Function at 0x5019c0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x4070a6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2ec
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4045a0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov eax, dword [ebp + 8]
mov dword [ebp - 0x60], eax
mov dword [ebp - 4], 4
mov word [ebp - 0x7c], 0
mov dword [ebp - 4], 5
cmp word [0x540148], 0xffff
je 0x501b30
mov dword [ebp - 4], 6
cmp dword [ebp + 8], 0xfa
jle 0x501b30
mov dword [ebp - 4], 7
mov dword [ebp - 0xe0], 0x80020004
mov dword [ebp - 0xe8], 0xa
mov dword [ebp - 0xd0], 0x80020004
mov dword [ebp - 0xd8], 0xa
mov dword [ebp - 0xc0], 0x80020004
mov dword [ebp - 0xc8], 0xa
push 0x418140
push 0x412864
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x4181c4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
push 0
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x503fda
mov dword [ebp - 4], 0xb
cmp word [0x540148], 0xffff
jne 0x502c03
mov dword [ebp - 4], 0xc
call fcn.00501920
cmp dword [ebp + 8], eax
jle 0x501c98
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xe0], 0x80020004
mov dword [ebp - 0xe8], 0xa
mov dword [ebp - 0xd0], 0x80020004
mov dword [ebp - 0xd8], 0xa
mov dword [ebp - 0xc0], 0x80020004
mov dword [ebp - 0xc8], 0xa
push 0x418220
call fcn.00501920
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x418278
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x98]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x412864
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x4181c4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
push 0
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x503fda
mov dword [ebp - 4], 0x10
cmp dword [ebp + 8], 1
jl 0x502bfe
mov dword [ebp - 4], 0x11
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68], eax
mov dword [ebp - 4], 0x12
cmp dword [ebp + 8], 0xfa
jle 0x501cd4
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x68], 0xfa
mov dword [ebp - 4], 0x15
mov ecx, dword [ebp + 8]
sub ecx, dword [ebp - 0x68]
jo 0x5040f7
mov dword [ebp + 8], ecx
mov dword [ebp - 4], 0x16
push 0
push 0xe
push 1
push 0x11
lea edx, [ebp - 0x38]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x38], 0
je 0x501d65
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x501d65
mov ecx, dword [ebp - 0x38]
xor edx, edx
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x501d4b
mov dword [ebp - 0x1d8], 0
jmp 0x501d57
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1d8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1dc], edx
jmp 0x501d71
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1dc], eax
xor ecx, ecx
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1dc]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x38], 0
je 0x501de3
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x501de3
mov eax, dword [ebp - 0x38]
mov ecx, 1
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x501dc9
mov dword [ebp - 0x1e0], 0
jmp 0x501dd5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e0], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1e4], ecx
jmp 0x501def
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e4], eax
mov ecx, 0x6f
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x1e4]
mov byte [ecx + edx], al
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x38], 0
je 0x501e64
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x501e64
mov ecx, dword [ebp - 0x38]
mov edx, 2
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x501e4a
mov dword [ebp - 0x1e8], 0
jmp 0x501e56
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1ec], edx
jmp 0x501e70
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1ec], eax
push 0x414510
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1ec]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x38], 0
je 0x501eed
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x501eed
mov eax, dword [ebp - 0x38]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x501ed3
mov dword [ebp - 0x1f0], 0
jmp 0x501edf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f0], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1f4], ecx
jmp 0x501ef9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f4], eax
push 0x416bcc
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x1f4]
mov byte [ecx + edx], al
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x38], 0
je 0x501f76
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x501f76
mov ecx, dword [ebp - 0x38]
mov edx, 4
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x501f5c
mov dword [ebp - 0x1f8], 0
jmp 0x501f68
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x1fc], edx
jmp 0x501f82
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
push 0x41828c
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1fc]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x38], 0
je 0x501fff
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x501fff
mov eax, dword [ebp - 0x38]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x501fe5
mov dword [ebp - 0x200], 0
jmp 0x501ff1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x204], ecx
jmp 0x50200b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x204]
mov byte [edx + ecx], al
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x5020cd
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x5020cd
mov ecx, dword [ebp - 0x38]
mov edx, 6
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x5020b3
mov dword [ebp - 0x208], 0
jmp 0x5020bf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x20c], edx
jmp 0x5020d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x20c]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x502198
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x502198
mov ecx, dword [ebp - 0x38]
mov edx, 7
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x50217e
mov dword [ebp - 0x210], 0
jmp 0x50218a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x214], edx
jmp 0x5021a4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x214]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x502263
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x502263
mov ecx, dword [ebp - 0x38]
mov edx, 8
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x502249
mov dword [ebp - 0x218], 0
jmp 0x502255
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x21c], edx
jmp 0x50226f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x21c]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x20
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x50232e
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x50232e
mov ecx, dword [ebp - 0x38]
mov edx, 9
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x502314
mov dword [ebp - 0x220], 0
jmp 0x502320
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x224], edx
jmp 0x50233a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x224]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x5023f9
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x5023f9
mov ecx, dword [ebp - 0x38]
mov edx, 0xa
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x5023df
mov dword [ebp - 0x228], 0
jmp 0x5023eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x22c], edx
jmp 0x502405
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x22c]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x22
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x5024c4
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x5024c4
mov ecx, dword [ebp - 0x38]
mov edx, 0xb
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x5024aa
mov dword [ebp - 0x230], 0
jmp 0x5024b6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x234], edx
jmp 0x5024d0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x234]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x23
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x50258f
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x50258f
mov ecx, dword [ebp - 0x38]
mov edx, 0xc
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x502575
mov dword [ebp - 0x238], 0
jmp 0x502581
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x23c], edx
jmp 0x50259b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x23c]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x38], 0
je 0x502633
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x502633
mov eax, dword [ebp - 0x38]
mov ecx, 0xd
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x502619
mov dword [ebp - 0x240], 0
jmp 0x502625
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x244], ecx
jmp 0x50263f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
push 0x416bcc
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x244]
mov byte [ecx + edx], al
mov dword [ebp - 4], 0x25
call fcn.00504330
movsx eax, ax
test eax, eax
jne 0x502731
mov dword [ebp - 4], 0x26
mov dword [ebp - 0xe0], 0x80020004
mov dword [ebp - 0xe8], 0xa
mov dword [ebp - 0xd0], 0x80020004
mov dword [ebp - 0xd8], 0xa
mov dword [ebp - 0xc0], 0x80020004
mov dword [ebp - 0xc8], 0xa
mov dword [ebp - 0x140], 0x418294
mov dword [ebp - 0x148], 8
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
push 0
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x503fda
mov dword [ebp - 4], 0x29
call fcn.00501920
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 0x2a
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp + 8]
jge 0x502754
jmp 0x503fda
mov dword [ebp - 4], 0x2d
cmp dword [ebp - 0x84], 0
jne 0x502784
lea ecx, [ebp - 0x84]
push ecx
push 0x407c14
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
lea edx, [ebp - 0x84]
mov dword [ebp - 0x248], edx
jmp 0x502790
lea eax, [ebp - 0x84]
mov dword [ebp - 0x248], eax
mov ecx, dword [ebp - 0x248]
mov edx, dword [ecx]
mov dword [ebp - 0x1a8], edx
mov dword [ebp - 0x1a4], 0x4741
mov dword [ebp - 0x1a0], 0x4d45
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x1a0]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1a8]
push edx
call dword [ecx + 0x24]
fnclex
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jge 0x50280d
push 0x24
push 0x418120
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x24c], eax
jmp 0x502817
mov dword [ebp - 0x24c], 0
cmp word [ebp - 0x19c], 0xffff
jne 0x5028fa
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x84], 0
jne 0x502855
lea edx, [ebp - 0x84]
push edx
push 0x407c14
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
lea eax, [ebp - 0x84]
mov dword [ebp - 0x250], eax
jmp 0x502861
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x250], ecx
mov edx, dword [ebp - 0x250]
mov eax, dword [edx]
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x1c0]
push ecx
lea edx, [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1a8]
push edx
call dword [ecx + 0x1c]
fnclex
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jge 0x5028c0
push 0x1c
push 0x418120
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x254], eax
jmp 0x5028ca
mov dword [ebp - 0x254], 0
lea edx, [ebp - 0x1c0]
push edx
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x80]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 0xa
jge 0x5028f8
jmp 0x503fda
jmp 0x5028ff
jmp 0x503fda
mov dword [ebp - 4], 0x35
cmp dword [ebp - 0x80], 0
je 0x50295a
mov edx, dword [ebp - 0x80]
cmp word [edx], 1
jne 0x50295a
mov eax, dword [ebp - 0x80]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x502940
mov dword [ebp - 0x258], 0
jmp 0x50294c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x25c], ecx
jmp 0x502966
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x80], 0
je 0x5029ba
mov edx, dword [ebp - 0x80]
cmp word [edx], 1
jne 0x5029ba
mov eax, dword [ebp - 0x80]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [edx + 0x10]
jae 0x5029a0
mov dword [ebp - 0x260], 0
jmp 0x5029ac
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x264], ecx
jmp 0x5029c6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x80], 0
je 0x502a1a
mov edx, dword [ebp - 0x80]
cmp word [edx], 1
jne 0x502a1a
mov eax, dword [ebp - 0x80]
mov ecx, 4
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1b0], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [edx + 0x10]
jae 0x502a00
mov dword [ebp - 0x268], 0
jmp 0x502a0c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp - 0x26c], ecx
jmp 0x502a26
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov edx, dword [ebp - 0x80]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x25c]
movzx si, byte [eax + ecx]
push 0x414510
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
xor ebx, ebx
cmp si, ax
setne bl
mov edx, dword [ebp - 0x80]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x264]
movzx si, byte [eax + ecx]
push 0x418b54
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
xor edx, edx
cmp si, ax
setne dl
or ebx, edx
neg ebx
sbb ebx, ebx
neg ebx
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x26c]
movzx si, byte [ecx + edx]
push 0x418b5c
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
xor ecx, ecx
cmp si, ax
setne cl
or ebx, ecx
test ebx, ebx
jne 0x502be7
mov dword [ebp - 4], 0x36
cmp dword [ebp - 0x80], 0
je 0x502aff
mov edx, dword [ebp - 0x80]
cmp word [edx], 1
jne 0x502aff
mov eax, dword [ebp - 0x80]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x502ae5
mov dword [ebp - 0x270], 0
jmp 0x502af1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x274], ecx
jmp 0x502b0b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x80], 0
je 0x502b5f
mov edx, dword [ebp - 0x80]
cmp word [edx], 1
jne 0x502b5f
mov eax, dword [ebp - 0x80]
mov ecx, 6
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1ac], ecx
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [edx + 0x10]
jae 0x502b45
mov dword [ebp - 0x278], 0
jmp 0x502b51
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp - 0x27c], ecx
jmp 0x502b6b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x80]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x274]
movzx dx, byte [eax + ecx]
imul dx, dx, 0x100
jo 0x5040f7
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x27c]
movzx cx, byte [ecx + eax]
add dx, cx
jo 0x5040f7
movsx edx, dx
mov dword [ebp - 0x8c], edx
mov dword [ebp - 4], 0x37
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x68]
jo 0x5040f7
cmp dword [ebp - 0x8c], eax
jg 0x502bd2
mov dword [ebp - 4], 0x38
mov word [ebp - 0x7c], 0xffff
mov dword [ebp - 4], 0x3a
mov ecx, dword [ebp - 0x8c]
mov dword [0x540170], ecx
jmp 0x502bec
jmp 0x503fda
mov dword [ebp - 4], 0x3e
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
jmp 0x501c98
jmp 0x503b5d
mov dword [ebp - 4], 0x41
movsx edx, word [0x540150]
test edx, edx
jne 0x502c1a
jmp 0x503fda
mov dword [ebp - 4], 0x44
call fcn.00501920
mov dword [ebp - 0x64], eax
mov dword [ebp - 4], 0x45
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp + 8]
jge 0x502c3d
jmp 0x503fda
mov dword [ebp - 4], 0x48
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x148], 0xb
cmp dword [0x540278], 0
jne 0x502c7d
push 0x540278
push 0x4093e4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x280], 0x540278
jmp 0x502c87
mov dword [ebp - 0x280], 0x540278
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x148]
mov dword [ecx], edx
mov eax, dword [ebp - 0x144]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x140]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x13c]
mov dword [ecx + 0xc], eax
push 0x14
mov ecx, dword [ebp - 0x280]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x318]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x49
push 0
push 0xc
push 1
push 0x11
lea edx, [ebp - 0x38]
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x4a
push 0
push 1
push 1
push 0x11
lea eax, [ebp - 0x34]
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x4b
cmp dword [ebp - 0x38], 0
je 0x502d90
mov ecx, dword [ebp - 0x38]
cmp word [ecx], 1
jne 0x502d90
mov edx, dword [ebp - 0x38]
xor eax, eax
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1a8]
cmp edx, dword [ecx + 0x10]
jae 0x502d76
mov dword [ebp - 0x284], 0
jmp 0x502d82
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x288], eax
jmp 0x502d9c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
push 0x418c54
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x288]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0x4c
cmp dword [ebp - 0x38], 0
je 0x502e19
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x502e19
mov eax, dword [ebp - 0x38]
mov ecx, 1
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x502dff
mov dword [ebp - 0x28c], 0
jmp 0x502e0b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x290], ecx
jmp 0x502e25
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
push 0x416bcc
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x290]
mov byte [ecx + edx], al
mov dword [ebp - 4], 0x4d
cmp dword [ebp - 0x38], 0
je 0x502ea2
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x502ea2
mov ecx, dword [ebp - 0x38]
mov edx, 2
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x502e88
mov dword [ebp - 0x294], 0
jmp 0x502e94
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x294], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x298], edx
jmp 0x502eae
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x298], eax
push 0x41828c
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x298]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0x4e
cmp dword [ebp - 0x38], 0
je 0x502f2b
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x502f2b
mov eax, dword [ebp - 0x38]
mov ecx, 3
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x502f11
mov dword [ebp - 0x29c], 0
jmp 0x502f1d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x29c], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2a0], ecx
jmp 0x502f37
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a0], eax
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2a0]
mov byte [edx + ecx], al
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4f
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x502ff9
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x502ff9
mov ecx, dword [ebp - 0x38]
mov edx, 4
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x502fdf
mov dword [ebp - 0x2a4], 0
jmp 0x502feb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2a8], edx
jmp 0x503005
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a8], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2a8]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x50
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x5030c4
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x5030c4
mov ecx, dword [ebp - 0x38]
mov edx, 5
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x5030aa
mov dword [ebp - 0x2ac], 0
jmp 0x5030b6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2b0], edx
jmp 0x5030d0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2b0], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2b0]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x51
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x50318f
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x50318f
mov ecx, dword [ebp - 0x38]
mov edx, 6
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x503175
mov dword [ebp - 0x2b4], 0
jmp 0x503181
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2b4], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2b8], edx
jmp 0x50319b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2b8], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2b8]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x52
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x50325a
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x50325a
mov ecx, dword [ebp - 0x38]
mov edx, 7
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x503240
mov dword [ebp - 0x2bc], 0
jmp 0x50324c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2bc], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2c0], edx
jmp 0x503266
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c0], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2c0]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x53
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x503325
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x503325
mov ecx, dword [ebp - 0x38]
mov edx, 8
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x50330b
mov dword [ebp - 0x2c4], 0
jmp 0x503317
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c4], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2c8], edx
jmp 0x503331
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c8], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2c8]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x54
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x5033f0
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x5033f0
mov ecx, dword [ebp - 0x38]
mov edx, 9
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x5033d6
mov dword [ebp - 0x2cc], 0
jmp 0x5033e2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2cc], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2d0], edx
jmp 0x5033fc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2d0], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2d0]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x55
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fstp dword [ebp - 0x1a0]
cmp dword [ebp - 0x38], 0
je 0x5034bb
mov eax, dword [ebp - 0x38]
cmp word [eax], 1
jne 0x5034bb
mov ecx, dword [ebp - 0x38]
mov edx, 0xa
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x1a8], edx
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x1a8]
cmp ecx, dword [eax + 0x10]
jae 0x5034a1
mov dword [ebp - 0x2d4], 0
jmp 0x5034ad
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2d4], eax
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2d8], edx
jmp 0x5034c7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2d8], eax
fld dword [ebp - 0x1a0]
fmul dword [0x404798]
fadd dword [0x404794]
fnstsw ax
test al, 0xd
jne 0x5040f2
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2d8]
mov byte [edx + ecx], al
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x56
cmp dword [ebp - 0x38], 0
je 0x50355f
mov edx, dword [ebp - 0x38]
cmp word [edx], 1
jne 0x50355f
mov eax, dword [ebp - 0x38]
mov ecx, 0xb
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x1a8], ecx
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [edx + 0x10]
jae 0x503545
mov dword [ebp - 0x2dc], 0
jmp 0x503551
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2dc], eax
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x2e0], ecx
jmp 0x50356b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2e0], eax
push 0x416bcc
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [ebp - 0x38]
mov ecx, dword [edx + 0xc]
mov edx, dword [ebp - 0x2e0]
mov byte [ecx + edx], al
mov dword [ebp - 4], 0x57
mov dword [ebp - 0x1bc], 0xb
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x88], 0
jmp 0x5035cc
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x1b8]
jo 0x5040f7
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
cmp ecx, dword [ebp - 0x1bc]
jg 0x50379a
mov dword [ebp - 4], 0x58
push 0x64
call fcn.00415d5c
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x59
push 1
call dword [sym.imp.MSVBVM60.DLL_rtcCommandBstr]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x418c5c
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
xor edx, edx
test eax, eax
setg dl
neg edx
mov word [ebp - 0x1a8], dx
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
movsx eax, word [ebp - 0x1a8]
test eax, eax
je 0x503658
mov dword [ebp - 4], 0x5a
push 0x64
call fcn.00415d5c
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x5c
cmp dword [ebp - 0x38], 0
je 0x5036b4
mov ecx, dword [ebp - 0x38]
cmp word [ecx], 1
jne 0x5036b4
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x88]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x1a8], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x1a8]
cmp edx, dword [ecx + 0x10]
jae 0x50369a
mov dword [ebp - 0x2e4], 0
jmp 0x5036a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x2e8], eax
jmp 0x5036c0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2e8], eax
mov ecx, dword [ebp - 0x38]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x2e8]
xor ecx, ecx
mov cl, byte [edx + eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromAnsi]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
cmp dword [0x540278], 0
jne 0x50370d
push 0x540278
push 0x4093e4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x2ec], 0x540278
jmp 0x503717
mov dword [ebp - 0x2ec], 0x540278
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0xb8]
mov dword [edx], eax
mov ecx, dword [ebp - 0xb4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0xb0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0xac]
mov dword [edx + 0xc], ecx
push 0x19
mov edx, dword [ebp - 0x2ec]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2ec]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x318]
push eax
lea edx, [ebp - 0xa0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x5d
jmp 0x5035b4
mov dword [ebp - 4], 0x5e
push 0x1f4
call fcn.00415d5c
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x5f
cmp dword [0x540278], 0
jne 0x5037dd
push 0x540278
push 0x4093e4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x2f0], 0x540278
jmp 0x5037e7
mov dword [ebp - 0x2f0], 0x540278
push 0
push 0x1a
mov eax, dword [ebp - 0x2f0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2f0]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x318]
push eax
lea eax, [ebp - 0xa0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x60
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x148], 0xb
cmp dword [0x540278], 0
jne 0x50387a
push 0x540278
push 0x4093e4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x2f4], 0x540278
jmp 0x503884
mov dword [ebp - 0x2f4], 0x540278
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x148]
mov dword [edx], eax
mov ecx, dword [ebp - 0x144]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x140]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x13c]
mov dword [edx + 0xc], ecx
push 0x14
mov edx, dword [ebp - 0x2f4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x318]
push eax
lea edx, [ebp - 0xa0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x61
mov dword [ebp - 0x140], 0x418c6c
mov dword [ebp - 0x148], 8
push 1
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x148]
push ecx
push 0
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x62
cmp dword [ebp - 0x4c], 0
jle 0x503b28
mov dword [ebp - 4], 0x63
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0xb8], 2
lea eax, [ebp - 0xb8]
push eax
mov ecx, dword [ebp - 0x4c]
add ecx, 3
jo 0x5040f7
push ecx
lea edx, [ebp - 0x5c]
push edx
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov word [ebp - 0x150], ax
mov dword [ebp - 0x158], 2
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x64
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0xb8], 2
lea edx, [ebp - 0xb8]
push edx
mov eax, dword [ebp - 0x4c]
add eax, 4
jo 0x5040f7
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0xc8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov word [ebp - 0x150], ax
mov dword [ebp - 0x158], 2
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x65
mov dword [ebp - 0x140], 0x100
mov dword [ebp - 0x148], 2
lea ecx, [ebp - 0x148]
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0xc8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x66
mov eax, dword [ebp - 0x64]
add eax, dword [ebp + 8]
jo 0x5040f7
cmp dword [ebp - 0x8c], eax
jg 0x503b26
mov dword [ebp - 4], 0x67
mov word [ebp - 0x7c], 0xffff
mov dword [ebp - 4], 0x68
mov ecx, dword [ebp - 0x8c]
mov dword [0x540170], ecx
jmp 0x503b5d
mov dword [ebp - 4], 0x6b
call fcn.005054f0
mov dword [ebp - 4], 0x6c
call fcn.00501920
mov edx, dword [ebp - 0x64]
sub edx, dword [ebp + 8]
jo 0x5040f7
cmp eax, edx
jne 0x503b5d
mov dword [ebp - 4], 0x6d
mov word [ebp - 0x7c], 0xffff
mov dword [ebp - 4], 0x71
cmp word [ebp - 0x7c], 0xffff
jne 0x503c8e
mov dword [ebp - 4], 0x72
cmp dword [0x540180], 0
jne 0x503b9b
push 0x540180
push 0x40854c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x2f8], 0x540180
jmp 0x503ba5
mov dword [ebp - 0x2f8], 0x540180
mov eax, dword [ebp - 0x2f8]
mov ecx, dword [eax]
mov dword [ebp - 0x1a8], ecx
lea edx, [ebp - 0xa0]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1a8]
push edx
call dword [ecx + 0x6f8]
fnclex
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jge 0x503c06
push 0x6f8
push 0x415e1c
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2fc], eax
jmp 0x503c10
mov dword [ebp - 0x2fc], 0
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x1a0], eax
lea ecx, [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x1b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1b0]
push ecx
call dword [eax + 0x9c]
fnclex
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jge 0x503c78
push 0x9c
push 0x415ebc
mov edx, dword [ebp - 0x1b0]
push edx
mov eax, dword [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x300], eax
jmp 0x503c82
mov dword [ebp - 0x300], 0
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x74
cmp dword [0x5400bc], 0
jne 0x503cba
push 0x5400bc
push 0x40a988
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x304], 0x5400bc
jmp 0x503cc4
mov dword [ebp - 0x304], 0x5400bc
push 0x416e24
push 0
push 3
mov ecx, dword [ebp - 0x304]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x304]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0xa0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x130], 4
mov dword [ebp - 0x138], 2
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0x138]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1a8]
push edx
call dword [ecx + 0x24]
fnclex
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jge 0x503d88
push 0x24
push 0x416e24
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x1ac]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x308], eax
jmp 0x503d92
mov dword [ebp - 0x308], 0
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x1b0], edx
push 0x418c78
mov eax, dword [0x540170]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x418c90
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xe8], 8
mov dword [ebp - 0x160], 0x415da0
mov dword [ebp - 0x168], 8
lea edx, [ebp - 0x168]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dword [ebp - 0x150], 0x415d90
mov dword [ebp - 0x158], 8
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
xor ecx, ecx
cmp word [0x540150], 0xffff
sete cl
neg ecx
mov word [ebp - 0x140], cx
mov dword [ebp - 0x148], 0xb
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x148]
push ecx
lea edx, [ebp - 0xd8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcImmediateIf]
mov dword [ebp - 0x170], 0x418cb4
mov dword [ebp - 0x178], 8
mov eax, dword [0x54015c]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 3
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x178]
push ecx
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x98]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
mov eax, dword [ebp - 0x1b0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1b0]
push edx
call dword [ecx + 0x20]
fnclex
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jge 0x503f3f
push 0x20
push 0x416e34
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, dword [ebp - 0x1b4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x30c], eax
jmp 0x503f49
mov dword [ebp - 0x30c], 0
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x10
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x148]
push edx
push 0xa
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x2c
wait
push 0x5040db
jmp 0x504077
lea ecx, [ebp - 0x1c0]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x34]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea eax, [ebp - 0x38]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x80]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x84]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
ret
jmp 0x4070ac
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3