Function at 0x436820
Capabilities:
Inspect section memory permissions

Disassembly:
push ebx
push esi
push edi
call 0x4368e0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [0x43c380], 0
mov word [0x43c37c], 2
xor edi, edi
movsx esi, di
cmp esi, 6
jb 0x43684d
call ebx
mov ecx, dword [0x43c06c]
lea eax, [esi + esi*2]
mov edx, dword [ecx + eax*8 + 8]
test edx, edx
je 0x4368a9
cmp esi, 6
jb 0x436865
call ebx
mov edx, dword [0x43c350]
mov ecx, dword [0x43c06c]
lea eax, [esi + esi*2]
push 0x40ca38
push edx
mov edx, dword [ecx + eax*8 + 0xc]
push edx
call fcn.00414570
cmp esi, 6
jb 0x43688b
call ebx
mov eax, dword [0x43c354]
mov edx, dword [0x43c06c]
lea ecx, [esi + esi*2]
push 0x40ca38
push eax
mov eax, dword [edx + ecx*8 + 0xc]
push eax
call fcn.00414570
add di, 1
jo 0x4368da
cmp di, 5
jle 0x436843
push 0x437720
push 0x12c
push 1
push 0
call fcn.0040bef4
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [0x43c03c], esi
pop edi
pop esi
pop ebx
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
push ebp
mov ebp, esp
sub esp, 8
push 0x401a56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401810
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], eax
call fcn.00413570
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call esi
mov eax, dword [ebp - 0x18]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
fstp qword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
cmp ecx, 0xb0000000
jne 0x436a0e
cmp eax, 0x41731575
jne 0x436a0e
lea ecx, [ebp - 0x14]
push ecx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x4369a0
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x7c3c4
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x4b8
jmp 0x4369c4
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x7c3c4
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x4f4
jo 0x437714
mov dword [0x43c34c], eax
mov eax, dword [0x43c030]
push 0x4d2468
push eax
call fcn.00413c10
add eax, 0x29c
mov dword [0x43c350], 0x42e839
jo 0x437714
mov dword [0x43c348], eax
mov dword [0x43c354], 0x42e851
wait
push 0x437703
jmp 0x4376f9
cmp ecx, 0xf0000000
jne 0x436ae1
cmp eax, 0x41731579
jne 0x436ae1
lea ecx, [ebp - 0x14]
push ecx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x436a73
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x7c3c4
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x4b8
jmp 0x436a97
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x7c3c4
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x4f4
jo 0x437714
mov dword [0x43c34c], eax
mov eax, dword [0x43c030]
push 0x4d35f8
push eax
call fcn.00413c10
add eax, 0x29c
mov dword [0x43c350], 0x42edb9
jo 0x437714
mov dword [0x43c348], eax
mov dword [0x43c354], 0x42edd1
wait
push 0x437703
jmp 0x4376f9
cmp ecx, 0x20000000
jne 0x436bc8
cmp eax, 0x41731580
jne 0x436bc8
lea ecx, [ebp - 0x14]
push ecx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x436b46
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x7c3c4
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x3d8
jmp 0x436b6a
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x7c3c4
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x414
jo 0x437714
mov dword [0x43c34c], eax
mov eax, dword [0x43c030]
push 0x4dd2b0
push eax
call fcn.00413c10
mov ecx, dword [0x43c030]
add eax, 0x60
jo 0x437714
push eax
push ecx
call fcn.00413c10
add eax, 0x40
mov dword [0x43c350], 0x4300e9
jo 0x437714
mov dword [0x43c348], eax
mov dword [0x43c354], 0x430101
wait
push 0x437703
jmp 0x4376f9
cmp ecx, 0x40000000
jne 0x436cae
cmp eax, 0x41731580
jne 0x436cae
lea edx, [ebp - 0x14]
push edx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x436c2c
mov eax, dword [0x43c034]
mov ecx, dword [0x43c030]
add eax, 0x7c3c4
jo 0x437714
push eax
push ecx
call fcn.00413c10
add eax, 0x3d8
jmp 0x436c4f
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x7c3c4
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x414
mov ecx, dword [0x43c030]
push 0x4dd310
jo 0x437714
push ecx
mov dword [0x43c34c], eax
call fcn.00413c10
mov edx, dword [0x43c030]
add eax, 0x60
jo 0x437714
push eax
push edx
call fcn.00413c10
add eax, 0x40
mov dword [0x43c350], 0x430189
jo 0x437714
mov dword [0x43c348], eax
mov dword [0x43c354], 0x4301a1
wait
push 0x437703
jmp 0x4376f9
cmp ecx, 0x60000000
jne 0x436f55
cmp eax, 0x41731580
jne 0x436f55
lea eax, [ebp - 0x14]
push eax
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x436d16
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x7c3c4
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x1d8
jmp 0x436d38
mov eax, dword [0x43c034]
mov ecx, dword [0x43c030]
add eax, 0x7c3c4
jo 0x437714
push eax
push ecx
call fcn.00413c10
add eax, 0x214
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e08c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x436d8b
mov edx, dword [0x43c030]
push 0x4dd510
push edx
call fcn.00413c10
add eax, 0xb0
jmp 0x436f16
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e0c4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x436de1
mov ecx, dword [0x43c030]
push 0x4dd510
push ecx
call fcn.00413c10
mov edx, dword [0x43c030]
add eax, 0xa8
jo 0x437714
push eax
push edx
jmp 0x436f23
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e0fc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x436e18
push 0x4dd510
jmp 0x436ee5
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e144
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x436e60
mov edx, dword [0x43c030]
push 0x4dd510
push edx
call fcn.00413c10
add eax, 0xa4
jmp 0x436f16
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e1b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x436eb3
mov ecx, dword [0x43c030]
push 0x4b13c8
push ecx
call fcn.00413c10
mov edx, dword [0x43c030]
add eax, 0xb4
jo 0x437714
push eax
push edx
jmp 0x436f23
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e1f4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
push 0x4dd510
je 0x436f05
mov eax, dword [0x43c030]
push eax
call fcn.00413c10
mov ecx, dword [0x43c030]
add eax, 0xb4
jo 0x437714
push eax
push ecx
jmp 0x436f23
mov edx, dword [0x43c030]
push edx
call fcn.00413c10
add eax, 0xb4
jo 0x437714
push eax
mov eax, dword [0x43c030]
push eax
call fcn.00413c10
add eax, 0x40
mov dword [0x43c350], 0x430219
jo 0x437714
mov dword [0x43c348], eax
mov dword [0x43c354], 0x430231
wait
push 0x437703
jmp 0x4376f9
cmp ecx, 0x90000000
jne 0x4370d2
cmp eax, 0x41731586
jne 0x4370d2
lea ecx, [ebp - 0x14]
push ecx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x436fbc
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x1c49b8
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x1dcc
jmp 0x436fe0
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x1c49b8
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x1e08
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e1b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
jne 0x4370be
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e234
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
jne 0x4370c8
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e274
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x437091
push 0x4b13c8
mov ecx, dword [0x43c030]
push ecx
call fcn.00413c10
add eax, 0xb4
jmp 0x437647
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e1f4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
je 0x4370c8
push 0x4b13c8
jmp 0x437689
push 0x4b13c8
jmp 0x4376aa
cmp ecx, 0xa0000000
jne 0x4371ef
cmp eax, 0x41731586
jne 0x4371ef
lea ecx, [ebp - 0x14]
push ecx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x437139
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x1c49b8
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x1dcc
jmp 0x43715d
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x1c49b8
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x1e08
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x43719f
push 0x4b13fc
jmp 0x437689
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
je 0x4371e5
mov edx, dword [0x43c030]
push 0x4b13f8
push edx
call fcn.00413c10
add eax, 0x60
jmp 0x4376bb
push 0x4b13fc
jmp 0x43707b
cmp ecx, 0xb0000000
jne 0x4372f6
cmp eax, 0x41731586
jne 0x4372f6
lea eax, [ebp - 0x14]
push eax
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x437257
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x1c49b8
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x1dcc
jmp 0x437279
mov eax, dword [0x43c034]
mov ecx, dword [0x43c030]
add eax, 0x1c49b8
jo 0x437714
push eax
push ecx
call fcn.00413c10
add eax, 0x1e08
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x4372bb
push 0x4b13fc
jmp 0x4376aa
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
je 0x437195
push 0x4b13f8
jmp 0x437638
cmp ecx, 0xc0000000
jne 0x437429
cmp eax, 0x41731586
jne 0x437429
lea edx, [ebp - 0x14]
push edx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x43735c
mov eax, dword [0x43c034]
mov ecx, dword [0x43c030]
add eax, 0x1c49b8
jo 0x437714
push eax
push ecx
call fcn.00413c10
add eax, 0x1dcc
jmp 0x43737f
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x1c49b8
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x1e08
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x4373e0
mov ecx, dword [0x43c030]
push 0x4b13fc
push ecx
call fcn.00413c10
mov edx, dword [0x43c030]
add eax, 0xb4
jo 0x437714
push eax
push edx
jmp 0x4376c4
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
je 0x4372b1
mov eax, dword [0x43c030]
push 0x4b13f8
push eax
call fcn.00413c10
add eax, 0x60
jmp 0x437699
cmp ecx, 0xd0000000
jne 0x437540
cmp eax, 0x41731586
jne 0x437540
lea ecx, [ebp - 0x14]
push ecx
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x437490
mov edx, dword [0x43c034]
mov eax, dword [0x43c030]
add edx, 0x1c49b8
jo 0x437714
push edx
push eax
call fcn.00413c10
add eax, 0x1dcc
jmp 0x4374b4
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x1c49b8
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x1e08
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x4374f6
push 0x4b13fc
jmp 0x437689
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
je 0x4373b7
mov edx, dword [0x43c030]
push 0x4b13f8
push edx
call fcn.00413c10
add eax, 0x60
jmp 0x4376bb
cmp ecx, 0xe0000000
jne 0x4376e7
cmp eax, 0x41731586
jne 0x4376e7
lea eax, [ebp - 0x14]
push eax
call fcn.00414060
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call ebx
fld dword [ebp - 0x14]
fcomp dword [0x401808]
fnstsw ax
test ah, 1
jne 0x4375a8
mov ecx, dword [0x43c034]
mov edx, dword [0x43c030]
add ecx, 0x1c49b8
jo 0x437714
push ecx
push edx
call fcn.00413c10
add eax, 0x1dcc
jmp 0x4375ca
mov eax, dword [0x43c034]
mov ecx, dword [0x43c030]
add eax, 0x1c49b8
jo 0x437714
push eax
push ecx
call fcn.00413c10
add eax, 0x1e08
jo 0x437714
push 0x24
mov dword [0x43c34c], eax
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
jne 0x4376a5
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e2e8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov edi, eax
lea ecx, [ebp - 0x1c]
neg edi
sbb edi, edi
inc edi
neg edi
call ebx
test di, di
je 0x437657
push 0x4b1428
mov ecx, dword [0x43c030]
push ecx
call fcn.00413c10
add eax, 0x60
mov edx, dword [0x43c030]
jo 0x437714
push eax
push edx
jmp 0x4376c4
push 0x24
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x1c]
call esi
push eax
push 0x40e328
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x1c]
neg esi
sbb esi, esi
inc esi
neg esi
call ebx
test si, si
je 0x4376a5
push 0x4b142c
mov eax, dword [0x43c030]
push eax
call fcn.00413c10
add eax, 0xb4
mov ecx, dword [0x43c030]
jo 0x437714
push eax
push ecx
jmp 0x4376c4
push 0x4b142c
mov edx, dword [0x43c030]
push edx
call fcn.00413c10
add eax, 0xb4
jo 0x437714
push eax
mov eax, dword [0x43c030]
push eax
call fcn.00413c10
add eax, 0x40
mov dword [0x43c350], 0x42ecce
jo 0x437714
mov dword [0x43c348], eax
mov dword [0x43c354], 0x42ece6
wait
push 0x437703
jmp 0x4376f9
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 8
push 0x401a56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x34
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401820
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
xor edi, edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov eax, 5
cmp edi, eax
jg 0x4377b3
cmp edi, 6
jb 0x43776a
call ebx
mov eax, dword [0x43c06c]
lea esi, [edi + edi*2]
shl esi, 3
mov ecx, dword [esi + eax + 8]
test ecx, ecx
je 0x4377a2
cmp edi, 6
jb 0x437784
call ebx
mov ecx, dword [0x43c06c]
push 1
push 1
push 0x238
mov edx, dword [esi + ecx + 8]
push 0x292
push edx
call fcn.00414260
mov eax, 1
add eax, edi
jo 0x4378d7
mov edi, eax
jmp 0x43775a
mov eax, dword [0x43c34c]
mov ecx, dword [0x43c030]
push eax
push ecx
call fcn.00413bd0
test ax, ax
je 0x4378aa
mov edx, dword [0x43c03c]
push edx
push 0
call fcn.0040bf38
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call edi
mov eax, dword [0x43c010]
test eax, eax
jne 0x437802
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x328]
lea edx, [ebp - 0x18]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x1c]
push ecx
push 0
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x437839
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x20]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0xe0]
test eax, eax
fnclex
jge 0x437863
push 0xe0
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor edx, edx
cmp word [ebp - 0x20], 0xffff
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x18]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
push 0x4378e0
je 0x437892
push 0x32
jmp 0x437897
push 0x5dc
push 1
push 0
call fcn.0040bef4
mov esi, eax
call edi
mov dword [0x43c03c], esi
push 0x4378c6
jmp 0x4378c5
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 8
push 0x401a56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x94
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401830
mov eax, dword [0x43c34c]
mov ecx, dword [0x43c030]
xor edi, edi
push eax
push ecx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], edi
call fcn.00413bd0
test ax, ax
jne 0x437a85
mov edx, dword [0x43c03c]
push edx
push edi
call fcn.0040bf38
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [0x43c380]
mov word [0x43c37c], 2
add eax, 1
jo 0x437b8a
mov dword [0x43c380], eax
mov eax, dword [0x43c010]
cmp eax, edi
jne 0x43799a
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x338]
lea edx, [ebp - 0x20]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0x34]
mov edi, 8
push eax
push ecx
mov dword [ebp - 0x6c], 0x40dd94
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x5c], 0x43c380
mov dword [ebp - 0x64], 0x4003
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
lea edx, [ebp - 0x74]
lea eax, [ebp - 0x34]
push edx
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x84], edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
mov dword [ebp - 0x7c], 0x40dda4
mov ebx, dword [esi]
push ecx
call edi
push eax
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x54]
push edx
push eax
call edi
lea ecx, [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [ebx + 0x54]
test eax, eax
fnclex
jge 0x437a31
push 0x54
push 0x40cd04
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x1c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
push 0x437720
push 0x12c
push 1
push 0
call fcn.0040bef4
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [0x43c03c], esi
push 0x437b79
jmp 0x437b78
mov eax, dword [0x43c010]
cmp eax, edi
jne 0x437aa3
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x328]
push eax
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x24]
push edx
push edi
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
cmp eax, edi
fnclex
jge 0x437ad9
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x88]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0xe0]
cmp eax, edi
fnclex
jge 0x437b06
push 0xe0
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor eax, eax
cmp word [ebp - 0x88], 0xffff
lea ecx, [ebp - 0x24]
lea edx, [ebp - 0x20]
sete al
push ecx
push edx
neg eax
push 2
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
cmp si, di
je 0x437b3b
call 0x437e90
push 0x437b79
jmp 0x437b78
call 0x437b90
push 0x437b79
jmp 0x437b78
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
push ebp
mov ebp, esp
sub esp, 8
push 0x401a56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x60
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401840
mov edx, dword [0x43c348]
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x38]
lea ecx, [ebp - 0x30]
push eax
mov eax, dword [0x43c030]
push ecx
push edx
push eax
mov dword [ebp - 0x38], 0xd1
call fcn.00413c50
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x30]
push ecx
push edx
mov dword [ebp - 0x3c], 0x43c35c
call fcn.00435620
mov ecx, 1
mov dword [ebp - 0x20], 0x10
mov dword [ebp - 0x1c], 0xb7
mov dword [ebp - 0x34], ecx
mov eax, 0xb
cmp cx, ax
jg 0x437e13
mov esi, 1
mov dword [ebp - 0x14], esi
mov eax, 0x13
cmp si, ax
jg 0x437dff
movsx ebx, cx
cmp ebx, 0xc
jb 0x437c3e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx edi, si
cmp edi, 0x14
jb 0x437c4c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x43c368]
lea eax, [edi + edi*2]
lea edx, [ecx + eax*4]
cmp byte [edx + ebx], 0
je 0x437de4
mov esi, 1
mov dword [ebp - 0x18], esi
mov eax, 0xb
cmp si, ax
jg 0x437de1
mov edi, 1
mov eax, 0x13
cmp di, ax
jg 0x437dc9
movsx eax, word [ebp - 0x34]
cmp eax, 0xc
jb 0x437c9a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx ebx, word [ebp - 0x14]
cmp ebx, 0x14
jb 0x437ca9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx eax, si
cmp eax, 0xc
jb 0x437cb7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx esi, di
cmp esi, 0x14
jb 0x437cc5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x43c368]
lea ecx, [esi + esi*2]
lea edx, [eax + ecx*4]
lea ecx, [ebx + ebx*2]
lea ecx, [eax + ecx*4]
movsx eax, word [ebp - 0x34]
mov cl, byte [ecx + eax]
movsx eax, word [ebp - 0x18]
cmp cl, byte [edx + eax]
jne 0x437db1
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x18]
cmp ax, si
jne 0x437cff
cmp word [ebp - 0x14], di
je 0x437db1
imul ax, ax, 0x23
jo 0x437e85
movsx edx, ax
mov eax, 0xb7
push 1
add edx, eax
mov ax, word [ebp - 0x14]
jo 0x437e85
sub edx, 0x11
push 1
jo 0x437e85
imul ax, ax, 0x1f
jo 0x437e85
movsx ecx, ax
mov eax, 0x10
push edx
mov edx, dword [0x43c02c]
add ecx, eax
jo 0x437e85
sub ecx, 0xf
jo 0x437e85
push ecx
push edx
call fcn.00414260
imul si, si, 0x23
jo 0x437e85
movsx eax, si
mov esi, dword [ebp - 0x1c]
mov cx, di
add eax, esi
push 1
jo 0x437e85
sub eax, 0x11
push 1
jo 0x437e85
imul cx, cx, 0x1f
jo 0x437e85
movsx edx, cx
push eax
mov eax, dword [ebp - 0x20]
add edx, eax
mov eax, dword [0x43c02c]
jo 0x437e85
sub edx, 0xf
jo 0x437e85
push edx
push eax
call fcn.00414260
mov esi, dword [ebp - 0x18]
mov eax, 1
add ax, di
jo 0x437e85
mov edi, eax
jmp 0x437c7d
mov eax, 1
add ax, si
jo 0x437e85
mov dword [ebp - 0x18], eax
mov esi, eax
jmp 0x437c6a
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x34]
mov eax, 1
add ax, si
jo 0x437e85
mov dword [ebp - 0x14], eax
mov esi, eax
jmp 0x437c22
mov eax, 1
add ax, cx
jo 0x437e85
mov dword [ebp - 0x34], eax
mov ecx, eax
jmp 0x437c0c
mov ecx, dword [0x43c34c]
mov edx, dword [0x43c030]
push ecx
push edx
call fcn.00413bd0
test ax, ax
je 0x437e62
cmp word [0x43c37c], 0
jle 0x437e62
mov eax, dword [0x43c02c]
push 1
push 1
push 0xc5
push 0x28b
push eax
call fcn.00414260
mov cx, word [0x43c37c]
sub cx, 1
jo 0x437e85
mov word [0x43c37c], cx
push 0x437e74
lea edx, [ebp - 0x30]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 8
push 0x401a56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401850
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], eax
lea edx, [ebp - 0x28]
mov dword [ebp - 0x30], ecx
mov ecx, dword [0x43c348]
lea eax, [ebp - 0x24]
push edx
mov edx, dword [0x43c030]
push eax
push ecx
push edx
mov dword [ebp - 0x28], 0xd1
call fcn.00413c50
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0x24]
push eax
push ecx
mov dword [ebp - 0x2c], 0x43c35c
call fcn.00435620
lea edx, [ebp - 0x3c]
push edx
call fcn.00437f80
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x20]
push eax
push ecx
push 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [0x43c02c]
push 1
push 1
push edx
push eax
push ecx
call fcn.00414260
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ecx, dword [0x43c02c]
push 1
push 1
push edx
push eax
push ecx
call fcn.00414260
push 0x437f6c
lea edx, [ebp - 0x24]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret