Function at 0x44bf20
Capabilities:
Check http status code
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x405426
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4017f0
xor esi, esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x68], esi
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edi, dword [ebp + 8]
push edi
call fcn.0045a410
mov byte [ebp - 0x3c], al
mov dword [ebp - 4], 4
movzx ax, al
cmp word [0x545fa0], ax
jle 0x44c01e
mov dword [ebp - 4], 5
mov word [0x545fa0], ax
mov ebx, 6
mov dword [ebp - 4], ebx
cmp dword [0x544a04], 0x1dc
jle 0x44c062
mov dword [ebp - 4], 7
cmp dword [0x544b38], esi
jne 0x44c082
mov dword [ebp - 4], 8
mov dword [0x544b38], 0x3e7
mov dword [ebp - 4], 9
mov word [0x544b36], si
jmp 0x44c082
mov dword [ebp - 4], 0xa
cmp dword [0x544b38], 0x3e7
jne 0x44c082
mov dword [ebp - 4], 0xb
mov dword [0x544b38], esi
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 4], 0xd
cmp word [0x544984], si
je 0x44c0f2
mov dword [ebp - 4], 0xe
mov eax, dword [0x545ff4]
fld dword [0x544a80]
fadd dword [eax + 0x3c]
fstp dword [eax + 0x3c]
mov dword [ebp - 4], 0xf
mov ecx, dword [0x545ff4]
fld dword [ecx + 0x3c]
fcomp dword [0x401734]
fnstsw ax
test ah, 0x41
jne 0x44c0f2
mov dword [ebp - 4], 0x10
push edi
call fcn.00448820
mov dword [ebp - 4], 0x11
mov edx, dword [0x545ff4]
mov dword [edx + 0x3c], esi
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov ax, word [0x545fa0]
cmp word [0x545fa8], ax
je 0x44f2e4
mov dword [ebp - 4], 0x14
call fcn.0044bd00
mov dword [ebp - 4], 0x15
call fcn.00533280
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, 0x545fac
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
mov dword [ebp - 4], 0x17
mov edx, dword [ebp + 0x10]
mov edx, dword [edx]
mov ecx, 0x545fb0
call edi
mov dword [ebp - 4], 0x18
mov ax, word [0x545fa0]
mov word [0x545fa8], ax
mov dword [ebp - 4], 0x19
push esi
call fcn.0043dbd0
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x545ff4]
mov dword [ecx + 0x38], esi
mov dword [ebp - 4], 0x1b
mov dword [0x5456cc], ebx
mov dword [ebp - 4], 0x1c
mov eax, dword [0x544b28]
mov edx, dword [eax]
push 0xff
push eax
call dword [edx + 0x3c]
fnclex
cmp eax, esi
jge 0x44c1c6
push 0x3c
push 0x421dc0
mov ecx, dword [0x544b28]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d
mov ebx, 1
mov dword [ebp - 0x24], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, 8
cmp ebx, eax
jg 0x44f2dc
mov dword [ebp - 4], 0x1e
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x545fa0]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
xor edx, edx
mov dl, byte [eax]
cmp ebx, edx
jg 0x44f2c6
mov dword [ebp - 4], 0x20
mov edx, dword [eax + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
mov dl, byte [eax]
mov dword [ebp - 4], 0x21
cmp dl, 1
jne 0x44c45a
mov dword [ebp - 4], 0x22
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
fnclex
test eax, eax
jge 0x44c297
push 0x44
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x23
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [0x545540], ecx
mov dword [ebp - 4], 0x24
mov dword [0x545548], 0
mov dword [ebp - 4], 0x25
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
cmp byte [ecx], 0
jbe 0x44f2c6
mov dword [ebp - 4], 0x26
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x27
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
add eax, edx
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x20], ecx
mov dword [ebp - 4], 0x28
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx]
add edx, 0x64
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x29
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
mov dword [ebp - 0x1d0], edx
fild dword [ebp - 0x1d0]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x2a
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
xor edx, edx
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0x2b
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
jmp 0x44f2c6
mov dword [ebp - 4], 0x2c
cmp dl, 2
jne 0x44c47c
mov dword [ebp - 4], 0x2d
movsx edx, word [eax + 2]
push edx
call fcn.0043dbd0
jmp 0x44f2c6
mov dword [ebp - 4], 0x2e
cmp dl, 3
jne 0x44c52f
mov dword [ebp - 4], 0x2f
movsx ecx, word [eax + 2]
sub ecx, 0
je 0x44c4f4
dec ecx
je 0x44c4cd
dec ecx
jne 0x44f2c6
mov dword [ebp - 4], 0x33
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x545fac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x44f2c6
mov dword [ebp - 4], 0x32
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x545fb0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x44f2c6
mov dword [ebp - 4], 0x30
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x545fac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x31
xor edx, edx
mov ecx, 0x545fb0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x44f2c6
mov dword [ebp - 4], 0x34
cmp dl, 4
jne 0x44c8b3
mov dword [ebp - 4], 0x35
mov cx, word [eax + 2]
test cx, cx
jle 0x44f2c6
mov dword [ebp - 4], 0x36
cmp word [0x5449a8], 0
je 0x44c670
mov dword [ebp - 4], 0x37
mov eax, dword [eax + 4]
mov edx, dword [0x544b3c]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423ae0
movsx ecx, cx
mov eax, dword [0x544b94]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44c5ec
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x38
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44c790
push 0xec
push 0x42099c
mov edx, dword [0x544b3c]
push edx
jmp 0x44c789
mov dword [ebp - 4], 0x39
mov eax, dword [eax + 4]
mov edx, dword [0x544b3c]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x423ae0
movsx ecx, cx
mov eax, dword [0x544b94]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44c700
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44c790
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x545f9c]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x544b94]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x3c
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x3d
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x3e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x3f
jmp 0x44f2c0
mov dword [ebp - 4], 0x40
cmp dl, 5
jne 0x44cb07
mov dword [ebp - 4], 0x41
mov dx, word [eax + 2]
test dx, dx
jle 0x44f2c6
mov dword [ebp - 4], 0x42
cmp word [0x5449a8], 0
je 0x44c960
mov dword [ebp - 4], 0x43
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44ca02
jmp 0x44c9ea
mov dword [ebp - 4], 0x44
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44ca02
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x45
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x46
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x47
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x49
jmp 0x44f2c0
mov dword [ebp - 4], 0x4a
cmp dl, 6
jne 0x44ce7b
mov dword [ebp - 4], 0x4b
mov dx, word [eax + 2]
test dx, dx
jle 0x44f2c6
mov dword [ebp - 4], 0x4c
cmp word [0x5449a8], 0
je 0x44cc40
mov dword [ebp - 4], 0x4d
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44cbc7
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44cd82
jmp 0x44cd6a
mov dword [ebp - 4], 0x4f
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44cce2
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x50
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44cd82
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x51
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x52
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x53
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x55
jmp 0x44f2c0
mov dword [ebp - 4], 0x56
cmp dl, 7
jne 0x44d3b6
mov dword [ebp - 4], 0x57
cmp word [eax + 2], 0
jle 0x44f2c6
mov dword [ebp - 4], 0x58
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x59
xor eax, eax
mov al, byte [ecx + 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x5a
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov eax, dword [eax + 0xc]
sub eax, ecx
mov dword [eax], 0
mov dword [ebp - 4], 0x5b
cmp word [0x5449a8], 0
je 0x44d081
mov dword [ebp - 4], 0x5c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov ecx, dword [0x544b3c]
mov ecx, dword [ecx]
push 0
push 0
push 0
push edx
mov edx, dword [ebp - 0x38]
push edx
push 0xffffffffffffffff
push 0x423910
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, dword [0x544b98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
push edx
mov dword [ebp - 0x1f0], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov eax, dword [0x544b3c]
push eax
mov ecx, dword [ebp - 0x1f0]
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x44cfaf
push 0xe8
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x5d
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44d223
mov dword [ebp - 4], 0x5f
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x60
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
push 0
push 0
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x38]
push edx
push ebx
push eax
call dword [ecx + 0xec]
fnclex
test eax, eax
jge 0x44d075
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x61
jmp 0x44cfc2
mov dword [ebp - 4], 0x62
lea eax, [edx + edx*2]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x544b3c]
mov edx, dword [edx]
push 0
push ecx
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 5
push ecx
push 0
push 0
push 0
push 0x423910
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*4 + 2]
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
mov dword [ebp - 0x1f8], edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edx, dword [0x544b3c]
push edx
mov eax, dword [ebp - 0x1f8]
call dword [eax + 0xe8]
fnclex
test eax, eax
jge 0x44d144
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x63
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x64
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44d223
mov dword [ebp - 4], 0x65
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x66
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
push eax
push 0
push 0
push ebx
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d217
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x67
jmp 0x44d157
mov dword [ebp - 4], 0x68
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 4], 0
mov dword [ebp - 4], 0x69
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx + 3]
add edx, 5
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x6a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov dword [ebp - 0x1fc], edx
fild dword [ebp - 0x1fc]
fstp dword [ebp - 0x200]
fld dword [ebp - 0x200]
fmul dword [0x544a74]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x6b
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x6c
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*4], eax
mov dword [ebp - 4], 0x6d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x6e
jmp 0x44f2c0
mov dword [ebp - 4], 0x6f
cmp dl, 8
jne 0x44d834
mov dword [ebp - 4], 0x70
mov cx, word [eax + 2]
test cx, cx
jle 0x44f2c6
mov dword [ebp - 4], 0x71
cmp word [0x5449a8], 0
je 0x44d56d
mov dword [ebp - 4], 0x72
mov eax, dword [eax + 4]
mov edx, dword [0x544b3c]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423ae0
movsx ecx, cx
mov eax, dword [0x544b94]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44d473
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x73
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d4f5
push 0xec
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x74
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d711
push 0xec
push 0x42099c
mov edx, dword [0x544b3c]
push edx
jmp 0x44d70a
mov dword [ebp - 4], 0x75
mov eax, dword [eax + 4]
mov edx, dword [0x544b3c]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x423ae0
movsx ecx, cx
mov eax, dword [0x544b94]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44d5fd
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x76
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d68d
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x77
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d711
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x78
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x545f9c]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x544b94]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 3]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x79
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x7a
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x7b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x7c
jmp 0x44f2c0
mov dword [ebp - 4], 0x7d
cmp dl, 9
jne 0x44db73
mov dword [ebp - 4], 0x7e
cmp word [0x5449a8], 0
je 0x44d99f
mov dword [ebp - 4], 0x7f
mov eax, dword [eax + 4]
mov edx, dword [0x544b3c]
mov ecx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423bf0
push ebx
mov edx, dword [0x544b3c]
push edx
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x44d8b1
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x80
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44d927
push 0xec
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x81
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44db0a
push 0xec
push 0x42099c
mov edx, dword [0x544b3c]
push edx
jmp 0x44db03
mov dword [ebp - 4], 0x82
mov eax, dword [eax + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push 0
push 0x424be4
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44da02
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x83
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44da86
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x84
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44db0a
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x85
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x86
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x63
mov dword [ebp - 4], 0x87
mov dword [0x5456cc], 0xc8
mov dword [ebp - 4], 0x88
mov word [0x545fb4], bx
jmp 0x44f2c6
mov dword [ebp - 4], 0x89
cmp dl, 0xa
jne 0x44dd36
mov dword [ebp - 4], 0x8a
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx]
test al, al
jbe 0x44dbae
mov dword [ebp - 4], 0x8b
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x5455a0], edx
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 1]
test al, al
jbe 0x44dbfb
mov dword [ebp - 4], 0x8d
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x5455a4], edx
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 2]
test al, al
jbe 0x44dc48
mov dword [ebp - 4], 0x8f
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x5455a8], edx
mov dword [ebp - 4], 0x90
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 3]
test al, al
jbe 0x44dc95
mov dword [ebp - 4], 0x91
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x5455ac], edx
mov dword [ebp - 4], 0x92
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 4]
test al, al
jbe 0x44dce2
mov dword [ebp - 4], 0x93
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x5455b0], edx
mov dword [ebp - 4], 0x94
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
sub ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ecx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 5]
test al, al
jbe 0x44f2c6
mov dword [ebp - 4], 0x95
movzx ax, al
dec eax
movsx ecx, ax
mov dword [0x5455b4], ecx
jmp 0x44f2c6
mov dword [ebp - 4], 0x96
cmp dl, 0xd
jne 0x44e4ac
mov dword [ebp - 4], 0x97
mov ax, word [eax + 2]
test ax, ax
jle 0x44f2c6
mov dword [ebp - 4], 0x98
push 0x423924
movsx edx, ax
mov eax, dword [0x544b9c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x544b3c]
mov edx, dword [eax]
lea ecx, [ebp - 0xa0]
push ecx
push ebx
push eax
call dword [edx + 0xe4]
fnclex
test eax, eax
jge 0x44ddc0
push 0xe4
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x99
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 4], 0
mov dword [ebp - 4], 0x9a
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x9b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x20c], edx
fild dword [ebp - 0x20c]
fstp dword [ebp - 0x210]
fld dword [ebp - 0x210]
fmul dword [0x544a78]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x9c
mov edx, dword [0x545f9c]
push edx
lea eax, [ebp - 0x9c]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
mov eax, dword [0x545f9c]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
add eax, 4
push eax
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
push eax
push 0
push ebx
mov edx, dword [0x544b3c]
push edx
call dword [ecx + 0xf0]
fnclex
test eax, eax
jge 0x44df47
push 0xf0
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
lea ecx, [ebp - 0x98]
push ecx
call edi
lea edx, [ebp - 0x9c]
push edx
call edi
mov dword [ebp - 4], 0x9d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx ecx, word [ecx + eax*4 + 2]
mov eax, dword [0x544b9c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*8 + 4]
mov eax, 2
sub eax, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov dword [edx + eax*4], ecx
mov dword [ebp - 4], 0x9e
mov eax, dword [0x545f9c]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
shl ecx, 4
mov edx, dword [eax + 0xc]
mov eax, dword [ecx + edx + 0x14]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x214], edx
mov ecx, dword [eax + 0xc]
lea eax, [edx*4]
mov ebx, ecx
sub ebx, eax
mov eax, dword [ebx + 4]
mov ebx, 2
sub ebx, edx
cdq
idiv dword [ecx + ebx*4]
dec eax
mov edx, 3
sub edx, dword [ebp - 0x214]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0x9f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0xa0
test al, al
je 0x44e3a9
cmp al, 1
je 0x44e3a9
cmp al, 2
je 0x44e3a9
cmp al, 3
je 0x44e3a9
mov dword [ebp - 4], 0xa5
cmp al, 4
je 0x44e2c7
cmp al, 5
je 0x44e2c7
cmp al, 6
je 0x44e2c7
cmp al, 7
je 0x44e2c7
mov dword [ebp - 4], 0xaa
cmp al, 8
je 0x44e1ca
cmp al, 9
je 0x44e1ca
cmp al, 0xa
je 0x44e1ca
cmp al, 0xb
je 0x44e1ca
mov dword [ebp - 4], 0xaf
cmp al, 0xc
je 0x44e0ee
cmp al, 0xd
je 0x44e0ee
cmp al, 0xe
je 0x44e0ee
cmp al, 0xf
jne 0x44f2c6
mov dword [ebp - 4], 0xb0
xor dx, dx
mov dl, al
sub edx, 3
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xb1
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xb2
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xb3
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 2
jmp 0x44f2c6
mov dword [ebp - 4], 0xab
xor cx, cx
mov cl, al
inc ecx
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xac
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xad
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x214], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov ecx, 0x12c
sub ecx, dword [eax + edx*4]
mov edx, 5
sub edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x218]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xae
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 2
jmp 0x44f2c6
mov dword [ebp - 4], 0xa6
movzx ax, al
add eax, 5
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa7
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa8
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xa9
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 1
jmp 0x44f2c6
mov dword [ebp - 4], 0xa1
xor cx, cx
mov cl, al
add ecx, 9
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa2
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa3
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x12c
sub edx, eax
mov eax, 5
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa4
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 1
jmp 0x44f2c6
mov dword [ebp - 4], 0xb4
cmp dl, 0xe
jne 0x44e934
mov dword [ebp - 4], 0xb5
mov dx, word [eax + 2]
test dx, dx
jle 0x44f2c6
mov dword [ebp - 4], 0xb6
cmp word [0x5449a8], 0
je 0x44e663
mov dword [ebp - 4], 0xb7
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e56c
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xb8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e5f4
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xb9
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
add ecx, 2
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 3]
push ecx
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e83b
jmp 0x44e823
mov dword [ebp - 4], 0xba
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e705
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xbb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e7a5
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
movzx cx, byte [eax]
add ecx, 2
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 3]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e83b
push 0xec
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbd
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xbe
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0xbf
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xc0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xc1
jmp 0x44f2c0
mov dword [ebp - 4], 0xc2
cmp dl, 0xf
jne 0x44ede9
mov dword [ebp - 4], 0xc3
cmp word [eax + 2], 0
jle 0x44f2c6
mov dword [ebp - 4], 0xc4
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
shl eax, 3
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0xc5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea edx, [eax + eax*2]
shl edx, 1
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
mov dword [ebp - 4], 0xc6
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xc7
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54575c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
mov dword [ebp - 4], pe_nt_image_headers32
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54575c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 2
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xc9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54575c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 3
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 0xc]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xca
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax + 4], 0xffffffff
jne 0x44ec3b
mov dword [ebp - 4], 0xcb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x545fa0]
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [eax], ecx
mov dword [ebp - 4], 0xcc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx + 2]
mov edx, 4
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xcd
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x62
jmp 0x44f2c6
mov dword [ebp - 4], 0xce
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
movsx eax, word [edx + eax*4 + 2]
mov edx, dword [0x54575c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*8]
mov edx, dword [edx + 0xc]
fild dword [edx + eax*4 + 0x18]
fstp qword [ebp - 0x228]
fld dword [0x544a74]
fmul qword [ebp - 0x228]
fstp dword [ecx + 8]
mov dword [ebp - 4], 0xcf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x545f9c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54575c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4 + 0x10]
mov dword [edx], eax
mov dword [ebp - 4], 0xd0
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 4
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd1
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 3
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 5
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd2
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax], 0
jne 0x44edd6
mov dword [ebp - 4], 0xd3
mov dword [ecx + 0xc], 0xf
jmp 0x44f2c6
mov dword [ebp - 4], 0xd4
mov dword [ecx + 0xc], 0x13
jmp 0x44f2c6
mov dword [ebp - 4], 0xd5
cmp dl, 0x10
jne 0x44f047
mov dword [ebp - 4], 0xd6
mov dx, word [eax + 2]
test dx, dx
jle 0x44f2c6
mov dword [ebp - 4], 0xd7
cmp word [0x5449a8], 0
je 0x44ee96
mov dword [ebp - 4], 0xd8
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44ef38
jmp 0x44ef20
mov dword [ebp - 4], 0xd9
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423910
movsx ecx, dx
mov eax, dword [0x544b98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44ef38
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xda
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xdb
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x10
mov dword [ebp - 4], 0xdc
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov edx, dword [ecx + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 0x14]
xor edx, edx
mov dl, byte [eax + 3]
push edx
push ebx
xor edx, edx
mov dl, byte [eax + 2]
push edx
movsx eax, word [ecx + 4]
push eax
movsx ecx, word [ecx + 2]
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
call fcn.004459b0
mov dword [ebp - 4], 0xde
mov eax, dword [0x545ff4]
mov dword [eax + 0x38], ebx
mov dword [ebp - 4], 0xdf
jmp 0x44f2c0
mov dword [ebp - 4], 0xe0
cmp dl, 0x11
jne 0x44f2c6
mov dword [ebp - 4], 0xe1
mov dx, word [eax + 2]
test dx, dx
jle 0x44f2c6
mov dword [ebp - 4], 0xe2
cmp word [0x5449a8], 0
je 0x44f0f4
mov dword [ebp - 4], 0xe3
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x423ae0
movsx ecx, dx
mov eax, dword [0x544b94]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44f196
jmp 0x44f17e
mov dword [ebp - 4], 0xe4
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x544b3c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423ae0
movsx ecx, dx
mov eax, dword [0x544b94]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44f196
push 0xe8
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x545f9c]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x544b94]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0xe6
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xe7
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0xe8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xe9
push ebx
call fcn.0044bdf0
mov dword [ebp - 4], 0xea
mov eax, 1
add ebx, eax
mov dword [ebp - 0x24], ebx
jmp 0x44c1e1
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x44f2f6
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0xeb
cmp dword [0x544a04], 0x19a
jle 0x44f395
mov dword [ebp - 4], 0xec
call fcn.0043e360
mov dword [ebp - 4], 0xed
mov edx, dword [0x545ff4]
mov edx, dword [edx + 0x38]
test edx, edx
jle 0x44f364
mov dword [ebp - 4], 0xee
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
push edx
movsx edx, word [eax + 4]
push edx
movsx eax, word [eax + 2]
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
call fcn.00459c10
mov dword [ebp - 4], 0xef
mov eax, dword [0x544a04]
cmp eax, 0x1ce
jle 0x44f395
cmp eax, 0x1da
jge 0x44f395
mov eax, dword [0x544a00]
cmp eax, 0x300
jle 0x44f395
cmp eax, 0x316
jl 0x459b48
mov dword [ebp - 4], 0xf0
push 0x3f800000
push 0x209
push 0x545fb0
push 0x545fac
call fcn.0043d210
mov dword [ebp - 4], 0xf1
cmp dword [0x5456cc], 0xc8
jne 0x44f444
mov dword [ebp - 4], 0xf2
movsx eax, word [0x545fb4]
mov edx, dword [0x544b3c]
mov edx, dword [edx]
push 0xffffffffffffffff
push 0
push 0x3f800000
mov ecx, dword [0x545f9c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x18]
push eax
push 0x258
push 0x320
mov eax, dword [0x544b68]
lea ecx, [eax - 0x3c]
push ecx
push eax
movsx eax, word [0x545fb4]
push eax
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44f444
push 0xf4
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf3
mov eax, dword [0x544b3c]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x33
push 0x1b5
push 0
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x44f483
push 0x58
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf4
mov dword [ebp - 0xd4], 0x3f800000
mov edx, dword [0x545fa0]
inc edx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call ebx
push eax
push 0x423c00
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call ebx
push eax
movzx ax, byte [ebp - 0x3c]
inc eax
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa8]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call ebx
lea ecx, [ebp - 0xd4]
push ecx
push 0x16d
push 0x1b6
push 3
lea edx, [ebp - 0xac]
push edx
push 0xe
call fcn.00438310
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
lea eax, [ebp - 0xa0]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov dword [ebp - 4], 0xf5
mov eax, dword [0x5456cc]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xf7
mov eax, 0x1e0
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0xf8
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xf9
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.00532ee0
mov dword [ebp - 4], 0xfa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
movsx ecx, word [eax + 4]
mov dword [ebp - 0x160], ecx
movsx edx, word [eax + 2]
mov dword [ebp - 0x24], edx
mov edx, dword [0x544f34]
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x24], eax
jg 0x45044a
mov dword [ebp - 4], 0xfb
xor ebx, ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x88], ebx
mov dword [ebp - 4], 0xfd
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 4], 0xfe
mov dword [ebp - 0x78], 0x1dc
mov dword [ebp - 4], 0xff
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea eax, [eax + ecx*2]
mov cl, byte [eax + 1]
mov byte [ebp - 0x239], cl
mov dword [ebp - 4], 0x100
cmp cl, 9
jne 0x44f664
mov dword [ebp - 4], 0x101
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x60], 0x2d7
jmp 0x44fc50
mov dword [ebp - 4], 0x103
cmp cl, 0xa
jne 0x44f6b0
mov dword [ebp - 4], 0x104
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x8ca]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x105
mov dword [ebp - 0x60], 0x2ec
jmp 0x44fc50
mov dword [ebp - 4], 0x106
cmp cl, 0x61
jne 0x44f815
mov dword [ebp - 4], 0x107
mov al, byte [eax]
mov byte [ebp - 0x240], al
xor cx, cx
mov cl, al
sub ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x108
mov dword [ebp - 0x60], 0x301
mov dword [ebp - 4], 0x109
xor ecx, ecx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 1]
cmp dword [ebp - 0x38], ecx
jg 0x44f7dc
mov dword [ebp - 4], 0x10a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
mov edx, dword [ebp - 0x38]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8 + 4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x544b50], eax
mov dword [ebp - 4], 0x10b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8 + 4]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x544b4c], eax
mov dword [ebp - 4], 0x10c
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x544f34]
mov ecx, dword [0x544b50]
dec ecx
cmp eax, ecx
jg 0x44f7c6
mov dword [ebp - 4], 0x10d
mov ecx, eax
mov eax, dword [0x544b58]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x10e
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x44f761
mov dword [ebp - 4], 0x10f
mov dword [ebp - 0x88], 0xffffffff
jmp 0x44fc50
mov dword [ebp - 4], 0x110
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
mov eax, dword [ebp - 0x240]
and eax, 0xff
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, ecx
mov dword [ebp - 0x5c], ebx
jmp 0x44fc50
mov dword [ebp - 4], 0x111
cmp cl, 0x62
jne 0x44f902
mov dword [ebp - 4], 0x112
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x170], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x170]
jg 0x44f8e0
mov dword [ebp - 4], 0x113
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
movzx cx, byte [ecx + ebx*4 + 2]
movzx bx, byte [eax]
add ebx, 0x20
cmp cx, bx
je 0x44f894
mov dword [ebp - 4], 0x117
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x44f83e
mov dword [ebp - 4], 0x114
mov ecx, dword [0x544a00]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x44f8e0
add eax, 0x15
cmp ecx, eax
jge 0x44f8e0
mov ecx, dword [0x544a04]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x44f8e0
add eax, 0x15
cmp ecx, eax
jge 0x44f8e0
mov dword [ebp - 4], 0x115
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0x116
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x118
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x119
mov dword [ebp - 0x60], 0x2d7
jmp 0x44fc50
mov dword [ebp - 4], 0x11a
cmp cl, 0x63
jne 0x44fb7c
mov dword [ebp - 4], 0x11b
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x178], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x178]
jg 0x44fb29
mov dword [ebp - 4], 0x11c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + ebx*4]
mov bl, byte [ecx + 2]
cmp bl, byte [eax]
je 0x44f979
mov dword [ebp - 4], 0x12b
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x44f92b
mov dword [ebp - 4], 0x11d
movzx dx, byte [ecx]
lea eax, [edx*8]
sub eax, edx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x11e
cmp eax, 0x2fc
jne 0x44f9bb
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x60], 0x15e
jmp 0x44f9d7
mov dword [ebp - 4], 0x120
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx edx, ax
mov dword [ebp - 0x60], edx
mov dword [ebp - 4], 0x121
mov eax, dword [ecx + 0x10]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x544b50], eax
mov dword [ebp - 4], 0x122
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x10]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x544b4c], eax
mov dword [ebp - 4], 0x123
mov ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x124
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x44fa72
mov dword [ebp - 4], 0x125
push 0
push 0
push 0
mov cl, byte [eax + 0xc]
push ecx
call fcn.00447640
mov ebx, eax
add ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x126
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x544f34]
mov ecx, dword [0x544b50]
dec ecx
cmp eax, ecx
jg 0x44fae9
mov dword [ebp - 4], 0x127
mov ecx, eax
mov eax, dword [0x544b58]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x59a]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x128
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x44fa84
mov dword [ebp - 4], 0x129
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x544a00]
cmp ecx, eax
jle 0x44fb2c
add eax, ebx
cmp ecx, eax
jge 0x44fb2c
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x544a04]
cmp ecx, eax
jle 0x44fb2c
add eax, 0x15
cmp ecx, eax
jge 0x44fb2c
mov dword [ebp - 4], 0x12a
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x48], ecx
jmp 0x44fb2c
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x12c
test ebx, ebx
jne 0x44fc50
mov dword [ebp - 4], 0x12d
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x12e
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 4], 0x12f
mov dword [ebp - 0x60], 0x2d7
mov dword [ebp - 4], 0x130
mov dword [ebp - 0x88], 0x2fc
jmp 0x44fc50
mov dword [ebp - 4], 0x131
cmp cl, 0x64
jne 0x44fbfe
mov dword [ebp - 4], 0x132
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
cmp dword [ebp - 0x24], eax
jle 0x44fc50
mov dword [ebp - 4], 0x133
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005330f0
mov dword [ebp - 4], 0x134
mov ecx, dword [0x5456cc]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x135
add dword [ebp - 0x68], 0x17
mov edx, dword [0x544f34]
jmp 0x44fc50
mov dword [ebp - 4], 0x136
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x137
movzx cx, byte [ebp - 0x239]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2 + 0x21a]
movsx eax, cx
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0x138
test ebx, ebx
jle 0x450407
mov dword [ebp - 4], 0x139
mov ecx, dword [ebp - 0x8c]
add ecx, ebx
cmp ecx, 0x319
jle 0x44fcb9
mov dword [ebp - 4], 0x13a
mov byte [ebp - 0xd0], 0
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.005330f0
mov dword [ebp - 4], 0x13b
mov edx, dword [0x5456cc]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 4], 0x13c
add dword [ebp - 0x68], 0x17
mov dword [ebp - 4], 0x13d
mov edx, dword [ebp - 0x68]
cmp edx, 0x244
jg 0x45044a
mov dword [ebp - 4], 0x13e
mov eax, dword [ebp - 0x88]
cmp eax, 0xffffffff
je 0x4501ca
test eax, eax
je 0x450109
mov dword [ebp - 4], 0x14d
mov ecx, dword [0x544a00]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x44fe7f
add eax, ebx
cmp ecx, eax
jge 0x44fe7f
mov eax, dword [0x544a04]
cmp eax, edx
jle 0x44fe7f
add edx, 0x15
cmp eax, edx
jge 0x44fe7f
mov dword [ebp - 4], 0x14e
mov eax, dword [ebp - 0x38]
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x14f
cmp word [0x544978], 0
je 0x44fd5b
mov dword [ebp - 4], 0x150
mov dword [ebp - 0x7c], 0x190
jmp 0x44fd69
mov dword [ebp - 4], 0x151
mov dword [ebp - 0x78], 0x1ed
mov dword [ebp - 4], 0x152
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 6], 0xfffe
jne 0x44fddf
mov dword [ebp - 4], 0x153
push ecx
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0xc]
push ecx
call fcn.0045caf0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
movsx eax, word [ebp - 0xd0]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x154
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff9
jne 0x44fe1f
mov dword [ebp - 4], 0x155
mov cx, word [eax + 4]
push ecx
call fcn.004a2c10
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x156
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff7
jne 0x44fe7f
mov dword [ebp - 4], 0x157
movsx ecx, word [eax + 4]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0x158
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x14]
shl edx, 3
mov ecx, dword [ecx + 0xc]
sub ecx, edx
movsx edx, word [ecx + 0xa]
mov dword [ebp - 0x80], edx
mov dword [ebp - 4], 0x159
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x15a
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 0x15
push 5
mov edx, dword [ebp - 0x88]
push edx
mov edx, dword [ebp - 0x7c]
push edx
mov edx, dword [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x8c]
push edx
push 2
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x44fed4
push 0x7c
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15b
mov eax, dword [0x544b3c]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
lea ecx, [ebx - 5]
push ecx
mov ecx, dword [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x7c]
sub ecx, ebx
add ecx, 0x195
push ecx
mov ecx, dword [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x8c]
add ecx, 5
push ecx
push 2
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x44ff36
push 0x7c
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15c
mov eax, dword [ebp - 0x38]
cmp eax, 0xa
jge 0x4503f4
mov dword [ebp - 4], 0x15d
mov dword [ebp - 0x88], 3
mov dword [ebp - 4], 0x15e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x44ffac
mov dword [ebp - 4], 0x15f
mov ecx, dword [ebp - 0x68]
add ecx, 3
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 3
push edx
push 0xffffffffffffffff
mov al, byte [eax + 0xc]
push eax
call fcn.00447640
add eax, 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x160
mov ecx, dword [0x544b50]
dec ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x30], 0
mov edx, dword [0x544f34]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
jg 0x4503fa
mov dword [ebp - 4], 0x161
mov eax, dword [0x544b58]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 4], 0x162
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x11
push 0xa
mov ecx, dword [ebp - 0x78]
push ecx
push ebx
mov eax, dword [ebp - 0x68]
add eax, 3
push eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
lea ecx, [ecx + eax - 1]
push ecx
push 5
mov eax, dword [0x544b3c]
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x450065
push 0x7c
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x163
mov eax, dword [0x544b3c]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0xf
push 0xa
mov ecx, dword [ebp - 0x60]
push ecx
push ebx
mov ecx, dword [ebp - 0x68]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x8c]
mov ebx, dword [ebp - 0x88]
add ecx, ebx
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x4500bf
push 0x7c
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x164
mov edx, dword [0x544f34]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor eax, eax
mov ebx, dword [ebp - 0x64]
mov al, byte [ecx + ebx + 0x59a]
add dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x165
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x44ffcd
mov dword [ebp - 4], 0x13f
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov edx, dword [0x544b3c]
mov edx, dword [edx]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
push 0x15
mov ecx, dword [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov eax, dword [ebp - 0x8c]
push eax
push 5
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x450182
push 0x7c
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x140
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*2]
push ecx
call fcn.005330f0
lea edx, [ebp - 0x90]
push edx
call edi
jmp 0x4503f4
mov dword [ebp - 4], 0x141
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x142
mov ecx, dword [0x544b50]
dec ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x30]
cmp eax, edx
jg 0x4502d2
mov dword [ebp - 4], 0x143
mov ecx, eax
mov eax, dword [0x544b58]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 4], 0x144
mov ecx, dword [0x544b3c]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x15
push 0x15
push 0x301
lea eax, [ebx*8]
sub eax, ebx
lea ecx, [eax + eax*2]
push ecx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
add eax, ecx
push eax
push 5
mov ecx, dword [0x544b3c]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x45028b
push 0x7c
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x145
mov edx, dword [0x544f34]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor edx, edx
mov dl, byte [ecx + ebx + 0x798]
add dword [ebp - 0x88], edx
mov dword [ebp - 4], 0x146
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x4501f0
mov dword [ebp - 4], 0x147
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 4
push 2
push 0x216
push 0x4d4
mov edx, dword [ebp - 0x68]
add edx, 0xf
push edx
mov edx, dword [ebp - 0x8c]
add edx, 0xfffffffe
push edx
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x45032c
push 0x7c
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x148
mov eax, dword [0x544b3c]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 4
lea ecx, [ebx + 2]
push ecx
push 0x216
mov ecx, 0x7c9
sub ecx, ebx
push ecx
mov ecx, dword [ebp - 0x68]
add ecx, 0xf
push ecx
mov ecx, dword [ebp - 0x8c]
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x450388
push 0x7c
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x149
mov eax, dword [0x544a00]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x4503f4
add ecx, ebx
cmp eax, ecx
jge 0x4503f4
mov ecx, dword [0x544a04]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x4503f4
add eax, 0x15
cmp ecx, eax
jge 0x4503f4
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
cmp byte [eax], 0
jne 0x4503e6
mov dword [ebp - 4], 0x14b
movsx eax, word [eax + 2]
mov dword [ebp - 0x44], eax
jmp 0x4503f4
mov dword [ebp - 4], 0x14c
movsx ecx, word [eax + 2]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x544f34]
mov dword [ebp - 4], 0x166
add dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x167
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x545fa4]
jne 0x450436
mov dword [ebp - 4], 0x168
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 4], 0x169
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x16a
mov eax, 1
add dword [ebp - 0x24], eax
jmp 0x44f5d4
mov dword [ebp - 4], 0x16b
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005330f0
mov dword [ebp - 4], 0x16c
call fcn.00533200
mov dword [ebp - 4], 0x16d
mov eax, dword [ebp - 0x40]
cmp eax, 0x253
jne 0x4504b2
mov dword [ebp - 4], 0x16e
inc word [0x545fa0]
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x459bf5
jmp 0x459bdc
mov dword [ebp - 4], 0x16f
cmp dword [0x544b38], 0x3e7
jne 0x450a91
mov dword [ebp - 4], 0x170
mov cx, word [0x544b36]
mov dword [ebp - 4], 0x171
cmp cx, 7
jne 0x4504f9
mov dword [ebp - 4], 0x172
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045a860
jmp 0x450996
mov dword [ebp - 4], 0x173
cmp cx, 8
jne 0x45051b
mov dword [ebp - 4], 0x174
mov edx, dword [ebp + 8]
push edx
call fcn.0045aae0
jmp 0x450996
mov dword [ebp - 4], 0x175
cmp cx, 0x18
jne 0x450561
mov dword [ebp - 4], 0x176
mov word [0x545fa0], 0
mov dword [ebp - 4], 0x177
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
movsx eax, word [edx + 2]
mov dword [0x545fa4], eax
jmp 0x450996
mov dword [ebp - 4], 0x178
cmp cx, 0x19
jne 0x4505a9
mov dword [ebp - 4], 0x179
movzx ax, byte [ebp - 0x3c]
mov word [0x545fa0], ax
mov dword [ebp - 4], 0x17a
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 2]
mov dword [0x545fa4], ecx
jmp 0x450996
mov dword [ebp - 4], 0x17b
cmp cx, 0x1a
jne 0x450604
mov dword [ebp - 4], 0x17c
mov ax, word [0x545fa0]
test ax, ax
jle 0x450996
mov dword [ebp - 4], 0x17d
dec ax
mov word [0x545fa0], ax
mov dword [ebp - 4], 0x17e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x545fa4], edx
jmp 0x450996
mov dword [ebp - 4], 0x17f
cmp cx, 0x1b
jne 0x450664
mov dword [ebp - 4], 0x180
movzx cx, byte [ebp - 0x3c]
mov ax, word [0x545fa0]
cmp ax, cx
jge 0x450996
mov dword [ebp - 4], 0x181
inc ax
mov word [0x545fa0], ax
mov dword [ebp - 4], 0x182
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x545fa4], edx
jmp 0x450996
mov dword [ebp - 4], 0x183
cmp cx, 0x1c
jne 0x450690
mov dword [ebp - 4], 0x184
push 0
add eax, 0xffffffe9
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00459e10
jmp 0x450996
mov dword [ebp - 4], 0x185
cmp cx, 0x1d
jne 0x4506be
mov dword [ebp - 4], 0x186
mov edx, dword [ebp - 0x3c]
push edx
add eax, 0x17
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00459e10
jmp 0x450996
mov dword [ebp - 4], 0x187
cmp cx, 0x1e
jne 0x4506f1
mov dword [ebp - 4], 0x188
mov eax, dword [0x545fa4]
test eax, eax
jle 0x450996
mov dword [ebp - 4], 0x189
dec eax
mov dword [0x545fa4], eax
jmp 0x450996
mov dword [ebp - 4], 0x18a
cmp cx, 0x1f
jne 0x450736
mov dword [ebp - 4], 0x18b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [0x545fa4]
cmp ecx, eax
jge 0x450996
mov dword [ebp - 4], 0x18c
mov eax, ecx
inc eax
mov dword [0x545fa4], eax
jmp 0x450996
mov dword [ebp - 4], 0x18d
cmp cx, 0xd
je 0x450757
cmp cx, 0x20
jl 0x450996
cmp cx, 0x7e
jg 0x450996
mov dword [ebp - 4], 0x18e
mov ebx, dword [ebp + 8]
push ebx
call fcn.0045a940
mov dword [ebp - 4], 0x18f
mov ax, word [0x544b36]
cmp ax, 0xd
jne 0x4507df
mov dword [ebp - 4], 0x190
mov ebx, dword [ebx + 4]
mov ecx, dword [0x545fa4]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2 + 1], 0x64
mov dword [ebp - 4], 0x191
cmp dword [ebp - 0x68], 0x23c
jne 0x450996
mov dword [ebp - 4], 0x192
inc word [0x545fa0]
mov dword [ebp - 4], 0x193
mov word [0x544b36], 0
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x459bf5
jmp 0x459bdc
mov dword [ebp - 4], 0x194
mov ecx, dword [0x545ff4]
mov edx, dword [ecx + 0x2c]
sub edx, 9
je 0x4508c3
sub edx, 2
je 0x450840
mov dword [ebp - 4], 0x1a4
mov eax, dword [ebx + 4]
mov edx, dword [0x545fa4]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cl, byte [ecx + 0x2c]
mov byte [eax + edx*2 + 1], cl
mov dword [ebp - 4], 0x1a5
mov ebx, dword [ebx + 4]
mov dl, byte [0x544b36]
sub dl, 0x20
mov eax, dword [0x545fa4]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov byte [ecx + eax*2], dl
jmp 0x450996
mov dword [ebp - 4], 0x19e
mov dword [ebp - 4], 0x19f
cmp ax, 0x31
jl 0x45089c
cmp ax, 0x39
jg 0x45089c
mov dword [ebp - 4], 0x1a0
mov eax, dword [ebx + 4]
mov edx, dword [0x545fa4]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov byte [eax + edx*2 + 1], 0x61
mov dword [ebp - 4], 0x1a1
mov ebx, dword [ebx + 4]
mov cl, byte [0x544b36]
sub cl, 0x20
mov edx, dword [0x545fa4]
sub edx, dword [ebx + 0x14]
mov eax, dword [ebx + 0xc]
mov byte [eax + edx*2], cl
jmp 0x450996
mov dword [ebp - 4], 0x1a2
mov eax, dword [ebx + 4]
mov ecx, dword [0x545fa4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0xb
mov dword [ebp - 4], 0x1a3
jmp 0x45097d
mov dword [ebp - 4], 0x195
mov dword [ebp - 4], 0x196
cmp ax, 0x31
jl 0x450918
cmp ax, 0x39
jg 0x450918
mov dword [ebp - 4], 0x197
mov eax, dword [ebx + 4]
mov ecx, dword [0x545fa4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x63
mov dword [ebp - 4], 0x198
mov ebx, dword [ebx + 4]
mov eax, dword [0x545fa4]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov dl, byte [0x544b36]
mov byte [ecx + eax*2], dl
jmp 0x450996
mov dword [ebp - 4], 0x199
cmp ax, 0x41
jl 0x45092b
cmp ax, 0x5a
jle 0x450937
cmp ax, 0x61
jl 0x45095b
cmp ax, 0x7a
jg 0x45095b
mov dword [ebp - 4], 0x19a
mov eax, dword [ebx + 4]
mov ecx, dword [0x545fa4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x62
mov dword [ebp - 4], 0x19b
jmp 0x45097d
mov dword [ebp - 4], 0x19c
mov eax, dword [ebx + 4]
mov ecx, dword [0x545fa4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 9
mov dword [ebp - 4], 0x19d
mov ebx, dword [ebx + 4]
mov al, byte [0x544b36]
sub al, 0x20
mov ecx, dword [0x545fa4]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2], al
mov dword [ebp - 4], 0x1a6
cmp word [0x544b36], 0
je 0x4509b8
mov dword [ebp - 4], 0x1a7
mov dword [0x5456d0], 0x42a20000
mov dword [ebp - 4], 0x1a8
fld dword [0x544a70]
fadd dword [0x5456d0]
fstp dword [0x5456d0]
mov dword [ebp - 4], 0x1a9
fld dword [0x5456d0]
fcomp dword [0x401554]
fnstsw ax
test ah, 0x41
jne 0x450a81
mov dword [ebp - 4], 0x1aa
mov edx, dword [0x544b3c]
mov ebx, dword [edx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x14
push 6
mov ecx, dword [0x545ff4]
mov ecx, dword [ecx + 0x2c]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2 + 0x21a]
push eax
push 0x78c
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x4c]
push eax
push 5
push edx
call dword [ebx + 0x7c]
fnclex
test eax, eax
jge 0x450a56
push 0x7c
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1ab
fld dword [0x5456d0]
fcomp dword [0x401550]
fnstsw ax
test ah, 0x41
jne 0x450a81
mov dword [ebp - 4], 0x1ac
mov dword [0x5456d0], 0
mov dword [ebp - 4], 0x1ad
mov word [0x544b36], 0
mov dword [ebp - 4], 0x1ae
mov edx, dword [0x545ff4]
mov al, byte [edx + 0x34]
mov dword [ebp - 4], 0x1af
test al, al
jne 0x450f54
mov dword [ebp - 4], 0x1b0
mov edx, 0x424c00
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450b10
mov dword [ebp - 4], 0x1b1
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1b2
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x26f
push 0x1a8
push 0x1bf
push eax
call dword [ecx + 0x58]
fnclex
test eax, eax
jge 0x450b55
push 0x58
push 0x42099c
mov edx, dword [0x544b3c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1b3
mov edx, 0x424c08
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x241
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450bb2
mov dword [ebp - 4], 0x1b4
mov dword [ebp - 0x34], 4
mov dword [ebp - 4], 0x1b5
mov edx, 0x424c1c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b8
push 0x243
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450c0f
mov dword [ebp - 4], 0x1b6
mov dword [ebp - 0x34], 3
mov dword [ebp - 4], 0x1b7
cmp word [0x545fb6], 0
je 0x450cde
mov dword [ebp - 4], 0x1b8
mov edx, 0x424c30
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450c81
mov dword [ebp - 4], 0x1b9
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1ba
mov edx, 0x424c40
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x1c0
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x450d79
mov dword [ebp - 4], 0x1bb
mov dword [ebp - 0x34], 2
jmp 0x450d79
mov dword [ebp - 4], 0x1bc
mov edx, 0x424c5c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450d3b
mov dword [ebp - 4], 0x1bd
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1be
mov edx, 0x424c40
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1c8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1bf
mov eax, dword [0x544b3c]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f000000
push 0x31
push 0xae
push 0x1e5
push 0x640
push 0x1a8
push 0x271
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x450dcf
push 0x7c
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1c0
mov edx, dword [0x544a00]
cmp edx, 0x270
jle 0x450ed6
mov dword [ebp - 4], 0x1c1
xor eax, eax
mov dword [ebp - 4], 0x1c2
mov ecx, dword [0x544a04]
cmp ecx, 0x1a7
jle 0x450e4b
cmp ecx, 0x1c0
jge 0x450e4b
mov dword [ebp - 4], 0x1c3
add edx, 0xfffffd9c
mov dword [ebp - 0x244], edx
fild dword [ebp - 0x244]
fstp qword [ebp - 0x24c]
fld qword [ebp - 0x24c]
fdiv qword [0x4020c0]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [0x544a04]
mov edx, dword [0x544a00]
mov dword [ebp - 4], 0x1c4
cmp ecx, 0x1c2
jle 0x450e93
cmp ecx, 0x1e0
jge 0x450e93
mov dword [ebp - 4], 0x1c5
add edx, 0xfffffe4b
mov dword [ebp - 0x250], edx
fild dword [ebp - 0x250]
fstp qword [ebp - 0x258]
fld qword [ebp - 0x258]
fdiv qword [0x4020c0]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 4], 0x1c6
test eax, eax
jle 0x450ed6
cmp eax, 0xe
jge 0x450ed6
mov dword [ebp - 4], 0x1c7
lea ebx, [eax - 1]
push 0
push ebx
call fcn.0043d0c0
mov dword [ebp - 4], 0x1c8
cmp word [0x544978], 0
je 0x450ed6
mov dword [ebp - 4], 0x1c9
mov edx, dword [0x545ff4]
mov dword [edx + 0x2c], ebx
mov dword [ebp - 4], 0x1ca
push 0xffffffffffffffff
mov eax, dword [0x545ff4]
mov ecx, dword [eax + 0x2c]
push ecx
call fcn.0043d0c0
mov dword [ebp - 4], 0x39d
cmp word [0x544978], 0
jne 0x459a65
mov dword [ebp - 4], 0x39e
mov eax, dword [0x545ff4]
mov eax, dword [eax + 0x30]
mov ebx, dword [ebp - 0x34]
cmp eax, ebx
jne 0x459a85
mov dword [ebp - 4], 0x39f
mov dword [ebp - 4], 0x3a0
mov edx, 1
cmp eax, edx
jne 0x457e56
mov dword [ebp - 4], 0x3a1
mov cx, word [0x545fb6]
not cx
mov word [0x545fb6], cx
jmp 0x459a4f
mov dword [ebp - 4], 0x1cb
cmp al, 1
jne 0x450eed
mov dword [ebp - 4], 0x1cc
mov edx, 0x424c70
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450fbf
mov dword [ebp - 4], 0x1cd
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1ce
mov edx, 0x424c78
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x196
push 0x16
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451019
mov dword [ebp - 4], 0x1cf
mov dword [ebp - 0x34], 5
mov dword [ebp - 4], 0x1d0
cmp word [0x545fca], 0
je 0x4510a7
mov dword [ebp - 4], 0x1d1
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp byte [eax + edx*4], 8
jae 0x4510a7
mov dword [ebp - 4], 0x1d2
mov edx, 0x424c88
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x16
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4510a7
mov dword [ebp - 4], 0x1d3
mov dword [ebp - 0x34], 8
mov dword [ebp - 4], 0x1d4
mov eax, dword [0x544b3c]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x320
push 0x19d
push 0x120
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x4510ec
push 0x58
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
cmp byte [ecx + eax*4], 8
jae 0x451a4c
mov dword [ebp - 4], 0x1d6
mov eax, dword [0x544b3c]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x11d
push 0x197
push 0x44
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x451155
push 0x58
push 0x42099c
mov ecx, dword [0x544b3c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d7
mov edx, 0x424c98
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1d8
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x58
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4511ea
mov dword [ebp - 4], 0x1d9
mov dword [ebp - 0x34], 0x12
mov dword [ebp - 4], 0x1da
mov edx, 0x424ca4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x6b
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1db
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x7e
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45127f
mov dword [ebp - 4], 0x1dc
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 4], 0x1dd
mov edx, 0x424cb0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x91
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1de
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xaa
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45131a
mov dword [ebp - 4], 0x1df
mov dword [ebp - 0x34], 0x14
mov dword [ebp - 4], 0x1e0
mov edx, 0x42491c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xbd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e1
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xd7
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4513b5
mov dword [ebp - 4], 0x1e2
mov dword [ebp - 0x34], 0x15
mov dword [ebp - 4], 0x1e3
mov edx, 0x424080
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xe8
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e4
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 9
push 0
push 0x197
push 0xfd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451450
mov dword [ebp - 4], 0x1e5
mov dword [ebp - 0x34], 0x16
mov dword [ebp - 4], 0x1e6
mov edx, 0x4228e0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0x44
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e7
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x5d
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4514e5
mov dword [ebp - 4], 0x1e8
mov dword [ebp - 0x34], 0xe
mov dword [ebp - 4], 0x1e9
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 1
push 0
push 0x1a6
push 0x70
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45153f
mov dword [ebp - 4], 0x1ea
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 4], 0x1eb
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 0
push 0x1a6
push 0x83
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45159c
mov dword [ebp - 4], 0x1ec
mov dword [ebp - 0x34], 0x17
mov dword [ebp - 4], 0x1ed
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 3
push 0
push 0x1a6
push 0x96
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4515f9
mov dword [ebp - 4], 0x1ee
mov dword [ebp - 0x34], 0x19
mov dword [ebp - 4], 0x1ef
mov edx, 0x424cc0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0xe
push 0x1a6
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f0
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 4
push 0
push 0x1a6
push 0xc2
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451694
mov dword [ebp - 4], 0x1f1
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 4], 0x1f2
mov edx, 0x424cd0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0xd5
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f3
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 0
push 0x1a6
push 0xe8
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45172f
mov dword [ebp - 4], 0x1f4
mov dword [ebp - 0x34], 0x11
mov dword [ebp - 4], 0x1f5
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 7
push 0
push 0x1a6
push 0xfb
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45178c
mov dword [ebp - 4], 0x1f6
mov dword [ebp - 0x34], 0xd
mov dword [ebp - 4], 0x1f7
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x1a6
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4517e9
mov dword [ebp - 4], 0x1f8
mov dword [ebp - 0x34], 0x1a
mov dword [ebp - 4], 0x1f9
mov edx, 0x424cdc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fa
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0x69
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45187e
mov dword [ebp - 4], 0x1fb
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 4], 0x1fc
mov edx, 0x424cf0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x7c
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fd
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451916
mov dword [ebp - 4], 0x1fe
mov dword [ebp - 0x34], 0xb
mov dword [ebp - 4], 0x1ff
mov edx, 0x424d04
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xbd
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x200
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xdc
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4519b1
mov dword [ebp - 4], 0x201
mov dword [ebp - 0x34], 0xc
mov dword [ebp - 4], 0x202
mov edx, 0x424d14
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xee
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x203
mov edx, 0x423e34
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 8
push 0
push 0x1b5
push 0x104
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451a4c
mov dword [ebp - 4], 0x204
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 4], 0x205
mov edx, 0x424d20
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 5
push 0x197
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451aa9
mov dword [ebp - 4], 0x206
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0x207
mov edx, dword [0x545ff4]
mov al, byte [edx + 0x35]
test al, al
jbe 0x451eb4
mov dword [ebp - 4], 0x208
cmp al, 5
jae 0x451cda
mov dword [ebp - 4], 0x209
mov dword [ebp - 0x8c], 0x120
mov dword [ebp - 4], 0x20a
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x18e]
movsx ecx, ax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0x20b
mov cl, byte [edx + 0x35]
cmp cl, 1
jbe 0x451c0b
mov dword [ebp - 4], 0x20c
mov edx, 0x424d28
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xff
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451b82
mov dword [ebp - 4], 0x20d
mov edx, dword [0x545ff4]
movzx ax, byte [edx + 0x35]
add eax, 0x3e8
movsx ecx, ax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x20e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [0x545ff4]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x451c97
mov dword [ebp - 4], 0x20f
mov edx, 0x424d30
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x10a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x451c97
mov dword [ebp - 4], 0x210
jmp 0x451c81
mov dword [ebp - 4], 0x211
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
cmp cl, byte [edx + eax*4]
jae 0x451c97
mov dword [ebp - 4], 0x212
mov edx, 0x424d30
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xff
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x451c97
mov dword [ebp - 4], 0x213
mov eax, dword [0x545ff4]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x214
mov eax, dword [0x544a00]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x451cce
add ecx, 0x116
cmp eax, ecx
jge 0x451cce
mov eax, dword [0x544a04]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x451cce
add ecx, 0xf
cmp eax, ecx
jl 0x451eb4
mov dword [ebp - 4], 0x215
jmp 0x451eab
mov dword [ebp - 4], 0x216
mov dword [ebp - 0x8c], 0x220
mov dword [ebp - 4], 0x217
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4 + 0x152]
movsx eax, cx
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0x218
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x451e07
mov dword [ebp - 4], 0x219
mov edx, 0x424d28
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xffffffea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451da0
mov dword [ebp - 4], 0x21a
mov eax, dword [0x545ff4]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21b
mov edx, 0x424d30
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x451e6e
mov dword [ebp - 4], 0x21c
mov eax, dword [0x545ff4]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
jmp 0x451e68
mov dword [ebp - 4], 0x21d
mov edx, 0x424d28
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x451e6e
mov dword [ebp - 4], 0x21e
mov eax, dword [0x545ff4]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21f
mov ecx, dword [ebp - 0x8c]
lea edx, [ecx - 0x16]
mov eax, dword [0x544a00]
cmp eax, edx
jle 0x451ea4
add ecx, 0x100
cmp eax, ecx
jge 0x451ea4
mov eax, dword [0x544a04]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x451ea4
add ecx, 0xf
cmp eax, ecx
jl 0x451eb4
mov dword [ebp - 4], 0x220
mov eax, dword [0x545ff4]
mov byte [eax + 0x35], 0
mov dword [ebp - 4], 0x221
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [eax + edx*4]
mov dword [ebp - 0x1a0], ecx
mov ebx, 1
cmp ebx, dword [ebp - 0x1a0]
jg 0x450eed
mov dword [ebp - 4], 0x222
cmp ebx, 5
jge 0x451f1e
mov dword [ebp - 4], 0x223
mov ecx, 0x120
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x224
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x18e]
jmp 0x451f41
mov dword [ebp - 4], 0x225
mov ecx, 0x220
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x226
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x152]
mov dword [ebp - 0x68], edx
mov dword [ebp - 4], 0x227
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 4], 0x228
mov eax, dword [0x545ff4]
mov al, byte [eax + 0x35]
mov dword [ebp - 4], 0x229
test al, al
jne 0x452270
mov dword [ebp - 4], 0x22a
mov eax, dword [0x544a00]
cmp eax, ecx
jle 0x451faa
add ecx, 0x100
cmp eax, ecx
jge 0x451faa
mov eax, dword [0x544a04]
cmp eax, edx
jle 0x451faa
add edx, 0xf
cmp eax, edx
jge 0x451faa
mov dword [ebp - 4], 0x22b
mov ecx, dword [0x545ff4]
mov byte [ecx + 0x35], bl
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x244
test ax, ax
je 0x457e43
mov dword [ebp - 4], 0x245
mov edx, 0x424d38
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 9
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45201e
mov dword [ebp - 4], 0x246
lea edx, [ebx + 0x3c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x247
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov al, byte [eax + edx*4]
mov dword [ebp - 4], 0x248
cmp al, 1
jne 0x452a52
mov dword [ebp - 4], 0x249
mov edx, 0x424d40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24a
mov edx, 0x424d50
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x55
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24b
mov edx, 0x424d64
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 1
jne 0x4521b8
mov dword [ebp - 4], 0x24d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
push 0
push 2
push 1
push 0x11
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x24e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x452425
dec eax
je 0x4523bc
dec eax
jne 0x45248c
mov dword [ebp - 4], 0x253
mov edx, 0x424cd0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x38
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45248c
mov dword [ebp - 4], 0x254
lea ecx, [ebx + 0xd2]
mov dword [ebp - 0x34], ecx
jmp 0x45248c
mov dword [ebp - 4], 0x22c
cmp al, 1
jne 0x452299
mov dword [ebp - 4], 0x22d
cmp ebx, 5
jne 0x451faa
mov dword [ebp - 4], 0x22e
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x22f
cmp al, 2
jne 0x4522c2
mov dword [ebp - 4], 0x230
cmp ebx, 6
jne 0x451faa
mov dword [ebp - 4], 0x231
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x232
cmp al, 3
jne 0x4522eb
mov dword [ebp - 4], 0x233
cmp ebx, 7
jne 0x451faa
mov dword [ebp - 4], 0x234
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x235
cmp al, 4
jne 0x452314
mov dword [ebp - 4], 0x236
cmp ebx, 8
jne 0x451faa
mov dword [ebp - 4], 0x237
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x238
cmp al, 5
jne 0x45233d
mov dword [ebp - 4], 0x239
cmp ebx, 1
jne 0x451faa
mov dword [ebp - 4], 0x23a
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x23b
cmp al, 6
jne 0x452366
mov dword [ebp - 4], 0x23c
cmp ebx, 2
jne 0x451faa
mov dword [ebp - 4], 0x23d
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x23e
cmp al, 7
jne 0x45238f
mov dword [ebp - 4], 0x23f
cmp ebx, 3
jne 0x451faa
mov dword [ebp - 4], 0x240
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x241
cmp al, 8
jne 0x451faa
mov dword [ebp - 4], 0x242
cmp ebx, 4
jne 0x451faa
mov dword [ebp - 4], 0x243
xor eax, eax
jmp 0x451fad
mov dword [ebp - 4], 0x251
mov edx, 0x424d74
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x38
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45248c
mov dword [ebp - 4], 0x252
lea edx, [ebx + 0xc8]
mov dword [ebp - 0x34], edx
jmp 0x45248c
mov dword [ebp - 4], 0x24f
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x38
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45248c
mov dword [ebp - 4], 0x250
lea eax, [ebx + 0xdc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x255
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x256
test al, al
je 0x4526f3
cmp al, 5
je 0x4526f3
mov dword [ebp - 4], 0x259
cmp al, 1
je 0x452688
cmp al, 6
je 0x452688
mov dword [ebp - 4], 0x25c
cmp al, 2
je 0x452615
cmp al, 7
je 0x452615
mov dword [ebp - 4], 0x25f
cmp al, 3
je 0x4525a5
cmp al, 8
je 0x4525a5
mov dword [ebp - 4], 0x262
cmp al, 4
je 0x452533
cmp al, 9
jne 0x45275d
mov dword [ebp - 4], 0x263
mov edx, 0x424dac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45275d
mov dword [ebp - 4], 0x264
lea edx, [ebx + 0x10e]
mov dword [ebp - 0x34], edx
jmp 0x45275d
mov dword [ebp - 4], 0x260
mov edx, 0x424da0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45275d
mov dword [ebp - 4], 0x261
lea eax, [ebx + 0x104]
jmp 0x45275a
mov dword [ebp - 4], 0x25d
mov edx, 0x424d90
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x8b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45275d
mov dword [ebp - 4], 0x25e
lea ecx, [ebx + 0xfa]
mov dword [ebp - 0x34], ecx
jmp 0x45275d
mov dword [ebp - 4], 0x25a
mov edx, 0x424d80
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45275d
mov dword [ebp - 4], 0x25b
lea edx, [ebx + 0xf0]
mov dword [ebp - 0x34], edx
jmp 0x45275d
mov dword [ebp - 4], 0x257
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45275d
mov dword [ebp - 4], 0x258
lea eax, [ebx + 0xe6]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x265
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
cmp byte [edx], 0
jbe 0x45285b
mov dword [ebp - 4], 0x266
push ecx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa7
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x267
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x268
test al, al
jne 0x45292a
mov dword [ebp - 4], 0x269
mov edx, dword [0x544e78]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043bbe0
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x457e43
mov dword [ebp - 4], 0x26a
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x26b
cmp al, 1
jne 0x4529c3
mov dword [ebp - 4], 0x26c
mov edx, dword [0x544e78]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
add edx, 8
push edx
call fcn.0043bbe0
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x457e43
mov dword [ebp - 4], 0x26d
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x26e
cmp al, 2
jne 0x457e43
mov dword [ebp - 4], 0x26f
mov edx, 0x424dbc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x10
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x270
lea edx, [ebx + 0x118]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x271
cmp al, 2
jne 0x4532b7
mov dword [ebp - 4], 0x272
mov edx, 0x424cf0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x273
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
mov dword [ebp - 4], 0x274
test ax, ax
jne 0x452b5f
mov dword [ebp - 4], 0x275
mov edx, 0x424dcc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x41
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x276
lea ecx, [ebx + 0x1e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x277
cmp ax, 1
jl 0x452cd3
cmp ax, 0xa
jg 0x452cd3
mov dword [ebp - 4], 0x278
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x41
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452bde
mov dword [ebp - 4], 0x279
lea edx, [ebx + 0x28]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x27a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424dd8
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
imul cx, cx, 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d87c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x27b
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x27c
cmp ax, 0xb
jl 0x452e4c
cmp ax, 0x14
jg 0x452e4c
mov dword [ebp - 4], 0x27d
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452d52
mov dword [ebp - 4], 0x27e
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x27f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424dec
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0xa
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d87c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x280
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x281
cmp ax, 0x15
jl 0x452fc5
cmp ax, 0x1e
jg 0x452fc5
mov dword [ebp - 4], 0x282
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452ecb
mov dword [ebp - 4], 0x283
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x284
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424dfc
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x14
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d87c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x285
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x286
cmp ax, 0x1f
jl 0x45313e
cmp ax, 0x28
jg 0x45313e
mov dword [ebp - 4], 0x287
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453044
mov dword [ebp - 4], 0x288
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x289
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424e10
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x1e
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d87c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x28a
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x28b
cmp ax, 0x29
jl 0x457e43
cmp ax, 0x32
jg 0x457e43
mov dword [ebp - 4], 0x28c
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4531bd
mov dword [ebp - 4], 0x28d
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x424e20
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x28
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d87c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x28f
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x290
cmp al, 3
jne 0x45355d
mov dword [ebp - 4], 0x291
mov dword [ebp - 0xb4], 0x80020004
mov dword [ebp - 0xbc], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
push 0x1c6
push 0xed
push 0
push 0
lea eax, [ebp - 0xbc]
push eax
push 1
push 0xd7
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x292
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x4534df
dec eax
je 0x453462
dec eax
jne 0x457e43
mov dword [ebp - 4], 0x297
mov edx, 0x424e40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xef
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x298
lea ecx, [ebx + 0x32]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x295
mov edx, 0x424e38
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xef
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x296
lea edx, [ebx + 0x32]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x293
mov edx, 0x424e30
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xef
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x294
lea eax, [ebx + 0x32]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x299
cmp al, 4
jne 0x4538de
mov dword [ebp - 4], 0x29a
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 7
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4535d0
mov dword [ebp - 4], 0x29b
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x29c
mov edx, 0x424e48
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29d
mov edx, 0x424e58
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29e
mov edx, 0x424e68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8c]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a2
jmp 0x457d83
mov dword [ebp - 4], 0x2a3
cmp al, 5
jne 0x453beb
mov dword [ebp - 4], 0x2a4
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453951
mov dword [ebp - 4], 0x2a5
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2a6
mov edx, 0x424e70
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a7
mov edx, 0x424e7c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8e]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2aa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa8
jmp 0x457e1e
mov dword [ebp - 4], 0x2ab
cmp al, 6
jne 0x454008
mov dword [ebp - 4], 0x2ac
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 1
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453c5e
mov dword [ebp - 4], 0x2ad
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2ae
mov edx, 0x424e70
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2af
mov edx, 0x424e90
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b0
mov edx, 0x424e9c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8e]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2b2
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
jmp 0x457e1e
mov dword [ebp - 4], 0x2b5
cmp al, 7
jne 0x454753
mov dword [ebp - 4], 0x2b6
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 4
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45407b
mov dword [ebp - 4], 0x2b7
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2b8
mov edx, 0x424ea8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4540ef
mov dword [ebp - 4], 0x2b9
mov dword [0x544b6c], 0x12
mov dword [ebp - 4], 0x2ba
call fcn.0043ca50
mov dword [ebp - 4], 0x2bb
mov edx, 0x424eb8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2bc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8e]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2bd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x68
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2be
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 4
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x81
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2bf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x9a
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x2c2
test al, al
jne 0x4545b5
mov dword [ebp - 4], 0x2c3
mov edx, 0x424ec4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x2c4
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x2c5
cmp al, 1
jne 0x45463e
mov dword [ebp - 4], 0x2c6
mov edx, 0x424ed0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x2c7
lea eax, [ebx + 0x64]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x2c8
cmp al, 2
jne 0x4546c7
mov dword [ebp - 4], 0x2c9
mov edx, 0x424edc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x2ca
lea ecx, [ebx + 0x64]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x2cb
cmp al, 3
jne 0x457e43
mov dword [ebp - 4], 0x2cc
mov edx, 0x424ee8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x2cd
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x2ce
cmp al, 8
jne 0x454c80
mov dword [ebp - 4], 0x2cf
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 6
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4547c6
mov dword [ebp - 4], 0x2d0
lea eax, [ebx + 0x46]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2d1
mov edx, 0x424e90
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d2
mov edx, 0x424e9c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6f
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d3
mov edx, 0x424ef4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x9c
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d4
mov edx, 0x424e68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc9
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8c]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2d6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x83
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd8
jmp 0x457e1e
mov dword [ebp - 4], 0x2da
cmp al, 9
jne 0x454f8e
mov dword [ebp - 4], 0x2db
mov edx, 0x424f00
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dc
mov edx, 0x424e58
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dd
mov edx, 0x424f14
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2de
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb9
jmp 0x457e1e
mov dword [ebp - 4], 0x2e1
cmp al, 0xa
jne 0x455ba2
mov dword [ebp - 4], 0x2e2
mov edx, 0x424f24
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e3
mov edx, 0x424f38
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x40
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x2e5
test al, al
jne 0x4550dc
mov dword [ebp - 4], 0x2e6
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x4d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4551c6
mov dword [ebp - 4], 0x2e7
lea edx, [ebx + 0x12c]
mov dword [ebp - 0x34], edx
jmp 0x4551c6
mov dword [ebp - 4], 0x2e8
cmp al, 1
jne 0x455154
mov dword [ebp - 4], 0x2e9
mov edx, 0x423ea0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x4d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4551c6
mov dword [ebp - 4], 0x2ea
lea eax, [ebx + 0x12c]
mov dword [ebp - 0x34], eax
jmp 0x4551c6
mov dword [ebp - 4], 0x2eb
cmp al, 2
jne 0x4551c6
mov dword [ebp - 4], 0x2ec
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x4d
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4551c6
mov dword [ebp - 4], 0x2ed
lea ecx, [ebx + 0x12c]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2ee
mov edx, 0x424e40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x5d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2ef
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x2f0
test al, al
jne 0x4552c0
mov dword [ebp - 4], 0x2f1
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x6a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4553aa
mov dword [ebp - 4], 0x2f2
lea edx, [ebx + 0x136]
mov dword [ebp - 0x34], edx
jmp 0x4553aa
mov dword [ebp - 4], 0x2f3
cmp al, 1
jne 0x455338
mov dword [ebp - 4], 0x2f4
mov edx, 0x423ea0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x6a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4553aa
mov dword [ebp - 4], 0x2f5
lea eax, [ebx + 0x136]
mov dword [ebp - 0x34], eax
jmp 0x4553aa
mov dword [ebp - 4], 0x2f6
cmp al, 2
jne 0x4553aa
mov dword [ebp - 4], 0x2f7
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6a
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4553aa
mov dword [ebp - 4], 0x2f8
lea ecx, [ebx + 0x136]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2f9
mov edx, 0x424f48
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2fa
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x2fb
test al, al
jne 0x4554a6
mov dword [ebp - 4], 0x2fc
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x87
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455596
mov dword [ebp - 4], 0x2fd
lea edx, [ebx + 0x140]
mov dword [ebp - 0x34], edx
jmp 0x455596
mov dword [ebp - 4], 0x2fe
cmp al, 1
jne 0x455521
mov dword [ebp - 4], 0x2ff
mov edx, 0x423ea0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x87
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455596
mov dword [ebp - 4], 0x300
lea eax, [ebx + 0x140]
mov dword [ebp - 0x34], eax
jmp 0x455596
mov dword [ebp - 4], 0x301
cmp al, 2
jne 0x455596
mov dword [ebp - 4], 0x302
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x87
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455596
mov dword [ebp - 4], 0x303
lea ecx, [ebx + 0x140]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x304
mov edx, 0x424f50
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x97
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x305
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x306
test al, al
jne 0x455694
mov dword [ebp - 4], 0x307
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xa4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455784
mov dword [ebp - 4], 0x308
lea edx, [ebx + 0x14a]
mov dword [ebp - 0x34], edx
jmp 0x455784
mov dword [ebp - 4], 0x309
cmp al, 1
jne 0x45570f
mov dword [ebp - 4], 0x30a
mov edx, 0x423ea0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa4
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455784
mov dword [ebp - 4], 0x30b
lea eax, [ebx + 0x14a]
mov dword [ebp - 0x34], eax
jmp 0x455784
mov dword [ebp - 4], 0x30c
cmp al, 2
jne 0x455784
mov dword [ebp - 4], 0x30d
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa4
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455784
mov dword [ebp - 4], 0x30e
lea ecx, [ebx + 0x14a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x30f
mov edx, 0x424f58
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x310
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 4]
mov dword [ebp - 4], 0x311
test al, al
jne 0x455882
mov dword [ebp - 4], 0x312
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455972
mov dword [ebp - 4], 0x313
lea edx, [ebx + 0x154]
mov dword [ebp - 0x34], edx
jmp 0x455972
mov dword [ebp - 4], 0x314
cmp al, 1
jne 0x4558fd
mov dword [ebp - 4], 0x315
mov edx, 0x423ea0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455972
mov dword [ebp - 4], 0x316
lea eax, [ebx + 0x154]
mov dword [ebp - 0x34], eax
jmp 0x455972
mov dword [ebp - 4], 0x317
cmp al, 2
jne 0x455972
mov dword [ebp - 4], 0x318
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455972
mov dword [ebp - 4], 0x319
lea ecx, [ebx + 0x154]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x31a
mov edx, 0x424f60
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xd1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x31b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 5]
mov dword [ebp - 4], 0x31c
test al, al
jne 0x455a82
mov dword [ebp - 4], 0x31d
mov edx, 0x41d88c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xde
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x31e
lea edx, [ebx + 0x15e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x31f
cmp al, 1
jne 0x455b12
mov dword [ebp - 4], 0x320
mov edx, 0x423ea0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xde
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x321
lea eax, [ebx + 0x15e]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x322
cmp al, 2
jne 0x457e43
mov dword [ebp - 4], 0x323
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xde
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x324
lea ecx, [ebx + 0x15e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x325
cmp al, 0xb
jne 0x455eec
mov dword [ebp - 4], 0x326
mov edx, 0x424f68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455c18
mov dword [ebp - 4], 0x327
lea edx, [ebx + 0x8c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x328
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 2]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
mov edx, dword [0x544f24]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx ecx, word [0x544e84]
sub eax, ecx
push eax
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x37
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
mov dword [ebp - 4], 0x329
mov edx, dword [0x544f24]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x70
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
add cx, word [0x544e84]
movsx eax, cx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0043b830
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x455d74
mov dword [ebp - 4], 0x32a
lea eax, [ebx + 0x19a]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x32b
push 0x41d88c
mov ecx, dword [0x544f24]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x544e84]
sub eax, edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043b830
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x32c
mov edx, 0x424f78
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xbf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x32d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xff
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xdf
jmp 0x457e1e
mov dword [ebp - 4], 0x32e
cmp al, 0xc
jne 0x45613d
mov dword [ebp - 4], 0x32f
mov edx, 0x42491c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455f62
mov dword [ebp - 4], 0x330
lea eax, [ebx + 0x96]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x331
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 2], 2
jge 0x45604a
mov dword [ebp - 4], 0x332
mov ecx, dword [0x544f08]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x2d
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0043b830
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x457e43
mov dword [ebp - 4], 0x333
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x334
mov ecx, dword [0x544f08]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.00532cb0
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x90]
push edx
call edi
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x2d
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x335
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x336
cmp al, 0xd
jne 0x456881
mov dword [ebp - 4], 0x337
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 9
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4561b0
mov dword [ebp - 4], 0x338
lea ecx, [ebx + 0x5a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x339
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x33a
mov edx, 0x424f88
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xaa
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x33b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x33c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x33d
test al, al
je 0x456570
cmp al, 4
je 0x456570
cmp al, 8
je 0x456570
cmp al, 0xc
je 0x456570
mov dword [ebp - 4], 0x340
cmp al, 1
je 0x456507
cmp al, 5
je 0x456507
cmp al, 9
je 0x456507
cmp al, 0xd
je 0x456507
mov dword [ebp - 4], 0x343
cmp al, 2
je 0x456497
cmp al, 6
je 0x456497
cmp al, 0xa
je 0x456497
cmp al, 0xe
je 0x456497
mov dword [ebp - 4], 0x346
cmp al, 3
je 0x45642e
cmp al, 7
je 0x45642e
cmp al, 0xb
je 0x45642e
cmp al, 0xf
jne 0x4565d6
mov dword [ebp - 4], 0x347
mov edx, 0x424ee8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4565d6
mov dword [ebp - 4], 0x348
jmp 0x4565d0
mov dword [ebp - 4], 0x344
mov edx, 0x424edc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4565d6
mov dword [ebp - 4], 0x345
lea eax, [ebx + 0x6e]
mov dword [ebp - 0x34], eax
jmp 0x4565d6
mov dword [ebp - 4], 0x341
mov edx, 0x424ed0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4565d6
mov dword [ebp - 4], 0x342
lea ecx, [ebx + 0x6e]
mov dword [ebp - 0x34], ecx
jmp 0x4565d6
mov dword [ebp - 4], 0x33e
mov edx, 0x424ec4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4565d6
mov dword [ebp - 4], 0x33f
lea edx, [ebx + 0x6e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x349
mov edx, 0x424f98
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x34a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x34b
cmp al, 3
ja 0x4566db
mov dword [ebp - 4], 0x34c
mov edx, 0x424fa8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x34d
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x34e
cmp al, 4
jb 0x456765
cmp al, 7
ja 0x456765
mov dword [ebp - 4], 0x34f
mov edx, 0x424fbc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x69
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x350
lea eax, [ebx + 0x78]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x351
cmp al, 8
jb 0x4567ef
cmp al, 0xb
ja 0x4567ef
mov dword [ebp - 4], 0x352
mov edx, 0x424fc8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x69
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x353
lea ecx, [ebx + 0x78]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x354
cmp al, 0xc
jb 0x457e43
cmp al, 0xf
ja 0x457e43
mov dword [ebp - 4], 0x355
mov edx, 0x424fe0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x356
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x357
cmp al, 0xe
jne 0x456dae
mov dword [ebp - 4], 0x358
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 2
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4568f4
mov dword [ebp - 4], 0x359
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x35a
mov edx, 0x424e70
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35b
mov edx, 0x424e90
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35c
mov edx, 0x424e9c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35d
mov edx, 0x424ef4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xd1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8e]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x35f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x360
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x361
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x362
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
jmp 0x457e1e
mov dword [ebp - 4], 0x363
cmp al, 0xf
jne 0x4571df
mov dword [ebp - 4], 0x364
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 8
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456e24
mov dword [ebp - 4], 0x365
lea eax, [ebx + 0x82]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x366
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x545760]
push eax
push 0
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x18
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x367
mov edx, 0x424ff0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x43
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x368
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x14
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x369
mov edx, 0x424ffc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36b
mov edx, 0x425008
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36c
mov eax, dword [0x544eb8]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xce
push edx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.0043b830
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x457e43
mov dword [ebp - 4], 0x36d
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x36e
cmp al, 0x10
jne 0x457a07
mov dword [ebp - 4], 0x36f
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 3
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457252
mov dword [ebp - 4], 0x370
lea ecx, [ebx + 0x50]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x371
mov edx, 0x424e68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x372
mov edx, 0x425018
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x373
mov edx, 0x424f98
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8e
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x374
mov edx, 0x425020
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x375
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8e]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x376
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x50
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x377
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x75
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x378
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x379
test al, al
jne 0x45764f
mov dword [ebp - 4], 0x37a
mov edx, 0x425018
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4578af
mov dword [ebp - 4], 0x37b
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x4578af
mov dword [ebp - 4], 0x37c
cmp al, 1
jne 0x4576cd
mov dword [ebp - 4], 0x37d
mov edx, 0x425030
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4578af
mov dword [ebp - 4], 0x37e
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x4578af
mov dword [ebp - 4], 0x37f
cmp al, 2
jne 0x457742
mov dword [ebp - 4], 0x380
mov edx, 0x42503c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4578af
mov dword [ebp - 4], 0x381
jmp 0x4578a6
mov dword [ebp - 4], 0x382
cmp al, 3
jne 0x4577bf
mov dword [ebp - 4], 0x383
mov edx, 0x425048
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4578af
mov dword [ebp - 4], 0x384
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x4578af
mov dword [ebp - 4], 0x385
cmp al, 4
jne 0x45783a
mov dword [ebp - 4], 0x386
mov edx, 0x425054
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4578af
mov dword [ebp - 4], 0x387
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x4578af
mov dword [ebp - 4], 0x388
cmp al, 5
jne 0x4578af
mov dword [ebp - 4], 0x389
mov edx, 0x425060
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4578af
mov dword [ebp - 4], 0x38a
lea ecx, [ebx + 0x122]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x38b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x38c
test al, al
jne 0x457977
mov dword [ebp - 4], 0x38d
mov edx, 0x42506c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x38e
lea edx, [ebx + 0xbe]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x38f
cmp al, 1
jne 0x457e43
mov dword [ebp - 4], 0x390
mov edx, 0x425078
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e43
mov dword [ebp - 4], 0x391
lea eax, [ebx + 0xbe]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x392
cmp al, 0x11
jne 0x457e43
mov dword [ebp - 4], 0x393
mov edx, 0x42270c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043b830
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457a7a
mov dword [ebp - 4], 0x394
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x395
mov edx, 0x424e48
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x396
mov edx, 0x424e70
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x397
mov edx, 0x424e68
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043b830
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x398
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x544b8c]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043a650
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x399
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc8
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043a650
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x451ee1
mov dword [ebp - 4], 0x3a2
cmp eax, 2
jne 0x457e81
mov dword [ebp - 4], 0x3a3
mov edx, dword [ebp - 0x3c]
push edx
mov al, byte [0x545fa0]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044bb00
jmp 0x459a4f
mov dword [ebp - 4], 0x3a4
cmp eax, 3
jne 0x457ea2
mov dword [ebp - 4], 0x3a5
mov edx, dword [ebp + 8]
push edx
call fcn.004479e0
jmp 0x459a4f
mov dword [ebp - 4], 0x3a6
cmp eax, 4
jne 0x457ec3
mov dword [ebp - 4], 0x3a7
mov eax, dword [ebp + 8]
push eax
call fcn.004480f0
jmp 0x459a4f
mov dword [ebp - 4], 0x3a8
cmp eax, 5
jne 0x457f37
mov dword [ebp - 4], 0x3a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
cmp byte [edx + ecx*4], 0
jbe 0x459a4f
mov dword [ebp - 4], 0x3aa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
push 0x545fcc
push 0x41f108
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ab
mov word [0x545fca], 0xffff
jmp 0x459a4f
mov dword [ebp - 4], 0x3ac
cmp eax, 6
jne 0x457f76
mov dword [ebp - 4], 0x3ad
mov eax, dword [0x545ff4]
mov cl, byte [eax + 0x34]
test cl, cl
jne 0x457f66
mov dword [ebp - 4], 0x3ae
mov byte [eax + 0x34], 1
jmp 0x459a4f
mov dword [ebp - 4], 0x3af
mov byte [eax + 0x34], 0
jmp 0x459a4f
mov dword [ebp - 4], 0x3b0
cmp eax, 7
jne 0x457f93
mov dword [ebp - 4], 0x3b1
call fcn.0043dd80
jmp 0x459a4f
mov dword [ebp - 4], 0x3b2
cmp eax, 8
jne 0x4580a9
mov dword [ebp - 4], 0x3b3
mov ebx, dword [0x545fcc]
and ebx, 0xff
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x24], edx
cmp edx, ebx
jg 0x459a4f
mov dword [ebp - 4], 0x3b4
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov al, byte [ecx]
cmp al, 8
jae 0x458093
mov dword [ebp - 4], 0x3b5
inc al
mov byte [ecx], al
mov dword [ebp - 4], 0x3b6
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f0e8
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3b7
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ebx, dword [0x545fd4]
sub eax, dword [ebx + 0x14]
lea eax, [eax + eax*2]
mov ebx, dword [ebx + 0xc]
lea eax, [ebx + eax*4]
push eax
xor eax, eax
mov al, byte [ecx]
sub eax, dword [edx + 0x14]
lea ecx, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov ebx, dword [ebp - 0x1ac]
mov dword [ebp - 4], 0x3b8
mov eax, 1
mov edx, dword [ebp - 0x24]
add edx, eax
jmp 0x457fbc
mov dword [ebp - 4], 0x3b9
cmp eax, 0xa
jl 0x458587
cmp eax, 0x1a
jg 0x458587
mov dword [ebp - 4], 0x3ba
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
inc cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3bb
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f0e8
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3bc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
add ebx, 0xfffffff7
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov byte [ecx + eax*4], bl
mov dword [ebp - 4], 0x3bd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
mov dword [ebp - 4], 0x3be
cmp cl, 1
jne 0x458200
mov dword [ebp - 4], 0x3bf
mov word [eax + 2], 0
mov dword [ebp - 4], 0x3c0
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
push 0
push 2
push 1
push 0x11
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 4]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
jmp 0x459a4f
mov dword [ebp - 4], 0x3c1
cmp cl, 3
jne 0x4582c6
mov dword [ebp - 4], 0x3c2
push 0
push 0
push 1
push 8
add eax, 8
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c3
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, 0x423e18
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov dword [ebp - 0x25c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x25c]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x3c4
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov word [ecx + eax*4 + 2], 2
jmp 0x459a4f
mov dword [ebp - 4], 0x3c5
cmp cl, 4
jne 0x45833a
mov dword [ebp - 4], 0x3c6
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c7
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x459a4f
mov dword [ebp - 4], 0x3c8
cmp cl, 5
jne 0x45835e
mov dword [ebp - 4], 0x3c9
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3ca
cmp cl, 6
je 0x45856f
cmp cl, 9
je 0x45856f
mov dword [ebp - 4], 0x3cc
cmp cl, 7
jne 0x45839b
mov dword [ebp - 4], 0x3cd
push 0
push 4
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3ce
cmp cl, 8
jne 0x45840f
mov dword [ebp - 4], 0x3cf
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3d0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 3], 0x42
jmp 0x459a4f
mov dword [ebp - 4], 0x3d1
cmp cl, 0xa
jne 0x458433
mov dword [ebp - 4], 0x3d2
push 0
push 5
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3d3
cmp cl, 0xb
jne 0x458457
mov dword [ebp - 4], 0x3d4
push 0
push 0
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3d5
cmp cl, 0xc
je 0x459a4f
mov dword [ebp - 4], 0x3d6
cmp cl, 0xd
jne 0x45848b
mov dword [ebp - 4], 0x3d7
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3d8
cmp cl, 0xe
jne 0x4584af
mov dword [ebp - 4], 0x3d9
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3da
cmp cl, 0xf
jne 0x4584d3
mov dword [ebp - 4], 0x3db
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3dc
cmp cl, 0x10
jne 0x4584f7
mov dword [ebp - 4], 0x3dd
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3de
cmp cl, 0x11
jne 0x459a4f
mov dword [ebp - 4], 0x3df
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x459a4f
mov dword [ebp - 4], 0x3cb
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x4581eb
mov dword [ebp - 4], 0x3e1
cmp eax, 0x1f
jl 0x45862c
cmp eax, 0x26
jg 0x45862c
mov dword [ebp - 4], 0x3e2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x166]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 0x32
push 0
push 1
lea ecx, [ebp - 0xcc]
push ecx
call fcn.00434fd0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x3e3
cmp eax, 0x29
jl 0x4586ab
cmp eax, 0x30
jg 0x4586ab
mov dword [ebp - 4], 0x3e4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x1de]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0
push 0x33
push 0
push 0xffffffffffffffff
jmp 0x458609
mov dword [ebp - 4], 0x3e5
cmp eax, 0x33
jl 0x458726
cmp eax, 0x3a
jg 0x458726
mov dword [ebp - 4], 0x3e6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x256]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 2
jmp 0x458605
mov dword [ebp - 4], 0x3e7
cmp eax, 0x3d
jl 0x458880
cmp eax, 0x44
jg 0x458880
mov dword [ebp - 4], 0x3e8
add ebx, 0xffffffc4
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x3e9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov al, byte [ecx + eax*4]
mov ecx, eax
and ecx, 0xff
cmp ebx, ecx
jge 0x4587f0
mov dword [ebp - 4], 0x3ea
movzx ax, al
dec eax
movsx ecx, ax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], edx
cmp ebx, dword [ebp - 0x1b4]
jg 0x4587f0
mov dword [ebp - 4], 0x3eb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ec
add ebx, dword [ebp - 0x1b0]
jmp 0x458796
mov dword [ebp - 4], 0x3ed
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3ee
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov al, byte [ecx]
test al, al
jne 0x458854
mov dword [ebp - 4], 0x3ef
add ecx, 8
push ecx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
jmp 0x459a4f
mov dword [ebp - 4], 0x3f0
push 1
and eax, 0xff
push eax
push 1
push 0x41f0e8
add ecx, 8
push ecx
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
jmp 0x459a4f
mov dword [ebp - 4], 0x3f1
cmp eax, 0x47
jl 0x4588b0
cmp eax, 0x4e
jg 0x4588b0
mov dword [ebp - 4], 0x3f2
push 0
mov cx, word [0x545fa0]
push ecx
add ebx, 0xffffffba
push ebx
call fcn.0051ae90
jmp 0x459a4f
mov dword [ebp - 4], 0x3f3
cmp eax, 0x51
jl 0x4588e0
cmp eax, 0x58
jg 0x4588e0
mov dword [ebp - 4], 0x3f4
push 1
mov dx, word [0x545fa0]
push edx
add ebx, 0xffffffb0
push ebx
call fcn.0051ae90
jmp 0x459a4f
mov dword [ebp - 4], 0x3f5
cmp eax, 0x5b
jl 0x45890f
cmp eax, 0x62
jg 0x45890f
mov dword [ebp - 4], 0x3f6
push 2
mov ax, word [0x545fa0]
push eax
add ebx, 0xffffffa6
push ebx
call fcn.0051ae90
jmp 0x459a4f
mov dword [ebp - 4], 0x3f7
cmp eax, 0x83
jl 0x458946
cmp eax, 0x8a
jg 0x458946
mov dword [ebp - 4], 0x3f8
push 3
mov cx, word [0x545fa0]
push ecx
add ebx, 0xffffff7e
push ebx
call fcn.0051ae90
jmp 0x459a4f
mov dword [ebp - 4], 0x3f9
cmp eax, 0x8d
jl 0x45897d
cmp eax, 0x94
jg 0x45897d
mov dword [ebp - 4], 0x3fa
push 4
mov dx, word [0x545fa0]
push edx
add ebx, 0xffffff74
push ebx
call fcn.0051ae90
jmp 0x459a4f
mov dword [ebp - 4], 0x3fb
cmp eax, 0x97
jl 0x4589b3
cmp eax, 0x9e
jg 0x4589b3
mov dword [ebp - 4], 0x3fc
push 5
mov ax, word [0x545fa0]
push eax
add ebx, 0xffffff6a
push ebx
call fcn.0051ae90
jmp 0x459a4f
mov dword [ebp - 4], 0x3fd
cmp eax, 0x65
jl 0x458a4f
cmp eax, 0x6c
jg 0x458a4f
mov dword [ebp - 4], 0x3fe
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x4ac]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45962c
mov dword [ebp - 4], 0x3ff
cmp eax, 0x6f
jl 0x458db0
cmp eax, 0x76
jg 0x458db0
mov dword [ebp - 4], 0x400
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
movsx ecx, word [0x545fa0]
sub ecx, dword [eax + 0x14]
lea edx, [ecx + ecx*2]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov ecx, dword [edx + ecx*4 - 0x524]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
mov cl, byte [edx + 1]
mov dword [ebp - 4], 0x401
test cl, cl
je 0x458d35
cmp cl, 1
je 0x458d35
cmp cl, 2
je 0x458d35
cmp cl, 3
je 0x458d35
mov dword [ebp - 4], 0x403
cmp cl, 4
je 0x458c8f
cmp cl, 5
je 0x458c8f
cmp cl, 6
je 0x458c8f
cmp cl, 7
je 0x458c8f
mov dword [ebp - 4], 0x405
cmp cl, 8
je 0x458be9
cmp cl, 9
je 0x458be9
cmp cl, 0xa
je 0x458be9
cmp cl, 0xb
je 0x458be9
mov dword [ebp - 4], 0x407
cmp cl, 0xc
je 0x458b43
cmp cl, 0xd
je 0x458b43
cmp cl, 0xe
je 0x458b43
cmp cl, 0xf
jne 0x459a4f
mov dword [ebp - 4], 0x408
push eax
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xf
push 0xc
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x406
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 8
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x404
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 7
push 4
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x402
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45962c
mov dword [ebp - 4], 0x409
cmp eax, 0x79
jl 0x458e5d
cmp eax, 0x80
jg 0x458e5d
mov dword [ebp - 4], 0x40a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
lea eax, [ecx + 1]
mov cl, byte [eax]
add cl, 4
mov byte [eax], cl
mov dword [ebp - 4], 0x40b
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov al, byte [ecx]
cmp al, 0xf
jbe 0x459a4f
mov dword [ebp - 4], 0x40c
sub al, 0x10
mov byte [ecx], al
jmp 0x459a4f
mov dword [ebp - 4], 0x40d
cmp eax, 0xbf
jl 0x458f34
cmp eax, 0xc6
jg 0x458f34
mov dword [ebp - 4], 0x40e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x8e4]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 1
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x40f
call fcn.0043dd80
jmp 0x459a4f
mov dword [ebp - 4], 0x410
cmp eax, 0xc9
jl 0x458f82
cmp eax, 0xd0
jg 0x458f82
mov dword [ebp - 4], 0x411
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x95e], 2
jmp 0x459a4f
mov dword [ebp - 4], 0x412
cmp eax, 0xd3
jl 0x458fd0
cmp eax, 0xda
jg 0x458fd0
mov dword [ebp - 4], 0x413
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x9d6], 0
jmp 0x459a4f
mov dword [ebp - 4], 0x414
cmp eax, 0xdd
jl 0x45901c
cmp eax, 0xe4
jg 0x45901c
mov dword [ebp - 4], 0x415
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov word [eax + ecx*4 - 0xa4e], dx
jmp 0x459a4f
mov dword [ebp - 4], 0x416
cmp eax, 0xe7
jl 0x459070
cmp eax, 0xee
jg 0x459070
mov dword [ebp - 4], 0x417
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xac4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 1
jmp 0x459a4f
mov dword [ebp - 4], 0x418
cmp eax, 0xf1
jl 0x4590c4
cmp eax, 0xf8
jg 0x4590c4
mov dword [ebp - 4], 0x419
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xb3c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 2
jmp 0x459a4f
mov dword [ebp - 4], 0x41a
cmp eax, 0xfb
jl 0x459118
cmp eax, 0x102
jg 0x459118
mov dword [ebp - 4], 0x41b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xbb4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 3
jmp 0x459a4f
mov dword [ebp - 4], 0x41c
cmp eax, 0x105
jl 0x45916c
cmp eax, 0x10c
jg 0x45916c
mov dword [ebp - 4], 0x41d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xc2c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 4
jmp 0x459a4f
mov dword [ebp - 4], 0x41e
cmp eax, 0x10f
jl 0x4591c0
cmp eax, 0x116
jg 0x4591c0
mov dword [ebp - 4], 0x41f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xca4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 0
jmp 0x459a4f
mov dword [ebp - 4], 0x420
cmp eax, 0x119
jl 0x459244
cmp eax, 0x120
jg 0x459244
mov dword [ebp - 4], 0x421
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd1c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
jmp 0x459618
mov dword [ebp - 4], 0x422
cmp eax, 0x123
jl 0x45931b
cmp eax, 0x12a
jg 0x45931b
mov dword [ebp - 4], 0x423
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd94]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x424
call fcn.0043dd80
jmp 0x459a4f
mov dword [ebp - 4], 0x425
cmp eax, 0x12d
jl 0x45939c
cmp eax, 0x134
jg 0x45939c
mov dword [ebp - 4], 0x426
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe0c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
jmp 0x459618
mov dword [ebp - 4], 0x427
cmp eax, 0x137
jl 0x45941e
cmp eax, 0x13e
jg 0x45941e
mov dword [ebp - 4], 0x428
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe84]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
jmp 0x459618
mov dword [ebp - 4], 0x429
cmp eax, 0x141
jl 0x459489
cmp eax, 0x148
jg 0x459489
mov dword [ebp - 4], 0x42a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xefc]
jmp 0x459226
mov dword [ebp - 4], 0x42b
cmp eax, 0x14b
jl 0x45950d
cmp eax, 0x152
jg 0x45950d
mov dword [ebp - 4], 0x42c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xf74]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
jmp 0x459618
mov dword [ebp - 4], 0x42d
cmp eax, 0x155
jl 0x459591
cmp eax, 0x15c
jg 0x459591
mov dword [ebp - 4], 0x42e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xfec]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 4
jmp 0x459618
mov dword [ebp - 4], 0x42f
cmp eax, 0x15f
jl 0x45965c
cmp eax, 0x166
jg 0x45965c
mov dword [ebp - 4], 0x430
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x1064]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 5
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 2
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x431
cmp eax, 0x191
jl 0x45971c
cmp eax, 0x198
jg 0x45971c
mov dword [ebp - 4], 0x432
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x12be]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
mov ecx, dword [0x544f24]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x544e84]
sub eax, edx
push eax
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00434fd0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x433
cmp eax, 0x19b
jl 0x4597dc
cmp eax, 0x1a2
jg 0x4597dc
mov dword [ebp - 4], 0x434
mov eax, dword [0x544b28]
mov ecx, dword [eax]
push 0xff
push eax
call dword [ecx + 0x3c]
fnclex
test eax, eax
jge 0x45976b
push 0x3c
push 0x421dc0
mov edx, dword [0x544b28]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x435
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x544b28]
mov edx, dword [ecx]
push 0xffffffffffffffff
push 2
sub ebx, dword [eax + 0x14]
lea ebx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov ax, word [eax + ebx*4 - 0x1336]
add ax, word [0x544e84]
movsx eax, ax
push eax
push ecx
call dword [edx + 0x40]
fnclex
test eax, eax
jge 0x459a4f
push 0x40
push 0x421dc0
mov ecx, dword [0x544b28]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x459a4f
mov dword [ebp - 4], 0x436
cmp eax, 0x1f5
jl 0x45988b
cmp eax, 0x1fc
jg 0x45988b
mov dword [ebp - 4], 0x437
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x545fa0]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x176e]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
movsx ecx, word [0x544e7c]
push ecx
push 0
push 1
lea edx, [ebp - 0xcc]
push edx
call fcn.00434fd0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
jmp 0x459a4f
mov dword [ebp - 4], 0x438
cmp eax, 0x3e9
jl 0x459965
cmp eax, 0x3f0
jg 0x459965
mov dword [ebp - 4], 0x439
add ebx, 0xfffffc18
mov dword [ebp - 4], 0x43a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2]
lea edx, [ecx + edx*4 - 0xc]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
dec ebx
jmp 0x459a3a
mov dword [ebp - 4], 0x43d
cmp eax, 0x44d
jl 0x459a4f
cmp eax, 0x454
jg 0x459a4f
mov dword [ebp - 4], 0x43e
add ebx, 0xfffffbb4
mov dword [ebp - 4], 0x43f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x440
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x441
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x545fa0]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
inc ebx
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x442
mov ecx, dword [0x545ff4]
mov dword [ecx + 0x30], 0
jmp 0x459a85
mov dword [ebp - 4], 0x443
mov eax, dword [0x545ff4]
mov ecx, dword [eax + 0x30]
test ecx, ecx
jne 0x459a85
mov dword [ebp - 4], 0x444
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x30], edx
mov dword [ebp - 4], 0x445
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jle 0x459b06
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x459b06
mov dword [ebp - 4], 0x446
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push 0
push 0xa7
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea edx, [ebx*8]
sub edx, ebx
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.0043d7a0
lea eax, [ebp - 0x90]
push eax
call edi
mov dword [ebp - 4], 0x447
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x459b2d
mov dword [ebp - 4], 0x448
push 0
push 0
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
push eax
call fcn.004d85e0
mov dword [ebp - 4], 0x449
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x459b48
mov dword [ebp - 4], 0x44a
push eax
call fcn.004d5a70
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x459bf5
jmp 0x459bdc
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x74]
push edx
push 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
ret