Function at 0x447760
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x405556
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x120
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4016c0
xor ecx, ecx
cmp word [0x550258], cx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x68], ecx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], ecx
jne 0x448eee
fld dword [0x550250]
fcomp dword [0x4013b8]
mov eax, dword [0x54f700]
mov edi, dword [ebp + 8]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x58], 0x1e0
fnstsw ax
test ah, 1
je 0x44782f
mov edx, dword [ebp + 0xc]
mov al, byte [edx]
dec al
mov byte [ebp + 0x10], al
jmp 0x447832
mov al, byte [ebp + 0x10]
test al, al
jne 0x447888
mov ecx, dword [ebp + 0xc]
xor eax, eax
mov al, byte [ecx]
mov esi, eax
push esi
call fcn.004454d0
mov ecx, dword [edi + 0x10]
dec esi
mov eax, esi
mov dword [ebp - 0x6c], esi
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [0x54eb68]
lea eax, [eax + edx*4]
movsx edx, word [eax + 4]
cmp ecx, edx
jge 0x44787f
movsx esi, word [0x54ef94]
add ecx, esi
cmp ecx, edx
mov dword [0x54eb68], ecx
jle 0x4478c4
mov ecx, edx
jmp 0x4478be
mov dword [ebp - 0x38], 0xffffffff
jmp 0x4478c4
mov esi, dword [ebp + 0x10]
and esi, 0xff
cmp word [0x54e988], cx
je 0x44789e
push 0xfffffffffffffffe
jmp 0x44789f
push esi
call fcn.004454d0
mov ecx, dword [edi + 0x10]
dec esi
mov eax, esi
mov dword [ebp - 0x6c], esi
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 4]
lea eax, [eax + edx*4]
mov dword [0x54eb68], ecx
mov dword [ebp - 0xe0], ecx
movsx ecx, word [eax + 2]
mov edx, dword [ebp - 0xe0]
mov edi, dword [0x54ef54]
mov eax, ecx
mov dword [ebp - 0x14], ecx
cmp eax, edx
jg 0x448b43
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x7c], eax
mov esi, dword [ecx + 4]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x60], 0x1dc
mov edx, dword [esi + 0x14]
mov dword [ebp - 0x128], esi
sub eax, edx
mov edx, dword [esi + 0xc]
mov bl, byte [edx + eax*2 + 1]
cmp bl, 9
jne 0x44792c
mov dword [ebp - 0x48], 0x15
mov dword [ebp - 0x50], 0x2d7
jmp 0x448314
cmp bl, 0xa
jne 0x447962
mov esi, dword [edi + 0x14]
mov dword [ebp - 0x50], 0x2ec
mov ecx, esi
shl ecx, 4
add ecx, esi
mov esi, dword [edi + 0xc]
lea ecx, [ecx + ecx*2]
shl ecx, 1
sub esi, ecx
xor ecx, ecx
mov cl, byte [edx + eax*2]
xor edx, edx
mov dl, byte [esi + ecx + 0x8ca]
mov dword [ebp - 0x48], edx
jmp 0x448314
cmp bl, 0x61
jne 0x447a5f
mov al, byte [edx + eax*2]
xor dx, dx
mov dl, al
mov dword [ebp - 0x50], 0x301
sub edx, 0x10
movsx esi, dx
xor edx, edx
mov dword [ebp - 0x28], esi
mov dl, byte [ecx + 1]
cmp esi, edx
jg 0x447a35
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ebx, dword [eax + 0x14]
mov ecx, dword [eax + 0xc]
sub esi, ebx
mov edx, dword [ecx + esi*8 + 4]
lea esi, [ecx + esi*8 + 4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x54eb54], eax
mov eax, dword [esi]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov ecx, dword [0x54eb54]
mov esi, dword [0x54ef54]
mov edi, dword [0x54eb5c]
xor edx, edx
dec ecx
mov dword [0x54eb50], eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0xe8], ecx
cmp edx, dword [ebp - 0xe8]
jg 0x447a29
mov ebx, dword [edi + 0x14]
mov ecx, dword [edi + 0xc]
mov eax, edx
sub eax, ebx
mov ax, word [ecx + eax*2]
mov ecx, dword [esi + 0x14]
sub ax, 0x20
movsx ebx, ax
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0xc]
shl ecx, 1
sub ebx, ecx
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, dword [ebp - 0x48]
add ebx, ecx
mov eax, 1
mov dword [ebp - 0x48], ebx
add edx, eax
jmp 0x4479de
mov dword [ebp - 0x7c], 0xffffffff
jmp 0x448314
mov edx, dword [edi + 0x14]
and eax, 0xff
mov ecx, edx
shl ecx, 4
add ecx, edx
lea edx, [ecx + ecx*2]
mov ecx, dword [edi + 0xc]
shl edx, 1
sub ecx, edx
xor edx, edx
mov dl, byte [ecx + eax + 0x798]
mov dword [ebp - 0x48], edx
jmp 0x448314
cmp bl, 0x62
jne 0x447f14
mov eax, dword [0x550250]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x48], 0x15
mov dword [ebp - 0x7c], 0xfffffffe
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
jg 0x448314
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
mov edi, dword [ecx + 8]
mov ecx, dword [ebp - 0x14]
sub eax, dword [edi + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
lea ebx, [eax + edx*4]
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
sub ecx, eax
movzx ax, byte [edx + ecx*2]
movzx cx, byte [ebx + 2]
add eax, 0x20
cmp cx, ax
jne 0x447efc
movsx eax, word [ebx + 6]
add eax, 0xf
cmp eax, 7
ja case.0x447aec.12
jmp dword [eax*4 + 0x448f54]
mov bl, byte [ebx + 0xe]
test bl, bl
jbe case.0x447aec.12
xor dx, dx
mov dword [ebp - 0x7c], 0xfffffffc
mov dl, bl
jmp 0x447d9d
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xa4]
inc eax
push ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xa4], 2
mov edx, dword [edi + 0x14]
push eax
mov eax, dword [ebp - 0x28]
sub eax, edx
mov dword [ebp - 0x7c], 0xfffffffc
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
mov ecx, dword [eax + edx*4 + 0x10]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
movsx ecx, ax
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [ebp - 0x8c]
lea edx, [eax + eax*2]
mov dword [ebp - 0x40], edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp case.0x447aec.12
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c], 0xfffffffc
inc eax
mov dword [ebp - 0x20], eax
lea ecx, [eax + 0xf]
jmp 0x447da3
mov eax, dword [ebx + 8]
test eax, eax
jne 0x447cf6
lea ecx, [ebp - 0x84]
push edi
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x84]
mov ebx, dword [ebp - 0x28]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
lea edx, [ebp - 0x2c]
push ecx
push edx
call fcn.00447620
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x54f7c0]
push 1
inc eax
push ecx
push 0x424148
push eax
mov dword [ebp - 0x20], eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
push eax
push 0x424150
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov esi, eax
lea edx, [ebp - 0x94]
neg esi
lea eax, [ebp - 0x90]
push edx
sbb esi, esi
lea ecx, [ebp - 0x8c]
push eax
push ecx
neg esi
push 3
neg esi
call dword [fcn.00401248]
add esp, 0x10
test si, si
je 0x447cc4
mov ecx, dword [edi + 0x14]
mov eax, ebx
sub eax, ecx
mov dword [ebp - 0x7c], 0xfffffffc
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
movzx cx, byte [eax + edx*4 + 0xe]
sub ecx, 0x20
movsx ecx, cx
lea eax, [ecx*8]
sub eax, ecx
lea edx, [eax + eax*2]
mov dword [ebp - 0x40], edx
jmp case.0x447aec.12
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0x5e
jle 0x447cdb
mov dword [ebp - 0x7c], 0xfffffffc
add ecx, 0xffffffa2
jmp 0x447da3
mov dword [ebp - 0x7c], 0xfffffffb
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
mov dword [ebp - 0x40], ecx
jmp case.0x447aec.12
mov eax, dword [ebp - 0x20]
mov edx, dword [0x54f7c0]
push 1
inc eax
push edx
push 0x424148
push eax
mov dword [ebp - 0x7c], 0xfffffffc
mov dword [ebp - 0x20], eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
push eax
push 0x424150
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov esi, eax
lea eax, [ebp - 0x94]
neg esi
lea ecx, [ebp - 0x90]
push eax
sbb esi, esi
lea edx, [ebp - 0x8c]
push ecx
push edx
neg esi
push 3
neg esi
call dword [fcn.00401248]
add esp, 0x10
test si, si
je 0x447d98
movzx ax, byte [ebx + 0xe]
sub eax, 0x20
movsx ecx, ax
jmp 0x447ce2
movzx dx, byte [ebx + 0xc]
sub edx, 0x20
movsx ecx, dx
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x80]
mov ecx, dword [0x54ea00]
cmp ecx, eax
jle 0x447efc
add eax, 0x15
cmp ecx, eax
jge 0x447efc
mov eax, dword [ebp - 0x58]
mov ecx, dword [0x54ea04]
cmp ecx, eax
jle 0x447efc
add eax, 0x15
cmp ecx, eax
jge 0x447efc
mov ebx, dword [ebp - 0x28]
mov esi, dword [edi + 0x14]
mov edx, dword [edi + 0xc]
mov eax, ebx
sub eax, esi
lea ecx, [eax*8]
sub ecx, eax
movsx eax, word [edx + ecx*4 + 6]
lea esi, [edx + ecx*4]
add eax, 0xf
cmp eax, 7
ja case.0x447e10.11
jmp dword [eax*4 + 0x448f74]
mov al, byte [esi + 0xd]
neg al
sbb eax, eax
not eax
and eax, ebx
mov dword [ebp - 0x34], eax
jmp 0x447e63
mov al, byte [esi + 0xd]
test al, al
jne case.0x447e10.15
mov al, byte [esi + 0xc]
test al, al
jne 0x447e41
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x78], 0x7b
jmp 0x447e63
mov ecx, dword [0x54f7c0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
xor edx, edx
mov dl, byte [esi + 0xc]
cmp eax, edx
jge 0x447e35
mov dword [ebp - 0x34], 0
jmp 0x447e63
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], ebx
fld dword [0x4016b8]
mov dword [0x54f7c4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [0x550250]
fnstsw ax
test ah, 0x41
je 0x447e98
cmp word [0x54e978], 0
je 0x447e98
mov dword [ebp - 0x54], 0x3f333333
fld dword [ebp - 0x54]
fsub qword [0x4016b0]
mov eax, dword [0x54eb40]
lea edx, [ebp - 0xb8]
push edx
mov edx, dword [ebp - 0x58]
mov ecx, dword [eax]
add edx, 0xfffffffe
fstp dword [ebp - 0x12c]
fld dword [ebp - 0x12c]
push ecx
fstp dword [esp]
push 0x19
push 0x19
push 0x17c
push 0x140
push edx
mov edx, dword [ebp - 0x80]
add edx, 0xfffffffe
push edx
push 2
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x447efc
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x128]
mov eax, 1
add ecx, eax
mov dword [ebp - 0x28], ecx
jmp 0x447a8f
cmp bl, 0x63
jne 0x448160
xor ebx, ebx
mov dword [ebp - 0x48], 0
mov bl, byte [ecx]
mov dword [ebp - 0xf8], ebx
mov ebx, 1
mov dword [ebp - 0x28], ebx
cmp ebx, dword [ebp - 0xf8]
jg 0x448131
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 8]
mov ecx, ebx
sub ecx, dword [esi + 0x14]
lea edi, [ecx*8]
sub edi, ecx
mov ecx, dword [esi + 0xc]
lea esi, [ecx + edi*4]
mov cl, byte [ecx + edi*4 + 2]
cmp cl, byte [edx + eax*2]
je 0x447f6e
mov ecx, 1
add ebx, ecx
jmp 0x447f36
movzx cx, byte [esi]
mov dword [ebp - 0x28], ebx
lea eax, [ecx*8]
sub eax, ecx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
cmp eax, 0x2fc
mov dword [ebp - 0x7c], eax
jne 0x447f9b
mov dword [ebp - 0x50], 0x15e
jmp 0x447fb0
movzx ax, byte [esi + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx ecx, ax
mov dword [ebp - 0x50], ecx
mov edx, dword [esi + 0x10]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x54eb54], eax
mov eax, dword [esi + 0x10]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov ecx, dword [0x54eb54]
mov esi, dword [0x54ef54]
mov edi, dword [0x54eb5c]
dec ecx
mov dword [0x54eb50], eax
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x100], ecx
xor edx, edx
cmp edx, dword [ebp - 0x100]
jg 0x44803e
mov ebx, dword [edi + 0x14]
mov ecx, dword [edi + 0xc]
mov eax, edx
sub eax, ebx
mov ax, word [ecx + eax*2]
mov ecx, dword [esi + 0x14]
sub ax, 0x20
movsx ebx, ax
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
mov eax, dword [esi + 0xc]
shl ecx, 1
sub ebx, ecx
xor ecx, ecx
mov cl, byte [ebx + eax + 0x59a]
mov ebx, dword [ebp - 0x48]
add ebx, ecx
mov eax, 1
mov dword [ebp - 0x48], ebx
mov ebx, dword [ebp - 0x28]
add edx, eax
jmp 0x447ff0
mov edx, dword [ebp + 8]
mov eax, ebx
mov edi, dword [edx + 8]
mov esi, dword [edi + 0x14]
mov edx, dword [edi + 0xc]
sub eax, esi
lea ecx, [eax*8]
sub ecx, eax
mov ax, word [edx + ecx*4 + 6]
cmp ax, 0xfffc
lea esi, [edx + ecx*4]
jne 0x448091
mov eax, dword [ebp + 0xc]
cmp word [eax + 4], 0
jle 0x44810f
mov dword [ebp - 0x60], 0x1dc
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], 0x38f
mov dword [ebp - 0x50], 0x122
jmp 0x44810f
cmp ax, 0xfff7
jne 0x4480d8
mov eax, dword [0x54eb74]
mov ecx, dword [esi + 8]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb4], 0x8003
lea edx, [eax + eax*4]
shl edx, 0xa
add edx, eax
mov eax, dword [0x54ef68]
lea ecx, [eax + edx*8 + 0xde8]
lea edx, [ebp - 0xb4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je 0x44810f
jmp 0x448073
test ax, ax
jl 0x44810f
mov eax, dword [esi + 8]
test eax, eax
je 0x4480f6
push eax
call fcn.004a5a00
test ax, ax
je 0x4480f6
mov dword [ebp - 0x7c], 0xfffffffd
mov eax, dword [ebp - 0x7c]
test eax, eax
jl 0x44810f
mov cl, byte [esi + 0xc]
push 0
push 0
push 0
push ecx
call fcn.00448fd0
add dword [ebp - 0x48], eax
mov eax, ebx
mov ebx, dword [edi + 0x14]
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
cmp byte [eax + edx*4], 0
jne 0x448134
mov dword [ebp - 0x7c], 0xfffffffd
jmp 0x448134
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x448314
mov dword [ebp - 0x48], 0x15
mov dword [ebp - 0x28], 0xa
mov dword [ebp - 0x50], 0x2d7
mov dword [ebp - 0x7c], 0x2fc
jmp 0x448314
cmp bl, 0x64
jne 0x448199
mov ecx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x6c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 2]
cmp dword [ebp - 0x14], ecx
jle 0x448314
mov eax, dword [ebp - 0x58]
mov edx, dword [0x54f700]
add eax, 0x17
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x58], eax
jmp 0x448314
mov cl, byte [edx + eax*2]
mov esi, dword [edi + 0x14]
mov byte [ebp - 0x130], cl
mov ecx, esi
shl ecx, 4
add ecx, esi
mov esi, dword [edi + 0xc]
mov edi, dword [ebp - 0x130]
lea ecx, [ecx + ecx*2]
and edi, 0xff
shl ecx, 1
sub esi, ecx
xor ecx, ecx
mov cl, byte [esi + edi + 0x798]
movzx si, bl
mov dword [ebp - 0x48], ecx
lea ecx, [esi*8]
sub ecx, esi
lea ecx, [ecx + ecx*2 + 0x21a]
movsx ecx, cx
mov dword [ebp - 0x50], ecx
mov cl, byte [ebp - 0x130]
cmp cl, 4
jne 0x448314
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 0x10]
mov ecx, dword [ebp - 0x6c]
mov edi, dword [esi + 0x14]
mov esi, dword [esi + 0xc]
sub ecx, edi
lea ecx, [ecx + ecx*2]
movsx ecx, word [esi + ecx*4 + 4]
cmp dword [ebp - 0x14], ecx
jge 0x448314
cmp byte [edx + eax*2 + 2], 4
jne 0x448314
mov eax, dword [0x54eb74]
mov ecx, dword [0x54ef68]
mov ebx, 1
lea edx, [eax + eax*4]
mov edi, ebx
shl edx, 0xa
add edx, eax
xor eax, eax
mov al, byte [ecx + edx*8 + 0xe08]
mov dword [ebp - 0x108], eax
cmp edi, dword [ebp - 0x108]
jg 0x448306
mov eax, dword [0x54eb74]
lea edx, [eax + eax*4]
shl edx, 0xa
add edx, eax
mov eax, dword [0x54ef68]
mov eax, dword [eax + edx*8 + 0xe00]
mov ecx, dword [eax + 0xc]
mov edx, dword [eax + 0x14]
lea eax, [ebp - 0xb8]
sub ecx, edx
xor edx, edx
push eax
mov eax, dword [0x550250]
mov dl, byte [ecx + edi]
push eax
mov eax, dword [ebp - 0x50]
mov esi, edx
push 0x15
push 0x15
push eax
lea eax, [esi*8]
mov ecx, dword [0x54eb40]
sub eax, esi
mov edx, dword [ecx]
lea eax, [eax + eax*2]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x80]
push eax
push 5
push ecx
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x4482d4
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x54ef54]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [edx + 0xc]
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 1
sub ecx, eax
mov dl, byte [ecx + esi + 0x798]
mov ecx, dword [ebp - 0x80]
add ecx, edx
add edi, ebx
mov dword [ebp - 0x80], ecx
jmp 0x44824d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x48], 0
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x48]
test eax, eax
jle 0x4485ef
mov ecx, dword [ebp - 0x80]
add ecx, eax
cmp ecx, 0x319
jle 0x44833e
mov eax, dword [ebp - 0x58]
mov edx, dword [0x54f700]
add eax, 0x17
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x244
jg 0x448b43
mov eax, dword [ebp - 0x7c]
add eax, 5
cmp eax, 5
ja case.default.0x44835a
jmp dword [eax*4 + 0x448f94]
mov ecx, dword [ebp + 8]
mov edx, dword [0x54eb40]
mov eax, dword [ecx + 4]
mov esi, dword [edx]
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [0x550250]
push ecx
mov ecx, dword [ebp - 0x50]
push 0x15
push 0x15
push ecx
mov ecx, dword [ebp - 0x14]
mov ebx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub ecx, ebx
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
mov ecx, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x80]
push ecx
push eax
push 5
push edx
call dword [esi + 0x7c]
jmp 0x44862b
mov edx, dword [0x54eb54]
xor ebx, ebx
dec edx
xor edi, edi
mov dword [ebp - 0x114], edx
cmp edi, dword [ebp - 0x114]
jg 0x448476
mov eax, dword [0x54eb5c]
mov ecx, edi
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
mov ecx, dword [0x54eb40]
sub ax, 0x20
movsx esi, ax
lea eax, [ebp - 0xb8]
mov edx, dword [ecx]
push eax
mov eax, dword [0x550250]
push eax
lea eax, [esi*8]
sub eax, esi
push 0x15
push 0x15
push 0x301
lea eax, [eax + eax*2]
push eax
mov eax, dword [ebp - 0x58]
push eax
mov eax, dword [ebp - 0x80]
add eax, ebx
push eax
push 5
push ecx
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x448445
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x54ef54]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [edx + 0xc]
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 1
sub ecx, eax
mov eax, 1
mov dl, byte [ecx + esi + 0x798]
add ebx, edx
add edi, eax
jmp 0x4483c9
mov eax, dword [ebp - 0x58]
mov ebx, dword [ebp - 0x80]
lea edx, [ebp - 0xb8]
push edx
mov edx, dword [0x550250]
push edx
push 4
push 2
lea esi, [eax + 0xf]
mov eax, dword [0x54eb40]
push 0x216
push 0x4d4
lea edx, [ebx - 2]
mov ecx, dword [eax]
push esi
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x4484c8
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [0x550250]
mov eax, dword [0x54eb40]
push ecx
lea ecx, [edi + 2]
push 4
mov edx, dword [eax]
push ecx
mov ecx, 0x7c9
push 0x216
sub ecx, edi
push ecx
push esi
push ebx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x448516
mov edx, dword [0x54eb40]
push 0x7c
push 0x420b44
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x54ea00]
cmp eax, ebx
jle case.0x44835a.3
add ebx, edi
cmp eax, ebx
jge case.0x44835a.3
mov eax, dword [0x54ea04]
mov ecx, dword [ebp - 0x58]
cmp eax, ecx
jle case.0x44835a.3
add ecx, 0x15
cmp eax, ecx
jge case.0x44835a.3
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
mov cl, byte [edx + ecx*8]
test cl, cl
jne 0x44856c
movsx eax, word [eax + 2]
mov dword [ebp - 0x30], eax
jmp case.0x44835a.3
movsx ecx, word [eax + 2]
mov dword [ebp - 0x3c], ecx
jmp case.0x44835a.3
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0xb8]
push ecx
mov ecx, dword [ebp - 0x54]
mov eax, dword [edx + 4]
mov edx, dword [0x54eb40]
push ecx
push 0x15
mov esi, dword [edx]
push 0x15
push 0x2d7
jmp 0x448385
lea ecx, [ebp - 0xb8]
mov eax, dword [0x54eb40]
push ecx
mov ecx, dword [ebp - 0x54]
push ecx
mov ecx, dword [ebp - 0x40]
push 0x15
push 0x15
mov edx, dword [eax]
push 0x2ec
push ecx
mov ecx, dword [ebp - 0x58]
push ecx
mov ecx, dword [ebp - 0x80]
push ecx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge case.0x44835a.3
mov edx, dword [0x54eb40]
push 0x7c
push 0x420b44
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x80]
add ecx, eax
mov dword [ebp - 0x80], ecx
mov ecx, dword [ebp - 0x14]
mov eax, 1
add ecx, eax
jmp 0x4478ce
lea edx, [ebp - 0xb8]
mov eax, dword [0x54eb40]
push edx
mov edx, dword [ebp - 0x54]
push edx
mov edx, dword [ebp - 0x40]
push 0x15
push 0x15
mov ecx, dword [eax]
push 0x2d7
push edx
mov edx, dword [ebp - 0x58]
push edx
mov edx, dword [ebp - 0x80]
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge case.0x44835a.3
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
jmp 0x4485dd
mov edx, dword [ebp - 0x80]
mov eax, dword [0x54ea00]
cmp eax, edx
jle 0x44892f
mov ecx, dword [ebp - 0x48]
mov eax, edx
add eax, ecx
mov ecx, dword [0x54ea00]
cmp ecx, eax
jge 0x44892f
mov edx, dword [0x54ea04]
mov eax, dword [ebp - 0x58]
cmp edx, eax
jle 0x44892f
add eax, 0x15
mov ecx, edx
cmp ecx, eax
jge 0x44892f
cmp word [0x54e978], 0
je 0x448697
mov dword [ebp - 0x64], 0x190
jmp 0x44869e
mov dword [ebp - 0x60], 0x1ed
mov ecx, dword [ebp + 8]
mov ebx, dword [ebp - 0x28]
mov eax, ebx
mov edi, dword [ecx + 8]
sub eax, dword [edi + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [edi + 0xc]
lea esi, [eax + edx*4]
movsx eax, word [eax + edx*4 + 6]
add eax, 0xa
cmp eax, 8
ja case.0x4486cc.8
jmp dword [eax*4 + 0x448fac]
lea ecx, [ebp - 0x84]
push edi
push ecx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x84]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0xc]
push ecx
call fcn.0045e530
lea edx, [ebp - 0x84]
mov dword [ebp - 0xb8], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
movsx eax, word [ebp - 0xb8]
test eax, eax
mov dword [ebp - 0x78], eax
jne 0x44892f
mov edx, dword [edi + 0x14]
mov ecx, dword [edi + 0xc]
sub ebx, edx
lea eax, [ebx*8]
sub eax, ebx
xor edx, edx
mov dl, byte [ecx + eax*4 + 2]
mov dword [ebp - 0x78], edx
jmp 0x44892f
mov al, byte [esi + 0xc]
mov dword [ebp - 0x18], ebx
test al, al
jne 0x448768
movsx ecx, word [esi + 4]
mov eax, dword [esi + 8]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x30], eax
jmp 0x44892f
cmp al, 1
jne 0x44879f
movzx ax, byte [esi + 0xe]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov cl, byte [esi + 0xd]
test ecx, ecx
mov dword [ebp - 0x5c], ecx
jne 0x44878c
mov dword [ebp - 0x34], 0x11
jmp 0x44892f
neg ax
sbb eax, eax
and eax, 2
add eax, 0x10
mov dword [ebp - 0x34], eax
jmp 0x44892f
cmp al, 2
jne 0x4487ae
mov edx, dword [esi + 8]
mov dword [ebp - 0x74], edx
jmp 0x44892f
cmp al, 3
jne 0x4487c6
xor eax, eax
mov dword [ebp - 0x34], 0xb
mov al, byte [esi + 0xd]
mov dword [ebp - 0x5c], eax
jmp 0x44892f
cmp al, 4
jne 0x4487e5
movzx cx, byte [esi + 0xe]
add ecx, 0xb
xor eax, eax
mov al, byte [esi + 0xd]
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x5c], eax
jmp 0x44892f
cmp al, 5
jne 0x4487fb
mov ecx, dword [esi + 8]
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0x5c], ecx
jmp 0x44892f
cmp al, 6
jne 0x44892f
mov edx, dword [esi + 8]
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 0x5c], edx
jmp 0x44892f
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x44], ebx
cmp word [eax + 4], 0
jl case.0x4486cc.8
jmp 0x4488b1
mov cx, word [esi + 4]
mov dword [ebp - 0x18], ebx
push ecx
mov dword [ebp - 0x34], ebx
call fcn.004a5600
test eax, eax
mov dword [ebp - 0x78], eax
jne 0x44892f
xor edx, edx
mov dl, byte [esi + 2]
mov dword [ebp - 0x78], edx
jmp 0x44892f
movsx eax, word [esi + 4]
mov dword [ebp - 0x30], eax
mov eax, dword [esi + 8]
mov esi, dword [esi + 0x18]
mov dword [ebp - 0x68], eax
mov ecx, dword [esi + 0x14]
mov edx, dword [esi + 0xc]
shl ecx, 3
sub edx, ecx
movsx ecx, word [edx + 0xa]
mov dword [ebp - 0xac], eax
mov eax, dword [0x54eb74]
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0xb4], 0x8003
lea edx, [eax + eax*4]
shl edx, 0xa
add edx, eax
mov eax, dword [0x54ef68]
lea ecx, [eax + edx*8 + 0xde8]
lea edx, [ebp - 0xb4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je case.0x4486cc.8
mov dword [ebp - 0x60], 0x1dc
mov dword [ebp - 0x64], 0
jmp 0x44892f
mov eax, dword [esi + 0x18]
mov edi, dword [esi + 8]
mov dword [ebp - 0x5c], edi
mov ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
shl ecx, 3
sub edx, ecx
cmp byte [edx + 8], 1
jne 0x4488ee
movsx eax, word [esi + 4]
push eax
mov dword [ebp - 0x30], eax
call fcn.004e0d50
cmp eax, edi
jge case.0x4486cc.8
jmp 0x4488b1
mov eax, dword [0x54eb74]
mov edx, dword [0x54ef68]
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 0xac], edi
lea ecx, [eax + eax*4]
mov dword [ebp - 0xb4], 0x8003
shl ecx, 0xa
add ecx, eax
lea eax, [edx + ecx*8 + 0xde8]
lea ecx, [ebp - 0xb4]
push eax
push ecx
jmp 0x4488a6
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xb8]
mov esi, dword [ebp - 0x64]
mov eax, dword [0x54eb40]
push ecx
mov ecx, dword [0x550250]
mov edi, dword [ebp - 0x80]
mov edx, dword [eax]
push ecx
mov ecx, dword [ebp - 0x7c]
push 0x15
push 5
push ecx
mov ecx, dword [ebp - 0x58]
push esi
push ecx
push edi
push 2
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x448979
mov edx, dword [0x54eb40]
push 0x7c
push 0x420b44
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xb8]
mov eax, dword [0x54eb40]
push ecx
mov ecx, dword [0x550250]
push ecx
mov ecx, dword [ebp - 0x48]
mov edx, dword [eax]
push 0x15
lea ebx, [ecx - 5]
sub esi, ecx
mov ecx, dword [ebp - 0x58]
push ebx
mov ebx, dword [ebp - 0x7c]
add esi, 0x195
push ebx
push esi
add edi, 5
push ecx
push edi
push 2
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x4489cd
mov edx, dword [0x54eb40]
push 0x7c
push 0x420b44
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp + 8]
xor eax, eax
mov al, byte [ecx]
mov ecx, dword [ebp - 0x28]
cmp ecx, eax
jg case.0x44835a.3
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7c], 3
mov ecx, dword [edx + 8]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 6], 0
lea eax, [eax + edx*4]
jl 0x448a28
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x80]
mov al, byte [eax + 0xc]
add ecx, 3
add edx, 3
push ecx
push edx
push 0xffffffffffffffff
push eax
call fcn.00448fd0
add eax, 3
mov dword [ebp - 0x7c], eax
mov ecx, dword [0x54eb54]
mov dword [ebp - 0x1c], 0
dec ecx
mov dword [ebp - 0x11c], ecx
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
jg case.0x44835a.3
mov ecx, eax
mov eax, dword [0x54eb5c]
mov edx, dword [eax + 0x14]
sub ecx, edx
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x80]
mov edx, dword [ebp - 0x7c]
sub ax, 0x20
movsx edi, ax
lea ebx, [ecx + edx]
lea edx, [ebp - 0xb8]
push edx
mov edx, dword [0x550250]
push edx
mov edx, dword [ebp - 0x60]
mov eax, dword [0x54eb40]
push 0x11
push 0xa
lea esi, [edi + edi*4]
push edx
mov edx, dword [ebp - 0x58]
mov ecx, dword [eax]
add edx, 3
shl esi, 1
push esi
push edx
lea edx, [ebx - 1]
push edx
push 5
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x448abf
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xb8]
mov eax, dword [0x54eb40]
push ecx
mov ecx, dword [0x550250]
push ecx
mov ecx, dword [ebp - 0x50]
push 0xf
mov edx, dword [eax]
push 0xa
push ecx
mov ecx, dword [ebp - 0x58]
push esi
add ecx, 4
push ecx
push ebx
push 5
push eax
call dword [edx + 0x7c]
test eax, eax
fnclex
jge 0x448b06
mov edx, dword [0x54eb40]
push 0x7c
push 0x420b44
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [0x54ef54]
mov esi, dword [ebp - 0x7c]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
mov ecx, dword [edx + 0xc]
xor edx, edx
lea eax, [eax + eax*2]
shl eax, 1
sub ecx, eax
mov eax, 1
mov dl, byte [ecx + edi + 0x59a]
mov ecx, dword [ebp - 0x1c]
add esi, edx
add ecx, eax
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x1c], ecx
jmp 0x448a3c
fld dword [0x550250]
fcomp dword [0x4013b8]
fnstsw ax
test ah, 1
jne 0x448eee
cmp word [ebp - 0x38], 0
je 0x448c02
fld dword [0x54f704]
fmul qword [0x4016a8]
call sub.MSVBVM60.DLL__CIsin
fstp dword [ebp - 0x70]
fld dword [0x54eaac]
fadd dword [0x54f704]
fstp dword [0x54f704]
fld dword [0x54f704]
fcomp dword [0x4016a0]
fnstsw ax
test ah, 0x41
jne 0x448ba8
mov dword [0x54f704], 0
fld dword [ebp - 0x70]
fadd dword [0x40169c]
mov ecx, dword [0x54eb40]
lea edx, [ebp - 0xb8]
push edx
push 0x3f800000
mov esi, dword [ecx]
push 0x1c
push 0x1a
push 0x2c
push 0x1ac
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
push eax
mov eax, dword [0x54eb40]
push 0x303
push 2
push eax
call dword [esi + 0x7c]
test eax, eax
fnclex
jge 0x448c02
mov ecx, dword [0x54eb40]
push 0x7c
push 0x420b44
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x34]
cmp esi, 1
jl 0x448c79
cmp esi, 9
jg 0x448c79
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x84]
mov edi, dword [edx + 8]
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ebx, dword [edi + 0x14]
mov edx, dword [edi + 0xc]
mov eax, esi
push 0
sub eax, ebx
push 0xa7
lea ecx, [eax*8]
sub ecx, eax
mov eax, dword [edx + ecx*4 + 8]
push eax
mov eax, dword [ebp - 0x84]
mov ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
sub esi, ebx
lea ecx, [esi*8]
sub ecx, esi
lea eax, [edx + ecx*4 + 0x10]
mov ecx, dword [ebp - 0x78]
push eax
push ecx
call fcn.0043ea40
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
jmp 0x448e36
cmp esi, 0xa
jne 0x448ca8
mov edx, 0x424158
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x5c]
push 0
push 0xa7
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 0x2b
jmp 0x448e25
cmp esi, 0xb
jne 0x448cd7
mov edx, 0x424168
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x5c]
push 0
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x2a
jmp 0x448e25
cmp esi, 0xc
jne 0x448ce3
mov edx, 0x42418c
jmp 0x448d4b
cmp esi, 0xd
jne 0x448d12
mov edx, 0x4241bc
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x5c]
push 0
push 0xa7
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 0x2c
jmp 0x448e25
cmp esi, 0xe
jne 0x448d41
mov edx, 0x4241f0
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x5c]
push 0
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x2c
jmp 0x448e25
cmp esi, 0xf
jne 0x448d70
mov edx, 0x424220
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x5c]
push 0
push 0xa7
lea edx, [ebp - 0x8c]
push ecx
push edx
push 0x2c
jmp 0x448e25
cmp esi, 0x10
jne 0x448d9f
mov edx, 0x424250
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x5c]
push 0
push 0xa7
lea ecx, [ebp - 0x8c]
push eax
push ecx
push 0x2f
jmp 0x448e25
cmp esi, 0x11
jne 0x448dcc
mov edx, 0x424278
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
movsx edx, word [ebp - 0x24]
push 0
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x30
jmp 0x448e25
cmp esi, 0x12
jne 0x448dfb
mov edx, 0x424294
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x5c]
push ecx
push 0xa7
lea eax, [ebp - 0x8c]
push edx
push eax
push 0x2e
jmp 0x448e25
cmp esi, 0x13
jne 0x448e36
mov edx, 0x4242b8
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x5c]
push 0
push 0xa7
lea edx, [ebp - 0x8c]
push ecx
push edx
push 0x2d
call fcn.0043ea40
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x30]
test eax, eax
je 0x448e4f
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x68]
push 0
push 0
push ecx
push edx
push eax
call fcn.004dc9b0
mov eax, dword [ebp - 0x3c]
test eax, eax
jle 0x448e5c
push eax
call fcn.004d94c0
mov eax, dword [ebp - 0x74]
test eax, eax
jle 0x448e69
push eax
call fcn.004e3070
mov esi, dword [ebp - 0x44]
test esi, esi
jle 0x448eee
mov eax, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x88]
mov edi, dword [eax + 8]
push edi
push ecx
call ebx
lea edx, [ebp - 0x84]
push edi
push edx
call ebx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp - 0x88]
add eax, 4
mov ebx, dword [ecx + 0x14]
push eax
mov eax, esi
sub eax, ebx
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x18]
mov eax, dword [ebp - 0x84]
push ecx
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
sub esi, ecx
lea edx, [esi*8]
sub edx, esi
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.00444ec0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x84]
push edx
call esi
lea eax, [ebp - 0x88]
push eax
call esi
wait
push 0x448f3c
jmp 0x448f3b
ret