Function at 0x43ae10
Capabilities:
Query or enumerate registry value via stdregprov

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402df6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x24c
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x402850
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x188], ebx
mov dword [ebp - 0x1a8], ebx
mov dword [ebp - 0x1c8], ebx
mov dword [ebp - 0x1e8], ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x210], ebx
mov dword [ebp - 0x214], ebx
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x21c], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 0x44], 1
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xa8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcUpperCaseVar]
mov dword [ebp - 0x100], 0x40fdb0
mov dword [ebp - 0x108], 8
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x118], 0x8002
push 1
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x108]
push eax
push ebx
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov si, ax
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
mov edi, 2
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp si, bx
je 0x43b035
mov dword [ebp - 0x100], 0x20
mov dword [ebp - 0x108], edi
lea edx, [ebp - 0x108]
mov ecx, dword [ebp + 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaVargVarMove]
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x20c], ebx
mov edx, 0x40fdc8
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x210]
push ecx
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00421c60
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
jmp 0x43b18a
mov ecx, dword [0x4540a4]
push ecx
push 0x406f6c
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
call esi
test eax, eax
jne 0x43b052
call fcn.0044cf90
mov dword [ebp - 0x44], edi
mov edx, dword [0x4540a4]
push edx
push 0x40cb38
call esi
test eax, eax
jne 0x43b08b
mov dword [ebp - 0x21c], ebx
lea eax, [ebp - 0x21c]
push eax
call fcn.00406bd8
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 0x100], 0x40
jmp 0x43b095
mov dword [ebp - 0x100], 0x20
mov dword [ebp - 0x108], edi
lea edx, [ebp - 0x108]
mov ecx, dword [ebp + 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaVargVarMove]
mov dword [ebp - 0x218], ebx
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x20c], ebx
mov dword [ebp - 0x100], 0x40fe30
mov eax, 8
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x120], 0x40fec0
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x118]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
call esi
push eax
lea edx, [ebp - 0xa8]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x218]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x210]
push ecx
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x88]
push eax
call fcn.00421c60
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xa8]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov eax, dword [ebp + 0xc]
push eax
lea ecx, [ebp - 0xa8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
push 1
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov dword [ebp - 0x100], 0x40a59c
mov dword [ebp - 0x108], 0x8008
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x220], ax
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0x220], bx
je 0x43b23d
mov dword [ebp - 0x100], 0x40a59c
mov dword [ebp - 0x108], 8
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x118]
call esi
push eax
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0xa8]
push eax
call edi
mov edx, eax
mov ecx, dword [ebp + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaVargVarMove]
mov dword [ebp - 0x44], 3
push ebx
push 0x40caf0
lea ecx, [ebp - 0xa8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x40]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarSetVar]
call ebx
mov dword [ebp - 0x44], 4
mov eax, 0x40cb44
mov dword [ebp - 0x100], eax
mov ecx, 8
mov dword [ebp - 0x108], ecx
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp + 0x14]
lea edx, [ebp - 0x248]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVargVar]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
push 2
push 0x40cb74
lea ecx, [ebp - 0x40]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x2c
mov dword [ebp - 0x44], 5
push 0
push 0x40cba4
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x64]
push ecx
call ebx
mov dword [ebp - 0x44], 6
mov eax, 0x40cc1c
mov ecx, 8
mov dword [ebp - 0x100], 0x406f6c
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x120], 0x40cbe0
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x140], 0x406f6c
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x160], 0x406f6c
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x1c0], 0x80020004
mov dword [ebp - 0x1c8], 0xa
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x1f4]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x1ec]
mov dword [edx + 0xc], eax
push 1
push 0x40cc34
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x108]
mov dword [ecx], edx
mov eax, dword [ebp - 0x104]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x100]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0xfc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x128]
mov dword [ecx], edx
mov eax, dword [ebp - 0x124]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x120]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x11c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x148]
mov dword [ecx], edx
mov eax, dword [ebp - 0x144]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x140]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x13c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x168]
mov dword [ecx], edx
mov eax, dword [ebp - 0x164]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x160]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x15c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, 0xa
mov dword [ecx], eax
mov edx, dword [ebp - 0x184]
mov dword [ecx + 4], edx
mov eax, 0x80020004
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x17c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, 0xa
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a4]
mov dword [ecx + 4], edx
mov eax, 0x80020004
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x19c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x1c8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1c4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1c0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1bc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, 0x400c
mov dword [ecx], eax
mov edx, dword [ebp - 0x1e4]
mov dword [ecx + 4], edx
lea eax, [ebp - 0x40]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ecx + 0xc], eax
push 8
push 0x40cbfc
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLdRf]
add esp, 0x90
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x20
push eax
lea ecx, [ebp - 0x2c]
push ecx
call ebx
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0x44], 7
mov eax, 0x40cd40
mov dword [ebp - 0x100], eax
mov ecx, 8
mov dword [ebp - 0x108], ecx
push 0
push 0x40cc64
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0xc], eax
push 1
push 0x40cc50
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLdRf]
add esp, 0x20
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
lea ecx, [ebp - 0x54]
push ecx
call ebx
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0x44], 8
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x118]
call esi
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
push 0x40cc80
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemSt]
mov dword [ebp - 0x44], 9
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x118]
call esi
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
push 0x40ccfc
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemSt]
mov dword [ebp - 0x44], 0xa
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x118]
call esi
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
push 0x40cdec
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemSt]
mov dword [ebp - 0x44], 0xb
mov eax, 0x40cd40
mov dword [ebp - 0x100], eax
mov ecx, 8
mov dword [ebp - 0x108], ecx
lea edx, [ebp - 0x54]
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x128], 0x400c
mov dword [ebp - 0x130], 0x80020004
mov dword [ebp - 0x138], 0xa
lea edx, [ebp - 0x40]
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x158], 0x400c
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x128]
mov dword [ecx], edx
mov eax, dword [ebp - 0x124]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x120]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x11c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x138]
mov dword [ecx], edx
mov eax, dword [ebp - 0x134]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x130]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x12c]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x158]
mov dword [ecx], edx
mov eax, dword [ebp - 0x154]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x150]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x14c]
mov dword [ecx + 0xc], eax
push 4
push 0x40cd14
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x50
push eax
lea eax, [ebp - 0x74]
push eax
call ebx
mov dword [ebp - 0x44], 0xc
push 0
push 0x40ce04
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLdRf]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcIsNull]
not eax
mov word [ebp - 0x220], ax
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
xor edx, edx
cmp word [ebp - 0x220], dx
je 0x43b935
mov dword [ebp - 0x218], edx
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x20c], edx
mov dword [ebp - 0x100], 0x40fecc
mov eax, 8
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x120], 0x40fefc
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x140], 0x40ad38
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x160], 0x40a3d4
mov dword [ebp - 0x168], eax
lea eax, [ebp - 0x108]
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x118]
call esi
push eax
lea ecx, [ebp - 0xa8]
push ecx
call edi
push eax
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0xb8]
push eax
call edi
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x138]
call esi
push eax
lea ecx, [ebp - 0xc8]
push ecx
call edi
push eax
lea edx, [ebp - 0x148]
push edx
lea eax, [ebp - 0xd8]
push eax
call edi
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x158]
call esi
push eax
lea ecx, [ebp - 0xe8]
push ecx
call edi
push eax
lea edx, [ebp - 0x168]
push edx
lea eax, [ebp - 0xf8]
push eax
call edi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call ebx
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.00421c60
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xa8]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0
push 0x40ce04
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0xa8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x2c
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x30]
call ebx
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x43bdf6
mov eax, 0x40ff18
mov dword [ebp - 0x100], eax
mov ecx, 8
mov dword [ebp - 0x108], ecx
push edx
push 0x40cc64
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0xc], eax
push 1
push 0x40cc50
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLdRf]
add esp, 0x20
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
lea ecx, [ebp - 0x54]
push ecx
call ebx
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0x44], 8
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x118]
call esi
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
push 0x40cc80
lea ecx, [ebp - 0x54]
push ecx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemSt]
call ebx
mov dword [ebp - 0x44], 9
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x118]
call esi
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
push 0x40ccfc
lea ecx, [ebp - 0x54]
push ecx
call ebx
mov dword [ebp - 0x44], 0xa
mov ebx, dword [ebp + 0x10]
mov edx, ebx
lea ecx, [ebp - 0x118]
call esi
sub esp, 0x10
mov edx, esp
mov ecx, dword [eax]
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
push 0x40cdec
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemSt]
mov dword [ebp - 0x44], 0xb
xor eax, eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x100], 0x40fb4c
mov eax, 8
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x120], 0x40fefc
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x140], 0x40ad38
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x160], 0x40a3d4
mov dword [ebp - 0x168], eax
lea edx, [ebp - 0x108]
push edx
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x118]
call esi
push eax
lea eax, [ebp - 0xa8]
push eax
call edi
push eax
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp - 0xb8]
push edx
call edi
push eax
mov edx, ebx
lea ecx, [ebp - 0x138]
call esi
push eax
lea eax, [ebp - 0xc8]
push eax
call edi
push eax
lea ecx, [ebp - 0x148]
push ecx
lea edx, [ebp - 0xd8]
push edx
call edi
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x158]
call esi
push eax
lea eax, [ebp - 0xe8]
push eax
call edi
push eax
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0xf8]
push edx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x214]
push ecx
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x88]
push ecx
call fcn.00421c60
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xa8]
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 0x80000002
mov dword [ebp - 0x100], eax
mov ecx, 3
mov dword [ebp - 0x108], ecx
lea edx, [ebp - 0x84]
mov dword [ebp - 0x120], edx
mov dword [ebp - 0x128], 0x400c
add esp, 0xc
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x104]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xfc]
mov dword [edx + 0xc], eax
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x258]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVargVar]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
mov ecx, ebx
lea edx, [ebp - 0x268]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVargVar]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x128]
mov dword [ecx], edx
mov eax, dword [ebp - 0x124]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x120]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x11c]
mov dword [ecx + 0xc], eax
push 4
push 0x40fd38
lea ecx, [ebp - 0x2c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x4c
mov dword [ebp - 0x44], 0xc
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcIsNull]
test ax, ax
jne 0x43bcd9
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x43bdf6
xor eax, eax
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x100], 0x40ff38
mov eax, 8
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x120], 0x409c4c
mov dword [ebp - 0x128], eax
lea ecx, [ebp - 0x108]
push ecx
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x118]
call esi
push eax
lea edx, [ebp - 0xa8]
push edx
call edi
push eax
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0xb8]
push ecx
call edi
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x138]
call esi
push eax
lea edx, [ebp - 0xc8]
push edx
call edi
push eax
mov edx, ebx
lea ecx, [ebp - 0x148]
call esi
push eax
lea eax, [ebp - 0xd8]
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x88]
push edx
call fcn.00421c60
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0xa8]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov edx, 0x406f6c
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0
lea ecx, [ebp - 0x40]
push ecx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarSetObjAddref]
call edi
push 0
lea edx, [ebp - 0x64]
push edx
call edi
mov dword [ebp - 0x100], 0x40
mov dword [ebp - 0x108], 0x8002
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x118]
call esi
push eax
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43c05a
mov dword [ebp - 0x21c], 1
lea ecx, [ebp - 0x21c]
push ecx
jmp 0x43c04f
call fcn.00406bd8
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call dword [fcn.004010b8]
push 0x43c107
jmp 0x43c0df
lea ecx, [ebp - 0x2c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
call esi
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x54]
call esi
lea ecx, [ebp - 0x64]
call esi
lea ecx, [ebp - 0x74]
call esi
lea ecx, [ebp - 0x84]
call esi
ret