Function at 0x438330
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x402086
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x270
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401e38
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 2
push 0x406460
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x40647c
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x406460
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x40647c
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x406460
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTypeName]
mov edx, eax
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x198]
push eax
push 0x40638c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x438467
mov dword [ebp - 4], 6
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x438a58
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x198]
push ecx
push 0x4063a0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4384cc
mov dword [ebp - 4], 8
push 0
push 0x4063b0
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x438a58
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x198]
push ecx
push 0x4063c0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4386ed
mov dword [ebp - 4], 0xa
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x19c]
push eax
push 0x404f94
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov dword [ebp - 0x1f4], eax
jmp 0x43866c
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0x404d3c
mov dword [ebp - 0x154], 0x8008
push 0
push 0x4063b0
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x18c]
test ecx, ecx
je 0x438646
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 8
mov dword [ebp - 0x15c], 0x4063d4
mov dword [ebp - 0x164], 8
lea eax, [ebp - 0x154]
push eax
push 0
push 0x4063b0
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x19c]
push ecx
push 0x404f94
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jne 0x43852f
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4008
mov eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x43a0a1
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x438a58
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x198]
push ecx
push 0x4063dc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x4389a8
mov dword [ebp - 4], 0x11
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a0], 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xc8], ax
jmp 0x438783
mov ax, word [ebp - 0xc8]
add ax, word [ebp - 0x1a0]
jo 0x43a0a1
mov word [ebp - 0xc8], ax
mov cx, word [ebp - 0xc8]
cmp cx, word [ebp - 0x1a4]
jg 0x438934
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x15c], 0x404d3c
mov dword [ebp - 0x164], 0x8008
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov edx, dword [ebp - 0x150]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x148]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x18c]
test eax, eax
je 0x438928
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x16c], 0x4063d4
mov dword [ebp - 0x174], 8
lea eax, [ebp - 0x164]
push eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x154]
mov dword [ecx], edx
mov eax, dword [ebp - 0x150]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x14c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x148]
mov dword [ecx + 0xc], eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x15
jmp 0x438768
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
mov ecx, dword [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x43a0a1
push eax
lea edx, [ebp - 0x154]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x438a58
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x13c], 0x80020004
mov dword [ebp - 0x144], 0xa
mov dword [ebp - 0x12c], 0x80020004
mov dword [ebp - 0x134], 0xa
mov dword [ebp - 0x11c], 0x80020004
mov dword [ebp - 0x124], 0xa
mov edx, dword [ebp - 0xfc]
push edx
push 0x4063f4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 8
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x124]
push edx
push 0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x1a
mov edx, dword [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xb4], ax
mov dword [ebp - 4], 0x1b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0x11
jae 0x438ac0
mov dword [ebp - 0x1f8], 0
jmp 0x438acc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x2e
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18c], 2
cmp dword [ebp - 0x18c], 0x11
jae 0x438b01
mov dword [ebp - 0x1fc], 0
jmp 0x438b0d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x59
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18c], 3
cmp dword [ebp - 0x18c], 0x11
jae 0x438b42
mov dword [ebp - 0x200], 0
jmp 0x438b4e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x8e
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x18c], 4
cmp dword [ebp - 0x18c], 0x11
jae 0x438b83
mov dword [ebp - 0x204], 0
jmp 0x438b8f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x3f
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18c], 5
cmp dword [ebp - 0x18c], 0x11
jae 0x438bc4
mov dword [ebp - 0x208], 0
jmp 0x438bd0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xe7
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x18c], 6
cmp dword [ebp - 0x18c], 0x11
jae 0x438c05
mov dword [ebp - 0x20c], 0
jmp 0x438c11
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x20
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18c], 7
cmp dword [ebp - 0x18c], 0x11
jae 0x438c46
mov dword [ebp - 0x210], 0
jmp 0x438c52
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x81
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x18c], 8
cmp dword [ebp - 0x18c], 0x11
jae 0x438c87
mov dword [ebp - 0x214], 0
jmp 0x438c93
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x33
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18c], 9
cmp dword [ebp - 0x18c], 0x11
jae 0x438cc8
mov dword [ebp - 0x218], 0
jmp 0x438cd4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x1c
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x18c], 0xa
cmp dword [ebp - 0x18c], 0x11
jae 0x438d09
mov dword [ebp - 0x21c], 0
jmp 0x438d15
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x61
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18c], 0xb
cmp dword [ebp - 0x18c], 0x11
jae 0x438d4a
mov dword [ebp - 0x220], 0
jmp 0x438d56
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xf8
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x18c], 0xc
cmp dword [ebp - 0x18c], 0x11
jae 0x438d8b
mov dword [ebp - 0x224], 0
jmp 0x438d97
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x29
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18c], 0xd
cmp dword [ebp - 0x18c], 0x11
jae 0x438dcc
mov dword [ebp - 0x228], 0
jmp 0x438dd8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x88
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x18c], 0xe
cmp dword [ebp - 0x18c], 0x11
jae 0x438e0d
mov dword [ebp - 0x22c], 0
jmp 0x438e19
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x35
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18c], 0xf
cmp dword [ebp - 0x18c], 0x11
jae 0x438e4e
mov dword [ebp - 0x230], 0
jmp 0x438e5a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x4e
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x18c], 0x10
cmp dword [ebp - 0x18c], 0x11
jae 0x438e8f
mov dword [ebp - 0x234], 0
jmp 0x438e9b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0xa4
mov dword [ebp - 4], 0x2c
mov word [ebp - 0xc0], 0
mov dword [ebp - 4], 0x2d
mov word [ebp - 0x1ac], 0x200
mov word [ebp - 0x1a8], 1
mov word [ebp - 0xb8], 0
jmp 0x438ef9
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1a8]
jo 0x43a0a1
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1ac]
jg 0x438f64
mov dword [ebp - 4], 0x2e
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x438f35
mov dword [ebp - 0x238], 0
jmp 0x438f41
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov ax, word [ebp - 0xb8]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x2f
jmp 0x438ede
mov dword [ebp - 4], 0x30
mov word [ebp - 0x1b4], 0x200
mov word [ebp - 0x1b0], 1
mov word [ebp - 0xb8], 0
jmp 0x438fa3
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1b0]
jo 0x43a0a1
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1b4]
jg 0x439114
mov dword [ebp - 4], 0x31
mov ax, word [ebp - 0xc0]
add ax, word [ebp - 0xb8]
jo 0x43a0a1
and ax, 0xff
jns 0x438fe0
dec ax
or ax, 0xff00
inc ax
mov word [ebp - 0xc0], ax
mov dword [ebp - 4], 0x32
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x439013
mov dword [ebp - 0x23c], 0
jmp 0x43901f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [eax + edx*2]
mov word [ebp - 0x54], cx
mov dword [ebp - 4], 0x33
movsx edx, word [ebp - 0xc0]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x43905f
mov dword [ebp - 0x240], 0
jmp 0x43906b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x439090
mov dword [ebp - 0x244], 0
jmp 0x43909c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x190]
mov esi, dword [ebp - 0x9c]
mov ax, word [esi + eax*2]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x34
movsx ecx, word [ebp - 0xc0]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x4390e8
mov dword [ebp - 0x248], 0
jmp 0x4390f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [ebp - 0x54]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x35
jmp 0x438f88
mov dword [ebp - 4], 0x36
mov edx, dword [ebp + 0x10]
cmp word [edx], 1
jne 0x4392ed
mov dword [ebp - 4], 0x37
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x38
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x14c], 0x404fb4
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x114]
push eax
push 0x10
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x3a
mov word [ebp - 0x1bc], 0x200
mov word [ebp - 0x1b8], 1
mov word [ebp - 0xb8], 0
jmp 0x4391f8
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1b8]
jo 0x43a0a1
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1bc]
jg 0x4392e8
mov dword [ebp - 4], 0x3b
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x439238
mov dword [ebp - 0x24c], 0
jmp 0x439244
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
movsx ecx, word [eax + edx*2]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x201
jae 0x439272
mov dword [ebp - 0x250], 0
jmp 0x43927e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov dx, word [ebp - 0xe8]
add dx, 0x30
jo 0x43a0a1
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x64]
mov word [ecx + eax*2], dx
mov dword [ebp - 4], 0x3c
mov dx, word [ebp - 0xe8]
add dx, 1
jo 0x43a0a1
mov word [ebp - 0xe8], dx
mov dword [ebp - 4], 0x3d
cmp word [ebp - 0xe8], 0xa
jne 0x4392dc
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x40
jmp 0x4391dd
jmp 0x439660
mov dword [ebp - 4], 0x41
mov eax, dword [ebp + 0x10]
cmp word [eax], 2
jne 0x4395df
mov dword [ebp - 4], 0x42
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x43
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x44
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x14c], 0x404fb4
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x10
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x46
mov word [ebp - 0xc4], 0
mov dword [ebp - 4], 0x47
mov word [ebp - 0x1c4], 0x200
mov word [ebp - 0x1c0], 1
mov word [ebp - 0xb8], 0
jmp 0x4393ee
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1c0]
jo 0x43a0a1
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1c4]
jg 0x4395da
mov dword [ebp - 4], 0x48
movsx edx, word [ebp - 0xc4]
test edx, edx
je 0x4394fd
mov dword [ebp - 4], 0x49
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x439444
mov dword [ebp - 0x254], 0
jmp 0x439450
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
movsx eax, word [edx + ecx*2]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x201
jae 0x43947e
mov dword [ebp - 0x258], 0
jmp 0x43948a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov cx, word [ebp - 0xe8]
add cx, 0x30
jo 0x43a0a1
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x64]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x4a
mov cx, word [ebp - 0xe8]
add cx, 1
jo 0x43a0a1
mov word [ebp - 0xe8], cx
mov dword [ebp - 4], 0x4b
cmp word [ebp - 0xe8], 0xa
jne 0x4394e8
mov dword [ebp - 4], 0x4c
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x4e
mov word [ebp - 0xc4], 0
jmp 0x4395ce
mov dword [ebp - 4], 0x50
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x201
jae 0x439529
mov dword [ebp - 0x25c], 0
jmp 0x439535
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x9c]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x439563
mov dword [ebp - 0x260], 0
jmp 0x43956f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov ax, word [ebp - 0x28]
add ax, 0x41
jo 0x43a0a1
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x64]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x51
mov ax, word [ebp - 0x28]
add ax, 1
jo 0x43a0a1
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0x52
cmp word [ebp - 0x28], 0x1a
jne 0x4395be
mov dword [ebp - 4], 0x53
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x55
mov word [ebp - 0xc4], 0xffff
mov dword [ebp - 4], 0x57
jmp 0x4393d3
jmp 0x439660
mov dword [ebp - 4], 0x59
mov word [ebp - 0x48], 8
mov dword [ebp - 4], 0x5a
mov dword [ebp - 0x14c], 0x404fb4
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x13
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5c
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x5d
mov ax, word [ebp - 0xb4]
mov word [ebp - 0x1cc], ax
mov word [ebp - 0x1c8], 1
mov word [ebp - 0xb8], 1
jmp 0x4396b4
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1c8]
jo 0x43a0a1
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1cc]
jg 0x439884
mov dword [ebp - 4], 0x5e
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x11
jae 0x4396f1
mov dword [ebp - 0x264], 0
jmp 0x4396fd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x154], 0x4008
lea edx, [ebp - 0x114]
push edx
movsx eax, word [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x43976c
mov dword [ebp - 0x268], 0
jmp 0x439778
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0xd4]
mov cx, word [edx + ecx*2]
add cx, ax
jo 0x43a0a1
xor cx, 0x12
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0xd4]
mov word [eax + edx*2], cx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5f
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x43980e
mov dword [ebp - 0x26c], 0
jmp 0x43981a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0xd4]
mov ax, word [ebp - 0x4c]
add ax, word [edx + ecx*2]
jo 0x43a0a1
mov word [ebp - 0x4c], ax
mov dword [ebp - 4], 0x60
mov cx, word [ebp - 0xf4]
add cx, 1
jo 0x43a0a1
mov word [ebp - 0xf4], cx
mov dword [ebp - 4], 0x61
cmp word [ebp - 0xf4], 9
jne 0x439878
mov dword [ebp - 4], 0x62
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x64
jmp 0x439699
mov dword [ebp - 4], 0x65
mov dx, word [ebp - 0x24]
mov word [ebp - 0x1d4], dx
mov word [ebp - 0x1d0], 1
mov word [ebp - 0xb8], 1
jmp 0x4398c5
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1d0]
jo 0x43a0a1
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1d4]
jg 0x439a89
mov dword [ebp - 4], 0x66
movsx edx, word [ebp - 0xf4]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x439902
mov dword [ebp - 0x270], 0
jmp 0x43990e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
lea ecx, [ebp - 0x114]
push ecx
movsx edx, word [ebp - 0xb8]
push edx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx edx, word [ebp - 0xf4]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x11
jae 0x43997a
mov dword [ebp - 0x274], 0
jmp 0x439986
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x80]
mov dx, word [ecx + edx*2]
add dx, ax
jo 0x43a0a1
xor dx, 0x19
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x80]
mov word [ecx + eax*2], dx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x114]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x67
movsx ecx, word [ebp - 0xf4]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x439a16
mov dword [ebp - 0x278], 0
jmp 0x439a22
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x58]
add cx, word [eax + edx*2]
jo 0x43a0a1
mov word [ebp - 0x58], cx
mov dword [ebp - 4], 0x68
mov dx, word [ebp - 0xf4]
add dx, 1
jo 0x43a0a1
mov word [ebp - 0xf4], dx
mov dword [ebp - 4], 0x69
cmp word [ebp - 0xf4], 9
jne 0x439a7d
mov dword [ebp - 4], 0x6a
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x6c
jmp 0x4398aa
mov dword [ebp - 4], 0x6d
mov ax, word [ebp - 0x4c]
add ax, word [ebp - 0x58]
jo 0x43a0a1
and ax, 0x1ff
jns 0x439aac
dec ax
or ax, 0xfe00
inc ax
mov word [ebp - 0xb0], ax
mov dword [ebp - 4], 0x6e
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x6f
mov word [ebp - 0xf0], 1
mov dword [ebp - 4], 0x70
mov cx, word [ebp - 0x48]
mov word [ebp - 0x1dc], cx
mov word [ebp - 0x1d8], 1
mov word [ebp - 0xb8], 1
jmp 0x439b14
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1d8]
jo 0x43a0a1
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1dc]
jg 0x439f5a
mov dword [ebp - 4], 0x71
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x11
jae 0x439b51
mov dword [ebp - 0x27c], 0
jmp 0x439b5d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0x11
jae 0x439b7f
mov dword [ebp - 0x280], 0
jmp 0x439b8b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x280], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x439bad
mov dword [ebp - 0x284], 0
jmp 0x439bb9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x194]
mov esi, dword [ebp - 0x34]
mov cx, word [edx + ecx*2]
xor cx, word [esi + eax*2]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x72
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x439c09
mov dword [ebp - 0x288], 0
jmp 0x439c15
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x439c37
mov dword [ebp - 0x28c], 0
jmp 0x439c43
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x190]
mov esi, dword [ebp - 0x80]
mov ax, word [ecx + eax*2]
xor ax, word [esi + edx*2]
mov cx, ax
and cx, 0x1ff
jns 0x439c73
dec cx
or cx, 0xfe00
inc cx
sub cx, word [ebp - 0xb0]
jo 0x43a0a1
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
mov word [ebp - 0xec], ax
mov dword [ebp - 4], 0x73
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 3
jne 0x439eb1
mov dword [ebp - 4], 0x74
cmp word [ebp - 0xec], 0x10
jge 0x439d69
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x15c], 0x4062dc
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xec]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xf4]
push eax
push 2
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x439de4
mov dword [ebp - 4], 0x77
lea eax, [ebp - 0xec]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4002
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0x50]
push eax
movsx ecx, word [ebp - 0xf4]
push ecx
push 2
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x79
cmp word [ebp - 0xf0], 2
jne 0x439e4d
cmp word [ebp - 0xf4], 0x12
jge 0x439e4d
mov dword [ebp - 4], 0x7a
mov ax, word [ebp - 0xf4]
add ax, 1
jo 0x43a0a1
mov word [ebp - 0xf4], ax
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x50]
push ecx
mov dx, word [ebp - 0xf4]
add dx, 1
jo 0x43a0a1
movsx eax, dx
push eax
push 1
push 0x406458
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
mov dword [ebp - 4], 0x7d
mov cx, word [ebp - 0xf4]
add cx, 2
jo 0x43a0a1
mov word [ebp - 0xf4], cx
mov dword [ebp - 4], 0x7e
mov dx, word [ebp - 0xf0]
add dx, 1
jo 0x43a0a1
mov word [ebp - 0xf0], dx
mov dword [ebp - 4], 0x7f
cmp word [ebp - 0xf0], 3
jne 0x439eac
mov dword [ebp - 4], 0x80
mov word [ebp - 0xf0], 1
jmp 0x439f4e
mov dword [ebp - 4], 0x83
movsx eax, word [ebp - 0xec]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x439edd
mov dword [ebp - 0x290], 0
jmp 0x439ee9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx + ecx*2]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xb8]
push eax
push 1
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x85
jmp 0x439af9
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x43a088
jmp 0x439fc1
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x19c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x178], ecx
lea edx, [ebp - 0x178]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x8c]
mov dword [ebp - 0x180], edx
lea eax, [ebp - 0x180]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x184], ecx
lea edx, [ebp - 0x184]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x188], eax
lea ecx, [ebp - 0x188]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3