Function at 0x51f920
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x402ce6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1b0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402858
push 0xc
lea eax, [ebp - 0x44]
xor ebx, ebx
push 0x427e3c
push eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x160], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push ebx
push 8
push 1
lea ecx, [ebp - 0xcc]
push ebx
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov edi, 2
mov dword [ebp - 0xd4], 3
mov dword [ebp - 0xdc], edi
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0xdc]
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 6
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x184], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x184]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], edi
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 3
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 4
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 5
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 4
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 3
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x2c]
call esi
push ebx
push 8
push 1
lea ecx, [ebp - 0xcc]
push ebx
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0x1f
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x188], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x188]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0xb
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x18c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18c]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0xf
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x11
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x12
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x3a
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0x4e
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x26
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x1f
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x10
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0x2a
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x190], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x190]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x16
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x194], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x194]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x1a
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x1c
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x1b
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x43
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x134], 0x57
mov dword [ebp - 0x13c], edi
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0xcc]
mov ecx, 6
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x2f
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x2a
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x20
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0xd
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x198], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x198]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x21
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x19c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x19c]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x25
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x23
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x24
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x4c
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0x38
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x10
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0xd
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x30
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0xd4], 0x18
mov dword [ebp - 0xdc], edi
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0xdc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1a0]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x2c
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1a4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1a4]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x30
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x2e
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x2d
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x55
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0x41
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x19
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x18
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x40
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0x4b
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x1a8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1a8]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x37
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1ac], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1ac]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x33
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x35
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x36
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x124], 0xe
mov dword [ebp - 0x12c], edi
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0xcc]
mov ecx, 5
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0x22
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x4a
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x4b
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x50
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0x56
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x1b0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1b0]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x42
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1b4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1b4]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x3e
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x40
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x3f
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x17
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0x2b
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x53
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x56
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x60
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0x39
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x1b8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1b8]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x4d
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1bc], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1bc]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x49
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x47
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 4
mov dword [ebp - 0x114], 0x48
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x20
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0xc
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x34
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x39
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x70
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 8
push 1
lea edx, [ebp - 0xcc]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xd4], 0x44
mov dword [ebp - 0xdc], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
mov dword [ebp - 0x1c0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1c0]
sub ecx, eax
call esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xe4], 0x58
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1c4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1c4]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, edi
mov dword [ebp - 0xf4], 0x54
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 3
mov dword [ebp - 0x104], 0x52
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x114], 0x51
mov dword [ebp - 0x11c], edi
lea edx, [ebp - 0x11c]
mov eax, dword [ebp - 0xcc]
mov ecx, 4
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 5
mov dword [ebp - 0x124], 0x29
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 6
mov dword [ebp - 0x134], 0x15
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 7
mov dword [ebp - 0x144], 0x3d
mov dword [ebp - 0x14c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x14c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0xcc]
mov ecx, 8
mov dword [ebp - 0x154], 0x44
mov dword [ebp - 0x15c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x15c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x78]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0xcc]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x38]
lea edx, [ebp - 0x78]
add ecx, 0x80
call esi
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
mov dword [ebp - 0x18], eax
mov ecx, 8
cmp ax, cx
jg 0x520cd6
mov ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, 8
cmp cx, dx
jg 0x520cbe
movsx eax, ax
lea edx, [ebp - 0x1c]
cmp eax, 9
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0xfc], 0x4002
mov dword [ebp - 0x164], eax
jb 0x520b8b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp + 0xc]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
lea ecx, [ebp - 0x78]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov ecx, dword [ebp - 0xfc]
lea edx, [ebp - 0x10c]
push eax
push edx
mov edx, dword [ebp - 0xf8]
sub esp, 0x10
mov eax, esp
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xf0]
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x38]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x164]
shl eax, 4
add eax, ecx
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov dword [ebp - 0x168], eax
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
cmp word [ebp - 0x168], bx
je 0x520ca4
mov dx, word [ebp - 0x18]
lea ecx, [ebp - 0x68]
mov word [ebp - 0xd4], dx
lea edx, [ebp - 0xdc]
mov dword [ebp - 0xdc], edi
call esi
sub esp, 0x10
mov ecx, 0x4002
mov edx, esp
mov dword [ebp - 0xdc], ecx
lea eax, [ebp - 0x1c]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [ebp - 0xd4], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x2c]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xd0]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x58]
call esi
mov eax, dword [ebp - 0x18]
mov ecx, 1
add cx, word [ebp - 0x1c]
jo 0x520e74
mov dword [ebp - 0x1c], ecx
jmp 0x520b3e
mov ecx, 1
add cx, ax
jo 0x520e74
mov dword [ebp - 0x18], ecx
mov eax, ecx
jmp 0x520b28
mov ebx, dword [ebp + 0x10]
push ebx
call dword [sym.imp.MSVBVM60.DLL_rtcIsMissing]
test ax, ax
jne 0x520dc4
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x58]
push eax
lea edx, [ebp - 0xfc]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0x90], 6
mov dword [ebp - 0x98], edi
mov dword [ebp - 0xf4], 3
mov dword [ebp - 0xfc], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
lea ecx, [ebp - 0xa8]
push eax
push ecx
call fcn.005173b0
mov edx, ebx
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xd4], 0x422870
mov dword [ebp - 0xdc], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0x78]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
mov edx, eax
lea ecx, [ebp - 0xb8]
call esi
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x58]
push ecx
lea eax, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0xc8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcImmediateIf]
lea edx, [ebp - 0xc8]
lea ecx, [ebp - 0x68]
call esi
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0x98]
push eax
lea edx, [ebp - 0x88]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
push 0x520e45
jmp 0x520e1c
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x2c]
call esi
lea edx, [ebp - 0x160]
lea ecx, [ebp - 0x44]
push edx
push 0
mov dword [ebp - 0x160], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x58]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop