Function at 0x444f40
Capabilities:
Access peb ldr_data
Get kernel32 base address
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x403816
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x88
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401b28
mov edx, dword [ebp + 8]
xor esi, esi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x88], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [0x48141c]
mov dword [eax], 1
mov ecx, dword [0x48141c]
mov dword [ecx + 4], 3
mov edx, dword [0x48141c]
mov dword [edx + 8], 7
mov eax, dword [0x48141c]
mov dword [eax + 0xc], 0xf
mov ecx, dword [0x48141c]
mov dword [ecx + 0x10], 0x1f
mov edx, dword [0x48141c]
mov dword [edx + 0x14], 0x3f
mov eax, dword [0x48141c]
mov dword [eax + 0x18], 0x7f
mov ecx, dword [0x48141c]
mov dword [ecx + 0x1c], 0xff
mov edx, dword [0x48141c]
mov dword [edx + 0x20], 0x1ff
mov eax, dword [0x48141c]
mov dword [eax + 0x24], 0x3ff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x28], 0x7ff
mov edx, dword [0x48141c]
mov dword [edx + 0x2c], 0xfff
mov eax, dword [0x48141c]
mov dword [eax + 0x30], 0x1fff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x34], 0x3fff
mov edx, dword [0x48141c]
mov dword [edx + 0x38], 0x7fff
mov eax, dword [0x48141c]
mov dword [eax + 0x3c], 0xffff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x40], 0x1ffff
mov edx, dword [0x48141c]
mov dword [edx + 0x44], 0x3ffff
mov eax, dword [0x48141c]
mov dword [eax + 0x48], 0x7ffff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x4c], 0xfffff
mov edx, dword [0x48141c]
mov dword [edx + 0x50], 0x1fffff
mov eax, dword [0x48141c]
mov dword [eax + 0x54], 0x3fffff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x58], 0x7fffff
mov edx, dword [0x48141c]
mov dword [edx + 0x5c], 0xffffff
mov eax, dword [0x48141c]
mov dword [eax + 0x60], 0x1ffffff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x64], 0x3ffffff
mov edx, dword [0x48141c]
mov dword [edx + 0x68], 0x7ffffff
mov eax, dword [0x48141c]
mov dword [eax + 0x6c], 0xfffffff
mov ecx, dword [0x48141c]
mov dword [ecx + 0x70], 0x1fffffff
mov edx, dword [0x48141c]
mov dword [edx + 0x74], 0x3fffffff
mov eax, dword [0x48141c]
mov dword [eax + 0x78], 0x7fffffff
mov ecx, dword [0x481438]
mov dword [ecx], 1
mov edx, dword [0x481438]
mov dword [edx + 4], 2
mov eax, dword [0x481438]
mov dword [eax + 8], 4
mov ecx, dword [0x481438]
mov dword [ecx + 0xc], 8
mov edx, dword [0x481438]
mov dword [edx + 0x10], 0x10
mov eax, dword [0x481438]
mov dword [eax + 0x14], 0x20
mov ecx, dword [0x481438]
mov dword [ecx + 0x18], 0x40
mov edx, dword [0x481438]
mov dword [edx + 0x1c], 0x80
mov eax, dword [0x481438]
mov dword [eax + 0x20], 0x100
mov ecx, dword [0x481438]
mov dword [ecx + 0x24], 0x200
mov edx, dword [0x481438]
mov dword [edx + 0x28], 0x400
mov eax, dword [0x481438]
mov dword [eax + 0x2c], 0x800
mov ecx, dword [0x481438]
mov dword [ecx + 0x30], 0x1000
mov edx, dword [0x481438]
mov dword [edx + 0x34], 0x2000
mov eax, dword [0x481438]
mov dword [eax + 0x38], 0x4000
mov ecx, dword [0x481438]
mov dword [ecx + 0x3c], 0x8000
mov edx, dword [0x481438]
mov dword [edx + 0x40], 0x10000
mov eax, dword [0x481438]
mov dword [eax + 0x44], 0x20000
mov ecx, dword [0x481438]
mov dword [ecx + 0x48], 0x40000
mov edx, dword [0x481438]
mov dword [edx + 0x4c], 0x80000
mov eax, dword [0x481438]
mov dword [eax + 0x50], 0x100000
mov ecx, dword [0x481438]
mov dword [ecx + 0x54], 0x200000
mov edx, dword [0x481438]
mov dword [edx + 0x58], 0x400000
mov eax, dword [0x481438]
mov dword [eax + 0x5c], 0x800000
mov ecx, dword [0x481438]
mov dword [ecx + 0x60], 0x1000000
mov edx, dword [0x481438]
mov dword [edx + 0x64], 0x2000000
mov eax, dword [0x481438]
mov dword [eax + 0x68], 0x4000000
mov ecx, dword [0x481438]
mov dword [ecx + 0x6c], 0x8000000
mov edx, dword [0x481438]
mov dword [edx + 0x70], 0x10000000
mov eax, dword [0x481438]
mov dword [eax + 0x74], 0x20000000
mov ecx, dword [0x481438]
mov dword [ecx + 0x78], 0x40000000
mov edx, dword [ebp - 0x40]
push edx
call fcn.00444150
mov ebx, dword [reloc.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x4c]
call ebx
push eax
lea eax, [ebp - 0x70]
push eax
call fcn.00444970
lea ecx, [ebp - 0x70]
push ecx
push 0x2003
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
lea edx, [ebp - 0x84]
mov dword [ebp - 0x84], eax
push edx
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ecx, dword [ebp - 0x44]
push ecx
push 1
mov dword [ebp - 0x28], 0x67452301
mov dword [ebp - 0x2c], 0xefcdab89
mov dword [ebp - 0x30], 0x98badcfe
mov dword [ebp - 0x34], 0x10325476
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
xor ecx, ecx
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
cmp ecx, dword [ebp - 0x94]
jg 0x4476fa
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x30]
push eax
lea ecx, [ebp - 0x48]
push ecx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x88], 0xd76aa478
mov dword [ebp - 0x84], 7
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4453cc
cmp word [ecx], 1
jne 0x4453cc
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub ebx, edx
cmp ebx, eax
jb 0x4453c3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4453d5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xe8c7b756
mov dword [ebp - 0x84], 0xc
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445459
cmp word [ecx], 1
jne 0x445459
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 1
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445450
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445462
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x242070db
mov dword [ebp - 0x84], 0x11
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4454e6
cmp word [ecx], 1
jne 0x4454e6
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 2
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4454dd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4454ef
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xc1bdceee
mov dword [ebp - 0x84], 0x16
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445573
cmp word [ecx], 1
jne 0x445573
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 3
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44556a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44557c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xf57c0faf
mov dword [ebp - 0x84], 7
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445600
cmp word [ecx], 1
jne 0x445600
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 4
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4455f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445609
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x4787c62a
mov dword [ebp - 0x84], 0xc
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44568d
cmp word [ecx], 1
jne 0x44568d
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 5
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445684
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445696
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xa8304613
mov dword [ebp - 0x84], 0x11
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44571a
cmp word [ecx], 1
jne 0x44571a
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 6
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445711
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445723
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfd469501
mov dword [ebp - 0x84], 0x16
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4457a7
cmp word [ecx], 1
jne 0x4457a7
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 7
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44579e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4457b0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x698098d8
mov dword [ebp - 0x84], 7
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445834
cmp word [ecx], 1
jne 0x445834
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 8
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44582b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44583d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x8b44f7af
mov dword [ebp - 0x84], 0xc
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4458c1
cmp word [ecx], 1
jne 0x4458c1
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 9
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4458b8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4458ca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xffff5bb1
mov dword [ebp - 0x84], 0x11
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44594e
cmp word [ecx], 1
jne 0x44594e
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xa
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445945
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445957
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x895cd7be
mov dword [ebp - 0x84], 0x16
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4459db
cmp word [ecx], 1
jne 0x4459db
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xb
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4459d2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4459e4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x6b901122
mov dword [ebp - 0x84], 7
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445a68
cmp word [ecx], 1
jne 0x445a68
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xc
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445a5f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445a71
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfd987193
mov dword [ebp - 0x84], 0xc
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445af5
cmp word [ecx], 1
jne 0x445af5
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xd
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445aec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445afe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xa679438e
mov dword [ebp - 0x84], 0x11
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445b82
cmp word [ecx], 1
jne 0x445b82
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xe
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445b79
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445b8b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x49b40821
mov dword [ebp - 0x84], 0x16
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445c0f
cmp word [ecx], 1
jne 0x445c0f
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xf
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445c06
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445c18
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.004447b0
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xf61e2562
mov dword [ebp - 0x84], 5
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445c9c
cmp word [ecx], 1
jne 0x445c9c
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 1
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445c93
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445ca5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xc040b340
mov dword [ebp - 0x84], 9
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445d29
cmp word [ecx], 1
jne 0x445d29
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 6
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445d20
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445d32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x265e5a51
mov dword [ebp - 0x84], 0xe
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445db6
cmp word [ecx], 1
jne 0x445db6
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xb
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445dad
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445dbf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xe9b6c7aa
mov dword [ebp - 0x84], 0x14
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445e3a
cmp word [ecx], 1
jne 0x445e3a
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub ebx, edx
cmp ebx, eax
jb 0x445e31
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445e43
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xd62f105d
mov dword [ebp - 0x84], 5
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445ec7
cmp word [ecx], 1
jne 0x445ec7
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 5
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445ebe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445ed0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x2441453
mov dword [ebp - 0x84], 9
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445f54
cmp word [ecx], 1
jne 0x445f54
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xa
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445f4b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445f5d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xd8a1e681
mov dword [ebp - 0x84], 0xe
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x445fe1
cmp word [ecx], 1
jne 0x445fe1
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xf
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x445fd8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x445fea
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xe7d3fbc8
mov dword [ebp - 0x84], 0x14
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44606e
cmp word [ecx], 1
jne 0x44606e
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 4
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446065
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446077
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x21e1cde6
mov dword [ebp - 0x84], 5
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4460fb
cmp word [ecx], 1
jne 0x4460fb
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 9
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4460f2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446104
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xc33707d6
mov dword [ebp - 0x84], 9
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446188
cmp word [ecx], 1
jne 0x446188
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xe
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44617f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446191
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xf4d50d87
mov dword [ebp - 0x84], 0xe
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446215
cmp word [ecx], 1
jne 0x446215
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 3
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44620c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44621e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x455a14ed
mov dword [ebp - 0x84], 0x14
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4462a2
cmp word [ecx], 1
jne 0x4462a2
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 8
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446299
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4462ab
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xa9e3e905
mov dword [ebp - 0x84], 5
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44632f
cmp word [ecx], 1
jne 0x44632f
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xd
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446326
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446338
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfcefa3f8
mov dword [ebp - 0x84], 9
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4463bc
cmp word [ecx], 1
jne 0x4463bc
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 2
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4463b3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4463c5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x676f02d9
mov dword [ebp - 0x84], 0xe
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446449
cmp word [ecx], 1
jne 0x446449
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 7
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446440
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446452
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x8d2a4c8a
mov dword [ebp - 0x84], 0x14
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4464d6
cmp word [ecx], 1
jne 0x4464d6
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xc
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4464cd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4464df
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444820
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfffa3942
mov dword [ebp - 0x84], 4
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446563
cmp word [ecx], 1
jne 0x446563
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 5
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44655a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44656c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x8771f681
mov dword [ebp - 0x84], 0xb
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4465f0
cmp word [ecx], 1
jne 0x4465f0
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 8
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4465e7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4465f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x6d9d6122
mov dword [ebp - 0x84], 0x10
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44667d
cmp word [ecx], 1
jne 0x44667d
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xb
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446674
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446686
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfde5380c
mov dword [ebp - 0x84], 0x17
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44670a
cmp word [ecx], 1
jne 0x44670a
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xe
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446701
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446713
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xa4beea44
mov dword [ebp - 0x84], 4
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446797
cmp word [ecx], 1
jne 0x446797
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 1
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44678e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4467a0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x4bdecfa9
mov dword [ebp - 0x84], 0xb
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446824
cmp word [ecx], 1
jne 0x446824
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 4
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44681b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44682d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xf6bb4b60
mov dword [ebp - 0x84], 0x10
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4468b1
cmp word [ecx], 1
jne 0x4468b1
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 7
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4468a8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4468ba
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xbebfbc70
mov dword [ebp - 0x84], 0x17
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44693e
cmp word [ecx], 1
jne 0x44693e
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xa
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446935
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446947
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x289b7ec6
mov dword [ebp - 0x84], 4
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4469cb
cmp word [ecx], 1
jne 0x4469cb
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xd
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4469c2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4469d4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xeaa127fa
mov dword [ebp - 0x84], 0xb
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446a4f
cmp word [ecx], 1
jne 0x446a4f
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub ebx, edx
cmp ebx, eax
jb 0x446a46
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446a58
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xd4ef3085
mov dword [ebp - 0x84], 0x10
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446adc
cmp word [ecx], 1
jne 0x446adc
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 3
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446ad3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446ae5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x4881d05
mov dword [ebp - 0x84], 0x17
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446b69
cmp word [ecx], 1
jne 0x446b69
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 6
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446b60
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446b72
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xd9d4d039
mov dword [ebp - 0x84], 4
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446bf6
cmp word [ecx], 1
jne 0x446bf6
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 9
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446bed
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446bff
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xe6db99e5
mov dword [ebp - 0x84], 0xb
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446c83
cmp word [ecx], 1
jne 0x446c83
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xc
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446c7a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446c8c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x1fa27cf8
mov dword [ebp - 0x84], 0x10
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446d10
cmp word [ecx], 1
jne 0x446d10
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xf
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446d07
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446d19
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xc4ac5665
mov dword [ebp - 0x84], 0x17
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446d9d
cmp word [ecx], 1
jne 0x446d9d
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 2
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446d94
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446da6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444890
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xf4292244
mov dword [ebp - 0x84], 6
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446e21
cmp word [ecx], 1
jne 0x446e21
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub ebx, edx
cmp ebx, eax
jb 0x446e18
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446e2a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x432aff97
mov dword [ebp - 0x84], 0xa
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446eae
cmp word [ecx], 1
jne 0x446eae
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 7
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446ea5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446eb7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xab9423a7
mov dword [ebp - 0x84], 0xf
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446f3b
cmp word [ecx], 1
jne 0x446f3b
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xe
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446f32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446f44
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfc93a039
mov dword [ebp - 0x84], 0x15
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x446fc8
cmp word [ecx], 1
jne 0x446fc8
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 5
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x446fbf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x446fd1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x655b59c3
mov dword [ebp - 0x84], 6
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x447055
cmp word [ecx], 1
jne 0x447055
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xc
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44704c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44705e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x8f0ccc92
mov dword [ebp - 0x84], 0xa
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4470e2
cmp word [ecx], 1
jne 0x4470e2
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 3
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4470d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4470eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xffeff47d
mov dword [ebp - 0x84], 0xf
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44716f
cmp word [ecx], 1
jne 0x44716f
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xa
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x447166
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x447178
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x85845dd1
mov dword [ebp - 0x84], 0x15
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4471fc
cmp word [ecx], 1
jne 0x4471fc
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 1
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4471f3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x447205
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x6fa87e4f
mov dword [ebp - 0x84], 6
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x447289
cmp word [ecx], 1
jne 0x447289
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 8
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x447280
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x447292
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xfe2ce6e0
mov dword [ebp - 0x84], 0xa
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x447316
cmp word [ecx], 1
jne 0x447316
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xf
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44730d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44731f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xa3014314
mov dword [ebp - 0x84], 0xf
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4473a3
cmp word [ecx], 1
jne 0x4473a3
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 6
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44739a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4473ac
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x4e0811a1
mov dword [ebp - 0x84], 0x15
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x447430
cmp word [ecx], 1
jne 0x447430
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xd
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x447427
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x447439
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xf7537e82
mov dword [ebp - 0x84], 6
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4474bd
cmp word [ecx], 1
jne 0x4474bd
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 4
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4474b4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4474c6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xbd3af235
mov dword [ebp - 0x84], 0xa
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x44754a
cmp word [ecx], 1
jne 0x44754a
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 0xb
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x447541
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x447553
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0x2ad7d2bb
mov dword [ebp - 0x84], 0xf
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x4475d7
cmp word [ecx], 1
jne 0x4475d7
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 2
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x4475ce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x4475e0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x30]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x48]
push edx
mov dword [ebp - 0x88], 0xeb86d391
mov dword [ebp - 0x84], 0x15
call esi
mov ecx, dword [ebp - 0x48]
test ecx, ecx
je 0x447664
cmp word [ecx], 1
jne 0x447664
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
add ebx, 9
jo 0x4478c0
sub ebx, edx
cmp ebx, eax
jb 0x44765b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
lea eax, [ebx*4]
jmp 0x44766d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0x88]
push edx
lea edx, [ebp - 0x84]
push edx
add ecx, eax
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x2c]
push edx
call fcn.00444900
lea eax, [ebp - 0x48]
push eax
call edi
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x28]
push ecx
push edx
call fcn.004446a0
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
push eax
push ecx
call fcn.004446a0
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
push edx
push eax
call fcn.004446a0
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
push ecx
push edx
mov dword [ebp - 0x30], eax
call fcn.004446a0
mov edx, dword [ebp - 0x1c]
mov ebx, dword [reloc.MSVBVM60.DLL___vbaStrMove]
mov ecx, 0x10
add ecx, edx
jo 0x4478c0
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], ecx
jmp 0x44535f
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0x20
jne 0x4477cc
mov ecx, dword [ebp - 0x28]
push ecx
call 0x444da0
mov edx, eax
lea ecx, [ebp - 0x4c]
call ebx
mov edx, dword [ebp - 0x2c]
push eax
push edx
call 0x444da0
mov edx, eax
lea ecx, [ebp - 0x50]
call ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x54]
call ebx
push eax
mov eax, dword [ebp - 0x30]
push eax
call 0x444da0
mov edx, eax
lea ecx, [ebp - 0x58]
call ebx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x5c]
call ebx
mov ecx, dword [ebp - 0x34]
push eax
push ecx
call 0x444da0
mov edx, eax
lea ecx, [ebp - 0x60]
call ebx
push eax
call esi
lea edx, [ebp - 0x70]
mov dword [ebp - 0x68], eax
push edx
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x70], 8
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x20]
call ebx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x54]
push edx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x4c]
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x70]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
push 0x4478aa
jmp 0x447894
mov ecx, dword [ebp - 0x2c]
push ecx
call 0x444da0
mov edx, eax
lea ecx, [ebp - 0x4c]
call ebx
mov edx, dword [ebp - 0x30]
push eax
push edx
call 0x444da0
mov edx, eax
lea ecx, [ebp - 0x50]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x68], eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x80]
push ecx
mov dword [ebp - 0x70], 8
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x20]
call ebx
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x4c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x70]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
push 0x4478aa
jmp 0x447894
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x44]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop