + 8]
mov edx, dword [0x562aa0]
mov eax, dword [ecx + 4]
mov esi, dword [edx]
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [0x564548]
push ecx
mov ecx, dword [ebp - 0x50]
push 0x15
push 0x15
push ecx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, ebx
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
mov ecx, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x80]
push ecx
push eax
push 5
push edx
call dword [esi + 0x7c]
jmp 0x44bc57
mov edx, dword [0x562ab4]
xor ebx, ebx
dec edx
xor edi, edi
mov dword [ebp - 0x118], edx
cmp edi, dword [ebp - 0x118]
jg 0x44baa2
mov eax, dword [0x562abc]
mov ecx, edi
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
mov ecx, dword [0x562aa0]
sub ax, 0x20
movsx esi, ax
lea eax, [ebp - 0xb8]
mov edx, dword [ecx]
push eax
mov eax, dword [0x564548]
push eax
lea eax, [esi*8]
sub eax, esi
push 0x15
push 0x15
push 0x301
lea eax, [eax + eax*2]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x80]
add eax, ebx
push eax
push 5
push ecx
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x44ba71
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x562eb4]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [edx + 0xc]
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 1
sub ecx, eax
mov eax, 1
mov dl, byte [ecx + esi + 0x798]
add ebx, edx
add edi, eax
jmp 0x44b9f5
mov eax, dword [ebp - 0x58]
mov ebx, dword [ebp - 0x80]
lea edx, [ebp - 0xb8]
push edx
mov edx, dword [0x564548]
push edx
push 4
push 2
lea esi, [eax + 0xf]
mov eax, dword [0x562aa0]
push 0x216
push 0x4d4
lea edx, [ebx - 2]
mov ecx, dword [eax]
push esi
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x44baf4
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [0x564548]
mov eax, dword [0x562aa0]
push ecx
lea ecx, [edi + 2]
push 4
mov edx, dword [eax]
push ecx
mov ecx, 0x7c9
push 0x216
sub ecx, edi
push ecx
push esi
push ebx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x44bb42
mov edx, dword [0x562aa0]
push 0x7c
push 0x420714
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x56110c]
cmp eax, ebx
jle case.0x44b986.3
add ebx, edi
cmp eax, ebx
jge case.0x44b986.3
mov eax, dword [0x561110]
mov ecx, dword [ebp - 0x58]
cmp eax, ecx
jle case.0x44b986.3
add ecx, 0x15
cmp eax, ecx
jge case.0x44b986.3
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
mov cl, byte [edx + ecx*8]
test cl, cl
jne 0x44bb98
movsx eax, word [eax + 2]
mov dword [ebp - 0x30], eax
jmp case.0x44b986.3
movsx ecx, word [eax + 2]
mov dword [ebp - 0x3c], ecx
jmp case.0x44b986.3
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 4]
mov edx, dword [0x562aa0]
push ecx
push 0x15
mov esi, dword [edx]
push 0x15
push 0x2d7
jmp 0x44b9b1
lea ecx, [ebp - 0xb8]
mov eax, dword [0x562aa0]
push ecx
mov ecx, dword [ebp - 0x54]
push ecx
mov ecx, dword [ebp - 0x40]
push 0x15
push 0x15
mov edx, dword [eax]
push 0x2ec
push ecx
mov ecx, dword [ebp - 0x58]
push ecx
mov ecx, dword [ebp - 0x80]
push ecx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge case.0x44b986.3
mov edx, dword [0x562aa0]
push 0x7c
push 0x420714
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x80]
add ecx, eax
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0x14]
mov eax, 1
add ecx, eax
jmp 0x44aede
lea edx, [ebp - 0xb8]
mov eax, dword [0x562aa0]
push edx
mov edx, dword [ebp - 0x54]
push edx
mov edx, dword [ebp - 0x40]
push 0x15
push 0x15
mov ecx, dword [eax]
push 0x2d7
push edx
mov edx, dword [ebp - 0x58]
push edx
mov edx, dword [ebp - 0x80]
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge case.0x44b986.3
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
jmp 0x44bc09
mov edx, dword [ebp - 0x80]
mov eax, dword [0x56110c]
cmp eax, edx
jle 0x44bf5b
mov ecx, dword [ebp - 0x48]
mov eax, edx
add eax, ecx
mov ecx, dword [0x56110c]
cmp ecx, eax
jge 0x44bf5b
mov edx, dword [0x561110]
mov eax, dword [ebp - 0x58]
cmp edx, eax
jle 0x44bf5b
add eax, 0x15
mov ecx, edx
cmp ecx, eax
jge 0x44bf5b
cmp word [0x561080], 0
je 0x44bcc3
mov dword [ebp - 0x64], 0x190
jmp 0x44bcca
mov dword [ebp - 0x60], 0x1ed
mov ecx, dword [ebp + 8]
mov ebx, dword [ebp - 0x28]
mov eax, ebx
mov edi, dword [ecx + 8]
sub eax, dword [edi + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
lea esi, [eax + edx*4]
movsx eax, word [eax + edx*4 + 6]
add eax, 0xa
cmp eax, 8
ja case.0x44bcf8.8
jmp dword [eax*4 + 0x44c5d8]
lea ecx, [ebp - 0x84]
push edi
push ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x84]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0xc]
push ecx
call fcn.00463110
lea edx, [ebp - 0x84]
mov dword [ebp - 0xb8], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
movsx eax, word [ebp - 0xb8]
test eax, eax
mov dword [ebp - 0x78], eax
jne 0x44bf5b
mov edx, dword [edi + 0x14]
mov ecx, dword [edi + 0xc]
sub ebx, edx
lea eax, [ebx*8]
sub eax, ebx
xor edx, edx
mov dl, byte [ecx + eax*4 + 2]
mov dword [ebp - 0x78], edx
jmp 0x44bf5b
mov al, byte [esi + 0xc]
mov dword [ebp - 0x18], ebx
test al, al
jne 0x44bd94
movsx ecx, word [esi + 4]
mov eax, dword [esi + 8]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x30], eax
jmp 0x44bf5b
cmp al, 1
jne 0x44bdcb
movzx ax, byte [esi + 0xe]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov cl, byte [esi + 0xd]
test ecx, ecx
mov dword [ebp - 0x5c], ecx
jne 0x44bdb8
mov dword [ebp - 0x34], 0x11
jmp 0x44bf5b
neg ax
sbb eax, eax
and eax, 2
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x44bf5b
cmp al, 2
jne 0x44bdda
mov edx, dword [esi + 8]
mov dword [ebp - 0x74], edx
jmp 0x44bf5b
cmp al, 3
jne 0x44bdf2
xor eax, eax
mov dword [ebp - 0x34], 0xb
mov al, byte [esi + 0xd]
mov dword [ebp - 0x5c], eax
jmp 0x44bf5b
cmp al, 4
jne 0x44be11
movzx cx, byte [esi + 0xe]
add ecx, 0xb
xor eax, eax
mov al, byte [esi + 0xd]
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x5c], eax
jmp 0x44bf5b
cmp al, 5
jne 0x44be27
mov ecx, dword [esi + 8]
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0x5c], ecx
jmp 0x44bf5b
cmp al, 6
jne 0x44bf5b
mov edx, dword [esi + 8]
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 0x5c], edx
jmp 0x44bf5b
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x44], ebx
cmp word [eax + 4], 0
jl case.0x44bcf8.8
jmp 0x44bedd
mov cx, word [esi + 4]
mov dword [ebp - 0x18], ebx
push ecx
mov dword [ebp - 0x34], ebx
call fcn.004ad250
test eax, eax
mov dword [ebp - 0x78], eax
jne 0x44bf5b
xor edx, edx
mov dl, byte [esi + 2]
mov dword [ebp - 0x78], edx
jmp 0x44bf5b
movsx eax, word [esi + 4]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 8]
mov esi, dword [esi + 0x18]
mov dword [ebp - 0x68], eax
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
shl ecx, 3
sub edx, ecx
movsx ecx, word [edx + 0xa]
mov dword [ebp - 0xac], eax
mov eax, dword [0x562ad4]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0xb4], 0x8003
lea edx, [eax + eax*4]
shl edx, 0xa
add edx, eax
mov eax, dword [0x562ec8]
lea ecx, [eax + edx*8 + 0xde8]
lea edx, [ebp - 0xb4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je case.0x44bcf8.8
mov dword [ebp - 0x60], 0x1dc
mov dword [ebp - 0x64], 0
jmp 0x44bf5b
mov eax, dword [esi + 0x18]
mov edi, dword [esi + 8]
mov dword [ebp - 0x5c], edi
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
cmp byte [edx + 8], 1
jne 0x44bf1a
movsx eax, word [esi + 4]
push eax
mov dword [ebp - 0x30], eax
call fcn.004ea460
cmp eax, edi
jge case.0x44bcf8.8
jmp 0x44bedd
mov eax, dword [0x562ad4]
mov edx, dword [0x562ec8]
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0xac], edi
lea ecx, [eax + eax*4]
mov dword [ebp - 0xb4], 0x8003
shl ecx, 0xa
add ecx, eax
lea eax, [edx + ecx*8 + 0xde8]
lea ecx, [ebp - 0xb4]
push eax
push ecx
jmp 0x44bed2
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xb8]
mov esi, dword [ebp - 0x64]
mov eax, dword [0x562aa0]
push ecx
mov ecx, dword [0x564548]
mov edi, dword [ebp - 0x80]
mov edx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x7c]
push 0x15
push 5
push ecx
mov ecx, dword [ebp - 0x58]
push esi
push ecx
push edi
push 2
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x44bfa5
mov edx, dword [0x562aa0]
push 0x7c
push 0x420714
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xb8]
mov eax, dword [0x562aa0]
push ecx
mov ecx, dword [0x564548]
push ecx
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax]
push 0x15
lea ebx, [ecx - 5]
sub esi, ecx
mov ecx, dword [ebp - 0x58]
push ebx
mov ebx, dword [ebp - 0x7c]
add esi, 0x195
push ebx
push esi
add edi, 5
push ecx
push edi
push 2
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x44bff9
mov edx, dword [0x562aa0]
push 0x7c
push 0x420714
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp + 8]
xor eax, eax
mov al, byte [ecx]
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
jg case.0x44b986.3
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7c], 3
mov ecx, dword [edx + 8]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 6], 0
lea eax, [eax + edx*4]
jl 0x44c054
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x80]
mov al, byte [eax + 0xc]
add ecx, 3
add edx, 3
push ecx
push edx
push 0xffffffffffffffff
push eax
call fcn.0044c600
add eax, 3
mov dword [ebp - 0x7c], eax
mov ecx, dword [0x562ab4]
mov dword [ebp - 0x1c], 0
dec ecx
mov dword [ebp - 0x120], ecx
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
jg case.0x44b986.3
mov ecx, eax
mov eax, dword [0x562abc]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x7c]
sub ax, 0x20
movsx edi, ax
lea ebx, [ecx + edx]
lea edx, [ebp - 0xb8]
push edx
mov edx, dword [0x564548]
push edx
mov edx, dword [ebp - 0x60]
mov eax, dword [0x562aa0]
push 0x11
push 0xa
lea esi, [edi + edi*4]
push edx
mov edx, dword [ebp - 0x58]
mov ecx, dword [eax]
add edx, 3
shl esi, 1
push esi
push edx
lea edx, [ebx - 1]
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x44c0eb
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xb8]
mov eax, dword [0x562aa0]
push ecx
mov ecx, dword [0x564548]
push ecx
mov ecx, dword [ebp - 0x50]
push 0xf
mov edx, dword [eax]
push 0xa
push ecx
mov ecx, dword [ebp - 0x58]
push esi
add ecx, 4
push ecx
push ebx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x44c132
mov edx, dword [0x562aa0]
push 0x7c
push 0x420714
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x562eb4]
mov esi, dword [ebp - 0x7c]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [edx + 0xc]
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 1
sub ecx, eax
mov eax, 1
mov dl, byte [ecx + edi + 0x59a]
mov ecx, dword [ebp - 0x1c]
add esi, edx
add ecx, eax
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x1c], ecx
jmp 0x44c068
fld dword [0x564548]
fcomp dword [0x4013e8]
fnstsw ax
test ah, 1
jne 0x44c51a
cmp word [ebp - 0x38], 0
je 0x44c22e
fld dword [0x563664]
fmul qword [0x4016c8]
call sub.MSVBVM60.DLL__CIsin
fstp dword [ebp - 0x70]
fld dword [0x5611b8]
fadd dword [0x563664]
fstp dword [0x563664]
fld dword [0x563664]
fcomp dword [0x4016c0]
fnstsw ax
test ah, 0x41
jne 0x44c1d4
mov dword [0x563664], 0
fld dword [ebp - 0x70]
fadd dword [0x4016bc]
mov ecx, dword [0x562aa0]
lea edx, [ebp - 0xb8]
push edx
push 0x3f800000
mov esi, dword [ecx]
push 0x1c
push 0x1a
push 0x2c
push 0x1ac
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
push eax
mov eax, dword [0x562aa0]
push 0x303
push 2
push eax
call dword [esi + 0x7c]
test eax, eax
fnclex
jge 0x44c22e
mov ecx, dword [0x562aa0]
push 0x7c
push 0x420714
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x34]
cmp esi, 1
jl 0x44c2a5
cmp esi, 9
jg 0x44c2a5
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x84]
mov edi, dword [edx + 8]
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ebx, dword [edi + 0x14]
mov edx, dword [edi + 0xc]
mov eax, esi
push 0
sub eax, ebx
push 0xa7
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + ecx*4 + 8]
push eax
mov eax, dword [ebp - 0x84]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub esi, ebx
lea ecx, [esi*8]
sub ecx, esi
lea eax, [edx + ecx*4 + 0x10]
mov ecx, dword [ebp - 0x78]
push eax
push ecx
call fcn.00442050
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
jmp 0x44c462
cmp esi, 0xa
jne 0x44c2d4
mov edx, 0x424530
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x5c]
push 0
push 0xa7
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 0x2b
jmp 0x44c451
cmp esi, 0xb
jne 0x44c303
mov edx, 0x424540
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x5c]
push 0
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x2a
jmp 0x44c451
cmp esi, 0xc
jne 0x44c30f
mov edx, 0x424578
jmp 0x44c377
cmp esi, 0xd
jne 0x44c33e
mov edx, 0x4245a8
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x5c]
push 0
push 0xa7
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 0x2c
jmp 0x44c451
cmp esi, 0xe
jne 0x44c36d
mov edx, 0x4245dc
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x5c]
push 0
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x2c
jmp 0x44c451
cmp esi, 0xf
jne 0x44c39c
mov edx, 0x42460c
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x5c]
push 0
push 0xa7
lea edx, [ebp - 0x8c]
push ecx
push edx
push 0x2c
jmp 0x44c451
cmp esi, 0x10
jne 0x44c3cb
mov edx, 0x42463c
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x5c]
push 0
push 0xa7
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 0x2f
jmp 0x44c451
cmp esi, 0x11
jne 0x44c3f8
mov edx, 0x424658
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
movsx edx, word [ebp - 0x24]
push 0
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x30
jmp 0x44c451
cmp esi, 0x12
jne 0x44c427
mov edx, 0x424674
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x5c]
push ecx
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x2e
jmp 0x44c451
cmp esi, 0x13
jne 0x44c462
mov edx, 0x424698
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x5c]
push 0
push 0xa7
lea edx, [ebp - 0x8c]
push ecx
push edx
push 0x2d
call fcn.00442050
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x44c47b
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x68]
push 0
push 0
push ecx
push edx
push eax
call fcn.004e60e0
mov eax, dword [ebp - 0x3c]
test eax, eax
jle 0x44c488
push eax
call fcn.004e2b00
mov eax, dword [ebp - 0x74]
test eax, eax
jle 0x44c495
push eax
call fcn.004ecfb0
mov esi, dword [ebp - 0x44]
test esi, esi
jle 0x44c51a
mov eax, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x88]
mov edi, dword [eax + 8]
push edi
push ecx
call ebx
lea edx, [ebp - 0x84]
push edi
push edx
call ebx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x88]
add eax, 4
mov ebx, dword [ecx + 0x14]
push eax
mov eax, esi
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x18]
mov eax, dword [ebp - 0x84]
push ecx
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub esi, ecx
lea edx, [esi*8]
sub edx, esi
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.004484d0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x84]
push edx
call esi
lea eax, [ebp - 0x88]
push eax
call esi
wait
push 0x44c568
jmp 0x44c567
ret