Function at 0x4357c0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401a56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe8
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4017f8
mov eax, dword [0x43c010]
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x90], edi
jne 0x435836
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x338]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x2c]
push eax
push edx
call ebx
mov esi, eax
push 0x40ccf0
push esi
mov eax, dword [esi]
call dword [eax + 0x54]
cmp eax, edi
fnclex
jge 0x43586e
push 0x54
push 0x40cd04
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
push 3
call fcn.00413570
mov edx, eax
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x14]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
fstp qword [ebp - 0xc8]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc4]
cmp ecx, 0xb0000000
jne 0x435a4c
cmp eax, 0x41731575
jne 0x435a4c
mov edi, dword [ebp + 8]
movsx esi, word [edi]
cmp esi, 6
jb 0x4358cd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x43c06c]
lea edx, [esi + esi*2]
push 0x4af3c4
mov ecx, dword [eax + edx*8 + 0xc]
push ecx
call fcn.00413c10
mov dword [ebp - 0xd0], eax
fild dword [ebp - 0xd0]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x4358bf
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x4359bc
test eax, eax
jne 0x435935
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call ebx
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x43596a
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
fld qword [ebp - 0x1c]
fadd qword [0x401430]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x50]
push ecx
fstp qword [ebp - 0x38]
fnstsw ax
test al, 0xd
jne 0x436810
push edx
mov dword [ebp - 0x40], 5
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x4365b9
jmp 0x4365aa
test eax, eax
jne 0x4359d5
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call ebx
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x435a0a
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x40]
lea eax, [ebp - 0x1c]
push ecx
push edx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x80], 0x4005
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x43668a
jmp 0x43667b
cmp ecx, 0xf0000000
jne 0x435c4d
cmp eax, 0x41731579
jne 0x435c4d
mov edi, dword [ebp + 8]
movsx esi, word [edi]
cmp esi, 6
jb 0x435a74
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x43c06c]
lea ecx, [esi + esi*2]
push 0x4b0554
mov eax, dword [edx + ecx*8 + 0xc]
push eax
call fcn.00413c10
mov dword [ebp - 0xd4], eax
fild dword [ebp - 0xd4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435a66
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x435ba1
test eax, eax
jne 0x435add
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call ebx
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x435b12
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
fld qword [ebp - 0x1c]
fadd qword [0x401430]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x40], 5
fstp qword [ebp - 0x38]
fnstsw ax
test al, 0xd
jne 0x436810
lea eax, [ebp - 0x40]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x24]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x435b6a
push 0x54
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0x2c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x40]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
wait
push 0x4367fd
jmp 0x4367f3
test eax, eax
jne 0x435bba
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call ebx
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x435bef
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x30]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x80], 0x4005
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x435c37
push 0x54
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
push eax
push ecx
jmp 0x43669b
cmp ecx, 0x20000000
jne 0x435d1c
cmp eax, 0x41731580
jne 0x435d1c
mov edi, dword [ebp + 8]
movsx esi, word [edi]
cmp esi, 6
jb 0x435c75
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x43c06c]
lea edx, [esi + esi*2]
push 0x4ba218
mov ecx, dword [eax + edx*8 + 0xc]
push ecx
call fcn.00413c10
mov dword [ebp - 0xd8], eax
fild dword [ebp - 0xd8]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435c67
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x435cee
test eax, eax
jne 0x435cd9
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call ebx
jmp 0x436206
test eax, eax
jne 0x435d07
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call ebx
jmp 0x436252
cmp ecx, 0x40000000
jne 0x435e20
cmp eax, 0x41731580
jne 0x435e20
mov edi, dword [ebp + 8]
movsx esi, word [edi]
cmp esi, 6
jb 0x435d44
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x43c06c]
lea ecx, [esi + esi*2]
push 0x4ba278
mov eax, dword [edx + ecx*8 + 0xc]
push eax
call fcn.00413c10
mov dword [ebp - 0xdc], eax
fild dword [ebp - 0xdc]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435d36
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x435dd8
test eax, eax
jne 0x435da9
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call ebx
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x43607e
jmp 0x43606f
test eax, eax
jne 0x435df1
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call ebx
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x436122
jmp 0x436113
cmp ecx, 0x60000000
jne 0x435ea5
cmp eax, 0x41731580
jne 0x435ea5
mov edi, dword [ebp + 8]
movsx esi, word [edi]
cmp esi, 6
jb 0x435e40
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x43c06c]
lea edx, [esi + esi*2]
push 0x4ba478
mov ecx, dword [eax + edx*8 + 0xc]
push ecx
call fcn.00413c10
mov dword [ebp - 0xe0], eax
fild dword [ebp - 0xe0]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435e32
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x435e98
test eax, eax
jne 0x435cd9
jmp 0x435cc4
test eax, eax
jne 0x435d07
jmp 0x435cf2
cmp ecx, 0x90000000
jne 0x435f2b
cmp eax, 0x41731586
jne 0x435f2b
mov edi, dword [ebp + 8]
movsx esi, word [edi]
cmp esi, 6
jb 0x435ec5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [0x43c06c]
lea ecx, [esi + esi*2]
push 0x4b0a88
mov eax, dword [edx + ecx*8 + 0xc]
push eax
call fcn.00413c10
mov dword [ebp - 0xe4], eax
fild dword [ebp - 0xe4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435eb7
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x435f1e
test eax, eax
jne 0x435da9
jmp 0x435d94
test eax, eax
jne 0x435df1
jmp 0x435ddc
cmp ecx, 0xa0000000
jne 0x435fb2
cmp eax, 0x41731586
jne 0x435fb2
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx esi, word [edi]
cmp esi, 6
jb 0x435f4d
call ebx
mov eax, dword [0x43c06c]
lea edx, [esi + esi*2]
push 0x4b0ac8
mov ecx, dword [eax + edx*8 + 0xc]
push ecx
call fcn.00413c10
mov dword [ebp - 0xe8], eax
fild dword [ebp - 0xe8]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435f43
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x435fa5
test eax, eax
jne 0x4361f2
jmp 0x4361dd
test eax, eax
jne 0x43623e
jmp 0x436229
cmp ecx, 0xb0000000
jne 0x436164
cmp eax, 0x41731586
jne 0x436164
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx esi, word [edi]
cmp esi, 6
jb 0x435fdc
call ebx
mov edx, dword [0x43c06c]
lea ecx, [esi + esi*2]
push 0x4b0ac8
mov eax, dword [edx + ecx*8 + 0xc]
push eax
call fcn.00413c10
mov dword [ebp - 0xec], eax
fild dword [ebp - 0xec]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x435fd2
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x4360d0
test eax, eax
jne 0x436045
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x43607e
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
fld qword [ebp - 0x1c]
fadd qword [0x401430]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x40], 5
fstp qword [ebp - 0x38]
fnstsw ax
test al, 0xd
jne 0x436810
lea eax, [ebp - 0x40]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x24]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x435b6a
jmp 0x435b5b
test eax, eax
jne 0x4360e9
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x436122
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x30]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x80], 0x4005
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x435c37
jmp 0x435c28
cmp ecx, 0xc0000000
jne 0x436271
cmp eax, 0x41731586
jne 0x436271
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx esi, word [edi]
cmp esi, 6
jb 0x43618e
call ebx
mov eax, dword [0x43c06c]
lea edx, [esi + esi*2]
push 0x4b0ac8
mov ecx, dword [eax + edx*8 + 0xc]
push ecx
call fcn.00413c10
mov dword [ebp - 0xf0], eax
fild dword [ebp - 0xf0]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x436184
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x436225
test eax, eax
jne 0x4361f2
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x43596a
jmp 0x43595b
test eax, eax
jne 0x43623e
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x435a0a
jmp 0x4359fb
cmp ecx, 0xd0000000
jne 0x436496
cmp eax, 0x41731586
jne 0x436496
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx esi, word [edi]
cmp esi, 6
jb 0x43629b
call ebx
mov edx, dword [0x43c06c]
lea ecx, [esi + esi*2]
push 0x4b0ac8
mov eax, dword [edx + ecx*8 + 0xc]
push eax
call fcn.00413c10
mov dword [ebp - 0xf4], eax
fild dword [ebp - 0xf4]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x436291
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x4363cc
test eax, eax
jne 0x436304
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x43633d
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
fld qword [ebp - 0x1c]
fadd qword [0x401430]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x40], 5
fstp qword [ebp - 0x38]
fnstsw ax
test al, 0xd
jne 0x436810
lea eax, [ebp - 0x40]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea edx, [ebp - 0x50]
lea eax, [ebp - 0x24]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x436395
push 0x54
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0x2c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x40]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
wait
push 0x4367fd
jmp 0x4367f3
test eax, eax
jne 0x4363e5
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x43641e
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x30]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x1c]
push edx
push eax
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x80], 0x4005
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x24]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x436466
push 0x54
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x2c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
wait
push 0x4367fd
jmp 0x4367f3
cmp ecx, 0xe0000000
jne 0x4366ba
cmp eax, 0x41731586
jne 0x4366ba
mov edi, dword [ebp + 8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx esi, word [edi]
cmp esi, 6
jb 0x4364c0
call ebx
mov eax, dword [0x43c06c]
lea edx, [esi + esi*2]
push 0x4b0af8
mov ecx, dword [eax + edx*8 + 0xc]
push ecx
call fcn.00413c10
mov dword [ebp - 0xf8], eax
fild dword [ebp - 0xf8]
fstp qword [ebp - 0x1c]
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 0x40
jne 0x4364b6
fld qword [ebp - 0x1c]
fcomp qword [0x4012f0]
fnstsw ax
test ah, 1
mov eax, dword [0x43c010]
je 0x4365f0
test eax, eax
jne 0x436528
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov edx, dword [eax]
push eax
call dword [edx + 0x320]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ax, word [edi]
lea edx, [ebp - 0x30]
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x436561
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
fld qword [ebp - 0x1c]
fadd qword [0x401430]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x50]
push ecx
fstp qword [ebp - 0x38]
fnstsw ax
test al, 0xd
jne 0x436810
push edx
mov dword [ebp - 0x40], 5
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x4365b9
push 0x54
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x2c]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x40]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
wait
push 0x4367fd
jmp 0x4367f3
test eax, eax
jne 0x436609
push 0x43c010
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x43c010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x2c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dx, word [edi]
mov esi, eax
lea ecx, [ebp - 0x30]
mov eax, dword [esi]
push ecx
push edx
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x436642
push 0x40
push 0x40cd14
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x80]
lea edx, [ebp - 0x40]
lea eax, [ebp - 0x1c]
push ecx
push edx
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x80], 0x4005
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x24]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x54]
test eax, eax
fnclex
jge 0x43668a
push 0x54
push 0x40cd24
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x2c]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
wait
push 0x4367fd
jmp 0x4367f3
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, 0x80020004
mov dword [ebp - 0x68], ecx
mov eax, 0xa
mov dword [ebp - 0x58], ecx
mov edi, 8
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x88], 0x40dc1c
mov dword [ebp - 0x90], edi
call esi
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x78], 0x40dbb4
mov dword [ebp - 0x80], edi
call esi
lea ecx, [ebp - 0x70]
lea edx, [ebp - 0x60]
push ecx
lea eax, [ebp - 0x50]
push edx
push eax
lea ecx, [ebp - 0x40]
push 4
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
mov esi, eax
lea edx, [ebp - 0x70]
lea eax, [ebp - 0x60]
push edx
lea ecx, [ebp - 0x50]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
cmp esi, 6
jne 0x436780
mov edx, 0x40dc28
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x24]
push eax
call fcn.00415010
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x28]
push ecx
call fcn.004148a0
lea edx, [ebp - 0x28]
lea eax, [ebp - 0x24]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
call fcn.0040bd88
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call esi
mov ecx, dword [0x43c030]
push ecx
call fcn.00413bb0
mov edx, dword [0x43c03c]
push edx
push 0
call fcn.0040bf38
call esi
call dword [sym.imp.MSVBVM60.DLL___vbaEnd]
wait
push 0x4367fd
jmp 0x4367f3
lea ecx, [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
jmp 0x401a5c