Function at 0x408050
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x401656
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2c8
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401378
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0
push 0x4037f4
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetVar]
mov dword [ebp - 4], 3
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jne 0x4080dd
jmp 0x40ac02
mov dword [ebp - 4], 6
mov edx, dword [ebp + 8]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
push 1
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov dword [ebp - 0x148], 0x403040
mov dword [ebp - 0x150], 0x8008
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0x150]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov word [ebp - 0x1d8], ax
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x1d8]
test ecx, ecx
je 0x408158
jmp 0x40ac02
mov dword [ebp - 4], 9
mov dword [ebp - 0x138], 0x403048
mov dword [ebp - 0x140], 8
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0xd0]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea eax, [ebp - 0xe0]
push eax
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0x1d4], eax
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x60]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xd0]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0xa
mov word [ebp - 0x1e8], 4
mov word [ebp - 0x1e4], 1
mov word [ebp - 0x2c], 0
jmp 0x40821b
mov dx, word [ebp - 0x2c]
add dx, word [ebp - 0x1e4]
jo 0x40ad53
mov word [ebp - 0x2c], dx
mov ax, word [ebp - 0x2c]
cmp ax, word [ebp - 0x1e8]
jg 0x4083a7
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0x60]
push ecx
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0xa4], 0
je 0x4082a6
mov eax, dword [ebp - 0xa4]
cmp word [eax], 1
jne 0x4082a6
movsx ecx, word [ebp - 0x2c]
mov edx, dword [ebp - 0xa4]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x1dc], ecx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x1dc]
cmp ecx, dword [eax + 0x10]
jae 0x408289
mov dword [ebp - 0x218], 0
jmp 0x408295
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x1dc]
shl edx, 2
mov dword [ebp - 0x21c], edx
jmp 0x4082b2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x21c]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], 0x4008
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea ecx, [ebp - 0xa4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
cmp dword [ebp - 0x60], 0
je 0x408348
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x408348
movsx eax, word [ebp - 0x2c]
mov ecx, dword [ebp - 0x60]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x1d8], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x40832b
mov dword [ebp - 0x220], 0
jmp 0x408337
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x224], ecx
jmp 0x408354
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x224]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xc
jmp 0x408206
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x60], 0
je 0x408402
mov ecx, dword [ebp - 0x60]
cmp word [ecx], 1
jne 0x408402
mov edx, dword [ebp - 0x60]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x1d8]
cmp edx, dword [ecx + 0x10]
jae 0x4083e5
mov dword [ebp - 0x228], 0
jmp 0x4083f1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x1d8]
shl eax, 2
mov dword [ebp - 0x22c], eax
jmp 0x40840e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x60], 0
je 0x408462
mov ecx, dword [ebp - 0x60]
cmp word [ecx], 1
jne 0x408462
mov edx, dword [ebp - 0x60]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x1dc]
cmp edx, dword [ecx + 0x10]
jae 0x408445
mov dword [ebp - 0x230], 0
jmp 0x408451
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x1dc]
shl eax, 2
mov dword [ebp - 0x234], eax
jmp 0x40846e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x22c]
mov ecx, dword [edx + eax]
push ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [edx]
push eax
push 0x402f94
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
neg esi
sbb esi, esi
inc esi
neg esi
not si
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x234]
mov ecx, dword [edx + eax]
push ecx
push 0x403814
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
inc eax
neg eax
not ax
and si, ax
mov word [ebp - 0x1e0], si
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
movsx edx, word [ebp - 0x1e0]
test edx, edx
je 0x4084fb
jmp 0x40ac02
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x60], 0
je 0x408559
mov eax, dword [ebp - 0x60]
cmp word [eax], 1
jne 0x408559
mov ecx, dword [ebp - 0x60]
mov edx, 2
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1d8], edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax + 0x10]
jae 0x40853c
mov dword [ebp - 0x238], 0
jmp 0x408548
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov edx, dword [ebp - 0x1d8]
shl edx, 2
mov dword [ebp - 0x23c], edx
jmp 0x408565
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x23c]
mov edx, dword [ecx + edx]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x11
push 0
push 0xffffffffffffffff
push 1
mov eax, dword [0x40f048]
push eax
push 0x403838
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x12
push 0
push 0xffffffffffffffff
push 1
mov edx, dword [0x40f054]
push edx
push 0x403848
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x13
push 0
push 0xffffffffffffffff
push 1
mov ecx, dword [0x40f040]
push ecx
push 0x403864
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x14
push 0
push 0xffffffffffffffff
push 1
mov eax, dword [0x40f050]
push eax
push 0x403880
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x15
push 0
push 0xffffffffffffffff
push 1
mov edx, dword [0x40f044]
push edx
push 0x4038a0
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x16
push 0
push 0xffffffffffffffff
push 1
mov ecx, dword [0x40f058]
push ecx
push 0x4038bc
mov edx, dword [ebp - 0x48]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x17
lea eax, [ebp - 0x48]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], 0x4008
push 1
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov dword [ebp - 0x148], 0x402e04
mov dword [ebp - 0x150], 0x8008
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x150]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x1d8], ax
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0x1d8]
test edx, edx
je 0x408726
mov dword [ebp - 4], 0x18
mov eax, dword [ebp - 0x48]
push eax
push 0x402e04
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x1a
mov ecx, dword [0x40f04c]
push ecx
push 0x4038e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x408c20
mov dword [ebp - 4], 0x1b
mov edx, 0x402dec
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x138], 0x402dec
mov dword [ebp - 0x140], 8
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x60], 0
je 0x4087ea
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x4087ea
mov eax, dword [ebp - 0x60]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x4087cd
mov dword [ebp - 0x240], 0
jmp 0x4087d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x244], ecx
jmp 0x4087f6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
push 1
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x244]
mov edx, dword [eax + ecx]
push edx
push 0x403864
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
test eax, eax
jne 0x408995
mov dword [ebp - 4], 0x1e
push 1
mov eax, dword [ebp - 0x48]
push eax
push 0x4038f4
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x1f
movsx ecx, word [ebp - 0x24]
test ecx, ecx
je 0x408990
mov dword [ebp - 4], 0x20
lea edx, [ebp - 0x48]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
movsx eax, word [ebp - 0x24]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x21
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
movsx ecx, word [ebp - 0x24]
sub eax, ecx
jo 0x40ad53
sub eax, 0xa
jo 0x40ad53
test eax, eax
je 0x40893a
mov dword [ebp - 4], 0x22
lea edx, [ebp - 0x48]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
movsx ecx, word [ebp - 0x24]
sub eax, ecx
jo 0x40ad53
sub eax, 0xa
jo 0x40ad53
push eax
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x24
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 8
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x408c20
mov dword [ebp - 4], 0x26
push 1
mov eax, dword [ebp - 0x48]
push eax
push 0x403910
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
test eax, eax
je 0x408b65
mov dword [ebp - 4], 0x27
push 1
mov ecx, dword [ebp - 0x48]
push ecx
push 0x403570
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x28
movsx edx, word [ebp - 0x24]
test edx, edx
je 0x408ad4
mov dword [ebp - 4], 0x29
lea eax, [ebp - 0x48]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], 0x4008
movsx ecx, word [ebp - 0x24]
push ecx
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
movsx edx, word [ebp - 0x24]
sub eax, edx
jo 0x40ad53
sub eax, 0x17
jo 0x40ad53
test eax, eax
je 0x408ad4
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0x48]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], 0x4008
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
movsx edx, word [ebp - 0x24]
sub eax, edx
jo 0x40ad53
sub eax, 0x17
jo 0x40ad53
push eax
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x138], 0x4035a4
mov dword [ebp - 0x140], 8
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 8
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x150]
push ecx
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xd0]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x408c20
mov dword [ebp - 4], 0x30
push 1
mov edx, dword [ebp - 0x48]
push edx
push 0x403930
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
test eax, eax
je 0x408c20
mov dword [ebp - 4], 0x31
push 1
mov eax, dword [ebp - 0x48]
push eax
push 0x4033e4
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x32
movsx ecx, word [ebp - 0x24]
test ecx, ecx
je 0x408c01
mov dword [ebp - 4], 0x33
lea edx, [ebp - 0x48]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
movsx eax, word [ebp - 0x24]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x35
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x39
cmp dword [ebp - 0x60], 0
je 0x408c7e
mov ecx, dword [ebp - 0x60]
cmp word [ecx], 1
jne 0x408c7e
mov edx, dword [ebp - 0x60]
mov eax, 1
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x1d8]
cmp edx, dword [ecx + 0x10]
jae 0x408c61
mov dword [ebp - 0x248], 0
jmp 0x408c6d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x1d8]
shl eax, 2
mov dword [ebp - 0x24c], eax
jmp 0x408c8a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
push 0x403948
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x24c]
mov ecx, dword [edx + eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x3a
push 0x402ea8
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 4], 0x3b
lea eax, [ebp - 0x1c4]
push eax
mov ecx, dword [ebp - 0xa0]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x408d22
push 0x44
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x250], eax
jmp 0x408d2c
mov dword [ebp - 0x250], 0
movsx ecx, word [ebp - 0x1c4]
test ecx, ecx
jne 0x408de0
mov dword [ebp - 4], 0x3c
mov ecx, 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1c4], ax
push 0x402ecc
mov edx, dword [ebp - 0xa0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40396c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x1c4]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0xac]
push ecx
call fcn.004068f0
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xa8]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x3d
mov cx, word [0x40f05e]
add cx, 1
jo 0x40ad53
mov word [0x40f05e], cx
jmp 0x40ac02
mov dword [ebp - 4], 0x40
mov edx, dword [ebp - 0x60]
push edx
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0xa4], 0
je 0x408e5b
mov ecx, dword [ebp - 0xa4]
cmp word [ecx], 1
jne 0x408e5b
mov edx, dword [ebp - 0xa4]
mov eax, 1
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x1d8]
cmp edx, dword [ecx + 0x10]
jae 0x408e3e
mov dword [ebp - 0x254], 0
jmp 0x408e4a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x1d8]
shl eax, 2
mov dword [ebp - 0x258], eax
jmp 0x408e67
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx + 0xc]
add edx, dword [ebp - 0x258]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
push 3
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x148], 0x4039b8
mov dword [ebp - 0x150], 0x8008
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x150]
push ecx
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0xf0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarNot]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x1dc]
test ecx, ecx
je 0x409193
mov dword [ebp - 4], 0x41
mov word [ebp - 0x5c], 0
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x60], 0
je 0x408f7a
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x408f7a
mov eax, dword [ebp - 0x60]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x408f5d
mov dword [ebp - 0x25c], 0
jmp 0x408f69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x260], ecx
jmp 0x408f86
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x260]
mov edx, dword [eax + ecx]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x43
cmp dword [ebp - 0x60], 0
je 0x408ffc
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x408ffc
mov eax, dword [ebp - 0x60]
mov ecx, 1
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x408fdf
mov dword [ebp - 0x264], 0
jmp 0x408feb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x268], ecx
jmp 0x409008
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
push 0
push 0xffffffffffffffff
push 1
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x268]
mov edx, dword [eax + ecx]
push edx
push 0x4039c4
mov eax, dword [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x44
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 0x45
mov word [ebp - 0x1d0], 0
mov word [ebp - 0x1cc], 0
mov word [ebp - 0x1c8], 0
mov word [ebp - 0x1c4], 0
mov ecx, dword [ebp - 0x48]
push ecx
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x1cc]
push ecx
lea edx, [ebp - 0x1c8]
push edx
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xd0]
push edx
call fcn.00406520
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x46
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x47
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 0x48
push 0xffffffffffffffff
mov eax, dword [ebp - 0x48]
push eax
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x80]
push edx
call dword [ecx + 0x6c]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x409178
push 0x6c
push 0x402eb8
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x26c], eax
jmp 0x409182
mov dword [ebp - 0x26c], 0
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
jmp 0x4097f4
mov dword [ebp - 4], 0x4a
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 0x4b
mov word [ebp - 0x5c], 0xffff
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x60], 0
je 0x40920d
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x40920d
mov eax, dword [ebp - 0x60]
mov ecx, 1
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x4091f0
mov dword [ebp - 0x270], 0
jmp 0x4091fc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x274], ecx
jmp 0x409219
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x274]
mov edx, dword [eax + ecx]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x4d
lea edx, [ebp - 0x28]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 4
jo 0x40ad53
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x60], 0
je 0x4092f5
mov ecx, dword [ebp - 0x60]
cmp word [ecx], 1
jne 0x4092f5
mov edx, dword [ebp - 0x60]
mov eax, 1
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x1dc]
cmp edx, dword [ecx + 0x10]
jae 0x4092d8
mov dword [ebp - 0x278], 0
jmp 0x4092e4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x1dc]
shl eax, 2
mov dword [ebp - 0x27c], eax
jmp 0x409301
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
mov ecx, dword [ebp - 0x60]
push ecx
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0xa4], 0
je 0x409375
mov eax, dword [ebp - 0xa4]
cmp word [eax], 1
jne 0x409375
mov ecx, dword [ebp - 0xa4]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1d8], edx
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax + 0x10]
jae 0x409358
mov dword [ebp - 0x280], 0
jmp 0x409364
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x280], eax
mov edx, dword [ebp - 0x1d8]
shl edx, 2
mov dword [ebp - 0x284], edx
jmp 0x409381
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0xa4]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x284]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], 0x4008
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x27c]
mov edx, dword [eax + ecx]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 3
jo 0x40ad53
push eax
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x4f
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x80]
push edx
call dword [ecx + 0x38]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x40945a
push 0x38
push 0x402eb8
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x288], eax
jmp 0x409464
mov dword [ebp - 0x288], 0
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x200], edx
mov dword [ebp - 0xa8], 0
mov edx, dword [ebp - 0x200]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x50
push 0x22
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], 8
push 0x22
lea edx, [ebp - 0xf0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x100]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xd0]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x51
lea eax, [ebp - 0xb0]
push eax
push 0x403948
mov ecx, dword [ebp - 0x7c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x402e24
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x38]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x4095ad
push 0x38
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x28c], eax
jmp 0x4095b7
mov dword [ebp - 0x28c], 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0xb0], 0
mov edx, dword [ebp - 0x204]
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xa8]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x52
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x98]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x5c]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x409645
push 0x5c
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x290], eax
jmp 0x40964f
mov dword [ebp - 0x290], 0
mov dword [ebp - 4], 0x53
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], 0x4008
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x150], 2
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0x170], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x140]
mov dword [edx], eax
mov ecx, dword [ebp - 0x13c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x138]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x134]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x150]
mov dword [edx], eax
mov ecx, dword [ebp - 0x14c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x148]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x144]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x170]
mov dword [edx], eax
mov ecx, dword [ebp - 0x16c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x168]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x164]
mov dword [edx + 0xc], ecx
push 3
push 0x4039dc
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x3c
mov dword [ebp - 4], 0x54
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x55
lea eax, [ebp - 0x1c4]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x4097b5
push 0x44
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x294], eax
jmp 0x4097bf
mov dword [ebp - 0x294], 0
movsx ecx, word [ebp - 0x1c4]
test ecx, ecx
je 0x4097f4
mov dword [ebp - 4], 0x56
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x59
mov edx, dword [ebp - 0x60]
push edx
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0xa4], 0
je 0x40986f
mov ecx, dword [ebp - 0xa4]
cmp word [ecx], 1
jne 0x40986f
mov edx, dword [ebp - 0xa4]
mov eax, 1
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x1d8]
cmp edx, dword [ecx + 0x10]
jae 0x409852
mov dword [ebp - 0x298], 0
jmp 0x40985e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x1d8]
shl eax, 2
mov dword [ebp - 0x29c], eax
jmp 0x40987b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ecx + 0xc]
add edx, dword [ebp - 0x29c]
mov dword [ebp - 0x138], edx
mov dword [ebp - 0x140], 0x4008
push 4
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x148], 0x4039e8
mov dword [ebp - 0x150], 0x8008
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x150]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0x1dc]
test edx, edx
je 0x409e8d
mov dword [ebp - 4], 0x5a
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 0x5b
mov word [ebp - 0x5c], 0xffff
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x60], 0
je 0x409981
mov eax, dword [ebp - 0x60]
cmp word [eax], 1
jne 0x409981
mov ecx, dword [ebp - 0x60]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1d8], edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax + 0x10]
jae 0x409964
mov dword [ebp - 0x2a0], 0
jmp 0x409970
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a0], eax
mov edx, dword [ebp - 0x1d8]
shl edx, 2
mov dword [ebp - 0x2a4], edx
jmp 0x40998d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x2a4]
mov edx, dword [ecx + edx]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x5d
lea eax, [ebp - 0xa8]
push eax
mov ecx, dword [ebp - 0xa0]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x38]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x4099f7
push 0x38
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2a8], eax
jmp 0x409a01
mov dword [ebp - 0x2a8], 0
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x208], ecx
mov dword [ebp - 0xa8], 0
mov edx, dword [ebp - 0x208]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x5e
push 0x22
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], 8
push 0x22
lea ecx, [ebp - 0xf0]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0xd0]
push edx
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0x100]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xd0]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x5f
lea edx, [ebp - 0xb0]
push edx
push 0x403948
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x402e24
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x80]
push eax
call dword [edx + 0x38]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x409b4a
push 0x38
push 0x402eb8
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x1d8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2ac], eax
jmp 0x409b54
mov dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0xb0], 0
mov edx, dword [ebp - 0x20c]
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xa8]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x60
push 0xffffffffffffffff
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x80]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x80]
push eax
call dword [edx + 0x5c]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x409be2
push 0x5c
push 0x402eb8
mov ecx, dword [ebp - 0x80]
push ecx
mov edx, dword [ebp - 0x1d8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2b0], eax
jmp 0x409bec
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 4], 0x61
push 0x22
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov ecx, dword [0x40f048]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], 8
mov dword [ebp - 0x148], 0x4039f8
mov dword [ebp - 0x150], 8
push 0x22
lea edx, [ebp - 0x100]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov dword [ebp - 0x158], 0x403a2c
mov dword [ebp - 0x160], 8
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x170], 8
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x190], 2
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x1b0], 0xb
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x150]
push ecx
lea edx, [ebp - 0xf0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x110]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x160]
push edx
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x170]
push ecx
lea edx, [ebp - 0x130]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov ecx, eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x190]
mov dword [edx], eax
mov ecx, dword [ebp - 0x18c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x188]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x184]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x1b0]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1a8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1a4]
mov dword [edx + 0xc], ecx
push 3
push 0x4039dc
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x3c
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x120]
push ecx
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xf0]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0xd0]
push eax
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov dword [ebp - 4], 0x62
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x63
lea ecx, [ebp - 0x1c4]
push ecx
mov edx, dword [ebp - 0x98]
push edx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x80]
push edx
call dword [ecx + 0x44]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x409e4e
push 0x44
push 0x402eb8
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2b4], eax
jmp 0x409e58
mov dword [ebp - 0x2b4], 0
movsx edx, word [ebp - 0x1c4]
test edx, edx
je 0x409e8d
mov dword [ebp - 4], 0x64
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x67
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0xa4], 0
je 0x409f08
mov edx, dword [ebp - 0xa4]
cmp word [edx], 1
jne 0x409f08
mov eax, dword [ebp - 0xa4]
mov ecx, 1
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x409eeb
mov dword [ebp - 0x2b8], 0
jmp 0x409ef7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2b8], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x2bc], ecx
jmp 0x409f14
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2bc], eax
mov edx, dword [ebp - 0xa4]
mov eax, dword [edx + 0xc]
add eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x140], 0x4008
push 4
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x148], 0x403a40
mov dword [ebp - 0x150], 0x8008
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x150]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x1dc]
test eax, eax
je 0x40a442
mov dword [ebp - 4], 0x68
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 0x69
mov word [ebp - 0x5c], 0xffff
mov dword [ebp - 4], 0x6a
cmp dword [ebp - 0x60], 0
je 0x40a01a
mov ecx, dword [ebp - 0x60]
cmp word [ecx], 1
jne 0x40a01a
mov edx, dword [ebp - 0x60]
mov eax, 1
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x1d8]
cmp edx, dword [ecx + 0x10]
jae 0x409ffd
mov dword [ebp - 0x2c0], 0
jmp 0x40a009
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x1d8]
shl eax, 2
mov dword [ebp - 0x2c4], eax
jmp 0x40a026
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c4], eax
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x2c4]
mov edx, dword [edx + eax]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x6b
lea ecx, [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x80]
push edx
call dword [ecx + 0x38]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x40a090
push 0x38
push 0x402eb8
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2c8], eax
jmp 0x40a09a
mov dword [ebp - 0x2c8], 0
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x210], edx
mov dword [ebp - 0xa8], 0
mov edx, dword [ebp - 0x210]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x6c
push 0x22
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x138], ecx
mov dword [ebp - 0x140], 8
push 0x22
lea edx, [ebp - 0xf0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0xd0]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xe0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x100]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
lea eax, [ebp - 0xf0]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0xd0]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x6d
lea eax, [ebp - 0xb0]
push eax
push 0x403948
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x402e24
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x38]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x40a1e3
push 0x38
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2cc], eax
jmp 0x40a1ed
mov dword [ebp - 0x2cc], 0
mov ecx, dword [ebp - 0xb0]
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0xb0], 0
mov edx, dword [ebp - 0x214]
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xa8]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x6e
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x98]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x5c]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x40a27b
push 0x5c
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2d0], eax
jmp 0x40a285
mov dword [ebp - 0x2d0], 0
mov dword [ebp - 4], 0x6f
push 0x403a50
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xd0], 8
mov dword [ebp - 0x148], 1
mov dword [ebp - 0x150], 2
mov dword [ebp - 0x168], 0xffffffff
mov dword [ebp - 0x170], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xd0]
mov dword [edx], eax
mov ecx, dword [ebp - 0xcc]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xc8]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xc4]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x150]
mov dword [edx], eax
mov ecx, dword [ebp - 0x14c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x148]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x144]
mov dword [edx + 0xc], ecx
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x170]
mov dword [edx], eax
mov ecx, dword [ebp - 0x16c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x168]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x164]
mov dword [edx + 0xc], ecx
push 3
push 0x4039dc
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x3c
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x70
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x71
lea eax, [ebp - 0x1c4]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x80]
push ecx
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jge 0x40a403
push 0x44
push 0x402eb8
mov edx, dword [ebp - 0x80]
push edx
mov eax, dword [ebp - 0x1d8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2d4], eax
jmp 0x40a40d
mov dword [ebp - 0x2d4], 0
movsx ecx, word [ebp - 0x1c4]
test ecx, ecx
je 0x40a442
mov dword [ebp - 4], 0x72
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x75
cmp dword [ebp - 0x60], 0
je 0x40a4a0
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x40a4a0
mov eax, dword [ebp - 0x60]
mov ecx, 4
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1d8], ecx
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [edx + 0x10]
jae 0x40a483
mov dword [ebp - 0x2d8], 0
jmp 0x40a48f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2d8], eax
mov ecx, dword [ebp - 0x1d8]
shl ecx, 2
mov dword [ebp - 0x2dc], ecx
jmp 0x40a4ac
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2dc], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [eax + ecx]
push edx
push 0x403a6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x138], ax
mov dword [ebp - 0x140], 0xb
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x1dc]
test eax, eax
je 0x40a75d
mov dword [ebp - 4], 0x76
movsx ecx, word [ebp - 0x5c]
test ecx, ecx
jne 0x40a6bd
mov dword [ebp - 4], 0x77
mov dx, word [0x40f05c]
add dx, 1
jo 0x40ad53
mov word [0x40f05c], dx
mov dword [ebp - 4], 0x78
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0xc0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x1d8], eax
lea ecx, [ebp - 0xb0]
push ecx
mov edx, dword [ebp - 0x1d8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1d8]
push ecx
call dword [eax + 0x2c]
fnclex
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jge 0x40a5c0
push 0x2c
push 0x403ac8
mov edx, dword [ebp - 0x1d8]
push edx
mov eax, dword [ebp - 0x1dc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2e0], eax
jmp 0x40a5ca
mov dword [ebp - 0x2e0], 0
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1c4], ax
push 0x403a84
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403aa0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov eax, dword [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403b0c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1c4]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0xbc]
push edx
call fcn.004068f0
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xb4]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xa8]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x1c
lea ecx, [ebp - 0xc0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
jmp 0x40a75d
mov dword [ebp - 4], 0x7a
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1c4], ax
push 0x403b58
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403b90
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1c4]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0xac]
push edx
call fcn.004068f0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x7b
mov dx, word [0x40f064]
add dx, 1
jo 0x40ad53
mov word [0x40f064], dx
mov dword [ebp - 4], 0x7e
cmp dword [ebp - 0x60], 0
je 0x40a7bb
mov eax, dword [ebp - 0x60]
cmp word [eax], 1
jne 0x40a7bb
mov ecx, dword [ebp - 0x60]
mov edx, 4
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1d8], edx
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x1d8]
cmp ecx, dword [eax + 0x10]
jae 0x40a79e
mov dword [ebp - 0x2e4], 0
jmp 0x40a7aa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2e4], eax
mov edx, dword [ebp - 0x1d8]
shl edx, 2
mov dword [ebp - 0x2e8], edx
jmp 0x40a7c7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x2e8]
mov eax, dword [ecx + edx]
push eax
push 0x403a6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
inc eax
neg eax
not ax
mov word [ebp - 0x138], ax
mov dword [ebp - 0x140], 0xb
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x1dc], ax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x1dc]
test ecx, ecx
je 0x40a9b1
mov dword [ebp - 4], 0x7f
movsx edx, word [ebp - 0x5c]
test edx, edx
jne 0x40a911
mov dword [ebp - 4], 0x80
mov ax, word [0x40f060]
add ax, 1
jo 0x40ad53
mov word [0x40f060], ax
mov dword [ebp - 4], 0x81
mov ecx, 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1c4], ax
push 0x403bec
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403c0c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x1c4]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0xb0]
push ecx
call fcn.004068f0
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
jmp 0x40a9b1
mov dword [ebp - 4], 0x83
mov dx, word [0x40f066]
add dx, 1
jo 0x40ad53
mov word [0x40f066], dx
mov dword [ebp - 4], 0x84
mov ecx, 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1c4], ax
push 0x403c38
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403c74
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1c4]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0xac]
push edx
call fcn.004068f0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x87
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarNot]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
movsx ecx, ax
test ecx, ecx
je 0x40abb6
mov dword [ebp - 4], 0x88
movsx edx, word [ebp - 0x5c]
test edx, edx
jne 0x40aae2
mov dword [ebp - 4], 0x89
mov ax, word [0x40f062]
add ax, 1
jo 0x40ad53
mov word [0x40f062], ax
mov dword [ebp - 4], 0x8a
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x140], 3
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0x3c]
push edx
lea eax, [ebp - 0xd0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov word [ebp - 0x1c4], ax
push 0x403c8c
mov ecx, dword [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x40]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403c9c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x1c4]
push eax
push 0
lea ecx, [ebp - 0xb0]
push ecx
call fcn.004068f0
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x40abb6
mov dword [ebp - 4], 0x8c
mov dx, word [0x40f068]
add dx, 1
jo 0x40ad53
mov word [0x40f068], dx
mov dword [ebp - 4], 0x8d
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x140], 3
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x3c]
push ecx
lea edx, [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov word [ebp - 0x1c4], ax
push 0x403adc
mov eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x403cc0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1c4]
push ecx
push 0
lea edx, [ebp - 0xac]
push edx
call fcn.004068f0
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x90
push 0
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetObjAddref]
mov dword [ebp - 4], 0x92
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x140], 0xb
lea edx, [ebp - 0x140]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x93
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaResume]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x40ad40
jmp 0x40ac9d
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x60]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3