Function at 0x44c3c0
Capabilities:
Check http status code
Enumerate pe sections
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x405216
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x218
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4017c8
xor esi, esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x68], esi
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edi, dword [ebp + 8]
push edi
call fcn.0045a800
mov byte [ebp - 0x3c], al
mov dword [ebp - 4], 4
movzx ax, al
cmp word [0x53a0cc], ax
jle 0x44c4be
mov dword [ebp - 4], 5
mov word [0x53a0cc], ax
mov ebx, 6
mov dword [ebp - 4], ebx
cmp dword [0x538ae8], 0x1dc
jle 0x44c502
mov dword [ebp - 4], 7
cmp dword [0x538c18], esi
jne 0x44c522
mov dword [ebp - 4], 8
mov dword [0x538c18], 0x3e7
mov dword [ebp - 4], 9
mov word [0x538c16], si
jmp 0x44c522
mov dword [ebp - 4], 0xa
cmp dword [0x538c18], 0x3e7
jne 0x44c522
mov dword [ebp - 4], 0xb
mov dword [0x538c18], esi
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 4], 0xd
cmp word [0x538a68], si
je 0x44c592
mov dword [ebp - 4], 0xe
mov eax, dword [0x53a11c]
fld dword [0x538b68]
fadd dword [eax + 0x34]
fstp dword [eax + 0x34]
mov dword [ebp - 4], 0xf
mov ecx, dword [0x53a11c]
fld dword [ecx + 0x34]
fcomp dword [0x40172c]
fnstsw ax
test ah, 0x41
jne 0x44c592
mov dword [ebp - 4], 0x10
push edi
call fcn.00449730
mov dword [ebp - 4], 0x11
mov edx, dword [0x53a11c]
mov dword [edx + 0x34], esi
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov ax, word [0x53a0cc]
cmp word [0x53a0d4], ax
je 0x44f75d
mov dword [ebp - 4], 0x14
call fcn.0044c1a0
mov dword [ebp - 4], 0x15
call fcn.00528660
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, 0x53a0d8
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
mov dword [ebp - 4], 0x17
mov edx, dword [ebp + 0x10]
mov edx, dword [edx]
mov ecx, 0x53a0dc
call edi
mov dword [ebp - 4], 0x18
mov ax, word [0x53a0cc]
mov word [0x53a0d4], ax
mov dword [ebp - 4], 0x19
push esi
call fcn.0043edc0
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x53a11c]
mov dword [ecx + 0x30], esi
mov dword [ebp - 4], 0x1b
mov dword [0x539838], ebx
mov dword [ebp - 4], 0x1c
mov eax, dword [0x538c08]
mov edx, dword [eax]
push 0xff
push eax
call dword [edx + 0x3c]
fnclex
cmp eax, esi
jge 0x44c666
push 0x3c
push 0x4222d8
mov ecx, dword [0x538c08]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d
mov ebx, 1
mov dword [ebp - 0x24], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, 8
cmp ebx, eax
jg 0x44f755
mov dword [ebp - 4], 0x1e
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
movsx ecx, word [0x53a0cc]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
xor edx, edx
mov dl, byte [eax + 8]
cmp ebx, edx
jg 0x44f73f
mov dword [ebp - 4], 0x20
mov edx, dword [eax + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
mov dl, byte [eax]
mov dword [ebp - 4], 0x21
cmp dl, 1
jne 0x44c8fb
mov dword [ebp - 4], 0x22
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x44c738
push 0x40
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x23
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
movsx eax, word [0x53a0cc]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 4]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [0x5396b0], ecx
mov dword [ebp - 4], 0x24
mov dword [0x5396b8], 0
mov dword [ebp - 4], 0x25
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
cmp byte [ecx], 0
jbe 0x44f73f
mov dword [ebp - 4], 0x26
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x27
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
add eax, edx
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x20], ecx
mov dword [ebp - 4], 0x28
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx]
add edx, 0x64
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x29
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
mov dword [ebp - 0x1cc], edx
fild dword [ebp - 0x1cc]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x2a
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
xor edx, edx
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0x2b
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
jmp 0x44f73f
mov dword [ebp - 4], 0x2c
cmp dl, 2
jne 0x44c91d
mov dword [ebp - 4], 0x2d
movsx edx, word [eax + 2]
push edx
call fcn.0043edc0
jmp 0x44f73f
mov dword [ebp - 4], 0x2e
cmp dl, 3
jne 0x44c9d0
mov dword [ebp - 4], 0x2f
movsx ecx, word [eax + 2]
sub ecx, 0
je 0x44c995
dec ecx
je 0x44c96e
dec ecx
jne 0x44f73f
mov dword [ebp - 4], 0x33
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x53a0d8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x44f73f
mov dword [ebp - 4], 0x32
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x53a0dc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x44f73f
mov dword [ebp - 4], 0x30
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x53a0d8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x31
xor edx, edx
mov ecx, 0x53a0dc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x44f73f
mov dword [ebp - 4], 0x34
cmp dl, 4
jne 0x44cd54
mov dword [ebp - 4], 0x35
mov cx, word [eax + 2]
test cx, cx
jle 0x44f73f
mov dword [ebp - 4], 0x36
cmp word [0x538a8c], 0
je 0x44cb11
mov dword [ebp - 4], 0x37
mov eax, dword [eax + 8]
mov edx, dword [0x538c1c]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x4243c0
movsx ecx, cx
mov eax, dword [0x538c6c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44ca8d
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x38
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44cc31
push 0xf4
push 0x420690
mov edx, dword [0x538c1c]
push edx
jmp 0x44cc2a
mov dword [ebp - 4], 0x39
mov eax, dword [eax + 8]
mov edx, dword [0x538c1c]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x4243c0
movsx ecx, cx
mov eax, dword [0x538c6c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44cba1
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44cc31
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
mov edx, dword [0x53a0c8]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1d8], edx
movsx edx, word [eax + 2]
mov eax, dword [0x538c6c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1d8]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x3c
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x3d
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x3e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x3f
jmp 0x44f739
mov dword [ebp - 4], 0x40
cmp dl, 5
jne 0x44cfa8
mov dword [ebp - 4], 0x41
mov dx, word [eax + 2]
test dx, dx
jle 0x44f73f
mov dword [ebp - 4], 0x42
cmp word [0x538a8c], 0
je 0x44ce01
mov dword [ebp - 4], 0x43
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44cea3
jmp 0x44ce8b
mov dword [ebp - 4], 0x44
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44cea3
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x45
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x46
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x47
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x49
jmp 0x44f739
mov dword [ebp - 4], 0x4a
cmp dl, 6
jne 0x44d31c
mov dword [ebp - 4], 0x4b
mov dx, word [eax + 2]
test dx, dx
jle 0x44f73f
mov dword [ebp - 4], 0x4c
cmp word [0x538a8c], 0
je 0x44d0e1
mov dword [ebp - 4], 0x4d
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44d068
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44d223
jmp 0x44d20b
mov dword [ebp - 4], 0x4f
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44d183
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x50
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44d223
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x51
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x52
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x53
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x55
jmp 0x44f739
mov dword [ebp - 4], 0x56
cmp dl, 7
jne 0x44d84b
mov dword [ebp - 4], 0x57
cmp word [eax + 2], 0
jle 0x44f73f
mov dword [ebp - 4], 0x58
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x59
xor eax, eax
mov al, byte [ecx + 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x5a
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov eax, dword [eax + 0xc]
sub eax, ecx
mov dword [eax], 0
mov dword [ebp - 4], 0x5b
cmp word [0x538a8c], 0
je 0x44d522
mov dword [ebp - 4], 0x5c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov ecx, dword [0x538c1c]
mov ecx, dword [ecx]
push 0
push 0
push 0
push edx
mov edx, dword [ebp - 0x38]
push edx
push 0xffffffffffffffff
push 0x4240cc
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, dword [0x538c74]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
push edx
mov dword [ebp - 0x1ec], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov eax, dword [0x538c1c]
push eax
mov ecx, dword [ebp - 0x1ec]
call dword [ecx + 0xf0]
fnclex
test eax, eax
jge 0x44d450
push 0xf0
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x5d
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44d6c4
mov dword [ebp - 4], 0x5f
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x60
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
push 0
push 0
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x38]
push edx
push ebx
push eax
call dword [ecx + 0xf4]
fnclex
test eax, eax
jge 0x44d516
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x61
jmp 0x44d463
mov dword [ebp - 4], 0x62
lea eax, [edx + edx*2]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
mov dword [ebp - 0x1f0], ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [0x538c1c]
mov edx, dword [edx]
push 0
push ecx
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 5
push ecx
push 0
push 0
push 0
push 0x4240cc
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*4 + 2]
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
mov dword [ebp - 0x1f4], edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edx, dword [0x538c1c]
push edx
mov eax, dword [ebp - 0x1f4]
call dword [eax + 0xf0]
fnclex
test eax, eax
jge 0x44d5e5
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x63
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x64
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44d6c4
mov dword [ebp - 4], 0x65
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x66
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1f0]
push eax
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
push eax
push 0
push 0
push ebx
push ecx
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44d6b8
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x67
jmp 0x44d5f8
mov dword [ebp - 4], 0x68
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 4], 0
mov dword [ebp - 4], 0x69
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx + 3]
add edx, 5
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x6a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov dword [ebp - 0x1f8], edx
fild dword [ebp - 0x1f8]
fmul dword [0x538b5c]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x6b
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x6c
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*4], eax
mov dword [ebp - 4], 0x6d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x6e
jmp 0x44f739
mov dword [ebp - 4], 0x6f
cmp dl, 8
jne 0x44dcc9
mov dword [ebp - 4], 0x70
mov cx, word [eax + 2]
test cx, cx
jle 0x44f73f
mov dword [ebp - 4], 0x71
cmp word [0x538a8c], 0
je 0x44da02
mov dword [ebp - 4], 0x72
mov eax, dword [eax + 8]
mov edx, dword [0x538c1c]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x4243c0
movsx ecx, cx
mov eax, dword [0x538c6c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44d908
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x73
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44d98a
push 0xf4
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x74
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44dba6
push 0xf4
push 0x420690
mov edx, dword [0x538c1c]
push edx
jmp 0x44db9f
mov dword [ebp - 4], 0x75
mov eax, dword [eax + 8]
mov edx, dword [0x538c1c]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x4243c0
movsx ecx, cx
mov eax, dword [0x538c6c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44da92
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x76
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44db22
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x77
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44dba6
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x78
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
mov edx, dword [0x53a0c8]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1d8], edx
movsx edx, word [eax + 2]
mov eax, dword [0x538c6c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 3]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1d8]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x79
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x7a
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x7b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x7c
jmp 0x44f739
mov dword [ebp - 4], 0x7d
cmp dl, 9
jne 0x44e008
mov dword [ebp - 4], 0x7e
cmp word [0x538a8c], 0
je 0x44de34
mov dword [ebp - 4], 0x7f
mov eax, dword [eax + 8]
mov edx, dword [0x538c1c]
mov ecx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x42439c
push ebx
mov edx, dword [0x538c1c]
push edx
call dword [ecx + 0xf0]
fnclex
test eax, eax
jge 0x44dd46
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x80
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44ddbc
push 0xf4
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x81
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44df9f
push 0xf4
push 0x420690
mov edx, dword [0x538c1c]
push edx
jmp 0x44df98
mov dword [ebp - 4], 0x82
mov eax, dword [eax + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push 0
push 0x4251bc
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44de97
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x83
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44df1b
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x84
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44df9f
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x85
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x86
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x63
mov dword [ebp - 4], 0x87
mov dword [0x539838], 0xc8
mov dword [ebp - 4], 0x88
mov word [0x53a0e0], bx
jmp 0x44f73f
mov dword [ebp - 4], 0x89
cmp dl, 0xa
jne 0x44e1cb
mov dword [ebp - 4], 0x8a
mov eax, dword [eax + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx]
test al, al
jbe 0x44e043
mov dword [ebp - 4], 0x8b
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x539710], edx
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 1]
test al, al
jbe 0x44e090
mov dword [ebp - 4], 0x8d
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x539714], edx
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 2]
test al, al
jbe 0x44e0dd
mov dword [ebp - 4], 0x8f
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x539718], edx
mov dword [ebp - 4], 0x90
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 3]
test al, al
jbe 0x44e12a
mov dword [ebp - 4], 0x91
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x53971c], edx
mov dword [ebp - 4], 0x92
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 4]
test al, al
jbe 0x44e177
mov dword [ebp - 4], 0x93
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x539720], edx
mov dword [ebp - 4], 0x94
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
sub ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ecx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 5]
test al, al
jbe 0x44f73f
mov dword [ebp - 4], 0x95
movzx ax, al
dec eax
movsx ecx, ax
mov dword [0x539724], ecx
jmp 0x44f73f
mov dword [ebp - 4], 0x96
cmp dl, 0xd
jne 0x44e935
mov dword [ebp - 4], 0x97
mov ax, word [eax + 2]
test ax, ax
jle 0x44f73f
mov dword [ebp - 4], 0x98
push 0x4240e0
movsx edx, ax
mov eax, dword [0x538c7c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x538c1c]
mov edx, dword [eax]
lea ecx, [ebp - 0xa0]
push ecx
push ebx
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e255
push 0xec
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x99
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 4], 0
mov dword [ebp - 4], 0x9a
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x9b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x204], edx
fild dword [ebp - 0x204]
fmul dword [0x538b60]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x9c
mov edx, dword [0x53a0c8]
push edx
lea eax, [ebp - 0x9c]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
mov eax, dword [0x53a0c8]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
add eax, 4
push eax
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
push eax
push 0
push ebx
mov edx, dword [0x538c1c]
push edx
call dword [ecx + 0xf8]
fnclex
test eax, eax
jge 0x44e3d0
push 0xf8
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
lea ecx, [ebp - 0x98]
push ecx
call edi
lea edx, [ebp - 0x9c]
push edx
call edi
mov dword [ebp - 4], 0x9d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx ecx, word [ecx + eax*4 + 2]
mov eax, dword [0x538c7c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*8 + 4]
mov eax, 2
sub eax, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov dword [edx + eax*4], ecx
mov dword [ebp - 4], 0x9e
mov eax, dword [0x53a0c8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
shl ecx, 4
mov edx, dword [eax + 0xc]
mov eax, dword [ecx + edx + 0x14]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x208], edx
mov ecx, dword [eax + 0xc]
lea eax, [edx*4]
mov ebx, ecx
sub ebx, eax
mov eax, dword [ebx + 4]
mov ebx, 2
sub ebx, edx
cdq
idiv dword [ecx + ebx*4]
dec eax
mov edx, 3
sub edx, dword [ebp - 0x208]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0x9f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0xa0
test al, al
je 0x44e832
cmp al, 1
je 0x44e832
cmp al, 2
je 0x44e832
cmp al, 3
je 0x44e832
mov dword [ebp - 4], 0xa5
cmp al, 4
je 0x44e750
cmp al, 5
je 0x44e750
cmp al, 6
je 0x44e750
cmp al, 7
je 0x44e750
mov dword [ebp - 4], 0xaa
cmp al, 8
je 0x44e653
cmp al, 9
je 0x44e653
cmp al, 0xa
je 0x44e653
cmp al, 0xb
je 0x44e653
mov dword [ebp - 4], 0xaf
cmp al, 0xc
je 0x44e577
cmp al, 0xd
je 0x44e577
cmp al, 0xe
je 0x44e577
cmp al, 0xf
jne 0x44f73f
mov dword [ebp - 4], 0xb0
xor dx, dx
mov dl, al
sub edx, 3
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xb1
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xb2
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xb3
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 2
jmp 0x44f73f
mov dword [ebp - 4], 0xab
xor cx, cx
mov cl, al
inc ecx
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xac
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xad
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x208], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
mov edx, 2
sub edx, ecx
mov ecx, 0x12c
sub ecx, dword [eax + edx*4]
mov edx, 5
sub edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x20c]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xae
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 2
jmp 0x44f73f
mov dword [ebp - 4], 0xa6
movzx ax, al
add eax, 5
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa7
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa8
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xa9
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 1
jmp 0x44f73f
mov dword [ebp - 4], 0xa1
xor cx, cx
mov cl, al
add ecx, 9
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa2
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa3
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x12c
sub edx, eax
mov eax, 5
sub eax, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa4
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 1
jmp 0x44f73f
mov dword [ebp - 4], 0xb4
cmp dl, 0xe
jne 0x44edbd
mov dword [ebp - 4], 0xb5
mov dx, word [eax + 2]
test dx, dx
jle 0x44f73f
mov dword [ebp - 4], 0xb6
cmp word [0x538a8c], 0
je 0x44eaec
mov dword [ebp - 4], 0xb7
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44e9f5
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], pe_nt_image_headers32
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44ea7d
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xb9
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
add ecx, 2
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 3]
push ecx
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44ecc4
jmp 0x44ecac
mov dword [ebp - 4], 0xba
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44eb8e
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xbb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44ec2e
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
movzx cx, byte [eax]
add ecx, 2
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 3]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x44ecc4
push 0xf4
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbd
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xbe
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0xbf
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xc0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xc1
jmp 0x44f739
mov dword [ebp - 4], 0xc2
cmp dl, 0xf
jne 0x44f266
mov dword [ebp - 4], 0xc3
cmp word [eax + 2], 0
jle 0x44f73f
mov dword [ebp - 4], 0xc4
mov eax, dword [eax + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
shl eax, 3
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0xc5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea edx, [eax + eax*2]
shl edx, 1
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
mov dword [ebp - 4], 0xc6
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xc7
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x5398c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
mov dword [ebp - 4], 0xc8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x5398c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 2
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xc9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x5398c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 3
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 0xc]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xca
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax + 4], 0xffffffff
jne 0x44f0c4
mov dword [ebp - 4], 0xcb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
movsx ecx, word [0x53a0cc]
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 4]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [eax], ecx
mov dword [ebp - 4], 0xcc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx + 2]
mov edx, 4
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xcd
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x62
jmp 0x44f73f
mov dword [ebp - 4], 0xce
mov edx, dword [ebp + 8]
mov edx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
movsx eax, word [edx + eax*4 + 2]
mov edx, dword [0x5398c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*8]
mov edx, dword [edx + 0xc]
fild dword [edx + eax*4 + 0x18]
fmul dword [0x538b5c]
fstp dword [ecx + 8]
mov dword [ebp - 4], 0xcf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x53a0c8]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x5398c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4 + 0x10]
mov dword [edx], eax
mov dword [ebp - 4], 0xd0
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 4
sub edx, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd1
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x20c], eax
mov edx, 3
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 5
sub edx, ecx
mov ecx, dword [ebp - 0x20c]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd2
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax], 0
jne 0x44f253
mov dword [ebp - 4], 0xd3
mov dword [ecx + 0xc], 0xf
jmp 0x44f73f
mov dword [ebp - 4], 0xd4
mov dword [ecx + 0xc], 0x13
jmp 0x44f73f
mov dword [ebp - 4], 0xd5
cmp dl, 0x10
jne 0x44f4c0
mov dword [ebp - 4], 0xd6
mov dx, word [eax + 2]
test dx, dx
jle 0x44f73f
mov dword [ebp - 4], 0xd7
cmp word [0x538a8c], 0
je 0x44f313
mov dword [ebp - 4], 0xd8
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44f3b5
jmp 0x44f39d
mov dword [ebp - 4], 0xd9
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x4240cc
movsx ecx, dx
mov eax, dword [0x538c74]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44f3b5
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xda
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xdb
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x10
mov dword [ebp - 4], 0xdc
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov edx, dword [ecx + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 0x14]
xor edx, edx
mov dl, byte [eax + 3]
push edx
push ebx
xor edx, edx
mov dl, byte [eax + 2]
push edx
movsx eax, word [ecx + 2]
push eax
movsx ecx, word [ecx]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00446940
mov dword [ebp - 4], 0xde
mov eax, dword [0x53a11c]
mov dword [eax + 0x30], ebx
mov dword [ebp - 4], 0xdf
jmp 0x44f739
mov dword [ebp - 4], 0xe0
cmp dl, 0x11
jne 0x44f73f
mov dword [ebp - 4], 0xe1
mov dx, word [eax + 2]
test dx, dx
jle 0x44f73f
mov dword [ebp - 4], 0xe2
cmp word [0x538a8c], 0
je 0x44f56d
mov dword [ebp - 4], 0xe3
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x4243c0
movsx ecx, dx
mov eax, dword [0x538c6c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44f60f
jmp 0x44f5f7
mov dword [ebp - 4], 0xe4
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x538c1c]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x4243c0
movsx ecx, dx
mov eax, dword [0x538c6c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0xf0]
fnclex
test eax, eax
jge 0x44f60f
push 0xf0
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
mov edx, dword [0x53a0c8]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1d8], edx
movsx edx, word [eax + 2]
mov eax, dword [0x538c6c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1d8]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0xe6
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xe7
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0xe8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xe9
push ebx
call fcn.0044c290
mov dword [ebp - 4], 0xea
mov eax, 1
add ebx, eax
mov dword [ebp - 0x24], ebx
jmp 0x44c681
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x44f76f
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0xeb
cmp dword [0x538ae8], 0x19a
jle 0x44f80a
mov dword [ebp - 4], 0xec
call fcn.0043f4a0
mov dword [ebp - 4], 0xed
mov edx, dword [0x53a11c]
mov edx, dword [edx + 0x30]
test edx, edx
jle 0x44f7d9
mov dword [ebp - 4], 0xee
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
push edx
movsx edx, word [eax + 2]
push edx
movsx eax, word [eax]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045a020
mov dword [ebp - 4], 0xef
mov eax, dword [0x538ae8]
cmp eax, 0x1ce
jle 0x44f80a
cmp eax, 0x1da
jge 0x44f80a
mov eax, dword [0x538ae4]
cmp eax, 0x300
jle 0x44f80a
cmp eax, 0x316
jl 0x459f52
mov dword [ebp - 4], 0xf0
push 0x3f800000
push 0x209
push 0x53a0dc
push 0x53a0d8
call fcn.0043e400
mov dword [ebp - 4], 0xf1
cmp dword [0x539838], 0xc8
jne 0x44f8b9
mov dword [ebp - 4], 0xf2
movsx eax, word [0x53a0e0]
mov edx, dword [0x538c1c]
mov edx, dword [edx]
push 0xffffffffffffffff
push 0
push 0x3f800000
mov ecx, dword [0x53a0c8]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x18]
push eax
push 0x258
push 0x320
mov eax, dword [0x538c48]
lea ecx, [eax - 0x3c]
push ecx
push eax
movsx eax, word [0x53a0e0]
push eax
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0xfc]
fnclex
test eax, eax
jge 0x44f8b9
push 0xfc
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf3
mov eax, dword [0x538c1c]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x33
push 0x1b5
push 0
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x44f8f8
push 0x54
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf4
mov dword [ebp - 0xd4], 0x3f800000
mov edx, dword [0x53a0cc]
inc edx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call ebx
push eax
push 0x4243cc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call ebx
push eax
movzx ax, byte [ebp - 0x3c]
inc eax
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa8]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call ebx
lea ecx, [ebp - 0xd4]
push ecx
push 0x16d
push 0x1b6
push 3
lea edx, [ebp - 0xac]
push edx
push 0xe
call fcn.00439780
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
lea eax, [ebp - 0xa0]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov dword [ebp - 4], 0xf5
mov eax, dword [0x539838]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xf7
mov eax, 0x1e0
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0xf8
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xf9
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005282c0
mov dword [ebp - 4], 0xfa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
movsx ecx, word [eax + 2]
mov dword [ebp - 0x160], ecx
movsx edx, word [eax]
mov dword [ebp - 0x24], edx
mov edx, dword [0x5390a4]
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x24], eax
jg 0x45087d
mov dword [ebp - 4], 0xfb
xor ebx, ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x88], ebx
mov dword [ebp - 4], 0xfd
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 4], 0xfe
mov dword [ebp - 0x78], 0x1dc
mov dword [ebp - 4], 0xff
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea eax, [eax + ecx*2]
mov cl, byte [eax + 1]
mov byte [ebp - 0x225], cl
mov dword [ebp - 4], 0x100
cmp cl, 9
jne 0x44fad7
mov dword [ebp - 4], 0x101
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x60], 0x2d7
jmp 0x45009e
mov dword [ebp - 4], 0x103
cmp cl, 0xa
jne 0x44fb23
mov dword [ebp - 4], 0x104
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x8ca]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x105
mov dword [ebp - 0x60], 0x2ec
jmp 0x45009e
mov dword [ebp - 4], 0x106
cmp cl, 0x61
jne 0x44fc86
mov dword [ebp - 4], 0x107
mov al, byte [eax]
mov byte [ebp - 0x22c], al
xor cx, cx
mov cl, al
sub ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x108
mov dword [ebp - 0x60], 0x301
mov dword [ebp - 4], 0x109
xor ecx, ecx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 0xc]
cmp dword [ebp - 0x38], ecx
jg 0x44fc4d
mov dword [ebp - 4], 0x10a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 8]
mov edx, dword [ebp - 0x38]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x538c30], eax
mov dword [ebp - 4], 0x10b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 8]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x538c2c], eax
mov dword [ebp - 4], 0x10c
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x5390a4]
mov ecx, dword [0x538c30]
dec ecx
cmp eax, ecx
jg 0x44fc37
mov dword [ebp - 4], 0x10d
mov ecx, eax
mov eax, dword [0x538c38]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x10e
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x44fbd2
mov dword [ebp - 4], 0x10f
mov dword [ebp - 0x88], 0xffffffff
jmp 0x45009e
mov dword [ebp - 4], 0x110
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
mov eax, dword [ebp - 0x22c]
and eax, 0xff
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, ecx
mov dword [ebp - 0x5c], ebx
jmp 0x45009e
mov dword [ebp - 4], 0x111
cmp cl, 0x62
jne 0x44fd68
mov dword [ebp - 4], 0x112
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx + 0x14]
mov dword [ebp - 0x170], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x170]
jg 0x44fd46
mov dword [ebp - 4], 0x113
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 0x10]
sub ecx, dword [ebx + 0x14]
lea ecx, [ecx + ecx*8]
mov ebx, dword [ebx + 0xc]
movzx cx, byte [ebx + ecx*4 + 0x14]
movzx bx, byte [eax]
add ebx, 0x20
cmp cx, bx
je 0x44fcfa
mov dword [ebp - 4], 0x117
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x44fcb0
mov dword [ebp - 4], 0x114
mov ecx, dword [0x538ae4]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x44fd46
add eax, 0x15
cmp ecx, eax
jge 0x44fd46
mov ecx, dword [0x538ae8]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x44fd46
add eax, 0x15
cmp ecx, eax
jge 0x44fd46
mov dword [ebp - 4], 0x115
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0x116
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x118
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x119
mov dword [ebp - 0x60], 0x2d7
jmp 0x45009e
mov dword [ebp - 4], 0x11a
cmp cl, 0x63
jne 0x44ffcb
mov dword [ebp - 4], 0x11b
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx + 0x14]
mov dword [ebp - 0x178], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x178]
jg 0x44ff78
mov dword [ebp - 4], 0x11c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 0x10]
sub ecx, dword [ebx + 0x14]
lea ecx, [ecx + ecx*8]
mov ebx, dword [ebx + 0xc]
lea ecx, [ebx + ecx*4]
mov bl, byte [ecx + 0x14]
cmp bl, byte [eax]
je 0x44fdd4
mov dword [ebp - 4], 0x12b
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x44fd92
mov dword [ebp - 4], 0x11d
movzx dx, byte [ecx]
lea eax, [edx*8]
sub eax, edx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x11e
cmp eax, 0x2fc
jne 0x44fe16
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x60], 0x15e
jmp 0x44fe32
mov dword [ebp - 4], 0x120
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx edx, ax
mov dword [ebp - 0x60], edx
mov dword [ebp - 4], 0x121
mov eax, dword [ecx + 8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x538c30], eax
mov dword [ebp - 4], 0x122
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x538c2c], eax
mov dword [ebp - 4], 0x123
mov ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x124
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
cmp word [eax + 0x12], 0
jl 0x44fec1
mov dword [ebp - 4], 0x125
push 0
push 0
push 0
mov dl, byte [eax + 2]
push edx
call fcn.00448430
mov ebx, eax
add ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x126
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x5390a4]
mov ecx, dword [0x538c30]
dec ecx
cmp eax, ecx
jg 0x44ff38
mov dword [ebp - 4], 0x127
mov ecx, eax
mov eax, dword [0x538c38]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x59a]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x128
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x44fed3
mov dword [ebp - 4], 0x129
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x538ae4]
cmp ecx, eax
jle 0x44ff7b
add eax, ebx
cmp ecx, eax
jge 0x44ff7b
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x538ae8]
cmp ecx, eax
jle 0x44ff7b
add eax, 0x15
cmp ecx, eax
jge 0x44ff7b
mov dword [ebp - 4], 0x12a
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x48], ecx
jmp 0x44ff7b
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x12c
test ebx, ebx
jne 0x45009e
mov dword [ebp - 4], 0x12d
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x12e
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 4], 0x12f
mov dword [ebp - 0x60], 0x2d7
mov dword [ebp - 4], 0x130
mov dword [ebp - 0x88], 0x2fc
jmp 0x45009e
mov dword [ebp - 4], 0x131
cmp cl, 0x64
jne 0x45004c
mov dword [ebp - 4], 0x132
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4]
cmp dword [ebp - 0x24], eax
jle 0x45009e
mov dword [ebp - 4], 0x133
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005284d0
mov dword [ebp - 4], 0x134
mov ecx, dword [0x539838]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x135
add dword [ebp - 0x68], 0x17
mov edx, dword [0x5390a4]
jmp 0x45009e
mov dword [ebp - 4], 0x136
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x137
movzx cx, byte [ebp - 0x225]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2 + 0x21a]
movsx eax, cx
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0x138
test ebx, ebx
jle 0x45083a
mov dword [ebp - 4], 0x139
mov ecx, dword [ebp - 0x8c]
add ecx, ebx
cmp ecx, 0x319
jle 0x450107
mov dword [ebp - 4], 0x13a
mov byte [ebp - 0xd0], 0
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.005284d0
mov dword [ebp - 4], 0x13b
mov edx, dword [0x539838]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 4], 0x13c
add dword [ebp - 0x68], 0x17
mov dword [ebp - 4], 0x13d
mov edx, dword [ebp - 0x68]
cmp edx, 0x244
jg 0x45087d
mov dword [ebp - 4], 0x13e
mov eax, dword [ebp - 0x88]
cmp eax, 0xffffffff
je 0x4505fb
test eax, eax
je 0x45053c
mov dword [ebp - 4], 0x14d
mov ecx, dword [0x538ae4]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x4502b8
add eax, ebx
cmp ecx, eax
jge 0x4502b8
mov eax, dword [0x538ae8]
cmp eax, edx
jle 0x4502b8
add edx, 0x15
cmp eax, edx
jge 0x4502b8
mov dword [ebp - 4], 0x14e
mov eax, dword [ebp - 0x38]
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x14f
cmp word [0x538a5c], 0
je 0x4501a9
mov dword [ebp - 4], 0x150
mov dword [ebp - 0x7c], 0x190
jmp 0x4501b7
mov dword [ebp - 4], 0x151
mov dword [ebp - 0x78], 0x1ed
mov dword [ebp - 4], 0x152
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 0x12], 0xfffe
jne 0x450221
mov dword [ebp - 4], 0x153
push ecx
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 2]
push ecx
call fcn.0045cfa0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
movsx eax, word [ebp - 0xd0]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x154
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 0x12], 0xfff9
jne 0x45025b
mov dword [ebp - 4], 0x155
mov cx, word [eax + 0x10]
push ecx
call fcn.0049f6b0
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x156
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
cmp word [eax + 0x12], 0xfff7
jne 0x4502b8
mov dword [ebp - 4], 0x157
movsx edx, word [eax + 0x10]
mov dword [ebp - 0x44], edx
mov dword [ebp - 4], 0x158
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x14]
lea edx, [edx + edx*2]
shl edx, 2
mov ecx, dword [ecx + 0xc]
sub ecx, edx
movsx edx, word [ecx + 0x14]
mov dword [ebp - 0x80], edx
mov dword [ebp - 4], 0x159
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x15a
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 0x15
push 5
mov edx, dword [ebp - 0x88]
push edx
mov edx, dword [ebp - 0x7c]
push edx
mov edx, dword [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x8c]
push edx
push 2
push eax
call dword [ecx + 0x78]
fnclex
test eax, eax
jge 0x45030d
push 0x78
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15b
mov eax, dword [0x538c1c]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
lea ecx, [ebx - 5]
push ecx
mov ecx, dword [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x7c]
sub ecx, ebx
add ecx, 0x195
push ecx
mov ecx, dword [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x8c]
add ecx, 5
push ecx
push 2
push eax
call dword [edx + 0x78]
fnclex
test eax, eax
jge 0x45036f
push 0x78
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15c
mov eax, dword [ebp - 0x38]
cmp eax, 0xa
jge 0x450827
mov dword [ebp - 4], 0x15d
mov dword [ebp - 0x88], 3
mov dword [ebp - 4], 0x15e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 0x12], 0
jl 0x4503df
mov dword [ebp - 4], 0x15f
mov ecx, dword [ebp - 0x68]
add ecx, 3
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 3
push edx
push 0xffffffffffffffff
mov al, byte [eax + 2]
push eax
call fcn.00448430
add eax, 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x160
mov ecx, dword [0x538c30]
dec ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x30], 0
mov edx, dword [0x5390a4]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
jg 0x45082d
mov dword [ebp - 4], 0x161
mov eax, dword [0x538c38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 4], 0x162
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x11
push 0xa
mov ecx, dword [ebp - 0x78]
push ecx
push ebx
mov eax, dword [ebp - 0x68]
add eax, 3
push eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
lea ecx, [ecx + eax - 1]
push ecx
push 5
mov eax, dword [0x538c1c]
push eax
call dword [edx + 0x78]
fnclex
test eax, eax
jge 0x450498
push 0x78
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x163
mov eax, dword [0x538c1c]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0xf
push 0xa
mov ecx, dword [ebp - 0x60]
push ecx
push ebx
mov ecx, dword [ebp - 0x68]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x8c]
mov ebx, dword [ebp - 0x88]
add ecx, ebx
push ecx
push 5
push eax
call dword [edx + 0x78]
fnclex
test eax, eax
jge 0x4504f2
push 0x78
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x164
mov edx, dword [0x5390a4]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor eax, eax
mov ebx, dword [ebp - 0x64]
mov al, byte [ecx + ebx + 0x59a]
add dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x165
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x450400
mov dword [ebp - 4], 0x13f
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
mov edx, dword [0x538c1c]
mov edx, dword [edx]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
push 0x15
mov ecx, dword [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov eax, dword [ebp - 0x8c]
push eax
push 5
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0x78]
fnclex
test eax, eax
jge 0x4505b4
push 0x78
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x140
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*2]
push ecx
call fcn.005284d0
lea edx, [ebp - 0x90]
push edx
call edi
jmp 0x450827
mov dword [ebp - 4], 0x141
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x142
mov ecx, dword [0x538c30]
dec ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x30]
cmp eax, edx
jg 0x450703
mov dword [ebp - 4], 0x143
mov ecx, eax
mov eax, dword [0x538c38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 4], 0x144
mov ecx, dword [0x538c1c]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x15
push 0x15
push 0x301
lea eax, [ebx*8]
sub eax, ebx
lea ecx, [eax + eax*2]
push ecx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
add eax, ecx
push eax
push 5
mov ecx, dword [0x538c1c]
push ecx
call dword [edx + 0x78]
fnclex
test eax, eax
jge 0x4506bc
push 0x78
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x145
mov edx, dword [0x5390a4]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor edx, edx
mov dl, byte [ecx + ebx + 0x798]
add dword [ebp - 0x88], edx
mov dword [ebp - 4], 0x146
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x450621
mov dword [ebp - 4], 0x147
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 4
push 2
push 0x216
push 0x4d4
mov edx, dword [ebp - 0x68]
add edx, 0xf
push edx
mov edx, dword [ebp - 0x8c]
add edx, 0xfffffffe
push edx
push 5
push eax
call dword [ecx + 0x78]
fnclex
test eax, eax
jge 0x45075d
push 0x78
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x148
mov eax, dword [0x538c1c]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 4
lea ecx, [ebx + 2]
push ecx
push 0x216
mov ecx, 0x7c9
sub ecx, ebx
push ecx
mov ecx, dword [ebp - 0x68]
add ecx, 0xf
push ecx
mov ecx, dword [ebp - 0x8c]
push ecx
push 5
push eax
call dword [edx + 0x78]
fnclex
test eax, eax
jge 0x4507b9
push 0x78
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x149
mov eax, dword [0x538ae4]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x450827
add ecx, ebx
cmp eax, ecx
jge 0x450827
mov ecx, dword [0x538ae8]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x450827
add eax, 0x15
cmp ecx, eax
jge 0x450827
mov dword [ebp - 4], 0x14a
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
mov cl, byte [eax + 6]
test cl, cl
jne 0x450819
mov dword [ebp - 4], 0x14b
movsx eax, word [eax + 4]
mov dword [ebp - 0x44], eax
jmp 0x450827
mov dword [ebp - 4], 0x14c
movsx ecx, word [eax + 4]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x5390a4]
mov dword [ebp - 4], 0x166
add dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x167
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x53a0d0]
jne 0x450869
mov dword [ebp - 4], 0x168
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 4], 0x169
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x16a
mov eax, 1
add dword [ebp - 0x24], eax
jmp 0x44fa48
mov dword [ebp - 4], 0x16b
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.005284d0
mov dword [ebp - 4], 0x16c
call fcn.005285e0
mov dword [ebp - 4], 0x16d
mov eax, dword [ebp - 0x40]
cmp eax, 0x253
jne 0x4508e5
mov dword [ebp - 4], 0x16e
inc word [0x53a0cc]
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x459fff
jmp 0x459fe6
mov dword [ebp - 4], 0x16f
cmp dword [0x538c18], 0x3e7
jne 0x450eae
mov dword [ebp - 4], 0x170
mov cx, word [0x538c16]
mov dword [ebp - 4], 0x171
cmp cx, 7
jne 0x45092c
mov dword [ebp - 4], 0x172
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045ac40
jmp 0x450db9
mov dword [ebp - 4], 0x173
cmp cx, 8
jne 0x45094e
mov dword [ebp - 4], 0x174
mov edx, dword [ebp + 8]
push edx
call fcn.0045aec0
jmp 0x450db9
mov dword [ebp - 4], 0x175
cmp cx, 0x18
jne 0x450993
mov dword [ebp - 4], 0x176
mov word [0x53a0cc], 0
mov dword [ebp - 4], 0x177
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
movsx eax, word [edx]
mov dword [0x53a0d0], eax
jmp 0x450db9
mov dword [ebp - 4], 0x178
cmp cx, 0x19
jne 0x4509da
mov dword [ebp - 4], 0x179
movzx ax, byte [ebp - 0x3c]
mov word [0x53a0cc], ax
mov dword [ebp - 4], 0x17a
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4]
mov dword [0x53a0d0], ecx
jmp 0x450db9
mov dword [ebp - 4], 0x17b
cmp cx, 0x1a
jne 0x450a34
mov dword [ebp - 4], 0x17c
mov ax, word [0x53a0cc]
test ax, ax
jle 0x450db9
mov dword [ebp - 4], 0x17d
dec ax
mov word [0x53a0cc], ax
mov dword [ebp - 4], 0x17e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4]
mov dword [0x53a0d0], edx
jmp 0x450db9
mov dword [ebp - 4], 0x17f
cmp cx, 0x1b
jne 0x450a93
mov dword [ebp - 4], 0x180
movzx cx, byte [ebp - 0x3c]
mov ax, word [0x53a0cc]
cmp ax, cx
jge 0x450db9
mov dword [ebp - 4], 0x181
inc ax
mov word [0x53a0cc], ax
mov dword [ebp - 4], 0x182
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4]
mov dword [0x53a0d0], edx
jmp 0x450db9
mov dword [ebp - 4], 0x183
cmp cx, 0x1c
jne 0x450abf
mov dword [ebp - 4], 0x184
push 0
add eax, 0xffffffe9
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045a220
jmp 0x450db9
mov dword [ebp - 4], 0x185
cmp cx, 0x1d
jne 0x450aed
mov dword [ebp - 4], 0x186
mov edx, dword [ebp - 0x3c]
push edx
add eax, 0x17
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045a220
jmp 0x450db9
mov dword [ebp - 4], 0x187
cmp cx, 0x1e
jne 0x450b20
mov dword [ebp - 4], 0x188
mov eax, dword [0x53a0d0]
test eax, eax
jle 0x450db9
mov dword [ebp - 4], 0x189
dec eax
mov dword [0x53a0d0], eax
jmp 0x450db9
mov dword [ebp - 4], 0x18a
cmp cx, 0x1f
jne 0x450b64
mov dword [ebp - 4], 0x18b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [0x53a0d0]
cmp ecx, eax
jge 0x450db9
mov dword [ebp - 4], 0x18c
mov eax, ecx
inc eax
mov dword [0x53a0d0], eax
jmp 0x450db9
mov dword [ebp - 4], 0x18d
cmp cx, 0xd
je 0x450b85
cmp cx, 0x20
jl 0x450db9
cmp cx, 0x7e
jg 0x450db9
mov dword [ebp - 4], 0x18e
mov ebx, dword [ebp + 8]
push ebx
call fcn.0045ad20
mov dword [ebp - 4], 0x18f
mov ax, word [0x538c16]
cmp ax, 0xd
jne 0x450c0c
mov dword [ebp - 4], 0x190
mov ebx, dword [ebx]
mov ecx, dword [0x53a0d0]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2 + 1], 0x64
mov dword [ebp - 4], 0x191
cmp dword [ebp - 0x68], 0x23c
jne 0x450db9
mov dword [ebp - 4], 0x192
inc word [0x53a0cc]
mov dword [ebp - 4], 0x193
mov word [0x538c16], 0
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x459fff
jmp 0x459fe6
mov dword [ebp - 4], 0x194
mov ecx, dword [0x53a11c]
mov edx, dword [ecx + 0x24]
sub edx, 9
je 0x450ceb
sub edx, 2
je 0x450c6b
mov dword [ebp - 4], 0x1a4
mov eax, dword [ebx]
mov edx, dword [0x53a0d0]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cl, byte [ecx + 0x24]
mov byte [eax + edx*2 + 1], cl
mov dword [ebp - 4], 0x1a5
mov ebx, dword [ebx]
mov dl, byte [0x538c16]
sub dl, 0x20
mov eax, dword [0x53a0d0]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov byte [ecx + eax*2], dl
jmp 0x450db9
mov dword [ebp - 4], 0x19e
mov dword [ebp - 4], 0x19f
cmp ax, 0x31
jl 0x450cc5
cmp ax, 0x39
jg 0x450cc5
mov dword [ebp - 4], 0x1a0
mov eax, dword [ebx]
mov edx, dword [0x53a0d0]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov byte [eax + edx*2 + 1], 0x61
mov dword [ebp - 4], 0x1a1
mov ebx, dword [ebx]
mov cl, byte [0x538c16]
sub cl, 0x20
mov edx, dword [0x53a0d0]
sub edx, dword [ebx + 0x14]
mov eax, dword [ebx + 0xc]
mov byte [eax + edx*2], cl
jmp 0x450db9
mov dword [ebp - 4], 0x1a2
mov eax, dword [ebx]
mov ecx, dword [0x53a0d0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0xb
mov dword [ebp - 4], 0x1a3
jmp 0x450da1
mov dword [ebp - 4], 0x195
mov dword [ebp - 4], 0x196
cmp ax, 0x31
jl 0x450d3e
cmp ax, 0x39
jg 0x450d3e
mov dword [ebp - 4], 0x197
mov eax, dword [ebx]
mov ecx, dword [0x53a0d0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x63
mov dword [ebp - 4], 0x198
mov ebx, dword [ebx]
mov eax, dword [0x53a0d0]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov dl, byte [0x538c16]
mov byte [ecx + eax*2], dl
jmp 0x450db9
mov dword [ebp - 4], 0x199
cmp ax, 0x41
jl 0x450d51
cmp ax, 0x5a
jle 0x450d5d
cmp ax, 0x61
jl 0x450d80
cmp ax, 0x7a
jg 0x450d80
mov dword [ebp - 4], 0x19a
mov eax, dword [ebx]
mov ecx, dword [0x53a0d0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x62
mov dword [ebp - 4], 0x19b
jmp 0x450da1
mov dword [ebp - 4], 0x19c
mov eax, dword [ebx]
mov ecx, dword [0x53a0d0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 9
mov dword [ebp - 4], 0x19d
mov ebx, dword [ebx]
mov al, byte [0x538c16]
sub al, 0x20
mov ecx, dword [0x53a0d0]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2], al
mov dword [ebp - 4], 0x1a6
cmp word [0x538c16], 0
je 0x450ddb
mov dword [ebp - 4], 0x1a7
mov dword [0x53983c], 0x42a20000
mov dword [ebp - 4], 0x1a8
fld dword [0x538b58]
fadd dword [0x53983c]
fst dword [0x53983c]
mov dword [ebp - 4], 0x1a9
fcomp dword [0x401564]
fnstsw ax
test ah, 0x41
jne 0x450e9e
mov dword [ebp - 4], 0x1aa
mov edx, dword [0x538c1c]
mov ebx, dword [edx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x14
push 6
mov ecx, dword [0x53a11c]
mov ecx, dword [ecx + 0x24]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2 + 0x21a]
push eax
push 0x78c
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x4c]
push eax
push 5
push edx
call dword [ebx + 0x78]
fnclex
test eax, eax
jge 0x450e73
push 0x78
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1ab
fld dword [0x53983c]
fcomp dword [0x401560]
fnstsw ax
test ah, 0x41
jne 0x450e9e
mov dword [ebp - 4], 0x1ac
mov dword [0x53983c], 0
mov dword [ebp - 4], 0x1ad
mov word [0x538c16], 0
mov dword [ebp - 4], 0x1ae
mov edx, dword [0x53a11c]
mov al, byte [edx + 0x2c]
mov dword [ebp - 4], 0x1af
test al, al
jne 0x451359
mov dword [ebp - 4], 0x1b0
mov edx, 0x4251d8
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450f2d
mov dword [ebp - 4], 0x1b1
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1b2
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x26f
push 0x1a8
push 0x1bf
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x450f72
push 0x54
push 0x420690
mov edx, dword [0x538c1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1b3
mov edx, 0x4251e0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x241
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x450fcf
mov dword [ebp - 4], 0x1b4
mov dword [ebp - 0x34], 4
mov dword [ebp - 4], 0x1b5
mov edx, 0x4251f4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b8
push 0x243
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45102c
mov dword [ebp - 4], 0x1b6
mov dword [ebp - 0x34], 3
mov dword [ebp - 4], 0x1b7
cmp word [0x53a0e2], 0
je 0x4510fb
mov dword [ebp - 4], 0x1b8
mov edx, 0x425208
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45109e
mov dword [ebp - 4], 0x1b9
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1ba
mov edx, 0x425218
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x1c0
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x451196
mov dword [ebp - 4], 0x1bb
mov dword [ebp - 0x34], 2
jmp 0x451196
mov dword [ebp - 4], 0x1bc
mov edx, 0x425234
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451158
mov dword [ebp - 4], 0x1bd
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1be
mov edx, 0x425218
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1c8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1bf
mov eax, dword [0x538c1c]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f000000
push 0x31
push 0xae
push 0x1e5
push 0x640
push 0x1a8
push 0x271
push 5
push eax
call dword [ecx + 0x78]
fnclex
test eax, eax
jge 0x4511ec
push 0x78
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1c0
mov edx, dword [0x538ae4]
cmp edx, 0x270
jle 0x4512db
mov dword [ebp - 4], 0x1c1
xor eax, eax
mov dword [ebp - 4], 0x1c2
mov ecx, dword [0x538ae8]
cmp ecx, 0x1a7
jle 0x45125c
cmp ecx, 0x1c0
jge 0x45125c
mov dword [ebp - 4], 0x1c3
add edx, 0xfffffd9c
mov dword [ebp - 0x230], edx
fild dword [ebp - 0x230]
fdiv qword [0x402098]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [0x538ae8]
mov edx, dword [0x538ae4]
mov dword [ebp - 4], 0x1c4
cmp ecx, 0x1c2
jle 0x451298
cmp ecx, 0x1e0
jge 0x451298
mov dword [ebp - 4], 0x1c5
add edx, 0xfffffe4b
mov dword [ebp - 0x234], edx
fild dword [ebp - 0x234]
fdiv qword [0x402098]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 4], 0x1c6
test eax, eax
jle 0x4512db
cmp eax, 0xe
jge 0x4512db
mov dword [ebp - 4], 0x1c7
lea ebx, [eax - 1]
push 0
push ebx
call fcn.0043e2b0
mov dword [ebp - 4], 0x1c8
cmp word [0x538a5c], 0
je 0x4512db
mov dword [ebp - 4], 0x1c9
mov edx, dword [0x53a11c]
mov dword [edx + 0x24], ebx
mov dword [ebp - 4], 0x1ca
push 0xffffffffffffffff
mov eax, dword [0x53a11c]
mov ecx, dword [eax + 0x24]
push ecx
call fcn.0043e2b0
mov dword [ebp - 4], 0x39d
cmp word [0x538a5c], 0
jne 0x459e7b
mov dword [ebp - 4], 0x39e
mov eax, dword [0x53a11c]
mov eax, dword [eax + 0x28]
mov ebx, dword [ebp - 0x34]
cmp eax, ebx
jne 0x459e9b
mov dword [ebp - 4], 0x39f
mov dword [ebp - 4], 0x3a0
mov edx, 1
cmp eax, edx
jne 0x45827b
mov dword [ebp - 4], 0x3a1
mov cx, word [0x53a0e2]
not cx
mov word [0x53a0e2], cx
jmp 0x459e65
mov dword [ebp - 4], 0x1cb
cmp al, 1
jne 0x4512f2
mov dword [ebp - 4], 0x1cc
mov edx, 0x425248
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4513c4
mov dword [ebp - 4], 0x1cd
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1ce
mov edx, 0x425250
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x196
push 0x16
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45141e
mov dword [ebp - 4], 0x1cf
mov dword [ebp - 0x34], 5
mov dword [ebp - 4], 0x1d0
cmp word [0x53a0f2], 0
je 0x4514ad
mov dword [ebp - 4], 0x1d1
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp byte [eax + edx*4 + 8], 8
jae 0x4514ad
mov dword [ebp - 4], 0x1d2
mov edx, 0x425260
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x16
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4514ad
mov dword [ebp - 4], 0x1d3
mov dword [ebp - 0x34], 8
mov dword [ebp - 4], 0x1d4
mov eax, dword [0x538c1c]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x320
push 0x19d
push 0x120
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4514f2
push 0x54
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
cmp byte [ecx + eax*4 + 8], 8
jae 0x451e53
mov dword [ebp - 4], 0x1d6
mov eax, dword [0x538c1c]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x11d
push 0x197
push 0x44
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x45155c
push 0x54
push 0x420690
mov ecx, dword [0x538c1c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d7
mov edx, 0x425270
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1d8
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x58
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4515f1
mov dword [ebp - 4], 0x1d9
mov dword [ebp - 0x34], 0x12
mov dword [ebp - 4], 0x1da
mov edx, 0x42527c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x6b
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1db
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x7e
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451686
mov dword [ebp - 4], 0x1dc
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 4], 0x1dd
mov edx, 0x425288
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x91
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1de
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xaa
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451721
mov dword [ebp - 4], 0x1df
mov dword [ebp - 0x34], 0x14
mov dword [ebp - 4], 0x1e0
mov edx, 0x4250c4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xbd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e1
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xd7
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4517bc
mov dword [ebp - 4], 0x1e2
mov dword [ebp - 0x34], 0x15
mov dword [ebp - 4], 0x1e3
mov edx, 0x4250d0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xe8
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e4
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 9
push 0
push 0x197
push 0xfd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451857
mov dword [ebp - 4], 0x1e5
mov dword [ebp - 0x34], 0x16
mov dword [ebp - 4], 0x1e6
mov edx, 0x424f04
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0x44
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e7
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x5d
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4518ec
mov dword [ebp - 4], 0x1e8
mov dword [ebp - 0x34], 0xe
mov dword [ebp - 4], 0x1e9
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 1
push 0
push 0x1a6
push 0x70
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451946
mov dword [ebp - 4], 0x1ea
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 4], 0x1eb
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 0
push 0x1a6
push 0x83
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4519a3
mov dword [ebp - 4], 0x1ec
mov dword [ebp - 0x34], 0x17
mov dword [ebp - 4], 0x1ed
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 3
push 0
push 0x1a6
push 0x96
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451a00
mov dword [ebp - 4], 0x1ee
mov dword [ebp - 0x34], 0x19
mov dword [ebp - 4], 0x1ef
mov edx, 0x422204
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0xe
push 0x1a6
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f0
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 4
push 0
push 0x1a6
push 0xc2
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451a9b
mov dword [ebp - 4], 0x1f1
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 4], 0x1f2
mov edx, 0x422774
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0xd5
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f3
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 0
push 0x1a6
push 0xe8
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451b36
mov dword [ebp - 4], 0x1f4
mov dword [ebp - 0x34], 0x11
mov dword [ebp - 4], 0x1f5
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 7
push 0
push 0x1a6
push 0xfb
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451b93
mov dword [ebp - 4], 0x1f6
mov dword [ebp - 0x34], 0xd
mov dword [ebp - 4], 0x1f7
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x1a6
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451bf0
mov dword [ebp - 4], 0x1f8
mov dword [ebp - 0x34], 0x1a
mov dword [ebp - 4], 0x1f9
mov edx, 0x425298
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fa
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0x69
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451c85
mov dword [ebp - 4], 0x1fb
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 4], 0x1fc
mov edx, 0x4252ac
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x7c
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fd
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451d1d
mov dword [ebp - 4], 0x1fe
mov dword [ebp - 0x34], 0xb
mov dword [ebp - 4], 0x1ff
mov edx, 0x4252c0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xbd
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x200
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xdc
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451db8
mov dword [ebp - 4], 0x201
mov dword [ebp - 0x34], 0xc
mov dword [ebp - 4], 0x202
mov edx, 0x4252d0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xee
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x203
mov edx, 0x424388
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 8
push 0
push 0x1b5
push 0x104
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451e53
mov dword [ebp - 4], 0x204
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 4], 0x205
mov edx, 0x4252dc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 5
push 0x197
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451eb0
mov dword [ebp - 4], 0x206
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0x207
mov edx, dword [0x53a11c]
mov al, byte [edx + 0x2d]
test al, al
jbe 0x4522be
mov dword [ebp - 4], 0x208
cmp al, 5
jae 0x4520e3
mov dword [ebp - 4], 0x209
mov dword [ebp - 0x8c], 0x120
mov dword [ebp - 4], 0x20a
movzx ax, byte [edx + 0x2d]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x18e]
movsx ecx, ax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0x20b
mov cl, byte [edx + 0x2d]
cmp cl, 1
jbe 0x452013
mov dword [ebp - 4], 0x20c
mov edx, 0x4252e4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xff
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x451f89
mov dword [ebp - 4], 0x20d
mov edx, dword [0x53a11c]
movzx ax, byte [edx + 0x2d]
add eax, 0x3e8
movsx ecx, ax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x20e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [0x53a11c]
mov dl, byte [edx + 0x2d]
cmp dl, byte [ecx + eax*4 + 8]
jae 0x4520a0
mov dword [ebp - 4], 0x20f
mov edx, 0x4252ec
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x10a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4520a0
mov dword [ebp - 4], 0x210
jmp 0x45208a
mov dword [ebp - 4], 0x211
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
cmp cl, byte [edx + eax*4 + 8]
jae 0x4520a0
mov dword [ebp - 4], 0x212
mov edx, 0x4252ec
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xff
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4520a0
mov dword [ebp - 4], 0x213
mov eax, dword [0x53a11c]
movzx cx, byte [eax + 0x2d]
add ecx, 0x44c
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x214
mov eax, dword [0x538ae4]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x4520d7
add ecx, 0x116
cmp eax, ecx
jge 0x4520d7
mov eax, dword [0x538ae8]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x4520d7
add ecx, 0xf
cmp eax, ecx
jl 0x4522be
mov dword [ebp - 4], 0x215
jmp 0x4522b5
mov dword [ebp - 4], 0x216
mov dword [ebp - 0x8c], 0x220
mov dword [ebp - 4], 0x217
movzx ax, byte [edx + 0x2d]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4 + 0x152]
movsx eax, cx
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0x218
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov dl, byte [edx + 0x2d]
cmp dl, byte [ecx + eax*4 + 8]
jae 0x452211
mov dword [ebp - 4], 0x219
mov edx, 0x4252e4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xffffffea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4521aa
mov dword [ebp - 4], 0x21a
mov eax, dword [0x53a11c]
movzx cx, byte [eax + 0x2d]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21b
mov edx, 0x4252ec
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x452278
mov dword [ebp - 4], 0x21c
mov eax, dword [0x53a11c]
movzx cx, byte [eax + 0x2d]
add ecx, 0x44c
jmp 0x452272
mov dword [ebp - 4], 0x21d
mov edx, 0x4252e4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x452278
mov dword [ebp - 4], 0x21e
mov eax, dword [0x53a11c]
movzx cx, byte [eax + 0x2d]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21f
mov ecx, dword [ebp - 0x8c]
lea edx, [ecx - 0x16]
mov eax, dword [0x538ae4]
cmp eax, edx
jle 0x4522ae
add ecx, 0x100
cmp eax, ecx
jge 0x4522ae
mov eax, dword [0x538ae8]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x4522ae
add ecx, 0xf
cmp eax, ecx
jl 0x4522be
mov dword [ebp - 4], 0x220
mov eax, dword [0x53a11c]
mov byte [eax + 0x2d], 0
mov dword [ebp - 4], 0x221
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [eax + edx*4 + 8]
mov dword [ebp - 0x1a0], ecx
mov ebx, 1
cmp ebx, dword [ebp - 0x1a0]
jg 0x4512f2
mov dword [ebp - 4], 0x222
cmp ebx, 5
jge 0x452329
mov dword [ebp - 4], 0x223
mov ecx, 0x120
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x224
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x18e]
jmp 0x45234c
mov dword [ebp - 4], 0x225
mov ecx, 0x220
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x226
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x152]
mov dword [ebp - 0x68], edx
mov dword [ebp - 4], 0x227
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 4], 0x228
mov eax, dword [0x53a11c]
mov al, byte [eax + 0x2d]
mov dword [ebp - 4], 0x229
test al, al
jne 0x45267b
mov dword [ebp - 4], 0x22a
mov eax, dword [0x538ae4]
cmp eax, ecx
jle 0x4523b5
add ecx, 0x100
cmp eax, ecx
jge 0x4523b5
mov eax, dword [0x538ae8]
cmp eax, edx
jle 0x4523b5
add edx, 0xf
cmp eax, edx
jge 0x4523b5
mov dword [ebp - 4], 0x22b
mov ecx, dword [0x53a11c]
mov byte [ecx + 0x2d], bl
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x244
test ax, ax
je 0x458268
mov dword [ebp - 4], 0x245
mov edx, 0x4252f4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 9
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452429
mov dword [ebp - 4], 0x246
lea edx, [ebx + 0x3c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x247
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov al, byte [eax + edx*4]
mov dword [ebp - 4], 0x248
cmp al, 1
jne 0x452e5d
mov dword [ebp - 4], 0x249
mov edx, 0x4252fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24a
mov edx, 0x42530c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x55
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24b
mov edx, 0x425320
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 1
jne 0x4525c3
mov dword [ebp - 4], 0x24d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
push 0
push 2
push 1
push 0x11
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 8]
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x24e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x452830
dec eax
je 0x4527c7
dec eax
jne 0x452897
mov dword [ebp - 4], 0x253
mov edx, 0x422774
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x38
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452897
mov dword [ebp - 4], 0x254
lea ecx, [ebx + 0xd2]
mov dword [ebp - 0x34], ecx
jmp 0x452897
mov dword [ebp - 4], 0x22c
cmp al, 1
jne 0x4526a4
mov dword [ebp - 4], 0x22d
cmp ebx, 5
jne 0x4523b5
mov dword [ebp - 4], 0x22e
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x22f
cmp al, 2
jne 0x4526cd
mov dword [ebp - 4], 0x230
cmp ebx, 6
jne 0x4523b5
mov dword [ebp - 4], 0x231
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x232
cmp al, 3
jne 0x4526f6
mov dword [ebp - 4], 0x233
cmp ebx, 7
jne 0x4523b5
mov dword [ebp - 4], 0x234
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x235
cmp al, 4
jne 0x45271f
mov dword [ebp - 4], 0x236
cmp ebx, 8
jne 0x4523b5
mov dword [ebp - 4], 0x237
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x238
cmp al, 5
jne 0x452748
mov dword [ebp - 4], 0x239
cmp ebx, 1
jne 0x4523b5
mov dword [ebp - 4], 0x23a
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x23b
cmp al, 6
jne 0x452771
mov dword [ebp - 4], 0x23c
cmp ebx, 2
jne 0x4523b5
mov dword [ebp - 4], 0x23d
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x23e
cmp al, 7
jne 0x45279a
mov dword [ebp - 4], 0x23f
cmp ebx, 3
jne 0x4523b5
mov dword [ebp - 4], 0x240
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x241
cmp al, 8
jne 0x4523b5
mov dword [ebp - 4], 0x242
cmp ebx, 4
jne 0x4523b5
mov dword [ebp - 4], 0x243
xor eax, eax
jmp 0x4523b8
mov dword [ebp - 4], 0x251
mov edx, 0x425330
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x38
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452897
mov dword [ebp - 4], 0x252
lea edx, [ebx + 0xc8]
mov dword [ebp - 0x34], edx
jmp 0x452897
mov dword [ebp - 4], 0x24f
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x38
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452897
mov dword [ebp - 4], 0x250
lea eax, [ebx + 0xdc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x255
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x256
test al, al
je 0x452afe
cmp al, 5
je 0x452afe
mov dword [ebp - 4], 0x259
cmp al, 1
je 0x452a93
cmp al, 6
je 0x452a93
mov dword [ebp - 4], 0x25c
cmp al, 2
je 0x452a20
cmp al, 7
je 0x452a20
mov dword [ebp - 4], 0x25f
cmp al, 3
je 0x4529b0
cmp al, 8
je 0x4529b0
mov dword [ebp - 4], 0x262
cmp al, 4
je 0x45293e
cmp al, 9
jne 0x452b68
mov dword [ebp - 4], 0x263
mov edx, 0x425368
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452b68
mov dword [ebp - 4], 0x264
lea edx, [ebx + 0x10e]
mov dword [ebp - 0x34], edx
jmp 0x452b68
mov dword [ebp - 4], 0x260
mov edx, 0x42535c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452b68
mov dword [ebp - 4], 0x261
lea eax, [ebx + 0x104]
jmp 0x452b65
mov dword [ebp - 4], 0x25d
mov edx, 0x42534c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x8b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452b68
mov dword [ebp - 4], 0x25e
lea ecx, [ebx + 0xfa]
mov dword [ebp - 0x34], ecx
jmp 0x452b68
mov dword [ebp - 4], 0x25a
mov edx, 0x42533c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452b68
mov dword [ebp - 4], 0x25b
lea edx, [ebx + 0xf0]
mov dword [ebp - 0x34], edx
jmp 0x452b68
mov dword [ebp - 4], 0x257
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452b68
mov dword [ebp - 4], 0x258
lea eax, [ebx + 0xe6]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x265
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
cmp byte [edx], 0
jbe 0x452c66
mov dword [ebp - 4], 0x266
push ecx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa7
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x267
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x268
test al, al
jne 0x452d35
mov dword [ebp - 4], 0x269
mov edx, dword [0x539044]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043ce70
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x458268
mov dword [ebp - 4], 0x26a
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x26b
cmp al, 1
jne 0x452dce
mov dword [ebp - 4], 0x26c
mov edx, dword [0x539044]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
add edx, 8
push edx
call fcn.0043ce70
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x458268
mov dword [ebp - 4], 0x26d
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x26e
cmp al, 2
jne 0x458268
mov dword [ebp - 4], 0x26f
mov edx, 0x425378
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x10
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x270
lea edx, [ebx + 0x118]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x271
cmp al, 2
jne 0x4536c2
mov dword [ebp - 4], 0x272
mov edx, 0x4252ac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x273
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
mov dword [ebp - 4], 0x274
test ax, ax
jne 0x452f6a
mov dword [ebp - 4], 0x275
mov edx, 0x425388
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x41
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x276
lea ecx, [ebx + 0x1e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x277
cmp ax, 1
jl 0x4530de
cmp ax, 0xa
jg 0x4530de
mov dword [ebp - 4], 0x278
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x41
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452fe9
mov dword [ebp - 4], 0x279
lea edx, [ebx + 0x28]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x27a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0x425394
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
imul cx, cx, 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d6c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x27b
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x27c
cmp ax, 0xb
jl 0x453257
cmp ax, 0x14
jg 0x453257
mov dword [ebp - 4], 0x27d
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45315d
mov dword [ebp - 4], 0x27e
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x27f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0x4253a8
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0xa
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d6c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x280
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x281
cmp ax, 0x15
jl 0x4533d0
cmp ax, 0x1e
jg 0x4533d0
mov dword [ebp - 4], 0x282
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4532d6
mov dword [ebp - 4], 0x283
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x284
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0x4253b8
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x14
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d6c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x285
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x286
cmp ax, 0x1f
jl 0x453549
cmp ax, 0x28
jg 0x453549
mov dword [ebp - 4], 0x287
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45344f
mov dword [ebp - 4], 0x288
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x289
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0x4253cc
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x1e
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d6c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x28a
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x28b
cmp ax, 0x29
jl 0x458268
cmp ax, 0x32
jg 0x458268
mov dword [ebp - 4], 0x28c
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4535c8
mov dword [ebp - 4], 0x28d
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0x4253dc
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x28
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d6c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x28f
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x290
cmp al, 3
jne 0x453968
mov dword [ebp - 4], 0x291
mov dword [ebp - 0xb4], 0x80020004
mov dword [ebp - 0xbc], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
push 0x1c6
push 0xed
push 0
push 0
lea eax, [ebp - 0xbc]
push eax
push 1
push 0xd7
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x292
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x4538ea
dec eax
je 0x45386d
dec eax
jne 0x458268
mov dword [ebp - 4], 0x297
mov edx, 0x4253fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xef
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x298
lea ecx, [ebx + 0x32]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x295
mov edx, 0x4253f4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xef
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x296
lea edx, [ebx + 0x32]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x293
mov edx, 0x4253ec
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xef
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x294
lea eax, [ebx + 0x32]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x299
cmp al, 4
jne 0x453ce9
mov dword [ebp - 4], 0x29a
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 7
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4539db
mov dword [ebp - 4], 0x29b
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x29c
mov edx, 0x425410
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29d
mov edx, 0x425420
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29e
mov edx, 0x425430
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c70]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a2
jmp 0x4581a8
mov dword [ebp - 4], 0x2a3
cmp al, 5
jne 0x453ff6
mov dword [ebp - 4], 0x2a4
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453d5c
mov dword [ebp - 4], 0x2a5
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2a6
mov edx, 0x425438
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a7
mov edx, 0x425444
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c78]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2aa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa8
jmp 0x458243
mov dword [ebp - 4], 0x2ab
cmp al, 6
jne 0x454413
mov dword [ebp - 4], 0x2ac
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 1
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454069
mov dword [ebp - 4], 0x2ad
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2ae
mov edx, 0x425438
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2af
mov edx, 0x425458
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b0
mov edx, 0x425464
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c78]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2b2
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
jmp 0x458243
mov dword [ebp - 4], 0x2b5
cmp al, 7
jne 0x454b5e
mov dword [ebp - 4], 0x2b6
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 4
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454486
mov dword [ebp - 4], 0x2b7
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2b8
mov edx, 0x425470
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4544fa
mov dword [ebp - 4], 0x2b9
mov dword [0x538c4c], 0x12
mov dword [ebp - 4], 0x2ba
call fcn.0043dc40
mov dword [ebp - 4], 0x2bb
mov edx, 0x425480
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2bc
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c78]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2bd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x68
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2be
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 4
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x81
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2bf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x9a
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x2c2
test al, al
jne 0x4549c0
mov dword [ebp - 4], 0x2c3
mov edx, 0x42548c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x2c4
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x2c5
cmp al, 1
jne 0x454a49
mov dword [ebp - 4], 0x2c6
mov edx, 0x425498
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x2c7
lea eax, [ebx + 0x64]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x2c8
cmp al, 2
jne 0x454ad2
mov dword [ebp - 4], 0x2c9
mov edx, 0x4254a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x2ca
lea ecx, [ebx + 0x64]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x2cb
cmp al, 3
jne 0x458268
mov dword [ebp - 4], 0x2cc
mov edx, 0x4254b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x2cd
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x2ce
cmp al, 8
jne 0x45508b
mov dword [ebp - 4], 0x2cf
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 6
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454bd1
mov dword [ebp - 4], 0x2d0
lea eax, [ebx + 0x46]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2d1
mov edx, 0x425458
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d2
mov edx, 0x425464
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6f
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d3
mov edx, 0x4254bc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x9c
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d4
mov edx, 0x425430
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc9
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c70]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2d6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x83
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd8
jmp 0x458243
mov dword [ebp - 4], 0x2da
cmp al, 9
jne 0x455399
mov dword [ebp - 4], 0x2db
mov edx, 0x4254c8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dc
mov edx, 0x425420
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dd
mov edx, 0x4254dc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2de
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb9
jmp 0x458243
mov dword [ebp - 4], 0x2e1
cmp al, 0xa
jne 0x455fad
mov dword [ebp - 4], 0x2e2
mov edx, 0x4254ec
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e3
mov edx, 0x425500
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x40
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x2e5
test al, al
jne 0x4554e7
mov dword [ebp - 4], 0x2e6
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x4d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4555d1
mov dword [ebp - 4], 0x2e7
lea edx, [ebx + 0x12c]
mov dword [ebp - 0x34], edx
jmp 0x4555d1
mov dword [ebp - 4], 0x2e8
cmp al, 1
jne 0x45555f
mov dword [ebp - 4], 0x2e9
mov edx, 0x424334
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x4d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4555d1
mov dword [ebp - 4], 0x2ea
lea eax, [ebx + 0x12c]
mov dword [ebp - 0x34], eax
jmp 0x4555d1
mov dword [ebp - 4], 0x2eb
cmp al, 2
jne 0x4555d1
mov dword [ebp - 4], 0x2ec
mov edx, 0x425508
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x4d
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4555d1
mov dword [ebp - 4], 0x2ed
lea ecx, [ebx + 0x12c]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2ee
mov edx, 0x4253fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x5d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2ef
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x2f0
test al, al
jne 0x4556cb
mov dword [ebp - 4], 0x2f1
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x6a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4557b5
mov dword [ebp - 4], 0x2f2
lea edx, [ebx + 0x136]
mov dword [ebp - 0x34], edx
jmp 0x4557b5
mov dword [ebp - 4], 0x2f3
cmp al, 1
jne 0x455743
mov dword [ebp - 4], 0x2f4
mov edx, 0x424334
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x6a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4557b5
mov dword [ebp - 4], 0x2f5
lea eax, [ebx + 0x136]
mov dword [ebp - 0x34], eax
jmp 0x4557b5
mov dword [ebp - 4], 0x2f6
cmp al, 2
jne 0x4557b5
mov dword [ebp - 4], 0x2f7
mov edx, 0x425508
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6a
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4557b5
mov dword [ebp - 4], 0x2f8
lea ecx, [ebx + 0x136]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2f9
mov edx, 0x425510
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2fa
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x2fb
test al, al
jne 0x4558b1
mov dword [ebp - 4], 0x2fc
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x87
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4559a1
mov dword [ebp - 4], 0x2fd
lea edx, [ebx + 0x140]
mov dword [ebp - 0x34], edx
jmp 0x4559a1
mov dword [ebp - 4], 0x2fe
cmp al, 1
jne 0x45592c
mov dword [ebp - 4], 0x2ff
mov edx, 0x424334
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x87
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4559a1
mov dword [ebp - 4], 0x300
lea eax, [ebx + 0x140]
mov dword [ebp - 0x34], eax
jmp 0x4559a1
mov dword [ebp - 4], 0x301
cmp al, 2
jne 0x4559a1
mov dword [ebp - 4], 0x302
mov edx, 0x425508
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x87
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4559a1
mov dword [ebp - 4], 0x303
lea ecx, [ebx + 0x140]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x304
mov edx, 0x425518
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x97
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x305
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x306
test al, al
jne 0x455a9f
mov dword [ebp - 4], 0x307
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xa4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455b8f
mov dword [ebp - 4], 0x308
lea edx, [ebx + 0x14a]
mov dword [ebp - 0x34], edx
jmp 0x455b8f
mov dword [ebp - 4], 0x309
cmp al, 1
jne 0x455b1a
mov dword [ebp - 4], 0x30a
mov edx, 0x424334
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa4
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455b8f
mov dword [ebp - 4], 0x30b
lea eax, [ebx + 0x14a]
mov dword [ebp - 0x34], eax
jmp 0x455b8f
mov dword [ebp - 4], 0x30c
cmp al, 2
jne 0x455b8f
mov dword [ebp - 4], 0x30d
mov edx, 0x425508
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa4
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455b8f
mov dword [ebp - 4], 0x30e
lea ecx, [ebx + 0x14a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x30f
mov edx, 0x425520
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x310
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 4]
mov dword [ebp - 4], 0x311
test al, al
jne 0x455c8d
mov dword [ebp - 4], 0x312
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455d7d
mov dword [ebp - 4], 0x313
lea edx, [ebx + 0x154]
mov dword [ebp - 0x34], edx
jmp 0x455d7d
mov dword [ebp - 4], 0x314
cmp al, 1
jne 0x455d08
mov dword [ebp - 4], 0x315
mov edx, 0x424334
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455d7d
mov dword [ebp - 4], 0x316
lea eax, [ebx + 0x154]
mov dword [ebp - 0x34], eax
jmp 0x455d7d
mov dword [ebp - 4], 0x317
cmp al, 2
jne 0x455d7d
mov dword [ebp - 4], 0x318
mov edx, 0x425508
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455d7d
mov dword [ebp - 4], 0x319
lea ecx, [ebx + 0x154]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x31a
mov edx, 0x425528
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xd1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x31b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 5]
mov dword [ebp - 4], 0x31c
test al, al
jne 0x455e8d
mov dword [ebp - 4], 0x31d
mov edx, 0x41d6d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xde
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x31e
lea edx, [ebx + 0x15e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x31f
cmp al, 1
jne 0x455f1d
mov dword [ebp - 4], 0x320
mov edx, 0x424334
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xde
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x321
lea eax, [ebx + 0x15e]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x322
cmp al, 2
jne 0x458268
mov dword [ebp - 4], 0x323
mov edx, 0x425508
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xde
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x324
lea ecx, [ebx + 0x15e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x325
cmp al, 0xb
jne 0x4562f6
mov dword [ebp - 4], 0x326
mov edx, 0x425530
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456023
mov dword [ebp - 4], 0x327
lea edx, [ebx + 0x8c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x328
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 2]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
mov edx, dword [0x538f4c]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx ecx, word [0x538f50]
sub eax, ecx
push eax
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x37
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
mov dword [ebp - 4], 0x329
mov edx, dword [0x538f4c]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x70
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
add cx, word [0x538f50]
movsx eax, cx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.0043cac0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x45617e
mov dword [ebp - 4], 0x32a
lea eax, [ebx + 0x19a]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x32b
push 0x41d6d0
mov ecx, dword [0x538f4c]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x538f50]
sub eax, edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043cac0
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x32c
mov edx, 0x425540
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xbf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x32d
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xff
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xdf
jmp 0x458243
mov dword [ebp - 4], 0x32e
cmp al, 0xc
jne 0x456562
mov dword [ebp - 4], 0x32f
mov edx, 0x4250c4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45636c
mov dword [ebp - 4], 0x330
lea eax, [ebx + 0x96]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x331
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 2], 2
jge 0x456454
mov dword [ebp - 4], 0x332
mov ecx, dword [0x538f5c]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x2d
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push ecx
call fcn.0043cac0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x458268
mov dword [ebp - 4], 0x333
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x334
mov ecx, dword [0x538f5c]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4008
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcUpperCaseVar]
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x2d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x335
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x336
cmp al, 0xd
jne 0x456ca6
mov dword [ebp - 4], 0x337
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 9
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4565d5
mov dword [ebp - 4], 0x338
lea ecx, [ebx + 0x5a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x339
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c80]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x33a
mov edx, 0x425550
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xaa
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x33b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x33c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x33d
test al, al
je 0x456995
cmp al, 4
je 0x456995
cmp al, 8
je 0x456995
cmp al, 0xc
je 0x456995
mov dword [ebp - 4], 0x340
cmp al, 1
je 0x45692c
cmp al, 5
je 0x45692c
cmp al, 9
je 0x45692c
cmp al, 0xd
je 0x45692c
mov dword [ebp - 4], 0x343
cmp al, 2
je 0x4568bc
cmp al, 6
je 0x4568bc
cmp al, 0xa
je 0x4568bc
cmp al, 0xe
je 0x4568bc
mov dword [ebp - 4], 0x346
cmp al, 3
je 0x456853
cmp al, 7
je 0x456853
cmp al, 0xb
je 0x456853
cmp al, 0xf
jne 0x4569fb
mov dword [ebp - 4], 0x347
mov edx, 0x4254b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4569fb
mov dword [ebp - 4], 0x348
jmp 0x4569f5
mov dword [ebp - 4], 0x344
mov edx, 0x4254a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4569fb
mov dword [ebp - 4], 0x345
lea eax, [ebx + 0x6e]
mov dword [ebp - 0x34], eax
jmp 0x4569fb
mov dword [ebp - 4], 0x341
mov edx, 0x425498
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4569fb
mov dword [ebp - 4], 0x342
lea ecx, [ebx + 0x6e]
mov dword [ebp - 0x34], ecx
jmp 0x4569fb
mov dword [ebp - 4], 0x33e
mov edx, 0x42548c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4569fb
mov dword [ebp - 4], 0x33f
lea edx, [ebx + 0x6e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x349
mov edx, 0x425560
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x34a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x34b
cmp al, 3
ja 0x456b00
mov dword [ebp - 4], 0x34c
mov edx, 0x425570
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x34d
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x34e
cmp al, 4
jb 0x456b8a
cmp al, 7
ja 0x456b8a
mov dword [ebp - 4], 0x34f
mov edx, 0x425584
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x69
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x350
lea eax, [ebx + 0x78]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x351
cmp al, 8
jb 0x456c14
cmp al, 0xb
ja 0x456c14
mov dword [ebp - 4], 0x352
mov edx, 0x425590
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x69
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x353
lea ecx, [ebx + 0x78]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x354
cmp al, 0xc
jb 0x458268
cmp al, 0xf
ja 0x458268
mov dword [ebp - 4], 0x355
mov edx, 0x4255ac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x356
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x357
cmp al, 0xe
jne 0x4571d3
mov dword [ebp - 4], 0x358
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 2
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456d19
mov dword [ebp - 4], 0x359
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x35a
mov edx, 0x425438
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35b
mov edx, 0x425458
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35c
mov edx, 0x425464
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35d
mov edx, 0x4254bc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xd1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c78]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x35f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x360
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x361
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x362
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
jmp 0x458243
mov dword [ebp - 4], 0x363
cmp al, 0xf
jne 0x457604
mov dword [ebp - 4], 0x364
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 8
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457249
mov dword [ebp - 4], 0x365
lea eax, [ebx + 0x82]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x366
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x5398cc]
push eax
push 0
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x18
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x367
mov edx, 0x4255bc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x43
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x368
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x14
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x369
mov edx, 0x4255c8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36b
mov edx, 0x4255d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36c
mov eax, dword [0x538f24]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xce
push edx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.0043cac0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x458268
mov dword [ebp - 4], 0x36d
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x36e
cmp al, 0x10
jne 0x457e2c
mov dword [ebp - 4], 0x36f
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 3
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457677
mov dword [ebp - 4], 0x370
lea ecx, [ebx + 0x50]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x371
mov edx, 0x425430
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x372
mov edx, 0x4255e4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x373
mov edx, 0x425560
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8e
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x374
mov edx, 0x4255ec
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x375
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c78]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x376
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x50
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x377
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x75
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x378
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x379
test al, al
jne 0x457a74
mov dword [ebp - 4], 0x37a
mov edx, 0x4255e4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457cd4
mov dword [ebp - 4], 0x37b
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x457cd4
mov dword [ebp - 4], 0x37c
cmp al, 1
jne 0x457af2
mov dword [ebp - 4], 0x37d
mov edx, 0x4255fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457cd4
mov dword [ebp - 4], 0x37e
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x457cd4
mov dword [ebp - 4], 0x37f
cmp al, 2
jne 0x457b67
mov dword [ebp - 4], 0x380
mov edx, 0x425608
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457cd4
mov dword [ebp - 4], 0x381
jmp 0x457ccb
mov dword [ebp - 4], 0x382
cmp al, 3
jne 0x457be4
mov dword [ebp - 4], 0x383
mov edx, 0x425614
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457cd4
mov dword [ebp - 4], 0x384
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x457cd4
mov dword [ebp - 4], 0x385
cmp al, 4
jne 0x457c5f
mov dword [ebp - 4], 0x386
mov edx, 0x425620
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457cd4
mov dword [ebp - 4], 0x387
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x457cd4
mov dword [ebp - 4], 0x388
cmp al, 5
jne 0x457cd4
mov dword [ebp - 4], 0x389
mov edx, 0x42562c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457cd4
mov dword [ebp - 4], 0x38a
lea ecx, [ebx + 0x122]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x38b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x38c
test al, al
jne 0x457d9c
mov dword [ebp - 4], 0x38d
mov edx, 0x425638
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x38e
lea edx, [ebx + 0xbe]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x38f
cmp al, 1
jne 0x458268
mov dword [ebp - 4], 0x390
mov edx, 0x425644
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458268
mov dword [ebp - 4], 0x391
lea eax, [ebx + 0xbe]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x392
cmp al, 0x11
jne 0x458268
mov dword [ebp - 4], 0x393
mov edx, 0x425404
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cac0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457e9f
mov dword [ebp - 4], 0x394
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x395
mov edx, 0x425410
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x396
mov edx, 0x425438
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x397
mov edx, 0x425430
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cac0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x398
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x538c70]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b900
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x399
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39a
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc8
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b900
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39c
mov eax, 1
add ebx, eax
jmp 0x4522ec
mov dword [ebp - 4], 0x3a2
cmp eax, 2
jne 0x4582a6
mov dword [ebp - 4], 0x3a3
mov edx, dword [ebp - 0x3c]
push edx
mov al, byte [0x53a0cc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044bfb0
jmp 0x459e65
mov dword [ebp - 4], 0x3a4
cmp eax, 3
jne 0x4582c7
mov dword [ebp - 4], 0x3a5
mov edx, dword [ebp + 8]
push edx
call fcn.004487d0
jmp 0x459e65
mov dword [ebp - 4], 0x3a6
cmp eax, 4
jne 0x4582e8
mov dword [ebp - 4], 0x3a7
mov eax, dword [ebp + 8]
push eax
call fcn.00448f60
jmp 0x459e65
mov dword [ebp - 4], 0x3a8
cmp eax, 5
jne 0x45835e
mov dword [ebp - 4], 0x3a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov bl, byte [edx + ecx*4 + 8]
test bl, bl
jbe 0x459e65
mov dword [ebp - 4], 0x3aa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
push 0x53a0f4
push 0x41f354
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ab
mov word [0x53a0f2], 0xffff
jmp 0x459e65
mov dword [ebp - 4], 0x3ac
cmp eax, 6
jne 0x45839d
mov dword [ebp - 4], 0x3ad
mov eax, dword [0x53a11c]
mov cl, byte [eax + 0x2c]
test cl, cl
jne 0x45838d
mov dword [ebp - 4], 0x3ae
mov byte [eax + 0x2c], 1
jmp 0x459e65
mov dword [ebp - 4], 0x3af
mov byte [eax + 0x2c], 0
jmp 0x459e65
mov dword [ebp - 4], 0x3b0
cmp eax, 7
jne 0x4583ba
mov dword [ebp - 4], 0x3b1
call fcn.0043ef10
jmp 0x459e65
mov dword [ebp - 4], 0x3b2
cmp eax, 8
jne 0x4584d3
mov dword [ebp - 4], 0x3b3
mov ebx, dword [0x53a0fc]
and ebx, 0xff
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x24], edx
cmp edx, ebx
jg 0x459e65
mov dword [ebp - 4], 0x3b4
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4 + 8]
mov al, byte [ecx]
cmp al, 8
jae 0x4584bd
mov dword [ebp - 4], 0x3b5
inc al
mov byte [ecx], al
mov dword [ebp - 4], 0x3b6
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax + 8]
push ecx
push 1
push 0x41f520
add eax, 4
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3b7
mov ecx, dword [ebx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov edx, dword [ecx + 4]
mov eax, dword [ebp - 0x24]
mov ebx, dword [0x53a0f8]
sub eax, dword [ebx + 0x14]
lea eax, [eax + eax*2]
mov ebx, dword [ebx + 0xc]
lea eax, [ebx + eax*4]
push eax
xor eax, eax
mov al, byte [ecx + 8]
sub eax, dword [edx + 0x14]
lea ecx, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov ebx, dword [ebp - 0x1ac]
mov dword [ebp - 4], 0x3b8
mov eax, 1
mov edx, dword [ebp - 0x24]
add edx, eax
jmp 0x4583e3
mov dword [ebp - 4], 0x3b9
cmp eax, 0xa
jl 0x45899a
cmp eax, 0x1a
jg 0x45899a
mov dword [ebp - 4], 0x3ba
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4 + 8]
mov cl, byte [eax]
inc cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3bb
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax + 8]
push ecx
push 1
push 0x41f520
add eax, 4
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3bc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 4]
add ebx, 0xfffffff7
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov byte [ecx + eax*4], bl
mov dword [ebp - 4], 0x3bd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 4]
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
mov dword [ebp - 4], 0x3be
cmp cl, 1
jne 0x45862f
mov dword [ebp - 4], 0x3bf
mov word [eax + 2], 0
mov dword [ebp - 4], 0x3c0
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 4]
push 0
push 2
push 1
push 0x11
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 8]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
jmp 0x459e65
mov dword [ebp - 4], 0x3c1
cmp cl, 3
jne 0x4586f7
mov dword [ebp - 4], 0x3c2
push 0
push 0
push 1
push 8
add eax, 4
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c3
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 4]
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, 0x42436c
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov dword [ebp - 0x238], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x238]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x3c4
mov ecx, dword [ebx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov word [ecx + eax*4 + 2], 2
jmp 0x459e65
mov dword [ebp - 4], 0x3c5
cmp cl, 4
jne 0x45876c
mov dword [ebp - 4], 0x3c6
push 0
push 2
push 1
push 0x11
add eax, 8
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c7
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 4]
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x459e65
mov dword [ebp - 4], 0x3c8
cmp cl, 5
jne 0x458790
mov dword [ebp - 4], 0x3c9
push 0
push 1
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3ca
cmp cl, 6
je 0x458982
cmp cl, 9
je 0x458982
mov dword [ebp - 4], 0x3cc
cmp cl, 7
jne 0x4587cd
mov dword [ebp - 4], 0x3cd
push 0
push 4
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3ce
cmp cl, 8
jne 0x458842
mov dword [ebp - 4], 0x3cf
push 0
push 3
push 1
push 0x11
add eax, 8
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3d0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
xor edx, edx
mov dl, byte [eax + 8]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 3], 0x42
jmp 0x459e65
mov dword [ebp - 4], 0x3d1
cmp cl, 0xa
jne 0x458866
mov dword [ebp - 4], 0x3d2
push 0
push 5
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3d3
cmp cl, 0xb
jne 0x45888a
mov dword [ebp - 4], 0x3d4
push 0
push 0
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3d5
cmp cl, 0xc
je 0x459e65
mov dword [ebp - 4], 0x3d6
cmp cl, 0xd
jne 0x4588be
mov dword [ebp - 4], 0x3d7
push 0
push 1
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3d8
cmp cl, 0xe
jne 0x4588e2
mov dword [ebp - 4], 0x3d9
push 0
push 3
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3da
cmp cl, 0xf
jne 0x458906
mov dword [ebp - 4], 0x3db
push 0
push 2
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3dc
cmp cl, 0x10
jne 0x45892a
mov dword [ebp - 4], 0x3dd
push 0
push 3
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3de
cmp cl, 0x11
jne 0x459e65
mov dword [ebp - 4], 0x3df
push 0
push 2
push 1
push 0x11
add eax, 8
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
jmp 0x458746
mov dword [ebp - 4], 0x3cb
push 0
push 2
push 1
push 0x11
add eax, 8
push eax
jmp 0x45861a
mov dword [ebp - 4], 0x3e1
cmp eax, 0x1f
jl 0x458a3f
cmp eax, 0x26
jg 0x458a3f
mov dword [ebp - 4], 0x3e2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x166]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 0x32
push 0
push 1
lea ecx, [ebp - 0xcc]
push ecx
call fcn.004364b0
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x3e3
cmp eax, 0x29
jl 0x458abe
cmp eax, 0x30
jg 0x458abe
mov dword [ebp - 4], 0x3e4
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x1de]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0
push 0x33
push 0
push 0xffffffffffffffff
jmp 0x458a1c
mov dword [ebp - 4], 0x3e5
cmp eax, 0x33
jl 0x458b39
cmp eax, 0x3a
jg 0x458b39
mov dword [ebp - 4], 0x3e6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x256]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 2
jmp 0x458a18
mov dword [ebp - 4], 0x3e7
cmp eax, 0x3d
jl 0x458c96
cmp eax, 0x44
jg 0x458c96
mov dword [ebp - 4], 0x3e8
add ebx, 0xffffffc4
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x3e9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov al, byte [ecx + eax*4 + 8]
mov ecx, eax
and ecx, 0xff
cmp ebx, ecx
jge 0x458c04
mov dword [ebp - 4], 0x3ea
movzx ax, al
dec eax
movsx ecx, ax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], edx
cmp ebx, dword [ebp - 0x1b4]
jg 0x458c04
mov dword [ebp - 4], 0x3eb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ec
add ebx, dword [ebp - 0x1b0]
jmp 0x458baa
mov dword [ebp - 4], 0x3ed
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4 + 8]
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3ee
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov al, byte [ecx + 8]
test al, al
jne 0x458c6a
mov dword [ebp - 4], 0x3ef
add ecx, 4
push ecx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
jmp 0x459e65
mov dword [ebp - 4], 0x3f0
push 1
and eax, 0xff
push eax
push 1
push 0x41f520
add ecx, 4
push ecx
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
jmp 0x459e65
mov dword [ebp - 4], 0x3f1
cmp eax, 0x47
jl 0x458cc6
cmp eax, 0x4e
jg 0x458cc6
mov dword [ebp - 4], 0x3f2
push 0
mov cx, word [0x53a0cc]
push ecx
add ebx, 0xffffffba
push ebx
call fcn.00514080
jmp 0x459e65
mov dword [ebp - 4], 0x3f3
cmp eax, 0x51
jl 0x458cf6
cmp eax, 0x58
jg 0x458cf6
mov dword [ebp - 4], 0x3f4
push 1
mov dx, word [0x53a0cc]
push edx
add ebx, 0xffffffb0
push ebx
call fcn.00514080
jmp 0x459e65
mov dword [ebp - 4], 0x3f5
cmp eax, 0x5b
jl 0x458d25
cmp eax, 0x62
jg 0x458d25
mov dword [ebp - 4], 0x3f6
push 2
mov ax, word [0x53a0cc]
push eax
add ebx, 0xffffffa6
push ebx
call fcn.00514080
jmp 0x459e65
mov dword [ebp - 4], 0x3f7
cmp eax, 0x83
jl 0x458d5c
cmp eax, 0x8a
jg 0x458d5c
mov dword [ebp - 4], 0x3f8
push 3
mov cx, word [0x53a0cc]
push ecx
add ebx, 0xffffff7e
push ebx
call fcn.00514080
jmp 0x459e65
mov dword [ebp - 4], 0x3f9
cmp eax, 0x8d
jl 0x458d93
cmp eax, 0x94
jg 0x458d93
mov dword [ebp - 4], 0x3fa
push 4
mov dx, word [0x53a0cc]
push edx
add ebx, 0xffffff74
push ebx
call fcn.00514080
jmp 0x459e65
mov dword [ebp - 4], 0x3fb
cmp eax, 0x97
jl 0x458dc9
cmp eax, 0x9e
jg 0x458dc9
mov dword [ebp - 4], 0x3fc
push 5
mov ax, word [0x53a0cc]
push eax
add ebx, 0xffffff6a
push ebx
call fcn.00514080
jmp 0x459e65
mov dword [ebp - 4], 0x3fd
cmp eax, 0x65
jl 0x458e65
cmp eax, 0x6c
jg 0x458e65
mov dword [ebp - 4], 0x3fe
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x4a8]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x459a42
mov dword [ebp - 4], 0x3ff
cmp eax, 0x6f
jl 0x4591c6
cmp eax, 0x76
jg 0x4591c6
mov dword [ebp - 4], 0x400
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
movsx ecx, word [0x53a0cc]
sub ecx, dword [eax + 0x14]
lea edx, [ecx + ecx*2]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4 + 4]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov ecx, dword [edx + ecx*4 - 0x520]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
mov cl, byte [edx + 1]
mov dword [ebp - 4], 0x401
test cl, cl
je 0x45914b
cmp cl, 1
je 0x45914b
cmp cl, 2
je 0x45914b
cmp cl, 3
je 0x45914b
mov dword [ebp - 4], 0x403
cmp cl, 4
je 0x4590a5
cmp cl, 5
je 0x4590a5
cmp cl, 6
je 0x4590a5
cmp cl, 7
je 0x4590a5
mov dword [ebp - 4], 0x405
cmp cl, 8
je 0x458fff
cmp cl, 9
je 0x458fff
cmp cl, 0xa
je 0x458fff
cmp cl, 0xb
je 0x458fff
mov dword [ebp - 4], 0x407
cmp cl, 0xc
je 0x458f59
cmp cl, 0xd
je 0x458f59
cmp cl, 0xe
je 0x458f59
cmp cl, 0xf
jne 0x459e65
mov dword [ebp - 4], 0x408
push eax
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x520]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xf
push 0xc
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x406
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x520]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 8
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x404
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x520]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 7
push 4
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x402
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x520]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x459a42
mov dword [ebp - 4], 0x409
cmp eax, 0x79
jl 0x459273
cmp eax, 0x80
jg 0x459273
mov dword [ebp - 4], 0x40a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 - 0x598]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
lea eax, [ecx + 1]
mov cl, byte [eax]
add cl, 4
mov byte [eax], cl
mov dword [ebp - 4], 0x40b
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x598]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov al, byte [ecx]
cmp al, 0xf
jbe 0x459e65
mov dword [ebp - 4], 0x40c
sub al, 0x10
mov byte [ecx], al
jmp 0x459e65
mov dword [ebp - 4], 0x40d
cmp eax, 0xbf
jl 0x45934a
cmp eax, 0xc6
jg 0x45934a
mov dword [ebp - 4], 0x40e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x8e0]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 1
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x40f
call fcn.0043ef10
jmp 0x459e65
mov dword [ebp - 4], 0x410
cmp eax, 0xc9
jl 0x459398
cmp eax, 0xd0
jg 0x459398
mov dword [ebp - 4], 0x411
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x95e], 2
jmp 0x459e65
mov dword [ebp - 4], 0x412
cmp eax, 0xd3
jl 0x4593e6
cmp eax, 0xda
jg 0x4593e6
mov dword [ebp - 4], 0x413
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x9d6], 0
jmp 0x459e65
mov dword [ebp - 4], 0x414
cmp eax, 0xdd
jl 0x459432
cmp eax, 0xe4
jg 0x459432
mov dword [ebp - 4], 0x415
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov word [eax + ecx*4 - 0xa4e], dx
jmp 0x459e65
mov dword [ebp - 4], 0x416
cmp eax, 0xe7
jl 0x459486
cmp eax, 0xee
jg 0x459486
mov dword [ebp - 4], 0x417
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xac0]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 1
jmp 0x459e65
mov dword [ebp - 4], 0x418
cmp eax, 0xf1
jl 0x4594da
cmp eax, 0xf8
jg 0x4594da
mov dword [ebp - 4], 0x419
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xb38]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 2
jmp 0x459e65
mov dword [ebp - 4], 0x41a
cmp eax, 0xfb
jl 0x45952e
cmp eax, 0x102
jg 0x45952e
mov dword [ebp - 4], 0x41b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xbb0]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 3
jmp 0x459e65
mov dword [ebp - 4], 0x41c
cmp eax, 0x105
jl 0x459582
cmp eax, 0x10c
jg 0x459582
mov dword [ebp - 4], 0x41d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xc28]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 4
jmp 0x459e65
mov dword [ebp - 4], 0x41e
cmp eax, 0x10f
jl 0x4595d6
cmp eax, 0x116
jg 0x4595d6
mov dword [ebp - 4], 0x41f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xca0]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 0
jmp 0x459e65
mov dword [ebp - 4], 0x420
cmp eax, 0x119
jl 0x45965a
cmp eax, 0x120
jg 0x45965a
mov dword [ebp - 4], 0x421
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd18]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
jmp 0x459a2e
mov dword [ebp - 4], 0x422
cmp eax, 0x123
jl 0x459731
cmp eax, 0x12a
jg 0x459731
mov dword [ebp - 4], 0x423
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd90]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x424
call fcn.0043ef10
jmp 0x459e65
mov dword [ebp - 4], 0x425
cmp eax, 0x12d
jl 0x4597b2
cmp eax, 0x134
jg 0x4597b2
mov dword [ebp - 4], 0x426
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe08]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
jmp 0x459a2e
mov dword [ebp - 4], 0x427
cmp eax, 0x137
jl 0x459834
cmp eax, 0x13e
jg 0x459834
mov dword [ebp - 4], 0x428
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe80]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
jmp 0x459a2e
mov dword [ebp - 4], 0x429
cmp eax, 0x141
jl 0x45989f
cmp eax, 0x148
jg 0x45989f
mov dword [ebp - 4], 0x42a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xef8]
jmp 0x45963c
mov dword [ebp - 4], 0x42b
cmp eax, 0x14b
jl 0x459923
cmp eax, 0x152
jg 0x459923
mov dword [ebp - 4], 0x42c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xf70]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
jmp 0x459a2e
mov dword [ebp - 4], 0x42d
cmp eax, 0x155
jl 0x4599a7
cmp eax, 0x15c
jg 0x4599a7
mov dword [ebp - 4], 0x42e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xfe8]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 4
jmp 0x459a2e
mov dword [ebp - 4], 0x42f
cmp eax, 0x15f
jl 0x459a72
cmp eax, 0x166
jg 0x459a72
mov dword [ebp - 4], 0x430
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x1060]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 5
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 2
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x431
cmp eax, 0x191
jl 0x459b32
cmp eax, 0x198
jg 0x459b32
mov dword [ebp - 4], 0x432
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x12be]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
mov ecx, dword [0x538f4c]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x538f50]
sub eax, edx
push eax
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.004364b0
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x433
cmp eax, 0x19b
jl 0x459bf2
cmp eax, 0x1a2
jg 0x459bf2
mov dword [ebp - 4], 0x434
mov eax, dword [0x538c08]
mov ecx, dword [eax]
push 0xff
push eax
call dword [ecx + 0x3c]
fnclex
test eax, eax
jge 0x459b81
push 0x3c
push 0x4222d8
mov edx, dword [0x538c08]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x435
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x538c08]
mov edx, dword [ecx]
push 0xffffffffffffffff
push 2
sub ebx, dword [eax + 0x14]
lea ebx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov ax, word [eax + ebx*4 - 0x1336]
add ax, word [0x538f50]
movsx eax, ax
push eax
push ecx
call dword [edx + 0x40]
fnclex
test eax, eax
jge 0x459e65
push 0x40
push 0x4222d8
mov ecx, dword [0x538c08]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x459e65
mov dword [ebp - 4], 0x436
cmp eax, 0x1f5
jl 0x459ca1
cmp eax, 0x1fc
jg 0x459ca1
mov dword [ebp - 4], 0x437
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x53a0cc]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x176e]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
movsx ecx, word [0x538f60]
push ecx
push 0
push 1
lea edx, [ebp - 0xcc]
push edx
call fcn.004364b0
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
jmp 0x459e65
mov dword [ebp - 4], 0x438
cmp eax, 0x3e9
jl 0x459d7b
cmp eax, 0x3f0
jg 0x459d7b
mov dword [ebp - 4], 0x439
add ebx, 0xfffffc18
mov dword [ebp - 4], 0x43a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2]
lea edx, [ecx + edx*4 - 0xc]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
dec ebx
jmp 0x459e50
mov dword [ebp - 4], 0x43d
cmp eax, 0x44d
jl 0x459e65
cmp eax, 0x454
jg 0x459e65
mov dword [ebp - 4], 0x43e
add ebx, 0xfffffbb4
mov dword [ebp - 4], 0x43f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x440
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x441
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 4]
movsx eax, word [0x53a0cc]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
inc ebx
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x442
mov ecx, dword [0x53a11c]
mov dword [ecx + 0x28], 0
jmp 0x459e9b
mov dword [ebp - 4], 0x443
mov eax, dword [0x53a11c]
mov ecx, dword [eax + 0x28]
test ecx, ecx
jne 0x459e9b
mov dword [ebp - 4], 0x444
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x28], edx
mov dword [ebp - 4], 0x445
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jle 0x459f10
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x459f10
mov dword [ebp - 4], 0x446
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push 0
push 0xa7
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*8]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0xc]
push ecx
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*8]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4 + 8]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.0043e990
lea eax, [ebp - 0x90]
push eax
call edi
mov dword [ebp - 4], 0x447
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x459f37
mov dword [ebp - 4], 0x448
push 0
push 0
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
push eax
call fcn.004d3af0
mov dword [ebp - 4], 0x449
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x459f52
mov dword [ebp - 4], 0x44a
push eax
call fcn.004d0f50
mov dword [ebp - 4], 0x44b
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x459fff
jmp 0x459fe6
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x74]
push edx
push 0x41f520
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
ret