Function at 0x465810
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x404076
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x270
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x403c78
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 2
push 0x41ff7c
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41ff98
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41ff7c
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41ff98
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x41ff7c
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTypeName]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0x100]
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x198]
push eax
push 0x41fee4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x465947
mov dword [ebp - 4], 6
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x465f38
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41fef8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4659ac
mov dword [ebp - 4], 8
push 0
push 0x41d230
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x465f38
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41fbd8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x465bcd
mov dword [ebp - 4], 0xa
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x19c]
push eax
push 0x41b704
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov dword [ebp - 0x1f4], eax
jmp 0x465b4c
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0x413448
mov dword [ebp - 0x154], 0x8008
push 0
push 0x41d230
mov ecx, dword [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x18c]
test ecx, ecx
je 0x465b26
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 8
mov dword [ebp - 0x15c], 0x41fbec
mov dword [ebp - 0x164], 8
lea eax, [ebp - 0x154]
push eax
push 0
push 0x41d230
mov ecx, dword [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x19c]
push ecx
push 0x41b704
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jne 0x465a0f
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4008
mov eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x467581
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x465f38
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41f78c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x465e88
mov dword [ebp - 4], 0x11
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a0], 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xc8], ax
jmp 0x465c63
mov ax, word [ebp - 0xc8]
add ax, word [ebp - 0x1a0]
jo 0x467581
mov word [ebp - 0xc8], ax
mov cx, word [ebp - 0xc8]
cmp cx, word [ebp - 0x1a4]
jg 0x465e14
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x15c], 0x413448
mov dword [ebp - 0x164], 0x8008
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov edx, dword [ebp - 0x150]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x148]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x18c]
test eax, eax
je 0x465e08
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x16c], 0x41fbec
mov dword [ebp - 0x174], 8
lea eax, [ebp - 0x164]
push eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x154]
mov dword [ecx], edx
mov eax, dword [ebp - 0x150]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x14c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x148]
mov dword [ecx + 0xc], eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x15
jmp 0x465c48
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
mov ecx, dword [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x467581
push eax
lea edx, [ebp - 0x154]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x465f38
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x13c], 0x80020004
mov dword [ebp - 0x144], 0xa
mov dword [ebp - 0x12c], 0x80020004
mov dword [ebp - 0x134], 0xa
mov dword [ebp - 0x11c], 0x80020004
mov dword [ebp - 0x124], 0xa
mov edx, dword [ebp - 0x100]
push edx
push 0x41ff0c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 8
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x124]
push edx
push 0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x1a
mov edx, dword [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xb4], ax
mov dword [ebp - 4], 0x1b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0x11
jae 0x465fa0
mov dword [ebp - 0x1f8], 0
jmp 0x465fac
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x2e
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18c], 2
cmp dword [ebp - 0x18c], 0x11
jae 0x465fe1
mov dword [ebp - 0x1fc], 0
jmp 0x465fed
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x59
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18c], 3
cmp dword [ebp - 0x18c], 0x11
jae 0x466022
mov dword [ebp - 0x200], 0
jmp 0x46602e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x8e
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x18c], 4
cmp dword [ebp - 0x18c], 0x11
jae 0x466063
mov dword [ebp - 0x204], 0
jmp 0x46606f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x3f
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18c], 5
cmp dword [ebp - 0x18c], 0x11
jae 0x4660a4
mov dword [ebp - 0x208], 0
jmp 0x4660b0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xe7
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x18c], 6
cmp dword [ebp - 0x18c], 0x11
jae 0x4660e5
mov dword [ebp - 0x20c], 0
jmp 0x4660f1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x20
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18c], 7
cmp dword [ebp - 0x18c], 0x11
jae 0x466126
mov dword [ebp - 0x210], 0
jmp 0x466132
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x81
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x18c], 8
cmp dword [ebp - 0x18c], 0x11
jae 0x466167
mov dword [ebp - 0x214], 0
jmp 0x466173
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x33
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18c], 9
cmp dword [ebp - 0x18c], 0x11
jae 0x4661a8
mov dword [ebp - 0x218], 0
jmp 0x4661b4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x1c
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x18c], 0xa
cmp dword [ebp - 0x18c], 0x11
jae 0x4661e9
mov dword [ebp - 0x21c], 0
jmp 0x4661f5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x61
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18c], 0xb
cmp dword [ebp - 0x18c], 0x11
jae 0x46622a
mov dword [ebp - 0x220], 0
jmp 0x466236
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xf8
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x18c], 0xc
cmp dword [ebp - 0x18c], 0x11
jae 0x46626b
mov dword [ebp - 0x224], 0
jmp 0x466277
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x29
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18c], 0xd
cmp dword [ebp - 0x18c], 0x11
jae 0x4662ac
mov dword [ebp - 0x228], 0
jmp 0x4662b8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x88
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x18c], 0xe
cmp dword [ebp - 0x18c], 0x11
jae 0x4662ed
mov dword [ebp - 0x22c], 0
jmp 0x4662f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x35
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18c], 0xf
cmp dword [ebp - 0x18c], 0x11
jae 0x46632e
mov dword [ebp - 0x230], 0
jmp 0x46633a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x4e
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x18c], 0x10
cmp dword [ebp - 0x18c], 0x11
jae 0x46636f
mov dword [ebp - 0x234], 0
jmp 0x46637b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0xa4
mov dword [ebp - 4], 0x2c
mov word [ebp - 0xc0], 0
mov dword [ebp - 4], 0x2d
mov word [ebp - 0x1ac], 0x200
mov word [ebp - 0x1a8], 1
mov word [ebp - 0xb8], 0
jmp 0x4663d9
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1a8]
jo 0x467581
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1ac]
jg 0x466444
mov dword [ebp - 4], 0x2e
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x466415
mov dword [ebp - 0x238], 0
jmp 0x466421
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov ax, word [ebp - 0xb8]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x2f
jmp 0x4663be
mov dword [ebp - 4], 0x30
mov word [ebp - 0x1b4], 0x200
mov word [ebp - 0x1b0], 1
mov word [ebp - 0xb8], 0
jmp 0x466483
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1b0]
jo 0x467581
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1b4]
jg 0x4665f4
mov dword [ebp - 4], 0x31
mov ax, word [ebp - 0xc0]
add ax, word [ebp - 0xb8]
jo 0x467581
and ax, 0xff
jns 0x4664c0
dec ax
or ax, 0xff00
inc ax
mov word [ebp - 0xc0], ax
mov dword [ebp - 4], 0x32
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x4664f3
mov dword [ebp - 0x23c], 0
jmp 0x4664ff
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [eax + edx*2]
mov word [ebp - 0x54], cx
mov dword [ebp - 4], 0x33
movsx edx, word [ebp - 0xc0]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x46653f
mov dword [ebp - 0x240], 0
jmp 0x46654b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x466570
mov dword [ebp - 0x244], 0
jmp 0x46657c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x190]
mov esi, dword [ebp - 0x9c]
mov ax, word [esi + eax*2]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x34
movsx ecx, word [ebp - 0xc0]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x4665c8
mov dword [ebp - 0x248], 0
jmp 0x4665d4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [ebp - 0x54]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x35
jmp 0x466468
mov dword [ebp - 4], 0x36
mov edx, dword [ebp + 0x10]
cmp word [edx], 1
jne 0x4667cd
mov dword [ebp - 4], 0x37
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x38
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x14c], 0x4176cc
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x114]
push eax
push 0x10
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x3a
mov word [ebp - 0x1bc], 0x200
mov word [ebp - 0x1b8], 1
mov word [ebp - 0xb8], 0
jmp 0x4666d8
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1b8]
jo 0x467581
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1bc]
jg 0x4667c8
mov dword [ebp - 4], 0x3b
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x466718
mov dword [ebp - 0x24c], 0
jmp 0x466724
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
movsx ecx, word [eax + edx*2]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x201
jae 0x466752
mov dword [ebp - 0x250], 0
jmp 0x46675e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov dx, word [ebp - 0xe8]
add dx, 0x30
jo 0x467581
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x64]
mov word [ecx + eax*2], dx
mov dword [ebp - 4], 0x3c
mov dx, word [ebp - 0xe8]
add dx, 1
jo 0x467581
mov word [ebp - 0xe8], dx
mov dword [ebp - 4], 0x3d
cmp word [ebp - 0xe8], 0xa
jne 0x4667bc
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x40
jmp 0x4666bd
jmp 0x466b40
mov dword [ebp - 4], 0x41
mov eax, dword [ebp + 0x10]
cmp word [eax], 2
jne 0x466abf
mov dword [ebp - 4], 0x42
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x43
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x44
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x14c], 0x4176cc
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x10
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x46
mov word [ebp - 0xc4], 0
mov dword [ebp - 4], 0x47
mov word [ebp - 0x1c4], 0x200
mov word [ebp - 0x1c0], 1
mov word [ebp - 0xb8], 0
jmp 0x4668ce
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1c0]
jo 0x467581
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1c4]
jg 0x466aba
mov dword [ebp - 4], 0x48
movsx edx, word [ebp - 0xc4]
test edx, edx
je 0x4669dd
mov dword [ebp - 4], 0x49
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x466924
mov dword [ebp - 0x254], 0
jmp 0x466930
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
movsx eax, word [edx + ecx*2]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x201
jae 0x46695e
mov dword [ebp - 0x258], 0
jmp 0x46696a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov cx, word [ebp - 0xe8]
add cx, 0x30
jo 0x467581
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x64]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x4a
mov cx, word [ebp - 0xe8]
add cx, 1
jo 0x467581
mov word [ebp - 0xe8], cx
mov dword [ebp - 4], 0x4b
cmp word [ebp - 0xe8], 0xa
jne 0x4669c8
mov dword [ebp - 4], 0x4c
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x4e
mov word [ebp - 0xc4], 0
jmp 0x466aae
mov dword [ebp - 4], 0x50
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x201
jae 0x466a09
mov dword [ebp - 0x25c], 0
jmp 0x466a15
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x9c]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x466a43
mov dword [ebp - 0x260], 0
jmp 0x466a4f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov ax, word [ebp - 0x28]
add ax, 0x41
jo 0x467581
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x64]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x51
mov ax, word [ebp - 0x28]
add ax, 1
jo 0x467581
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0x52
cmp word [ebp - 0x28], 0x1a
jne 0x466a9e
mov dword [ebp - 4], 0x53
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x55
mov word [ebp - 0xc4], 0xffff
mov dword [ebp - 4], 0x57
jmp 0x4668b3
jmp 0x466b40
mov dword [ebp - 4], 0x59
mov word [ebp - 0x48], 8
mov dword [ebp - 4], 0x5a
mov dword [ebp - 0x14c], 0x4176cc
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x13
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5c
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x5d
mov ax, word [ebp - 0xb4]
mov word [ebp - 0x1cc], ax
mov word [ebp - 0x1c8], 1
mov word [ebp - 0xb8], 1
jmp 0x466b94
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1c8]
jo 0x467581
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1cc]
jg 0x466d64
mov dword [ebp - 4], 0x5e
movsx eax, word [ebp - 0xf8]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x11
jae 0x466bd1
mov dword [ebp - 0x264], 0
jmp 0x466bdd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x154], 0x4008
lea edx, [ebp - 0x114]
push edx
movsx eax, word [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx eax, word [ebp - 0xf8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x466c4c
mov dword [ebp - 0x268], 0
jmp 0x466c58
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0xd4]
mov cx, word [edx + ecx*2]
add cx, ax
jo 0x467581
xor cx, 0x12
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0xd4]
mov word [eax + edx*2], cx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5f
movsx eax, word [ebp - 0xf8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x466cee
mov dword [ebp - 0x26c], 0
jmp 0x466cfa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0xd4]
mov ax, word [ebp - 0x4c]
add ax, word [edx + ecx*2]
jo 0x467581
mov word [ebp - 0x4c], ax
mov dword [ebp - 4], 0x60
mov cx, word [ebp - 0xf8]
add cx, 1
jo 0x467581
mov word [ebp - 0xf8], cx
mov dword [ebp - 4], 0x61
cmp word [ebp - 0xf8], 9
jne 0x466d58
mov dword [ebp - 4], 0x62
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x64
jmp 0x466b79
mov dword [ebp - 4], 0x65
mov dx, word [ebp - 0x24]
mov word [ebp - 0x1d4], dx
mov word [ebp - 0x1d0], 1
mov word [ebp - 0xb8], 1
jmp 0x466da5
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1d0]
jo 0x467581
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1d4]
jg 0x466f69
mov dword [ebp - 4], 0x66
movsx edx, word [ebp - 0xf8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x466de2
mov dword [ebp - 0x270], 0
jmp 0x466dee
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
lea ecx, [ebp - 0x114]
push ecx
movsx edx, word [ebp - 0xb8]
push edx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx edx, word [ebp - 0xf8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x11
jae 0x466e5a
mov dword [ebp - 0x274], 0
jmp 0x466e66
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x80]
mov dx, word [ecx + edx*2]
add dx, ax
jo 0x467581
xor dx, 0x19
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x80]
mov word [ecx + eax*2], dx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x114]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x67
movsx ecx, word [ebp - 0xf8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x466ef6
mov dword [ebp - 0x278], 0
jmp 0x466f02
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x58]
add cx, word [eax + edx*2]
jo 0x467581
mov word [ebp - 0x58], cx
mov dword [ebp - 4], 0x68
mov dx, word [ebp - 0xf8]
add dx, 1
jo 0x467581
mov word [ebp - 0xf8], dx
mov dword [ebp - 4], 0x69
cmp word [ebp - 0xf8], 9
jne 0x466f5d
mov dword [ebp - 4], 0x6a
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x6c
jmp 0x466d8a
mov dword [ebp - 4], 0x6d
mov ax, word [ebp - 0x4c]
add ax, word [ebp - 0x58]
jo 0x467581
and ax, 0x1ff
jns 0x466f8c
dec ax
or ax, 0xfe00
inc ax
mov word [ebp - 0xb0], ax
mov dword [ebp - 4], 0x6e
mov word [ebp - 0xf8], 1
mov dword [ebp - 4], 0x6f
mov word [ebp - 0xf0], 1
mov dword [ebp - 4], 0x70
mov cx, word [ebp - 0x48]
mov word [ebp - 0x1dc], cx
mov word [ebp - 0x1d8], 1
mov word [ebp - 0xb8], 1
jmp 0x466ff4
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1d8]
jo 0x467581
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1dc]
jg 0x46743a
mov dword [ebp - 4], 0x71
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x11
jae 0x467031
mov dword [ebp - 0x27c], 0
jmp 0x46703d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0x11
jae 0x46705f
mov dword [ebp - 0x280], 0
jmp 0x46706b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x280], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x46708d
mov dword [ebp - 0x284], 0
jmp 0x467099
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x194]
mov esi, dword [ebp - 0x34]
mov cx, word [edx + ecx*2]
xor cx, word [esi + eax*2]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x72
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x4670e9
mov dword [ebp - 0x288], 0
jmp 0x4670f5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x467117
mov dword [ebp - 0x28c], 0
jmp 0x467123
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x190]
mov esi, dword [ebp - 0x80]
mov ax, word [ecx + eax*2]
xor ax, word [esi + edx*2]
mov cx, ax
and cx, 0x1ff
jns 0x467153
dec cx
or cx, 0xfe00
inc cx
sub cx, word [ebp - 0xb0]
jo 0x467581
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
mov word [ebp - 0xec], ax
mov dword [ebp - 4], 0x73
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 3
jne 0x467391
mov dword [ebp - 4], 0x74
cmp word [ebp - 0xec], 0x10
jge 0x467249
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x15c], 0x413438
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xec]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xf8]
push eax
push 2
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x4672c4
mov dword [ebp - 4], 0x77
lea eax, [ebp - 0xec]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4002
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0x50]
push eax
movsx ecx, word [ebp - 0xf8]
push ecx
push 2
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x79
cmp word [ebp - 0xf0], 2
jne 0x46732d
cmp word [ebp - 0xf8], 0x12
jge 0x46732d
mov dword [ebp - 4], 0x7a
mov ax, word [ebp - 0xf8]
add ax, 1
jo 0x467581
mov word [ebp - 0xf8], ax
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x50]
push ecx
mov dx, word [ebp - 0xf8]
add dx, 1
jo 0x467581
movsx eax, dx
push eax
push 1
push 0x4176d4
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
mov dword [ebp - 4], 0x7d
mov cx, word [ebp - 0xf8]
add cx, 2
jo 0x467581
mov word [ebp - 0xf8], cx
mov dword [ebp - 4], 0x7e
mov dx, word [ebp - 0xf0]
add dx, 1
jo 0x467581
mov word [ebp - 0xf0], dx
mov dword [ebp - 4], 0x7f
cmp word [ebp - 0xf0], 3
jne 0x46738c
mov dword [ebp - 4], 0x80
mov word [ebp - 0xf0], 1
jmp 0x46742e
mov dword [ebp - 4], 0x83
movsx eax, word [ebp - 0xec]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x4673bd
mov dword [ebp - 0x290], 0
jmp 0x4673c9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx + ecx*2]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xb8]
push eax
push 1
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x85
jmp 0x466fd9
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0xf4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x467568
jmp 0x4674a1
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x19c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x178], ecx
lea edx, [ebp - 0x178]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x8c]
mov dword [ebp - 0x180], edx
lea eax, [ebp - 0x180]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x184], ecx
lea edx, [ebp - 0x184]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x188], eax
lea ecx, [ebp - 0x188]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3