Function at 0x110118c0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x11001b06
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x198
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x11001a98
push 0xc
lea eax, [ebp - 0x3c]
xor ebx, ebx
push 0x11005670
push eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x164], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push ebx
push 9
push 1
lea ecx, [ebp - 0x9c]
push ebx
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov edi, 8
mov dword [ebp - 0xa4], 0x11005330
mov dword [ebp - 0xac], edi
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xac]
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x11005238
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x174], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x174]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x11004fc0
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xd4], 0x11004d14
mov dword [ebp - 0xdc], edi
lea edx, [ebp - 0xdc]
mov ecx, 3
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x11004b9c
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x110048a4
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x1100454c
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x11003ac0
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x11005460
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x1100546c
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea ecx, [ebp - 0x9c]
push ebx
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0x11005478
mov dword [ebp - 0xac], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
mov dword [ebp - 0x178], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x178]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x11005480
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x17c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x17c]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x11005488
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x11005490
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x11005498
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x110054a0
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x110054a8
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x110054b0
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x124], 0x110054b8
mov dword [ebp - 0x12c], edi
lea edx, [ebp - 0x12c]
mov eax, dword [ebp - 0x9c]
mov ecx, edi
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x110054c0
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea edx, [ebp - 0x9c]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0x110054c8
mov dword [ebp - 0xac], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
mov dword [ebp - 0x180], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x180]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x110054d4
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x184], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x184]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x110054e0
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x110054ec
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x110054f8
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x11005504
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x11005510
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x1100551c
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x11005528
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x11005534
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea edx, [ebp - 0x9c]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0xa4], 0x11005540
mov dword [ebp - 0xac], edi
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0xac]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x188], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x188]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x1100554c
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x18c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18c]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x11005558
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x11005564
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x11005570
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x1100557c
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x11005588
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x11005594
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x110055a0
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x110055ac
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea edx, [ebp - 0x9c]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0x110055b8
mov dword [ebp - 0xac], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
mov dword [ebp - 0x190], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x190]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x110055c0
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x194], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x194]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x110055c8
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x11004fcc
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0xe4], 0x11005244
mov dword [ebp - 0xec], edi
lea edx, [ebp - 0xec]
mov eax, dword [ebp - 0x9c]
mov ecx, 4
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x110049c8
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x11004008
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x11003740
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x11005478
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x11005488
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x40
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea edx, [ebp - 0x9c]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0x11005330
mov dword [ebp - 0xac], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
mov dword [ebp - 0x198], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x198]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x11005238
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x19c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x19c]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x11004fc0
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x11004d14
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x11004b9c
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x110048a4
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x1100454c
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x11003ac0
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x11005460
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x1100546c
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x50
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea edx, [ebp - 0x9c]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0x11005478
mov dword [ebp - 0xac], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
mov dword [ebp - 0x1a0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1a0]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x11005480
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1a4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1a4]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x11005488
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x11005490
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x11005498
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x110054a0
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x110054a8
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x110054b0
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x110054b8
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 9
mov dword [ebp - 0x134], 0x110054c0
mov dword [ebp - 0x13c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x13c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x60
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push ebx
push 9
push 1
lea edx, [ebp - 0x9c]
push ebx
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xa4], 0x110055d4
mov dword [ebp - 0xac], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xac]
shl ecx, 4
mov dword [ebp - 0x1a8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1a8]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb4], 0x110055e0
mov dword [ebp - 0xbc], edi
lea edx, [ebp - 0xbc]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x1ac], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1ac]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 2
mov dword [ebp - 0xc4], 0x110055ec
mov dword [ebp - 0xcc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xcc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 3
mov dword [ebp - 0xd4], 0x110055f8
mov dword [ebp - 0xdc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xdc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 4
mov dword [ebp - 0xe4], 0x11005604
mov dword [ebp - 0xec], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xec]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 5
mov dword [ebp - 0xf4], 0x11005610
mov dword [ebp - 0xfc], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xfc]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 6
mov dword [ebp - 0x104], 0x1100561c
mov dword [ebp - 0x10c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x10c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, 7
mov dword [ebp - 0x114], 0x11005628
mov dword [ebp - 0x11c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x11c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x9c]
mov ecx, edi
mov dword [ebp - 0x124], 0x11005634
mov dword [ebp - 0x12c], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x12c]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x134], 0x11005640
mov dword [ebp - 0x13c], edi
lea edx, [ebp - 0x13c]
mov eax, dword [ebp - 0x9c]
mov ecx, 9
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x9c]
lea edx, [ebp - 0x58]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x9c]
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
mov ecx, dword [ebp - 0x30]
lea edx, [ebp - 0x58]
add ecx, 0x70
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xac]
lea eax, [ebp - 0xbc]
push edx
lea ecx, [ebp - 0xcc]
push eax
lea edx, [ebp - 0x164]
push ecx
lea eax, [ebp - 0x154]
push edx
lea ecx, [ebp - 0x24]
mov esi, 2
push eax
push ecx
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xcc], esi
call dword [0x11001090]
cmp eax, ebx
je 0x11012c23
mov edx, dword [ebp - 0x44]
mov eax, 1
mov dword [ebp - 0x60], eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf4], edx
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xb4], eax
lea edx, [ebp - 0x24]
push ecx
lea eax, [ebp - 0xac]
push edx
lea ecx, [ebp - 0x58]
push eax
push ecx
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xbc], 0x4008
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
call esi
push eax
lea edx, [ebp - 0xbc]
lea eax, [ebp - 0x78]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0x48]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
fstp qword [ebp - 0xd4]
lea eax, [ebp - 0x24]
mov dword [ebp - 0xdc], 5
push eax
call esi
mov esi, eax
cmp esi, edi
jb 0x11012b69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xdc]
lea ecx, [ebp - 0xfc]
push ecx
mov ecx, dword [ebp - 0xd8]
sub esp, 0x10
mov edx, esp
shl esi, 4
mov dword [edx], eax
mov eax, dword [ebp - 0xd4]
push 1
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xd0]
mov dword [edx + 8], eax
mov dword [edx + 0xc], ecx
mov ecx, dword [ebp - 0x30]
add esi, ecx
lea edx, [ebp - 0x88]
push esi
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0x58]
push ecx
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea eax, [ebp - 0x164]
lea ecx, [ebp - 0x154]
lea edx, [ebp - 0x24]
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov esi, 2
jmp 0x11012abd
mov eax, dword [ebp - 0x44]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x1100564c
push eax
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x48]
call edi
push eax
push 0x1100565c
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
wait
push 0x11012ce9
jmp 0x11012cae
lea ecx, [ebp - 0x164]
lea edx, [ebp - 0x154]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x140]
lea eax, [ebp - 0x3c]
push ecx
push 0
mov dword [ebp - 0x140], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret