Function at 0x405630
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x4017e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4c
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4012b8
xor edi, edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x58], edi
call fcn.00409530
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
push eax
push 0x402cec
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x28]
call esi
lea eax, [ebp - 0x28]
push eax
call fcn.00409000
mov edx, eax
lea ecx, [ebp - 0x18]
call esi
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov edx, 0x402d04
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x24]
push eax
push ecx
call fcn.004092d0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x24]
call ebx
lea edx, [ebp - 0x38]
push edi
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x48]
push eax
push 0xff
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x48]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x38]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x28]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push edi
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.004026f0
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x28]
lea eax, [ebp - 0x1c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0x24]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov ecx, dword [ebp - 0x1c]
push 1
lea eax, [ebp - 0x1c]
push ecx
push edi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
sub eax, 1
lea edx, [ebp - 0x58]
jo 0x405874
push eax
lea eax, [ebp - 0x38]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0x38]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x24]
call ebx
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x18]
lea eax, [ebp - 0x24]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.004029a0
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x24]
lea edx, [ebp - 0x18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x24]
call ebx
push 0x405860
jmp 0x40584f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x18]
call esi
lea ecx, [ebp - 0x1c]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 8
push 0x4017e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x25c
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4012c8
xor eax, eax
push 0x11
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x4c]
push 0x40311c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 0x402244
call fcn.00411520
test eax, eax
je 0x405a83
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3fb
push 0x3e8
call fcn.00409b30
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
inc eax
lea edx, [ebp - 0x84]
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x80]
push edx
push eax
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405a95
call fcn.00404c40
jmp 0x405a95
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3f5
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
lea edx, [ebp - 0x84]
lea eax, [ebp - 0xc4]
push edx
push eax
call fcn.00404d20
lea ecx, [ebp - 0xc4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x80]
push edx
push eax
push 2
call ebx
add esp, 0xc
lea ecx, [ebp - 0xc4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3f0
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea edx, [ebp - 0x84]
inc eax
push edx
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x80]
push eax
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405b67
call fcn.0040e8c0
test ax, ax
je 0x405b67
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3f1
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea edx, [ebp - 0x84]
inc eax
push edx
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x80]
push eax
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405bd0
call fcn.0040eb00
test ax, ax
je 0x405bd0
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3f2
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea edx, [ebp - 0x84]
inc eax
push edx
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x80]
push eax
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405c39
call fcn.0040ebf0
test ax, ax
je 0x405c39
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3f3
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea edx, [ebp - 0x84]
inc eax
push edx
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x80]
push eax
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405ca2
call fcn.0040ed10
test ax, ax
je 0x405ca2
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0x80]
push ecx
push 0x3f4
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea edx, [ebp - 0x84]
inc eax
push edx
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x80]
push eax
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405d7f
call fcn.0040ee40
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xd4]
push ecx
push edx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xc4], 8
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0x108]
push eax
push ecx
mov dword [ebp - 0x100], 0x402d10
mov dword [ebp - 0x108], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov dword [ebp - 0x164], eax
lea edx, [ebp - 0xd4]
lea eax, [ebp - 0xc4]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x405d7f
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
call fcn.00405170
lea ecx, [ebp - 0xc4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcCommandVar]
lea edx, [ebp - 0xc4]
push 1
lea eax, [ebp - 0x108]
push edx
push eax
lea ecx, [ebp - 0xd4]
push 1
push ecx
mov dword [ebp - 0x100], 0x402d30
mov dword [ebp - 0x108], 8
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x118], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
lea edx, [ebp - 0x118]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0xd4]
lea ecx, [ebp - 0xc4]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
xor edx, edx
add esp, 0xc
cmp word [ebp - 0x164], dx
lea ecx, [ebp - 0x80]
setne dl
inc edx
mov dword [ebp - 0x6c], edx
xor edx, edx
call edi
lea eax, [ebp - 0x80]
push eax
push 0x3ed
push 0x3e8
call fcn.0040d510
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x20]
push ecx
push edx
mov dword [ebp - 0x15c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x405e8d
cmp word [ecx], 1
jne 0x405e8d
mov eax, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
neg eax
cmp eax, edx
mov dword [ebp - 0x164], eax
jb 0x405e96
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x164]
jmp 0x405e96
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ecx + 0xc]
push 4
add edx, eax
lea eax, [ebp - 0x5c]
push edx
push eax
call fcn.00402448
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea edx, [ebp - 0x5c]
push edx
call fcn.0040f6b0
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xd4]
push eax
push ecx
mov dword [ebp - 0xc4], 8
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea edx, [ebp - 0x80]
push edx
push 0x3ee
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0xe4]
push eax
push ecx
call fcn.00404d20
lea edx, [ebp - 0xd4]
lea eax, [ebp - 0xe4]
push edx
lea ecx, [ebp - 0xf4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x80]
push edx
push eax
push 2
call ebx
lea ecx, [ebp - 0xf4]
lea edx, [ebp - 0xe4]
push ecx
lea eax, [ebp - 0xd4]
push edx
lea ecx, [ebp - 0xc4]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
call fcn.0040e6d0
mov dword [ebp - 0xbc], eax
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xd4]
push edx
push eax
mov dword [ebp - 0xc4], 8
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
mov ecx, dword [ebp - 0x34]
lea edx, [ebp - 0xd4]
lea eax, [ebp - 0x108]
push edx
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0x108], 0x8008
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xd4]
lea edx, [ebp - 0xc4]
push ecx
push edx
push 2
mov dword [ebp - 0x164], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x40639a
call fcn.004048d0
not eax
test eax, eax
je 0x40639a
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea eax, [ebp - 0x80]
push eax
push 0x3ef
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x84]
inc eax
lea edx, [ebp - 0x80]
push ecx
push edx
neg eax
push 2
mov dword [ebp - 0x164], eax
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x40639a
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x80]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.004029a0
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 0x34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call fcn.0040e6d0
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
mov edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x8c]
push 0
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0x200], ecx
mov dword [ebp - 0x8c], 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x200]
push eax
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x84]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.00402658
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x88]
lea eax, [ebp - 0x34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x8c]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
push ecx
push 4
call ebx
add esp, 0x14
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov edx, 0x402d8c
lea ecx, [ebp - 0x84]
call edi
mov edx, 0x402d50
lea ecx, [ebp - 0x80]
call edi
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x80]
push edx
push eax
call fcn.00404dc0
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
push 0
push 5
push 1
lea ecx, [ebp - 0xf8]
push 0
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x108], 2
lea edx, [ebp - 0x108]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x248], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x248]
sub ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x110], 0x402dac
mov dword [ebp - 0x118], 8
lea edx, [ebp - 0x118]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x24c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x24c]
sub ecx, eax
add ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0xf8]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x120], ecx
mov ecx, 2
mov dword [ebp - 0x128], 0x4008
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x128]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarZero]
mov eax, dword [ebp - 0xf8]
mov ecx, 3
mov dword [ebp - 0x130], 0x402dac
mov dword [ebp - 0x138], 8
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x138]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0xf8]
mov ecx, 4
mov dword [ebp - 0x140], 0x402dac
mov dword [ebp - 0x148], 8
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x148]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0xf8]
mov ecx, 5
mov dword [ebp - 0x150], ecx
mov dword [ebp - 0x158], 2
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x158]
shl ecx, 4
add ecx, dword [eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0x90]
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x90], 0
call esi
mov edx, 0x402d3c
lea ecx, [ebp - 0x88]
call edi
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
call fcn.0040a050
lea edx, [ebp - 0xf8]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
push eax
push ecx
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
push ecx
push 5
call ebx
add esp, 0x18
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea edx, [ebp - 0x80]
push edx
push 0x3e8
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x80]
inc eax
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x84]
push eax
push ecx
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x406394
call fcn.004107d0
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
call fcn.004048d0
not eax
test eax, eax
je 0x406d01
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea edx, [ebp - 0x80]
push edx
push 0x3fe
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x80]
inc eax
neg eax
mov dword [ebp - 0x164], eax
lea eax, [ebp - 0x84]
push eax
push ecx
push 2
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x406d01
lea edx, [ebp - 0xc4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcCommandVar]
lea eax, [ebp - 0xc4]
push 1
lea ecx, [ebp - 0x108]
push eax
push ecx
lea edx, [ebp - 0xd4]
push 1
push edx
mov dword [ebp - 0x100], 0x402e34
mov dword [ebp - 0x108], 8
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x118], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0xd4]
lea edx, [ebp - 0xc4]
push ecx
push edx
push 2
mov dword [ebp - 0x164], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x406d01
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea eax, [ebp - 0x80]
push eax
push 0x400
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0xc4]
push ecx
push edx
call fcn.00404d20
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call esi
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x80]
push ecx
push edx
push 2
call ebx
add esp, 0xc
lea ecx, [ebp - 0xc4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
xor edx, edx
lea ecx, [ebp - 0x80]
call edi
lea eax, [ebp - 0x80]
push eax
push 0x3ff
push 0x3e8
call fcn.00409b30
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x402cd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x84]
inc eax
lea edx, [ebp - 0x80]
push ecx
push edx
neg eax
push 2
mov dword [ebp - 0x164], eax
call ebx
add esp, 0xc
cmp word [ebp - 0x164], 0
je 0x406756
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x100], 0x402e64
mov dword [ebp - 0x108], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xd4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcEnvironVar]
lea edx, [ebp - 0xd4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea eax, [ebp - 0x80]
push eax
call fcn.00409650
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov edx, dword [ebp - 0x88]
push 1
push 0xffffffffffffffff
push 1
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x88], 0
call esi
mov ecx, dword [ebp - 0x18]
push eax
push 0x402e40
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x18]
call esi
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
push ecx
push 3
call ebx
lea edx, [ebp - 0xd4]
lea eax, [ebp - 0xc4]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp - 0x18]
add esp, 0x1c
push 0
push 0xffffffffffffffff
push 1
push 0x402e8c
push 0x402e84
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x18]
call esi
mov edx, dword [ebp - 0x18]
push 0
push 0xffffffffffffffff
push 1
push 0x402e8c
push 0x402e94
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x18]
call esi
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x28]
mov ecx, 0x64
cmp eax, ecx
jg 0x406756
call fcn.0040e6d0
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call fcn.004093b0
mov dword [ebp - 0x160], eax
lea eax, [ebp - 0x160]
lea ecx, [ebp - 0x1b8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
xor edx, edx
lea ecx, [ebp - 0x84]
call edi
mov eax, dword [ebp - 0x1b8]
lea edx, [ebp - 0x15c]
mov dword [ebp - 0x15c], eax
lea eax, [ebp - 0x1b4]
push edx
push eax
mov dword [ebp - 0x1b8], 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x1b4]
push ecx
push edx
push eax
call fcn.0040af40
neg eax
sbb eax, eax
lea ecx, [ebp - 0x84]
neg eax
lea edx, [ebp - 0x80]
push ecx
neg eax
push edx
push 2
mov dword [ebp - 0x168], eax
call ebx
add esp, 0xc
lea eax, [ebp - 0x1b4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea ecx, [ebp - 0x1b8]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
cmp word [ebp - 0x168], 0
je 0x40673e
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
mov ecx, dword [ebp - 0x28]
mov eax, 1
add eax, ecx
jo 0x4085eb
mov dword [ebp - 0x28], eax
jmp 0x40666c
mov eax, 1
mov ecx, 0x64
mov dword [ebp - 0x28], eax
cmp eax, ecx
jg 0x406877
call fcn.00405630
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
call fcn.0040e6d0
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call fcn.004093b0
mov dword [ebp - 0x160], eax
lea edx, [ebp - 0x160]
lea eax, [ebp - 0x1c4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
xor edx, edx
lea ecx, [ebp - 0x88]
call edi
mov eax, dword [ebp - 0x1c4]
lea ecx, [ebp - 0x15c]
lea edx, [ebp - 0x1c0]
push ecx
push edx
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x15c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov edx, dword [ebp - 0x8c]
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x1c0]
push eax
push ecx
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x8c], 0
call esi
push eax
call fcn.0040af40
neg eax
sbb eax, eax
lea edx, [ebp - 0x8c]
neg eax
neg eax
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
push edx
push 4
call ebx
add esp, 0x14
lea eax, [ebp - 0x1c0]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea ecx, [ebp - 0x1c4]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
cmp word [ebp - 0x168], 0
je 0x406862
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
mov ecx, dword [ebp - 0x28]
mov eax, 1
add eax, ecx
jo 0x4085eb
jmp 0x40675b
mov eax, 1