Function at 0x66ab00
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402ad6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x20c
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401db0
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x190], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 0x5c], 0xffffffff
mov edx, 0x418310
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
cmp dword [0x6c5fd4], ebx
jne 0x66ac23
push 0x6c5fd4
push 0x414b40
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x6c5fd4]
mov eax, dword [esi]
lea ecx, [ebp - 0xa4]
push ecx
push esi
call dword [eax + 0x14]
fnclex
cmp eax, ebx
jge 0x66ac4b
push 0x14
push 0x414b30
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa4]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
lea ecx, [ebp - 0x90]
push ecx
push eax
call dword [edx + 0x50]
fnclex
cmp eax, ebx
jge 0x66ac7b
push 0x50
push 0x418be8
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [0x6c5024]
cmp eax, ebx
jne 0x66acb5
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xbc]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xb4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xb0]
mov dword [edx + 0xc], ecx
push 5
mov edx, dword [eax]
push eax
call dword [edx + 0x5f0]
push eax
lea eax, [ebp - 0xa8]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
call edi
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0x134], 0x418bfc
mov dword [ebp - 0x13c], 8
mov eax, dword [0x6c5024]
cmp eax, ebx
jne 0x66ad58
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x13c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x138]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x134]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x130]
mov dword [ecx + 0xc], edx
push 2
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f0]
push eax
lea edx, [ebp - 0xa4]
push edx
call esi
push eax
call edi
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 0x134], 0x418c3c
mov dword [ebp - 0x13c], 8
mov eax, dword [0x6c5024]
cmp eax, ebx
jne 0x66add6
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x13c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x138]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x134]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x130]
mov dword [ecx + 0xc], edx
push 3
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f0]
push eax
lea edx, [ebp - 0xa4]
push edx
call esi
push eax
call edi
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x6c5024]
cmp eax, ebx
jne 0x66ae40
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
push ebx
push 0x1e
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f0]
push eax
lea edx, [ebp - 0xa4]
push edx
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCall]
add esp, 0xc
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x6c5024]
cmp eax, ebx
jne 0x66ae8a
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
push 0
push 1
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f0]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ebx, 1
xor edi, edi
mov eax, 9
cmp di, ax
jg 0x66afac
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66af13
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d0]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66af4f
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66af80
push 0x9c
push 0x418c70
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov dx, bx
add dx, di
jo 0x671cb8
mov edi, edx
jmp 0x66aee7
xor ebx, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x64], ebx
xor esi, esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x4c], ebx
mov eax, dword [ebp - 0x68]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x66cc92
mov ecx, dword [ebp - 0x68]
push ecx
push 1
push 0xffffffffffffffff
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
jmp 0x66aff3
mov esi, dword [ebp - 0x58]
xor ebx, ebx
push 1
call dword [sym.imp.MSVBVM60.DLL_rtcEndOfFile]
test ax, ax
push 1
jne 0x66cc8a
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLineInputStr]
mov edx, dword [ebp - 0x84]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x44]
push eax
call fcn.00671cc0
mov edx, eax
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x418c84
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b2ab
cmp si, 0x438
jge 0x66aff3
mov dword [ebp - 0x180], eax
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, 2
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
movsx esi, si
cmp esi, 0x7d1
jb 0x66b0f0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x90]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
mov edx, eax
mov eax, dword [0x6c51ac]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
lea ecx, [ebp - 0xdc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0x180], 1
cmp esi, 0x7d1
jb 0x66b149
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov eax, dword [0x6c51c8]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 2
cmp esi, 0x7d1
jb 0x66b193
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov eax, dword [0x6c5190]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
cmp esi, 0x7d1
jb 0x66b1e1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
cmp esi, 0x7d1
jb 0x66b1e1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5190]
mov edx, dword [ecx + esi*4]
push edx
push 0x418ca0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
call ebx
mov edx, eax
neg edx
sbb edx, edx
neg edx
mov eax, dword [0x6c5190]
mov ecx, dword [eax + esi*4]
push ecx
push 0x418c94
mov dword [ebp - 0x210], edx
call ebx
neg eax
sbb eax, eax
neg eax
mov edx, dword [ebp - 0x210]
test eax, edx
jne 0x66b247
cmp esi, 0x7d1
jb 0x66b234
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, 0x418cac
mov eax, dword [0x6c5190]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x180], 3
cmp esi, 0x7d1
jb 0x66b25f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [0x6c51e4]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov si, word [ebp - 0x58]
add si, 1
jo 0x671cb8
mov dword [ebp - 0x58], esi
jmp 0x66aff1
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x418cb8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b375
cmp si, 0x438
jge 0x66aff3
movsx esi, si
cmp esi, 0x7d1
jb 0x66b2e1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, 0x418cd8
mov eax, dword [0x6c51ac]
lea ecx, [eax + esi*4]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp esi, 0x7d1
jb 0x66b304
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, 0x418ce0
mov ecx, dword [0x6c5190]
lea ecx, [ecx + esi*4]
call ebx
mov dword [ebp - 0x180], 0
cmp esi, 0x7d1
jb 0x66b32c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c51c8]
lea ecx, [ecx + esi*4]
call ebx
lea ecx, [ebp - 0x90]
call edi
mov dx, word [ebp - 0x58]
add dx, 1
jo 0x671cb8
mov dword [ebp - 0x58], edx
jmp 0x66afee
mov eax, dword [ebp - 0x8c]
push eax
push 0x418cf4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b3c1
cmp si, 0x438
jge 0x66aff3
mov ax, si
cwd
mov cx, 0x5a
idiv cx
mov ax, cx
sub ax, dx
jo 0x671cb8
add ax, si
jo 0x671cb8
mov esi, eax
mov dword [ebp - 0x58], esi
jmp 0x66aff3
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x418d1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b40d
cmp si, 0x438
jge 0x66aff3
mov ax, si
cwd
mov cx, 0x1e
idiv cx
mov ax, cx
sub ax, dx
jo 0x671cb8
add ax, si
jo 0x671cb8
mov esi, eax
mov dword [ebp - 0x58], esi
jmp 0x66aff3
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x418d48
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b44b
mov dword [ebp - 0x180], ebx
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
mov ecx, 0x6c510c
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x66aff3
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x418d60
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b4f4
mov dword [ebp - 0x180], ebx
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
mov ecx, 0x6c5104
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
cmp dword [0x6c5024], ebx
jne 0x66b4a0
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x6c5024]
mov ebx, dword [esi]
push 0x4197b4
mov ecx, dword [0x6c5104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x66b4e2
push 0x54
push 0x414b60
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call edi
xor ebx, ebx
mov esi, dword [ebp - 0x58]
jmp 0x66aff3
mov edx, dword [ebp - 0x8c]
push edx
push 0x4197e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66b613
cmp word [ebp - 0x60], 0xc
jge 0x66aff3
lea eax, [ebp - 0x60]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], 0x4002
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [0x6c5024]
cmp eax, ebx
jne 0x66b570
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x13c]
mov dword [ecx], edx
mov edx, dword [ebp - 0x138]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x134]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x130]
mov dword [ecx + 0xc], edx
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xbc]
mov dword [ecx], edx
mov edx, dword [ebp - 0xb8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xb4]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xb0]
mov dword [ecx + 0xc], edx
push 1
push 0x11
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallSt]
add esp, 0x2c
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ax, word [ebp - 0x60]
add ax, 1
jo 0x671cb8
mov dword [ebp - 0x60], eax
jmp 0x66aff3
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x419800
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66bada
mov dword [ebp - 0x134], 0xa
mov dword [ebp - 0x13c], 0x8002
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x13c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je 0x66aff3
mov dword [ebp - 0x180], 0
movsx ebx, word [ebp - 0x4c]
cmp ebx, 0xb
jb 0x66b674
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [0x6c5604]
lea ecx, [eax + ebx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 1
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov esi, 8
mov dword [ebp - 0xbc], esi
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x144], 0x419818
mov dword [ebp - 0x14c], esi
mov eax, 2
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
cmp ebx, 0xb
jb 0x66b74f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xec]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
call esi
mov ecx, dword [0x6c5620]
mov word [ecx + ebx*2], ax
lea ecx, [ebp - 0x90]
call edi
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xdc]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 0x180], 2
cmp ebx, 0xb
jb 0x66b7c7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call esi
mov ecx, dword [0x6c5658]
mov word [ecx + ebx*2], ax
lea ecx, [ebp - 0x90]
call edi
mov eax, 3
mov dword [ebp - 0x50], eax
mov ecx, 0x13
cmp ax, cx
jg 0x66bac4
cmp ebx, 9
ja case.default.0x66b81f
jmp dword [ebx*4 + 0x671c68]
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b83e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c5674]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b87e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c5690]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b8be
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c56ac]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b8fe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c56c8]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b93e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c56e4]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b97e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c5700]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b9be
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c571c]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66b9fe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c5738]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66ba3b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c5754]
jmp 0x66ba9b
sub ax, 3
jo 0x671cb8
movsx esi, ax
cmp esi, 0x11
jb 0x66ba78
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [0x6c5770]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov eax, dword [ebp - 0x50]
mov ecx, 1
add cx, ax
jo 0x671cb8
mov eax, ecx
jmp 0x66b805
mov dx, word [ebp - 0x4c]
add dx, 1
jo 0x671cb8
mov dword [ebp - 0x4c], edx
jmp 0x66afee
mov eax, dword [ebp - 0x8c]
push eax
push 0x419824
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66bb61
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x134], 0x419838
mov dword [ebp - 0x13c], 0x8008
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x66aff3
mov word [0x6c50e4], 0xffff
jmp 0x66aff3
mov edx, dword [ebp - 0x8c]
push edx
push 0x419850
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66bf26
cmp word [ebp - 0x20], 0x28
jge 0x66aff3
mov dword [ebp - 0x180], ebx
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x134], 0x418310
mov dword [ebp - 0x13c], 0x8008
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x13c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x66bf10
mov dword [ebp - 0x144], 0x419818
mov dword [ebp - 0x14c], 8
mov ebx, 2
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x13c], ebx
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
movsx esi, word [ebp - 0x20]
cmp esi, 0x29
jb 0x66bc5c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x14c]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov edx, dword [0x6c5220]
mov word [edx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xdc]
push ecx
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 0x180], 1
cmp esi, 0x29
jb 0x66bcd1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
mov edx, eax
mov ecx, dword [0x6c523c]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 2
cmp esi, 0x29
jb 0x66bd1f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov ecx, dword [0x6c5204]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 3
cmp esi, 0x29
jb 0x66bd67
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov ecx, dword [0x6c5258]
fstp dword [ecx + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 4
cmp esi, 0x29
jb 0x66bdae
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov ecx, dword [0x6c5274]
fstp dword [ecx + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 5
cmp esi, 0x29
jb 0x66bdf5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov ecx, dword [0x6c5290]
fstp dword [ecx + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 6
cmp esi, 0x29
jb 0x66be3c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c52c8]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 7
cmp esi, 0x29
jb 0x66be8a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c52e4]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 8
cmp esi, 0x29
jb 0x66bed8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov ecx, dword [0x6c52ac]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov esi, dword [ebp - 0x58]
xor ebx, ebx
mov dx, word [ebp - 0x20]
add dx, 1
jo 0x671cb8
mov dword [ebp - 0x20], edx
jmp 0x66aff3
mov eax, dword [ebp - 0x8c]
push eax
push 0x41985c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66c377
cmp word [ebp - 0x64], 0x31
jge 0x66aff3
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x134], 0x418310
mov dword [ebp - 0x13c], 0x8008
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x66c35c
mov dword [ebp - 0x144], 0x419818
mov dword [ebp - 0x14c], 8
mov ebx, 2
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x13c], ebx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
movsx esi, word [ebp - 0x64]
cmp esi, 0x33
jb 0x66c021
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xec]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c5320]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xdc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp esi, 0x33
jb 0x66c08c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5320]
cmp word [ecx + esi*2], 0
jne 0x66c112
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66c0b7
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x5d4]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
push 0x41986c
push esi
call dword [ecx + 0x64]
fnclex
test eax, eax
jge 0x66c0f0
push 0x64
push 0x419894
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dx, word [ebp - 0x64]
sub dx, 1
jo 0x671cb8
mov dword [ebp - 0x64], edx
jmp 0x66c35c
mov dword [ebp - 0x180], 1
cmp esi, 0x33
jb 0x66c127
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
mov edx, eax
mov eax, dword [0x6c533c]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 2
cmp esi, 0x33
jb 0x66c174
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov eax, dword [0x6c5304]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 3
cmp esi, 0x33
jb 0x66c1bb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov eax, dword [0x6c5358]
fstp dword [eax + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 4
cmp esi, 0x33
jb 0x66c201
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov eax, dword [0x6c5374]
fstp dword [eax + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 5
cmp esi, 0x33
jb 0x66c247
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov eax, dword [0x6c5390]
fstp dword [eax + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 6
cmp esi, 0x33
jb 0x66c28d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c53c8]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 7
cmp esi, 0x33
jb 0x66c2db
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c53e4]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 8
cmp esi, 0x33
jb 0x66c329
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov ecx, dword [0x6c53ac]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dx, word [ebp - 0x64]
add dx, 1
jo 0x671cb8
mov dword [ebp - 0x64], edx
xor ebx, ebx
mov esi, dword [ebp - 0x58]
jmp 0x66aff3
mov eax, dword [ebp - 0x8c]
push eax
push 0x4198a8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66c751
cmp word [ebp - 0x54], 0x28
jge 0x66aff3
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x134], 0x418310
mov dword [ebp - 0x13c], 0x8008
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x66c73b
mov dword [ebp - 0x144], 0x419818
mov dword [ebp - 0x14c], 8
mov ebx, 2
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x13c], ebx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
movsx esi, word [ebp - 0x54]
cmp esi, 0x29
jb 0x66c472
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xec]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c5420]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xdc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 0x180], 1
cmp esi, 0x29
jb 0x66c4e7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
mov edx, eax
mov eax, dword [0x6c543c]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 2
cmp esi, 0x29
jb 0x66c534
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov eax, dword [0x6c5404]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 3
cmp esi, 0x29
jb 0x66c57b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov eax, dword [0x6c5458]
fstp dword [eax + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 4
cmp esi, 0x29
jb 0x66c5c1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov eax, dword [0x6c5474]
fstp dword [eax + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 5
cmp esi, 0x29
jb 0x66c607
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov eax, dword [0x6c5490]
fstp dword [eax + esi*4]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 0x180], 6
movsx edi, word [ebp - 0x20]
cmp edi, 0x29
jb 0x66c655
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c54c8]
mov word [ecx + edi*2], ax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 0x180], 7
cmp edi, 0x29
jb 0x66c6a7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c54e4]
mov word [ecx + edi*2], ax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 0x180], 8
cmp esi, 0x29
jb 0x66c6f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov ecx, dword [0x6c54ac]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov esi, dword [ebp - 0x58]
xor ebx, ebx
mov dx, word [ebp - 0x54]
add dx, 1
jo 0x671cb8
mov dword [ebp - 0x54], edx
jmp 0x66aff3
mov eax, dword [ebp - 0x8c]
push eax
push 0x4198c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66ca34
cmp word [ebp - 0x7c], 0x28
jge 0x66aff3
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x134], 0x418310
mov dword [ebp - 0x13c], 0x8008
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x66ca1e
movsx esi, word [ebp - 0x7c]
cmp esi, 0x29
jb 0x66c7e8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c5520]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 1
cmp esi, 0x29
jb 0x66c82d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
mov edx, eax
mov ecx, dword [0x6c5558]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 2
cmp esi, 0x29
jb 0x66c87b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [0x6c553c]
mov word [ecx + esi*2], ax
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 3
cmp esi, 0x29
jb 0x66c8c9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov ecx, dword [0x6c5504]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 4
cmp esi, 0x29
jb 0x66c911
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov ecx, dword [0x6c5574]
fstp dword [ecx + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 5
cmp esi, 0x29
jb 0x66c958
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov ecx, dword [0x6c5590]
fstp dword [ecx + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 6
cmp esi, 0x29
jb 0x66c99f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov ecx, dword [0x6c55ac]
fstp dword [ecx + esi*4]
lea ecx, [ebp - 0x90]
call edi
mov dword [ebp - 0x180], 7
cmp esi, 0x29
jb 0x66c9e6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x180]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.00671de0
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
mov edx, eax
mov ecx, dword [0x6c55c8]
lea ecx, [ecx + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x90]
call edi
mov esi, dword [ebp - 0x58]
xor ebx, ebx
mov dx, word [ebp - 0x7c]
add dx, 1
jo 0x671cb8
mov dword [ebp - 0x7c], edx
jmp 0x66aff3
mov eax, dword [ebp - 0x8c]
push eax
push 0x4198d8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x66cb49
mov dword [ebp - 0x180], ebx
lea ecx, [ebp - 0x180]
push ecx
lea edx, [ebp - 0x44]
push edx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x144], 0x419818
mov dword [ebp - 0x14c], 8
mov eax, 2
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0xdc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xec]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov word [0x6c50e0], ax
lea ecx, [ebp - 0x90]
call edi
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0xdc]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x66aff3
mov eax, dword [ebp - 0x8c]
push eax
push 0x419930
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
call ebx
mov edx, eax
neg edx
sbb edx, edx
neg edx
mov ecx, dword [ebp - 0x8c]
push ecx
push 0x419904
mov dword [ebp - 0x214], edx
call ebx
neg eax
sbb eax, eax
neg eax
mov edx, dword [ebp - 0x214]
test eax, edx
jne 0x66aff1
xor ebx, ebx
mov dword [ebp - 0x180], ebx
lea eax, [ebp - 0x180]
push eax
lea ecx, [ebp - 0x44]
push ecx
call fcn.00671de0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0x144], 0x419818
mov dword [ebp - 0x14c], 8
mov eax, 2
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], eax
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xec]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov word [0x6c50e2], ax
lea ecx, [ebp - 0x90]
call edi
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xdc]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x66aff3
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
jmp 0x66cc95
mov dword [ebp - 0x5c], ebx
sub si, 1
jo 0x671cb8
mov ax, si
mov word [0x6c51f0], ax
cmp ax, 0x437
jle 0x66ccb8
mov ax, 0x437
mov word [0x6c51f0], ax
mov ebx, 1
xor edi, edi
mov ecx, 0x23
cmp di, cx
jg 0x66cda0
mov dx, di
imul dx, dx, 0x1e
jo 0x671cb8
cmp ax, dx
jl 0x66cda0
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66cd01
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x42c]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66cd3d
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66cd6e
push 0x9c
push 0x418c70
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov dx, bx
add dx, di
jo 0x671cb8
mov edi, edx
mov ax, word [0x6c51f0]
jmp 0x66ccbf
mov eax, dword [0x6c51f0]
mov dword [ebp - 0x1c4], eax
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
cmp bx, word [ebp - 0x1c4]
jg 0x66e73d
movsx edi, bx
mov dword [ebp - 0x218], edi
cmp edi, 0x7d1
jb 0x66cdda
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5190]
mov edx, dword [ecx + edi*4]
push edx
push 0x418ce0
call esi
test eax, eax
jne 0x66d017
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ce11
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push ebx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66ce51
push 0x40
push 0x418314
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x66ce57
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66ce84
push 0x9c
push 0x415dd4
push esi
push eax
call edi
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
call ebx
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66cebd
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x438]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66cef8
push 0x40
push 0x418314
push esi
push eax
call edi
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xff0000
push eax
call dword [ecx + 0x6c]
fnclex
test eax, eax
jge 0x66cf22
push 0x6c
push 0x415dd4
push esi
push eax
call edi
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call ebx
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66cf55
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66cf96
push 0x40
push 0x418314
push esi
push eax
call edi
mov esi, dword [ebp - 0xa8]
mov ebx, dword [ebp - 0x218]
cmp ebx, 0x7d1
jb 0x66cfb0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [esi]
mov eax, dword [0x6c51c8]
lea ecx, [eax + ebx*4]
push ecx
mov dword [ebp - 0x21c], edx
call fcn.00671fd0
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
mov edx, dword [ebp - 0x21c]
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x66cff0
push 0x54
push 0x415dd4
push esi
push eax
call edi
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
jmp 0x66e71b
cmp edi, 0x7d1
jb 0x66d025
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5190]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call esi
test eax, eax
je 0x66e71e
mov esi, dword [ebp - 0x218]
cmp esi, 0x7d1
jb 0x66d052
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5190]
mov edx, dword [ecx + esi*4]
push edx
push 0x418cac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x66dbc9
test eax, eax
jne 0x66d08d
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66d0d0
push 0x40
push 0x418314
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x66d0d6
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0x41000000
push eax
call dword [edx + 0xb4]
fnclex
test eax, eax
jge 0x66d106
push 0xb4
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d13d
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x438]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66d175
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x6c]
fnclex
test eax, eax
jge 0x66d19c
push 0x6c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d1d3
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66d20b
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0xbc]
fnclex
test eax, eax
jge 0x66d238
push 0xbc
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d26f
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x434]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66d2a7
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66d2d4
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d30b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x434]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66d349
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp dword [ebp - 0x218], 0x7d1
jb 0x66d361
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [esi]
mov eax, dword [0x6c5190]
mov ecx, dword [ebp - 0x218]
mov eax, dword [eax + ecx*4]
push eax
push esi
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x66d387
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d3be
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66d3f6
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66d423
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov edi, dword [ebp - 0x218]
cmp edi, 0x7d1
jb 0x66d450
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c51ac]
lea eax, [edx + edi*4]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], 0x4008
push 1
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov dword [ebp - 0x144], 0x418160
mov dword [ebp - 0x14c], 0x8008
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x14c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov si, ax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
test si, si
je 0x66d6f8
cmp edi, 0x7d1
jb 0x66d4cd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
push 0x419818
mov edx, dword [0x6c51ac]
mov eax, dword [ebp - 0x218]
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb4], eax
mov esi, 8
mov dword [ebp - 0xbc], esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xcc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea ecx, [ebp - 0xcc]
push ecx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
call edi
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], esi
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d546
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xdc]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xd4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xd0]
mov dword [edx + 0xc], ecx
push 0x68030007
mov edx, dword [eax]
push eax
call dword [edx + 0x5fc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d5db
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66d61c
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d63b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
cmp dword [ebp - 0x218], 0x7d1
jb 0x66d64d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call edi
push eax
mov ecx, dword [0x6c51c8]
movsx eax, word [ebp - 0x24]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call edi
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66d93a
jmp 0x66d928
cmp edi, 0x7d1
jb 0x66d706
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
push 0x419818
mov ecx, dword [0x6c51ac]
mov edx, dword [ebp - 0x218]
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb4], eax
mov esi, 8
mov dword [ebp - 0xbc], esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0xcc]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
call edi
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], esi
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d77f
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xdc]
mov dword [ecx], edx
mov edx, dword [ebp - 0xd8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xd4]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xd0]
mov dword [ecx + 0xc], edx
push 0x68030007
mov ecx, dword [eax]
push eax
call dword [ecx + 0x624]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d814
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66d855
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d874
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
cmp dword [ebp - 0x218], 0x7d1
jb 0x66d886
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x624]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call edi
push eax
mov ecx, dword [0x6c51c8]
movsx eax, word [ebp - 0x24]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call edi
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66d93a
push 0x19c
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x90]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x24
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66d9a8
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov ebx, dword [ebp - 0x24]
push ebx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66d9ed
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xa8]
movsx ebx, bx
cmp ebx, 0x7d1
jb 0x66da04
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [esi]
mov eax, dword [0x6c51c8]
lea ecx, [eax + ebx*4]
push ecx
mov dword [ebp - 0x220], edx
call fcn.00671fd0
mov edx, eax
lea ecx, [ebp - 0x90]
call edi
push eax
push esi
mov edx, dword [ebp - 0x220]
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x66da44
push 0x54
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
call edi
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66da89
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x430]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov ebx, dword [ebp - 0x24]
push ebx
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66dac8
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x94]
fnclex
test eax, eax
jge 0x66daf9
push 0x94
push 0x414b50
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call edi
add esp, 0xc
mov dword [ebp - 0x134], 0xffffffff
mov dword [ebp - 0x13c], 0xb
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66db40
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push ebx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66db7c
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x13c]
mov dword [edx], eax
mov ecx, dword [ebp - 0x138]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x134]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x130]
mov dword [edx + 0xc], ecx
push 0x80010007
mov edx, dword [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
jmp 0x66e717
test eax, eax
jne 0x66dbe2
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x438]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66dc25
push 0x40
push 0x418314
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x66dc2b
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0x41000000
push eax
call dword [ecx + 0xb4]
fnclex
test eax, eax
jge 0x66dc5b
push 0xb4
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66dc92
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66dccd
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0
push eax
call dword [edx + 0x6c]
fnclex
test eax, eax
jge 0x66dcf4
push 0x6c
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66dd2b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x438]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66dd63
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xbc]
fnclex
test eax, eax
jge 0x66dd90
push 0xbc
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ddc7
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x434]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66ddff
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66de2c
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66de63
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x434]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66dea1
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
mov edi, dword [ebp - 0x218]
cmp edi, 0x7d1
jb 0x66debb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5190]
mov edx, dword [ecx + edi*4]
push edx
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x66dedc
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66df13
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x438]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66df4e
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66df7b
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
cmp edi, 0x7d1
jb 0x66dfa2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c51ac]
lea edx, [ecx + edi*4]
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x13c], 0x4008
push 1
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov dword [ebp - 0x144], 0x418160
mov dword [ebp - 0x14c], 0x8008
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0x14c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov si, ax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
test si, si
je 0x66e24a
cmp edi, 0x7d1
jb 0x66e01f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
push 0x419818
mov ecx, dword [0x6c51ac]
mov edx, dword [ebp - 0x218]
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb4], eax
mov esi, 8
mov dword [ebp - 0xbc], esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0xcc]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
call edi
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], esi
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e098
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xdc]
mov dword [ecx], edx
mov edx, dword [ebp - 0xd8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xd4]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xd0]
mov dword [ecx + 0xc], edx
push 0x68030007
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e12d
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66e16e
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e18d
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
cmp dword [ebp - 0x218], 0x7d1
jb 0x66e19f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call edi
push eax
mov ecx, dword [0x6c51c8]
movsx eax, word [ebp - 0x24]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call edi
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66e48c
jmp 0x66e47a
cmp edi, 0x7d1
jb 0x66e258
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
push 0x419818
mov ecx, dword [0x6c51ac]
mov edx, dword [ebp - 0x218]
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb4], eax
mov esi, 8
mov dword [ebp - 0xbc], esi
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0xcc]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
call edi
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xdc], esi
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e2d1
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xdc]
mov dword [ecx], edx
mov edx, dword [ebp - 0xd8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xd4]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xd0]
mov dword [ecx + 0xc], edx
push 0x68030007
mov ecx, dword [eax]
push eax
call dword [ecx + 0x624]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e366
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66e3a7
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e3c6
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
cmp dword [ebp - 0x218], 0x7d1
jb 0x66e3d8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x624]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call edi
push eax
mov ecx, dword [0x6c51c8]
movsx eax, word [ebp - 0x24]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call edi
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66e48c
push 0x19c
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x94]
push edx
lea eax, [ebp - 0x90]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x24
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e4fa
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x438]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov ebx, dword [ebp - 0x24]
push ebx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66e53f
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xa8]
movsx ebx, bx
cmp ebx, 0x7d1
jb 0x66e556
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [esi]
mov eax, dword [0x6c51c8]
lea ecx, [eax + ebx*4]
push ecx
mov dword [ebp - 0x224], edx
call fcn.00671fd0
mov edx, eax
lea ecx, [ebp - 0x90]
call edi
push eax
push esi
mov edx, dword [ebp - 0x224]
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x66e596
push 0x54
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
call edi
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e5db
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x430]
push eax
lea eax, [ebp - 0xa4]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call ebx
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66e61c
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x94]
fnclex
test eax, eax
jge 0x66e64d
push 0x94
push 0x414b50
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call edi
add esp, 0xc
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x13c], 0xb
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e694
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5f8]
push eax
lea edx, [ebp - 0xa4]
push edx
call ebx
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66e6cf
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
sub esp, 0x10
mov eax, esp
mov ecx, dword [ebp - 0x13c]
mov dword [eax], ecx
mov edx, dword [ebp - 0x138]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x134]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x130]
mov dword [eax + 0xc], edx
push 0x80010007
mov eax, dword [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call edi
add esp, 0xc
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x671cb8
mov dword [ebp - 0x24], eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov ebx, eax
jmp 0x66cdb6
mov eax, dword [ebp - 0x20]
cmp ax, 0x22
jle 0x66e74b
mov eax, 0x22
mov word [0x6c52f0], ax
sub ax, 1
jo 0x671cb8
mov dword [ebp - 0x1cc], eax
xor ebx, ebx
mov dword [ebp - 0x24], ebx
cmp bx, word [ebp - 0x1cc]
jg 0x66f03a
movsx edi, bx
cmp edi, 0x29
jb 0x66e781
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x6c523c]
mov ecx, dword [eax + edi*4]
push ecx
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x66f025
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e7bb
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push ebx
push esi
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66e7fd
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xa8]
cmp edi, 0x29
jb 0x66e80e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x418158
mov eax, dword [0x6c523c]
mov ecx, dword [eax + edi*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
push esi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x66e84e
push 0x54
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
movsx esi, word [ebp - 0x24]
mov dword [ebp - 0x218], esi
cmp esi, 0x29
jb 0x66e888
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5220]
lea edx, [ecx + esi*2]
mov dword [ebp - 0x134], edx
mov dword [ebp - 0x13c], 0x4002
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e8f4
push 0x6c5024
push 0x405a90
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
call ebx
mov eax, dword [0x6c5024]
jmp 0x66e8fa
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0xcc]
mov dword [ecx], edx
mov edx, dword [ebp - 0xc8]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0xc4]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xc0]
mov dword [ecx + 0xc], edx
push 0x68030007
mov ecx, dword [eax]
push eax
call dword [ecx + 0x600]
push eax
lea edx, [ebp - 0xa4]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e986
push 0x6c5024
push 0x405a90
call ebx
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
push eax
lea eax, [ebp - 0xa8]
push eax
call esi
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xac]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66e9c7
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66e9e2
push 0x6c5024
push 0x405a90
call ebx
cmp dword [ebp - 0x218], 0x29
jb 0x66e9f1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x600]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x90]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call edi
push eax
mov ecx, dword [0x6c523c]
movsx eax, word [ebp - 0x24]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call edi
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66eabd
push 0x19c
push 0x415dd4
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x66eac3
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x28
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66eb38
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66eb73
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66eba0
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ebd7
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66ec0f
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66ec3c
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ec73
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66ecb1
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
movsx edi, word [ebp - 0x24]
cmp edi, 0x29
jb 0x66ecc6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5204]
mov edx, dword [ecx + edi*4]
push edx
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x66ece7
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ed1e
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66ed59
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66ed86
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66edbd
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38c]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66edf5
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66ee22
push 0x9c
push 0x41858c
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ee59
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x38c]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66ee91
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x190], esi
mov edi, dword [esi]
mov ecx, 1
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
push eax
push esi
call dword [edi + 0xe4]
fnclex
test eax, eax
jge 0x66eec6
push 0xe4
push 0x41858c
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66eefd
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x390]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66ef38
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66ef65
push 0x9c
push 0x41858c
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66ef9c
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x390]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66efd4
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x190], esi
mov edi, dword [esi]
mov ecx, 1
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
push eax
push esi
call dword [edi + 0xe4]
fnclex
test eax, eax
jge 0x66f009
push 0xe4
push 0x41858c
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov ebx, dword [ebp - 0x24]
mov eax, 1
add ax, bx
jo 0x671cb8
mov ebx, eax
jmp 0x66e763
mov eax, dword [ebp - 0x64]
cmp ax, 0x30
jle 0x66f048
mov eax, 0x30
mov word [0x6c53f0], ax
sub ax, 1
jo 0x671cb8
mov dword [ebp - 0x1d4], eax
xor ebx, ebx
mov dword [ebp - 0x24], ebx
cmp bx, word [ebp - 0x1d4]
jg 0x66f9ab
movsx edi, bx
cmp edi, 0x33
jb 0x66f07e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c533c]
mov edx, dword [ecx + edi*4]
push edx
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x66f996
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f0b9
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
add bx, 0x24
jo 0x671cb8
push ebx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66f105
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xa8]
cmp edi, 0x33
jb 0x66f116
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x418158
mov edx, dword [0x6c533c]
mov eax, dword [edx + edi*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
push esi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x66f157
push 0x54
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
movsx esi, word [ebp - 0x24]
mov dword [ebp - 0x218], esi
cmp esi, 0x33
jb 0x66f191
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x6c5320]
lea ecx, [eax + esi*2]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x13c], 0x4002
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f1fc
push 0x6c5024
push 0x405a90
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
call ebx
mov eax, dword [0x6c5024]
jmp 0x66f202
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xcc]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xc8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xc4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [edx + 0xc], ecx
push 0x68030007
mov edx, dword [eax]
push eax
call dword [edx + 0x600]
push eax
lea eax, [ebp - 0xa4]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f28e
push 0x6c5024
push 0x405a90
call ebx
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x39c]
push eax
lea edx, [ebp - 0xa8]
push edx
call esi
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xac]
push ecx
mov dx, word [ebp - 0x24]
add dx, 0x24
jo 0x671cb8
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66f2da
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f2f5
push 0x6c5024
push 0x405a90
call ebx
cmp dword [ebp - 0x218], 0x33
jb 0x66f304
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x600]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x90]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call edi
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call edi
push eax
mov ecx, dword [0x6c533c]
movsx eax, word [ebp - 0x24]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call edi
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66f3d0
push 0x19c
push 0x415dd4
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x66f3d6
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x28
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f44b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x39c]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov edi, dword [ebp - 0x24]
mov ax, di
add ax, 0x24
jo 0x671cb8
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66f493
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66f4c0
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f4f7
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov dx, di
add dx, 0x24
jo 0x671cb8
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66f53c
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66f569
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f5a0
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x394]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
add di, 0x24
jo 0x671cb8
push edi
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66f5e8
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
movsx edi, word [ebp - 0x24]
cmp edi, 0x33
jb 0x66f5fd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [esi]
mov eax, dword [0x6c5304]
mov ecx, dword [eax + edi*4]
push ecx
push esi
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x66f61d
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f654
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x394]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edi, dword [ebp - 0x24]
mov dx, di
add dx, 0x24
jo 0x671cb8
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66f69c
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66f6c9
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f700
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38c]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov dx, di
add dx, 0x24
jo 0x671cb8
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66f745
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66f772
push 0x9c
push 0x41858c
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f7a9
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38c]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
add di, 0x24
jo 0x671cb8
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66f7eb
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x190], esi
mov edi, dword [esi]
mov ecx, 1
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
push eax
push esi
call dword [edi + 0xe4]
fnclex
test eax, eax
jge 0x66f820
push 0xe4
push 0x41858c
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f857
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x390]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edi, dword [ebp - 0x24]
mov dx, di
add dx, 0x24
jo 0x671cb8
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66f89f
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66f8cc
push 0x9c
push 0x41858c
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f903
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x390]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
add di, 0x24
jo 0x671cb8
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66f945
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x190], esi
mov edi, dword [esi]
mov ecx, 1
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
push eax
push esi
call dword [edi + 0xe4]
fnclex
test eax, eax
jge 0x66f97a
push 0xe4
push 0x41858c
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov ebx, dword [ebp - 0x24]
mov eax, 1
add ax, bx
jo 0x671cb8
mov ebx, eax
jmp 0x66f060
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66f9c9
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x5d4]
push eax
lea edx, [ebp - 0xa4]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call ebx
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0x90]
push ecx
push esi
call dword [eax + 0x60]
fnclex
test eax, eax
jge 0x66fa0a
push 0x60
push 0x419894
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x66fa10
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x90]
push edx
push 0x41986c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
neg esi
sbb esi, esi
inc esi
neg esi
mov dword [ebp - 0x190], esi
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test si, si
je 0x66fc47
cmp word [0x6c53f0], 0
jle 0x66faf9
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fa7e
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x388]
push eax
lea edx, [ebp - 0xa4]
push edx
call ebx
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push 0
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66fab3
push 0x40
push 0x418314
push esi
push eax
call edi
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66fae0
push 0x9c
push 0x418c70
push esi
push eax
call edi
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
cmp word [0x6c53f0], 0xf
jle 0x66fba0
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fb25
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x388]
push eax
lea eax, [ebp - 0xa4]
push eax
call ebx
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push 1
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x66fb5a
push 0x40
push 0x418314
push esi
push eax
call edi
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x66fb87
push 0x9c
push 0x418c70
push esi
push eax
call edi
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
cmp word [0x6c53f0], 0x1f
jle 0x66fc47
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fbcc
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x388]
push eax
lea edx, [ebp - 0xa4]
push edx
call ebx
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push 2
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x66fc01
push 0x40
push 0x418314
push esi
push eax
call edi
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x66fc2e
push 0x9c
push 0x418c70
push esi
push eax
call edi
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [ebp - 0x54]
cmp ax, 0xc
jle 0x66fc55
mov eax, 0xc
mov word [0x6c54f0], ax
sub ax, 1
jo 0x671cb8
mov dword [ebp - 0x1dc], eax
xor ebx, ebx
mov dword [ebp - 0x24], ebx
cmp bx, word [ebp - 0x1dc]
jg 0x670404
movsx edi, bx
cmp edi, 0x29
jb 0x66fc8b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c543c]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x6703ef
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fcc6
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push ebx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66fd08
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xa8]
cmp edi, 0x29
jb 0x66fd19
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x418158
mov edx, dword [0x6c543c]
mov eax, dword [edx + edi*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x66fd58
push 0x54
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
cmp edi, 0x29
jb 0x66fd88
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x6c5420]
lea ecx, [eax + edi*2]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x13c], 0x4002
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], 8
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fdf3
push 0x6c5024
push 0x405a90
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
call ebx
mov eax, dword [0x6c5024]
jmp 0x66fdf9
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaNew2]
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xcc]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xc8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xc4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xc0]
mov dword [edx + 0xc], ecx
push 0x68030007
mov edx, dword [eax]
push eax
call dword [edx + 0x600]
push eax
lea eax, [ebp - 0xa4]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fe85
push 0x6c5024
push 0x405a90
call ebx
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b8]
push eax
lea edx, [ebp - 0xa8]
push edx
call esi
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xac]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x66fec6
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xac]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x66fee1
push 0x6c5024
push 0x405a90
call ebx
cmp edi, 0x29
jb 0x66feec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, dword [esi]
push 0x419954
push 0
push 0x68030007
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x600]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x418158
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [0x6c523c]
mov edx, dword [ecx + edi*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [ebx + 0x19c]
fnclex
test eax, eax
jge 0x66ffc8
push 0x19c
push 0x415dd4
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x66ffce
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x28
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670043
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3b8]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x67007e
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x6700ab
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x6700e2
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x67011d
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x67014a
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670181
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3b0]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6701c2
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x29
jb 0x6701d3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5404]
mov edx, dword [ecx + edi*4]
push edx
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x6701f4
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x67022b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3b0]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov edi, dword [ebp - 0x24]
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x670266
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x670293
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x6702ca
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3ac]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x670302
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x67032f
push 0x9c
push 0x41858c
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670366
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3ac]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x67039e
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x190], esi
mov edi, dword [esi]
mov ecx, 1
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
push eax
push esi
call dword [edi + 0xe4]
fnclex
test eax, eax
jge 0x6703d3
push 0xe4
push 0x41858c
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov ebx, dword [ebp - 0x24]
mov eax, 1
add ax, bx
jo 0x671cb8
mov ebx, eax
jmp 0x66fc6d
mov edi, dword [ebp - 0x7c]
mov word [0x6c55d4], di
test di, di
jle 0x6704c4
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670435
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3bc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push 0
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x670476
push 0x40
push 0x418314
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x67047c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x6704a9
push 0x9c
push 0x418c70
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
jmp 0x6704ca
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [0x6c55d4], 0xc
jle 0x670575
mov eax, dword [0x6c5024]
test eax, eax
jne 0x6704f6
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3bc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push 1
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x67052f
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x67055c
push 0x9c
push 0x418c70
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
cmp word [0x6c55d4], 0x19
jle 0x670620
mov eax, dword [0x6c5024]
test eax, eax
jne 0x6705a1
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3bc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push 2
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x6705da
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x670607
push 0x9c
push 0x418c70
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
sub di, 1
jo 0x671cb8
mov dword [ebp - 0x1e4], edi
xor edi, edi
cmp di, word [ebp - 0x1e4]
jg 0x6709f7
movsx ebx, di
cmp ebx, 0x29
jb 0x67064d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5558]
mov edx, dword [ecx + ebx*4]
push edx
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x6709dc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670688
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6706ca
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xa8]
cmp ebx, 0x29
jb 0x6706db
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [esi]
push 0x418158
mov eax, dword [0x6c5558]
mov ecx, dword [eax + ebx*4]
push ecx
mov dword [ebp - 0x228], edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
mov edx, dword [ebp - 0x228]
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x670729
push 0x54
push 0x415dd4
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x67072f
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670772
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3c8]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x6707aa
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x6707d7
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x67080e
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
push edi
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x670846
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x9c]
fnclex
test eax, eax
jge 0x670873
push 0x9c
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x6708aa
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3c0]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6708e8
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
movsx ebx, di
cmp ebx, 0x29
jb 0x6708fc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5504]
mov edx, dword [ecx + ebx*4]
push edx
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x670921
push 0x54
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
call ebx
add esp, 0xc
mov eax, dword [0x6c5024]
test eax, eax
jne 0x67095a
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3c0]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
push edi
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x670996
push 0x40
push 0x418314
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x6709c7
push 0x9c
push 0x415dd4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call ebx
add esp, 0xc
mov eax, 1
add ax, di
jo 0x671cb8
mov edi, eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x670632
mov eax, dword [ebp - 0x4c]
cmp ax, 0xa
jle 0x670a05
mov eax, 0xa
mov word [0x6c577c], ax
sub ax, 1
jo 0x671cb8
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x24], 0
mov cx, word [ebp - 0x1ec]
cmp word [ebp - 0x24], cx
jg 0x671b80
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670a51
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov edx, dword [eax]
push eax
call dword [edx + 0x3d0]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, dword [esi]
lea edx, [ebp - 0xa8]
push edx
mov eax, dword [ebp - 0x24]
push eax
push esi
call dword [ecx + 0x40]
fnclex
test eax, eax
jge 0x670a8c
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x670ab9
push 0x9c
push 0x418c70
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
movsx edi, word [ebp - 0x24]
cmp edi, 0xb
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x670ae3
call esi
mov ecx, dword [0x6c5658]
cmp word [ecx + edi*2], 0
je 0x670d3e
cmp edi, 0xb
jb 0x670afb
call esi
mov edx, dword [0x6c5620]
lea eax, [edx + edi*2]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x13c], 0x4002
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670b46
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x670b81
push 0x40
push 0x418314
push esi
push eax
call ebx
mov edi, dword [ebp - 0xa8]
movsx eax, word [ebp - 0x24]
cmp eax, 0xb
jb 0x670b96
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x6c5604]
movsx esi, word [ebp - 0x24]
mov ecx, dword [eax + esi*4]
push ecx
push 0x418bc0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xe4], eax
mov eax, 8
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x144], 0x418be0
mov dword [ebp - 0x14c], eax
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0xcc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 1
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x154], 0x418928
mov dword [ebp - 0x15c], 8
mov dword [ebp - 0x190], esi
cmp esi, 0xb
jb 0x670c25
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5658]
mov ax, word [edx + esi*2]
mov word [ebp - 0x164], ax
mov dword [ebp - 0x16c], 2
mov dword [ebp - 0x174], 0x419960
mov dword [ebp - 0x17c], 8
mov esi, dword [edi]
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x10c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push edi
call dword [esi + 0x54]
fnclex
test eax, eax
jge 0x670cd4
push 0x54
push 0x415dd4
push edi
push eax
call ebx
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
jmp 0x670f04
cmp edi, 0xb
jb 0x670d45
call esi
mov eax, dword [0x6c5620]
lea ecx, [eax + edi*2]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x13c], 0x4002
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
mov eax, dword [0x6c5024]
test eax, eax
jne 0x670d8f
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov dword [ebp - 0x190], esi
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x24]
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x670dd0
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0xb
jb 0x670de1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x6c5604]
mov ecx, dword [eax + edi*4]
push ecx
push 0x418618
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xe4], eax
mov edi, 8
mov dword [ebp - 0xec], edi
mov dword [ebp - 0x144], 0x418be0
mov dword [ebp - 0x14c], edi
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0xcc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 1
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x154], 0x419960
mov dword [ebp - 0x15c], edi
mov edi, dword [esi]
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xfc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
fnclex
test eax, eax
jge 0x670ead
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov dword [ebp - 0x28], 0
mov eax, 0xf
cmp word [ebp - 0x28], ax
jg 0x671819
movsx eax, word [ebp - 0x24]
cmp eax, 9
ja case.default.0x670f2b
movsx eax, word [ebp - 0x24]
jmp dword [eax*4 + 0x671c90]
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x670f41
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x6c5674]
mov edx, dword [ecx + edi*4]
push edx
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x670fb1
test eax, eax
jne 0x670f78
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3f8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x671720
jmp 0x671715
test eax, eax
jne 0x670fca
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3f8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x67100b
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x67101c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5674]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x671038
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5690]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x67107d
test eax, eax
jne 0x67106f
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3f4]
jmp 0x670f81
test eax, eax
jne 0x671096
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3f4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6710d7
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x6710e8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5690]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x671104
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c56ac]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x671149
test eax, eax
jne 0x67113b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3f0]
jmp 0x670f81
test eax, eax
jne 0x671162
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3f0]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6711a3
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x6711b4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c56ac]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x6711d0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c56c8]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x671215
test eax, eax
jne 0x671207
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3ec]
jmp 0x670f81
test eax, eax
jne 0x67122e
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3ec]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x67126f
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x671280
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c56c8]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x67129c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c56e4]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x6712e1
test eax, eax
jne 0x6712d3
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3e8]
jmp 0x670f81
test eax, eax
jne 0x6712fa
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3e8]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x67133b
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x67134c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c56e4]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x671368
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5700]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x6713ad
test eax, eax
jne 0x67139f
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3fc]
jmp 0x670f81
test eax, eax
jne 0x6713c6
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x671407
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x671418
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5700]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x671434
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c571c]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x671479
test eax, eax
jne 0x67146b
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3e4]
jmp 0x670f81
test eax, eax
jne 0x671492
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3e4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6714d3
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x6714e4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c571c]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x671500
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5738]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x671545
test eax, eax
jne 0x671537
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3e0]
jmp 0x670f81
test eax, eax
jne 0x67155e
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3e0]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x67159f
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x6715b0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5738]
jmp 0x671684
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x6715cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5754]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x671611
test eax, eax
jne 0x671603
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3dc]
jmp 0x670f81
test eax, eax
jne 0x67162a
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3dc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x67166b
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x67167c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5754]
mov edx, dword [ecx + edi*4]
push edx
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x6717e9
jmp 0x6717de
movsx edi, word [ebp - 0x28]
cmp edi, 0x11
jb 0x6716aa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x6c5770]
mov eax, dword [edx + edi*4]
push eax
push 0x418310
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [0x6c5024]
jne 0x67175d
test eax, eax
jne 0x6716e5
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x671720
push 0x40
push 0x418314
push esi
push eax
call ebx
mov eax, dword [ebp - 0xa8]
mov esi, eax
mov dword [ebp - 0x190], esi
mov ecx, dword [eax]
push 0x418138
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x67174a
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
jmp 0x6717f7
test eax, eax
jne 0x671776
push 0x6c5024
push 0x405a90
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x6c5024]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d4]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0x28]
push edx
push esi
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x190], eax
test eax, eax
jge 0x6717b7
push 0x40
push 0x418314
push esi
push eax
call ebx
mov esi, dword [ebp - 0xa8]
cmp edi, 0x11
jb 0x6717c8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [esi]
mov ecx, dword [0x6c5770]
mov edx, dword [ecx + edi*4]
push edx
push esi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x6717e9
push 0x54
push 0x415dd4
push esi
push eax
call ebx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov eax, 1
add ax, word [ebp - 0x28]
jo 0x671cb8
mov dword [ebp - 0x28], eax
jmp 0x670f0b
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x671cb8
mov dword [ebp - 0x24], eax
jmp 0x670a22
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x671c53
jmp 0x671c1d
lea ecx, [ebp - 0x40]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
call edi
lea ecx, [ebp - 0x44]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call esi
lea ecx, [ebp - 0x68]
call esi
lea ecx, [ebp - 0x78]
call edi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x84]
call esi
lea ecx, [ebp - 0x8c]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop