Function at 0x40af40
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4017e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x528
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401548
xor eax, eax
mov ecx, 0x10
mov dword [ebp - 0x44], eax
lea edi, [ebp - 0x84]
mov dword [ebp - 0x40], eax
xor edx, edx
rep stosd dword es:[edi], eax
xor ecx, ecx
lea edi, [ebp - 0x190]
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x2c8], edx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x2c4], edx
mov dword [ebp - 0x88], ecx
mov ecx, 0x3e
rep stosd dword es:[edi], eax
mov ecx, 0x33
lea edi, [ebp - 0x268]
rep stosd dword es:[edi], eax
mov ecx, 0x11
lea edi, [ebp - 0x2b4]
rep stosd dword es:[edi], eax
mov ecx, 0xc
lea edi, [ebp - 0x2f8]
rep stosd dword es:[edi], eax
mov ecx, 0xa
lea edi, [ebp - 0x47c]
mov dword [ebp - 0x2c0], edx
xor esi, esi
rep stosd dword es:[edi], eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x2bc], edx
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x94], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x19c], esi
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x270], esi
mov dword [ebp - 0x2b8], esi
mov dword [ebp - 0x2fc], esi
mov dword [ebp - 0x300], esi
mov dword [ebp - 0x304], esi
mov dword [ebp - 0x308], esi
mov dword [ebp - 0x30c], esi
mov dword [ebp - 0x310], esi
mov dword [ebp - 0x314], esi
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x31c], esi
mov dword [ebp - 0x32c], esi
mov dword [ebp - 0x33c], esi
mov dword [ebp - 0x34c], esi
mov dword [ebp - 0x35c], esi
mov dword [ebp - 0x36c], esi
mov dword [ebp - 0x37c], esi
mov dword [ebp - 0x38c], esi
mov dword [ebp - 0x39c], esi
mov dword [ebp - 0x3a0], esi
mov dword [ebp - 0x3a4], esi
mov dword [ebp - 0x3b4], esi
mov dword [ebp - 0x3c4], esi
mov dword [ebp - 0x3d4], esi
mov dword [ebp - 0x3e4], esi
mov dword [ebp - 0x3f4], esi
mov dword [ebp - 0x404], esi
mov dword [ebp - 0x414], esi
mov dword [ebp - 0x424], esi
mov dword [ebp - 0x434], esi
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x448], esi
call edi
push 0x11
push 0x403a90
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
lea ecx, [ebp - 0x198]
push ecx
push 0x100
call dword [sym.imp.MSVBVM60.DLL___vbaFixstrConstruct]
mov edx, 0x402294
lea ecx, [ebp - 0x2b8]
call edi
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x2fc]
mov eax, dword [edx]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
cmp ecx, esi
je 0x40b156
cmp word [ecx], 1
jne 0x40b156
mov ebx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
neg ebx
cmp ebx, eax
jb 0x40b152
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, ebx
jmp 0x40b162
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push 0x40
add edx, eax
lea eax, [ebp - 0x84]
push edx
push eax
call fcn.00402448
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea ecx, [ebp - 0x2fc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
cmp word [ebp - 0x84], 0x5a4d
je 0x40b1a8
mov dword [ebp - 0x19c], 0xffffffff
push 0x40d4e6
jmp 0x40d48b
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x2fc]
mov eax, dword [edx]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
cmp ecx, esi
je 0x40b1ea
cmp word [ecx], 1
jne 0x40b1ea
mov ebx, dword [ebp - 0x48]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub ebx, edx
cmp ebx, eax
jb 0x40b1e6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, ebx
jmp 0x40b1f6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push 0xf8
add edx, eax
lea eax, [ebp - 0x190]
push edx
push eax
call fcn.00402448
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea ecx, [ebp - 0x2fc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
cmp dword [ebp - 0x190], 0x4550
je 0x40b240
mov dword [ebp - 0x19c], 0xffffffff
push 0x40d4e6
jmp 0x40d48b
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x2b4], 0x44
mov eax, dword [edx]
push eax
push 0x402dac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x40b2c5
push esi
lea edx, [ebp - 0x3b4]
push 0x80
lea eax, [ebp - 0x32c]
lea ecx, [ebp - 0x194]
push edx
push eax
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b4], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea ecx, [ebp - 0x32c]
lea edx, [ebp - 0x3a0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea eax, [ebp - 0x3a0]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
lea ecx, [ebp - 0x32c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x40b3fb
mov ebx, dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x32c]
push 0x22
push edx
call ebx
lea eax, [ebp - 0x34c]
push 0x22
push eax
call ebx
mov ecx, dword [ebp + 0x10]
lea edx, [ebp - 0x3d4]
lea eax, [ebp - 0x37c]
push edx
push eax
mov dword [ebp - 0x3cc], ecx
mov dword [ebp - 0x3d4], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcLeftTrimVar]
mov ecx, dword [ebp - 0x194]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov eax, 8
push esi
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3c4], eax
lea edx, [ebp - 0x32c]
mov dword [ebp - 0x3ac], ecx
push 0x80
lea eax, [ebp - 0x3b4]
push edx
lea ecx, [ebp - 0x33c]
push eax
push ecx
mov dword [ebp - 0x3bc], 0x403610
call ebx
push eax
lea edx, [ebp - 0x34c]
lea eax, [ebp - 0x35c]
push edx
push eax
call ebx
lea ecx, [ebp - 0x3c4]
push eax
lea edx, [ebp - 0x36c]
push ecx
push edx
call ebx
push eax
lea eax, [ebp - 0x37c]
lea ecx, [ebp - 0x38c]
push eax
push ecx
call ebx
lea edx, [ebp - 0x39c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea eax, [ebp - 0x39c]
lea ecx, [ebp - 0x3a0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea edx, [ebp - 0x3a0]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
lea ecx, [ebp - 0x39c]
lea edx, [ebp - 0x38c]
push ecx
lea eax, [ebp - 0x37c]
push edx
lea ecx, [ebp - 0x36c]
push eax
lea edx, [ebp - 0x35c]
push ecx
lea eax, [ebp - 0x34c]
push edx
lea ecx, [ebp - 0x33c]
push eax
lea edx, [ebp - 0x32c]
push ecx
push edx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
xor edx, edx
lea ecx, [ebp - 0x94]
call edi
mov eax, 0xc
mov edx, 0x403658
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x2b4], 0x44
mov dword [ebp - 0x288], 1
mov word [ebp - 0x284], 5
call edi
mov edx, 0x403618
lea ecx, [ebp - 0x300]
call edi
lea eax, [ebp - 0x304]
lea ecx, [ebp - 0x300]
push eax
push ecx
call fcn.00404dc0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push esi
push 9
push 1
lea edx, [ebp - 0x3a4]
push esi
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x94]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3b4], 3
lea edx, [ebp - 0x3b4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
call esi
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0x2fc]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
test ecx, ecx
je 0x40b50f
cmp word [ecx], 1
jne 0x40b50f
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
neg eax
cmp eax, edx
mov dword [ebp - 0x450], eax
jb 0x40b51b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x450]
jmp 0x40b51b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
lea edx, [ebp - 0x2fc]
mov dword [ebp - 0x448], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x3c4], 3
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x3c4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x4d0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4d0]
sub ecx, eax
add ecx, 0x10
call esi
lea ecx, [ebp - 0x44]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 2
mov dword [ebp - 0x3d4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
lea edx, [ebp - 0x3e4]
mov dword [ebp - 0x3e4], ecx
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3f4], 0xb
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 5
mov dword [ebp - 0x3fc], 4
mov dword [ebp - 0x404], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 6
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x414], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 7
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x424], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea eax, [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 8
mov dword [ebp - 0x434], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x2c8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 9
mov dword [ebp - 0x444], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x308]
push edx
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0x3a4]
mov dword [ebp - 0x44c], eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov edx, dword [ebp - 0x44c]
xor eax, eax
test edx, edx
sete al
neg eax
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x454], eax
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [ebp - 0x454], 0
jne 0x40d3d4
mov edx, 0x4036c0
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x268], 0x10002
call edi
mov edx, 0x403678
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 1
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x2c4]
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x4d4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4d4]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x268]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3c4], 3
lea edx, [ebp - 0x3c4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x4d8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4d8]
sub ecx, eax
add ecx, 0x10
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x2b8]
push edx
push eax
call fcn.0040a050
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x448], eax
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x448]
xor edx, edx
test ecx, ecx
sete dl
neg edx
lea eax, [ebp - 0x30c]
mov word [ebp - 0x450], dx
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0x304]
push ecx
push edx
lea eax, [ebp - 0x300]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [ebp - 0x450], 0
jne 0x40c7a1
mov edx, 0x40372c
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x4036e0
lea ecx, [ebp - 0x300]
call edi
lea ecx, [ebp - 0x304]
lea edx, [ebp - 0x300]
push ecx
push edx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x310]
call ebx
push 0
push 4
push 1
lea eax, [ebp - 0x3a4]
push 0
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x4dc], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4dc]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x3a4]
add ecx, 8
mov dword [ebp - 0x3c4], 3
jo 0x40d4ff
mov dword [ebp - 0x3bc], ecx
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x4e0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4e0]
lea edx, [ebp - 0x3c4]
sub ecx, eax
add ecx, 0x10
call esi
lea ecx, [ebp - 0x26c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 2
mov dword [ebp - 0x3d4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
mov dword [ebp - 0x3dc], 4
mov dword [ebp - 0x3e4], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3f4], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x310]
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x310], 0
call ebx
mov edx, 0x402294
lea ecx, [ebp - 0x308]
call edi
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x30c]
push edx
lea ecx, [ebp - 0x308]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0x3a4]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea eax, [ebp - 0x310]
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x26c]
add esp, 0x18
test eax, eax
je 0x40c7a1
mov edx, 0x403768
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x40374c
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x318]
call ebx
mov edx, 0x403800
lea ecx, [ebp - 0x30c]
call edi
mov edx, 0x4037a8
lea ecx, [ebp - 0x308]
call edi
lea ecx, [ebp - 0x30c]
lea edx, [ebp - 0x308]
push ecx
push edx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x31c]
call ebx
push 0
push 1
push 1
lea eax, [ebp - 0x3a4]
push 0
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x4e4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4e4]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c4], 0x4003
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
mov dword [ebp - 0x4e8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4e8]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov edx, dword [ebp - 0x31c]
lea ecx, [ebp - 0x314]
mov dword [ebp - 0x31c], 0
call ebx
mov edx, dword [ebp - 0x318]
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x318], 0
call ebx
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x314]
push ecx
lea eax, [ebp - 0x310]
push edx
push eax
call fcn.0040a050
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x448], eax
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x448]
xor edx, edx
test ecx, ecx
setne dl
neg edx
lea eax, [ebp - 0x31c]
mov word [ebp - 0x450], dx
lea ecx, [ebp - 0x318]
push eax
lea edx, [ebp - 0x314]
push ecx
lea eax, [ebp - 0x310]
push edx
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x24
cmp word [ebp - 0x450], 0
je 0x40c5a0
mov edx, 0x403658
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x403618
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 9
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov edx, dword [ebp - 0x94]
add esp, 0x1c
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3b4], 3
lea edx, [ebp - 0x3b4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x4ec], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4ec]
sub ecx, eax
call esi
mov ecx, dword [ebp - 0x14]
lea edx, [ebp - 0x2fc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
test ecx, ecx
je 0x40bdce
cmp word [ecx], 1
jne 0x40bdce
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
neg eax
cmp eax, edx
mov dword [ebp - 0x450], eax
jb 0x40bdda
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x450]
jmp 0x40bdda
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
lea edx, [ebp - 0x2fc]
mov dword [ebp - 0x448], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x3c4], 3
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x3c4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x4f0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4f0]
sub ecx, eax
add ecx, 0x10
call esi
lea ecx, [ebp - 0x44]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 2
mov dword [ebp - 0x3d4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
lea edx, [ebp - 0x3e4]
mov dword [ebp - 0x3e4], ecx
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3f4], 0xb
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 5
mov dword [ebp - 0x3fc], 4
mov dword [ebp - 0x404], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 6
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x414], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 7
mov dword [ebp - 0x41c], 0
mov dword [ebp - 0x424], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea eax, [ebp - 0x2b4]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 8
mov dword [ebp - 0x434], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x2c8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 9
mov dword [ebp - 0x444], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x308]
push edx
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0x3a4]
mov dword [ebp - 0x44c], eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov edx, dword [ebp - 0x44c]
xor eax, eax
test edx, edx
sete al
neg eax
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x454], eax
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [ebp - 0x454], 0
jne 0x40d3d4
mov edx, 0x4036c0
lea ecx, [ebp - 0x304]
mov dword [ebp - 0x268], 0x10002
call edi
mov edx, 0x403678
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 1
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x2c4]
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x4f4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4f4]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x268]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3c4], 3
lea edx, [ebp - 0x3c4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x4f8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4f8]
sub ecx, eax
add ecx, 0x10
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x2b8]
push edx
push eax
call fcn.0040a050
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x448], eax
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x448]
xor edx, edx
test ecx, ecx
sete dl
neg edx
lea eax, [ebp - 0x30c]
mov word [ebp - 0x450], dx
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0x304]
push ecx
push edx
lea eax, [ebp - 0x300]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [ebp - 0x450], 0
jne 0x40c7a1
mov edx, 0x40372c
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x4036e0
lea ecx, [ebp - 0x300]
call edi
lea ecx, [ebp - 0x304]
lea edx, [ebp - 0x300]
push ecx
push edx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x310]
call ebx
push 0
push 4
push 1
lea eax, [ebp - 0x3a4]
push 0
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x4fc], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x4fc]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x3a4]
add ecx, 8
mov dword [ebp - 0x3c4], 3
jo 0x40d4ff
mov dword [ebp - 0x3bc], ecx
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x500], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x500]
lea edx, [ebp - 0x3c4]
sub ecx, eax
add ecx, 0x10
call esi
lea ecx, [ebp - 0x26c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 2
mov dword [ebp - 0x3d4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
mov dword [ebp - 0x3dc], 4
mov dword [ebp - 0x3e4], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3f4], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x310]
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x310], 0
call ebx
mov edx, 0x402294
lea ecx, [ebp - 0x308]
call edi
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x30c]
push edx
lea ecx, [ebp - 0x308]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0x3a4]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea eax, [ebp - 0x310]
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x18
mov edx, 0x403768
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x40374c
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x318]
call ebx
mov edx, 0x403878
lea ecx, [ebp - 0x30c]
call edi
mov edx, 0x403820
lea ecx, [ebp - 0x308]
call edi
lea ecx, [ebp - 0x30c]
lea edx, [ebp - 0x308]
push ecx
push edx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x31c]
call ebx
push 0
push 1
push 1
lea eax, [ebp - 0x3a4]
push 0
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x504], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x504]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x26c]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c4], 0x4003
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
mov dword [ebp - 0x508], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x508]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov edx, dword [ebp - 0x31c]
lea ecx, [ebp - 0x314]
mov dword [ebp - 0x31c], 0
call ebx
mov edx, dword [ebp - 0x318]
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x318], 0
call ebx
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x314]
push ecx
lea eax, [ebp - 0x310]
push edx
push eax
call fcn.0040a050
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x448], eax
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x448]
xor edx, edx
test ecx, ecx
setne dl
neg edx
lea eax, [ebp - 0x31c]
mov word [ebp - 0x450], dx
lea ecx, [ebp - 0x318]
push eax
lea edx, [ebp - 0x314]
push ecx
lea eax, [ebp - 0x310]
push edx
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x24
cmp word [ebp - 0x450], 0
jne 0x40c7ab
mov edx, 0x4038d8
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x403898
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x310]
call ebx
push 0
push 4
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x50c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x50c]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c4], 0x4003
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
mov dword [ebp - 0x510], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x510]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x3cc], ecx
mov ecx, 2
mov dword [ebp - 0x3d4], 0x4003
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
mov dword [ebp - 0x3dc], 0x3000
mov dword [ebp - 0x3e4], ecx
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3ec], 0x40
mov dword [ebp - 0x3f4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x310]
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0x310], 0
call ebx
mov edx, 0x402294
lea ecx, [ebp - 0x308]
call edi
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x30c]
push edx
lea ecx, [ebp - 0x308]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0x3a4]
mov dword [ebp - 0x448], eax
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov eax, dword [ebp - 0x448]
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x270], eax
lea edx, [ebp - 0x30c]
push ecx
lea eax, [ebp - 0x308]
push edx
lea ecx, [ebp - 0x304]
push eax
lea edx, [ebp - 0x300]
push ecx
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x270]
add esp, 0x18
test eax, eax
jne 0x40c7d7
mov dword [ebp - 0x19c], 0xffffffff
mov eax, dword [ebp - 0x2c4]
push eax
call fcn.00402908
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call esi
mov ecx, dword [ebp - 0x2c8]
push ecx
call fcn.00402908
call esi
push 0x40d4e6
jmp 0x40d48b
mov edx, 0x403948
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x4038f8
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 4
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x514], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x514]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x270]
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c4], 0x4003
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
mov dword [ebp - 0x518], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x518]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x2fc]
mov edx, dword [ecx]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
test ecx, ecx
je 0x40c8f7
cmp word [ecx], 1
jne 0x40c8f7
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
neg eax
cmp eax, edx
mov dword [ebp - 0x450], eax
jb 0x40c903
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x450]
jmp 0x40c903
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
lea edx, [ebp - 0x2fc]
mov dword [ebp - 0x448], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x448]
mov ecx, 2
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3d4], 3
lea edx, [ebp - 0x3d4]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x13c]
mov dword [ebp - 0x3dc], ecx
mov ecx, 3
mov dword [ebp - 0x3e4], 0x4003
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3f4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea eax, [ebp - 0x3a4]
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0x2b8]
push ecx
push edx
call fcn.0040a050
lea eax, [ebp - 0x3a4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea ecx, [ebp - 0x30c]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x48]
mov dx, word [ebp - 0x18a]
add esp, 0x14
add eax, 0xf8
jo 0x40d4ff
sub dx, 1
mov dword [ebp - 0x1c], eax
jo 0x40d4ff
movsx eax, dx
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x18], 0
mov ecx, dword [ebp - 0x484]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
jg 0x40cf95
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x2fc]
mov eax, dword [edx]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
test ecx, ecx
je 0x40cace
cmp word [ecx], 1
jne 0x40cace
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
imul eax, eax, 0x28
jo 0x40d4ff
add eax, edx
mov edx, dword [ecx + 0x14]
jo 0x40d4ff
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0x450], eax
jb 0x40cada
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x450]
jmp 0x40cada
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0xc]
push 0x28
add edx, eax
lea eax, [ebp - 0x2f8]
push edx
lea ecx, [ebp - 0x47c]
push eax
push ecx
push 0x402364
call dword [sym.imp.MSVBVM60.DLL___vbaRecUniToAnsi]
push eax
call fcn.00402448
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0x47c]
lea eax, [ebp - 0x2f8]
push edx
push eax
push 0x402364
call dword [sym.imp.MSVBVM60.DLL___vbaRecAnsiToUni]
lea ecx, [ebp - 0x2fc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov edx, 0x403948
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x4038f8
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 4
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x51c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x51c]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x3a4]
add ecx, edx
jo 0x40d4ff
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c4], 3
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
mov dword [ebp - 0x520], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x520]
sub ecx, eax
add ecx, 0x10
call esi
mov ecx, dword [ebp + 0xc]
lea eax, [ebp - 0x2fc]
mov edx, dword [ecx]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x2fc]
test ecx, ecx
je 0x40cc5d
cmp word [ecx], 1
jne 0x40cc5d
mov eax, dword [ebp - 0x2dc]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0x450], eax
jb 0x40cc69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x450]
jmp 0x40cc69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2fc]
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
lea edx, [ebp - 0x2fc]
mov dword [ebp - 0x448], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x448]
mov ecx, 2
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3d4], 3
lea edx, [ebp - 0x3d4]
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x3dc], ecx
mov ecx, 3
mov dword [ebp - 0x3e4], 0x4003
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3f4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea eax, [ebp - 0x3a4]
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0x2b8]
push ecx
push edx
call fcn.0040a050
lea eax, [ebp - 0x3a4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea ecx, [ebp - 0x30c]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov edx, 0x4039b0
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x403968
lea ecx, [ebp - 0x300]
call edi
lea edx, [ebp - 0x304]
lea eax, [ebp - 0x300]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 4
push 1
lea ecx, [ebp - 0x3a4]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x3a4]
lea edx, [ebp - 0x2c8]
mov dword [ebp - 0x3ac], edx
mov dword [ebp - 0x3b4], 0x4003
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov dword [ebp - 0x524], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x524]
lea edx, [ebp - 0x3b4]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x270]
mov eax, dword [ebp - 0x3a4]
add ecx, edx
jo 0x40d4ff
mov dword [ebp - 0x3bc], ecx
mov dword [ebp - 0x3c4], 3
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
mov dword [ebp - 0x528], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x528]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x3a4]
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0x3cc], ecx
mov ecx, 2
mov dword [ebp - 0x3d4], 0x4003
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov edx, dword [ebp - 0x2cc]
push edx
call fcn.00409820
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
lea edx, [ebp - 0x3e4]
mov dword [ebp - 0x3e4], ecx
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3f4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x2b8]
push edx
push eax
call fcn.0040a050
lea ecx, [ebp - 0x3a4]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x30c]
lea eax, [ebp - 0x308]
push edx
lea ecx, [ebp - 0x304]
push eax
lea edx, [ebp - 0x300]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov ecx, dword [ebp - 0x18]
mov eax, 1
add esp, 0x14
add eax, ecx
jo 0x40d4ff
mov dword [ebp - 0x18], eax
jmp 0x40ca5d
mov edx, 0x403948
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x4038f8
lea ecx, [ebp - 0x300]
call edi
lea eax, [ebp - 0x304]
lea ecx, [ebp - 0x300]
push eax
push ecx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 4
push 1
lea edx, [ebp - 0x3a4]
push 0
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
lea eax, [ebp - 0x2c8]
mov dword [ebp - 0x3b4], 0x4003
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3a4]
add esp, 0x1c
lea edx, [ebp - 0x3b4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x52c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x52c]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x3a4]
add ecx, 8
mov dword [ebp - 0x3c4], 3
jo 0x40d4ff
mov dword [ebp - 0x3bc], ecx
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x530], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x530]
lea edx, [ebp - 0x3c4]
sub ecx, eax
add ecx, 0x10
call esi
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 2
mov dword [ebp - 0x3d4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x3a4]
mov ecx, 3
mov dword [ebp - 0x3dc], 4
mov dword [ebp - 0x3e4], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3a4]
mov ecx, 4
mov dword [ebp - 0x3f4], 3
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea eax, [ebp - 0x3a4]
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0x2b8]
push ecx
push edx
call fcn.0040a050
lea eax, [ebp - 0x3a4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea ecx, [ebp - 0x30c]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x304]
push edx
lea ecx, [ebp - 0x300]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x270]
add esp, 0x14
add edx, eax
jo 0x40d4ff
mov dword [ebp - 0x1b8], edx
mov edx, 0x403a18
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x4039d0
lea ecx, [ebp - 0x300]
call edi
lea eax, [ebp - 0x304]
lea ecx, [ebp - 0x300]
push eax
push ecx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 1
push 1
lea edx, [ebp - 0x3a4]
push 0
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x3b4], 0x4003
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3a4]
add esp, 0x1c
lea edx, [ebp - 0x3b4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x534], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x534]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
lea ecx, [ebp - 0x268]
push ecx
call dword [sym.imp.MSVBVM60.DLL_VarPtr]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3c4], 3
lea edx, [ebp - 0x3c4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x538], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x538]
sub ecx, eax
add ecx, 0x10
call esi
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea ecx, [ebp - 0x3a4]
lea edx, [ebp - 0x308]
push ecx
lea eax, [ebp - 0x2b8]
push edx
push eax
call fcn.0040a050
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea ecx, [ebp - 0x3a4]
push ecx
push 0
call esi
lea edx, [ebp - 0x30c]
lea eax, [ebp - 0x308]
push edx
lea ecx, [ebp - 0x304]
push eax
lea edx, [ebp - 0x300]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov edx, 0x403a70
lea ecx, [ebp - 0x304]
call edi
mov edx, 0x403a38
lea ecx, [ebp - 0x300]
call edi
lea eax, [ebp - 0x304]
lea ecx, [ebp - 0x300]
push eax
push ecx
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x30c]
call ebx
push 0
push 0
push 1
lea edx, [ebp - 0x3a4]
push 0
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x3b4], 0x4003
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3a4]
add esp, 0x1c
lea edx, [ebp - 0x3b4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov edi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov edx, dword [ebp - 0x30c]
lea ecx, [ebp - 0x308]
mov dword [ebp - 0x30c], 0
call ebx
lea edx, [ebp - 0x3a4]
lea eax, [ebp - 0x308]
push edx
lea ecx, [ebp - 0x2b8]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0x3a4]
push edx
push 0
call esi
lea eax, [ebp - 0x30c]
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0x304]
push ecx
lea eax, [ebp - 0x300]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov ecx, dword [ebp - 0x2c0]
add esp, 0x14
mov dword [ebp - 0x19c], ecx
push 0x40d4e6
jmp 0x40d48b
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea eax, [ebp - 0x14]
push eax
push 0
call esi
lea edx, [ebp - 0x448]
lea ecx, [ebp - 0x34]
push edx
push 0
mov dword [ebp - 0x448], ecx
call esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x94]
call esi
lea ecx, [ebp - 0x194]
call esi
lea ecx, [ebp - 0x198]
call esi
lea eax, [ebp - 0x2b4]
push eax
push 0x402310
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
lea ecx, [ebp - 0x2b8]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop