Function at 0x44d970
Capabilities:
Check http status code
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x405556
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x23c
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401800
xor esi, esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x68], esi
xor eax, eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x8c], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edi, dword [ebp + 8]
push edi
call fcn.0045be50
mov byte [ebp - 0x3c], al
mov dword [ebp - 4], 4
movzx ax, al
cmp word [0x55020c], ax
jle 0x44da6e
mov dword [ebp - 4], 5
mov word [0x55020c], ax
mov ebx, 6
mov dword [ebp - 4], ebx
cmp dword [0x54ea04], 0x1dc
jle 0x44dab2
mov dword [ebp - 4], 7
cmp dword [0x54eb3c], esi
jne 0x44dad2
mov dword [ebp - 4], 8
mov dword [0x54eb3c], 0x3e7
mov dword [ebp - 4], 9
mov word [0x54eb3a], si
jmp 0x44dad2
mov dword [ebp - 4], 0xa
cmp dword [0x54eb3c], 0x3e7
jne 0x44dad2
mov dword [ebp - 4], 0xb
mov dword [0x54eb3c], esi
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 4], 0xd
cmp word [0x54e984], si
je 0x44db42
mov dword [ebp - 4], 0xe
mov eax, dword [0x550264]
fld dword [0x54ea80]
fadd dword [eax + 0x3c]
fstp dword [eax + 0x3c]
mov dword [ebp - 4], 0xf
mov ecx, dword [0x550264]
fld dword [ecx + 0x3c]
fcomp dword [0x401738]
fnstsw ax
test ah, 0x41
jne 0x44db42
mov dword [ebp - 4], 0x10
push edi
call fcn.0044a1b0
mov dword [ebp - 4], 0x11
mov edx, dword [0x550264]
mov dword [edx + 0x3c], esi
mov dword [ebp - 4], 0x12
mov dword [ebp - 4], 0x13
mov ax, word [0x55020c]
cmp word [0x550214], ax
je 0x450d34
mov dword [ebp - 4], 0x14
call fcn.0044d750
mov dword [ebp - 4], 0x15
call fcn.0053bbc0
mov dword [ebp - 4], 0x16
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
mov ecx, 0x550218
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
mov dword [ebp - 4], 0x17
mov edx, dword [ebp + 0x10]
mov edx, dword [edx]
mov ecx, 0x55021c
call edi
mov dword [ebp - 4], 0x18
mov ax, word [0x55020c]
mov word [0x550214], ax
mov dword [ebp - 4], 0x19
push esi
call fcn.0043ef60
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x550264]
mov dword [ecx + 0x38], esi
mov dword [ebp - 4], 0x1b
mov dword [0x54f700], ebx
mov dword [ebp - 4], 0x1c
mov eax, dword [0x54eb2c]
mov edx, dword [eax]
push 0xff
push eax
call dword [edx + 0x3c]
fnclex
cmp eax, esi
jge 0x44dc16
push 0x3c
push 0x421fa4
mov ecx, dword [0x54eb2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d
mov ebx, 1
mov dword [ebp - 0x24], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, 8
cmp ebx, eax
jg 0x450d2c
mov dword [ebp - 4], 0x1e
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x55020c]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
xor edx, edx
mov dl, byte [eax]
cmp ebx, edx
jg 0x450d16
mov dword [ebp - 4], 0x20
mov edx, dword [eax + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + eax*4]
mov dl, byte [eax]
mov dword [ebp - 4], 0x21
cmp dl, 1
jne 0x44deaa
mov dword [ebp - 4], 0x22
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
fnclex
test eax, eax
jge 0x44dce7
push 0x44
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x23
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x55020c]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [0x54f574], ecx
mov dword [ebp - 4], 0x24
mov dword [0x54f57c], 0
mov dword [ebp - 4], 0x25
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
cmp byte [ecx], 0
jbe 0x450d16
mov dword [ebp - 4], 0x26
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x27
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
add eax, edx
mov ecx, dword [eax + 0xc]
mov dword [eax + 0x20], ecx
mov dword [ebp - 4], 0x28
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx]
add edx, 0x64
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x29
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
mov dword [ebp - 0x1d0], edx
fild dword [ebp - 0x1d0]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x2a
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
xor edx, edx
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0x2b
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
jmp 0x450d16
mov dword [ebp - 4], 0x2c
cmp dl, 2
jne 0x44decc
mov dword [ebp - 4], 0x2d
movsx edx, word [eax + 2]
push edx
call fcn.0043ef60
jmp 0x450d16
mov dword [ebp - 4], 0x2e
cmp dl, 3
jne 0x44df7f
mov dword [ebp - 4], 0x2f
movsx ecx, word [eax + 2]
sub ecx, 0
je 0x44df44
dec ecx
je 0x44df1d
dec ecx
jne 0x450d16
mov dword [ebp - 4], 0x33
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x550218
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x450d16
mov dword [ebp - 4], 0x32
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x55021c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x450d16
mov dword [ebp - 4], 0x30
mov eax, dword [eax + 8]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov edx, dword [edx]
mov ecx, 0x550218
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x31
xor edx, edx
mov ecx, 0x55021c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x450d16
mov dword [ebp - 4], 0x34
cmp dl, 4
jne 0x44e303
mov dword [ebp - 4], 0x35
mov cx, word [eax + 2]
test cx, cx
jle 0x450d16
mov dword [ebp - 4], 0x36
cmp word [0x54e9a8], 0
je 0x44e0c0
mov dword [ebp - 4], 0x37
mov eax, dword [eax + 4]
mov edx, dword [0x54eb40]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423cd8
movsx ecx, cx
mov eax, dword [0x54eb98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e03c
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x38
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e1e0
push 0xec
push 0x420b44
mov edx, dword [0x54eb40]
push edx
jmp 0x44e1d9
mov dword [ebp - 4], 0x39
mov eax, dword [eax + 4]
mov edx, dword [0x54eb40]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x423cd8
movsx ecx, cx
mov eax, dword [0x54eb98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e150
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e1e0
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x3b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x550208]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x54eb98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x3c
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x3d
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x3e
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x3f
jmp 0x450d10
mov dword [ebp - 4], 0x40
cmp dl, 5
jne 0x44e557
mov dword [ebp - 4], 0x41
mov dx, word [eax + 2]
test dx, dx
jle 0x450d16
mov dword [ebp - 4], 0x42
cmp word [0x54e9a8], 0
je 0x44e3b0
mov dword [ebp - 4], 0x43
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e452
jmp 0x44e43a
mov dword [ebp - 4], 0x44
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e452
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x45
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x46
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x47
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x49
jmp 0x450d10
mov dword [ebp - 4], 0x4a
cmp dl, 6
jne 0x44e8cb
mov dword [ebp - 4], 0x4b
mov dx, word [eax + 2]
test dx, dx
jle 0x450d16
mov dword [ebp - 4], 0x4c
cmp word [0x54e9a8], 0
je 0x44e690
mov dword [ebp - 4], 0x4d
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e617
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e7d2
jmp 0x44e7ba
mov dword [ebp - 4], 0x4f
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44e732
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x50
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44e7d2
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x51
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x52
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0x53
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x54
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x55
jmp 0x450d10
mov dword [ebp - 4], 0x56
cmp dl, 7
jne 0x44ee06
mov dword [ebp - 4], 0x57
cmp word [eax + 2], 0
jle 0x450d16
mov dword [ebp - 4], 0x58
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x59
xor eax, eax
mov al, byte [ecx + 4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x5a
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov eax, dword [eax + 0xc]
sub eax, ecx
mov dword [eax], 0
mov dword [ebp - 4], 0x5b
cmp word [0x54e9a8], 0
je 0x44ead1
mov dword [ebp - 4], 0x5c
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov ecx, dword [0x54eb40]
mov ecx, dword [ecx]
push 0
push 0
push 0
push edx
mov edx, dword [ebp - 0x38]
push edx
push 0xffffffffffffffff
push 0x423b08
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, dword [0x54eb9c]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
push edx
mov dword [ebp - 0x1f0], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov eax, dword [0x54eb40]
push eax
mov ecx, dword [ebp - 0x1f0]
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x44e9ff
push 0xe8
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x5d
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x5e
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44ec73
mov dword [ebp - 4], 0x5f
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x60
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
push 0
push 0
mov edx, dword [ebp - 0x30]
push edx
mov edx, dword [ebp - 0x38]
push edx
push ebx
push eax
call dword [ecx + 0xec]
fnclex
test eax, eax
jge 0x44eac5
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x61
jmp 0x44ea12
mov dword [ebp - 4], 0x62
lea eax, [edx + edx*2]
lea ecx, [eax + eax*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
mov dword [ebp - 0x1f4], ecx
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 8]
mov edx, dword [0x54eb40]
mov edx, dword [edx]
push 0
push ecx
mov ecx, dword [ebp - 0x38]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 5
push ecx
push 0
push 0
push 0
push 0x423b08
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*4 + 2]
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
mov dword [ebp - 0x1f8], edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edx, dword [0x54eb40]
push edx
mov eax, dword [ebp - 0x1f8]
call dword [eax + 0xe8]
fnclex
test eax, eax
jge 0x44eb94
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x63
inc dword [ebp - 0x38]
mov dword [ebp - 4], 0x64
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 1]
cmp dword [ebp - 0x38], edx
jg 0x44ec73
mov dword [ebp - 4], 0x65
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
inc dword [eax]
mov dword [ebp - 4], 0x66
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1f4]
push eax
mov eax, dword [ebp - 0x38]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
push eax
push 0
push 0
push ebx
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44ec67
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x67
jmp 0x44eba7
mov dword [ebp - 4], 0x68
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 4], 0
mov dword [ebp - 4], 0x69
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx dx, byte [ecx + 3]
add edx, 5
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0x6a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov dword [ebp - 0x1fc], edx
fild dword [ebp - 0x1fc]
fstp dword [ebp - 0x200]
fld dword [ebp - 0x200]
fmul dword [0x54ea74]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x6b
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x6c
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x30]
mov dword [edx + ecx*4], eax
mov dword [ebp - 4], 0x6d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x6e
jmp 0x450d10
mov dword [ebp - 4], 0x6f
cmp dl, 8
jne 0x44f284
mov dword [ebp - 4], 0x70
mov cx, word [eax + 2]
test cx, cx
jle 0x450d16
mov dword [ebp - 4], 0x71
cmp word [0x54e9a8], 0
je 0x44efbd
mov dword [ebp - 4], 0x72
mov eax, dword [eax + 4]
mov edx, dword [0x54eb40]
mov ebx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423cd8
movsx ecx, cx
mov eax, dword [0x54eb98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44eec3
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x73
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44ef45
push 0xec
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x74
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f161
push 0xec
push 0x420b44
mov edx, dword [0x54eb40]
push edx
jmp 0x44f15a
mov dword [ebp - 4], 0x75
mov eax, dword [eax + 4]
mov edx, dword [0x54eb40]
mov ebx, dword [edx]
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx edx, ax
push edx
push 0
push 0
push 0
push 0x423cd8
movsx ecx, cx
mov eax, dword [0x54eb98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44f04d
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x76
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f0dd
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x77
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f161
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x78
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x550208]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x54eb98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 3]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0x79
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0x7a
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x7b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0x7c
jmp 0x450d10
mov dword [ebp - 4], 0x7d
cmp dl, 9
jne 0x44f5c3
mov dword [ebp - 4], 0x7e
cmp word [0x54e9a8], 0
je 0x44f3ef
mov dword [ebp - 4], 0x7f
mov eax, dword [eax + 4]
mov edx, dword [0x54eb40]
mov ecx, dword [edx]
push 0
push 0
push 0
push 0
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
xor eax, eax
mov al, byte [edx]
push eax
push 0xffffffffffffffff
push 0x423de8
push ebx
mov edx, dword [0x54eb40]
push edx
call dword [ecx + 0xe8]
fnclex
test eax, eax
jge 0x44f301
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x80
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
push 1
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 1]
push eax
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f377
push 0xec
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x81
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
push 2
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor eax, eax
mov al, byte [ecx + 2]
push eax
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f55a
push 0xec
push 0x420b44
mov edx, dword [0x54eb40]
push edx
jmp 0x44f553
mov dword [ebp - 4], 0x82
mov eax, dword [eax + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push 0
push 0x424e44
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44f452
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x83
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0x258
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f4d6
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x84
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0x4b0
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x44f55a
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x85
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x86
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x63
mov dword [ebp - 4], 0x87
mov dword [0x54f700], 0xc8
mov dword [ebp - 4], 0x88
mov word [0x550220], bx
jmp 0x450d16
mov dword [ebp - 4], 0x89
cmp dl, 0xa
jne 0x44f786
mov dword [ebp - 4], 0x8a
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx]
test al, al
jbe 0x44f5fe
mov dword [ebp - 4], 0x8b
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54f5d4], edx
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 1]
test al, al
jbe 0x44f64b
mov dword [ebp - 4], 0x8d
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54f5d8], edx
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 2]
test al, al
jbe 0x44f698
mov dword [ebp - 4], 0x8f
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54f5dc], edx
mov dword [ebp - 4], 0x90
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 3]
test al, al
jbe 0x44f6e5
mov dword [ebp - 4], 0x91
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54f5e0], edx
mov dword [ebp - 4], 0x92
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
mov eax, ecx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 4]
test al, al
jbe 0x44f732
mov dword [ebp - 4], 0x93
movzx ax, al
dec eax
movsx edx, ax
mov dword [0x54f5e4], edx
mov dword [ebp - 4], 0x94
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
sub ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [eax + 0xc]
mov ecx, dword [edx + ecx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov al, byte [edx + 5]
test al, al
jbe 0x450d16
mov dword [ebp - 4], 0x95
movzx ax, al
dec eax
movsx ecx, ax
mov dword [0x54f5e8], ecx
jmp 0x450d16
mov dword [ebp - 4], 0x96
cmp dl, 0xd
jne 0x44fefc
mov dword [ebp - 4], 0x97
mov ax, word [eax + 2]
test ax, ax
jle 0x450d16
mov dword [ebp - 4], 0x98
push 0x423b1c
movsx edx, ax
mov eax, dword [0x54eba0]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x54eb40]
mov edx, dword [eax]
lea ecx, [ebp - 0xa0]
push ecx
push ebx
push eax
call dword [edx + 0xe4]
fnclex
test eax, eax
jge 0x44f810
push 0xe4
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x99
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 4], 0
mov dword [ebp - 4], 0x9a
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0x9b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx]
mov dword [ebp - 0x20c], edx
fild dword [ebp - 0x20c]
fstp dword [ebp - 0x210]
fld dword [ebp - 0x210]
fmul dword [0x54ea78]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
fstp dword [eax + ecx + 8]
mov dword [ebp - 4], 0x9c
mov edx, dword [0x550208]
push edx
lea eax, [ebp - 0x9c]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x9c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
mov eax, dword [0x550208]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov ecx, dword [edx + eax + 0x14]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x98]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
add eax, 4
push eax
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
push eax
push 0
push ebx
mov edx, dword [0x54eb40]
push edx
call dword [ecx + 0xf0]
fnclex
test eax, eax
jge 0x44f997
push 0xf0
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
lea ecx, [ebp - 0x98]
push ecx
call edi
lea edx, [ebp - 0x9c]
push edx
call edi
mov dword [ebp - 4], 0x9d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx ecx, word [ecx + eax*4 + 2]
mov eax, dword [0x54eba0]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movsx ecx, word [eax + ecx*8 + 4]
mov eax, 2
sub eax, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov dword [edx + eax*4], ecx
mov dword [ebp - 4], 0x9e
mov eax, dword [0x550208]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
shl ecx, 4
mov edx, dword [eax + 0xc]
mov eax, dword [ecx + edx + 0x14]
mov edx, dword [eax + 0x14]
mov dword [ebp - 0x214], edx
mov ecx, dword [eax + 0xc]
lea eax, [edx*4]
mov ebx, ecx
sub ebx, eax
mov eax, dword [ebx + 4]
mov ebx, 2
sub ebx, edx
cdq
idiv dword [ecx + ebx*4]
dec eax
mov edx, 3
sub edx, dword [ebp - 0x214]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0x9f
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0xa0
test al, al
je 0x44fdf9
cmp al, 1
je 0x44fdf9
cmp al, 2
je 0x44fdf9
cmp al, 3
je 0x44fdf9
mov dword [ebp - 4], 0xa5
cmp al, 4
je 0x44fd17
cmp al, 5
je 0x44fd17
cmp al, 6
je 0x44fd17
cmp al, 7
je 0x44fd17
mov dword [ebp - 4], 0xaa
cmp al, 8
je 0x44fc1a
cmp al, 9
je 0x44fc1a
cmp al, 0xa
je 0x44fc1a
cmp al, 0xb
je 0x44fc1a
mov dword [ebp - 4], 0xaf
cmp al, 0xc
je 0x44fb3e
cmp al, 0xd
je 0x44fb3e
cmp al, 0xe
je 0x44fb3e
cmp al, 0xf
jne 0x450d16
mov dword [ebp - 4], 0xb0
xor dx, dx
mov dl, al
sub edx, 3
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xb1
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xb2
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xb3
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 2
jmp 0x450d16
mov dword [ebp - 4], 0xab
xor cx, cx
mov cl, al
inc ecx
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xac
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov edx, 0x190
sub edx, dword [eax]
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xad
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x214], ecx
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov ecx, 0x12c
sub ecx, dword [eax + edx*4]
mov edx, 5
sub edx, dword [ebp - 0x214]
mov eax, dword [ebp - 0x218]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xae
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 2
jmp 0x450d16
mov dword [ebp - 4], 0xa6
movzx ax, al
add eax, 5
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa7
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa8
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov dword [edx + ecx*4], 0
mov dword [ebp - 4], 0xa9
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
mov dword [eax + 4], 1
jmp 0x450d16
mov dword [ebp - 4], 0xa1
xor cx, cx
mov cl, al
add ecx, 9
movsx edx, cx
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0xc], edx
mov dword [ebp - 4], 0xa2
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
lea edx, [ecx*4]
sub eax, edx
mov eax, dword [eax]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x190
sub edx, eax
mov eax, 4
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa3
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 0x12c
sub edx, eax
mov eax, 5
sub eax, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0xa4
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
mov dword [edx + 4], 1
jmp 0x450d16
mov dword [ebp - 4], 0xb4
cmp dl, 0xe
jne 0x450384
mov dword [ebp - 4], 0xb5
mov dx, word [eax + 2]
test dx, dx
jle 0x450d16
mov dword [ebp - 4], 0xb6
cmp word [0x54e9a8], 0
je 0x4500b3
mov dword [ebp - 4], 0xb7
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx]
push eax
xor eax, eax
mov al, byte [ecx + 1]
push eax
push 0xffffffffffffffff
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x44ffbc
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xb8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
inc ecx
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 2]
push ecx
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x450044
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xb9
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
push 0
push 0
movzx cx, byte [eax]
add ecx, 2
movsx ecx, cx
push ecx
xor ecx, ecx
mov cl, byte [eax + 3]
push ecx
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x45028b
jmp 0x450273
mov dword [ebp - 4], 0xba
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450155
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xbb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
movzx cx, byte [eax]
inc ecx
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x4501f5
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, dword [ecx + 0xc]
sub eax, dword [ecx + 0x14]
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
movzx cx, byte [eax]
add ecx, 2
lea ecx, [ecx + ecx*2]
lea ecx, [ecx + ecx*4]
lea ecx, [ecx + ecx*4]
shl ecx, 3
movsx ecx, cx
push ecx
movzx ax, byte [eax + 3]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 5
movsx ecx, ax
push ecx
push 0
push 0
push ebx
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xec]
fnclex
test eax, eax
jge 0x45028b
push 0xec
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xbd
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xbe
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 3
mov dword [ebp - 4], 0xbf
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx]
mov edx, 2
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xc0
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xc1
jmp 0x450d10
mov dword [ebp - 4], 0xc2
cmp dl, 0xf
jne 0x450839
mov dword [ebp - 4], 0xc3
cmp word [eax + 2], 0
jle 0x450d16
mov dword [ebp - 4], 0xc4
mov eax, dword [eax + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
movzx ax, byte [edx]
shl eax, 3
movsx edx, ax
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x24], edx
mov dword [ebp - 4], 0xc5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
movzx ax, byte [ecx + 1]
lea edx, [eax + eax*2]
shl edx, 1
movsx edx, dx
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx + 0x28], edx
mov dword [ebp - 4], 0xc6
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xc7
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54f790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4]
mov dword [edx + 4], eax
mov dword [ebp - 4], pe_nt_image_headers32
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54f790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 2
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xc9
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54f790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, 3
sub ebx, dword [edx + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [ecx + eax*4 + 0xc]
mov dword [edx + ebx*4], eax
mov dword [ebp - 4], 0xca
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax + 4], 0xffffffff
jne 0x45068b
mov dword [ebp - 4], 0xcb
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx ecx, word [0x55020c]
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + ecx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
movsx ecx, word [edx + ecx*4 + 2]
mov dword [eax], ecx
mov dword [ebp - 4], 0xcc
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov eax, dword [eax + edx + 0x14]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
xor ecx, ecx
mov cl, byte [edx + 2]
mov edx, 4
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0xcd
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x62
jmp 0x450d16
mov dword [ebp - 4], 0xce
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
movsx eax, word [edx + eax*4 + 2]
mov edx, dword [0x54f790]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*8]
mov edx, dword [edx + 0xc]
fild dword [edx + eax*4 + 0x18]
fstp qword [ebp - 0x228]
fld dword [0x54ea74]
fmul qword [ebp - 0x228]
fstp dword [ecx + 8]
mov dword [ebp - 4], 0xcf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
mov edx, dword [0x550208]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov edx, dword [edx + 0xc]
mov edx, dword [eax + edx + 0x14]
sub ebx, dword [ecx + 0x14]
lea eax, [ebx + ebx*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
mov ecx, dword [0x54f790]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*8]
mov ecx, dword [ecx + 0xc]
mov ebx, dword [edx + 0x14]
shl ebx, 2
mov edx, dword [edx + 0xc]
sub edx, ebx
mov eax, dword [ecx + eax*4 + 0x10]
mov dword [edx], eax
mov dword [ebp - 4], 0xd0
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 2
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 4
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd1
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0x14]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x218], eax
mov edx, 3
sub edx, ecx
mov eax, dword [eax + edx*4]
cdq
sub eax, edx
sar eax, 1
mov edx, 5
sub edx, ecx
mov ecx, dword [ebp - 0x218]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0xd2
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
lea ecx, [edx + eax]
mov eax, dword [ecx + 0x14]
mov edx, dword [eax + 0x14]
shl edx, 2
mov eax, dword [eax + 0xc]
sub eax, edx
cmp dword [eax], 0
jne 0x450826
mov dword [ebp - 4], 0xd3
mov dword [ecx + 0xc], 0xf
jmp 0x450d16
mov dword [ebp - 4], 0xd4
mov dword [ecx + 0xc], 0x13
jmp 0x450d16
mov dword [ebp - 4], 0xd5
cmp dl, 0x10
jne 0x450a97
mov dword [ebp - 4], 0xd6
mov dx, word [eax + 2]
test dx, dx
jle 0x450d16
mov dword [ebp - 4], 0xd7
cmp word [0x54e9a8], 0
je 0x4508e6
mov dword [ebp - 4], 0xd8
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450988
jmp 0x450970
mov dword [ebp - 4], 0xd9
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423b08
movsx ecx, dx
mov eax, dword [0x54eb9c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450988
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xda
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xdb
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 0x10
mov dword [ebp - 4], 0xdc
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov edx, dword [ecx + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov edx, dword [edx + eax*4 + 4]
mov eax, dword [edx + 0xc]
sub eax, dword [edx + 0x14]
xor edx, edx
mov dl, byte [eax + 3]
push edx
push ebx
xor edx, edx
mov dl, byte [eax + 2]
push edx
movsx eax, word [ecx + 4]
push eax
movsx ecx, word [ecx + 2]
push ecx
mov edx, dword [ebp + 8]
add edx, 4
push edx
call fcn.00446d70
mov dword [ebp - 4], 0xde
mov eax, dword [0x550264]
mov dword [eax + 0x38], ebx
mov dword [ebp - 4], 0xdf
jmp 0x450d10
mov dword [ebp - 4], 0xe0
cmp dl, 0x11
jne 0x450d16
mov dword [ebp - 4], 0xe1
mov dx, word [eax + 2]
test dx, dx
jle 0x450d16
mov dword [ebp - 4], 0xe2
cmp word [0x54e9a8], 0
je 0x450b44
mov dword [ebp - 4], 0xe3
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
push 0
push 0
xor eax, eax
mov al, byte [ecx + 1]
push eax
xor eax, eax
mov al, byte [ecx]
push eax
push 0xffffffffffffffff
push 0x423cd8
movsx ecx, dx
mov eax, dword [0x54eb98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450be6
jmp 0x450bce
mov dword [ebp - 4], 0xe4
mov eax, dword [eax + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov eax, dword [0x54eb40]
mov ebx, dword [eax]
push 0
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4]
lea eax, [eax + eax*4]
shl eax, 3
movsx eax, ax
push eax
movzx ax, byte [ecx]
lea eax, [eax + eax*4]
lea ecx, [eax + eax*4]
shl ecx, 5
movsx eax, cx
push eax
push 0
push 0
push 0
push 0x423cd8
movsx ecx, dx
mov eax, dword [0x54eb98]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x24]
push ebx
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0xe8]
fnclex
test eax, eax
jge 0x450be6
push 0xe8
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 4]
mov edx, dword [0x550208]
sub ebx, dword [edx + 0x14]
lea ebx, [ebx + ebx*2]
shl ebx, 4
mov edx, dword [edx + 0xc]
mov edx, dword [ebx + edx + 0x14]
mov dword [ebp - 0x1dc], edx
movsx edx, word [eax + 2]
mov eax, dword [0x54eb98]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ebx, dword [ecx + 0xc]
sub ebx, dword [ecx + 0x14]
movzx cx, byte [ebx + 2]
shl ecx, 3
sub cx, word [eax + edx*8 + 4]
movsx edx, cx
mov ecx, 2
mov eax, dword [ebp - 0x1dc]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov dword [eax + ecx*4], edx
mov dword [ebp - 4], 0xe6
mov ebx, dword [ebp - 0x24]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov word [edx + eax + 0x1c], 0xffff
mov dword [ebp - 4], 0xe7
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
shl edx, 4
mov eax, dword [ecx + 0xc]
mov dword [edx + eax + 0xc], 1
mov dword [ebp - 4], 0xe8
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx edx, word [eax + edx*4 + 2]
mov eax, ebx
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov dword [eax + ecx], edx
mov dword [ebp - 4], 0xe9
push ebx
call fcn.0044d840
mov dword [ebp - 4], 0xea
mov eax, 1
add ebx, eax
mov dword [ebp - 0x24], ebx
jmp 0x44dc31
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x450d46
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0xeb
cmp dword [0x54ea04], 0x19a
jle 0x450de5
mov dword [ebp - 4], 0xec
call fcn.0043f700
mov dword [ebp - 4], 0xed
mov edx, dword [0x550264]
mov edx, dword [edx + 0x38]
test edx, edx
jle 0x450db4
mov dword [ebp - 4], 0xee
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
push edx
movsx edx, word [eax + 4]
push edx
movsx eax, word [eax + 2]
push eax
mov ecx, dword [ebp + 8]
add ecx, 4
push ecx
call fcn.0045b650
mov dword [ebp - 4], 0xef
mov eax, dword [0x54ea04]
cmp eax, 0x1ce
jle 0x450de5
cmp eax, 0x1da
jge 0x450de5
mov eax, dword [0x54ea00]
cmp eax, 0x300
jle 0x450de5
cmp eax, 0x316
jl 0x45b58d
mov dword [ebp - 4], 0xf0
push 0x3f800000
push 0x209
push 0x55021c
push 0x550218
call fcn.0043e4b0
mov dword [ebp - 4], 0xf1
cmp dword [0x54f700], 0xc8
jne 0x450e94
mov dword [ebp - 4], 0xf2
movsx eax, word [0x550220]
mov edx, dword [0x54eb40]
mov edx, dword [edx]
push 0xffffffffffffffff
push 0
push 0x3f800000
mov ecx, dword [0x550208]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
shl eax, 4
mov ecx, dword [ecx + 0xc]
mov eax, dword [eax + ecx + 0x18]
push eax
push 0x258
push 0x320
mov eax, dword [0x54eb6c]
lea ecx, [eax - 0x3c]
push ecx
push eax
movsx eax, word [0x550220]
push eax
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0xf4]
fnclex
test eax, eax
jge 0x450e94
push 0xf4
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf3
mov eax, dword [0x54eb40]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x33
push 0x1b5
push 0
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x450ed3
push 0x58
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0xf4
mov dword [ebp - 0xd4], 0x3f800000
mov edx, dword [0x55020c]
inc edx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call ebx
push eax
push 0x423df8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call ebx
push eax
movzx ax, byte [ebp - 0x3c]
inc eax
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa8]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call ebx
lea ecx, [ebp - 0xd4]
push ecx
push 0x16d
push 0x1b6
push 3
lea edx, [ebp - 0xac]
push edx
push 0xe
call fcn.00439510
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
lea eax, [ebp - 0xa0]
push eax
push 4
call dword [fcn.00401248]
add esp, 0x14
mov dword [ebp - 4], 0xf5
mov eax, dword [0x54f700]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xf7
mov eax, 0x1e0
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0xf8
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xf9
xor eax, eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.0053b820
mov dword [ebp - 4], 0xfa
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
movsx ecx, word [eax + 4]
mov dword [ebp - 0x160], ecx
movsx edx, word [eax + 2]
mov dword [ebp - 0x24], edx
mov edx, dword [0x54ef54]
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x24], eax
jg 0x451ea1
mov dword [ebp - 4], 0xfb
xor ebx, ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x88], ebx
mov dword [ebp - 4], 0xfd
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 4], 0xfe
mov dword [ebp - 0x78], 0x1dc
mov dword [ebp - 4], 0xff
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea eax, [eax + ecx*2]
mov cl, byte [eax + 1]
mov byte [ebp - 0x239], cl
mov dword [ebp - 4], 0x100
cmp cl, 9
jne 0x4510b4
mov dword [ebp - 4], 0x101
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x102
mov dword [ebp - 0x60], 0x2d7
jmp 0x4516a7
mov dword [ebp - 4], 0x103
cmp cl, 0xa
jne 0x451100
mov dword [ebp - 4], 0x104
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x8ca]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x105
mov dword [ebp - 0x60], 0x2ec
jmp 0x4516a7
mov dword [ebp - 4], 0x106
cmp cl, 0x61
jne 0x451265
mov dword [ebp - 4], 0x107
mov al, byte [eax]
mov byte [ebp - 0x240], al
xor cx, cx
mov cl, al
sub ecx, 0x10
movsx eax, cx
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x108
mov dword [ebp - 0x60], 0x301
mov dword [ebp - 4], 0x109
xor ecx, ecx
mov eax, dword [ebp + 8]
mov cl, byte [eax + 1]
cmp dword [ebp - 0x38], ecx
jg 0x45122c
mov dword [ebp - 4], 0x10a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0xc]
mov edx, dword [ebp - 0x38]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*8 + 4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x54eb54], eax
mov dword [ebp - 4], 0x10b
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*8 + 4]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x54eb50], eax
mov dword [ebp - 4], 0x10c
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x54ef54]
mov ecx, dword [0x54eb54]
dec ecx
cmp eax, ecx
jg 0x451216
mov dword [ebp - 4], 0x10d
mov ecx, eax
mov eax, dword [0x54eb5c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x10e
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4511b1
mov dword [ebp - 4], 0x10f
mov dword [ebp - 0x88], 0xffffffff
jmp 0x4516a7
mov dword [ebp - 4], 0x110
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea ecx, [eax + eax*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
mov eax, dword [ebp - 0x240]
and eax, 0xff
xor ecx, ecx
mov cl, byte [ebx + eax + 0x798]
mov ebx, ecx
mov dword [ebp - 0x5c], ebx
jmp 0x4516a7
mov dword [ebp - 4], 0x111
cmp cl, 0x62
jne 0x451352
mov dword [ebp - 4], 0x112
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x170], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x170]
jg 0x451330
mov dword [ebp - 4], 0x113
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
movzx cx, byte [ecx + ebx*4 + 2]
movzx bx, byte [eax]
add ebx, 0x20
cmp cx, bx
je 0x4512e4
mov dword [ebp - 4], 0x117
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x45128e
mov dword [ebp - 4], 0x114
mov ecx, dword [0x54ea00]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x451330
add eax, 0x15
cmp ecx, eax
jge 0x451330
mov ecx, dword [0x54ea04]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x451330
add eax, 0x15
cmp ecx, eax
jge 0x451330
mov dword [ebp - 4], 0x115
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0x116
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x118
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x119
mov dword [ebp - 0x60], 0x2d7
jmp 0x4516a7
mov dword [ebp - 4], 0x11a
cmp cl, 0x63
jne 0x4515d3
mov dword [ebp - 4], 0x11b
xor ecx, ecx
mov ebx, dword [ebp + 8]
mov cl, byte [ebx]
mov dword [ebp - 0x178], ecx
mov ecx, 1
mov dword [ebp - 0x38], ecx
cmp ecx, dword [ebp - 0x178]
jg 0x451579
mov dword [ebp - 4], 0x11c
mov ebx, dword [ebp + 8]
mov ebx, dword [ebx + 8]
sub ecx, dword [ebx + 0x14]
lea ebx, [ecx*8]
sub ebx, ecx
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + ebx*4]
mov bl, byte [ecx + 2]
cmp bl, byte [eax]
je 0x4513c9
mov dword [ebp - 4], 0x12b
mov ebx, 1
mov ecx, dword [ebp - 0x38]
add ecx, ebx
jmp 0x45137b
mov dword [ebp - 4], 0x11d
movzx dx, byte [ecx]
lea eax, [edx*8]
sub eax, edx
lea edx, [eax + eax*2 + 0x2fc]
movsx eax, dx
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x11e
cmp eax, 0x2fc
jne 0x45140b
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x60], 0x15e
jmp 0x451427
mov dword [ebp - 4], 0x120
movzx ax, byte [ecx + 1]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x113]
movsx edx, ax
mov dword [ebp - 0x60], edx
mov dword [ebp - 4], 0x121
mov eax, dword [ecx + 0x10]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [0x54eb54], eax
mov dword [ebp - 4], 0x122
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 0x10]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [0x54eb50], eax
mov dword [ebp - 4], 0x123
mov ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x124
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x38]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x4514c2
mov dword [ebp - 4], 0x125
push 0
push 0
push 0
mov cl, byte [eax + 0xc]
push ecx
call fcn.00448fd0
mov ebx, eax
add ebx, 6
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x126
xor eax, eax
mov dword [ebp - 0x30], eax
mov edx, dword [0x54ef54]
mov ecx, dword [0x54eb54]
dec ecx
cmp eax, ecx
jg 0x451539
mov dword [ebp - 4], 0x127
mov ecx, eax
mov eax, dword [0x54eb5c]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cx, word [eax + ecx*2]
sub cx, 0x20
movsx ebx, cx
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
sub ebx, eax
mov ecx, dword [edx + 0xc]
xor eax, eax
mov al, byte [ebx + ecx + 0x59a]
mov ebx, dword [ebp - 0x5c]
add ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x128
mov ecx, 1
mov eax, dword [ebp - 0x30]
add eax, ecx
mov dword [ebp - 0x30], eax
jmp 0x4514d4
mov dword [ebp - 4], 0x129
mov eax, dword [ebp - 0x8c]
mov ecx, dword [0x54ea00]
cmp ecx, eax
jle 0x45157c
add eax, ebx
cmp ecx, eax
jge 0x45157c
mov eax, dword [ebp - 0x68]
mov ecx, dword [0x54ea04]
cmp ecx, eax
jle 0x45157c
add eax, 0x15
cmp ecx, eax
jge 0x45157c
mov dword [ebp - 4], 0x12a
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x48], ecx
jmp 0x45157c
mov ebx, dword [ebp - 0x5c]
mov dword [ebp - 4], 0x12c
test ebx, ebx
jne 0x4516a7
mov dword [ebp - 4], 0x12d
mov ebx, 0x15
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x12e
mov dword [ebp - 0x38], 0xa
mov dword [ebp - 4], 0x12f
mov dword [ebp - 0x60], 0x2d7
mov dword [ebp - 4], 0x130
mov dword [ebp - 4], 0x131
mov dword [ebp - 0x88], 0
jmp 0x4516a7
mov dword [ebp - 4], 0x132
cmp cl, 0x64
jne 0x451655
mov dword [ebp - 4], 0x133
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx eax, word [ecx + eax*4 + 2]
cmp dword [ebp - 0x24], eax
jle 0x4516a7
mov dword [ebp - 4], 0x134
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.0053ba30
mov dword [ebp - 4], 0x135
mov ecx, dword [0x54f700]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x136
add dword [ebp - 0x68], 0x17
mov edx, dword [0x54ef54]
jmp 0x4516a7
mov dword [ebp - 4], 0x137
mov ebx, dword [edx + 0x14]
mov ecx, ebx
shl ecx, 4
add ecx, ebx
lea ecx, [ecx + ecx*2]
shl ecx, 1
mov ebx, dword [edx + 0xc]
sub ebx, ecx
xor ecx, ecx
mov cl, byte [eax]
xor eax, eax
mov al, byte [ebx + ecx + 0x798]
mov ebx, eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 4], 0x138
movzx cx, byte [ebp - 0x239]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2 + 0x21a]
movsx eax, cx
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 0x139
test ebx, ebx
jle 0x451e5e
mov dword [ebp - 4], 0x13a
mov ecx, dword [ebp - 0x8c]
add ecx, ebx
cmp ecx, 0x319
jle 0x451710
mov dword [ebp - 4], 0x13b
mov byte [ebp - 0xd0], 0
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.0053ba30
mov dword [ebp - 4], 0x13c
mov edx, dword [0x54f700]
mov dword [ebp - 0x8c], edx
mov dword [ebp - 4], 0x13d
add dword [ebp - 0x68], 0x17
mov dword [ebp - 4], 0x13e
mov edx, dword [ebp - 0x68]
cmp edx, 0x244
jg 0x451ea1
mov dword [ebp - 4], 0x13f
mov eax, dword [ebp - 0x88]
cmp eax, 0xffffffff
je 0x451c21
test eax, eax
je 0x451b60
mov dword [ebp - 4], 0x14e
mov ecx, dword [0x54ea00]
mov eax, dword [ebp - 0x8c]
cmp ecx, eax
jle 0x4518d6
add eax, ebx
cmp ecx, eax
jge 0x4518d6
mov eax, dword [0x54ea04]
cmp eax, edx
jle 0x4518d6
add edx, 0x15
cmp eax, edx
jge 0x4518d6
mov dword [ebp - 4], 0x14f
mov eax, dword [ebp - 0x38]
add eax, 0xa
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x150
cmp word [0x54e978], 0
je 0x4517b2
mov dword [ebp - 4], 0x151
mov dword [ebp - 0x7c], 0x190
jmp 0x4517c0
mov dword [ebp - 4], 0x152
mov dword [ebp - 0x78], 0x1ed
mov dword [ebp - 4], 0x153
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 6], 0xfffe
jne 0x451836
mov dword [ebp - 4], 0x154
push ecx
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0xc]
push ecx
call fcn.0045e530
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
movsx eax, word [ebp - 0xd0]
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x155
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff9
jne 0x451876
mov dword [ebp - 4], 0x156
mov cx, word [eax + 4]
push ecx
call fcn.004a5600
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0x157
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 8]
mov eax, dword [ebp - 0x48]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0xfff7
jne 0x4518d6
mov dword [ebp - 4], 0x158
movsx ecx, word [eax + 4]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0x159
mov ecx, dword [eax + 0x18]
mov edx, dword [ecx + 0x14]
shl edx, 3
mov ecx, dword [ecx + 0xc]
sub ecx, edx
movsx edx, word [ecx + 0xa]
mov dword [ebp - 0x80], edx
mov dword [ebp - 4], 0x15a
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x15b
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 0x15
push 5
mov edx, dword [ebp - 0x88]
push edx
mov edx, dword [ebp - 0x7c]
push edx
mov edx, dword [ebp - 0x68]
push edx
mov edx, dword [ebp - 0x8c]
push edx
push 2
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x45192b
push 0x7c
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15c
mov eax, dword [0x54eb40]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
lea ecx, [ebx - 5]
push ecx
mov ecx, dword [ebp - 0x88]
push ecx
mov ecx, dword [ebp - 0x7c]
sub ecx, ebx
add ecx, 0x195
push ecx
mov ecx, dword [ebp - 0x68]
push ecx
mov ecx, dword [ebp - 0x8c]
add ecx, 5
push ecx
push 2
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x45198d
push 0x7c
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x15d
mov eax, dword [ebp - 0x38]
cmp eax, 0x12
jge 0x451e4b
mov dword [ebp - 4], 0x15e
mov dword [ebp - 0x88], 3
mov dword [ebp - 4], 0x15f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 8]
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
cmp word [eax + 6], 0
jl 0x451a03
mov dword [ebp - 4], 0x160
mov ecx, dword [ebp - 0x68]
add ecx, 3
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 3
push edx
push 0xffffffffffffffff
mov al, byte [eax + 0xc]
push eax
call fcn.00448fd0
add eax, 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x161
mov ecx, dword [0x54eb54]
dec ecx
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x30], 0
mov edx, dword [0x54ef54]
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x30]
cmp ecx, eax
jg 0x451e51
mov dword [ebp - 4], 0x162
mov eax, dword [0x54eb5c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 0x64], ebx
mov dword [ebp - 4], 0x163
lea ebx, [ebx + ebx*4]
shl ebx, 1
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x11
push 0xa
mov ecx, dword [ebp - 0x78]
push ecx
push ebx
mov eax, dword [ebp - 0x68]
add eax, 3
push eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x88]
lea ecx, [ecx + eax - 1]
push ecx
push 5
mov eax, dword [0x54eb40]
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451abc
push 0x7c
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x164
mov eax, dword [0x54eb40]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0xf
push 0xa
mov ecx, dword [ebp - 0x60]
push ecx
push ebx
mov ecx, dword [ebp - 0x68]
add ecx, 4
push ecx
mov ecx, dword [ebp - 0x8c]
mov ebx, dword [ebp - 0x88]
add ecx, ebx
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451b16
push 0x7c
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x165
mov edx, dword [0x54ef54]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor eax, eax
mov ebx, dword [ebp - 0x64]
mov al, byte [ecx + ebx + 0x59a]
add dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x166
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x451a24
mov dword [ebp - 4], 0x140
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 4]
mov edx, dword [0x54eb40]
mov edx, dword [edx]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 0x15
push 0x15
mov ecx, dword [ebp - 0x60]
push ecx
mov ecx, dword [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
movzx cx, byte [eax + ecx*2]
lea eax, [ecx*8]
sub eax, ecx
lea ecx, [eax + eax*2]
movsx eax, cx
push eax
mov ecx, dword [ebp - 0x68]
push ecx
mov eax, dword [ebp - 0x8c]
push eax
push 5
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451bd9
push 0x7c
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x141
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x8c]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*2]
push ecx
call fcn.0053ba30
lea edx, [ebp - 0x90]
push edx
call edi
jmp 0x451e4b
mov dword [ebp - 4], 0x142
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0x143
mov ecx, dword [0x54eb54]
dec ecx
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x30], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x30]
cmp eax, edx
jg 0x451d29
mov dword [ebp - 4], 0x144
mov ecx, eax
mov eax, dword [0x54eb5c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov ax, word [edx + ecx*2]
sub ax, 0x20
movsx ebx, ax
mov dword [ebp - 4], 0x145
mov ecx, dword [0x54eb40]
mov edx, dword [ecx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x15
push 0x15
push 0x301
lea eax, [ebx*8]
sub eax, ebx
lea ecx, [eax + eax*2]
push ecx
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0x8c]
add eax, ecx
push eax
push 5
mov ecx, dword [0x54eb40]
push ecx
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451ce2
push 0x7c
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x146
mov edx, dword [0x54ef54]
mov ecx, dword [edx + 0x14]
mov eax, ecx
shl eax, 4
add eax, ecx
lea eax, [eax + eax*2]
shl eax, 1
mov ecx, dword [edx + 0xc]
sub ecx, eax
xor edx, edx
mov dl, byte [ecx + ebx + 0x798]
add dword [ebp - 0x88], edx
mov dword [ebp - 4], 0x147
mov eax, 1
add dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x5c]
jmp 0x451c47
mov dword [ebp - 4], 0x148
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f800000
push 4
push 2
push 0x216
push 0x4d4
mov edx, dword [ebp - 0x68]
add edx, 0xf
push edx
mov edx, dword [ebp - 0x8c]
add edx, 0xfffffffe
push edx
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x451d83
push 0x7c
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x149
mov eax, dword [0x54eb40]
mov edx, dword [eax]
lea ecx, [ebp - 0xd0]
push ecx
push 0x3f800000
push 4
lea ecx, [ebx + 2]
push ecx
push 0x216
mov ecx, 0x7c9
sub ecx, ebx
push ecx
mov ecx, dword [ebp - 0x68]
add ecx, 0xf
push ecx
mov ecx, dword [ebp - 0x8c]
push ecx
push 5
push eax
call dword [edx + 0x7c]
fnclex
test eax, eax
jge 0x451ddf
push 0x7c
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x14a
mov eax, dword [0x54ea00]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x451e4b
add ecx, ebx
cmp eax, ecx
jge 0x451e4b
mov ecx, dword [0x54ea04]
mov eax, dword [ebp - 0x68]
cmp ecx, eax
jle 0x451e4b
add eax, 0x15
cmp ecx, eax
jge 0x451e4b
mov dword [ebp - 4], 0x14b
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*8]
cmp byte [eax], 0
jne 0x451e3d
mov dword [ebp - 4], 0x14c
movsx eax, word [eax + 2]
mov dword [ebp - 0x44], eax
jmp 0x451e4b
mov dword [ebp - 4], 0x14d
movsx ecx, word [eax + 2]
mov dword [ebp - 0x54], ecx
mov edx, dword [0x54ef54]
mov dword [ebp - 4], 0x167
add dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x168
mov eax, dword [ebp - 0x24]
cmp eax, dword [0x550210]
jne 0x451e8d
mov dword [ebp - 4], 0x169
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 4], 0x16a
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x16b
mov eax, 1
add dword [ebp - 0x24], eax
jmp 0x451024
mov dword [ebp - 4], 0x16c
mov byte [ebp - 0xd0], 0
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.0053ba30
mov dword [ebp - 4], 0x16d
call fcn.0053bb40
mov dword [ebp - 4], 0x16e
mov eax, dword [ebp - 0x40]
cmp eax, 0x253
jne 0x451f09
mov dword [ebp - 4], 0x16f
inc word [0x55020c]
mov dword [ebp - 4], 0x44c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45b63a
jmp 0x45b621
mov dword [ebp - 4], 0x170
cmp dword [0x54eb3c], 0x3e7
jne 0x4524d6
mov dword [ebp - 4], 0x171
mov cx, word [0x54eb3a]
mov dword [ebp - 4], 0x172
cmp cx, 7
jne 0x451f50
mov dword [ebp - 4], 0x173
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045c2a0
jmp 0x4523db
mov dword [ebp - 4], 0x174
cmp cx, 8
jne 0x451f72
mov dword [ebp - 4], 0x175
mov edx, dword [ebp + 8]
push edx
call fcn.0045c520
jmp 0x4523db
mov dword [ebp - 4], 0x176
cmp cx, 0x18
jne 0x451fb8
mov dword [ebp - 4], 0x177
mov word [0x55020c], 0
mov dword [ebp - 4], 0x178
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x10]
mov ecx, dword [eax + 0x14]
lea ecx, [ecx + ecx*2]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
movsx eax, word [edx + 2]
mov dword [0x550210], eax
jmp 0x4523db
mov dword [ebp - 4], 0x179
cmp cx, 0x19
jne 0x452000
mov dword [ebp - 4], 0x17a
movzx ax, byte [ebp - 0x3c]
mov word [0x55020c], ax
mov dword [ebp - 4], 0x17b
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx ecx, word [eax + edx*4 + 2]
mov dword [0x550210], ecx
jmp 0x4523db
mov dword [ebp - 4], 0x17c
cmp cx, 0x1a
jne 0x45205b
mov dword [ebp - 4], 0x17d
mov ax, word [0x55020c]
test ax, ax
jle 0x4523db
mov dword [ebp - 4], 0x17e
dec ax
mov word [0x55020c], ax
mov dword [ebp - 4], 0x17f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x550210], edx
jmp 0x4523db
mov dword [ebp - 4], 0x180
cmp cx, 0x1b
jne 0x4520bb
mov dword [ebp - 4], 0x181
movzx cx, byte [ebp - 0x3c]
mov ax, word [0x55020c]
cmp ax, cx
jge 0x4523db
mov dword [ebp - 4], 0x182
inc ax
mov word [0x55020c], ax
mov dword [ebp - 4], 0x183
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, ax
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
movsx edx, word [ecx + eax*4 + 2]
mov dword [0x550210], edx
jmp 0x4523db
mov dword [ebp - 4], 0x184
cmp cx, 0x1c
jne 0x4520e7
mov dword [ebp - 4], 0x185
push 0
add eax, 0xffffffe9
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045b850
jmp 0x4523db
mov dword [ebp - 4], 0x186
cmp cx, 0x1d
jne 0x452115
mov dword [ebp - 4], 0x187
mov edx, dword [ebp - 0x3c]
push edx
add eax, 0x17
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0045b850
jmp 0x4523db
mov dword [ebp - 4], 0x188
cmp cx, 0x1e
jne 0x452148
mov dword [ebp - 4], 0x189
mov eax, dword [0x550210]
test eax, eax
jle 0x4523db
mov dword [ebp - 4], 0x18a
dec eax
mov dword [0x550210], eax
jmp 0x4523db
mov dword [ebp - 4], 0x18b
cmp cx, 0x1f
jne 0x45218d
mov dword [ebp - 4], 0x18c
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [0x550210]
cmp ecx, eax
jge 0x4523db
mov dword [ebp - 4], 0x18d
mov eax, ecx
inc eax
mov dword [0x550210], eax
jmp 0x4523db
mov dword [ebp - 4], 0x18e
cmp cx, 0xd
je 0x4521ae
cmp cx, 0x20
jl 0x4523db
cmp cx, 0x7e
jg 0x4523db
mov dword [ebp - 4], 0x18f
mov ebx, dword [ebp + 8]
push ebx
call fcn.0045c380
mov dword [ebp - 4], 0x190
mov ax, word [0x54eb3a]
cmp ax, 0xd
jne 0x452236
mov dword [ebp - 4], 0x191
mov ebx, dword [ebx + 4]
mov ecx, dword [0x550210]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2 + 1], 0x64
mov dword [ebp - 4], 0x192
cmp dword [ebp - 0x68], 0x23c
jne 0x4523db
mov dword [ebp - 4], 0x193
inc word [0x55020c]
mov dword [ebp - 4], 0x194
mov word [0x54eb3a], 0
mov dword [ebp - 4], 0x44c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45b63a
jmp 0x45b621
mov dword [ebp - 4], 0x195
mov ecx, dword [0x550264]
mov edx, dword [ecx + 0x2c]
sub edx, 9
je 0x45231a
sub edx, 2
je 0x452297
mov dword [ebp - 4], 0x1a5
mov eax, dword [ebx + 4]
mov edx, dword [0x550210]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov cl, byte [ecx + 0x2c]
mov byte [eax + edx*2 + 1], cl
mov dword [ebp - 4], 0x1a6
mov ebx, dword [ebx + 4]
mov dl, byte [0x54eb3a]
sub dl, 0x20
mov eax, dword [0x550210]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov byte [ecx + eax*2], dl
jmp 0x4523db
mov dword [ebp - 4], 0x19f
mov dword [ebp - 4], 0x1a0
cmp ax, 0x31
jl 0x4522f3
cmp ax, 0x39
jg 0x4522f3
mov dword [ebp - 4], 0x1a1
mov eax, dword [ebx + 4]
mov edx, dword [0x550210]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov byte [eax + edx*2 + 1], 0x61
mov dword [ebp - 4], 0x1a2
mov ebx, dword [ebx + 4]
mov cl, byte [0x54eb3a]
sub cl, 0x20
mov edx, dword [0x550210]
sub edx, dword [ebx + 0x14]
mov eax, dword [ebx + 0xc]
mov byte [eax + edx*2], cl
jmp 0x4523db
mov dword [ebp - 4], 0x1a3
mov eax, dword [ebx + 4]
mov ecx, dword [0x550210]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0xb
mov dword [ebp - 4], 0x1a4
jmp 0x4523c2
mov dword [ebp - 4], 0x196
mov dword [ebp - 4], 0x197
cmp ax, 0x2f
jl 0x45236f
cmp ax, 0x40
jg 0x45236f
mov dword [ebp - 4], 0x198
mov eax, dword [ebx + 4]
mov ecx, dword [0x550210]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x63
mov dword [ebp - 4], 0x199
mov ebx, dword [ebx + 4]
mov eax, dword [0x550210]
sub eax, dword [ebx + 0x14]
mov ecx, dword [ebx + 0xc]
mov dl, byte [0x54eb3a]
mov byte [ecx + eax*2], dl
jmp 0x4523db
mov dword [ebp - 4], 0x19a
cmp ax, 0x20
jne 0x4523a0
mov dword [ebp - 4], 0x19b
mov eax, dword [ebx + 4]
mov ecx, dword [0x550210]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 9
mov dword [ebp - 4], 0x19c
jmp 0x4523c2
mov dword [ebp - 4], 0x19d
mov eax, dword [ebx + 4]
mov ecx, dword [0x550210]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov byte [edx + ecx*2 + 1], 0x62
mov dword [ebp - 4], 0x19e
mov ebx, dword [ebx + 4]
mov al, byte [0x54eb3a]
sub al, 0x20
mov ecx, dword [0x550210]
sub ecx, dword [ebx + 0x14]
mov edx, dword [ebx + 0xc]
mov byte [edx + ecx*2], al
mov dword [ebp - 4], 0x1a7
cmp word [0x54eb3a], 0
je 0x4523fd
mov dword [ebp - 4], 0x1a8
mov dword [0x54f704], 0x42a20000
mov dword [ebp - 4], 0x1a9
fld dword [0x54ea70]
fadd dword [0x54f704]
fstp dword [0x54f704]
mov dword [ebp - 4], 0x1aa
fld dword [0x54f704]
fcomp dword [0x40155c]
fnstsw ax
test ah, 0x41
jne 0x4524c6
mov dword [ebp - 4], 0x1ab
mov edx, dword [0x54eb40]
mov ebx, dword [edx]
lea eax, [ebp - 0xd0]
push eax
push 0x3f800000
push 0x14
push 6
mov ecx, dword [0x550264]
mov ecx, dword [ecx + 0x2c]
lea eax, [ecx*8]
sub eax, ecx
lea eax, [eax + eax*2 + 0x21a]
push eax
push 0x78c
mov ecx, dword [ebp - 0x40]
push ecx
mov eax, dword [ebp - 0x4c]
push eax
push 5
push edx
call dword [ebx + 0x7c]
fnclex
test eax, eax
jge 0x45249b
push 0x7c
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1ac
fld dword [0x54f704]
fcomp dword [0x401558]
fnstsw ax
test ah, 0x41
jne 0x4524c6
mov dword [ebp - 4], 0x1ad
mov dword [0x54f704], 0
mov dword [ebp - 4], 0x1ae
mov word [0x54eb3a], 0
mov dword [ebp - 4], 0x1af
mov edx, dword [0x550264]
mov al, byte [edx + 0x34]
mov dword [ebp - 4], 0x1b0
test al, al
jne 0x452999
mov dword [ebp - 4], 0x1b1
mov edx, 0x424e60
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452555
mov dword [ebp - 4], 0x1b2
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1b3
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x26f
push 0x1a8
push 0x1bf
push eax
call dword [ecx + 0x58]
fnclex
test eax, eax
jge 0x45259a
push 0x58
push 0x420b44
mov edx, dword [0x54eb40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1b4
mov edx, 0x424e68
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x241
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4525f7
mov dword [ebp - 4], 0x1b5
mov dword [ebp - 0x34], 4
mov dword [ebp - 4], 0x1b6
mov edx, 0x424e7c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b8
push 0x243
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452654
mov dword [ebp - 4], 0x1b7
mov dword [ebp - 0x34], 3
mov dword [ebp - 4], 0x1b8
cmp word [0x550222], 0
je 0x452723
mov dword [ebp - 4], 0x1b9
mov edx, 0x424e90
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4526c6
mov dword [ebp - 4], 0x1ba
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1bb
mov edx, 0x424ea0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1c8
push 0x1c0
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4527be
mov dword [ebp - 4], 0x1bc
mov dword [ebp - 0x34], 2
jmp 0x4527be
mov dword [ebp - 4], 0x1bd
mov edx, 0x424cc4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a8
push 0x1c0
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452780
mov dword [ebp - 4], 0x1be
mov dword [ebp - 0x34], 1
mov dword [ebp - 4], 0x1bf
mov edx, 0x424ea0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1c8
push 0x1c0
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1c0
mov eax, dword [0x54eb40]
mov ecx, dword [eax]
lea edx, [ebp - 0xd0]
push edx
push 0x3f000000
push 0x31
push 0xae
push 0x1e5
push 0x640
push 0x1a8
push 0x271
push 5
push eax
call dword [ecx + 0x7c]
fnclex
test eax, eax
jge 0x452814
push 0x7c
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1c1
mov edx, dword [0x54ea00]
cmp edx, 0x270
jle 0x45291b
mov dword [ebp - 4], 0x1c2
xor eax, eax
mov dword [ebp - 4], 0x1c3
mov ecx, dword [0x54ea04]
cmp ecx, 0x1a7
jle 0x452890
cmp ecx, 0x1c0
jge 0x452890
mov dword [ebp - 4], 0x1c4
add edx, 0xfffffd9c
mov dword [ebp - 0x244], edx
fild dword [ebp - 0x244]
fstp qword [ebp - 0x24c]
fld qword [ebp - 0x24c]
fdiv qword [0x4020d0]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [0x54ea04]
mov edx, dword [0x54ea00]
mov dword [ebp - 4], 0x1c5
cmp ecx, 0x1c2
jle 0x4528d8
cmp ecx, 0x1e0
jge 0x4528d8
mov dword [ebp - 4], 0x1c6
add edx, 0xfffffe4b
mov dword [ebp - 0x250], edx
fild dword [ebp - 0x250]
fstp qword [ebp - 0x258]
fld qword [ebp - 0x258]
fdiv qword [0x4020d0]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 4], 0x1c7
test eax, eax
jle 0x45291b
cmp eax, 0xe
jge 0x45291b
mov dword [ebp - 4], 0x1c8
lea ebx, [eax - 1]
push 0
push ebx
call fcn.0043e360
mov dword [ebp - 4], 0x1c9
cmp word [0x54e978], 0
je 0x45291b
mov dword [ebp - 4], 0x1ca
mov edx, dword [0x550264]
mov dword [edx + 0x2c], ebx
mov dword [ebp - 4], 0x1cb
push 0xffffffffffffffff
mov eax, dword [0x550264]
mov ecx, dword [eax + 0x2c]
push ecx
call fcn.0043e360
mov dword [ebp - 4], 0x39e
cmp word [0x54e978], 0
jne 0x45b4aa
mov dword [ebp - 4], 0x39f
mov eax, dword [0x550264]
mov eax, dword [eax + 0x30]
mov ebx, dword [ebp - 0x34]
cmp eax, ebx
jne 0x45b4ca
mov dword [ebp - 4], 0x3a0
mov dword [ebp - 4], 0x3a1
mov edx, 1
cmp eax, edx
jne 0x45989b
mov dword [ebp - 4], 0x3a2
mov cx, word [0x550222]
not cx
mov word [0x550222], cx
jmp 0x45b494
mov dword [ebp - 4], 0x1cc
cmp al, 1
jne 0x452932
mov dword [ebp - 4], 0x1cd
mov edx, 0x424cd8
lea ecx, [ebp - 0xa0]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
push 0
push 0
push 0
push 0
push 0x1b4
push 0x34
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452a04
mov dword [ebp - 4], 0x1ce
mov dword [ebp - 0x34], 6
mov dword [ebp - 4], 0x1cf
mov edx, 0x424aec
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x196
push 0x16
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452a5e
mov dword [ebp - 4], 0x1d0
mov dword [ebp - 0x34], 5
mov dword [ebp - 4], 0x1d1
cmp word [0x55023a], 0
je 0x452aec
mov dword [ebp - 4], 0x1d2
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp byte [eax + edx*4], 8
jae 0x452aec
mov dword [ebp - 4], 0x1d3
mov edx, 0x424afc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x16
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452aec
mov dword [ebp - 4], 0x1d4
mov dword [ebp - 0x34], 8
mov dword [ebp - 4], 0x1d5
mov eax, dword [0x54eb40]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1d9
push 0x320
push 0x19d
push 0x120
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x452b31
push 0x58
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d6
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
cmp byte [ecx + eax*4], 8
jae 0x453491
mov dword [ebp - 4], 0x1d7
mov eax, dword [0x54eb40]
mov edx, dword [eax]
push 0xffffffffffffffff
push 0xa
push 0x1c4
push 0x11d
push 0x197
push 0x44
push eax
call dword [edx + 0x58]
fnclex
test eax, eax
jge 0x452b9a
push 0x58
push 0x420b44
mov ecx, dword [0x54eb40]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x1d8
mov edx, 0x424b0c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1d9
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x58
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452c2f
mov dword [ebp - 4], 0x1da
mov dword [ebp - 0x34], 0x12
mov dword [ebp - 4], 0x1db
mov edx, 0x424ce0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x6b
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1dc
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0x7e
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452cc4
mov dword [ebp - 4], 0x1dd
mov dword [ebp - 0x34], 0x13
mov dword [ebp - 4], 0x1de
mov edx, 0x424ebc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0x91
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1df
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xaa
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452d5f
mov dword [ebp - 4], 0x1e0
mov dword [ebp - 0x34], 0x14
mov dword [ebp - 4], 0x1e1
mov edx, 0x424ec8
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xbd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e2
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x197
push 0xd7
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452dfa
mov dword [ebp - 4], 0x1e3
mov dword [ebp - 0x34], 0x15
mov dword [ebp - 4], 0x1e4
mov edx, 0x424ed4
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x197
push 0xe8
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e5
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 9
push 0
push 0x197
push 0xfd
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452e95
mov dword [ebp - 4], 0x1e6
mov dword [ebp - 0x34], 0x16
mov dword [ebp - 4], 0x1e7
mov edx, 0x424ee0
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0x44
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1e8
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1a6
push 0x5d
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452f2a
mov dword [ebp - 4], 0x1e9
mov dword [ebp - 0x34], 0xe
mov dword [ebp - 4], 0x1ea
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 1
push 0
push 0x1a6
push 0x70
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452f84
mov dword [ebp - 4], 0x1eb
mov dword [ebp - 0x34], 0xf
mov dword [ebp - 4], 0x1ec
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 0
push 0x1a6
push 0x83
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x452fe1
mov dword [ebp - 4], 0x1ed
mov dword [ebp - 0x34], 0x17
mov dword [ebp - 4], 0x1ee
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 3
push 0
push 0x1a6
push 0x96
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45303e
mov dword [ebp - 4], 0x1ef
mov dword [ebp - 0x34], 0x19
mov dword [ebp - 4], 0x1f0
mov edx, 0x424eec
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0xe
push 0x1a6
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f1
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 4
push 0
push 0x1a6
push 0xc2
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4530d9
mov dword [ebp - 4], 0x1f2
mov dword [ebp - 0x34], 0x10
mov dword [ebp - 4], 0x1f3
mov edx, 0x424efc
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1a6
push 0xd5
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1f4
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 0
push 0x1a6
push 0xe8
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453174
mov dword [ebp - 4], 0x1f5
mov dword [ebp - 0x34], 0x11
mov dword [ebp - 4], 0x1f6
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 7
push 0
push 0x1a6
push 0xfb
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4531d1
mov dword [ebp - 4], 0x1f7
mov dword [ebp - 0x34], 0xd
mov dword [ebp - 4], 0x1f8
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0xffffffffffffffff
push 0
push 0x1a6
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45322e
mov dword [ebp - 4], 0x1f9
mov dword [ebp - 0x34], 0x1a
mov dword [ebp - 4], 0x1fa
mov edx, 0x424f08
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x44
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fb
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0x69
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4532c3
mov dword [ebp - 4], 0x1fc
mov dword [ebp - 0x34], 0xa
mov dword [ebp - 4], 0x1fd
mov edx, 0x424f1c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0x7c
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1fe
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xaa
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45335b
mov dword [ebp - 4], 0x1ff
mov dword [ebp - 0x34], 0xb
mov dword [ebp - 4], 0x200
mov edx, 0x424f30
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xbd
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x201
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 0
push 0
push 0x1b5
push 0xdc
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4533f6
mov dword [ebp - 4], 0x202
mov dword [ebp - 0x34], 0xc
mov dword [ebp - 4], 0x203
mov edx, 0x424f40
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 6
push 5
push 0
push 0x1b5
push 0xee
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x204
mov edx, 0x424030
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 8
push 0
push 0x1b5
push 0x104
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453491
mov dword [ebp - 4], 0x205
mov dword [ebp - 0x34], 0x18
mov dword [ebp - 4], 0x206
mov edx, 0x424f4c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 6
push 5
push 0x197
push 0x10e
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4534ee
mov dword [ebp - 4], 0x207
mov dword [ebp - 0x34], 7
mov dword [ebp - 4], 0x208
mov edx, dword [0x550264]
mov al, byte [edx + 0x35]
test al, al
jbe 0x4538f9
mov dword [ebp - 4], 0x209
cmp al, 5
jae 0x45371f
mov dword [ebp - 4], 0x20a
mov dword [ebp - 0x8c], 0x120
mov dword [ebp - 4], 0x20b
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea eax, [eax + eax*4 + 0x18e]
movsx ecx, ax
mov dword [ebp - 0x68], ecx
mov dword [ebp - 4], 0x20c
mov cl, byte [edx + 0x35]
cmp cl, 1
jbe 0x453650
mov dword [ebp - 4], 0x20d
mov edx, 0x424f54
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xff
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4535c7
mov dword [ebp - 4], 0x20e
mov edx, dword [0x550264]
movzx ax, byte [edx + 0x35]
add eax, 0x3e8
movsx ecx, ax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x20f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [0x550264]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x4536dc
mov dword [ebp - 4], 0x210
mov edx, 0x424f5c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x10a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4536dc
mov dword [ebp - 4], 0x211
jmp 0x4536c6
mov dword [ebp - 4], 0x212
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
cmp cl, byte [edx + eax*4]
jae 0x4536dc
mov dword [ebp - 4], 0x213
mov edx, 0x424f5c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xff
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4536dc
mov dword [ebp - 4], 0x214
mov eax, dword [0x550264]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x215
mov eax, dword [0x54ea00]
mov ecx, dword [ebp - 0x8c]
cmp eax, ecx
jle 0x453713
add ecx, 0x116
cmp eax, ecx
jge 0x453713
mov eax, dword [0x54ea04]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x453713
add ecx, 0xf
cmp eax, ecx
jl 0x4538f9
mov dword [ebp - 4], 0x216
jmp 0x4538f0
mov dword [ebp - 4], 0x217
mov dword [ebp - 0x8c], 0x220
mov dword [ebp - 4], 0x218
movzx ax, byte [edx + 0x35]
lea eax, [eax + eax*2]
lea ecx, [eax + eax*4 + 0x152]
movsx eax, cx
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0x219
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov dl, byte [edx + 0x35]
cmp dl, byte [ecx + eax*4]
jae 0x45384c
mov dword [ebp - 4], 0x21a
mov edx, 0x424f54
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xffffffea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4537e5
mov dword [ebp - 4], 0x21b
mov eax, dword [0x550264]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x21c
mov edx, 0x424f5c
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4538b3
mov dword [ebp - 4], 0x21d
mov eax, dword [0x550264]
movzx cx, byte [eax + 0x35]
add ecx, 0x44c
jmp 0x4538ad
mov dword [ebp - 4], 0x21e
mov edx, 0x424f54
lea ecx, [ebp - 0xa0]
call ebx
push 0
push 0
push 2
push 2
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xfffffff5
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov bx, ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
test bx, bx
je 0x4538b3
mov dword [ebp - 4], 0x21f
mov eax, dword [0x550264]
movzx cx, byte [eax + 0x35]
add ecx, 0x3e8
movsx edx, cx
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x220
mov eax, dword [ebp - 0x8c]
lea edx, [eax - 0x16]
mov ecx, dword [0x54ea00]
cmp ecx, edx
jle 0x4538e9
add eax, 0x100
cmp ecx, eax
jge 0x4538e9
mov eax, dword [0x54ea04]
mov ecx, dword [ebp - 0x68]
cmp eax, ecx
jle 0x4538e9
add ecx, 0xf
cmp eax, ecx
jl 0x4538f9
mov dword [ebp - 4], 0x221
mov eax, dword [0x550264]
mov byte [eax + 0x35], 0
mov dword [ebp - 4], 0x222
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [eax + edx*4]
mov dword [ebp - 0x1a0], ecx
mov ebx, 1
cmp ebx, dword [ebp - 0x1a0]
jg 0x452932
mov dword [ebp - 4], 0x223
cmp ebx, 5
jge 0x453963
mov dword [ebp - 4], 0x224
mov ecx, 0x120
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x225
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x18e]
jmp 0x453986
mov dword [ebp - 4], 0x226
mov ecx, 0x220
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0x227
lea eax, [ebx + ebx*2]
lea edx, [eax + eax*4 + 0x152]
mov dword [ebp - 0x68], edx
mov dword [ebp - 4], 0x228
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 4], 0x229
mov eax, dword [0x550264]
mov al, byte [eax + 0x35]
mov dword [ebp - 4], 0x22a
test al, al
jne 0x453cb5
mov dword [ebp - 4], 0x22b
mov eax, dword [0x54ea00]
cmp eax, ecx
jle 0x4539ef
add ecx, 0x100
cmp eax, ecx
jge 0x4539ef
mov eax, dword [0x54ea04]
cmp eax, edx
jle 0x4539ef
add edx, 0xf
cmp eax, edx
jge 0x4539ef
mov dword [ebp - 4], 0x22c
mov ecx, dword [0x550264]
mov byte [ecx + 0x35], bl
mov eax, dword [ebp - 0x50]
mov dword [ebp - 4], 0x245
test ax, ax
je 0x459888
mov dword [ebp - 4], 0x246
mov edx, 0x424f64
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 9
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453a63
mov dword [ebp - 4], 0x247
lea edx, [ebx + 0x3c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x248
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov al, byte [eax + edx*4]
mov dword [ebp - 4], 0x249
cmp al, 1
jne 0x454497
mov dword [ebp - 4], 0x24a
mov edx, 0x424f6c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24b
mov edx, 0x424f7c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x55
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24c
mov edx, 0x424f90
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x24d
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 1
jne 0x453bfd
mov dword [ebp - 4], 0x24e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
push 0
push 2
push 1
push 0x11
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 4]
push ecx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x24f
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x453e6a
dec eax
je 0x453e01
dec eax
jne 0x453ed1
mov dword [ebp - 4], 0x254
mov edx, 0x424efc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x38
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453ed1
mov dword [ebp - 4], 0x255
lea ecx, [ebx + 0xd2]
mov dword [ebp - 0x34], ecx
jmp 0x453ed1
mov dword [ebp - 4], 0x22d
cmp al, 1
jne 0x453cde
mov dword [ebp - 4], 0x22e
cmp ebx, 5
jne 0x4539ef
mov dword [ebp - 4], 0x22f
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x230
cmp al, 2
jne 0x453d07
mov dword [ebp - 4], 0x231
cmp ebx, 6
jne 0x4539ef
mov dword [ebp - 4], 0x232
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x233
cmp al, 3
jne 0x453d30
mov dword [ebp - 4], 0x234
cmp ebx, 7
jne 0x4539ef
mov dword [ebp - 4], 0x235
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x236
cmp al, 4
jne 0x453d59
mov dword [ebp - 4], 0x237
cmp ebx, 8
jne 0x4539ef
mov dword [ebp - 4], 0x238
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x239
cmp al, 5
jne 0x453d82
mov dword [ebp - 4], 0x23a
cmp ebx, 1
jne 0x4539ef
mov dword [ebp - 4], 0x23b
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x23c
cmp al, 6
jne 0x453dab
mov dword [ebp - 4], 0x23d
cmp ebx, 2
jne 0x4539ef
mov dword [ebp - 4], 0x23e
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x23f
cmp al, 7
jne 0x453dd4
mov dword [ebp - 4], 0x240
cmp ebx, 3
jne 0x4539ef
mov dword [ebp - 4], 0x241
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x242
cmp al, 8
jne 0x4539ef
mov dword [ebp - 4], 0x243
cmp ebx, 4
jne 0x4539ef
mov dword [ebp - 4], 0x244
xor eax, eax
jmp 0x4539f2
mov dword [ebp - 4], 0x252
mov edx, 0x424fa0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x38
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453ed1
mov dword [ebp - 4], 0x253
lea edx, [ebx + 0xc8]
mov dword [ebp - 0x34], edx
jmp 0x453ed1
mov dword [ebp - 4], 0x250
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x38
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x453ed1
mov dword [ebp - 4], 0x251
lea eax, [ebx + 0xdc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x256
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x257
test al, al
je 0x454138
cmp al, 5
je 0x454138
mov dword [ebp - 4], 0x25a
cmp al, 1
je 0x4540cd
cmp al, 6
je 0x4540cd
mov dword [ebp - 4], 0x25d
cmp al, 2
je 0x45405a
cmp al, 7
je 0x45405a
mov dword [ebp - 4], 0x260
cmp al, 3
je 0x453fea
cmp al, 8
je 0x453fea
mov dword [ebp - 4], 0x263
cmp al, 4
je 0x453f78
cmp al, 9
jne 0x4541a2
mov dword [ebp - 4], 0x264
mov edx, 0x424fd8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4541a2
mov dword [ebp - 4], 0x265
lea edx, [ebx + 0x10e]
mov dword [ebp - 0x34], edx
jmp 0x4541a2
mov dword [ebp - 4], 0x261
mov edx, 0x424fcc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4541a2
mov dword [ebp - 4], 0x262
lea eax, [ebx + 0x104]
jmp 0x45419f
mov dword [ebp - 4], 0x25e
mov edx, 0x424fbc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x8b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4541a2
mov dword [ebp - 4], 0x25f
lea ecx, [ebx + 0xfa]
mov dword [ebp - 0x34], ecx
jmp 0x4541a2
mov dword [ebp - 4], 0x25b
mov edx, 0x424fac
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8b
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4541a2
mov dword [ebp - 4], 0x25c
lea edx, [ebx + 0xf0]
mov dword [ebp - 0x34], edx
jmp 0x4541a2
mov dword [ebp - 4], 0x258
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x11
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4541a2
mov dword [ebp - 4], 0x259
lea eax, [ebx + 0xe6]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x266
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov edx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [edx + 0x14]
lea eax, [eax + eax*2]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
cmp byte [edx], 0
jbe 0x4542a0
mov dword [ebp - 4], 0x267
push ecx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa7
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x268
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x269
test al, al
jne 0x45436f
mov dword [ebp - 4], 0x26a
mov edx, dword [0x54ee8c]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043ce80
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x459888
mov dword [ebp - 4], 0x26b
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x26c
cmp al, 1
jne 0x454408
mov dword [ebp - 4], 0x26d
mov edx, dword [0x54ee8c]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
push 0
push 0
push 0
push 0x10
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xe4
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 3
mov edx, dword [eax + 0xc]
sub edx, ecx
add edx, 8
push edx
call fcn.0043ce80
mov dword [ebp - 0xd0], eax
lea eax, [ebp - 0x90]
push eax
call edi
cmp word [ebp - 0xd0], 0
je 0x459888
mov dword [ebp - 4], 0x26e
lea ecx, [ebx + 0x118]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x26f
cmp al, 2
jne 0x459888
mov dword [ebp - 4], 0x270
mov edx, 0x424fe8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0x10
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x271
lea edx, [ebx + 0x118]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x272
cmp al, 2
jne 0x454cfc
mov dword [ebp - 4], 0x273
mov edx, 0x424f1c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x274
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
mov dword [ebp - 4], 0x275
test ax, ax
jne 0x4545a4
mov dword [ebp - 4], 0x276
mov edx, 0x424ff8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x41
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x277
lea ecx, [ebx + 0x1e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x278
cmp ax, 1
jl 0x454718
cmp ax, 0xa
jg 0x454718
mov dword [ebp - 4], 0x279
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x41
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454623
mov dword [ebp - 4], 0x27a
lea edx, [ebx + 0x28]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x27b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x425004
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
imul cx, cx, 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d9f8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401248]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x27c
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x27d
cmp ax, 0xb
jl 0x454891
cmp ax, 0x14
jg 0x454891
mov dword [ebp - 4], 0x27e
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454797
mov dword [ebp - 4], 0x27f
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x280
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x425018
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0xa
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d9f8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401248]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x281
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x282
cmp ax, 0x15
jl 0x454a0a
cmp ax, 0x1e
jg 0x454a0a
mov dword [ebp - 4], 0x283
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454910
mov dword [ebp - 4], 0x284
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x285
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x425028
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x14
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d9f8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401248]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x286
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x287
cmp ax, 0x1f
jl 0x454b83
cmp ax, 0x28
jg 0x454b83
mov dword [ebp - 4], 0x288
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454a89
mov dword [ebp - 4], 0x289
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28a
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x42503c
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x1e
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d9f8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401248]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x28b
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x28c
cmp ax, 0x29
jl 0x459888
cmp ax, 0x32
jg 0x459888
mov dword [ebp - 4], 0x28d
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x41
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x454c02
mov dword [ebp - 4], 0x28e
lea eax, [ebx + 0x28]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x28f
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0x42504c
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ax, word [eax + edx*4 + 2]
sub ax, 0x28
lea ecx, [eax + eax*4]
shl ecx, 1
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41d9f8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x52
push eax
lea ecx, [ebp - 0xa8]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [fcn.00401248]
add esp, 0x10
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x290
lea edx, [ebx + 0x1e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x291
cmp al, 3
jne 0x454fa2
mov dword [ebp - 4], 0x292
mov dword [ebp - 0xb4], 0x80020004
mov dword [ebp - 0xbc], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
push 0x1c6
push 0xed
push 0
push 0
lea eax, [ebp - 0xbc]
push eax
push 1
push 0xd7
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov edx, dword [eax + 0xc]
sub edx, ecx
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x293
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
sub eax, 0
je 0x454f24
dec eax
je 0x454ea7
dec eax
jne 0x459888
mov dword [ebp - 4], 0x298
mov edx, 0x42506c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xef
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x299
lea ecx, [ebx + 0x32]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x296
mov edx, 0x425064
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xef
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x297
lea edx, [ebx + 0x32]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x294
mov edx, 0x42505c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xef
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x295
lea eax, [ebx + 0x32]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x29a
cmp al, 4
jne 0x455323
mov dword [ebp - 4], 0x29b
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 7
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455015
mov dword [ebp - 4], 0x29c
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x29d
mov edx, 0x425080
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29e
mov edx, 0x425090
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x29f
mov edx, 0x4250a0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2a1
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2a3
jmp 0x4597c8
mov dword [ebp - 4], 0x2a4
cmp al, 5
jne 0x455630
mov dword [ebp - 4], 0x2a5
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455396
mov dword [ebp - 4], 0x2a6
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2a7
mov edx, 0x4250a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a8
mov edx, 0x4250b4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2a9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2aa
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2ab
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa8
jmp 0x459863
mov dword [ebp - 4], 0x2ac
cmp al, 6
jne 0x455a4d
mov dword [ebp - 4], 0x2ad
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 1
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4556a3
mov dword [ebp - 4], 0x2ae
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2af
mov edx, 0x4250a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b0
mov edx, 0x4250c8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b1
mov edx, 0x4250d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b2
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2b3
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b4
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2b5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
jmp 0x459863
mov dword [ebp - 4], 0x2b6
cmp al, 7
jne 0x456198
mov dword [ebp - 4], 0x2b7
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 4
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455ac0
mov dword [ebp - 4], 0x2b8
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2b9
mov edx, 0x4250e0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x455b34
mov dword [ebp - 4], 0x2ba
mov dword [0x54eb70], 0x12
mov dword [ebp - 4], 0x2bb
call fcn.0043dcf0
mov dword [ebp - 4], 0x2bc
mov edx, 0x4250f0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2bd
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2be
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x68
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2bf
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 4
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x81
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x14
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x9a
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2c2
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x2c3
test al, al
jne 0x455ffa
mov dword [ebp - 4], 0x2c4
mov edx, 0x4250fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x2c5
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x2c6
cmp al, 1
jne 0x456083
mov dword [ebp - 4], 0x2c7
mov edx, 0x425108
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x2c8
lea eax, [ebx + 0x64]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x2c9
cmp al, 2
jne 0x45610c
mov dword [ebp - 4], 0x2ca
mov edx, 0x425114
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x2cb
lea ecx, [ebx + 0x64]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x2cc
cmp al, 3
jne 0x459888
mov dword [ebp - 4], 0x2cd
mov edx, 0x425120
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x2ce
lea edx, [ebx + 0x64]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x2cf
cmp al, 8
jne 0x4566c5
mov dword [ebp - 4], 0x2d0
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 6
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45620b
mov dword [ebp - 4], 0x2d1
lea eax, [ebx + 0x46]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2d2
mov edx, 0x4250c8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d3
mov edx, 0x4250d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6f
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d4
mov edx, 0x42512c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x9c
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d5
mov edx, 0x4250a0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc9
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x2d7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x83
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2d9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2da
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd8
jmp 0x459863
mov dword [ebp - 4], 0x2db
cmp al, 9
jne 0x4569d3
mov dword [ebp - 4], 0x2dc
mov edx, 0x425138
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2dd
mov edx, 0x425090
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2de
mov edx, 0x42514c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2df
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x2e1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb9
jmp 0x459863
mov dword [ebp - 4], 0x2e2
cmp al, 0xa
jne 0x4575e7
mov dword [ebp - 4], 0x2e3
mov edx, 0x42515c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e4
mov edx, 0x425170
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x40
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx]
mov dword [ebp - 4], 0x2e6
test al, al
jne 0x456b21
mov dword [ebp - 4], 0x2e7
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x4d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456c0b
mov dword [ebp - 4], 0x2e8
lea edx, [ebx + 0x12c]
mov dword [ebp - 0x34], edx
jmp 0x456c0b
mov dword [ebp - 4], 0x2e9
cmp al, 1
jne 0x456b99
mov dword [ebp - 4], 0x2ea
mov edx, 0x42409c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x4d
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456c0b
mov dword [ebp - 4], 0x2eb
lea eax, [ebx + 0x12c]
mov dword [ebp - 0x34], eax
jmp 0x456c0b
mov dword [ebp - 4], 0x2ec
cmp al, 2
jne 0x456c0b
mov dword [ebp - 4], 0x2ed
mov edx, 0x425178
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x4d
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456c0b
mov dword [ebp - 4], 0x2ee
lea ecx, [ebx + 0x12c]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2ef
mov edx, 0x42506c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x5d
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2f0
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x2f1
test al, al
jne 0x456d05
mov dword [ebp - 4], 0x2f2
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x6a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456def
mov dword [ebp - 4], 0x2f3
lea edx, [ebx + 0x136]
mov dword [ebp - 0x34], edx
jmp 0x456def
mov dword [ebp - 4], 0x2f4
cmp al, 1
jne 0x456d7d
mov dword [ebp - 4], 0x2f5
mov edx, 0x42409c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x6a
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456def
mov dword [ebp - 4], 0x2f6
lea eax, [ebx + 0x136]
mov dword [ebp - 0x34], eax
jmp 0x456def
mov dword [ebp - 4], 0x2f7
cmp al, 2
jne 0x456def
mov dword [ebp - 4], 0x2f8
mov edx, 0x425178
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x6a
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456def
mov dword [ebp - 4], 0x2f9
lea ecx, [ebx + 0x136]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x2fa
mov edx, 0x425180
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7a
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2fb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x2fc
test al, al
jne 0x456eeb
mov dword [ebp - 4], 0x2fd
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x87
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456fdb
mov dword [ebp - 4], 0x2fe
lea edx, [ebx + 0x140]
mov dword [ebp - 0x34], edx
jmp 0x456fdb
mov dword [ebp - 4], 0x2ff
cmp al, 1
jne 0x456f66
mov dword [ebp - 4], 0x300
mov edx, 0x42409c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x87
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456fdb
mov dword [ebp - 4], 0x301
lea eax, [ebx + 0x140]
mov dword [ebp - 0x34], eax
jmp 0x456fdb
mov dword [ebp - 4], 0x302
cmp al, 2
jne 0x456fdb
mov dword [ebp - 4], 0x303
mov edx, 0x425178
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x87
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x456fdb
mov dword [ebp - 4], 0x304
lea ecx, [ebx + 0x140]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x305
mov edx, 0x425188
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x97
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x306
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x307
test al, al
jne 0x4570d9
mov dword [ebp - 4], 0x308
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xa4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4571c9
mov dword [ebp - 4], 0x309
lea edx, [ebx + 0x14a]
mov dword [ebp - 0x34], edx
jmp 0x4571c9
mov dword [ebp - 4], 0x30a
cmp al, 1
jne 0x457154
mov dword [ebp - 4], 0x30b
mov edx, 0x42409c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa4
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4571c9
mov dword [ebp - 4], 0x30c
lea eax, [ebx + 0x14a]
mov dword [ebp - 0x34], eax
jmp 0x4571c9
mov dword [ebp - 4], 0x30d
cmp al, 2
jne 0x4571c9
mov dword [ebp - 4], 0x30e
mov edx, 0x425178
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa4
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4571c9
mov dword [ebp - 4], 0x30f
lea ecx, [ebx + 0x14a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x310
mov edx, 0x425190
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb4
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x311
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 4]
mov dword [ebp - 4], 0x312
test al, al
jne 0x4572c7
mov dword [ebp - 4], 0x313
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4573b7
mov dword [ebp - 4], 0x314
lea edx, [ebx + 0x154]
mov dword [ebp - 0x34], edx
jmp 0x4573b7
mov dword [ebp - 4], 0x315
cmp al, 1
jne 0x457342
mov dword [ebp - 4], 0x316
mov edx, 0x42409c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4573b7
mov dword [ebp - 4], 0x317
lea eax, [ebx + 0x154]
mov dword [ebp - 0x34], eax
jmp 0x4573b7
mov dword [ebp - 4], 0x318
cmp al, 2
jne 0x4573b7
mov dword [ebp - 4], 0x319
mov edx, 0x425178
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xc1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4573b7
mov dword [ebp - 4], 0x31a
lea ecx, [ebx + 0x154]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x31b
mov edx, 0x425198
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xd1
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x31c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 5]
mov dword [ebp - 4], 0x31d
test al, al
jne 0x4574c7
mov dword [ebp - 4], 0x31e
mov edx, 0x41da08
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xde
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x31f
lea edx, [ebx + 0x15e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x320
cmp al, 1
jne 0x457557
mov dword [ebp - 4], 0x321
mov edx, 0x42409c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xde
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x322
lea eax, [ebx + 0x15e]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x323
cmp al, 2
jne 0x459888
mov dword [ebp - 4], 0x324
mov edx, 0x425178
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 4
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xde
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x325
lea ecx, [ebx + 0x15e]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x326
cmp al, 0xb
jne 0x457931
mov dword [ebp - 4], 0x327
mov edx, 0x4251a0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45765d
mov dword [ebp - 4], 0x328
lea edx, [ebx + 0x8c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x329
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 2]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
mov edx, dword [0x54ef44]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx ecx, word [0x54ee98]
sub eax, ecx
push eax
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x37
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
mov dword [ebp - 4], 0x32a
mov edx, dword [0x54ef44]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x70
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov cx, word [eax + edx*4 + 2]
add cx, word [0x54ee98]
movsx eax, cx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0043cad0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x4577b9
mov dword [ebp - 4], 0x32b
lea eax, [ebx + 0x19a]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x32c
push 0x41da08
mov ecx, dword [0x54ef44]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x54ee98]
sub eax, edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x56
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043cad0
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 2
call dword [fcn.00401248]
add esp, 0xc
mov dword [ebp - 4], 0x32d
mov edx, 0x4251b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xbf
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x32e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xff
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x19
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xdf
jmp 0x459863
mov dword [ebp - 4], 0x32f
cmp al, 0xc
jne 0x457b82
mov dword [ebp - 4], 0x330
mov edx, 0x424ec8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4579a7
mov dword [ebp - 4], 0x331
lea eax, [ebx + 0x96]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x332
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
cmp word [eax + edx*4 + 2], 2
jge 0x457a8f
mov dword [ebp - 4], 0x333
mov ecx, dword [0x54ef28]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x2d
push eax
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0043cad0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x459888
mov dword [ebp - 4], 0x334
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x335
mov ecx, dword [0x54ef28]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
movsx eax, word [eax + edx*4 + 2]
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
call fcn.0053b5f0
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x90]
push edx
call edi
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], 0
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x2d
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x336
lea eax, [ebx + 0x1f4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x337
cmp al, 0xd
jne 0x4582c6
mov dword [ebp - 4], 0x338
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 9
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x457bf5
mov dword [ebp - 4], 0x339
lea ecx, [ebx + 0x5a]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x33a
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb94]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x33b
mov edx, 0x4251c0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xaa
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x33c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x63
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xd1
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x33d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x33e
test al, al
je 0x457fb5
cmp al, 4
je 0x457fb5
cmp al, 8
je 0x457fb5
cmp al, 0xc
je 0x457fb5
mov dword [ebp - 4], 0x341
cmp al, 1
je 0x457f4c
cmp al, 5
je 0x457f4c
cmp al, 9
je 0x457f4c
cmp al, 0xd
je 0x457f4c
mov dword [ebp - 4], 0x344
cmp al, 2
je 0x457edc
cmp al, 6
je 0x457edc
cmp al, 0xa
je 0x457edc
cmp al, 0xe
je 0x457edc
mov dword [ebp - 4], 0x347
cmp al, 3
je 0x457e73
cmp al, 7
je 0x457e73
cmp al, 0xb
je 0x457e73
cmp al, 0xf
jne 0x45801b
mov dword [ebp - 4], 0x348
mov edx, 0x425120
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45801b
mov dword [ebp - 4], 0x349
jmp 0x458015
mov dword [ebp - 4], 0x345
mov edx, 0x425114
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xea
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45801b
mov dword [ebp - 4], 0x346
lea eax, [ebx + 0x6e]
mov dword [ebp - 0x34], eax
jmp 0x45801b
mov dword [ebp - 4], 0x342
mov edx, 0x425108
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xea
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45801b
mov dword [ebp - 4], 0x343
lea ecx, [ebx + 0x6e]
mov dword [ebp - 0x34], ecx
jmp 0x45801b
mov dword [ebp - 4], 0x33f
mov edx, 0x4250fc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xea
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x45801b
mov dword [ebp - 4], 0x340
lea edx, [ebx + 0x6e]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x34a
mov edx, 0x4251d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x44
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x34b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 1]
mov dword [ebp - 4], 0x34c
cmp al, 3
ja 0x458120
mov dword [ebp - 4], 0x34d
mov edx, 0x4251e0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x34e
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x34f
cmp al, 4
jb 0x4581aa
cmp al, 7
ja 0x4581aa
mov dword [ebp - 4], 0x350
mov edx, 0x4251f4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x69
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x351
lea eax, [ebx + 0x78]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x352
cmp al, 8
jb 0x458234
cmp al, 0xb
ja 0x458234
mov dword [ebp - 4], 0x353
mov edx, 0x425200
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x69
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x354
lea ecx, [ebx + 0x78]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x355
cmp al, 0xc
jb 0x459888
cmp al, 0xf
ja 0x459888
mov dword [ebp - 4], 0x356
mov edx, 0x425218
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x357
lea edx, [ebx + 0x78]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x358
cmp al, 0xe
jne 0x4587f3
mov dword [ebp - 4], 0x359
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 2
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458339
mov dword [ebp - 4], 0x35a
lea eax, [ebx + 0x50]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x35b
mov edx, 0x4250a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x44
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35c
mov edx, 0x4250c8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x7b
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35d
mov edx, 0x4250d4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xa6
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35e
mov edx, 0x42512c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xd1
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x35f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x360
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x62
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x361
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x8d
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x362
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xba
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x363
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 3
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
jmp 0x459863
mov dword [ebp - 4], 0x364
cmp al, 0xf
jne 0x458c24
mov dword [ebp - 4], 0x365
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 8
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xf
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458869
mov dword [ebp - 4], 0x366
lea eax, [ebx + 0x82]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x367
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54f794]
push eax
push 0
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x18
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x368
mov edx, 0x425228
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0x43
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x369
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x14
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x5e
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36a
mov edx, 0x425234
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x7b
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x97
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x36c
mov edx, 0x425240
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb1
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x36d
mov eax, dword [0x54eed8]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xce
push edx
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
xor edx, edx
mov dl, byte [ecx + 2]
mov eax, dword [ebp - 0x90]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.0043cad0
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0x90]
push edx
call edi
cmp word [ebp - 0xd0], 0
je 0x459888
mov dword [ebp - 4], 0x36e
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x36f
cmp al, 0x10
jne 0x45944c
mov dword [ebp - 4], 0x370
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 3
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x458c97
mov dword [ebp - 4], 0x371
lea ecx, [ebx + 0x50]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x372
mov edx, 0x4250a0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x373
mov edx, 0x425250
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 3
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x69
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x374
mov edx, 0x4251d0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x8e
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x375
mov edx, 0x425258
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xc7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x376
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb92]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x377
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x50
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x378
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x75
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x379
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 2]
mov dword [ebp - 4], 0x37a
test al, al
jne 0x459094
mov dword [ebp - 4], 0x37b
mov edx, 0x425250
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4592f4
mov dword [ebp - 4], 0x37c
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x4592f4
mov dword [ebp - 4], 0x37d
cmp al, 1
jne 0x459112
mov dword [ebp - 4], 0x37e
mov edx, 0x425268
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4592f4
mov dword [ebp - 4], 0x37f
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x4592f4
mov dword [ebp - 4], 0x380
cmp al, 2
jne 0x459187
mov dword [ebp - 4], 0x381
mov edx, 0x425274
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4592f4
mov dword [ebp - 4], 0x382
jmp 0x4592eb
mov dword [ebp - 4], 0x383
cmp al, 3
jne 0x459204
mov dword [ebp - 4], 0x384
mov edx, 0x425280
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb3
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4592f4
mov dword [ebp - 4], 0x385
lea edx, [ebx + 0x122]
mov dword [ebp - 0x34], edx
jmp 0x4592f4
mov dword [ebp - 4], 0x386
cmp al, 4
jne 0x45927f
mov dword [ebp - 4], 0x387
mov edx, 0x42528c
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xb3
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4592f4
mov dword [ebp - 4], 0x388
lea eax, [ebx + 0x122]
mov dword [ebp - 0x34], eax
jmp 0x4592f4
mov dword [ebp - 4], 0x389
cmp al, 5
jne 0x4592f4
mov dword [ebp - 4], 0x38a
mov edx, 0x425298
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xa
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xb3
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4592f4
mov dword [ebp - 4], 0x38b
lea ecx, [ebx + 0x122]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x38c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov al, byte [ecx + 3]
mov dword [ebp - 4], 0x38d
test al, al
jne 0x4593bc
mov dword [ebp - 4], 0x38e
mov edx, 0x4252a4
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xe7
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x38f
lea edx, [ebx + 0xbe]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x390
cmp al, 1
jne 0x459888
mov dword [ebp - 4], 0x391
mov edx, 0x4252b0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 0
push 0
push 0xe
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xe7
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x459888
mov dword [ebp - 4], 0x392
lea eax, [ebx + 0xbe]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x393
cmp al, 0x11
jne 0x459888
mov dword [ebp - 4], 0x394
mov edx, 0x425074
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 0xffffffffffffffff
push 0
mov ecx, dword [ebp - 0x68]
push ecx
mov edx, dword [ebp - 0x8c]
add edx, 0xf
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.0043cad0
mov word [ebp - 0xdc], ax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp word [ebp - 0xdc], 0
je 0x4594bf
mov dword [ebp - 4], 0x395
lea ecx, [ebx + 0x46]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x396
mov edx, 0x425080
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x44
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x397
mov edx, 0x4250a8
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x7f
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x398
mov edx, 0x4250a0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
push 6
push 5
push 0
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0xb9
push eax
lea ecx, [ebp - 0xa0]
push ecx
call fcn.0043cad0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x399
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x90]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 2]
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4002
push 0x1c6
push 0xed
movsx eax, word [0x54eb90]
push eax
push 1
lea ecx, [ebp - 0xcc]
push ecx
push 4
push 0x19
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0x8c]
add eax, 0x22
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.0043b850
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
mov dword [ebp - 4], 0x39a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 4]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0x66
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0xa
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xa0
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x98]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
mov eax, ebx
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 4]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
add ecx, 2
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xcc], 0x4011
push 0x1c6
push 0xed
push 0x64
push 0
lea edx, [ebp - 0xcc]
push edx
push 4
push 0x10
mov eax, dword [ebp - 0x68]
push eax
mov ecx, dword [ebp - 0x8c]
add ecx, 0xc8
push ecx
lea edx, [ebp - 0x58]
push edx
call fcn.0043b850
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
lea edx, [ebp - 0x98]
push edx
call edi
mov dword [ebp - 4], 0x39d
mov eax, 1
add ebx, eax
jmp 0x453926
mov dword [ebp - 4], 0x3a3
cmp eax, 2
jne 0x4598c6
mov dword [ebp - 4], 0x3a4
mov edx, dword [ebp - 0x3c]
push edx
mov al, byte [0x55020c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.0044d550
jmp 0x45b494
mov dword [ebp - 4], 0x3a5
cmp eax, 3
jne 0x4598e7
mov dword [ebp - 4], 0x3a6
mov edx, dword [ebp + 8]
push edx
call fcn.00449370
jmp 0x45b494
mov dword [ebp - 4], 0x3a7
cmp eax, 4
jne 0x459908
mov dword [ebp - 4], 0x3a8
mov eax, dword [ebp + 8]
push eax
call fcn.00449a80
jmp 0x45b494
mov dword [ebp - 4], 0x3a9
cmp eax, 5
jne 0x45997c
mov dword [ebp - 4], 0x3aa
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
mov ecx, eax
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
cmp byte [edx + ecx*4], 0
jbe 0x45b494
mov dword [ebp - 4], 0x3ab
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
push 0x55023c
push 0x41f2b8
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ac
mov word [0x55023a], 0xffff
jmp 0x45b494
mov dword [ebp - 4], 0x3ad
cmp eax, 6
jne 0x4599bb
mov dword [ebp - 4], 0x3ae
mov eax, dword [0x550264]
mov cl, byte [eax + 0x34]
test cl, cl
jne 0x4599ab
mov dword [ebp - 4], 0x3af
mov byte [eax + 0x34], 1
jmp 0x45b494
mov dword [ebp - 4], 0x3b0
mov byte [eax + 0x34], 0
jmp 0x45b494
mov dword [ebp - 4], 0x3b1
cmp eax, 7
jne 0x4599d8
mov dword [ebp - 4], 0x3b2
call fcn.0043f110
jmp 0x45b494
mov dword [ebp - 4], 0x3b3
cmp eax, 8
jne 0x459aee
mov dword [ebp - 4], 0x3b4
mov ebx, dword [0x55023c]
and ebx, 0xff
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x24], edx
cmp edx, ebx
jg 0x45b494
mov dword [ebp - 4], 0x3b5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax*4]
mov al, byte [ecx]
cmp al, 8
jae 0x459ad8
mov dword [ebp - 4], 0x3b6
inc al
mov byte [ecx], al
mov dword [ebp - 4], 0x3b7
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f298
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3b8
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov edx, dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ebx, dword [0x550244]
sub eax, dword [ebx + 0x14]
lea eax, [eax + eax*2]
mov ebx, dword [ebx + 0xc]
lea eax, [ebx + eax*4]
push eax
xor eax, eax
mov al, byte [ecx]
sub eax, dword [edx + 0x14]
lea ecx, [eax + eax*2]
mov edx, dword [edx + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov ebx, dword [ebp - 0x1ac]
mov dword [ebp - 4], 0x3b9
mov eax, 1
mov edx, dword [ebp - 0x24]
add edx, eax
jmp 0x459a01
mov dword [ebp - 4], 0x3ba
cmp eax, 0xa
jl 0x459fcc
cmp eax, 0x1a
jg 0x459fcc
mov dword [ebp - 4], 0x3bb
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
inc cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3bc
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
push 1
xor ecx, ecx
mov cl, byte [eax]
push ecx
push 1
push 0x41f298
add eax, 8
push eax
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x3bd
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
add ebx, 0xfffffff7
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov byte [ecx + eax*4], bl
mov dword [ebp - 4], 0x3be
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
mov dword [ebp - 4], 0x3bf
cmp cl, 1
jne 0x459c45
mov dword [ebp - 4], 0x3c0
mov word [eax + 2], 0
mov dword [ebp - 4], 0x3c1
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
push 0
push 2
push 1
push 0x11
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax*4 + 4]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
jmp 0x45b494
mov dword [ebp - 4], 0x3c2
cmp cl, 3
jne 0x459d0b
mov dword [ebp - 4], 0x3c3
push 0
push 0
push 1
push 8
add eax, 8
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c4
mov ebx, dword [ebp + 8]
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
mov edx, 0x424014
mov ecx, dword [eax + 0x14]
shl ecx, 2
mov dword [ebp - 0x25c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x25c]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x3c5
mov ecx, dword [ebx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov word [ecx + eax*4 + 2], 2
jmp 0x45b494
mov dword [ebp - 4], 0x3c6
cmp cl, 4
jne 0x459d7f
mov dword [ebp - 4], 0x3c7
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3c8
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x45b494
mov dword [ebp - 4], 0x3c9
cmp cl, 5
jne 0x459da3
mov dword [ebp - 4], 0x3ca
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3cb
cmp cl, 6
je 0x459fb4
cmp cl, 9
je 0x459fb4
mov dword [ebp - 4], 0x3cd
cmp cl, 7
jne 0x459de0
mov dword [ebp - 4], 0x3ce
push 0
push 4
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3cf
cmp cl, 8
jne 0x459e54
mov dword [ebp - 4], 0x3d0
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3d1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 3], 0x42
jmp 0x45b494
mov dword [ebp - 4], 0x3d2
cmp cl, 0xa
jne 0x459e78
mov dword [ebp - 4], 0x3d3
push 0
push 5
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3d4
cmp cl, 0xb
jne 0x459e9c
mov dword [ebp - 4], 0x3d5
push 0
push 0
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3d6
cmp cl, 0xc
je 0x45b494
mov dword [ebp - 4], 0x3d7
cmp cl, 0xd
jne 0x459ed0
mov dword [ebp - 4], 0x3d8
push 0
push 1
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3d9
cmp cl, 0xe
jne 0x459ef4
mov dword [ebp - 4], 0x3da
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3db
cmp cl, 0xf
jne 0x459f18
mov dword [ebp - 4], 0x3dc
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3dd
cmp cl, 0x10
jne 0x459f3c
mov dword [ebp - 4], 0x3de
push 0
push 3
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3df
cmp cl, 0x11
jne 0x45b494
mov dword [ebp - 4], 0x3e0
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x3e1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea eax, [eax + edx*4]
mov ecx, dword [eax + 8]
xor edx, edx
mov dl, byte [eax]
mov eax, edx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 4]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
mov byte [edx + 2], 0x42
jmp 0x45b494
mov dword [ebp - 4], 0x3cc
push 0
push 2
push 1
push 0x11
add eax, 4
push eax
jmp 0x459c30
mov dword [ebp - 4], 0x3e2
cmp eax, 0x1f
jl 0x45a071
cmp eax, 0x26
jg 0x45a071
mov dword [ebp - 4], 0x3e3
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4 + 8]
push edx
lea eax, [ebp - 0x90]
push eax
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x166]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 0x32
push 0
push 1
lea ecx, [ebp - 0xcc]
push ecx
call fcn.00435f40
lea edx, [ebp - 0x90]
push edx
call edi
lea eax, [ebp - 0x94]
push eax
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x3e4
cmp eax, 0x29
jl 0x45a0f0
cmp eax, 0x30
jg 0x45a0f0
mov dword [ebp - 4], 0x3e5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x1de]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0
push 0x33
push 0
push 0xffffffffffffffff
jmp 0x45a04e
mov dword [ebp - 4], 0x3e6
cmp eax, 0x33
jl 0x45a16b
cmp eax, 0x3a
jg 0x45a16b
mov dword [ebp - 4], 0x3e7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x256]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
push 2
jmp 0x45a04a
mov dword [ebp - 4], 0x3e8
cmp eax, 0x3d
jl 0x45a2c5
cmp eax, 0x44
jg 0x45a2c5
mov dword [ebp - 4], 0x3e9
add ebx, 0xffffffc4
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 4], 0x3ea
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov al, byte [ecx + eax*4]
mov ecx, eax
and ecx, 0xff
cmp ebx, ecx
jge 0x45a235
mov dword [ebp - 4], 0x3eb
movzx ax, al
dec eax
movsx ecx, ax
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], edx
cmp ebx, dword [ebp - 0x1b4]
jg 0x45a235
mov dword [ebp - 4], 0x3ec
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x3ed
add ebx, dword [ebp - 0x1b0]
jmp 0x45a1db
mov dword [ebp - 4], 0x3ee
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
lea eax, [ecx + eax*4]
mov cl, byte [eax]
dec cl
mov byte [eax], cl
mov dword [ebp - 4], 0x3ef
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
mov al, byte [ecx]
test al, al
jne 0x45a299
mov dword [ebp - 4], 0x3f0
add ecx, 8
push ecx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
jmp 0x45b494
mov dword [ebp - 4], 0x3f1
push 1
and eax, 0xff
push eax
push 1
push 0x41f298
add ecx, 8
push ecx
push 0xc
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
jmp 0x45b494
mov dword [ebp - 4], 0x3f2
cmp eax, 0x47
jl 0x45a2f5
cmp eax, 0x4e
jg 0x45a2f5
mov dword [ebp - 4], 0x3f3
push 0
mov cx, word [0x55020c]
push ecx
add ebx, 0xffffffba
push ebx
call fcn.005230e0
jmp 0x45b494
mov dword [ebp - 4], 0x3f4
cmp eax, 0x51
jl 0x45a325
cmp eax, 0x58
jg 0x45a325
mov dword [ebp - 4], 0x3f5
push 1
mov dx, word [0x55020c]
push edx
add ebx, 0xffffffb0
push ebx
call fcn.005230e0
jmp 0x45b494
mov dword [ebp - 4], 0x3f6
cmp eax, 0x5b
jl 0x45a354
cmp eax, 0x62
jg 0x45a354
mov dword [ebp - 4], 0x3f7
push 2
mov ax, word [0x55020c]
push eax
add ebx, 0xffffffa6
push ebx
call fcn.005230e0
jmp 0x45b494
mov dword [ebp - 4], 0x3f8
cmp eax, 0x83
jl 0x45a38b
cmp eax, 0x8a
jg 0x45a38b
mov dword [ebp - 4], 0x3f9
push 3
mov cx, word [0x55020c]
push ecx
add ebx, 0xffffff7e
push ebx
call fcn.005230e0
jmp 0x45b494
mov dword [ebp - 4], 0x3fa
cmp eax, 0x8d
jl 0x45a3c2
cmp eax, 0x94
jg 0x45a3c2
mov dword [ebp - 4], 0x3fb
push 4
mov dx, word [0x55020c]
push edx
add ebx, 0xffffff74
push ebx
call fcn.005230e0
jmp 0x45b494
mov dword [ebp - 4], 0x3fc
cmp eax, 0x97
jl 0x45a3f8
cmp eax, 0x9e
jg 0x45a3f8
mov dword [ebp - 4], 0x3fd
push 5
mov ax, word [0x55020c]
push eax
add ebx, 0xffffff6a
push ebx
call fcn.005230e0
jmp 0x45b494
mov dword [ebp - 4], 0x3fe
cmp eax, 0x65
jl 0x45a494
cmp eax, 0x6c
jg 0x45a494
mov dword [ebp - 4], 0x3ff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x4ac]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45b071
mov dword [ebp - 4], 0x400
cmp eax, 0x6f
jl 0x45a7f5
cmp eax, 0x76
jg 0x45a7f5
mov dword [ebp - 4], 0x401
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
movsx ecx, word [0x55020c]
sub ecx, dword [eax + 0x14]
lea edx, [ecx + ecx*2]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4 + 8]
mov ecx, ebx
sub ecx, dword [edx + 0x14]
lea ecx, [ecx + ecx*2]
mov edx, dword [edx + 0xc]
mov ecx, dword [edx + ecx*4 - 0x524]
mov edx, dword [ecx + 0xc]
sub edx, dword [ecx + 0x14]
mov cl, byte [edx + 1]
mov dword [ebp - 4], 0x402
test cl, cl
je 0x45a77a
cmp cl, 1
je 0x45a77a
cmp cl, 2
je 0x45a77a
cmp cl, 3
je 0x45a77a
mov dword [ebp - 4], 0x404
cmp cl, 4
je 0x45a6d4
cmp cl, 5
je 0x45a6d4
cmp cl, 6
je 0x45a6d4
cmp cl, 7
je 0x45a6d4
mov dword [ebp - 4], 0x406
cmp cl, 8
je 0x45a62e
cmp cl, 9
je 0x45a62e
cmp cl, 0xa
je 0x45a62e
cmp cl, 0xb
je 0x45a62e
mov dword [ebp - 4], 0x408
cmp cl, 0xc
je 0x45a588
cmp cl, 0xd
je 0x45a588
cmp cl, 0xe
je 0x45a588
cmp cl, 0xf
jne 0x45b494
mov dword [ebp - 4], 0x409
push eax
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xf
push 0xc
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x407
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 8
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x405
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 7
push 4
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x403
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x524]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 3
jmp 0x45b071
mov dword [ebp - 4], 0x40a
cmp eax, 0x79
jl 0x45a8a2
cmp eax, 0x80
jg 0x45a8a2
mov dword [ebp - 4], 0x40b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
lea eax, [ecx + 1]
mov cl, byte [eax]
add cl, 4
mov byte [eax], cl
mov dword [ebp - 4], 0x40c
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x59c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
inc ecx
mov al, byte [ecx]
cmp al, 0xf
jbe 0x45b494
mov dword [ebp - 4], 0x40d
sub al, 0x10
mov byte [ecx], al
jmp 0x45b494
mov dword [ebp - 4], 0x40e
cmp eax, 0xbf
jl 0x45a979
cmp eax, 0xc6
jg 0x45a979
mov dword [ebp - 4], 0x40f
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x8e4]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 1
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x410
call fcn.0043f110
jmp 0x45b494
mov dword [ebp - 4], 0x411
cmp eax, 0xc9
jl 0x45a9c7
cmp eax, 0xd0
jg 0x45a9c7
mov dword [ebp - 4], 0x412
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x95e], 2
jmp 0x45b494
mov dword [ebp - 4], 0x413
cmp eax, 0xd3
jl 0x45aa15
cmp eax, 0xda
jg 0x45aa15
mov dword [ebp - 4], 0x414
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov word [edx + ecx*4 - 0x9d6], 0
jmp 0x45b494
mov dword [ebp - 4], 0x415
cmp eax, 0xdd
jl 0x45aa61
cmp eax, 0xe4
jg 0x45aa61
mov dword [ebp - 4], 0x416
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov word [eax + ecx*4 - 0xa4e], dx
jmp 0x45b494
mov dword [ebp - 4], 0x417
cmp eax, 0xe7
jl 0x45aab5
cmp eax, 0xee
jg 0x45aab5
mov dword [ebp - 4], 0x418
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xac4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 1
jmp 0x45b494
mov dword [ebp - 4], 0x419
cmp eax, 0xf1
jl 0x45ab09
cmp eax, 0xf8
jg 0x45ab09
mov dword [ebp - 4], 0x41a
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xb3c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 2
jmp 0x45b494
mov dword [ebp - 4], 0x41b
cmp eax, 0xfb
jl 0x45ab5d
cmp eax, 0x102
jg 0x45ab5d
mov dword [ebp - 4], 0x41c
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xbb4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 3
jmp 0x45b494
mov dword [ebp - 4], 0x41d
cmp eax, 0x105
jl 0x45abb1
cmp eax, 0x10c
jg 0x45abb1
mov dword [ebp - 4], 0x41e
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xc2c]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 4
jmp 0x45b494
mov dword [ebp - 4], 0x41f
cmp eax, 0x10f
jl 0x45ac05
cmp eax, 0x116
jg 0x45ac05
mov dword [ebp - 4], 0x420
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
sub ebx, dword [eax + 0x14]
lea edx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + edx*4 - 0xca4]
mov ecx, dword [eax + 0xc]
sub ecx, dword [eax + 0x14]
mov byte [ecx], 0
jmp 0x45b494
mov dword [ebp - 4], 0x421
cmp eax, 0x119
jl 0x45ac89
cmp eax, 0x120
jg 0x45ac89
mov dword [ebp - 4], 0x422
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x98]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd1c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
jmp 0x45b05d
mov dword [ebp - 4], 0x423
cmp eax, 0x123
jl 0x45ad60
cmp eax, 0x12a
jg 0x45ad60
mov dword [ebp - 4], 0x424
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xd94]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 2
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 0xb
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
mov dword [ebp - 4], 0x425
call fcn.0043f110
jmp 0x45b494
mov dword [ebp - 4], 0x426
cmp eax, 0x12d
jl 0x45ade1
cmp eax, 0x134
jg 0x45ade1
mov dword [ebp - 4], 0x427
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe0c]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
jmp 0x45b05d
mov dword [ebp - 4], 0x428
cmp eax, 0x137
jl 0x45ae63
cmp eax, 0x13e
jg 0x45ae63
mov dword [ebp - 4], 0x429
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xe84]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
inc edx
jmp 0x45b05d
mov dword [ebp - 4], 0x42a
cmp eax, 0x141
jl 0x45aece
cmp eax, 0x148
jg 0x45aece
mov dword [ebp - 4], 0x42b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xefc]
jmp 0x45ac6b
mov dword [ebp - 4], 0x42c
cmp eax, 0x14b
jl 0x45af52
cmp eax, 0x152
jg 0x45af52
mov dword [ebp - 4], 0x42d
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xf74]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 3
jmp 0x45b05d
mov dword [ebp - 4], 0x42e
cmp eax, 0x155
jl 0x45afd6
cmp eax, 0x15c
jg 0x45afd6
mov dword [ebp - 4], 0x42f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0xfec]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 4
jmp 0x45b05d
mov dword [ebp - 4], 0x430
cmp eax, 0x15f
jl 0x45b0a1
cmp eax, 0x166
jg 0x45b0a1
mov dword [ebp - 4], 0x431
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x98]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x98]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x94]
push edx
call esi
mov eax, dword [ebp - 0x94]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4 - 0x1064]
push eax
lea ecx, [ebp - 0x90]
push ecx
call esi
mov eax, dword [ebp - 0x90]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
add edx, 5
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xcc], 0x4011
push 0xffffffffffffffff
push 2
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
lea eax, [ebp - 0x98]
push eax
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x432
cmp eax, 0x191
jl 0x45b161
cmp eax, 0x198
jg 0x45b161
mov dword [ebp - 4], 0x433
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x10]
push edx
lea eax, [ebp - 0x94]
push eax
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x12be]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
mov ecx, dword [0x54ef44]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
movsx edx, word [0x54ee98]
sub eax, edx
push eax
push 0
push 1
lea eax, [ebp - 0xcc]
push eax
call fcn.00435f40
lea ecx, [ebp - 0x90]
push ecx
call edi
lea edx, [ebp - 0x94]
push edx
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x434
cmp eax, 0x19b
jl 0x45b221
cmp eax, 0x1a2
jg 0x45b221
mov dword [ebp - 4], 0x435
mov eax, dword [0x54eb2c]
mov ecx, dword [eax]
push 0xff
push eax
call dword [ecx + 0x3c]
fnclex
test eax, eax
jge 0x45b1b0
push 0x3c
push 0x421fa4
mov edx, dword [0x54eb2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 4], 0x436
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov eax, dword [eax + edx*4 + 8]
mov ecx, dword [0x54eb2c]
mov edx, dword [ecx]
push 0xffffffffffffffff
push 2
sub ebx, dword [eax + 0x14]
lea ebx, [ebx + ebx*2]
mov eax, dword [eax + 0xc]
mov ax, word [eax + ebx*4 - 0x1336]
add ax, word [0x54ee98]
movsx eax, ax
push eax
push ecx
call dword [edx + 0x40]
fnclex
test eax, eax
jge 0x45b494
push 0x40
push 0x421fa4
mov ecx, dword [0x54eb2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x45b494
mov dword [ebp - 4], 0x437
cmp eax, 0x1f5
jl 0x45b2d0
cmp eax, 0x1fc
jg 0x45b2d0
mov dword [ebp - 4], 0x438
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x10]
push eax
lea ecx, [ebp - 0x94]
push ecx
call esi
movsx eax, word [0x55020c]
mov ecx, dword [ebp - 0x94]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4 - 0x176e]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 0x4002
push 0xffffffffffffffff
movsx ecx, word [0x54ee90]
push ecx
push 0
push 1
lea edx, [ebp - 0xcc]
push edx
call fcn.00435f40
lea eax, [ebp - 0x90]
push eax
call edi
lea ecx, [ebp - 0x94]
push ecx
call edi
jmp 0x45b494
mov dword [ebp - 4], 0x439
cmp eax, 0x3e9
jl 0x45b3aa
cmp eax, 0x3f0
jg 0x45b3aa
mov dword [ebp - 4], 0x43a
add ebx, 0xfffffc18
mov dword [ebp - 4], 0x43b
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov ecx, dword [ecx + eax*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43c
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2]
lea edx, [ecx + edx*4 - 0xc]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x43d
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
dec ebx
jmp 0x45b47f
mov dword [ebp - 4], 0x43e
cmp eax, 0x44d
jl 0x45b494
cmp eax, 0x454
jg 0x45b494
mov dword [ebp - 4], 0x43f
add ebx, 0xfffffbb4
mov dword [ebp - 4], 0x440
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
lea edx, [ebp - 0x74]
push edx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x441
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea edx, [eax + eax*2]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
mov eax, ebx
sub eax, dword [ecx + 0x14]
mov ecx, dword [ecx + 0xc]
lea edx, [eax + eax*2 + 3]
lea edx, [ecx + edx*4]
push edx
lea eax, [eax + eax*2]
lea ecx, [ecx + eax*4]
push ecx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x442
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
movsx eax, word [0x55020c]
sub eax, dword [ecx + 0x14]
lea eax, [eax + eax*2]
mov ecx, dword [ecx + 0xc]
mov eax, dword [ecx + eax*4 + 8]
lea edx, [ebp - 0x74]
push edx
sub ebx, dword [eax + 0x14]
inc ebx
lea ecx, [ebx + ebx*2]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
mov dword [ebp - 4], 0x443
mov ecx, dword [0x550264]
mov dword [ecx + 0x30], 0
jmp 0x45b4ca
mov dword [ebp - 4], 0x444
mov eax, dword [0x550264]
mov ecx, dword [eax + 0x30]
test ecx, ecx
jne 0x45b4ca
mov dword [ebp - 4], 0x445
mov edx, dword [ebp - 0x34]
mov dword [eax + 0x30], edx
mov dword [ebp - 4], 0x446
mov ebx, dword [ebp - 0x48]
test ebx, ebx
jle 0x45b54b
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x45b54b
mov dword [ebp - 4], 0x447
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push ecx
lea edx, [ebp - 0x90]
push edx
call esi
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
push 0
push 0xa7
mov eax, ebx
sub eax, dword [ecx + 0x14]
lea edx, [eax*8]
sub edx, eax
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*4 + 8]
push ecx
mov eax, dword [ebp - 0x90]
sub ebx, dword [eax + 0x14]
lea edx, [ebx*8]
sub edx, ebx
mov eax, dword [eax + 0xc]
lea ecx, [eax + edx*4 + 0x10]
push ecx
mov edx, dword [ebp - 0x84]
push edx
call fcn.0043ea40
lea eax, [ebp - 0x90]
push eax
call edi
mov dword [ebp - 4], 0x448
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x45b572
mov dword [ebp - 4], 0x449
push 0
push 0
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x2c]
push edx
push eax
call fcn.004dc9b0
mov dword [ebp - 4], 0x44a
mov eax, dword [ebp - 0x54]
test eax, eax
jle 0x45b58d
mov dword [ebp - 4], 0x44b
push eax
call fcn.004d94c0
mov dword [ebp - 4], 0x44c
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x45b63a
jmp 0x45b621
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x74]
push edx
push 0x41f298
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
ret