Function at 0x4650b0
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x404066
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x270
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x403c68
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 2
push 0x41fc2c
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41fc48
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41fc2c
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41fc48
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41fc2c
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTypeName]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x100]
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x198]
push eax
push 0x41fb94
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4651e7
mov dword [ebp - 4], 6
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x4657d8
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41fba8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x46524c
mov dword [ebp - 4], 8
push 0
push 0x41cf10
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4657d8
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41f888
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x46546d
mov dword [ebp - 4], 0xa
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x19c]
push eax
push 0x41b3a4
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov dword [ebp - 0x1f4], eax
jmp 0x4653ec
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0x413438
mov dword [ebp - 0x154], 0x8008
push 0
push 0x41cf10
mov ecx, dword [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x18c]
test ecx, ecx
je 0x4653c6
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 8
mov dword [ebp - 0x15c], 0x41f89c
mov dword [ebp - 0x164], 8
lea eax, [ebp - 0x154]
push eax
push 0
push 0x41cf10
mov ecx, dword [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x19c]
push ecx
push 0x41b3a4
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jne 0x4652af
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4008
mov eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x466e21
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4657d8
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41f43c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x465728
mov dword [ebp - 4], 0x11
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a0], 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xc8], ax
jmp 0x465503
mov ax, word [ebp - 0xc8]
add ax, word [ebp - 0x1a0]
jo 0x466e21
mov word [ebp - 0xc8], ax
mov cx, word [ebp - 0xc8]
cmp cx, word [ebp - 0x1a4]
jg 0x4656b4
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x15c], 0x413438
mov dword [ebp - 0x164], 0x8008
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov edx, dword [ebp - 0x150]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x148]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x18c]
test eax, eax
je 0x4656a8
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x16c], 0x41f89c
mov dword [ebp - 0x174], 8
lea eax, [ebp - 0x164]
push eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x154]
mov dword [ecx], edx
mov eax, dword [ebp - 0x150]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x14c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x148]
mov dword [ecx + 0xc], eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x15
jmp 0x4654e8
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
mov ecx, dword [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x466e21
push eax
lea edx, [ebp - 0x154]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4657d8
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x13c], 0x80020004
mov dword [ebp - 0x144], 0xa
mov dword [ebp - 0x12c], 0x80020004
mov dword [ebp - 0x134], 0xa
mov dword [ebp - 0x11c], 0x80020004
mov dword [ebp - 0x124], 0xa
mov edx, dword [ebp - 0x100]
push edx
push 0x41fbbc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 8
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x124]
push edx
push 0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x1a
mov edx, dword [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xb4], ax
mov dword [ebp - 4], 0x1b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0x11
jae 0x465840
mov dword [ebp - 0x1f8], 0
jmp 0x46584c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x2e
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18c], 2
cmp dword [ebp - 0x18c], 0x11
jae 0x465881
mov dword [ebp - 0x1fc], 0
jmp 0x46588d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x59
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18c], 3
cmp dword [ebp - 0x18c], 0x11
jae 0x4658c2
mov dword [ebp - 0x200], 0
jmp 0x4658ce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x8e
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x18c], 4
cmp dword [ebp - 0x18c], 0x11
jae 0x465903
mov dword [ebp - 0x204], 0
jmp 0x46590f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x3f
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18c], 5
cmp dword [ebp - 0x18c], 0x11
jae 0x465944
mov dword [ebp - 0x208], 0
jmp 0x465950
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xe7
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x18c], 6
cmp dword [ebp - 0x18c], 0x11
jae 0x465985
mov dword [ebp - 0x20c], 0
jmp 0x465991
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x20
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18c], 7
cmp dword [ebp - 0x18c], 0x11
jae 0x4659c6
mov dword [ebp - 0x210], 0
jmp 0x4659d2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x81
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x18c], 8
cmp dword [ebp - 0x18c], 0x11
jae 0x465a07
mov dword [ebp - 0x214], 0
jmp 0x465a13
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x33
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18c], 9
cmp dword [ebp - 0x18c], 0x11
jae 0x465a48
mov dword [ebp - 0x218], 0
jmp 0x465a54
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x1c
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x18c], 0xa
cmp dword [ebp - 0x18c], 0x11
jae 0x465a89
mov dword [ebp - 0x21c], 0
jmp 0x465a95
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x61
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18c], 0xb
cmp dword [ebp - 0x18c], 0x11
jae 0x465aca
mov dword [ebp - 0x220], 0
jmp 0x465ad6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xf8
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x18c], 0xc
cmp dword [ebp - 0x18c], 0x11
jae 0x465b0b
mov dword [ebp - 0x224], 0
jmp 0x465b17
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x29
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18c], 0xd
cmp dword [ebp - 0x18c], 0x11
jae 0x465b4c
mov dword [ebp - 0x228], 0
jmp 0x465b58
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x88
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x18c], 0xe
cmp dword [ebp - 0x18c], 0x11
jae 0x465b8d
mov dword [ebp - 0x22c], 0
jmp 0x465b99
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x35
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18c], 0xf
cmp dword [ebp - 0x18c], 0x11
jae 0x465bce
mov dword [ebp - 0x230], 0
jmp 0x465bda
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x4e
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x18c], 0x10
cmp dword [ebp - 0x18c], 0x11
jae 0x465c0f
mov dword [ebp - 0x234], 0
jmp 0x465c1b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0xa4
mov dword [ebp - 4], 0x2c
mov word [ebp - 0xc0], 0
mov dword [ebp - 4], 0x2d
mov word [ebp - 0x1ac], 0x200
mov word [ebp - 0x1a8], 1
mov word [ebp - 0xb8], 0
jmp 0x465c79
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1a8]
jo 0x466e21
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1ac]
jg 0x465ce4
mov dword [ebp - 4], 0x2e
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x465cb5
mov dword [ebp - 0x238], 0
jmp 0x465cc1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov ax, word [ebp - 0xb8]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x2f
jmp 0x465c5e
mov dword [ebp - 4], 0x30
mov word [ebp - 0x1b4], 0x200
mov word [ebp - 0x1b0], 1
mov word [ebp - 0xb8], 0
jmp 0x465d23
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1b0]
jo 0x466e21
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1b4]
jg 0x465e94
mov dword [ebp - 4], 0x31
mov ax, word [ebp - 0xc0]
add ax, word [ebp - 0xb8]
jo 0x466e21
and ax, 0xff
jns 0x465d60
dec ax
or ax, 0xff00
inc ax
mov word [ebp - 0xc0], ax
mov dword [ebp - 4], 0x32
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x465d93
mov dword [ebp - 0x23c], 0
jmp 0x465d9f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [eax + edx*2]
mov word [ebp - 0x54], cx
mov dword [ebp - 4], 0x33
movsx edx, word [ebp - 0xc0]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x465ddf
mov dword [ebp - 0x240], 0
jmp 0x465deb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x465e10
mov dword [ebp - 0x244], 0
jmp 0x465e1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x190]
mov esi, dword [ebp - 0x9c]
mov ax, word [esi + eax*2]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x34
movsx ecx, word [ebp - 0xc0]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x465e68
mov dword [ebp - 0x248], 0
jmp 0x465e74
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [ebp - 0x54]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x35
jmp 0x465d08
mov dword [ebp - 4], 0x36
mov edx, dword [ebp + 0x10]
cmp word [edx], 1
jne 0x46606d
mov dword [ebp - 4], 0x37
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x38
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x14c], 0x41763c
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x114]
push eax
push 0x10
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x3a
mov word [ebp - 0x1bc], 0x200
mov word [ebp - 0x1b8], 1
mov word [ebp - 0xb8], 0
jmp 0x465f78
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1b8]
jo 0x466e21
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1bc]
jg 0x466068
mov dword [ebp - 4], 0x3b
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x465fb8
mov dword [ebp - 0x24c], 0
jmp 0x465fc4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
movsx ecx, word [eax + edx*2]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x201
jae 0x465ff2
mov dword [ebp - 0x250], 0
jmp 0x465ffe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov dx, word [ebp - 0xe8]
add dx, 0x30
jo 0x466e21
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x64]
mov word [ecx + eax*2], dx
mov dword [ebp - 4], 0x3c
mov dx, word [ebp - 0xe8]
add dx, 1
jo 0x466e21
mov word [ebp - 0xe8], dx
mov dword [ebp - 4], 0x3d
cmp word [ebp - 0xe8], 0xa
jne 0x46605c
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x40
jmp 0x465f5d
jmp 0x4663e0
mov dword [ebp - 4], 0x41
mov eax, dword [ebp + 0x10]
cmp word [eax], 2
jne 0x46635f
mov dword [ebp - 4], 0x42
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x43
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x44
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x14c], 0x41763c
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x10
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x46
mov word [ebp - 0xc4], 0
mov dword [ebp - 4], 0x47
mov word [ebp - 0x1c4], 0x200
mov word [ebp - 0x1c0], 1
mov word [ebp - 0xb8], 0
jmp 0x46616e
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1c0]
jo 0x466e21
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1c4]
jg 0x46635a
mov dword [ebp - 4], 0x48
movsx edx, word [ebp - 0xc4]
test edx, edx
je 0x46627d
mov dword [ebp - 4], 0x49
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x4661c4
mov dword [ebp - 0x254], 0
jmp 0x4661d0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
movsx eax, word [edx + ecx*2]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x201
jae 0x4661fe
mov dword [ebp - 0x258], 0
jmp 0x46620a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov cx, word [ebp - 0xe8]
add cx, 0x30
jo 0x466e21
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x64]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x4a
mov cx, word [ebp - 0xe8]
add cx, 1
jo 0x466e21
mov word [ebp - 0xe8], cx
mov dword [ebp - 4], 0x4b
cmp word [ebp - 0xe8], 0xa
jne 0x466268
mov dword [ebp - 4], 0x4c
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x4e
mov word [ebp - 0xc4], 0
jmp 0x46634e
mov dword [ebp - 4], 0x50
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x201
jae 0x4662a9
mov dword [ebp - 0x25c], 0
jmp 0x4662b5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x9c]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x4662e3
mov dword [ebp - 0x260], 0
jmp 0x4662ef
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov ax, word [ebp - 0x28]
add ax, 0x41
jo 0x466e21
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x64]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x51
mov ax, word [ebp - 0x28]
add ax, 1
jo 0x466e21
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0x52
cmp word [ebp - 0x28], 0x1a
jne 0x46633e
mov dword [ebp - 4], 0x53
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x55
mov word [ebp - 0xc4], 0xffff
mov dword [ebp - 4], 0x57
jmp 0x466153
jmp 0x4663e0
mov dword [ebp - 4], 0x59
mov word [ebp - 0x48], 8
mov dword [ebp - 4], 0x5a
mov dword [ebp - 0x14c], 0x41763c
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x13
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5c
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x5d
mov ax, word [ebp - 0xb4]
mov word [ebp - 0x1cc], ax
mov word [ebp - 0x1c8], 1
mov word [ebp - 0xb8], 1
jmp 0x466434
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1c8]
jo 0x466e21
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1cc]
jg 0x466604
mov dword [ebp - 4], 0x5e
movsx eax, word [ebp - 0xf8]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x11
jae 0x466471
mov dword [ebp - 0x264], 0
jmp 0x46647d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x154], 0x4008
lea edx, [ebp - 0x114]
push edx
movsx eax, word [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx eax, word [ebp - 0xf8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x4664ec
mov dword [ebp - 0x268], 0
jmp 0x4664f8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0xd4]
mov cx, word [edx + ecx*2]
add cx, ax
jo 0x466e21
xor cx, 0x12
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0xd4]
mov word [eax + edx*2], cx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5f
movsx eax, word [ebp - 0xf8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x46658e
mov dword [ebp - 0x26c], 0
jmp 0x46659a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0xd4]
mov ax, word [ebp - 0x4c]
add ax, word [edx + ecx*2]
jo 0x466e21
mov word [ebp - 0x4c], ax
mov dword [ebp - 4], 0x60
mov cx, word [ebp - 0xf8]
add cx, 1
jo 0x466e21
mov word [ebp - 0xf8], cx
mov dword [ebp - 4], 0x61
cmp word [ebp - 0xf8], 9
jne 0x4665f8
mov dword [ebp - 4], 0x62
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x64
jmp 0x466419
mov dword [ebp - 4], 0x65
mov dx, word [ebp - 0x24]
mov word [ebp - 0x1d4], dx
mov word [ebp - 0x1d0], 1
mov word [ebp - 0xb8], 1
jmp 0x466645
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1d0]
jo 0x466e21
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1d4]
jg 0x466809
mov dword [ebp - 4], 0x66
movsx edx, word [ebp - 0xf8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x466682
mov dword [ebp - 0x270], 0
jmp 0x46668e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
lea ecx, [ebp - 0x114]
push ecx
movsx edx, word [ebp - 0xb8]
push edx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx edx, word [ebp - 0xf8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x11
jae 0x4666fa
mov dword [ebp - 0x274], 0
jmp 0x466706
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x80]
mov dx, word [ecx + edx*2]
add dx, ax
jo 0x466e21
xor dx, 0x19
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x80]
mov word [ecx + eax*2], dx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x114]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x67
movsx ecx, word [ebp - 0xf8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x466796
mov dword [ebp - 0x278], 0
jmp 0x4667a2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x58]
add cx, word [eax + edx*2]
jo 0x466e21
mov word [ebp - 0x58], cx
mov dword [ebp - 4], 0x68
mov dx, word [ebp - 0xf8]
add dx, 1
jo 0x466e21
mov word [ebp - 0xf8], dx
mov dword [ebp - 4], 0x69
cmp word [ebp - 0xf8], 9
jne 0x4667fd
mov dword [ebp - 4], 0x6a
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x6c
jmp 0x46662a
mov dword [ebp - 4], 0x6d
mov ax, word [ebp - 0x4c]
add ax, word [ebp - 0x58]
jo 0x466e21
and ax, 0x1ff
jns 0x46682c
dec ax
or ax, 0xfe00
inc ax
mov word [ebp - 0xb0], ax
mov dword [ebp - 4], 0x6e
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x6f
mov word [ebp - 0xf0], 1
mov dword [ebp - 4], 0x70
mov cx, word [ebp - 0x48]
mov word [ebp - 0x1dc], cx
mov word [ebp - 0x1d8], 1
mov word [ebp - 0xb8], 1
jmp 0x466894
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1d8]
jo 0x466e21
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1dc]
jg 0x466cda
mov dword [ebp - 4], 0x71
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x11
jae 0x4668d1
mov dword [ebp - 0x27c], 0
jmp 0x4668dd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0x11
jae 0x4668ff
mov dword [ebp - 0x280], 0
jmp 0x46690b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x280], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x46692d
mov dword [ebp - 0x284], 0
jmp 0x466939
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x194]
mov esi, dword [ebp - 0x34]
mov cx, word [edx + ecx*2]
xor cx, word [esi + eax*2]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x72
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x466989
mov dword [ebp - 0x288], 0
jmp 0x466995
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x4669b7
mov dword [ebp - 0x28c], 0
jmp 0x4669c3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x190]
mov esi, dword [ebp - 0x80]
mov ax, word [ecx + eax*2]
xor ax, word [esi + edx*2]
mov cx, ax
and cx, 0x1ff
jns 0x4669f3
dec cx
or cx, 0xfe00
inc cx
sub cx, word [ebp - 0xb0]
jo 0x466e21
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
mov word [ebp - 0xec], ax
mov dword [ebp - 4], 0x73
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 3
jne 0x466c31
mov dword [ebp - 4], 0x74
cmp word [ebp - 0xec], 0x10
jge 0x466ae9
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x15c], 0x413428
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xec]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xf8]
push eax
push 2
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x466b64
mov dword [ebp - 4], 0x77
lea eax, [ebp - 0xec]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4002
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0x50]
push eax
movsx ecx, word [ebp - 0xf8]
push ecx
push 2
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x79
cmp word [ebp - 0xf0], 2
jne 0x466bcd
cmp word [ebp - 0xf8], 0x12
jge 0x466bcd
mov dword [ebp - 4], 0x7a
mov ax, word [ebp - 0xf8]
add ax, 1
jo 0x466e21
mov word [ebp - 0xf8], ax
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x50]
push ecx
mov dx, word [ebp - 0xf8]
add dx, 1
jo 0x466e21
movsx eax, dx
push eax
push 1
push 0x417644
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
mov dword [ebp - 4], 0x7d
mov cx, word [ebp - 0xf8]
add cx, 2
jo 0x466e21
mov word [ebp - 0xf8], cx
mov dword [ebp - 4], 0x7e
mov dx, word [ebp - 0xf0]
add dx, 1
jo 0x466e21
mov word [ebp - 0xf0], dx
mov dword [ebp - 4], 0x7f
cmp word [ebp - 0xf0], 3
jne 0x466c2c
mov dword [ebp - 4], 0x80
mov word [ebp - 0xf0], 1
jmp 0x466cce
mov dword [ebp - 4], 0x83
movsx eax, word [ebp - 0xec]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x466c5d
mov dword [ebp - 0x290], 0
jmp 0x466c69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx + ecx*2]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xb8]
push eax
push 1
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x85
jmp 0x466879
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0xf4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x466e08
jmp 0x466d41
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x19c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x178], ecx
lea edx, [ebp - 0x178]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x8c]
mov dword [ebp - 0x180], edx
lea eax, [ebp - 0x180]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x184], ecx
lea edx, [ebp - 0x184]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x188], eax
lea ecx, [ebp - 0x188]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3