Function at 0x4174a0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword fs:[0]
push 0x401316
push eax
mov eax, 0x1ab8
mov dword fs:[0], esp
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401278
xor esi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf4], esi
mov dword [ebp - 0x104], esi
mov dword [ebp - 0x114], esi
mov dword [ebp - 0x124], esi
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x164], esi
mov dword [ebp - 0x174], esi
mov dword [ebp - 0x184], esi
mov dword [ebp - 0x194], esi
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1b4], esi
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x1e4], esi
mov dword [ebp - 0x1f4], esi
mov dword [ebp - 0x204], esi
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x224], esi
mov dword [ebp - 0x234], esi
mov dword [ebp - 0x244], esi
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x264], esi
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x284], esi
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x2a4], esi
mov dword [ebp - 0x2b4], esi
mov dword [ebp - 0x2c4], esi
mov dword [ebp - 0x2d4], esi
mov dword [ebp - 0x2d8], esi
mov dword [ebp - 0x2e8], esi
mov dword [ebp - 0x2f8], esi
mov dword [ebp - 0x308], esi
mov dword [ebp - 0x318], esi
mov dword [ebp - 0x328], esi
mov dword [ebp - 0x32c], esi
mov dword [ebp - 0x33c], esi
mov dword [ebp - 0x34c], esi
mov dword [ebp - 0x350], esi
mov dword [ebp - 0x360], esi
mov dword [ebp - 0x370], esi
mov dword [ebp - 0x380], esi
mov dword [ebp - 0x390], esi
mov dword [ebp - 0x3a0], esi
mov dword [ebp - 0x3a4], esi
mov dword [ebp - 0x3b4], esi
mov dword [ebp - 0x3c4], esi
mov dword [ebp - 0x3d4], esi
mov dword [ebp - 0x3e4], esi
mov dword [ebp - 0x3f4], esi
mov dword [ebp - 0x404], esi
mov dword [ebp - 0x414], esi
mov dword [ebp - 0x424], esi
mov dword [ebp - 0x434], esi
mov dword [ebp - 0x444], esi
mov dword [ebp - 0x454], esi
mov dword [ebp - 0x464], esi
mov dword [ebp - 0x474], esi
mov dword [ebp - 0x484], esi
mov dword [ebp - 0x494], esi
mov dword [ebp - 0x4a4], esi
mov dword [ebp - 0x4b4], esi
mov dword [ebp - 0x4c4], esi
mov dword [ebp - 0x4d4], esi
mov dword [ebp - 0x4e4], esi
mov dword [ebp - 0x4f4], esi
mov dword [ebp - 0x504], esi
mov dword [ebp - 0x508], esi
mov dword [ebp - 0x518], esi
mov dword [ebp - 0x528], esi
mov dword [ebp - 0x538], esi
mov dword [ebp - 0x548], esi
mov dword [ebp - 0x558], esi
mov dword [ebp - 0x568], esi
mov dword [ebp - 0x578], esi
mov dword [ebp - 0x588], esi
mov dword [ebp - 0x598], esi
mov dword [ebp - 0x5a8], esi
mov dword [ebp - 0x5b8], esi
mov dword [ebp - 0x5c8], esi
mov dword [ebp - 0x5d8], esi
mov dword [ebp - 0x5e8], esi
mov dword [ebp - 0x5f8], esi
mov dword [ebp - 0x608], esi
mov dword [ebp - 0x618], esi
mov dword [ebp - 0x628], esi
mov dword [ebp - 0x638], esi
mov dword [ebp - 0x648], esi
mov dword [ebp - 0x64c], esi
mov dword [ebp - 0x65c], esi
mov dword [ebp - 0x66c], esi
mov dword [ebp - 0x67c], esi
mov dword [ebp - 0x68c], esi
mov dword [ebp - 0x69c], esi
mov dword [ebp - 0x6ac], esi
mov dword [ebp - 0x6bc], esi
mov dword [ebp - 0x6cc], esi
mov dword [ebp - 0x6dc], esi
mov dword [ebp - 0x6ec], esi
mov dword [ebp - 0x6fc], esi
mov dword [ebp - 0x70c], esi
mov dword [ebp - 0x710], esi
mov dword [ebp - 0x720], esi
mov dword [ebp - 0x730], esi
mov dword [ebp - 0x740], esi
mov dword [ebp - 0x750], esi
mov dword [ebp - 0x760], esi
mov dword [ebp - 0x770], esi
mov dword [ebp - 0x780], esi
mov dword [ebp - 0x790], esi
mov dword [ebp - 0x794], esi
mov dword [ebp - 0x7a4], esi
mov dword [ebp - 0x7b4], esi
mov dword [ebp - 0x7c4], esi
mov dword [ebp - 0x7d4], esi
mov dword [ebp - 0x7e4], esi
mov dword [ebp - 0x7f4], esi
mov dword [ebp - 0x804], esi
mov dword [ebp - 0x814], esi
mov dword [ebp - 0x824], esi
mov dword [ebp - 0x834], esi
mov dword [ebp - 0x844], esi
mov dword [ebp - 0x854], esi
mov dword [ebp - 0x864], esi
mov dword [ebp - 0x878], esi
mov dword [ebp - 0x888], esi
mov dword [ebp - 0x898], esi
mov dword [ebp - 0x8a8], esi
mov dword [ebp - 0x8b8], esi
mov dword [ebp - 0x8bc], esi
mov dword [ebp - 0x8c0], esi
mov dword [ebp - 0x8d0], esi
mov dword [ebp - 0x8e0], esi
mov dword [ebp - 0x8f0], esi
mov dword [ebp - 0x900], esi
mov dword [ebp - 0x910], esi
mov dword [ebp - 0x920], esi
mov dword [ebp - 0x930], esi
mov dword [ebp - 0x940], esi
mov dword [ebp - 0x950], esi
mov dword [ebp - 0x960], esi
mov dword [ebp - 0x970], esi
mov dword [ebp - 0x980], esi
mov dword [ebp - 0x990], esi
mov dword [ebp - 0x9a0], esi
mov dword [ebp - 0x9b0], esi
mov dword [ebp - 0x9c0], esi
mov dword [ebp - 0x9d0], esi
mov dword [ebp - 0x9e0], esi
mov dword [ebp - 0x9f0], esi
mov dword [ebp - 0xa00], esi
mov dword [ebp - 0xa10], esi
mov dword [ebp - 0xa14], esi
mov dword [ebp - 0xa18], esi
mov dword [ebp - 0xa1c], esi
mov dword [ebp - 0xa20], esi
mov dword [ebp - 0xa24], esi
mov dword [ebp - 0xa34], esi
mov dword [ebp - 0xa44], esi
mov dword [ebp - 0xa54], esi
mov dword [ebp - 0xa64], esi
mov dword [ebp - 0xa74], esi
mov dword [ebp - 0xa84], esi
mov dword [ebp - 0xa94], esi
mov dword [ebp - 0xaa4], esi
mov dword [ebp - 0xab4], esi
mov dword [ebp - 0xac4], esi
mov dword [ebp - 0xad4], esi
mov dword [ebp - 0xae4], esi
mov dword [ebp - 0xaf4], esi
mov dword [ebp - 0xb04], esi
mov dword [ebp - 0xb14], esi
mov dword [ebp - 0xb24], esi
mov dword [ebp - 0xb34], esi
mov dword [ebp - 0xb44], esi
mov dword [ebp - 0xb54], esi
mov dword [ebp - 0xb64], esi
mov dword [ebp - 0xb74], esi
mov dword [ebp - 0xb84], esi
mov dword [ebp - 0xb94], esi
mov dword [ebp - 0xba4], esi
mov dword [ebp - 0xbb4], esi
mov dword [ebp - 0xbc4], esi
mov dword [ebp - 0xbd4], esi
mov dword [ebp - 0xbe4], esi
mov dword [ebp - 0xbf4], esi
mov dword [ebp - 0xc04], esi
mov dword [ebp - 0xc14], esi
mov dword [ebp - 0xc24], esi
mov dword [ebp - 0xc34], esi
mov dword [ebp - 0xc44], esi
mov dword [ebp - 0xc54], esi
mov dword [ebp - 0xc64], esi
mov dword [ebp - 0xc74], esi
mov dword [ebp - 0xc78], esi
mov dword [ebp - 0xc9c], esi
mov dword [ebp - 0xcac], esi
mov dword [ebp - 0xcbc], esi
mov dword [ebp - 0xccc], esi
mov dword [ebp - 0xcdc], esi
mov dword [ebp - 0xcec], esi
mov dword [ebp - 0xcfc], esi
mov dword [ebp - 0xd0c], esi
mov dword [ebp - 0xd1c], esi
mov dword [ebp - 0xd2c], esi
mov dword [ebp - 0xd3c], esi
mov dword [ebp - 0xd4c], esi
mov dword [ebp - 0xd5c], esi
mov dword [ebp - 0xd6c], esi
mov dword [ebp - 0xd7c], esi
mov dword [ebp - 0xd8c], esi
mov dword [ebp - 0xd9c], esi
mov dword [ebp - 0xdac], esi
mov dword [ebp - 0xdbc], esi
mov dword [ebp - 0xdcc], esi
mov dword [ebp - 0xddc], esi
mov dword [ebp - 0xdec], esi
mov dword [ebp - 0xdfc], esi
mov dword [ebp - 0xe0c], esi
mov dword [ebp - 0xe1c], esi
mov dword [ebp - 0xe2c], esi
mov dword [ebp - 0xe3c], esi
mov dword [ebp - 0xe4c], esi
mov dword [ebp - 0xe5c], esi
mov dword [ebp - 0xe6c], esi
mov dword [ebp - 0xe7c], esi
mov dword [ebp - 0xe8c], esi
mov dword [ebp - 0xe9c], esi
mov dword [ebp - 0xeac], esi
mov dword [ebp - 0xebc], esi
mov dword [ebp - 0xecc], esi
mov dword [ebp - 0xedc], esi
mov dword [ebp - 0xeec], esi
mov dword [ebp - 0xefc], esi
mov dword [ebp - 0xf0c], esi
mov dword [ebp - 0xf1c], esi
mov dword [ebp - 0xf2c], esi
mov dword [ebp - 0xf3c], esi
mov dword [ebp - 0xf4c], esi
mov dword [ebp - 0xf5c], esi
mov dword [ebp - 0xf6c], esi
mov dword [ebp - 0xf7c], esi
mov dword [ebp - 0xf8c], esi
mov dword [ebp - 0xf9c], esi
mov dword [ebp - 0xfac], esi
mov dword [ebp - 0xfbc], esi
mov dword [ebp - 0xfcc], esi
mov dword [ebp - 0xfdc], esi
mov dword [ebp - 0xfec], esi
mov dword [ebp - 0xffc], esi
mov dword [ebp - 0x100c], esi
mov dword [ebp - 0x101c], esi
mov dword [ebp - 0x102c], esi
mov dword [ebp - 0x103c], esi
mov dword [ebp - 0x104c], esi
mov dword [ebp - 0x105c], esi
mov dword [ebp - 0x106c], esi
mov dword [ebp - 0x107c], esi
mov dword [ebp - 0x108c], esi
mov dword [ebp - 0x109c], esi
mov dword [ebp - 0x10ac], esi
mov dword [ebp - 0x10bc], esi
mov dword [ebp - 0x10cc], esi
mov dword [ebp - 0x10dc], esi
mov dword [ebp - 0x10ec], esi
mov dword [ebp - 0x10fc], esi
mov dword [ebp - 0x110c], esi
mov dword [ebp - 0x111c], esi
mov dword [ebp - 0x112c], esi
mov dword [ebp - 0x113c], esi
mov dword [ebp - 0x114c], esi
mov dword [ebp - 0x115c], esi
mov dword [ebp - 0x116c], esi
mov dword [ebp - 0x117c], esi
mov dword [ebp - 0x118c], esi
mov dword [ebp - 0x119c], esi
mov dword [ebp - 0x11ac], esi
mov dword [ebp - 0x11bc], esi
mov dword [ebp - 0x11cc], esi
mov dword [ebp - 0x11dc], esi
mov dword [ebp - 0x11ec], esi
mov dword [ebp - 0x11fc], esi
mov dword [ebp - 0x120c], esi
mov dword [ebp - 0x121c], esi
mov dword [ebp - 0x122c], esi
mov dword [ebp - 0x123c], esi
mov dword [ebp - 0x124c], esi
mov dword [ebp - 0x125c], esi
mov dword [ebp - 0x126c], esi
mov dword [ebp - 0x127c], esi
mov dword [ebp - 0x128c], esi
mov dword [ebp - 0x129c], esi
mov dword [ebp - 0x12ac], esi
mov dword [ebp - 0x12bc], esi
mov dword [ebp - 0x12cc], esi
mov dword [ebp - 0x12dc], esi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x12ec], esi
mov dword [ebp - 0x12fc], esi
mov dword [ebp - 0x130c], esi
mov dword [ebp - 0x131c], esi
mov dword [ebp - 0x132c], esi
mov dword [ebp - 0x133c], esi
mov dword [ebp - 0x134c], esi
mov dword [ebp - 0x135c], esi
mov dword [ebp - 0x136c], esi
mov dword [ebp - 0x137c], esi
mov dword [ebp - 0x138c], esi
mov dword [ebp - 0x139c], esi
mov dword [ebp - 0x13ac], esi
mov dword [ebp - 0x13bc], esi
mov dword [ebp - 0x13cc], esi
mov dword [ebp - 0x13dc], esi
mov dword [ebp - 0x13ec], esi
mov dword [ebp - 0x13fc], esi
mov dword [ebp - 0x140c], esi
mov dword [ebp - 0x141c], esi
mov dword [ebp - 0x142c], esi
mov dword [ebp - 0x143c], esi
mov dword [ebp - 0x144c], esi
mov dword [ebp - 0x145c], esi
mov dword [ebp - 0x146c], esi
mov dword [ebp - 0x147c], esi
mov dword [ebp - 0x148c], esi
mov dword [ebp - 0x149c], esi
mov dword [ebp - 0x14ac], esi
mov dword [ebp - 0x14bc], esi
mov dword [ebp - 0x14cc], esi
mov dword [ebp - 0x14dc], esi
mov dword [ebp - 0x14ec], esi
mov dword [ebp - 0x14fc], esi
mov dword [ebp - 0x150c], esi
mov dword [ebp - 0x151c], esi
mov dword [ebp - 0x152c], esi
mov dword [ebp - 0x153c], esi
mov dword [ebp - 0x154c], esi
mov dword [ebp - 0x155c], esi
mov dword [ebp - 0x156c], esi
mov dword [ebp - 0x157c], esi
mov dword [ebp - 0x158c], esi
mov dword [ebp - 0x159c], esi
mov dword [ebp - 0x15ac], esi
mov dword [ebp - 0x15bc], esi
mov dword [ebp - 0x15cc], esi
mov dword [ebp - 0x15dc], esi
mov dword [ebp - 0x15ec], esi
mov dword [ebp - 0x15fc], esi
mov dword [ebp - 0x160c], esi
mov dword [ebp - 0x161c], esi
mov dword [ebp - 0x162c], esi
mov dword [ebp - 0x163c], esi
mov dword [ebp - 0x164c], esi
mov dword [ebp - 0x165c], esi
mov dword [ebp - 0x166c], esi
mov dword [ebp - 0x167c], esi
mov dword [ebp - 0x168c], esi
mov dword [ebp - 0x169c], esi
mov dword [ebp - 0x16ac], esi
mov dword [ebp - 0x16bc], esi
mov eax, dword [edi]
mov ebx, 8
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbe4], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0xbe4]
push esi
push ecx
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbe4], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcDir]
mov dword [ebp - 0xa34], ebx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x328]
call ebx
push 0x401d54
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push 0x442024
call edi
push 0x401d54
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
push 0x442028
call edi
push 0x401d54
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
push 0x442038
call edi
push 0x401d88
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
push 0x442050
call edi
push 0x401d88
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
push 0x442054
call edi
mov eax, dword [0x442010]
mov edx, 8
push 0xffffffffffffffff
mov dword [ebp - 0xbe4], edx
mov dword [ebp - 0xbf4], edx
mov dword [ebp - 0xc04], edx
mov dword [ebp - 0xc14], edx
mov edx, dword [0x442024]
push 1
mov ecx, 9
push esi
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0xc24], ecx
mov dword [ebp - 0xbdc], 0x4028f4
mov dword [ebp - 0xbec], 0x402960
mov dword [ebp - 0xbfc], 0x4029a0
mov dword [ebp - 0xc0c], 0x4029d8
mov edi, dword [edx]
sub esp, 0x10
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0xc20]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xbe4]
push ecx
push 0x4420d0
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xc18]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa54]
push 0x442110
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa74]
push 0x4420f0
push edx
call esi
push eax
lea eax, [ebp - 0xa84]
push 0x442170
push eax
call esi
lea ecx, [ebp - 0xc14]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
mov ecx, dword [0x442024]
push ecx
call dword [edi + 0xa0]
test eax, eax
fnclex
jge 0x417f95
mov edx, dword [0x442024]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xa0
push 0x4020a8
push edx
push eax
call edi
jmp 0x417f9b
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa94]
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x442024]
add esp, 0x20
lea edx, [ebp - 0xc78]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x418000
mov ecx, dword [0x442024]
push 0x50
push 0x4020a8
push ecx
push eax
call edi
cmp word [ebp - 0xc78], 0
jne 0x43e565
mov eax, dword [0x442024]
push eax
mov edx, dword [eax]
call dword [edx + 0x98]
test eax, eax
fnclex
jge 0x418036
mov ecx, dword [0x442024]
push 0x98
push 0x4020a8
push ecx
push eax
call edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov eax, dword [0x442024]
lea ecx, [ebp - 0xc78]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x418069
mov edx, dword [0x442024]
push 0x50
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442024]
cmp word [ebp - 0xc78], 0
mov ecx, dword [eax]
jne 0x418766
lea edx, [ebp - 0xa20]
push edx
push eax
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4180a4
mov ecx, dword [0x442024]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0xa20]
mov eax, 8
mov dword [ebp - 0xbdc], 0x4027d0
mov dword [ebp - 0xbe4], eax
mov edx, dword [ecx]
mov dword [ebp - 0xc80], ecx
lea ecx, [ebp - 0xa24]
push ecx
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x418115
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
push edx
push eax
mov ecx, dword [eax]
mov dword [ebp - 0xc88], eax
call dword [ecx + 0x34]
test eax, eax
fnclex
jge 0x418149
mov ecx, dword [ebp - 0xc88]
push 0x34
push 0x4026a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbec], 0x402614
mov dword [ebp - 0xbf4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea edx, [ebp - 0xa44]
push 0xffffffffffffffff
lea eax, [ebp - 0xa34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0x3f4]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa24]
lea eax, [ebp - 0xa20]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea eax, [ebp - 0x3f4]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
sub eax, 1
lea edx, [ebp - 0xbe4]
jo 0x43f046
mov dword [ebp - 0xbec], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xcac]
push ecx
lea eax, [ebp - 0xc9c]
push edx
lea ecx, [ebp - 0x1e4]
push eax
push ecx
mov dword [ebp - 0xbf4], 3
mov dword [ebp - 0xbfc], 0
mov dword [ebp - 0xc04], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x418731
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0xbe4], ecx
lea eax, [ebp - 0x1e4]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbf4], 0
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x3f4]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call edi
add esp, 0x1c
push eax
lea eax, [ebp - 0xbf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xa34]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x418711
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0xbe4], ecx
lea eax, [ebp - 0x1e4]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x3f4]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call edi
add esp, 0x1c
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbec], 0x401ff4
mov dword [ebp - 0xbf4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0xa44]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0xa10]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 2
xor eax, eax
push ecx
mov dword [ebp - 0xbe4], ecx
mov edx, esp
mov dword [ebp - 0xc14], ecx
mov dword [ebp - 0xbdc], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbfc], 0x401ff4
mov dword [ebp - 0xc04], 8
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa10]
push ecx
mov dword [ebp - 0xc0c], 1
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call edi
add esp, 0x1c
lea ecx, [ebp - 0xa44]
push eax
lea eax, [ebp - 0xc04]
push eax
push ecx
call esi
push eax
mov eax, dword [ebp - 0xc14]
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xc10]
mov dword [edx], eax
mov eax, dword [ebp - 0xc0c]
push 1
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xc08]
mov dword [edx + 8], eax
lea eax, [ebp - 0xa54]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0xa10]
push edx
push eax
call edi
add esp, 0x1c
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x8f0]
call ebx
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 2
mov edx, esp
mov ecx, eax
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbe4], ecx
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
push 1
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa10]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call edi
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x7d4]
call ebx
lea eax, [ebp - 0xa10]
mov dword [ebp - 0xbdc], 1
push eax
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0xbec], eax
mov eax, 3
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbfc], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xccc]
push ecx
lea eax, [ebp - 0xcbc]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xc04], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41864b
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x7d4]
mov dword [ebp - 0xbec], edx
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x401ff4
mov dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbf4], 0x400c
call esi
mov ecx, dword [ebp - 0xbf4]
push eax
mov edx, dword [ebp - 0xbf0]
sub esp, 0x10
mov eax, esp
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0xbec]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xbe8]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xa44]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0xa10]
push eax
push ecx
call edi
add esp, 0x1c
lea edx, [ebp - 0xa54]
push eax
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x7d4]
call ebx
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xccc]
lea eax, [ebp - 0xcbc]
lea ecx, [ebp - 0xb0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x418577
mov eax, dword [0x442050]
lea ecx, [ebp - 0xc78]
push ecx
lea ecx, [ebp - 0x8f0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x30]
test eax, eax
fnclex
jge 0x41867f
mov edx, dword [0x442050]
push 0x30
push 0x401d78
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x4186bf
mov eax, dword [0x442050]
lea edx, [ebp - 0x7d4]
push edx
lea edx, [ebp - 0x8f0]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x418711
mov ecx, dword [0x442050]
push 0x28
push 0x401d78
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x418711
lea edx, [ebp - 0x7d4]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x442050]
lea ecx, [ebp - 0xa34]
push ecx
lea ecx, [ebp - 0x8f0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x20]
test eax, eax
fnclex
jge 0x418705
mov edx, dword [0x442050]
push 0x20
push 0x401d78
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xcac]
lea ecx, [ebp - 0xc9c]
push eax
lea edx, [ebp - 0x1e4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x418275
mov eax, dword [0x442024]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x90]
test eax, eax
fnclex
jge 0x41803c
mov edx, dword [0x442024]
push 0x90
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x41803c
push eax
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x41878b
mov edx, dword [0x442024]
push 0x80
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x5e8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 1
push 0xffffffffffffffff
push 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edi, dword [sym.imp.MSVBVM60.DLL_rtcFileLength]
push 0
push 1
call edi
sub eax, 1
jo 0x43f046
push eax
push 1
push 0x11
push 0x44203c
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
push 1
call edi
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbe4], 3
call ebx
push 1
push 0x44203c
push 0x402a08
call dword [sym.imp.MSVBVM60.DLL___vbaGetOwner3]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
xor edi, edi
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x7c4]
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xc04]
push edx
lea ecx, [ebp - 0xcec]
push eax
lea edx, [ebp - 0xcdc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x13
mov dword [ebp - 0xbfc], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
xor edi, edi
cmp eax, edi
je 0x4189dd
mov eax, dword [0x44203c]
cmp eax, edi
je 0x4188eb
cmp word [eax], 1
jne 0x4188eb
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44203c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x4188e7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov eax, edi
jmp 0x4188f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0
jne 0x41893a
lea eax, [ebp - 0x7c4]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x401dd8
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x7c4]
call ebx
jmp 0x4189bd
test ecx, ecx
je 0x41896e
cmp word [ecx], 1
jne 0x41896e
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41896a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
jmp 0x418974
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x7c4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x7c4]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xcec]
lea ecx, [ebp - 0xcdc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x4188a1
lea eax, [ebp - 0x7c4]
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x7c4]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xd0c]
push ecx
lea eax, [ebp - 0xcfc]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x25
mov dword [ebp - 0xbfc], 0x24
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x418b6c
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x418ad1
cmp word [eax], 1
jne 0x418ad1
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x418acb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x418ad7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0xa0]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0xa0]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xd0c]
lea ecx, [ebp - 0xcfc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x418a78
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x4a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, 2
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xd2c]
push ecx
lea eax, [ebp - 0xd1c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x2b
mov dword [ebp - 0xbfc], 0x28
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x418d40
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x418ca5
cmp word [eax], 1
jne 0x418ca5
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x418c9f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x418cab
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x4a4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x4a4]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xd2c]
lea ecx, [ebp - 0xd1c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x418c4c
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x4a4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x4a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, 2
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xd4c]
push ecx
lea eax, [ebp - 0xd3c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x2b
mov dword [ebp - 0xbfc], 0x28
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x418f14
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x418e79
cmp word [eax], 1
jne 0x418e79
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x418e73
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x418e7f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x318]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x318]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xd4c]
lea ecx, [ebp - 0xd3c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x418e20
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x318]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x920]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x8e0]
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xd6c]
push ecx
lea eax, [ebp - 0xd5c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x31
mov dword [ebp - 0xbfc], 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x4190ea
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x41904f
cmp word [eax], 1
jne 0x41904f
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x419049
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x419055
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x8e0]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x8e0]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xd6c]
lea ecx, [ebp - 0xd5c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x418ff6
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x8e0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x294]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0xd7c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xd7c]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x41919d
mov dword [ebp - 0xbdc], 0x402a24
jmp 0x419246
lea ecx, [ebp - 0xd7c]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x5a
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4191d6
mov dword [ebp - 0xbdc], 0x402a30
jmp 0x419246
lea eax, [ebp - 0xd7c]
lea ecx, [ebp - 0xbe4]
push eax
push ecx
mov dword [ebp - 0xbdc], 0xb4
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x41920f
mov dword [ebp - 0xbdc], 0x402a40
jmp 0x419246
lea edx, [ebp - 0xd7c]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 0x10e
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x419262
mov dword [ebp - 0xbdc], 0x402a50
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov ecx, dword [0x44203c]
cmp ecx, edi
je 0x41929d
cmp word [ecx], 1
jne 0x41929d
mov edx, dword [ecx + 0x14]
mov eax, 0x33
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4192a9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov eax, dword [ebp - 0xc7c]
jmp 0x4192a9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov ecx, dword [ecx + 0xc]
mov dl, byte [ecx + eax]
lea ecx, [ebp - 0x1c4]
mov byte [ebp - 0xbdc], dl
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0x11
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x760]
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xd9c]
push edx
lea ecx, [ebp - 0xd8c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x35
mov dword [ebp - 0xbfc], 0x34
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x419439
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x41939e
cmp word [eax], 1
jne 0x41939e
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x419398
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x4193a4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x760]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x760]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xd9c]
lea edx, [ebp - 0xd8c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x419346
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x760]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
mov ecx, 0x4420a0
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x528]
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xdbc]
push edx
lea ecx, [ebp - 0xdac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x37
mov dword [ebp - 0xbfc], 0x36
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x41960d
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x419572
cmp word [eax], 1
jne 0x419572
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41956c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x419578
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x528]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x528]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xdbc]
lea edx, [ebp - 0xdac]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41951a
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x528]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
mov ecx, 0x4420b0
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x750]
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xddc]
push edx
lea ecx, [ebp - 0xdcc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x3b
mov dword [ebp - 0xbfc], 0x38
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x4197e1
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
cmp eax, edi
je 0x419746
cmp word [eax], 1
jne 0x419746
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x419740
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
xor edi, edi
jmp 0x41974c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x750]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], edi
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x750]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xddc]
lea edx, [ebp - 0xdcc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x4196ee
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x750]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x864]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x864]
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], edi
push eax
push ecx
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x419897
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xbdc], 6
mov dword [ebp - 0xbe4], 2
call ebx
jmp 0x4198a9
lea edx, [ebp - 0x864]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
mov ecx, 0x442070
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xdfc]
push ecx
lea eax, [ebp - 0xdec]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x50
mov dword [ebp - 0xbfc], 0x3c
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x419a57
mov eax, dword [0x44203c]
cmp eax, edi
je 0x419969
cmp word [eax], 1
jne 0x419969
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44203c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x419965
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov eax, edi
jmp 0x419975
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0
jne 0x4199b5
lea eax, [ebp - 0xbe4]
push 0x442070
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x401dd8
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
mov ecx, 0x442070
call ebx
jmp 0x419a35
test ecx, ecx
je 0x4199e9
cmp word [ecx], 1
jne 0x4199e9
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x4199e5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
jmp 0x4199ef
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0xa34]
push 0x442070
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
mov edx, eax
mov ecx, 0x442070
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xdfc]
lea eax, [ebp - 0xdec]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
xor edi, edi
jmp 0x419921
lea edx, [ebp - 0xa34]
push 0x442070
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0xa34]
mov ecx, 0x442070
call ebx
lea edx, [ebp - 0xbe4]
mov ecx, 0x442080
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 2
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xe1c]
push edx
lea ecx, [ebp - 0xe0c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x63
mov dword [ebp - 0xbfc], 0x52
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
cmp eax, edi
je 0x419c24
mov eax, dword [0x44203c]
cmp eax, edi
je 0x419b36
cmp word [eax], 1
jne 0x419b36
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44203c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x419b32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov eax, edi
jmp 0x419b42
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
cmp byte [edx + eax], 0
jne 0x419b82
lea eax, [ebp - 0xbe4]
push 0x442070
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x401dd8
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
mov ecx, 0x442070
call ebx
jmp 0x419c02
test ecx, ecx
je 0x419bb6
cmp word [ecx], 1
jne 0x419bb6
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x419bb2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
jmp 0x419bbc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0xa34]
push 0x442080
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
mov edx, eax
mov ecx, 0x442080
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xe1c]
lea eax, [ebp - 0xe0c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
xor edi, edi
jmp 0x419aee
lea edx, [ebp - 0xa34]
push 0x442080
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0xa34]
mov ecx, 0x442080
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push 1
lea eax, [ebp - 0xbe4]
push 0x442080
push eax
lea ecx, [ebp - 0xa34]
push 0
push ecx
mov dword [ebp - 0xbdc], 0x402a60
mov dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbf4], 0x8002
call edi
lea edx, [ebp - 0xbf4]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
lea ecx, [ebp - 0xa34]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x419d43
push 1
lea eax, [ebp - 0xbe4]
push 0x442080
push eax
lea ecx, [ebp - 0xa34]
push 0
push ecx
mov dword [ebp - 0xbdc], 0x402170
mov dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbf4], 2
call edi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea ecx, [ebp - 0xa54]
push 0x442080
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0x66c]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x740]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xe3c]
push ecx
lea eax, [ebp - 0xe2c]
push edx
lea ecx, [ebp - 0xb0]
mov edi, 2
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x67
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x66
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x419ebb
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x419e1c
cmp word [eax], 1
jne 0x419e1c
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x419e13
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x419e22
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x740]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x740]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xe3c]
lea ecx, [ebp - 0xe2c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x419dc0
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x740]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
mov ecx, 0x442090
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa00]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xe5c]
push ecx
lea eax, [ebp - 0xe4c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x95
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x94
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a04f
mov eax, dword [0x44203c]
test eax, eax
je 0x419fe0
cmp word [eax], 1
jne 0x419fe0
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x419fd7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x419fe6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0xa00]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0xa00]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xe5c]
lea ecx, [ebp - 0xe4c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x419f9a
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa00]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x402a6c
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0xa00]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x9f0]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xe7c]
push edx
lea ecx, [ebp - 0xe6c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x97
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x96
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a1b1
mov eax, dword [0x44203c]
test eax, eax
je 0x41a142
cmp word [eax], 1
jne 0x41a142
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a139
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a148
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x9f0]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x9f0]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xe7c]
lea ecx, [ebp - 0xe6c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a0fc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x65c]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xe9c]
push edx
lea ecx, [ebp - 0xe8c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x99
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x98
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a2de
mov eax, dword [0x44203c]
test eax, eax
je 0x41a26f
cmp word [eax], 1
jne 0x41a26f
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a266
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a275
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x65c]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xe9c]
lea ecx, [ebp - 0xe8c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a229
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xebc]
push edx
lea ecx, [ebp - 0xeac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x9b
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x9a
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a40b
mov eax, dword [0x44203c]
test eax, eax
je 0x41a39c
cmp word [eax], 1
jne 0x41a39c
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a393
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a3a2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x1b4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x1b4]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xebc]
lea ecx, [ebp - 0xeac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a356
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xedc]
push edx
lea ecx, [ebp - 0xecc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x9d
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x9c
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a52f
mov eax, dword [0x44203c]
test eax, eax
je 0x41a4c6
cmp word [eax], 1
jne 0x41a4c6
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a4bd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a4cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x80]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xedc]
lea ecx, [ebp - 0xecc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a480
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xefc]
push edx
lea ecx, [ebp - 0xeec]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x9f
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x9e
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a6a1
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41a602
cmp word [eax], 1
jne 0x41a602
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a5f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a608
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x494]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xefc]
lea edx, [ebp - 0xeec]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a5a7
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xbfc], 0x402418
mov dword [ebp - 0xc04], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x494]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
push 1
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xa3c], eax
push 1
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xa44], 3
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0x308]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xf1c]
push ecx
lea eax, [ebp - 0xf0c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xa1
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xa0
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a88a
mov eax, dword [0x44203c]
test eax, eax
je 0x41a81b
cmp word [eax], 1
jne 0x41a81b
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a812
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a821
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x1a4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x1a4]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xf1c]
lea ecx, [ebp - 0xf0c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a7d5
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x1a4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x402a6c
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x1a4]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x194]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xf3c]
push edx
lea ecx, [ebp - 0xf2c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xa3
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xa2
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41a9ec
mov eax, dword [0x44203c]
test eax, eax
je 0x41a97d
cmp word [eax], 1
jne 0x41a97d
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41a974
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41a983
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x194]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x194]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xf3c]
lea ecx, [ebp - 0xf2c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41a937
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x7b4]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xf5c]
push edx
lea ecx, [ebp - 0xf4c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xa5
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xa4
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41ab19
mov eax, dword [0x44203c]
test eax, eax
je 0x41aaaa
cmp word [eax], 1
jne 0x41aaaa
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41aaa1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41aab0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x7b4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x7b4]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xf5c]
lea ecx, [ebp - 0xf4c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41aa64
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x2f8]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xf7c]
push edx
lea ecx, [ebp - 0xf6c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xa7
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xa6
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41ac46
mov eax, dword [0x44203c]
test eax, eax
je 0x41abd7
cmp word [eax], 1
jne 0x41abd7
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41abce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41abdd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x2f8]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x2f8]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xf7c]
lea ecx, [ebp - 0xf6c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41ab91
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x284]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xf9c]
push edx
lea ecx, [ebp - 0xf8c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xa9
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xa8
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41ad73
mov eax, dword [0x44203c]
test eax, eax
je 0x41ad04
cmp word [eax], 1
jne 0x41ad04
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41acfb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41ad0a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x284]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xf9c]
lea ecx, [ebp - 0xf8c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41acbe
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xfbc]
push edx
lea ecx, [ebp - 0xfac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xab
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xaa
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41aee5
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41ae46
cmp word [eax], 1
jne 0x41ae46
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41ae3d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41ae4c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x494]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xfbc]
lea edx, [ebp - 0xfac]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41adeb
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xbfc], 0x402418
mov dword [ebp - 0xc04], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x494]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
push 1
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xa3c], eax
push 1
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xa44], 3
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0x3e4]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xfdc]
push ecx
lea eax, [ebp - 0xfcc]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xad
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xac
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b0c5
mov eax, dword [0x44203c]
test eax, eax
je 0x41b05c
cmp word [eax], 1
jne 0x41b05c
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b053
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b062
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x70]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xfdc]
lea ecx, [ebp - 0xfcc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b016
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x402a6c
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x70]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0xffc]
push edx
lea ecx, [ebp - 0xfec]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xaf
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xae
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b218
mov eax, dword [0x44203c]
test eax, eax
je 0x41b1af
cmp word [eax], 1
jne 0x41b1af
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b1a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b1b5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x60]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xffc]
lea ecx, [ebp - 0xfec]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b169
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x730]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x101c]
push edx
lea ecx, [ebp - 0x100c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xb1
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xb0
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b345
mov eax, dword [0x44203c]
test eax, eax
je 0x41b2d6
cmp word [eax], 1
jne 0x41b2d6
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b2cd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b2dc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x730]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x730]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x101c]
lea ecx, [ebp - 0x100c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b290
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x274]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x103c]
push edx
lea ecx, [ebp - 0x102c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xb3
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xb2
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b472
mov eax, dword [0x44203c]
test eax, eax
je 0x41b403
cmp word [eax], 1
jne 0x41b403
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b3fa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b409
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x274]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x274]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x103c]
lea ecx, [ebp - 0x102c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b3bd
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x184]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x105c]
push edx
lea ecx, [ebp - 0x104c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xb5
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xb4
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b59f
mov eax, dword [0x44203c]
test eax, eax
je 0x41b530
cmp word [eax], 1
jne 0x41b530
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b527
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b536
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x184]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x184]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x105c]
lea ecx, [ebp - 0x104c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b4ea
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x107c]
push edx
lea ecx, [ebp - 0x106c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xb7
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xb6
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b711
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41b672
cmp word [eax], 1
jne 0x41b672
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b669
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b678
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x494]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x107c]
lea edx, [ebp - 0x106c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b617
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xbfc], 0x402418
mov dword [ebp - 0xc04], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x494]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
push 1
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xa3c], eax
push 1
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xa44], 3
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0x370]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x174]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x109c]
push ecx
lea eax, [ebp - 0x108c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xb9
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xb8
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41b8fa
mov eax, dword [0x44203c]
test eax, eax
je 0x41b88b
cmp word [eax], 1
jne 0x41b88b
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b882
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b891
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x174]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x174]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x109c]
lea ecx, [ebp - 0x108c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b845
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x174]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x402a6c
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x174]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x164]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x10bc]
push edx
lea ecx, [ebp - 0x10ac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xbb
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xba
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41ba5c
mov eax, dword [0x44203c]
test eax, eax
je 0x41b9ed
cmp word [eax], 1
jne 0x41b9ed
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41b9e4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41b9f3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x164]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x164]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x10bc]
lea ecx, [ebp - 0x10ac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41b9a7
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x7a4]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x10dc]
push edx
lea ecx, [ebp - 0x10cc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xbd
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xbc
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41bb89
mov eax, dword [0x44203c]
test eax, eax
je 0x41bb1a
cmp word [eax], 1
jne 0x41bb1a
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41bb11
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41bb20
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x7a4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x7a4]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x10dc]
lea ecx, [ebp - 0x10cc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41bad4
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x2e8]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x10fc]
push edx
lea ecx, [ebp - 0x10ec]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xbf
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xbe
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41bcb6
mov eax, dword [0x44203c]
test eax, eax
je 0x41bc47
cmp word [eax], 1
jne 0x41bc47
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41bc3e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41bc4d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x2e8]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x2e8]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x10fc]
lea ecx, [ebp - 0x10ec]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41bc01
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x264]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x111c]
push edx
lea ecx, [ebp - 0x110c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xc1
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], pe_nt_image_headers32
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41bde3
mov eax, dword [0x44203c]
test eax, eax
je 0x41bd74
cmp word [eax], 1
jne 0x41bd74
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x44203c]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41bd6b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41bd7a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44203c]
mov edx, dword [ecx + 0xc]
xor ecx, ecx
mov cl, byte [edx + eax]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x264]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x264]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x111c]
lea ecx, [ebp - 0x110c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41bd2e
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x113c]
push edx
lea ecx, [ebp - 0x112c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xc3
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xc2
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41bf55
mov eax, dword [0x44203c]
lea ecx, [ebp - 0xa14]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41beb6
cmp word [eax], 1
jne 0x41beb6
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41bead
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41bebc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x494]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x113c]
lea edx, [ebp - 0x112c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41be5b
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xbfc], 0x402418
mov dword [ebp - 0xc04], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x494]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
push 1
lea ecx, [ebp - 0xa54]
mov dword [ebp - 0xa3c], eax
push 1
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xa44], 3
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0x3d4]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x720]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x115c]
push ecx
lea eax, [ebp - 0x114c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xd3
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xd2
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41c184
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41c0e5
cmp word [eax], 1
jne 0x41c0e5
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41c0dc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41c0eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x720]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x720]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x115c]
lea ecx, [ebp - 0x114c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41c089
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x720]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x9e0]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x484]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x117c]
push ecx
lea eax, [ebp - 0x116c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xd5
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xd4
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41c35f
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41c2c0
cmp word [eax], 1
jne 0x41c2c0
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41c2b7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41c2c6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x484]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x484]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x117c]
lea ecx, [ebp - 0x116c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41c264
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x484]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x9d0]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x119c]
push ecx
lea eax, [ebp - 0x118c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xd7
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xd6
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41c53a
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41c49b
cmp word [eax], 1
jne 0x41c49b
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41c492
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41c4a1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x5c8]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x5c8]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x119c]
lea ecx, [ebp - 0x118c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41c43f
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x5c8]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x9d0]
lea eax, [ebp - 0x9e0]
lea ecx, [ebp - 0xa34]
push edx
push eax
push ecx
mov dword [ebp - 0xbdc], 0x64
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xa54]
call ebx
lea ecx, [ebp - 0xa54]
push edi
lea edx, [ebp - 0xa64]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea eax, [ebp - 0xa64]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
mov dword [ebp - 0xbec], 0x402a78
mov dword [ebp - 0xbf4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x40]
call ebx
lea eax, [ebp - 0xa64]
lea ecx, [ebp - 0xa54]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x154]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xdf
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xdc
mov dword [ebp - 0xc04], edi
push eax
lea ecx, [ebp - 0xc04]
lea edx, [ebp - 0x11bc]
push ecx
lea eax, [ebp - 0x11ac]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41c7bb
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41c71c
cmp word [eax], 1
jne 0x41c71c
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41c713
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41c722
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x154]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x154]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x11bc]
lea ecx, [ebp - 0x11ac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41c6c0
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x154]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x518]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x360]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x11dc]
push ecx
lea eax, [ebp - 0x11cc]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xe5
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xe4
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41c996
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41c8f7
cmp word [eax], 1
jne 0x41c8f7
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41c8ee
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41c8fd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x360]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x360]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x11dc]
lea ecx, [ebp - 0x11cc]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41c89b
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x360]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
mov dword [ebp - 0x64c], eax
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x64c]
push edx
call fcn.00441070
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbdc], 0x402a80
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0xa18]
push 1
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0xa44]
push 1
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa54]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0x648]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x648]
lea ecx, [ebp - 0xa44]
push edx
push 0xe
push eax
push ecx
mov dword [ebp - 0xa2c], 1
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x5b8]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x648]
push edx
push 0xd
lea ecx, [ebp - 0xa44]
push eax
push ecx
mov dword [ebp - 0xa2c], 1
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x854]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x648]
push edx
push 0xc
lea ecx, [ebp - 0xa44]
push eax
push ecx
mov dword [ebp - 0xa2c], 1
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x144]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x648]
push edx
push 0xb
lea ecx, [ebp - 0xa44]
push eax
push ecx
mov dword [ebp - 0xa2c], 1
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x474]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x11fc]
push ecx
lea eax, [ebp - 0x11ec]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xe7
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xe6
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41cd26
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41cc87
cmp word [eax], 1
jne 0x41cc87
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41cc7e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41cc8d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x8d0]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x8d0]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x11fc]
lea ecx, [ebp - 0x11ec]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41cc2b
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x8d0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x638]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x121c]
push ecx
lea eax, [ebp - 0x120c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0xe9
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0xe8
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41cf01
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41ce62
cmp word [eax], 1
jne 0x41ce62
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41ce59
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41ce68
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x638]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x638]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x121c]
lea ecx, [ebp - 0x120c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41ce06
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x638]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbf4], 3
call ebx
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0xbdc], 0x400
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0x134]
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 1
lea eax, [ebp - 0x8c0]
push 0xc
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x9e0]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x9d0]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
mov ecx, 0x442060
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x9c0]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x464]
mov dword [ebp - 0xbdc], 0x40
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call ebx
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
push 0xc
push 0x442058
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
push 0xc
push 0x44205c
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
lea ecx, [ebp - 0x794]
push 0xc
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
lea edx, [ebp - 0x710]
push 0xc
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
lea eax, [ebp - 0x508]
push 0xc
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
mov edx, 0x4420b0
lea ecx, [ebp - 0x124]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x254]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call ebx
mov edx, 0x4420a0
lea ecx, [ebp - 0x9b0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x114]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xbdc], 0xec
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 1
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbec], eax
push ecx
lea edx, [ebp - 0xbf4]
push 0x4420b0
lea eax, [ebp - 0x123c]
push edx
lea ecx, [ebp - 0x122c]
push eax
lea edx, [ebp - 0x70c]
push ecx
push edx
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41f29c
mov eax, 1
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbec], eax
lea eax, [ebp - 0xbe4]
lea edx, [ebp - 0x125c]
push eax
push 0x4420a0
push ecx
lea eax, [ebp - 0x124c]
push edx
lea ecx, [ebp - 0x5a8]
push eax
push ecx
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41f27c
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x90]
push edx
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0x127c]
push ecx
lea eax, [ebp - 0x126c]
push edx
lea ecx, [ebp - 0x1e4]
push eax
push ecx
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41f06b
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0xbe4], 0
call ebx
mov eax, 1
lea edx, [ebp - 0xb0]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbdc], eax
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x128c]
call ebx
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0x128c]
push edx
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0x12ac]
push ecx
lea eax, [ebp - 0x129c]
push edx
lea ecx, [ebp - 0x104]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41d485
mov edx, dword [0x44203c]
lea eax, [ebp - 0xa14]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41d3e6
cmp word [eax], 1
jne 0x41d3e6
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41d3dd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41d3ec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
mov ecx, dword [edx + 0xc]
add ecx, eax
push ecx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0x3a0]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x3a0]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x12ac]
lea ecx, [ebp - 0x129c]
push eax
lea edx, [ebp - 0x104]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41d38a
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x3a0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
mov dword [ebp - 0x3a4], eax
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x3a4]
push edx
call fcn.00441070
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbdc], 0x402a80
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0xa18]
push 1
mov dword [ebp - 0xa2c], eax
lea eax, [ebp - 0xa44]
push 1
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa54]
push ecx
push edx
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0x244]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x1e4]
lea ecx, [ebp - 0x12bc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x12bc]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x41d7ef
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0x244]
push ecx
push 1
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa2c], edi
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [0x442058]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x41d69a
cmp word [eax], di
jne 0x41d69a
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41d655
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41d682
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x41d6a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0x244]
lea eax, [ebp - 0xa44]
push ecx
push 8
push edx
push eax
mov dword [ebp - 0xa2c], 9
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x710]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x41d7ad
cmp word [eax], di
jne 0x41d7ad
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x710]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41d768
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x710]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41d795
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x710]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x41d7b9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x710]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x41f006
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0x12bc]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], 0x8002
call edi
test ax, ax
je 0x41e10a
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0x244]
push eax
push 5
lea edx, [ebp - 0xa44]
mov edi, 1
push ecx
push edx
mov dword [ebp - 0xa2c], edi
mov dword [ebp - 0xa34], 2
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xbf4]
push eax
push ecx
mov dword [ebp - 0xbec], edi
mov dword [ebp - 0xbf4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov di, ax
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
test di, di
je 0x41d9f4
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0xbdc], 0
test eax, eax
mov dword [ebp - 0xbe4], 2
je 0x41d92a
cmp word [eax], 2
jne 0x41d92a
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0x70c]
push ecx
call edi
mov ecx, dword [ebp - 0x710]
mov ebx, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, ebx
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41d8ee
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call edi
mov edi, eax
mov eax, dword [ebp - 0x710]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41d917
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x710]
mov ebx, dword [eax + 0x18]
mov edx, dword [ebp - 0xc88]
imul ebx, edi
add ebx, edx
shl ebx, 4
jmp 0x41d938
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [ebp - 0x710]
test eax, eax
je 0x41d9b3
cmp word [eax], 2
jne 0x41d9b3
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea eax, [ebp - 0x70c]
push eax
call edi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41d96f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call edi
mov ecx, dword [ebp - 0x710]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x41d99c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x710]
mov edi, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul edi, dword [ebp - 0xc7c]
add edi, edx
shl edi, 4
jmp 0x41d9c1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x710]
mov edi, eax
mov eax, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
add eax, ebx
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
mov eax, dword [ebp - 0x710]
mov ecx, dword [eax + 0xc]
add ecx, edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x5a8]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x200
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x41db8a
mov eax, dword [ebp - 0x710]
test eax, eax
je 0x41daa0
cmp word [eax], 2
jne 0x41daa0
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x710]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41da60
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0x710]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41da8d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x710]
mov ebx, dword [eax + 0x18]
mov edx, dword [ebp - 0xc88]
imul ebx, edi
add ebx, edx
shl ebx, 4
jmp 0x41daae
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [ebp - 0x710]
test eax, eax
mov dword [ebp - 0xbdc], 0x200
mov dword [ebp - 0xbe4], 2
je 0x41db3d
cmp word [eax], 2
jne 0x41db3d
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41daf9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [ebp - 0x710]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x41db26
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x710]
mov edi, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul edi, dword [ebp - 0xc7c]
add edi, edx
shl edi, 4
jmp 0x41db4b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x710]
mov edi, eax
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
add ecx, ebx
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov ecx, dword [ebp - 0x710]
mov edx, eax
mov ecx, dword [ecx + 0xc]
add ecx, edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x244]
push edx
push 1
lea ecx, [ebp - 0xa44]
mov edi, 2
push eax
push ecx
mov dword [ebp - 0xa2c], edi
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa18]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x794]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x41dc61
cmp word [eax], di
jne 0x41dc61
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x794]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41dc1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x794]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41dc49
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x794]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x41dc6d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x794]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x244]
lea ecx, [ebp - 0xa44]
push edx
push 8
push eax
push ecx
mov dword [ebp - 0xa2c], 9
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa18]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x508]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x41dd6d
cmp word [eax], di
jne 0x41dd6d
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41dd2f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x508]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41dd5c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x41dd79
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x244]
lea ecx, [ebp - 0xa44]
push edx
push 6
mov edi, 1
push eax
push ecx
mov dword [ebp - 0xa2c], edi
mov dword [ebp - 0xa34], 2
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xbf4]
push edx
push eax
mov dword [ebp - 0xbec], edi
mov dword [ebp - 0xbf4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
mov di, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
test di, di
je 0x41df77
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0xbdc], 0
test eax, eax
mov dword [ebp - 0xbe4], 2
je 0x41deb3
cmp word [eax], 2
jne 0x41deb3
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea eax, [ebp - 0x70c]
push eax
call edi
mov ecx, dword [ebp - 0x508]
mov ebx, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, ebx
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41de77
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call edi
mov edi, eax
mov eax, dword [ebp - 0x508]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41dea0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x508]
mov ebx, dword [eax + 0x18]
mov edx, dword [ebp - 0xc88]
imul ebx, edi
add ebx, edx
shl ebx, 4
jmp 0x41dec1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [ebp - 0x508]
test eax, eax
je 0x41df3c
cmp word [eax], 2
jne 0x41df3c
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41def8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x41df25
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul edi, dword [ebp - 0xc7c]
add edi, edx
shl edi, 4
jmp 0x41df4a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov edi, eax
mov eax, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
add eax, ebx
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0xc]
add ecx, edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x70c]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x200
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x41f006
mov eax, dword [ebp - 0x508]
test eax, eax
je 0x41e021
cmp word [eax], 2
jne 0x41e021
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea eax, [ebp - 0x70c]
push eax
call edi
mov ecx, dword [ebp - 0x508]
mov ebx, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, ebx
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41dfe5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call edi
mov edi, eax
mov eax, dword [ebp - 0x508]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41e00e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x508]
mov ebx, dword [eax + 0x18]
mov edx, dword [ebp - 0xc88]
imul ebx, edi
add ebx, edx
shl ebx, 4
jmp 0x41e02f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [ebp - 0x508]
test eax, eax
mov dword [ebp - 0xbdc], 0x200
mov dword [ebp - 0xbe4], 2
je 0x41e0be
cmp word [eax], 2
jne 0x41e0be
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41e07a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x41e0a7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul edi, dword [ebp - 0xc7c]
add edi, edx
shl edi, 4
jmp 0x41e0cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov edi, eax
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
add ecx, ebx
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov ecx, dword [ebp - 0x508]
mov edx, eax
mov ecx, dword [ecx + 0xc]
add ecx, edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x41f006
lea edx, [ebp - 0x12bc]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 5
mov dword [ebp - 0xbe4], 0x8002
call edi
test ax, ax
je 0x41f006
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0x244]
push ecx
push 0xb
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa2c], 6
mov dword [ebp - 0xa34], 2
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [0x44205c]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x41e201
cmp word [eax], 2
jne 0x41e201
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x44205c]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41e1c7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44205c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41e1f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41e20d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x442058]
add esp, 0xc
test eax, eax
je 0x41e2b2
cmp word [eax], 2
jne 0x41e2b2
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41e278
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41e2a5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41e2be
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
add ecx, eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x41e7ce
mov eax, dword [ebp - 0x710]
test eax, eax
je 0x41e367
cmp word [eax], 2
jne 0x41e367
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea eax, [ebp - 0x70c]
push eax
call edi
mov ecx, dword [ebp - 0x710]
mov ebx, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, ebx
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41e32b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call edi
mov edi, eax
mov eax, dword [ebp - 0x710]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41e354
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x710]
mov ebx, dword [eax + 0x18]
mov ecx, dword [ebp - 0xc80]
imul ebx, edi
add ebx, ecx
shl ebx, 4
jmp 0x41e36f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0xbdc], 0x401ff4
test eax, eax
mov dword [ebp - 0xbe4], 8
je 0x41e404
cmp word [eax], 2
jne 0x41e404
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41e3c0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc84], eax
jb 0x41e3ed
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x508]
mov edi, dword [ecx + 0x18]
mov ecx, dword [ebp - 0xc88]
imul edi, dword [ebp - 0xc84]
add edi, ecx
shl edi, 4
jmp 0x41e40c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [ebp - 0x710]
lea eax, [ebp - 0xbe4]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa34]
add edx, ebx
push edx
push eax
push ecx
call esi
mov edx, dword [ebp - 0x508]
push eax
lea ecx, [ebp - 0xa44]
mov eax, dword [edx + 0xc]
add eax, edi
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x8f0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x442050]
lea ecx, [ebp - 0xc78]
push ecx
lea ecx, [ebp - 0x8f0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x30]
test eax, eax
fnclex
jge 0x41e48c
mov edx, dword [0x442050]
push 0x30
push 0x401d78
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
je 0x41e7ce
mov eax, dword [0x442050]
lea edx, [ebp - 0xa34]
push edx
lea edx, [ebp - 0x8f0]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x24]
test eax, eax
fnclex
jge 0x41e4ce
mov ecx, dword [0x442050]
push 0x24
push 0x401d78
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbdc], 0x401ff4
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea edx, [ebp - 0xa44]
push 0xffffffffffffffff
lea eax, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0xa10]
call edi
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 2
xor eax, eax
push ecx
mov dword [ebp - 0xbe4], ecx
mov edx, esp
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov dword [ebp - 0xbdc], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa10]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call ebx
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x454]
call edi
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [ebp - 0xbe4], ecx
mov eax, 1
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa10]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call ebx
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x504]
call edi
mov eax, 2
sub esp, 0x10
mov ecx, eax
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbe4], ecx
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
push 1
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa10]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call ebx
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x234]
call edi
lea eax, [ebp - 0xa10]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 2
jle 0x41e6b6
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [ebp - 0xbe4], ecx
mov eax, 3
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa10]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call ebx
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x598]
call edi
lea eax, [ebp - 0x70c]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x401ff4
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea eax, [ebp - 0x5a8]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x6fc]
call edi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xa34]
call ebx
mov eax, dword [0x442054]
lea ecx, [ebp - 0xc78]
push ecx
lea ecx, [ebp - 0x6fc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x30]
test eax, eax
fnclex
jge 0x41e742
mov edx, dword [0x442054]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x30
push 0x401d78
push edx
push eax
call edi
jmp 0x41e748
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x41e784
mov eax, dword [0x442054]
lea edx, [ebp - 0x504]
push edx
lea edx, [ebp - 0x6fc]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x41e7ce
mov ecx, dword [0x442054]
push 0x28
push 0x401d78
push ecx
push eax
call edi
jmp 0x41e7ce
lea edx, [ebp - 0x504]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x442054]
lea ecx, [ebp - 0xa34]
push ecx
lea ecx, [ebp - 0x6fc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x20]
test eax, eax
fnclex
jge 0x41e7c6
mov edx, dword [0x442054]
push 0x20
push 0x401d78
push edx
push eax
call edi
lea ecx, [ebp - 0xa34]
call ebx
mov eax, dword [0x44205c]
test eax, eax
je 0x41e83d
cmp word [eax], 2
jne 0x41e83d
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x44205c]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41e803
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44205c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41e830
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41e849
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0x3b4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x41e8f1
mov eax, dword [0x44205c]
test eax, eax
je 0x41e8d4
cmp word [eax], 2
jne 0x41e8d4
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x44205c]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41e89a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44205c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41e8c7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41e8e0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x3b4]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [0x442058]
test eax, eax
je 0x41e969
cmp word [eax], 2
jne 0x41e969
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41e92b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41e956
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x442058]
mov ebx, dword [eax + 0x18]
mov ecx, dword [ebp - 0xc80]
imul ebx, edi
add ebx, ecx
shl ebx, 4
jmp 0x41e971
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [0x44205c]
mov dword [ebp - 0xbdc], 1
test eax, eax
mov dword [ebp - 0xbe4], 0x8002
je 0x41ea05
cmp word [eax], 2
jne 0x41ea05
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41e9c1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [0x44205c]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc84], eax
jb 0x41e9ee
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edi, dword [ecx + 0x18]
mov ecx, dword [ebp - 0xc88]
imul edi, dword [ebp - 0xc84]
add edi, ecx
shl edi, 4
jmp 0x41ea0d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [0x442058]
lea eax, [ebp - 0xbe4]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa34]
add edx, ebx
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
mov edx, dword [0x44205c]
push eax
lea ecx, [ebp - 0x464]
mov eax, dword [edx + 0xc]
lea edx, [ebp - 0xa44]
add eax, edi
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpLt]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x41eaf8
mov eax, dword [0x44205c]
test eax, eax
je 0x41eadb
cmp word [eax], 2
jne 0x41eadb
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x44205c]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41eaa1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x44205c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41eace
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41eae7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x464]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [0x442058]
test eax, eax
je 0x41eb6e
cmp word [eax], 2
jne 0x41eb6e
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea eax, [ebp - 0x70c]
push eax
call edi
mov ecx, dword [0x442058]
mov ebx, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, ebx
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41eb34
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call edi
mov edi, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41eb5b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x442058]
mov ebx, dword [eax + 0x18]
mov ecx, dword [ebp - 0xc80]
imul ebx, edi
add ebx, ecx
shl ebx, 4
jmp 0x41eb76
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [0x44205c]
mov dword [ebp - 0xbdc], 1
test eax, eax
mov dword [ebp - 0xbe4], 0x8002
je 0x41ec0a
cmp word [eax], 2
jne 0x41ec0a
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41ebc6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [0x44205c]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc84], eax
jb 0x41ebf3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edi, dword [ecx + 0x18]
mov ecx, dword [ebp - 0xc88]
imul edi, dword [ebp - 0xc84]
add edi, ecx
shl edi, 4
jmp 0x41ec12
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [0x442058]
lea eax, [ebp - 0xbe4]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa34]
add edx, ebx
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
mov edx, dword [0x44205c]
push eax
lea ecx, [ebp - 0x9c0]
mov eax, dword [edx + 0xc]
lea edx, [ebp - 0xa44]
add eax, edi
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x41ecfb
mov eax, dword [0x44205c]
test eax, eax
je 0x41ecde
cmp word [eax], 2
jne 0x41ecde
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0x70c]
push ecx
call edi
mov ebx, eax
mov eax, dword [0x44205c]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41eca8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call edi
mov ecx, dword [0x44205c]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41ecd1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41ecea
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x9c0]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [0x442058]
test eax, eax
je 0x41ed68
cmp word [eax], 2
jne 0x41ed68
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea eax, [ebp - 0x70c]
push eax
call edi
mov ebx, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41ed32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call edi
mov ecx, dword [0x442058]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41ed5b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
shl eax, 4
jmp 0x41ed74
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov ebx, 1
mov dword [ebp - 0xbe4], 0x8002
mov dword [ebp - 0xbdc], ebx
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xbe4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x41edda
lea ecx, [ebp - 0x9d0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], ebx
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x9d0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x442058]
test eax, eax
je 0x41ee4e
cmp word [eax], 2
jne 0x41ee4e
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41ee0f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41ee3c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
mov ebx, 1
shl eax, 4
jmp 0x41ee5a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov dword [ebp - 0xbdc], ebx
mov dword [ebp - 0xbe4], 0x8002
mov ecx, dword [ecx + 0xc]
add ecx, eax
lea edx, [ebp - 0xbe4]
push ecx
push edx
call edi
test ax, ax
je 0x41eeb7
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], ebx
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x442058]
test eax, eax
je 0x41ef2c
cmp word [eax], 2
jne 0x41ef2c
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x41eeec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x41ef19
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
add eax, ebx
shl eax, 4
jmp 0x41ef38
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xbe4]
push edx
push eax
call edi
test ax, ax
je 0x41f006
lea ecx, [ebp - 0x70c]
lea edx, [ebp - 0x124]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je 0x41ef93
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x70c]
lea ecx, [ebp - 0x124]
call ebx
jmp 0x41ef99
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0x70c]
lea ecx, [ebp - 0x254]
push eax
push ecx
call edi
test ax, ax
je 0x41efbc
lea edx, [ebp - 0x70c]
lea ecx, [ebp - 0x254]
call ebx
lea edx, [ebp - 0x5a8]
lea eax, [ebp - 0x9b0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLt]
test ax, ax
je 0x41efe3
lea edx, [ebp - 0x5a8]
lea ecx, [ebp - 0x9b0]
call ebx
lea ecx, [ebp - 0x5a8]
lea edx, [ebp - 0x114]
push ecx
push edx
call edi
test ax, ax
je 0x41f006
lea edx, [ebp - 0x5a8]
lea ecx, [ebp - 0x114]
call ebx
mov eax, 2
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbe4], eax
lea eax, [ebp - 0xb0]
lea edx, [ebp - 0xa34]
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x127c]
lea ecx, [ebp - 0x126c]
push eax
lea edx, [ebp - 0x1e4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edi, 2
jmp 0x41d2f8
mov eax, dword [0x442058]
test eax, eax
je 0x41f0e2
cmp word [eax], di
jne 0x41f0e2
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41f0a4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [0x442058]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41f0cf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x442058]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 0xc80]
imul eax, edi
add eax, edx
shl eax, 4
jmp 0x41f0e8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18bc], eax
mov eax, dword [0x44205c]
test eax, eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
je 0x41f182
cmp word [eax], 2
jne 0x41f182
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0x70c]
push edx
call edi
mov ecx, dword [0x44205c]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x41f13e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call edi
mov ecx, dword [0x44205c]
mov edi, dword [ecx + 0x14]
mov edx, dword [ecx + 0x10]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc84], eax
jb 0x41f16b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x44205c]
mov edi, dword [ecx + 0x18]
mov ecx, dword [ebp - 0xc88]
imul edi, dword [ebp - 0xc84]
add edi, ecx
shl edi, 4
jmp 0x41f18a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov ecx, dword [0x442058]
mov eax, 0x8002
mov dword [ebp - 0xbec], 0
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbfc], 1
mov dword [ebp - 0xc04], eax
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18bc]
add edx, ecx
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
mov edx, dword [0x44205c]
push eax
lea ecx, [ebp - 0xbf4]
mov eax, dword [edx + 0xc]
lea edx, [ebp - 0xa44]
add eax, edi
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
lea eax, [ebp - 0xa54]
push eax
call edi
push eax
lea ecx, [ebp - 0xc04]
push 0x442060
lea edx, [ebp - 0xa64]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0xa74]
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x41f257
lea edx, [ebp - 0xbe4]
mov ecx, 0x442060
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call ebx
lea ecx, [ebp - 0x125c]
lea edx, [ebp - 0x124c]
push ecx
lea eax, [ebp - 0x5a8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov edi, 2
jmp 0x41d2a4
lea ecx, [ebp - 0x123c]
lea edx, [ebp - 0x122c]
push ecx
lea eax, [ebp - 0x70c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41d251
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x9a0]
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], edi
call ebx
lea ecx, [ebp - 0x3b4]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0x990]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x41f2ff
lea ecx, [ebp - 0x3b4]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
mov edx, eax
lea ecx, [ebp - 0x9a0]
call ebx
lea eax, [ebp - 0x9d0]
lea ecx, [ebp - 0x50]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x9e0]
call ebx
lea eax, [ebp - 0x9d0]
lea ecx, [ebp - 0x9e0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x64
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xa54]
call ebx
lea edx, [ebp - 0xa54]
push edi
lea eax, [ebp - 0xa64]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea ecx, [ebp - 0xa64]
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xa74]
push edx
push eax
mov dword [ebp - 0xbec], 0x402a78
mov dword [ebp - 0xbf4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x40]
call ebx
lea ecx, [ebp - 0xa64]
lea edx, [ebp - 0xa54]
push ecx
push edx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x5b8]
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], 1
push eax
push ecx
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea edx, [ebp - 0x854]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x41fa3a
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x34
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x720]
mov dword [ebp - 0xbe4], 0
call ebx
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x12cc]
call ebx
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0x12cc]
push ecx
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0x12ec]
push eax
lea edx, [ebp - 0x12dc]
push ecx
lea eax, [ebp - 0x628]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41f5e0
mov ecx, dword [0x44203c]
lea edx, [ebp - 0xa14]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41f541
cmp word [eax], 1
jne 0x41f541
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41f538
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41f547
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x720]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x720]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x12ec]
lea edx, [ebp - 0x12dc]
push ecx
lea eax, [ebp - 0x628]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41f4e5
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x484]
mov dword [ebp - 0xbe4], 0
call ebx
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x12fc]
call ebx
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0x12fc]
push ecx
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0x131c]
push eax
lea edx, [ebp - 0x130c]
push ecx
lea eax, [ebp - 0x628]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41f79d
mov ecx, dword [0x44203c]
lea edx, [ebp - 0xa14]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41f6fe
cmp word [eax], 1
jne 0x41f6fe
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41f6f5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41f704
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x484]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x484]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x131c]
lea edx, [ebp - 0x130c]
push ecx
lea eax, [ebp - 0x628]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41f6a2
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0xbe4], 0
call ebx
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x132c]
call ebx
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0x132c]
push ecx
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0x134c]
push eax
lea edx, [ebp - 0x133c]
push ecx
lea eax, [ebp - 0x628]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41f95a
mov ecx, dword [0x44203c]
lea edx, [ebp - 0xa14]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41f8bb
cmp word [eax], 1
jne 0x41f8bb
lea eax, [ebp - 0x628]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41f8b2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41f8c1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x5c8]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x134c]
lea edx, [ebp - 0x133c]
push ecx
lea eax, [ebp - 0x628]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41f85f
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call ebx
lea ecx, [ebp - 0x9d0]
lea edx, [ebp - 0x9e0]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x64
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xa54]
call ebx
lea eax, [ebp - 0xa54]
push edi
lea ecx, [ebp - 0xa64]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0x40]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x6c
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call ebx
lea edx, [ebp - 0x144]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x420f1b
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
lea ecx, [ebp - 0x2d8]
push 0xc
push ecx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
push 0
push 0x4420b0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 0
push 0x4420a0
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push edi
lea edx, [ebp - 0x350]
push 0xc
push edx
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x3c4]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], edi
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x6ec]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call ebx
mov eax, 1
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbec], eax
lea eax, [ebp - 0xbe4]
lea edx, [ebp - 0x136c]
push eax
push 0x4420b0
push ecx
lea eax, [ebp - 0x135c]
push edx
lea ecx, [ebp - 0x70c]
push eax
push ecx
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x420e8d
mov eax, 1
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbec], eax
push edx
lea eax, [ebp - 0xbf4]
push 0x4420a0
lea ecx, [ebp - 0x138c]
push eax
lea edx, [ebp - 0x137c]
push ecx
lea eax, [ebp - 0x5a8]
push edx
push eax
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x420e6d
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xc04]
push edx
lea ecx, [ebp - 0x13ac]
push eax
lea edx, [ebp - 0x139c]
push ecx
lea eax, [ebp - 0x1e4]
push edx
push eax
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 4
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 1
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x420ce1
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 0xbe4], 0
call ebx
mov eax, 1
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbdc], eax
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x13bc]
call ebx
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0x13bc]
push ecx
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0x13dc]
push eax
lea edx, [ebp - 0x13cc]
push ecx
lea eax, [ebp - 0x30]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x41fd99
mov ecx, dword [0x44203c]
lea edx, [ebp - 0xa14]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x41fcfd
cmp word [eax], 1
jne 0x41fcfd
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xa14]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x41fcf4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, edi
mov edi, 2
jmp 0x41fd03
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.004412b0
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0xa18]
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 0xa2c], eax
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x8b8]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x13dc]
lea edx, [ebp - 0x13cc]
push ecx
lea eax, [ebp - 0x30]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41fca4
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x8b8]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4025dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4ErrVar]
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0xa34]
push ecx
push edx
push edi
mov dword [ebp - 0x8bc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x8bc]
push eax
call fcn.00441070
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbdc], 0x402a80
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0xa18]
push 1
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xa2c], eax
push 1
lea edx, [ebp - 0xa34]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
mov dword [ebp - 0xa18], 0
mov dword [ebp - 0xa34], 8
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0x4f4]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x1e4]
lea ecx, [ebp - 0x13ec]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0x13ec]
lea ecx, [ebp - 0xbe4]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x420615
mov eax, 0x8002
lea edx, [ebp - 0x1c4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbec], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x420179
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0x4f4]
push eax
push 9
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa2c], 8
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x2d8]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x420029
cmp word [eax], di
jne 0x420029
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x41ffe4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420011
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420035
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0x4f4]
lea edx, [ebp - 0xa44]
push eax
push 1
push ecx
push edx
mov dword [ebp - 0xa2c], 8
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x350]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x42013c
cmp word [eax], di
jne 0x42013c
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4200f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420124
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420148
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov eax, dword [ebp - 0x350]
test eax, eax
je 0x4201f8
cmp word [eax], di
jne 0x4201f8
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4201b3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x4201e0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420204
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xbe4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x42024e
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x588]
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call ebx
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x420392
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0x4f4]
push eax
push 9
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa2c], 8
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x350]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x420355
cmp word [eax], di
jne 0x420355
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420310
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x42033d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420361
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x1c4]
lea ecx, [ebp - 0xbe4]
push eax
push ecx
mov dword [ebp - 0xbdc], 5
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4204d6
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x4f4]
push edx
push 5
lea ecx, [ebp - 0xa44]
push eax
push ecx
mov dword [ebp - 0xa2c], 0xc
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa18]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x350]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x420499
cmp word [eax], di
jne 0x420499
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420454
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420481
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x4204a5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 7
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x420a12
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0x4f4]
push ecx
push 4
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa2c], 0xd
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x350]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x4205dd
cmp word [eax], di
jne 0x4205dd
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420598
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x4205c5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x4205e9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
jmp 0x420a08
lea ecx, [ebp - 0x13ec]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x420a12
lea eax, [ebp - 0x1c4]
lea ecx, [ebp - 0xbe4]
push eax
push ecx
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x42078a
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0x4f4]
push edx
push 7
lea ecx, [ebp - 0xa44]
push eax
push ecx
mov dword [ebp - 0xa2c], 0xa
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa18]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x2d8]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x42074d
cmp word [eax], di
jne 0x42074d
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420708
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420735
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420759
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x1c4]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 5
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4208ce
lea ecx, [ebp - 0xa34]
lea edx, [ebp - 0x4f4]
push ecx
push 7
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xa2c], 0xa
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x2d8]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x420891
cmp word [eax], di
jne 0x420891
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42084c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420879
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x42089d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 7
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x420a12
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0x4f4]
push eax
push 3
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xa2c], 0xe
mov dword [ebp - 0xa34], edi
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call fcn.00441160
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x2d8]
test eax, eax
mov dword [ebp - 0xbf4], 3
je 0x4209d5
cmp word [eax], di
jne 0x4209d5
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420990
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x4209bd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x4209e1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbf4]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov eax, dword [ebp - 0x350]
test eax, eax
je 0x420a91
cmp word [eax], di
jne 0x420a91
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420a4c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420a79
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420a9d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0x3c4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x420b55
mov eax, dword [ebp - 0x350]
test eax, eax
je 0x420b38
cmp word [eax], di
jne 0x420b38
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420af3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x350]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420b20
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420b44
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x350]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x3c4]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x420bd0
cmp word [eax], di
jne 0x420bd0
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [ebp - 0x2d8]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x420b8b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420bb8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
shl eax, 4
mov edi, 2
jmp 0x420bdc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0x6ec]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x420c90
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x420c73
cmp word [eax], di
jne 0x420c73
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ebx, eax
mov eax, dword [ebp - 0x2d8]
mov edx, dword [eax + 0x1c]
mov ecx, dword [eax + 0x18]
sub ebx, edx
cmp ebx, ecx
jb 0x420c2e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420c5b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
add eax, ebx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
shl eax, 4
mov edi, 2
jmp 0x420c7f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x6ec]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call ebx
lea eax, [ebp - 0x13ac]
lea ecx, [ebp - 0x139c]
push eax
lea edx, [ebp - 0x1e4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41fc15
lea eax, [ebp - 0x70c]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x401ff4
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea eax, [ebp - 0x5a8]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x6fc]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x442054]
lea ecx, [ebp - 0xc78]
push ecx
lea ecx, [ebp - 0x6fc]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x30]
test eax, eax
fnclex
jge 0x420d67
mov edx, dword [0x442054]
push 0x30
push 0x401d78
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
je 0x420e4d
mov eax, dword [0x442054]
lea edx, [ebp - 0xa34]
push edx
lea edx, [ebp - 0x6fc]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x24]
test eax, eax
fnclex
jge 0x420da9
mov ecx, dword [0x442054]
push 0x24
push 0x401d78
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x420e28
cmp word [eax], di
jne 0x420e28
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x420de3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x420e10
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 2
shl eax, 4
jmp 0x420e34
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xa34]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x138c]
lea edx, [ebp - 0x137c]
push ecx
lea eax, [ebp - 0x5a8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41fbb1
lea ecx, [ebp - 0x136c]
lea edx, [ebp - 0x135c]
push ecx
lea eax, [ebp - 0x70c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x41fb5e
lea ecx, [ebp - 0x6ec]
lea edx, [ebp - 0x3b4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x420eb8
lea edx, [ebp - 0x6ec]
lea ecx, [ebp - 0x3b4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x9a0]
mov dword [ebp - 0xbdc], 3
mov dword [ebp - 0xbe4], edi
call ebx
lea eax, [ebp - 0x3b4]
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0x990]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x420f1b
lea eax, [ebp - 0x6ec]
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
mov edx, eax
lea ecx, [ebp - 0x9a0]
call ebx
lea edx, [ebp - 0xbe4]
push 0x4421f0
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4224d2
push 0
push 0x680
push 1
lea eax, [ebp - 0xf4]
push 0xc
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x6dc]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x9b0]
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x618]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402504
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea ecx, [ebp - 0xa34]
push 1
push ecx
lea edx, [ebp - 0xa44]
push 0x442090
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, 8
push 0x4421c0
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa54]
push eax
push ecx
mov dword [ebp - 0xbec], 0x402424
mov dword [ebp - 0xbfc], 0x402aa8
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
push eax
lea ecx, [ebp - 0xa74]
push 0x442070
push ecx
call esi
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa84]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x578]
call ebx
lea ecx, [ebp - 0xa74]
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea eax, [ebp - 0x578]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push edi
push 0xffffffffffffffff
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x134]
mov dword [ebp - 0xbdc], 0x400
mov dword [ebp - 0xbe4], edi
call ebx
lea ecx, [ebp - 0xa34]
push 0x4420a0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0x9a0]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x42112a
lea eax, [ebp - 0xa34]
push 0x4420a0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
mov edx, eax
lea ecx, [ebp - 0x2d4]
call ebx
jmp 0x42113c
lea edx, [ebp - 0x9a0]
lea ecx, [ebp - 0x2d4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x568]
mov dword [ebp - 0xbdc], 0x402ab8
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xbdc], 0x402ac4
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0x2d4]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], edi
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x4212a1
mov edi, 0x402ad0
mov eax, 8
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbfc], edi
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xbec], 0x402170
mov dword [ebp - 0xbf4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0x2d4]
push eax
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa64]
push eax
push ecx
mov dword [ebp - 0xc0c], edi
mov dword [ebp - 0xc14], 8
call esi
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xa74]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x5f8]
call ebx
lea ecx, [ebp - 0xa64]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov edi, 2
jmp 0x4212c7
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x5f8]
mov dword [ebp - 0xbdc], 0x402ad8
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x6dc]
push ecx
lea eax, [ebp - 0xf0]
push edx
lea ecx, [ebp - 0x140c]
push eax
lea edx, [ebp - 0x13fc]
push ecx
lea eax, [ebp - 0x70c]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
test eax, eax
mov dword [ebp - 0xbe4], 0
je 0x4216c1
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x844]
call ebx
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x618]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x142c]
push eax
lea edx, [ebp - 0x141c]
push ecx
lea eax, [ebp - 0x5a8]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x42168e
mov eax, dword [0x442058]
test eax, eax
je 0x4213f8
cmp word [eax], 2
jne 0x4213f8
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4213b0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4213e1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul eax, dword [ebp - 0xc7c]
add eax, edx
shl eax, 4
jmp 0x421404
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x143c]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0x143c]
lea ecx, [ebp - 0xbe4]
push eax
push ecx
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x42146d
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x6cc]
mov dword [ebp - 0xbdc], 0x402ae4
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
jmp 0x42164d
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x4214f0
cmp word [eax], 2
jne 0x4214f0
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4214a8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4214d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul eax, dword [ebp - 0xc7c]
add eax, edx
shl eax, 4
jmp 0x4214fc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x34c]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0x34c]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x401ff4
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x6cc]
call ebx
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x421594
cmp word [eax], 1
jne 0x421594
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x421583
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
mov dword [ebp - 0x18c0], eax
jmp 0x4215a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x18c0], eax
test ecx, ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
je 0x4215fa
cmp word [ecx], 1
jne 0x4215fa
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4215ef
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x421600
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18c4], eax
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xbe4]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18c0]
add ecx, eax
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov ecx, dword [ebp - 0xf4]
mov edx, eax
mov eax, dword [ebp - 0x18c4]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x844]
lea eax, [ebp - 0x6cc]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x844]
call ebx
lea edx, [ebp - 0x142c]
lea eax, [ebp - 0x141c]
push edx
lea ecx, [ebp - 0x5a8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x42136e
lea edx, [ebp - 0x844]
push edx
push 2
push 0x401f98
call edi
add esp, 0xc
lea eax, [ebp - 0x140c]
lea ecx, [ebp - 0x13fc]
lea edx, [ebp - 0x70c]
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x42130d
lea eax, [ebp - 0xbe4]
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0
push ecx
push 2
push 0x401f98
call edi
push 0x402af0
push 2
push 0x402988
call edi
add esp, 0x24
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
push edx
lea eax, [ebp - 0xa34]
push 0x442120
push eax
mov dword [ebp - 0xbdc], 0x402b50
mov dword [ebp - 0xbec], 0x402170
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa54]
push 0x4420f0
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402b6c
push ecx
push 0x442080
push edx
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
push 0x442090
push ecx
mov dword [ebp - 0xbdc], 0x402b88
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa34]
push edx
push 0x442070
push eax
mov dword [ebp - 0xbdc], 0x402ba4
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x7c4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x402bc4
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 8
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0x4b4]
push ecx
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbec], 0x402be4
mov dword [ebp - 0xbdc], 0x9999999a
mov dword [ebp - 0xbd8], 0x3fb99999
mov dword [ebp - 0xbe4], 5
mov dword [ebp - 0xbfc], 0x402c08
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
lea edx, [ebp - 0xa44]
push eax
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x5d8]
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
mov dword [ebp - 0xbdc], 0x402c18
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xa00]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x402c38
mov dword [ebp - 0xbe4], 8
call esi
lea ecx, [ebp - 0x9f0]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x308]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa84]
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x1a4]
lea ecx, [ebp - 0xa34]
push edx
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402c70
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea edx, [ebp - 0x194]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
lea ecx, [ebp - 0x7b4]
push eax
push ecx
lea edx, [ebp - 0xa54]
push edx
call esi
push eax
lea eax, [ebp - 0x2f8]
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x284]
lea eax, [ebp - 0xa74]
push edx
push eax
call esi
lea ecx, [ebp - 0x3e4]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa84]
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x70]
lea edx, [ebp - 0xa34]
push eax
push ecx
push edx
mov dword [ebp - 0xbdc], 0x402cac
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x730]
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
lea ecx, [ebp - 0x274]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x184]
lea ecx, [ebp - 0xa74]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x370]
lea eax, [ebp - 0xa84]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa84]
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x174]
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
mov dword [ebp - 0xbdc], 0x402cd8
mov dword [ebp - 0xbe4], 8
call esi
lea ecx, [ebp - 0x164]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x7a4]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x2e8]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0x264]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x3d4]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa84]
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x9e0]
mov dword [ebp - 0xbdc], 0x402d1c
push edx
mov dword [ebp - 0xbe4], 8
push eax
lea ecx, [ebp - 0xa34]
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x9d0]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402d48
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x50]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402d68
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0x40]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402d88
mov dword [ebp - 0xbec], 0x402a78
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0
push ecx
push 2
push 0x401f98
call edi
mov eax, 8
add esp, 0x30
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x134]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402da0
mov dword [ebp - 0xbec], 0x402dd0
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x402e00
push 2
push 0x402988
call edi
add esp, 0x24
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x568]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x6bc]
mov dword [ebp - 0xbe4], 0
call ebx
mov eax, 1
mov ecx, 2
mov dword [ebp - 0xbdc], eax
mov dword [ebp - 0xbec], eax
mov dword [ebp - 0xbe4], ecx
mov dword [ebp - 0xbf4], ecx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x134]
push eax
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0x145c]
push edx
lea ecx, [ebp - 0x144c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x4224c8
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x402e94
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x444]
call ebx
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xa64]
mov dword [ebp - 0xbec], 0x401f6c
mov dword [ebp - 0xbf4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xa64]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0x444]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
mov dword [ebp - 0xbdc], 7
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xa74]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x568]
lea ecx, [ebp - 0x444]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbfc], 0x402ea0
mov dword [ebp - 0xc04], 8
call esi
push eax
lea eax, [ebp - 0xa74]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa94]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x568]
call ebx
lea ecx, [ebp - 0xa84]
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa34]
push edx
lea ecx, [ebp - 0xa64]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp - 0xf4]
add esp, 0x14
test eax, eax
je 0x422088
cmp word [eax], 1
jne 0x422088
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42207d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42208e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xbe4], 0
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xbe4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x422125
lea ecx, [ebp - 0x608]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x402eac
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x608]
call ebx
lea ecx, [ebp - 0x6bc]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x402ec4
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x6bc]
call ebx
jmp 0x422393
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402edc
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
lea edx, [ebp - 0xa14]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xa14]
test eax, eax
je 0x4221a5
cmp word [eax], 1
jne 0x4221a5
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0xa14]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42219a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x4221ab
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xa14]
push 1
lea ecx, [ebp - 0xa34]
push 1
push ecx
mov ecx, dword [edx + 0xc]
add ecx, eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0xa14]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x608]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
mov dword [ebp - 0xbec], 0x402d08
mov dword [ebp - 0xbf4], 8
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x608]
call ebx
lea eax, [ebp - 0xa54]
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xa64]
mov dword [ebp - 0xbec], 0x402990
mov dword [ebp - 0xbf4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x4222ae
cmp word [eax], 1
jne 0x4222ae
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4222a3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x4222b4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xbdc], 0x64
mov dword [ebp - 0xbe4], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa34]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xa54]
call ebx
push 1
lea ecx, [ebp - 0xa64]
push 1
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa74]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x6bc]
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa84]
push edx
push eax
mov dword [ebp - 0xbfc], 0x402eec
mov dword [ebp - 0xc04], 8
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x6bc]
call ebx
lea eax, [ebp - 0xa84]
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
lea ecx, [ebp - 0x1e4]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x1e4]
call ebx
lea ecx, [ebp - 0x1e4]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 8
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4224a8
lea eax, [ebp - 0x568]
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0x608]
push ecx
push 2
push 0x401f98
call edi
lea edx, [ebp - 0x6bc]
push edx
push 2
push 0x401f98
call edi
push 0x402e00
push 2
push 0x402988
call edi
add esp, 0x30
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x568]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x6bc]
mov dword [ebp - 0xbe4], 0
call ebx
lea eax, [ebp - 0x145c]
lea ecx, [ebp - 0x144c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x421f08
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
jmp 0x4224d8
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea eax, [ebp - 0xbe4]
push 0x442120
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402efc
mov dword [ebp - 0xbe4], 0x8008
mov dword [ebp - 0xbec], 0x402f14
mov dword [ebp - 0xbf4], 8
mov dword [ebp - 0xbfc], 0
mov dword [ebp - 0xc04], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
push 1
lea edx, [ebp - 0xbf4]
push 0x442120
push edx
lea eax, [ebp - 0xa44]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa54]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea eax, [ebp - 0xa64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0xa44]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x438206
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xa34]
push ecx
mov eax, 8
push 0x442130
push edx
mov dword [ebp - 0xbdc], 0x402384
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbec], 0x4024bc
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbfc], 0x4024f8
mov dword [ebp - 0xc04], eax
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa54]
push 0x442090
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x980]
call ebx
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x442010]
mov ecx, 9
mov dword [ebp - 0xbdc], eax
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0xbe4], ecx
sub esp, 0x10
mov edx, dword [0x442028]
mov edi, esp
sub esp, 0x10
mov edx, dword [edx]
mov dword [edi], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [edi + 4], ecx
mov ecx, esp
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x980]
mov dword [ecx], eax
mov eax, dword [ebp - 0x97c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x978]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x974]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x442028]
push ecx
call dword [edx + 0xa0]
test eax, eax
fnclex
jge 0x4226d2
mov edx, dword [0x442028]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xa0
push 0x4020a8
push edx
push eax
call edi
jmp 0x4226d8
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xc78]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x422701
mov ecx, dword [0x442028]
push 0x50
push 0x4020a8
push ecx
push eax
call edi
cmp word [ebp - 0xc78], 0
jne 0x422b57
mov eax, dword [0x442028]
push eax
mov edx, dword [eax]
call dword [edx + 0x98]
test eax, eax
fnclex
jge 0x422737
mov ecx, dword [0x442028]
push 0x98
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x422760
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea edi, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push edi
mov ecx, 8
sub esp, 0x10
mov dword [ebp - 0xbe4], ecx
mov edi, esp
mov dword [ebp - 0xbdc], 0x4020d8
mov edx, dword [eax]
push eax
mov dword [edi], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xc80], eax
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edi + 0xc], ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x4227cb
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x422832
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edi, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push edi
mov ecx, 8
sub esp, 0x10
mov dword [ebp - 0xbe4], ecx
mov edi, esp
mov dword [ebp - 0xbdc], 0x402f28
mov edx, dword [eax]
push eax
mov dword [edi], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xc80], eax
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edi + 0xc], ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x42289d
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x422904
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edi, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push edi
mov ecx, 8
sub esp, 0x10
mov dword [ebp - 0xbe4], ecx
mov edi, esp
mov dword [ebp - 0xbdc], 0x402f3c
mov edx, dword [eax]
push eax
mov dword [edi], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xc80], eax
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edi + 0xc], ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x42296f
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x224]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4229d6
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edi, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push edi
mov ecx, 8
sub esp, 0x10
mov dword [ebp - 0xbe4], ecx
mov edi, esp
mov dword [ebp - 0xbdc], 0x402f50
mov edx, dword [eax]
push eax
mov dword [edi], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xc80], eax
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edi + 0xc], ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x422a41
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x8a8]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x422aa8
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edi, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push edi
mov ecx, 8
sub esp, 0x10
mov dword [ebp - 0xbe4], ecx
mov edi, esp
mov dword [ebp - 0xbdc], 0x4023ec
mov edx, dword [eax]
push eax
mov dword [edi], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xc80], eax
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edi + 0xc], ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x422b17
mov edx, dword [ebp - 0xc80]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x28
push 0x4020e8
push edx
push eax
call edi
jmp 0x422b1d
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x422b7f
mov edx, dword [0x442028]
push 0x80
push 0x4020a8
push edx
push eax
call edi
push 0
push 0x400
push 1
lea eax, [ebp - 0xf4]
push 0xc
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xc04]
push ecx
push edx
lea ecx, [ebp - 0x147c]
push eax
lea edx, [ebp - 0x146c]
push ecx
lea eax, [ebp - 0xb0]
mov edi, 2
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x400
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 1
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x422c9a
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbdc], 0
test eax, eax
mov dword [ebp - 0xbe4], edi
je 0x422c61
cmp word [eax], 1
jne 0x422c61
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x422c55
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl edi, 4
mov eax, edi
mov edi, 2
jmp 0x422c67
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
lea edx, [ebp - 0xbe4]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call ebx
lea edx, [ebp - 0x147c]
lea eax, [ebp - 0x146c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x422c06
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x124]
lea ecx, [ebp - 0xf0]
call edi
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x6dc]
call edi
lea edx, [ebp - 0x9b0]
lea ecx, [ebp - 0x20]
call edi
lea edx, [ebp - 0x114]
lea ecx, [ebp - 0x618]
call edi
mov edi, 8
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa74]
mov dword [ebp - 0xbdc], 0x402400
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x402424
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x402504
mov dword [ebp - 0xc04], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea edx, [ebp - 0xa74]
push 1
push edx
lea eax, [ebp - 0xa84]
push 0x442090
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
push 0x4421c0
lea ecx, [ebp - 0xa34]
push 0x442120
push ecx
call esi
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
lea ecx, [ebp - 0xa54]
push 0x442080
push ecx
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x578]
call ebx
lea eax, [ebp - 0xa84]
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea eax, [ebp - 0x578]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 2
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x33c]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x402f64
mov dword [ebp - 0xbe4], edi
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 8
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc34], eax
lea edx, [ebp - 0xa00]
mov dword [ebp - 0xbe4], edi
push ecx
lea eax, [ebp - 0xa34]
mov edi, 0x402fbc
push edx
push eax
mov dword [ebp - 0xbdc], 0x402f90
mov dword [ebp - 0xbec], edi
mov dword [ebp - 0xbfc], edi
mov dword [ebp - 0xc0c], 0x402fc4
mov dword [ebp - 0xc1c], edi
mov dword [ebp - 0xc2c], edi
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x9f0]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0x65c]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc14]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x1b4]
lea eax, [ebp - 0xa94]
push edx
push eax
call esi
lea ecx, [ebp - 0xc24]
push eax
lea edx, [ebp - 0xaa4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0xab4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc34]
lea eax, [ebp - 0xac4]
push edx
push eax
call esi
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0xad4]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xac4]
push eax
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xaa4]
push edx
lea ecx, [ebp - 0xa94]
push eax
lea edx, [ebp - 0xa84]
push ecx
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 0xb
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x3c
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc34], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x1a4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x402fe4
mov dword [ebp - 0xbec], edi
mov dword [ebp - 0xbfc], edi
mov dword [ebp - 0xc0c], 0x402fc4
mov dword [ebp - 0xc1c], edi
mov dword [ebp - 0xc2c], edi
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
lea ecx, [ebp - 0x194]
lea edx, [ebp - 0xa54]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x7b4]
lea eax, [ebp - 0xa74]
push edx
push eax
call esi
lea ecx, [ebp - 0xc14]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x2f8]
lea ecx, [ebp - 0xa94]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc24]
lea eax, [ebp - 0xaa4]
push edx
push eax
call esi
lea ecx, [ebp - 0x284]
push eax
lea edx, [ebp - 0xab4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc34]
lea ecx, [ebp - 0xac4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x3e4]
lea eax, [ebp - 0xad4]
push edx
push eax
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xad4]
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xaa4]
push eax
lea edx, [ebp - 0xa94]
push ecx
lea eax, [ebp - 0xa84]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 0xb
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x403010
push 2
push 0x402988
call edi
add esp, 0x48
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x403084
push eax
push 0x442120
push ecx
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa34]
push edx
push 0x442080
push eax
mov dword [ebp - 0xbdc], 0x4030b0
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xa34]
push ecx
push 0x442090
push edx
mov dword [ebp - 0xbdc], 0x4030dc
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x7c4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x403108
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xbec], 0x12
mov dword [ebp - 0xbf4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa64]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0x2c4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x403134
mov dword [ebp - 0xbfc], 0x403160
call esi
push eax
lea edx, [ebp - 0xa64]
lea eax, [ebp - 0xa74]
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa84]
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x40317c
push 2
push 0x402988
call edi
add esp, 0x2c
lea ecx, [ebp - 0x5d8]
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcUpperCaseVar]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4031ec
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x224]
lea ecx, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x403254
mov dword [ebp - 0xbe4], 8
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0x8a8]
push edx
lea ecx, [ebp - 0xa44]
push eax
push ecx
mov dword [ebp - 0xbec], 0x12
mov dword [ebp - 0xbf4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa64]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
mov eax, 8
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0x8a8]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x403280
mov dword [ebp - 0xbfc], 0x4032ac
call esi
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa84]
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x4032d4
push 2
push 0x402988
call edi
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0
push eax
push 2
push 0x401f98
call edi
push 0x403348
push 2
push 0x402988
call edi
add esp, 0x44
push 0x403454
push 2
push 0x402988
call edi
add esp, 0xc
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x6dc]
lea eax, [ebp - 0xf0]
push ecx
push edx
lea ecx, [ebp - 0x149c]
push eax
lea edx, [ebp - 0x148c]
push ecx
lea eax, [ebp - 0x70c]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
test eax, eax
je 0x42383e
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x618]
push ecx
lea eax, [ebp - 0x20]
push edx
lea ecx, [ebp - 0x14bc]
push eax
lea edx, [ebp - 0x14ac]
push ecx
lea eax, [ebp - 0x5a8]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x423822
mov eax, dword [0x442058]
test eax, eax
je 0x423631
cmp word [eax], 2
jne 0x423631
lea ecx, [ebp - 0x70c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4235eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x5a8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x423618
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl eax, 4
jmp 0x42363f
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
call edi
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x14cc]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0x14cc]
lea ecx, [ebp - 0xbe4]
push eax
push ecx
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
jne 0x423800
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x4236fe
cmp word [eax], 2
jne 0x4236fe
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4236b8
call edi
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x4236e5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl eax, 4
jmp 0x423706
call edi
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x34c]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x42375f
cmp word [eax], 1
jne 0x42375f
lea ecx, [ebp - 0x34c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x423754
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xf4]
shl edi, 4
mov dword [ebp - 0x18c8], edi
jmp 0x42376d
call edi
mov dword [ebp - 0x18c8], eax
mov eax, dword [ebp - 0xf4]
test eax, eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
je 0x4237b7
cmp word [eax], 1
jne 0x4237b7
lea edx, [ebp - 0x34c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x4237b2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl edi, 4
jmp 0x4237bf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edi, eax
mov eax, dword [ebp - 0xf4]
lea edx, [ebp - 0xbe4]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18c8]
add ecx, eax
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov ecx, dword [ebp - 0xf4]
mov edx, eax
mov ecx, dword [ecx + 0xc]
add ecx, edi
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
lea edx, [ebp - 0x14bc]
lea eax, [ebp - 0x14ac]
push edx
lea ecx, [ebp - 0x5a8]
push eax
push ecx
call edi
jmp 0x4235a9
lea edx, [ebp - 0x149c]
lea eax, [ebp - 0x148c]
push edx
lea ecx, [ebp - 0x70c]
push eax
push ecx
call edi
jmp 0x423560
lea edx, [ebp - 0xbe4]
push 0x442120
push edx
mov dword [ebp - 0xbdc], 0x402efc
mov dword [ebp - 0xbe4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x42f004
push 0x403548
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4238c9
cmp word [ecx], 1
jne 0x4238c9
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
mov edi, 0x191
sub edi, edx
cmp edi, eax
jb 0x4238c2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
shl edi, 4
mov eax, edi
jmp 0x4238d5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
mov edi, 8
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x423977
cmp word [ecx], 1
jne 0x423977
mov edx, dword [ecx + 0x14]
mov eax, 0x191
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x423972
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x423983
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x4034e8
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x423a3d
cmp word [eax], 1
jne 0x423a3d
mov edx, dword [eax + 0x14]
mov ecx, 0x191
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x423a32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18cc], ecx
jmp 0x423a49
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18cc], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18cc]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x4035c8
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x423b64
cmp word [ecx], 1
jne 0x423b64
mov edx, dword [ecx + 0x14]
mov eax, 0x192
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x423b5f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x423b70
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x423c0d
cmp word [ecx], 1
jne 0x423c0d
mov edx, dword [ecx + 0x14]
mov eax, 0x192
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x423c08
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x423c19
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x40358c
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x423cd3
cmp word [eax], 1
jne 0x423cd3
mov edx, dword [eax + 0x14]
mov ecx, 0x192
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x423cc8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18d0], ecx
jmp 0x423cdf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18d0], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18d0]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x4033dc
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x423dfa
cmp word [ecx], 1
jne 0x423dfa
mov edx, dword [ecx + 0x14]
mov eax, 0x193
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x423df5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x423e06
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x423ea3
cmp word [ecx], 1
jne 0x423ea3
mov edx, dword [ecx + 0x14]
mov eax, 0x193
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x423e9e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x423eaf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x4035d4
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x423f69
cmp word [eax], 1
jne 0x423f69
mov edx, dword [eax + 0x14]
mov ecx, 0x193
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x423f5e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18d4], ecx
jmp 0x423f75
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18d4], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18d4]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x403620
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424090
cmp word [ecx], 1
jne 0x424090
mov edx, dword [ecx + 0x14]
mov eax, 0x197
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42408b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42409c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424139
cmp word [ecx], 1
jne 0x424139
mov edx, dword [ecx + 0x14]
mov eax, 0x197
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x424134
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x424145
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x4033f8
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x4241ff
cmp word [eax], 1
jne 0x4241ff
mov edx, dword [eax + 0x14]
mov ecx, 0x197
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x4241f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18d8], ecx
jmp 0x42420b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18d8], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18d8]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x4036c8
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x27
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424326
cmp word [ecx], 1
jne 0x424326
mov edx, dword [ecx + 0x14]
mov eax, 0x199
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x424321
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x424332
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4243cf
cmp word [ecx], 1
jne 0x4243cf
mov edx, dword [ecx + 0x14]
mov eax, 0x199
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4243ca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x4243db
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x40364c
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x424495
cmp word [eax], 1
jne 0x424495
mov edx, dword [eax + 0x14]
mov ecx, 0x199
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42448a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18dc], ecx
jmp 0x4244a1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18dc], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18dc]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x403780
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4245bc
cmp word [ecx], 1
jne 0x4245bc
mov edx, dword [ecx + 0x14]
mov eax, 0x19a
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4245b7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x4245c8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424665
cmp word [ecx], 1
jne 0x424665
mov edx, dword [ecx + 0x14]
mov eax, 0x19a
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x424660
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x424671
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x403710
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42472b
cmp word [eax], 1
jne 0x42472b
mov edx, dword [eax + 0x14]
mov ecx, 0x19a
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x424720
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18e0], ecx
jmp 0x424737
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18e0], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18e0]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x40383c
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424852
cmp word [ecx], 1
jne 0x424852
mov edx, dword [ecx + 0x14]
mov eax, 0x19b
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42484d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42485e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4248fb
cmp word [ecx], 1
jne 0x4248fb
mov edx, dword [ecx + 0x14]
mov eax, 0x19b
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4248f6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x424907
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x4037e8
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x4249c1
cmp word [eax], 1
jne 0x4249c1
mov edx, dword [eax + 0x14]
mov ecx, 0x19b
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x4249b6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18e4], ecx
jmp 0x4249cd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18e4], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18e4]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x40383c
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424ae8
cmp word [ecx], 1
jne 0x424ae8
mov edx, dword [ecx + 0x14]
mov eax, 0x19c
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x424ae3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x424af4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424b91
cmp word [ecx], 1
jne 0x424b91
mov edx, dword [ecx + 0x14]
mov eax, 0x19c
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x424b8c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x424b9d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x403860
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x424c57
cmp word [eax], 1
jne 0x424c57
mov edx, dword [eax + 0x14]
mov ecx, 0x19c
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x424c4c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18e8], ecx
jmp 0x424c63
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18e8], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18e8]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x403924
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424d7e
cmp word [ecx], 1
jne 0x424d7e
mov edx, dword [ecx + 0x14]
mov eax, 0x19d
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x424d79
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x424d8a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x424e27
cmp word [ecx], 1
jne 0x424e27
mov edx, dword [ecx + 0x14]
mov eax, 0x19d
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x424e22
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x424e33
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x4038b4
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x424eed
cmp word [eax], 1
jne 0x424eed
mov edx, dword [eax + 0x14]
mov ecx, 0x19d
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x424ee2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x18ec], ecx
jmp 0x424ef9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18ec], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18ec]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x4037c0
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x425014
cmp word [ecx], 1
jne 0x425014
mov edx, dword [ecx + 0x14]
mov eax, 0x19f
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42500f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x425020
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4250bd
cmp word [ecx], 1
jne 0x4250bd
mov edx, dword [ecx + 0x14]
mov eax, 0x19f
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4250b8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x4250c9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x403964
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x425183
cmp word [eax], 1
jne 0x425183
mov edx, dword [eax + 0x14]
mov ecx, 0x19f
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x425178
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18f0], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x18f0]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x403a14
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4252aa
mov edi, 8
push 1
lea ecx, [ebp - 0xbe4]
push 0x442120
push ecx
lea edx, [ebp - 0xa34]
push 0
push edx
mov dword [ebp - 0xbdc], 0x402f14
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0
mov dword [ebp - 0xbf4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0xbf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
lea ecx, [ebp - 0xa34]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x437987
push 0x405c7c
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f0df
cmp word [ecx], 1
jne 0x42f0df
mov edx, dword [ecx + 0x14]
mov eax, 0x192
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42f0da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42f0eb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f188
cmp word [ecx], 1
jne 0x42f188
mov edx, dword [ecx + 0x14]
mov eax, 0x192
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42f183
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x42f194
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405c34
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42f24e
cmp word [eax], 1
jne 0x42f24e
mov edx, dword [eax + 0x14]
mov ecx, 0x192
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42f243
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x19e8], ecx
jmp 0x42f25a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19e8], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x19e8]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x405ce8
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f375
cmp word [ecx], 1
jne 0x42f375
mov edx, dword [ecx + 0x14]
mov eax, 0x193
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42f370
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42f381
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f41e
cmp word [ecx], 1
jne 0x42f41e
mov edx, dword [ecx + 0x14]
mov eax, 0x193
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42f419
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x42f42a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405c94
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42f4e4
cmp word [eax], 1
jne 0x42f4e4
mov edx, dword [eax + 0x14]
mov ecx, 0x193
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42f4d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x19ec], ecx
jmp 0x42f4f0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19ec], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x19ec]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x405d70
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f60b
cmp word [ecx], 1
jne 0x42f60b
mov edx, dword [ecx + 0x14]
mov eax, 0x194
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42f606
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42f617
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f6b4
cmp word [ecx], 1
jne 0x42f6b4
mov edx, dword [ecx + 0x14]
mov eax, 0x194
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42f6af
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x42f6c0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405d0c
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42f77a
cmp word [eax], 1
jne 0x42f77a
mov edx, dword [eax + 0x14]
mov ecx, 0x194
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42f76f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x19f0], ecx
jmp 0x42f786
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19f0], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x19f0]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x405df0
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f8a1
cmp word [ecx], 1
jne 0x42f8a1
mov edx, dword [ecx + 0x14]
mov eax, 0x195
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42f89c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42f8ad
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42f94a
cmp word [ecx], 1
jne 0x42f94a
mov edx, dword [ecx + 0x14]
mov eax, 0x195
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42f945
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x42f956
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405da4
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42fa10
cmp word [eax], 1
jne 0x42fa10
mov edx, dword [eax + 0x14]
mov ecx, 0x195
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42fa05
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x19f4], ecx
jmp 0x42fa1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19f4], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x19f4]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x405ab4
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42fb37
cmp word [ecx], 1
jne 0x42fb37
mov edx, dword [ecx + 0x14]
mov eax, 0x196
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42fb32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42fb43
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42fbe0
cmp word [ecx], 1
jne 0x42fbe0
mov edx, dword [ecx + 0x14]
mov eax, 0x196
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42fbdb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x42fbec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405e0c
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42fca6
cmp word [eax], 1
jne 0x42fca6
mov edx, dword [eax + 0x14]
mov ecx, 0x196
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42fc9b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x19f8], ecx
jmp 0x42fcb2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19f8], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x19f8]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x403548
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42fdcd
cmp word [ecx], 1
jne 0x42fdcd
mov edx, dword [ecx + 0x14]
mov eax, 0x197
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x42fdc8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x42fdd9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x42fe76
cmp word [ecx], 1
jne 0x42fe76
mov edx, dword [ecx + 0x14]
mov eax, 0x197
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x42fe71
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x42fe82
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405e5c
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x42ff3c
cmp word [eax], 1
jne 0x42ff3c
mov edx, dword [eax + 0x14]
mov ecx, 0x197
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x42ff31
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x19fc], ecx
jmp 0x42ff48
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19fc], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x19fc]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x405f2c
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x430063
cmp word [ecx], 1
jne 0x430063
mov edx, dword [ecx + 0x14]
mov eax, 0x198
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43005e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43006f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x43010c
cmp word [ecx], 1
jne 0x43010c
mov edx, dword [ecx + 0x14]
mov eax, 0x198
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x430107
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x430118
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405ebc
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x4301d2
cmp word [eax], 1
jne 0x4301d2
mov edx, dword [eax + 0x14]
mov ecx, 0x198
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x4301c7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x1a00], ecx
jmp 0x4301de
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a00], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1a00]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x405fd4
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4302f9
cmp word [ecx], 1
jne 0x4302f9
mov edx, dword [ecx + 0x14]
mov eax, 0x199
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x4302f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x430305
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4303a2
cmp word [ecx], 1
jne 0x4303a2
mov edx, dword [ecx + 0x14]
mov eax, 0x199
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x43039d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x4303ae
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x405f68
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x430468
cmp word [eax], 1
jne 0x430468
mov edx, dword [eax + 0x14]
mov ecx, 0x199
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x43045d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x1a04], ecx
jmp 0x430474
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a04], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1a04]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x406084
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x43058f
cmp word [ecx], 1
jne 0x43058f
mov edx, dword [ecx + 0x14]
mov eax, 0x19a
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43058a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43059b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x430638
cmp word [ecx], 1
jne 0x430638
mov edx, dword [ecx + 0x14]
mov eax, 0x19a
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x430633
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc80]
shl eax, 4
jmp 0x430644
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x406030
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x4306fe
cmp word [eax], 1
jne 0x4306fe
mov edx, dword [eax + 0x14]
mov ecx, 0x19a
sub ecx, edx
mov edx, dword [eax + 0x10]
cmp ecx, edx
mov dword [ebp - 0xc84], ecx
jb 0x4306f3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xc84]
shl ecx, 4
mov dword [ebp - 0x1a08], ecx
jmp 0x43070a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a08], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1a08]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x4060f4
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
mov dword [ebp - 0xbdc], ecx
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x430825
cmp word [ecx], 1
jne 0x430825
mov edx, dword [ecx + 0x14]
mov eax, 0x19b
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x430820
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x430831
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xc24]
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0xc1c], 0x402674
mov dword [ebp - 0xc24], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, dword [ebp - 0xf4]
test ecx, ecx
je 0x4308ce
cmp word [ecx], 1
jne 0x4308ce
mov edx, dword [ecx + 0x14]
mov eax, 0x19b
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x4308c9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0xc0c], 0x64
mov dword [ebp - 0xc14], 2
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0xa94]
add edx, eax
lea eax, [ebp - 0x9e0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xaa4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xab4]
call ebx
push 1
lea ecx, [ebp - 0xac4]
push 1
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xad4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xbec], 0x4060a4
test eax, eax
mov dword [ebp - 0xbf4], edi
je 0x430994
cmp word [eax], 1
jne 0x430994
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a0c], eax
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbfc], 0x403578
mov dword [ebp - 0xc04], edi
call esi
mov ecx, dword [ebp - 0xf4]
push eax
lea eax, [ebp - 0xa74]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1a0c]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa84]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xac4]
push ecx
lea eax, [ebp - 0xab4]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
push 0x406178
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, 0x24
mov dword [ebp - 0xbe4], 3
sub ecx, eax
jo 0x43f046
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0
push ecx
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x4077d8
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x40784c
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0x24
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x9d0]
lea ecx, [ebp - 0xa34]
push edx
push eax
push ecx
mov dword [ebp - 0xbdc], 9
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea ecx, [ebp - 0xc04]
lea edx, [ebp - 0x40]
push ecx
lea eax, [ebp - 0xa84]
push edx
push eax
mov dword [ebp - 0xbfc], 0xd
mov dword [ebp - 0xc04], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa94]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xaa4]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
mov dword [ebp - 0xbec], 0x4078bc
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xc0c], 0x4078e8
mov dword [ebp - 0xc14], edi
call esi
push eax
lea eax, [ebp - 0x9d0]
lea ecx, [ebp - 0xa74]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xaa4]
lea eax, [ebp - 0xab4]
push edx
push eax
call esi
lea ecx, [ebp - 0x40]
push eax
lea edx, [ebp - 0xac4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc14]
lea ecx, [ebp - 0xad4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xad4]
lea eax, [ebp - 0xac4]
push edx
lea ecx, [ebp - 0xab4]
push eax
lea edx, [ebp - 0xaa4]
push ecx
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa54]
push ecx
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x2c
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0xa34]
push eax
push ecx
push edx
mov dword [ebp - 0xbdc], 9
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa64]
push eax
push ecx
mov dword [ebp - 0xbec], 0x407904
mov dword [ebp - 0xbf4], edi
call esi
push eax
lea edx, [ebp - 0x50]
lea eax, [ebp - 0xa74]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea ecx, [ebp - 0xa74]
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x9e0]
mov dword [ebp - 0xbdc], 9
push ecx
mov dword [ebp - 0xbe4], 2
push edx
lea eax, [ebp - 0xa34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
mov dword [ebp - 0xbec], 0x407930
mov dword [ebp - 0xbf4], edi
call esi
push eax
lea eax, [ebp - 0x9e0]
lea ecx, [ebp - 0xa74]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea edx, [ebp - 0xa74]
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x9e0]
lea ecx, [ebp - 0xa34]
push edx
push eax
push ecx
mov dword [ebp - 0xbdc], 9
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
mov dword [ebp - 0xbec], 0x40795c
mov dword [ebp - 0xbf4], edi
call esi
lea ecx, [ebp - 0x9e0]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xa64]
lea edx, [ebp - 0xa54]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], 0x402efc
mov dword [ebp - 0xbe4], 0x8008
push 0x442120
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x437da3
push 0x407988
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x4079c8
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0x18
push 1
lea ecx, [ebp - 0xbe4]
push 0x442120
push ecx
lea edx, [ebp - 0xa34]
push 0
push edx
mov dword [ebp - 0xbdc], 0x402f14
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0
mov dword [ebp - 0xbf4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0xbf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
lea ecx, [ebp - 0xa34]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x437e36
push 0x406578
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x406398
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0x18
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], 0
push ecx
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x407a08
push 2
push 0x402988
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0x18
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x6dc]
lea ecx, [ebp - 0xf0]
push edx
push eax
lea edx, [ebp - 0x14ec]
push ecx
lea eax, [ebp - 0x14dc]
push edx
lea ecx, [ebp - 0x70c]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x4381f8
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x844]
mov dword [ebp - 0xbe4], 0
call ebx
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x618]
push edx
lea ecx, [ebp - 0x20]
push eax
lea edx, [ebp - 0x150c]
push ecx
lea eax, [ebp - 0x14fc]
push edx
lea ecx, [ebp - 0x5a8]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x4381c1
mov eax, dword [0x442058]
test eax, eax
je 0x437f98
cmp word [eax], 2
jne 0x437f98
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x437f50
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x437f81
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul eax, dword [ebp - 0xc7c]
add eax, edx
shl eax, 4
jmp 0x437fa4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x151c]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea ecx, [ebp - 0x151c]
lea edx, [ebp - 0xbe4]
push ecx
push edx
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x438009
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x6cc]
mov dword [ebp - 0xbdc], 0x4070c0
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
jmp 0x438180
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x438089
cmp word [eax], 2
jne 0x438089
lea eax, [ebp - 0x70c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, dword [ecx + 0x1c]
mov edx, dword [ecx + 0x18]
sub eax, edi
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x438044
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ecx, [ebp - 0x5a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edi, eax
mov edx, dword [ecx + 0x14]
mov eax, dword [ecx + 0x10]
sub edi, edx
cmp edi, eax
jb 0x438071
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
imul eax, edi
mov edi, dword [ebp - 0xc80]
add eax, edi
mov edi, 8
shl eax, 4
jmp 0x438095
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x34c]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0x34c]
lea eax, [ebp - 0xbe4]
push edx
push eax
mov dword [ebp - 0xbdc], 0x3f
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x4380f5
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0xbdc], 0x3e6
mov dword [ebp - 0xbe4], 2
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbec], 0x401f6c
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbdc], 0x402504
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea ecx, [ebp - 0xa34]
push 1
lea edx, [ebp - 0x34c]
push ecx
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0xbf4]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x6cc]
call ebx
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x844]
lea ecx, [ebp - 0x6cc]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x844]
call ebx
lea eax, [ebp - 0x150c]
lea ecx, [ebp - 0x14fc]
push eax
lea edx, [ebp - 0x5a8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x437f0e
lea eax, [ebp - 0x844]
push eax
push 2
push 0x401f98
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0xc
lea ecx, [ebp - 0x14ec]
lea edx, [ebp - 0x14dc]
lea eax, [ebp - 0x70c]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x437ead
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
lea ecx, [ebp - 0xbe4]
push 0x442140
push ecx
mov dword [ebp - 0xbdc], 0x40261c
mov dword [ebp - 0xbe4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43c529
mov eax, dword [0x442014]
mov edx, 8
push 0xffffffffffffffff
mov dword [ebp - 0xbe4], edx
mov dword [ebp - 0xbf4], edx
mov edx, dword [0x44201c]
push 1
mov ecx, 9
push 0
mov dword [ebp - 0xbfc], eax
mov dword [ebp - 0xc04], ecx
mov dword [ebp - 0xbdc], 0x407a28
mov dword [ebp - 0xbec], 0x4023e4
mov edi, dword [edx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0xc00]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xbe4]
push ecx
push 0x4420c0
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbf8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
mov ecx, dword [0x44201c]
push ecx
mov dword [edx + 0xc], eax
call dword [edi + 0xa0]
test eax, eax
fnclex
jge 0x43830a
mov edx, dword [0x44201c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xa0
push 0x4020a8
push edx
push eax
call edi
jmp 0x438310
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x44201c]
add esp, 0xc
lea ecx, [ebp - 0xc78]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x438352
mov edx, dword [0x44201c]
push 0x50
push 0x4020a8
push edx
push eax
call edi
cmp word [ebp - 0xc78], 0
jne 0x43845e
mov eax, dword [0x44201c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x438388
mov edx, dword [0x44201c]
push 0x98
push 0x4020a8
push edx
push eax
call edi
mov eax, dword [0x44201c]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4383b1
mov ecx, dword [0x44201c]
push 0x54
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [ebp - 0xa20]
mov edi, 8
mov dword [ebp - 0xbdc], 0x407a90
mov dword [ebp - 0xbe4], edi
mov edx, dword [eax]
mov dword [ebp - 0xc80], eax
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x438422
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
jmp 0x438463
mov edi, 8
mov eax, dword [0x44201c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x43848f
mov edx, dword [0x44201c]
push 0x80
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
push 0x442130
push ecx
mov dword [ebp - 0xbdc], 0x402384
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x4024bc
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x4024f8
mov dword [ebp - 0xc04], edi
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
lea ecx, [ebp - 0xa54]
push 0x442090
push ecx
call esi
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x980]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [0x442010]
mov edx, dword [0x442028]
add esp, 0x10
mov eax, 9
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbe4], eax
mov ecx, dword [edx]
push 0xffffffffffffffff
push 1
push 0
sub esp, 0x10
mov edx, esp
sub esp, 0x10
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x980]
mov edx, esp
mov dword [edx], eax
mov eax, dword [ebp - 0x97c]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x978]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x974]
mov dword [edx + 0xc], eax
mov edx, dword [0x442028]
push edx
call dword [ecx + 0xa0]
test eax, eax
fnclex
jge 0x4385c9
mov ecx, dword [0x442028]
push 0xa0
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xc78]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x4385f6
mov edx, dword [0x442028]
push 0x50
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x438a4f
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x438630
mov edx, dword [0x442028]
push 0x98
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x43865d
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x4020d8
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x4386c9
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x438730
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x402f28
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x43879c
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x438803
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x402f3c
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x43886f
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x224]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4388d6
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x402f50
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x438942
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x8a8]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4389a9
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x4023ec
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x438a15
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x438a7b
mov edx, dword [0x442028]
push 0x80
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x407aa8
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x4023e4
mov dword [ebp - 0xbf4], edi
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x980]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [0x442010]
mov ecx, dword [0x442028]
push 0xffffffffffffffff
push 1
mov eax, 9
push 0
mov dword [ebp - 0xbdc], edx
mov dword [ebp - 0xbe4], eax
mov edx, dword [ecx]
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov dword [ecx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x980]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0x97c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x978]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x974]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x442028]
push ecx
call dword [edx + 0xa0]
test eax, eax
fnclex
jge 0x438b73
mov edx, dword [0x442028]
push 0xa0
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xc78]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x438ba0
mov ecx, dword [0x442028]
push 0x50
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x438cad
mov eax, dword [0x442028]
push eax
mov edx, dword [eax]
call dword [edx + 0x98]
test eax, eax
fnclex
jge 0x438bda
mov ecx, dword [0x442028]
push 0x98
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x438c07
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push ecx
mov ecx, dword [ebp - 0xbe0]
sub esp, 0x10
mov dword [ebp - 0xbdc], 0x407b04
mov edx, esp
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xbe4], edi
mov eax, dword [eax]
mov dword [edx], edi
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa20]
push edx
call dword [eax + 0x28]
test eax, eax
fnclex
jge 0x438c73
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x390]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x438cd9
mov ecx, dword [0x442028]
push 0x80
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x8a8]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x407b18
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x4023e4
mov dword [ebp - 0xbf4], edi
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x980]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ecx, dword [0x442010]
mov edx, dword [0x442028]
push 0xffffffffffffffff
push 1
mov eax, 9
push 0
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbe4], eax
mov ecx, dword [edx]
sub esp, 0x10
mov edx, esp
sub esp, 0x10
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x980]
mov edx, esp
mov dword [edx], eax
mov eax, dword [ebp - 0x97c]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x978]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x974]
mov dword [edx + 0xc], eax
mov edx, dword [0x442028]
push edx
call dword [ecx + 0xa0]
test eax, eax
fnclex
jge 0x438dd1
mov ecx, dword [0x442028]
push 0xa0
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xc78]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x438dfe
mov edx, dword [0x442028]
push 0x50
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x438f0b
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x438e38
mov edx, dword [0x442028]
push 0x98
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x438e65
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x407b80
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x438ed1
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x68c]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x438f37
mov edx, dword [0x442028]
push 0x80
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 1
lea eax, [ebp - 0xa54]
push 0x4420f0
push eax
mov dword [ebp - 0xbdc], 0x407bf4
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x407c80
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xa34]
push ecx
push 0x442120
push edx
mov dword [ebp - 0xbfc], 0x407cd4
mov dword [ebp - 0xc04], edi
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x980]
call ebx
lea eax, [ebp - 0xa64]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [0x442010]
mov edx, dword [0x442028]
add esp, 0x14
mov eax, 9
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbe4], eax
mov ecx, dword [edx]
push 0xffffffffffffffff
push 1
push 0
sub esp, 0x10
mov edx, esp
sub esp, 0x10
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x980]
mov edx, esp
mov dword [edx], eax
mov eax, dword [ebp - 0x97c]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x978]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x974]
mov dword [edx + 0xc], eax
mov edx, dword [0x442028]
push edx
call dword [ecx + 0xa0]
fnclex
test eax, eax
jge 0x43908e
mov ecx, dword [0x442028]
push 0xa0
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xc78]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x4390bb
mov edx, dword [0x442028]
push 0x50
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x4391c8
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x4390f5
mov edx, dword [0x442028]
push 0x98
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x439122
mov ecx, dword [0x442028]
push 0x54
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0xbdc], 0x407ce0
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xc80], eax
mov edx, dword [eax]
lea eax, [ebp - 0xa24]
push eax
mov eax, dword [ebp - 0xbe0]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xa20]
push ecx
call dword [edx + 0x28]
test eax, eax
fnclex
jge 0x43918e
mov edx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x970]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x4391f4
mov edx, dword [0x442028]
push 0x80
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402614
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0xa34]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0xa18]
push 0x442190
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x834]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402614
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0xa34]
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0xa18]
push 0x4421a0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x824]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x790]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call ebx
lea eax, [ebp - 0x834]
mov dword [ebp - 0xbdc], 1
push eax
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
sub eax, 1
lea edx, [ebp - 0xbe4]
jo 0x43f046
mov dword [ebp - 0xbec], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x153c]
push ecx
lea eax, [ebp - 0x152c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbf4], 3
mov dword [ebp - 0xbfc], 0
mov dword [ebp - 0xc04], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x4398b6
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0xbe4], ecx
lea eax, [ebp - 0xb0]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x834]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
mov edx, eax
lea ecx, [ebp - 0x898]
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x401ff4
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0xa34]
push 0xffffffffffffffff
lea ecx, [ebp - 0x898]
push eax
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x214]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x790]
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x790]
call ebx
mov ecx, 1
mov eax, 2
mov dword [ebp - 0xbec], ecx
mov dword [ebp - 0xbdc], ecx
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xb0]
push ecx
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0x155c]
push edx
push eax
lea ecx, [ebp - 0x154c]
lea edx, [ebp - 0x1e4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x439896
push 1
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0xc14], edx
mov dword [ebp - 0xc44], edx
mov edx, esp
mov ecx, 0x400c
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0xbe4], ecx
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
mov edi, 0x401ff4
lea ecx, [ebp - 0x834]
push 1
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0xc0c], edi
mov dword [ebp - 0xc3c], edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa84]
push ecx
push edx
mov dword [ebp - 0xbec], 0
mov dword [ebp - 0xbf4], 2
mov dword [ebp - 0xc1c], 1
mov dword [ebp - 0xc24], 2
mov dword [ebp - 0xc4c], 1
mov dword [ebp - 0xc54], 0x8002
call edi
add esp, 0x1c
mov ecx, dword [ebp - 0xbf4]
mov edx, dword [ebp - 0xbf0]
push eax
sub esp, 0x10
mov eax, esp
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0xbec]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xbe8]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xa34]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x214]
push eax
push ecx
call edi
add esp, 0x1c
lea edx, [ebp - 0xc14]
push eax
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
mov edx, dword [ebp - 0xc24]
push eax
mov eax, dword [ebp - 0xc20]
sub esp, 0x10
mov ecx, esp
push 1
mov dword [ecx], edx
mov edx, dword [ebp - 0xc1c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xc18]
mov dword [ecx + 8], edx
lea edx, [ebp - 0xa54]
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x214]
push ecx
push edx
call edi
add esp, 0x1c
push eax
lea eax, [ebp - 0xa64]
push eax
call esi
push eax
lea ecx, [ebp - 0xc44]
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa94]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
lea ecx, [ebp - 0xc54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov di, ax
lea edx, [ebp - 0xa94]
lea eax, [ebp - 0xa84]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test di, di
je 0x439871
sub esp, 0x10
mov ecx, 0x400c
mov ebx, esp
mov dword [ebp - 0xbf4], ecx
mov edi, ecx
lea eax, [ebp - 0x1e4]
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xbf0]
sub esp, 0x10
mov dword [ebp - 0xbec], eax
mov dword [ebx + 4], ecx
mov ecx, esp
lea edx, [ebp - 0xb0]
push 1
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0xbdc], edx
mov dword [ebp - 0xbe4], edi
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx], edi
mov dword [ecx + 4], eax
lea eax, [ebp - 0x834]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], edx
lea ecx, [ebp - 0xa34]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov ecx, dword [eax]
add esp, 0xc
mov edx, esp
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexStore]
push 1
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x834]
push ecx
mov dword [edx + 0xc], eax
call edi
add esp, 0x28
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
sub esp, 0x10
mov ecx, 0x400c
mov ebx, esp
mov dword [ebp - 0xbf4], ecx
mov dword [ebp - 0xbe4], ecx
lea eax, [ebp - 0x1e4]
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xbf0]
mov dword [ebp - 0xbec], eax
sub esp, 0x10
mov dword [ebx + 4], ecx
mov ecx, esp
lea edx, [ebp - 0xb0]
push 1
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0xbdc], edx
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xbe4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx + 4], eax
lea eax, [ebp - 0x824]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], edx
lea ecx, [ebp - 0xa34]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov ecx, dword [eax]
add esp, 0xc
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [eax + 4]
push 1
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
lea ecx, [ebp - 0x824]
push ecx
mov dword [edx + 0xc], eax
call edi
add esp, 0x28
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x790]
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, eax
lea ecx, [ebp - 0x790]
call ebx
lea edx, [ebp - 0x155c]
lea eax, [ebp - 0x154c]
push edx
lea ecx, [ebp - 0x1e4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov edi, 8
jmp 0x439508
lea edx, [ebp - 0x153c]
lea eax, [ebp - 0x152c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x439385
lea edx, [ebp - 0xa54]
push 0x4420c0
push edx
mov dword [ebp - 0xbdc], 0x402400
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x402424
mov dword [ebp - 0xbf4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
push 1
lea eax, [ebp - 0xbf4]
push 0x4420c0
push eax
lea ecx, [ebp - 0xa64]
push 0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
lea edx, [ebp - 0xa74]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa84]
push 0x4420c0
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov eax, 0x402400
lea edx, [ebp - 0xc34]
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 0xbfc], eax
mov dword [ebp - 0xc04], edi
mov dword [ebp - 0xc0c], eax
mov dword [ebp - 0xc14], edi
mov dword [ebp - 0xc1c], eax
mov dword [ebp - 0xc24], edi
mov dword [ebp - 0xc2c], 0x402418
mov dword [ebp - 0xc34], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea ecx, [ebp - 0xaf4]
push 1
push ecx
lea edx, [ebp - 0xb04]
push 0x442090
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, 0x402400
push 0x4421c0
mov dword [ebp - 0xc3c], eax
mov dword [ebp - 0xc4c], eax
mov dword [ebp - 0xc5c], eax
lea eax, [ebp - 0xe0]
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xc44], edi
mov dword [ebp - 0xc54], edi
mov dword [ebp - 0xc64], edi
mov dword [ebp - 0xc6c], 0x407cf4
mov dword [ebp - 0xc74], edi
call esi
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xaa4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xab4]
push 0x442120
push edx
call esi
push eax
lea eax, [ebp - 0xc14]
lea ecx, [ebp - 0xac4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xad4]
push 0x442080
push edx
call esi
push eax
lea eax, [ebp - 0xc24]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xb04]
lea eax, [ebp - 0xb14]
push edx
push eax
call esi
lea ecx, [ebp - 0xc44]
push eax
lea edx, [ebp - 0xb24]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xb34]
push 0x4420c0
push eax
call esi
lea ecx, [ebp - 0xc54]
push eax
lea edx, [ebp - 0xb44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xb54]
push 0x4420f0
push eax
call esi
lea ecx, [ebp - 0xc64]
push eax
lea edx, [ebp - 0xb64]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa00]
lea ecx, [ebp - 0xb74]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x9f0]
lea eax, [ebp - 0xb84]
push edx
push eax
call esi
lea ecx, [ebp - 0x65c]
push eax
lea edx, [ebp - 0xb94]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1b4]
lea ecx, [ebp - 0xba4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x80]
lea eax, [ebp - 0xbb4]
push edx
push eax
call esi
lea ecx, [ebp - 0x308]
push eax
lea edx, [ebp - 0xbc4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc74]
lea ecx, [ebp - 0xbd4]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x4e4]
call ebx
lea edx, [ebp - 0xbc4]
lea eax, [ebp - 0xbb4]
push edx
lea ecx, [ebp - 0xba4]
push eax
lea edx, [ebp - 0xb94]
push ecx
lea eax, [ebp - 0xb84]
push edx
lea ecx, [ebp - 0xb74]
push eax
lea edx, [ebp - 0xb64]
push ecx
lea eax, [ebp - 0xb54]
push edx
lea ecx, [ebp - 0xb44]
push eax
lea edx, [ebp - 0xb34]
push ecx
lea eax, [ebp - 0xb24]
push edx
lea ecx, [ebp - 0xb14]
push eax
lea edx, [ebp - 0xb04]
push ecx
lea eax, [ebp - 0xae4]
push edx
lea ecx, [ebp - 0xaf4]
push eax
lea edx, [ebp - 0xad4]
push ecx
lea eax, [ebp - 0xac4]
push edx
lea ecx, [ebp - 0xab4]
push eax
lea edx, [ebp - 0xaa4]
push ecx
lea eax, [ebp - 0xa94]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 0x18
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x64
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], 0x407d04
mov dword [ebp - 0xbe4], edi
push edx
mov dword [ebp - 0xbec], 0x40248c
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x4023e4
mov dword [ebp - 0xc04], edi
push 0x442130
lea eax, [ebp - 0xa34]
push eax
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa54]
push 0x442090
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x434]
call ebx
lea eax, [ebp - 0xa54]
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x442010]
mov ecx, dword [0x442038]
add esp, 0x10
mov dword [ebp - 0xbdc], eax
mov eax, 9
push 0xffffffffffffffff
push 3
push 3
mov dword [ebp - 0xbe4], eax
mov edx, dword [ecx]
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov dword [ecx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x434]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0x430]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x42c]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x428]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x442038]
push ecx
call dword [edx + 0xa0]
test eax, eax
fnclex
jge 0x439d23
mov edx, dword [0x442038]
push 0xa0
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442038]
lea edx, [ebp - 0xc78]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x439d50
mov ecx, dword [0x442038]
push 0x50
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x43a0d0
mov eax, dword [0x442038]
push eax
mov edx, dword [eax]
call dword [edx + 0x98]
test eax, eax
fnclex
jge 0x439d8a
mov ecx, dword [0x442038]
push 0x98
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442038]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x439db7
mov edx, dword [0x442038]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push ecx
mov ecx, dword [ebp - 0xbe0]
sub esp, 0x10
mov dword [ebp - 0xbdc], 0x407d64
mov edx, esp
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xbe4], edi
mov eax, dword [eax]
mov dword [edx], edi
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa20]
push edx
call dword [eax + 0x28]
test eax, eax
fnclex
jge 0x439e23
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x814]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442038]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x439e8a
mov edx, dword [0x442038]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push ecx
mov ecx, dword [ebp - 0xbe0]
sub esp, 0x10
mov dword [ebp - 0xbdc], 0x407d74
mov edx, esp
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xbe4], edi
mov eax, dword [eax]
mov dword [edx], edi
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa20]
push edx
call dword [eax + 0x28]
test eax, eax
fnclex
jge 0x439ef6
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x204]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442038]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x439f5d
mov edx, dword [0x442038]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push ecx
mov ecx, dword [ebp - 0xbe0]
sub esp, 0x10
mov dword [ebp - 0xbdc], 0x402654
mov edx, esp
mov dword [ebp - 0xc80], eax
mov dword [ebp - 0xbe4], edi
mov eax, dword [eax]
mov dword [edx], edi
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [edx + 0xc], ecx
mov edx, dword [ebp - 0xa20]
push edx
call dword [eax + 0x28]
test eax, eax
fnclex
jge 0x439fc9
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x380]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442038]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x43a030
mov edx, dword [0x442038]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push edx
mov dword [ebp - 0xbe4], edi
sub esp, 0x10
mov dword [ebp - 0xbdc], 0x407d90
mov edx, esp
mov ecx, dword [eax]
push eax
mov dword [ebp - 0xc80], eax
mov dword [edx], edi
mov edi, dword [ebp - 0xbe0]
mov dword [edx + 4], edi
mov edi, dword [ebp - 0xbdc]
mov dword [edx + 8], edi
mov edi, dword [ebp - 0xbd8]
mov dword [edx + 0xc], edi
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x43a096
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442038]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x43a0fc
mov ecx, dword [0x442038]
push 0x80
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x4e4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 2
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
push 0x407b98
push 2
push 0x402988
call edi
push 0x406ecc
push 2
push 0x402988
call edi
push 0x407dcc
push 2
push 0x402988
call edi
mov eax, 8
add esp, 0x24
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
push 0x442120
push ecx
mov dword [ebp - 0xbdc], 0x407e0c
mov dword [ebp - 0xbec], 0x407e34
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
push 0x442120
push ecx
mov dword [ebp - 0xbdc], 0x407e54
mov dword [ebp - 0xbec], 0x407e78
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x407e98
push 2
push 0x402988
call edi
mov eax, 8
add esp, 0x24
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x380]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x407ee8
mov dword [ebp - 0xbec], 0x407f0c
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x407f2c
push 2
push 0x402988
call edi
add esp, 0x24
mov eax, 8
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xe0]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x407f78
mov dword [ebp - 0xbec], 0x407f90
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x403b68
push 2
push 0x402988
call edi
add esp, 0x24
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0xa44]
mov dword [ebp - 0xa2c], 1
push edx
push 4
push 0x4420c0
push eax
mov dword [ebp - 0xa34], 2
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xbf4]
push ecx
push edx
mov dword [ebp - 0xbec], 0x407bec
mov dword [ebp - 0xbf4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov word [ebp - 0xc7c], ax
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0xc7c], 0
je 0x43a3db
push 0x407fa0
push 2
push 0x402988
call edi
add esp, 0xc
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0xa44]
push edx
push 4
push 0x4420c0
push eax
mov dword [ebp - 0xa2c], 1
mov dword [ebp - 0xa34], 2
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xbf4]
push ecx
push edx
mov dword [ebp - 0xbec], 0x407fdc
mov dword [ebp - 0xbf4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov word [ebp - 0xc7c], ax
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0xc7c], 0
je 0x43a46d
push 0x407fe4
push 2
push 0x402988
call edi
add esp, 0xc
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
push edx
lea eax, [ebp - 0xa34]
push 0x4420c0
push eax
mov dword [ebp - 0xbdc], 0x408020
mov dword [ebp - 0xbec], 0x408040
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
push edx
lea eax, [ebp - 0xa34]
push 0x442080
push eax
mov dword [ebp - 0xbdc], 0x40805c
mov dword [ebp - 0xbec], 0x40807c
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
push edx
lea eax, [ebp - 0xa34]
push 0x442090
push eax
mov dword [ebp - 0xbdc], 0x408094
mov dword [ebp - 0xbec], 0x4080b8
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, 8
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
push edx
lea eax, [ebp - 0xa34]
push 0x4420f0
push eax
mov dword [ebp - 0xbdc], 0x4080d4
mov dword [ebp - 0xbec], 0x4080f4
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x390]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x408110
mov dword [ebp - 0xbec], 0x408134
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x2c4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x407da8
mov dword [ebp - 0xbec], 0x408150
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, 8
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0x224]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x405728
mov dword [ebp - 0xbec], 0x40554c
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x8a8]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x404e00
mov dword [ebp - 0xbec], 0x408168
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x7c4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x40818c
mov dword [ebp - 0xbec], 0x4081b4
call esi
push eax
lea eax, [ebp - 0xbf4]
push eax
lea ecx, [ebp - 0xa44]
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa34]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, 8
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0x68c]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4081d8
mov dword [ebp - 0xbec], 0x408200
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], 0x408220
mov dword [ebp - 0xbe4], 0x8008
push 0x4420f0
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43a901
push 0x40822c
push 2
push 0x402988
call edi
add esp, 0xc
lea eax, [ebp - 0xbe4]
push 0x4420f0
push eax
mov dword [ebp - 0xbdc], 0x408274
mov dword [ebp - 0xbe4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43a93d
push 0x408280
push 2
push 0x402988
call edi
add esp, 0xc
lea ecx, [ebp - 0x5d8]
push 1
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov eax, 8
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea edx, [ebp - 0xa44]
push eax
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4082c8
mov dword [ebp - 0xbec], 0x4082e4
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x408320
push 2
push 0x402988
call edi
mov eax, 8
add esp, 0x28
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x33c]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x408368
mov dword [ebp - 0xbec], 0x40838c
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 0x402170
mov eax, 8
mov dword [ebp - 0xbec], ecx
mov dword [ebp - 0xbfc], ecx
add esp, 0x18
mov dword [ebp - 0xbdc], 0x4083a8
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc0c], 0x401f6c
mov dword [ebp - 0xc14], eax
mov ecx, 0x4083d4
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0xc44], eax
mov dword [ebp - 0xc1c], ecx
mov dword [ebp - 0xc2c], ecx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa00]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xc3c], 0x4083dc
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x9f0]
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x65c]
lea ecx, [ebp - 0xa74]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xa84]
push edx
push eax
call esi
lea ecx, [ebp - 0x1b4]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc24]
lea ecx, [ebp - 0xaa4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x80]
lea eax, [ebp - 0xab4]
push edx
push eax
call esi
lea ecx, [ebp - 0xc34]
push eax
lea edx, [ebp - 0xac4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x308]
lea ecx, [ebp - 0xad4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc44]
lea eax, [ebp - 0xae4]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xae4]
lea edx, [ebp - 0xad4]
push ecx
lea eax, [ebp - 0xac4]
push edx
lea ecx, [ebp - 0xab4]
push eax
lea edx, [ebp - 0xaa4]
push ecx
lea eax, [ebp - 0xa94]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 0xc
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 0x402170
add esp, 0x40
mov dword [ebp - 0xbec], ecx
mov dword [ebp - 0xbfc], ecx
mov ecx, 0x4083d4
mov eax, 8
mov dword [ebp - 0xc1c], ecx
mov dword [ebp - 0xc2c], ecx
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc24], eax
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0xc44], eax
lea edx, [ebp - 0x1a4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x408404
mov dword [ebp - 0xc0c], 0x401f6c
mov dword [ebp - 0xc3c], 0x40842c
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x194]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0x7b4]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc14]
push eax
lea ecx, [ebp - 0xa84]
push ecx
call esi
push eax
lea edx, [ebp - 0x2f8]
lea eax, [ebp - 0xa94]
push edx
push eax
call esi
lea ecx, [ebp - 0xc24]
push eax
lea edx, [ebp - 0xaa4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0xab4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc34]
lea eax, [ebp - 0xac4]
push edx
push eax
call esi
lea ecx, [ebp - 0x3e4]
push eax
lea edx, [ebp - 0xad4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc44]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xae4]
lea eax, [ebp - 0xad4]
push edx
lea ecx, [ebp - 0xac4]
push eax
lea edx, [ebp - 0xab4]
push ecx
lea eax, [ebp - 0xaa4]
push edx
lea ecx, [ebp - 0xa94]
push eax
lea edx, [ebp - 0xa84]
push ecx
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 0xc
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x40
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x970]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x40844c
mov dword [ebp - 0xbec], 0x408484
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0
push 0x401
push 1
lea eax, [ebp - 0x32c]
push 0xc
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x34
mov eax, 2
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xc04]
push edx
lea ecx, [ebp - 0x157c]
push eax
lea edx, [ebp - 0x156c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x400
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43af28
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0xbdc], 0
test eax, eax
mov dword [ebp - 0xbe4], 2
je 0x43aeef
cmp word [eax], 1
jne 0x43aeef
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43aee4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43aef5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
lea edx, [ebp - 0xbe4]
mov ecx, dword [ecx + 0xc]
add ecx, eax
call ebx
lea edx, [ebp - 0x157c]
lea eax, [ebp - 0x156c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43ae8d
mov eax, 2
mov ecx, 1
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbf4]
mov dword [ebp - 0xbec], ecx
mov dword [ebp - 0xbdc], ecx
lea eax, [ebp - 0x790]
push edx
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0x159c]
push eax
lea edx, [ebp - 0x158c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43b20f
mov eax, 2
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xc04]
push edx
lea ecx, [ebp - 0x15bc]
push eax
lea edx, [ebp - 0x15ac]
push ecx
lea eax, [ebp - 0x1e4]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x400
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43b1ef
lea edx, [ebp - 0x1e4]
lea ecx, [ebp - 0xb0]
push edx
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbe4], 0x400c
call dword [sym.imp.MSVBVM60.DLL___vbaStrErrVarCopy]
mov ecx, dword [ebp - 0xbe4]
mov edx, dword [ebp - 0xbe0]
sub esp, 0x10
mov dword [ebp - 0xa2c], eax
mov eax, esp
mov dword [ebp - 0xa34], 0x8008
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0xbdc]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0xbd8]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xa44]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x824]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea edx, [ebp - 0xa34]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov word [ebp - 0xc7c], ax
lea eax, [ebp - 0xa34]
lea ecx, [ebp - 0xa44]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0xc7c], 0
je 0x43b1cf
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43b116
cmp word [eax], 1
jne 0x43b116
lea edx, [ebp - 0x1e4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x43b105
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
mov eax, dword [ebp - 0xc80]
shl eax, 4
mov dword [ebp - 0x1abc], eax
jmp 0x43b128
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x1abc], eax
test ecx, ecx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
je 0x43b17c
cmp word [ecx], 1
jne 0x43b17c
lea eax, [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43b171
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43b182
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0x1ac0], eax
lea eax, [ebp - 0xbe4]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1abc]
add edx, ecx
lea ecx, [ebp - 0xa34]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
mov eax, dword [ebp - 0x32c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1ac0]
add ecx, eax
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x15bc]
lea edx, [ebp - 0x15ac]
push ecx
lea eax, [ebp - 0x1e4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43b00c
lea ecx, [ebp - 0x159c]
lea edx, [ebp - 0x158c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43af9f
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x888]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call ebx
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x910]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call ebx
mov eax, 2
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xc04]
push edx
lea ecx, [ebp - 0x15dc]
push eax
lea edx, [ebp - 0x15cc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x400
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43b461
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43b306
cmp word [eax], 1
jne 0x43b306
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43b2fb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43b30c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x32c]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov ecx, dword [edx + 0xc]
lea edx, [ebp - 0xbe4]
add ecx, eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x43b3b4
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43b384
cmp word [eax], 1
jne 0x43b384
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43b379
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43b38a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x32c]
lea ecx, [ebp - 0x888]
push ecx
mov ecx, dword [edx + 0xc]
lea edx, [ebp - 0xa34]
add ecx, eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x888]
call ebx
lea eax, [ebp - 0xb0]
push 0x4421b0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43b441
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43b411
cmp word [eax], 1
jne 0x43b411
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43b406
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43b417
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
lea edx, [ebp - 0x910]
push edx
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xa34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x910]
call ebx
lea ecx, [ebp - 0x15dc]
lea edx, [ebp - 0x15cc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43b2b8
mov eax, 8
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0x380]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4084b8
mov dword [ebp - 0xbec], 0x4082fc
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa44]
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xd0]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x4084e4
mov dword [ebp - 0xbec], 0x40850c
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 8
add esp, 0x18
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x380]
push eax
lea edx, [ebp - 0xd0]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x40852c
mov dword [ebp - 0xbec], 0x408554
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea eax, [ebp - 0x814]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 1
push eax
push ecx
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0xa54]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0x814]
push ecx
push 2
lea eax, [ebp - 0xa64]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0xa64]
lea ecx, [ebp - 0x814]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x814]
push 1
lea edx, [ebp - 0xbe4]
push ecx
push edx
lea eax, [ebp - 0xa34]
push 0
push eax
mov dword [ebp - 0xbdc], 0x408574
mov dword [ebp - 0xbe4], 8
mov dword [ebp - 0xbec], 0
mov dword [ebp - 0xbf4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
lea ecx, [ebp - 0xbf4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
lea ecx, [ebp - 0xa34]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x43b9fe
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402614
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea edx, [ebp - 0xa34]
push 0xffffffffffffffff
lea eax, [ebp - 0x814]
push edx
lea ecx, [ebp - 0xa18]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x2b4]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x2b4]
mov dword [ebp - 0xbdc], 1
push eax
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
sub eax, 1
lea edx, [ebp - 0xbe4]
jo 0x43f046
mov dword [ebp - 0xbec], eax
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x15fc]
push ecx
lea eax, [ebp - 0x15ec]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbf4], 3
mov dword [ebp - 0xbfc], 0
mov dword [ebp - 0xc04], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43ba0f
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0xbe4], ecx
lea eax, [ebp - 0xb0]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x2b4]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea edx, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0xbec], 0x4083d4
mov dword [ebp - 0xbf4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0xa44]
push 0xffffffffffffffff
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa18]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xa54]
lea ecx, [ebp - 0x69c]
call ebx
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa44]
lea edx, [ebp - 0xa34]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 2
xor eax, eax
push ecx
mov dword [ebp - 0xbe4], ecx
mov edx, esp
mov dword [ebp - 0xbdc], eax
push 1
mov dword [ebp - 0xbfc], 0x408580
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xc04], 0x8008
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x69c]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0xc04]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0xa34]
mov word [ebp - 0xc7c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc7c], 0
je 0x43b9de
sub esp, 0x10
mov ecx, 2
mov edx, esp
mov dword [ebp - 0xbe4], ecx
mov eax, 1
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x69c]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov eax, 8
add esp, 0x1c
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc14], eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xbfc], 0x408588
mov dword [ebp - 0xc0c], 0x4085ac
call esi
push eax
lea eax, [ebp - 0xc14]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea edx, [ebp - 0x15fc]
lea eax, [ebp - 0x15ec]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43b7bc
push 0x4085c8
push 2
push 0x402988
call edi
add esp, 0xc
lea edx, [ebp - 0x910]
lea eax, [ebp - 0x380]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x64
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov edx, eax
lea ecx, [ebp - 0xa54]
call ebx
lea ecx, [ebp - 0xa54]
push 2
lea edx, [ebp - 0xa64]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
mov eax, 8
lea ecx, [ebp - 0xa64]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
lea edx, [ebp - 0xa74]
push eax
push ecx
push edx
mov dword [ebp - 0xbec], 0x408604
mov dword [ebp - 0xbfc], 0x40862c
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa84]
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa64]
push eax
lea edx, [ebp - 0xa54]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
push 0x401dd8
push 2
push 0x402988
call edi
add esp, 0x2c
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], 0x408220
mov dword [ebp - 0xbe4], 0x8008
push 0x4420f0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43bb3b
push 0x408690
push 2
push 0x402988
call edi
add esp, 0xc
lea ecx, [ebp - 0xbe4]
push 0x4420f0
push ecx
mov dword [ebp - 0xbdc], 0x408274
mov dword [ebp - 0xbe4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43bb77
push 0x4086fc
push 2
push 0x402988
call edi
add esp, 0xc
mov eax, 2
mov ecx, 1
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbfc], ecx
lea eax, [ebp - 0xbf4]
push edx
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0x161c]
push ecx
lea eax, [ebp - 0x160c]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xbec], 0x400
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43bd94
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43bc27
cmp word [eax], 1
jne 0x43bc27
lea edx, [ebp - 0xb0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43bc1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43bc2d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xbe4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x43bd74
mov eax, 8
mov dword [ebp - 0xbdc], 0x408768
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0xbec], 0x402614
test eax, eax
je 0x43bcce
cmp word [eax], 1
jne 0x43bcce
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43bcc3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43bcd4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1ac4], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbfc], 0x4087a0
mov dword [ebp - 0xc04], 8
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x32c]
push eax
lea eax, [ebp - 0xa54]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1ac4]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa64]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
lea ecx, [ebp - 0x161c]
lea edx, [ebp - 0x160c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43bbd9
push 0x4087c0
push 2
push 0x402988
call edi
push 0x401dd8
push 2
push 0x402988
call edi
add esp, 0x18
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], 0x408220
mov dword [ebp - 0xbe4], 0x8008
push 0x4420f0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43bdef
push 0x4087f0
push 2
push 0x402988
call edi
add esp, 0xc
lea edx, [ebp - 0xbe4]
push 0x4420f0
push edx
mov dword [ebp - 0xbdc], 0x408274
mov dword [ebp - 0xbe4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43be2b
push 0x40885c
push 2
push 0x402988
call edi
add esp, 0xc
mov eax, 2
mov ecx, 1
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbfc], ecx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xc04]
push ecx
lea eax, [ebp - 0x163c]
push edx
lea ecx, [ebp - 0x162c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xbec], 0x400
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43c048
mov eax, dword [ebp - 0x32c]
test eax, eax
je 0x43bedb
cmp word [eax], 1
jne 0x43bedb
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43bed0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43bee1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x32c]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0xbe4]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x43c028
mov eax, 8
mov dword [ebp - 0xbdc], 0x408768
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0xbec], 0x402614
test eax, eax
je 0x43bf82
cmp word [eax], 1
jne 0x43bf82
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43bf77
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xc7c]
shl eax, 4
jmp 0x43bf88
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1ac8], eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbfc], 0x4087a0
mov dword [ebp - 0xc04], 8
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
mov ecx, dword [ebp - 0x32c]
push eax
lea eax, [ebp - 0xa54]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1ac8]
add edx, ecx
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xa64]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
lea ecx, [ebp - 0x163c]
lea edx, [ebp - 0x162c]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43be8d
push 0x4088c8
push 2
push 0x402988
call edi
push 0x401dd8
push 2
push 0x402988
call edi
push 0x4088f8
push 2
push 0x402988
call edi
push 0x40891c
push 2
push 0x402988
call edi
push 0x408968
push 2
push 0x402988
call edi
push 0x4089b0
push 2
push 0x402988
call edi
add esp, 0x48
push 0x4089f0
push 2
push 0x402988
call edi
push 0x408650
push 2
push 0x402988
call edi
push 0x408a30
push 2
push 0x402988
call edi
push 0x408a70
push 2
push 0x402988
call edi
push 0x401dd8
push 2
push 0x402988
call edi
push 0x408a94
push 2
push 0x402988
call edi
add esp, 0x48
push 0x408ab8
push 2
push 0x402988
call edi
push 0x408b14
push 2
push 0x402988
call edi
push 0x408b54
push 2
push 0x402988
call edi
push 0x408ba8
push 2
push 0x402988
call edi
push 0x408bf4
push 2
push 0x402988
call edi
push 0x408c50
push 2
push 0x402988
call edi
add esp, 0x48
push 0x408cac
push 2
push 0x402988
call edi
push 0x408cfc
push 2
push 0x402988
call edi
push 0x408d5c
push 2
push 0x402988
call edi
push 0x408dbc
push 2
push 0x402988
call edi
push 0x408e1c
push 2
push 0x402988
call edi
push 0x408e74
push 2
push 0x402988
call edi
add esp, 0x48
push 0x408ecc
push 2
push 0x402988
call edi
push 0x408f24
push 2
push 0x402988
call edi
push 0x408f7c
push 2
push 0x402988
call edi
push 0x408fd4
push 2
push 0x402988
call edi
push 0x40902c
push 2
push 0x402988
call edi
push 0x409084
push 2
push 0x402988
call edi
add esp, 0x48
push 0x4090dc
push 2
push 0x402988
call edi
push 0x409154
push 2
push 0x402988
call edi
push 0x4091ac
push 2
push 0x402988
call edi
push 0x409204
push 2
push 0x402988
call edi
push 0x40925c
push 2
push 0x402988
call edi
push 0x4092b4
push 2
push 0x402988
call edi
add esp, 0x48
push 0x40932c
push 2
push 0x402988
call edi
push 0x409384
push 2
push 0x402988
call edi
push 0x4093dc
push 2
push 0x402988
call edi
push 0x409434
push 2
push 0x402988
call edi
push 0x40948c
push 2
push 0x402988
call edi
push 0x409508
push 2
push 0x402988
call edi
add esp, 0x48
push 0x409560
push 2
push 0x402988
call edi
push 0x4095b8
push 2
push 0x402988
call edi
push 0x409610
push 2
push 0x402988
call edi
push 0x409668
push 2
push 0x402988
call edi
push 0x4096ec
push 2
push 0x402988
call edi
push 0x409750
push 2
push 0x402988
call edi
add esp, 0x48
push 0x4097b4
push 2
push 0x402988
call edi
push 0x409810
push 2
push 0x402988
call edi
push 0x409860
push 2
push 0x402988
call edi
push 0x4098d4
push 2
push 0x402988
call edi
push 0x409924
push 2
push 0x402988
call edi
push 0x40997c
push 2
push 0x402988
call edi
add esp, 0x48
push 0x4099d4
push 2
push 0x402988
call edi
push 0x401dd8
push 2
push 0x402988
call edi
push 0x4099f8
push 2
push 0x402988
call edi
push 0x401dd8
push 2
push 0x402988
call edi
add esp, 0x30
mov ecx, 1
mov dword [ebp - 0xbec], ecx
mov eax, 2
mov dword [ebp - 0xbdc], ecx
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0x790]
push ecx
lea eax, [ebp - 0xbe4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0x165c]
push edx
lea ecx, [ebp - 0x164c]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43c4f4
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0xbe4], ecx
lea eax, [ebp - 0xb0]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebp - 0xbdc], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x834]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xa34]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
mov eax, 8
add esp, 0x1c
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa34]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
mov dword [ebp - 0xbec], 0x409a54
mov dword [ebp - 0xbfc], 0x409a74
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
push 2
push 0x401f98
call edi
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea edx, [ebp - 0x165c]
lea eax, [ebp - 0x164c]
lea ecx, [ebp - 0xb0]
push edx
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43c409
push 0x409a88
push 2
push 0x402988
call edi
push 0x401dd8
push 2
push 0x402988
call edi
push 0x4098b4
push 2
push 0x402988
call edi
add esp, 0x24
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
lea edx, [ebp - 0xbe4]
push 0x4421e0
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43df61
lea eax, [ebp - 0xa18]
push 0x4421d0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
lea ecx, [ebp - 0xa1c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.00401b04
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0xa1c]
lea eax, [ebp - 0xa18]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0xa34]
mov eax, 8
push ecx
push 0x442130
push edx
mov dword [ebp - 0xbdc], 0x402384
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbec], 0x4024bc
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbfc], 0x4024f8
mov dword [ebp - 0xc04], eax
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa54]
push 0x442090
push edx
call esi
push eax
lea eax, [ebp - 0xc04]
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x980]
call ebx
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [0x442010]
mov ecx, dword [0x442028]
add esp, 0x10
mov eax, 9
mov dword [ebp - 0xbdc], edx
mov dword [ebp - 0xbe4], eax
mov edx, dword [ecx]
push 0xffffffffffffffff
push 1
push 0
sub esp, 0x10
mov ecx, esp
sub esp, 0x10
mov dword [ecx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x980]
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0x97c]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x978]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x974]
mov dword [ecx + 0xc], eax
mov ecx, dword [0x442028]
push ecx
call dword [edx + 0xa0]
test eax, eax
fnclex
jge 0x43c6dc
mov edx, dword [0x442028]
push 0xa0
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea edx, [ebp - 0xc78]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x43c709
mov ecx, dword [0x442028]
push 0x50
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc78], 0
jne 0x43cb7b
mov eax, dword [0x442028]
push eax
mov edx, dword [eax]
call dword [edx + 0x98]
test eax, eax
fnclex
jge 0x43c743
mov ecx, dword [0x442028]
push 0x98
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x43c770
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
mov eax, 8
push edx
mov ecx, dword [ebp - 0xa20]
sub esp, 0x10
mov dword [ebp - 0xbe4], eax
mov edx, esp
mov dword [ebp - 0xbdc], 0x4020d8
mov dword [ebp - 0xc80], ecx
mov ecx, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0xa20]
push edx
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x43c7e1
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x6ac]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x43c848
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
mov eax, 8
push edx
mov ecx, dword [ebp - 0xa20]
sub esp, 0x10
mov dword [ebp - 0xbe4], eax
mov edx, esp
mov dword [ebp - 0xbdc], 0x402f28
mov dword [ebp - 0xc80], ecx
mov ecx, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0xa20]
push edx
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x43c8b9
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x2c4]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x43c920
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
mov eax, 8
push edx
mov ecx, dword [ebp - 0xa20]
sub esp, 0x10
mov dword [ebp - 0xbe4], eax
mov edx, esp
mov dword [ebp - 0xbdc], 0x402f3c
mov dword [ebp - 0xc80], ecx
mov ecx, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0xa20]
push edx
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x43c991
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x224]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x43c9f8
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
mov eax, 8
push edx
mov ecx, dword [ebp - 0xa20]
sub esp, 0x10
mov dword [ebp - 0xbe4], eax
mov edx, esp
mov dword [ebp - 0xbdc], 0x402f50
mov dword [ebp - 0xc80], ecx
mov ecx, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0xa20]
push edx
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x43ca69
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x8a8]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
lea ecx, [ebp - 0xa20]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x43cad0
mov edx, dword [0x442028]
push 0x54
push 0x4020a8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
mov eax, 8
push edx
mov ecx, dword [ebp - 0xa20]
sub esp, 0x10
mov dword [ebp - 0xbe4], eax
mov edx, esp
mov dword [ebp - 0xbdc], 0x4023ec
mov dword [ebp - 0xc80], ecx
mov ecx, dword [ecx]
mov dword [edx], eax
mov eax, dword [ebp - 0xbe0]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0xbdc]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0xa20]
push edx
call dword [ecx + 0x28]
test eax, eax
fnclex
jge 0x43cb41
mov ecx, dword [ebp - 0xc80]
push 0x28
push 0x4020e8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xa24]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x33c]
mov dword [ebp - 0xa24], 0
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa34], 9
call ebx
lea ecx, [ebp - 0xa20]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x442028]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x43cba7
mov ecx, dword [0x442028]
push 0x80
push 0x4020a8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 1
lea edx, [ebp - 0xa54]
push 0x4420f0
push edx
mov dword [ebp - 0xbdc], 0x402170
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov eax, 8
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa84]
mov dword [ebp - 0xbec], 0x402170
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbfc], 0x402418
mov dword [ebp - 0xc04], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea eax, [ebp - 0xa84]
push 1
push eax
lea ecx, [ebp - 0xa94]
push 0x442090
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
push 0x4421d0
lea edx, [ebp - 0xa34]
push 0x442080
push edx
call esi
push eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa94]
lea ecx, [ebp - 0xaa4]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x960]
call ebx
lea edx, [ebp - 0xa94]
lea eax, [ebp - 0xa74]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa64]
push ecx
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
lea eax, [ebp - 0xa44]
mov dword [ebp - 0xbdc], 0x402170
mov dword [ebp - 0xbe4], 8
push 1
push 0x4420f0
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov dword [ebp - 0xbec], 0x402170
mov eax, 8
lea edx, [ebp - 0xc04]
lea ecx, [ebp - 0xa74]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xbfc], 0x402418
mov dword [ebp - 0xc04], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea ecx, [ebp - 0xa74]
push 1
push ecx
lea edx, [ebp - 0xa84]
push 0x442090
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0xbe4]
push 0x442080
lea ecx, [ebp - 0xa34]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xa44]
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa84]
lea ecx, [ebp - 0xa94]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x558]
call ebx
lea edx, [ebp - 0xa84]
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa74]
push eax
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa44]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea edx, [ebp - 0x960]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 2
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0xa18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
push 0x442080
push ecx
mov dword [ebp - 0xbdc], 0xc
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea ecx, [ebp - 0xa54]
push 0x442080
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x4d4]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
mov dword [ebp - 0xbdc], 0x402418
mov dword [ebp - 0xbe4], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
lea eax, [ebp - 0xa34]
push 1
push eax
lea ecx, [ebp - 0xa44]
push 0x442090
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x804]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa34]
push edx
push 0x442120
push eax
mov dword [ebp - 0xbdc], 0x20
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0xa54]
push 0x442120
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x7f4]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x2c4]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 8
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea ecx, [ebp - 0x2c4]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x900]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x7c4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 8
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0x7c4]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x950]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x33c]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4096c0
mov dword [ebp - 0xbe4], 8
call esi
mov edx, eax
lea ecx, [ebp - 0x1f4]
call ebx
lea eax, [ebp - 0x1f4]
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x1e
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xbe4]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLe]
test ax, ax
je 0x43d13d
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x1e
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0x1f4]
lea eax, [ebp - 0xa54]
push edx
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x878]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x43d161
lea edx, [ebp - 0x1f4]
push 0x1e
lea eax, [ebp - 0xa34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xa34]
lea ecx, [ebp - 0x878]
call ebx
mov ecx, 0x402170
mov eax, 8
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbec], ecx
mov ecx, 0x4083d4
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xc0c], ecx
mov dword [ebp - 0xc1c], ecx
lea ecx, [ebp - 0xa00]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc24], eax
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbfc], 0x401f6c
call esi
lea ecx, [ebp - 0x9f0]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x65c]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x1b4]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xa94]
push edx
push eax
call esi
lea ecx, [ebp - 0x80]
push eax
lea edx, [ebp - 0xaa4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc24]
lea ecx, [ebp - 0xab4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x308]
lea eax, [ebp - 0xac4]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x780]
call ebx
lea ecx, [ebp - 0xab4]
lea edx, [ebp - 0xaa4]
push ecx
push edx
lea eax, [ebp - 0xa94]
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 0x402170
add esp, 0x28
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbec], ecx
mov ecx, 0x4083d4
mov eax, 8
mov dword [ebp - 0xc0c], ecx
mov dword [ebp - 0xc1c], ecx
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xc14], eax
mov dword [ebp - 0xc24], eax
lea edx, [ebp - 0xbe4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbfc], 0x401f6c
call esi
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0xa44]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xbf4]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x7b4]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
lea ecx, [ebp - 0xc04]
push eax
lea edx, [ebp - 0xa74]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x2f8]
lea ecx, [ebp - 0xa84]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc14]
lea eax, [ebp - 0xa94]
push edx
push eax
call esi
lea ecx, [ebp - 0x284]
push eax
lea edx, [ebp - 0xaa4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xc24]
lea ecx, [ebp - 0xab4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x3e4]
lea eax, [ebp - 0xac4]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0xc0]
call ebx
lea ecx, [ebp - 0xab4]
lea edx, [ebp - 0xaa4]
push ecx
lea eax, [ebp - 0xa94]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x8a8]
lea eax, [ebp - 0xa34]
push ecx
push edx
push eax
mov dword [ebp - 0xbdc], 0xc
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0x8a8]
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x548]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x5d8]
push 1
lea ecx, [ebp - 0xa34]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xa34]
lea eax, [ebp - 0xa44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcUpperCaseVar]
lea edx, [ebp - 0xa44]
lea ecx, [ebp - 0x770]
call ebx
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xbe4]
push 0x442140
push ecx
mov dword [ebp - 0xbdc], 0x4022c4
mov dword [ebp - 0xbe4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43d76e
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0x558]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x14
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea edx, [ebp - 0xa44]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0xa54]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea ecx, [ebp - 0x558]
lea edx, [ebp - 0xa54]
push ecx
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x558]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xa54]
push 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xad4]
push 0xc
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
push 1
lea eax, [ebp - 0xb14]
push 0x4420f0
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0xb44]
push 0x14
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0x4d4]
lea eax, [ebp - 0x804]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x4096d0
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea edx, [ebp - 0x7f4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x900]
lea ecx, [ebp - 0xa74]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x950]
lea eax, [ebp - 0xa84]
push edx
push eax
call esi
lea ecx, [ebp - 0x878]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x780]
lea ecx, [ebp - 0xaa4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xab4]
push edx
push eax
call esi
lea ecx, [ebp - 0x548]
push eax
lea edx, [ebp - 0xac4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x558]
lea eax, [ebp - 0xaf4]
push edx
push eax
call esi
lea ecx, [ebp - 0x770]
push eax
lea edx, [ebp - 0xb04]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xb14]
lea ecx, [ebp - 0xb24]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xb34]
push edx
push eax
call esi
lea ecx, [ebp - 0xb44]
push eax
lea edx, [ebp - 0xb54]
push ecx
push edx
call esi
push eax
push 2
push 0x401f98
call edi
lea eax, [ebp - 0xb54]
lea ecx, [ebp - 0xb44]
push eax
lea edx, [ebp - 0xb34]
push ecx
lea eax, [ebp - 0xb24]
push edx
lea ecx, [ebp - 0xb14]
push eax
lea edx, [ebp - 0xb04]
push ecx
lea eax, [ebp - 0xaf4]
push edx
lea ecx, [ebp - 0xae4]
push eax
push ecx
lea edx, [ebp - 0xad4]
lea eax, [ebp - 0xac4]
push edx
lea ecx, [ebp - 0xab4]
push eax
lea edx, [ebp - 0xaa4]
push ecx
lea eax, [ebp - 0xa94]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 0x13
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x5c
jmp 0x43d94a
lea ecx, [ebp - 0xa54]
push 0xa
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xad4]
push 0x20
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
push 1
lea eax, [ebp - 0xb04]
push 0x4420f0
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0xb34]
push 0x14
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0x4d4]
lea eax, [ebp - 0x804]
push edx
lea ecx, [ebp - 0xa34]
push eax
push ecx
mov dword [ebp - 0xbdc], 0x4096d0
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea edx, [ebp - 0x7f4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x900]
lea ecx, [ebp - 0xa74]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x950]
lea eax, [ebp - 0xa84]
push edx
push eax
call esi
lea ecx, [ebp - 0x878]
push eax
lea edx, [ebp - 0xa94]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x780]
lea ecx, [ebp - 0xaa4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xab4]
push edx
push eax
call esi
lea ecx, [ebp - 0x548]
push eax
lea edx, [ebp - 0xac4]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xad4]
lea ecx, [ebp - 0xae4]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x770]
lea eax, [ebp - 0xaf4]
push edx
push eax
call esi
lea ecx, [ebp - 0xb04]
push eax
lea edx, [ebp - 0xb14]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xb24]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xb34]
lea eax, [ebp - 0xb44]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xb44]
lea edx, [ebp - 0xb34]
push ecx
lea eax, [ebp - 0xb24]
push edx
lea ecx, [ebp - 0xb14]
push eax
lea edx, [ebp - 0xb04]
push ecx
lea eax, [ebp - 0xaf4]
push edx
lea ecx, [ebp - 0xae4]
push eax
lea edx, [ebp - 0xad4]
push ecx
lea eax, [ebp - 0xac4]
push edx
lea ecx, [ebp - 0xab4]
push eax
lea edx, [ebp - 0xaa4]
push ecx
lea eax, [ebp - 0xa94]
push edx
lea ecx, [ebp - 0xa84]
push eax
lea edx, [ebp - 0xa74]
push ecx
lea eax, [ebp - 0xa64]
push edx
lea ecx, [ebp - 0xa54]
push eax
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 0x12
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x58
lea ecx, [ebp - 0x1f4]
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x1e
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xbe4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x43d9c9
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x1f4]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0x4094e4
mov dword [ebp - 0xbe4], 8
call esi
push eax
push 2
push 0x401f98
call edi
add esp, 0xc
lea ecx, [ebp - 0xa34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x114]
lea edx, [ebp - 0x9b0]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x538]
call ebx
lea ecx, [ebp - 0x254]
lea edx, [ebp - 0x124]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x424]
call ebx
mov ecx, 1
mov eax, 2
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbec], ecx
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
push ecx
lea edx, [ebp - 0xbf4]
push 0x4420b0
lea eax, [ebp - 0x167c]
push edx
lea ecx, [ebp - 0x166c]
push eax
lea edx, [ebp - 0x70c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43df59
mov eax, 2
mov ecx, 1
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
lea eax, [ebp - 0xbe4]
mov dword [ebp - 0xbdc], ecx
mov dword [ebp - 0xbec], ecx
push eax
lea ecx, [ebp - 0xbf4]
push 0x4420a0
lea edx, [ebp - 0x169c]
push ecx
lea eax, [ebp - 0x168c]
push edx
lea ecx, [ebp - 0x5a8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43df39
mov eax, dword [0x442058]
test eax, eax
je 0x43db45
cmp word [eax], 2
jne 0x43db45
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x43dafd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x442058]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43db2e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov eax, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul eax, dword [ebp - 0xc7c]
add eax, edx
shl eax, 4
jmp 0x43db51
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x442058]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
add ecx, eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x43df19
lea eax, [ebp - 0x5a8]
lea ecx, [ebp - 0x9b0]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x67c]
call ebx
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x70c]
push eax
lea edx, [ebp - 0x124]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0x424]
lea eax, [ebp - 0xa54]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x4c4]
call ebx
lea ecx, [ebp - 0xbe4]
lea edx, [ebp - 0x67c]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea edx, [ebp - 0xa54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea eax, [ebp - 0xa54]
lea ecx, [ebp - 0x67c]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x940]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0x4c4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea ecx, [ebp - 0xa54]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
lea edx, [ebp - 0xa54]
lea eax, [ebp - 0x4c4]
push edx
lea ecx, [ebp - 0xa64]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x7e4]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0xbdc], 4
test eax, eax
mov dword [ebp - 0xbe4], 2
je 0x43dd9e
cmp word [eax], 2
jne 0x43dd9e
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc80], eax
jb 0x43dd56
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc7c], eax
jb 0x43dd87
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc80]
imul eax, dword [ebp - 0xc7c]
add eax, edx
shl eax, 4
jmp 0x43ddaa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xbe4]
push edx
add ecx, eax
lea edx, [ebp - 0xa34]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0xa44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0xa54]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
mov eax, dword [ebp - 0x2d8]
test eax, eax
je 0x43de6a
cmp word [eax], 2
jne 0x43de6a
lea edx, [ebp - 0x70c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x1c]
sub eax, edx
mov edx, dword [ecx + 0x18]
cmp eax, edx
mov dword [ebp - 0xc88], eax
jb 0x43de22
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebp - 0x5a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0xc84], eax
jb 0x43de53
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov eax, dword [ecx + 0x18]
mov edx, dword [ebp - 0xc88]
imul eax, dword [ebp - 0xc84]
add eax, edx
shl eax, 4
jmp 0x43de76
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2d8]
mov ecx, dword [ecx + 0xc]
lea edx, [ebp - 0xa54]
push edx
add ecx, eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x34c]
call ebx
lea ecx, [ebp - 0xa54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x940]
lea ecx, [ebp - 0x7e4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x40930c
mov dword [ebp - 0xbe4], 8
call esi
push eax
lea eax, [ebp - 0x34c]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0xbe4]
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
push eax
push 2
push 0x401f98
call edi
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea ecx, [ebp - 0x169c]
lea edx, [ebp - 0x168c]
push ecx
lea eax, [ebp - 0x5a8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43dabb
lea ecx, [ebp - 0x167c]
lea edx, [ebp - 0x166c]
push ecx
lea eax, [ebp - 0x70c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43da63
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
mov edi, 8
lea edx, [ebp - 0xbe4]
lea ecx, [ebp - 0x414]
mov dword [ebp - 0xbdc], 0x402614
mov dword [ebp - 0xbe4], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, 2
lea ecx, [ebp - 0xbe4]
mov dword [ebp - 0xbe4], eax
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0xc04], eax
lea edx, [ebp - 0xbf4]
push ecx
lea eax, [ebp - 0xc04]
push edx
lea ecx, [ebp - 0x16bc]
push eax
lea edx, [ebp - 0x16ac]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbec], 0x400
mov dword [ebp - 0xbfc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x43e1fe
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x43e038
cmp word [eax], 1
jne 0x43e038
lea ecx, [ebp - 0xb0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x43e02c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl edi, 4
mov eax, edi
mov edi, 8
jmp 0x43e03e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0xf4]
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
mov ecx, dword [edx + 0xc]
lea edx, [ebp - 0xbe4]
add ecx, eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x43e1de
lea edx, [ebp - 0xb0]
lea ecx, [ebp - 0x404]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x43e0c9
cmp word [eax], 1
jne 0x43e0c9
lea eax, [ebp - 0xb0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edi, eax
mov eax, dword [ebp - 0xf4]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub edi, edx
cmp edi, ecx
jb 0x43e0bd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
shl edi, 4
mov eax, edi
mov edi, 8
jmp 0x43e0cf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0xc]
lea ecx, [ebp - 0x930]
add edx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea edx, [ebp - 0xbe4]
push 0x442060
push edx
mov dword [ebp - 0xbdc], 0
mov dword [ebp - 0xbe4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x43e14a
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xbe4]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 1
mov dword [ebp - 0xbe4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x404]
call ebx
lea eax, [ebp - 0x414]
lea ecx, [ebp - 0x404]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
mov dword [ebp - 0xbdc], 0x4083d4
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x402614
mov dword [ebp - 0xbf4], edi
call esi
push eax
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa44]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x930]
lea eax, [ebp - 0xa54]
push edx
push eax
call esi
lea ecx, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0xa64]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x414]
call ebx
lea eax, [ebp - 0xa54]
lea ecx, [ebp - 0xa44]
push eax
lea edx, [ebp - 0xa34]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea eax, [ebp - 0x16bc]
lea ecx, [ebp - 0x16ac]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x43dfed
lea eax, [ebp - 0xbe4]
lea ecx, [ebp - 0xa34]
push eax
push 0x442130
push ecx
mov dword [ebp - 0xbdc], 0x407d04
mov dword [ebp - 0xbe4], edi
mov dword [ebp - 0xbec], 0x40248c
mov dword [ebp - 0xbf4], edi
mov dword [ebp - 0xbfc], 0x4023e4
mov dword [ebp - 0xc04], edi
call esi
push eax
lea edx, [ebp - 0xbf4]
lea eax, [ebp - 0xa44]
push edx
push eax
call esi
push eax
lea ecx, [ebp - 0xa54]
push 0x442090
push ecx
call esi
push eax
lea edx, [ebp - 0xc04]
lea eax, [ebp - 0xa64]
push edx
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0x434]
call ebx
lea ecx, [ebp - 0xa54]
lea edx, [ebp - 0xa44]
push ecx
lea eax, [ebp - 0xa34]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x442010]
mov ecx, 9
mov dword [ebp - 0xbdc], eax
push 0xffffffffffffffff
push 3
push 3
mov dword [ebp - 0xbe4], ecx
sub esp, 0x10
mov edx, dword [0x442038]
mov ebx, esp
sub esp, 0x10
mov esi, dword [edx]
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xbe0]
mov dword [ebx + 4], ecx
mov ecx, esp
push edx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xbd8]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x434]
mov dword [ecx], eax
mov eax, dword [ebp - 0x430]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x42c]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x428]
mov dword [ecx + 0xc], eax
call dword [esi + 0xa0]
test eax, eax
fnclex
jge 0x43e32f
mov ecx, dword [0x442038]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xa0
push 0x4020a8
push ecx
push eax
call esi
jmp 0x43e335
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442038]
lea ecx, [ebp - 0xc78]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x43e35e
mov edx, dword [0x442038]
push 0x50
push 0x4020a8
push edx
push eax
call esi
cmp word [ebp - 0xc78], 0
jne 0x43e50f
mov eax, dword [0x442038]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x43e394
mov edx, dword [0x442038]
push 0x98
push 0x4020a8
push edx
push eax
call esi
mov eax, dword [0x442038]
lea edx, [ebp - 0xa20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x43e3bd
mov ecx, dword [0x442038]
push 0x54
push 0x4020a8
push ecx
push eax
call esi
lea ebx, [ebp - 0xa24]
mov eax, dword [ebp - 0xa20]
push ebx
mov edx, edi
sub esp, 0x10
mov dword [ebp - 0xbe4], edx
mov ebx, esp
mov ecx, 0x40931c
mov dword [ebp - 0xbdc], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0xbe0]
push eax
mov esi, eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xbd8]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
test eax, eax
fnclex
jge 0x43e416
push 0x28
push 0x4020e8
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edi, dword [ebp - 0x414]
sub esp, 0x10
mov eax, dword [ebp - 0xa24]
mov ecx, esp
push eax
mov esi, eax
mov edx, dword [eax]
mov dword [ecx], edi
mov edi, dword [ebp - 0x410]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x40c]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x408]
mov dword [ecx + 0xc], edi
call dword [edx + 0x38]
test eax, eax
fnclex
jge 0x43e461
push 0x38
push 0x4026a8
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa24]
lea eax, [ebp - 0xa20]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov ecx, 0xa
mov eax, 0x80020004
push ecx
mov dword [ebp - 0xbf4], ecx
mov ebx, esp
mov esi, ecx
sub esp, 0x10
mov dword [ebp - 0xbec], eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xbf0]
mov edx, eax
mov edi, dword [0x442038]
mov dword [ebx + 4], ecx
mov ecx, esp
mov dword [ebp - 0xbdc], edx
mov dword [ebp - 0xbe4], esi
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xbe8]
mov edi, dword [edi]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xbe0]
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov eax, dword [0x442038]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xbd8]
mov dword [ecx + 0xc], edx
call dword [edi + 0xac]
test eax, eax
fnclex
jge 0x43e509
mov ecx, dword [0x442038]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xac
push 0x4020a8
push ecx
push eax
call esi
jmp 0x43e50f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442038]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x43e537
mov ecx, dword [0x442038]
push 0x80
push 0x4020a8
push ecx
push eax
call esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push 0x401d78
push 0
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push 0x442050
call edi
push 0x401d78
push 0
call esi
push eax
push 0x442054
call edi
wait
push 0x43f033
jmp 0x43e675
lea ecx, [ebp - 0x16bc]
lea edx, [ebp - 0x16ac]
push ecx
lea eax, [ebp - 0x169c]
push edx
lea ecx, [ebp - 0x168c]
push eax
lea edx, [ebp - 0x167c]
push ecx
lea eax, [ebp - 0x166c]
push edx
lea ecx, [ebp - 0x165c]
push eax
lea edx, [ebp - 0x164c]
push ecx
lea eax, [ebp - 0x163c]
push edx
lea ecx, [ebp - 0x162c]
push eax
lea edx, [ebp - 0x161c]
push ecx
lea eax, [ebp - 0x160c]
push edx
lea ecx, [ebp - 0x15fc]
push eax
lea edx, [ebp - 0x15ec]
push ecx
lea eax, [ebp - 0x15dc]
push edx
lea ecx, [ebp - 0x15cc]
push eax
lea edx, [ebp - 0x15bc]
push ecx
lea eax, [ebp - 0x15ac]
push edx
lea ecx, [ebp - 0x159c]
push eax
lea edx, [ebp - 0x158c]
push ecx
lea eax, [ebp - 0x157c]
push edx
lea ecx, [ebp - 0x156c]
push eax
lea edx, [ebp - 0x155c]
push ecx
lea eax, [ebp - 0x154c]
push edx
lea ecx, [ebp - 0x153c]
push eax
lea edx, [ebp - 0x152c]
push ecx
lea eax, [ebp - 0x151c]
push edx
lea ecx, [ebp - 0x150c]
push eax
lea edx, [ebp - 0x14fc]
push ecx
lea eax, [ebp - 0x14ec]
push edx
lea ecx, [ebp - 0x14dc]
push eax
lea edx, [ebp - 0x14cc]
push ecx
lea eax, [ebp - 0x14bc]
push edx
lea ecx, [ebp - 0x14ac]
push eax
lea edx, [ebp - 0x149c]
push ecx
lea eax, [ebp - 0x148c]
push edx
lea ecx, [ebp - 0x147c]
push eax
lea edx, [ebp - 0x146c]
push ecx
lea eax, [ebp - 0x145c]
push edx
lea ecx, [ebp - 0x144c]
push eax
push ecx
lea edx, [ebp - 0x143c]
lea eax, [ebp - 0x142c]
push edx
lea ecx, [ebp - 0x141c]
push eax
lea edx, [ebp - 0x140c]
push ecx
lea eax, [ebp - 0x13fc]
push edx
lea ecx, [ebp - 0x13ec]
push eax
lea edx, [ebp - 0x13dc]
push ecx
lea eax, [ebp - 0x13cc]
push edx
lea ecx, [ebp - 0x13bc]
push eax
lea edx, [ebp - 0x13ac]
push ecx
lea eax, [ebp - 0x139c]
push edx
lea ecx, [ebp - 0x138c]
push eax
lea edx, [ebp - 0x137c]
push ecx
lea eax, [ebp - 0x136c]
push edx
lea ecx, [ebp - 0x135c]
push eax
lea edx, [ebp - 0x134c]
push ecx
lea eax, [ebp - 0x133c]
push edx
lea ecx, [ebp - 0x132c]
push eax
lea edx, [ebp - 0x131c]
push ecx
lea eax, [ebp - 0x130c]
push edx
lea ecx, [ebp - 0x12fc]
push eax
lea edx, [ebp - 0x12ec]
push ecx
lea eax, [ebp - 0x12dc]
push edx
lea ecx, [ebp - 0x12cc]
push eax
lea edx, [ebp - 0x12bc]
push ecx
lea eax, [ebp - 0x12ac]
push edx
lea ecx, [ebp - 0x129c]
push eax
lea edx, [ebp - 0x128c]
push ecx
lea eax, [ebp - 0x127c]
push edx
lea ecx, [ebp - 0x126c]
push eax
lea edx, [ebp - 0x125c]
push ecx
lea eax, [ebp - 0x124c]
push edx
lea ecx, [ebp - 0x123c]
push eax
lea edx, [ebp - 0x122c]
push ecx
lea eax, [ebp - 0x121c]
push edx
lea ecx, [ebp - 0x120c]
push eax
lea edx, [ebp - 0x11fc]
push ecx
lea eax, [ebp - 0x11ec]
push edx
lea ecx, [ebp - 0x11dc]
push eax
lea edx, [ebp - 0x11cc]
push ecx
lea eax, [ebp - 0x11bc]
push edx
push eax
lea ecx, [ebp - 0x11ac]
lea edx, [ebp - 0x119c]
push ecx
lea eax, [ebp - 0x118c]
push edx
lea ecx, [ebp - 0x117c]
push eax
lea edx, [ebp - 0x116c]
push ecx
lea eax, [ebp - 0x115c]
push edx
lea ecx, [ebp - 0x114c]
push eax
lea edx, [ebp - 0x113c]
push ecx
lea eax, [ebp - 0x112c]
push edx
lea ecx, [ebp - 0x111c]
push eax
lea edx, [ebp - 0x110c]
push ecx
lea eax, [ebp - 0x10fc]
push edx
lea ecx, [ebp - 0x10ec]
push eax
lea edx, [ebp - 0x10dc]
push ecx
lea eax, [ebp - 0x10cc]
push edx
lea ecx, [ebp - 0x10bc]
push eax
lea edx, [ebp - 0x10ac]
push ecx
lea eax, [ebp - 0x109c]
push edx
lea ecx, [ebp - 0x108c]
push eax
lea edx, [ebp - 0x107c]
push ecx
lea eax, [ebp - 0x106c]
push edx
lea ecx, [ebp - 0x105c]
push eax
lea edx, [ebp - 0x104c]
push ecx
lea eax, [ebp - 0x103c]
push edx
lea ecx, [ebp - 0x102c]
push eax
lea edx, [ebp - 0x101c]
push ecx
lea eax, [ebp - 0x100c]
push edx
lea ecx, [ebp - 0xffc]
push eax
lea edx, [ebp - 0xfec]
push ecx
lea eax, [ebp - 0xfdc]
push edx
lea ecx, [ebp - 0xfcc]
push eax
lea edx, [ebp - 0xfbc]
push ecx
lea eax, [ebp - 0xfac]
push edx
lea ecx, [ebp - 0xf9c]
push eax
lea edx, [ebp - 0xf8c]
push ecx
lea eax, [ebp - 0xf7c]
push edx
lea ecx, [ebp - 0xf6c]
push eax
lea edx, [ebp - 0xf5c]
push ecx
lea eax, [ebp - 0xf4c]
push edx
lea ecx, [ebp - 0xf3c]
push eax
push ecx
lea edx, [ebp - 0xf2c]
lea eax, [ebp - 0xf1c]
push edx
lea ecx, [ebp - 0xf0c]
push eax
lea edx, [ebp - 0xefc]
push ecx
lea eax, [ebp - 0xeec]
push edx
lea ecx, [ebp - 0xedc]
push eax
lea edx, [ebp - 0xecc]
push ecx
lea eax, [ebp - 0xebc]
push edx
lea ecx, [ebp - 0xeac]
push eax
lea edx, [ebp - 0xe9c]
push ecx
lea eax, [ebp - 0xe8c]
push edx
lea ecx, [ebp - 0xe7c]
push eax
lea edx, [ebp - 0xe6c]
push ecx
lea eax, [ebp - 0xe5c]
push edx
lea ecx, [ebp - 0xe4c]
push eax
lea edx, [ebp - 0xe3c]
push ecx
lea eax, [ebp - 0xe2c]
push edx
lea ecx, [ebp - 0xe1c]
push eax
lea edx, [ebp - 0xe0c]
push ecx
lea eax, [ebp - 0xdfc]
push edx
lea ecx, [ebp - 0xdec]
push eax
lea edx, [ebp - 0xddc]
push ecx
lea eax, [ebp - 0xdcc]
push edx
lea ecx, [ebp - 0xdbc]
push eax
lea edx, [ebp - 0xdac]
push ecx
lea eax, [ebp - 0xd9c]
push edx
lea ecx, [ebp - 0xd8c]
push eax
lea edx, [ebp - 0xd7c]
push ecx
lea eax, [ebp - 0xd6c]
push edx
lea ecx, [ebp - 0xd5c]
push eax
lea edx, [ebp - 0xd4c]
push ecx
lea eax, [ebp - 0xd3c]
push edx
lea ecx, [ebp - 0xd2c]
push eax
lea edx, [ebp - 0xd1c]
push ecx
lea eax, [ebp - 0xd0c]
push edx
lea ecx, [ebp - 0xcfc]
push eax
lea edx, [ebp - 0xcec]
push ecx
lea eax, [ebp - 0xcdc]
push edx
lea ecx, [ebp - 0xccc]
push eax
lea edx, [ebp - 0xcbc]
push ecx
lea eax, [ebp - 0xcac]
push edx
push eax
lea ecx, [ebp - 0xc9c]
push ecx
push 0xa3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0x290
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xa0]
call esi
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0xc0]
call esi
lea ecx, [ebp - 0xd0]
call esi
lea ecx, [ebp - 0xe0]
call esi
lea ecx, [ebp - 0xf0]
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0xf4]
push edx
push 0
call edi
lea ecx, [ebp - 0x104]
call esi
lea ecx, [ebp - 0x114]
call esi
lea ecx, [ebp - 0x124]
call esi
lea ecx, [ebp - 0x134]
call esi
lea ecx, [ebp - 0x144]
call esi
lea ecx, [ebp - 0x154]
call esi
lea ecx, [ebp - 0x164]
call esi
lea ecx, [ebp - 0x174]
call esi
lea ecx, [ebp - 0x184]
call esi
lea ecx, [ebp - 0x194]
call esi
lea ecx, [ebp - 0x1a4]
call esi
lea ecx, [ebp - 0x1b4]
call esi
lea ecx, [ebp - 0x1c4]
call esi
lea ecx, [ebp - 0x1d4]
call esi
lea ecx, [ebp - 0x1e4]
call esi
lea ecx, [ebp - 0x1f4]
call esi
lea ecx, [ebp - 0x204]
call esi
lea ecx, [ebp - 0x214]
call esi
lea ecx, [ebp - 0x224]
call esi
lea ecx, [ebp - 0x234]
call esi
lea ecx, [ebp - 0x244]
call esi
lea ecx, [ebp - 0x254]
call esi
lea ecx, [ebp - 0x264]
call esi
lea ecx, [ebp - 0x274]
call esi
lea ecx, [ebp - 0x284]
call esi
lea ecx, [ebp - 0x294]
call esi
lea ecx, [ebp - 0x2a4]
call esi
lea ecx, [ebp - 0x2b4]
call esi
lea ecx, [ebp - 0x2c4]
call esi
lea ecx, [ebp - 0x2d4]
call esi
lea eax, [ebp - 0x2d8]
push eax
push 0
call edi
lea ecx, [ebp - 0x2e8]
call esi
lea ecx, [ebp - 0x2f8]
call esi
lea ecx, [ebp - 0x308]
call esi
lea ecx, [ebp - 0x318]
call esi
lea ecx, [ebp - 0x328]
call esi
lea ecx, [ebp - 0x32c]
push ecx
push 0
call edi
lea ecx, [ebp - 0x33c]
call esi
lea ecx, [ebp - 0x34c]
call esi
lea edx, [ebp - 0x350]
push edx
push 0
call edi
lea ecx, [ebp - 0x360]
call esi
lea ecx, [ebp - 0x370]
call esi
lea ecx, [ebp - 0x380]
call esi
lea ecx, [ebp - 0x390]
call esi
lea ecx, [ebp - 0x3a0]
call esi
lea ecx, [ebp - 0x3b4]
call esi
lea ecx, [ebp - 0x3c4]
call esi
lea ecx, [ebp - 0x3d4]
call esi
lea ecx, [ebp - 0x3e4]
call esi
lea ecx, [ebp - 0x3f4]
call esi
lea ecx, [ebp - 0x404]
call esi
lea ecx, [ebp - 0x414]
call esi
lea ecx, [ebp - 0x424]
call esi
lea ecx, [ebp - 0x434]
call esi
lea ecx, [ebp - 0x444]
call esi
lea ecx, [ebp - 0x454]
call esi
lea ecx, [ebp - 0x464]
call esi
lea ecx, [ebp - 0x474]
call esi
lea ecx, [ebp - 0x484]
call esi
lea ecx, [ebp - 0x494]
call esi
lea ecx, [ebp - 0x4a4]
call esi
lea ecx, [ebp - 0x4b4]
call esi
lea ecx, [ebp - 0x4c4]
call esi
lea ecx, [ebp - 0x4d4]
call esi
lea ecx, [ebp - 0x4e4]
call esi
lea ecx, [ebp - 0x4f4]
call esi
lea ecx, [ebp - 0x504]
call esi
lea eax, [ebp - 0x508]
push eax
push 0
call edi
lea ecx, [ebp - 0x518]
call esi
lea ecx, [ebp - 0x528]
call esi
lea ecx, [ebp - 0x538]
call esi
lea ecx, [ebp - 0x548]
call esi
lea ecx, [ebp - 0x558]
call esi
lea ecx, [ebp - 0x568]
call esi
lea ecx, [ebp - 0x578]
call esi
lea ecx, [ebp - 0x588]
call esi
lea ecx, [ebp - 0x598]
call esi
lea ecx, [ebp - 0x5a8]
call esi
lea ecx, [ebp - 0x5b8]
call esi
lea ecx, [ebp - 0x5c8]
call esi
lea ecx, [ebp - 0x5d8]
call esi
lea ecx, [ebp - 0x5e8]
call esi
lea ecx, [ebp - 0x5f8]
call esi
lea ecx, [ebp - 0x608]
call esi
lea ecx, [ebp - 0x618]
call esi
lea ecx, [ebp - 0x628]
call esi
lea ecx, [ebp - 0x638]
call esi
lea ecx, [ebp - 0x648]
call esi
lea ecx, [ebp - 0x65c]
call esi
lea ecx, [ebp - 0x66c]
call esi
lea ecx, [ebp - 0x67c]
call esi
lea ecx, [ebp - 0x68c]
call esi
lea ecx, [ebp - 0x69c]
call esi
lea ecx, [ebp - 0x6ac]
call esi
lea ecx, [ebp - 0x6bc]
call esi
lea ecx, [ebp - 0x6cc]
call esi
lea ecx, [ebp - 0x6dc]
call esi
lea ecx, [ebp - 0x6ec]
call esi
lea ecx, [ebp - 0x6fc]
call esi
lea ecx, [ebp - 0x70c]
call esi
lea ecx, [ebp - 0x710]
push ecx
push 0
call edi
lea ecx, [ebp - 0x720]
call esi
lea ecx, [ebp - 0x730]
call esi
lea ecx, [ebp - 0x740]
call esi
lea ecx, [ebp - 0x750]
call esi
lea ecx, [ebp - 0x760]
call esi
lea ecx, [ebp - 0x770]
call esi
lea ecx, [ebp - 0x780]
call esi
lea ecx, [ebp - 0x790]
call esi
lea edx, [ebp - 0x794]
push edx
push 0
call edi
lea ecx, [ebp - 0x7a4]
call esi
lea ecx, [ebp - 0x7b4]
call esi
lea ecx, [ebp - 0x7c4]
call esi
lea ecx, [ebp - 0x7d4]
call esi
lea ecx, [ebp - 0x7e4]
call esi
lea ecx, [ebp - 0x7f4]
call esi
lea ecx, [ebp - 0x804]
call esi
lea ecx, [ebp - 0x814]
call esi
lea ecx, [ebp - 0x824]
call esi
lea ecx, [ebp - 0x834]
call esi
lea ecx, [ebp - 0x844]
call esi
lea ecx, [ebp - 0x854]
call esi
lea ecx, [ebp - 0x864]
call esi
lea ecx, [ebp - 0x878]
call esi
lea ecx, [ebp - 0x888]
call esi
lea ecx, [ebp - 0x898]
call esi
lea ecx, [ebp - 0x8a8]
call esi
lea ecx, [ebp - 0x8b8]
call esi
lea eax, [ebp - 0x8c0]
push eax
push 0
call edi
lea ecx, [ebp - 0x8d0]
call esi
lea ecx, [ebp - 0x8e0]
call esi
lea ecx, [ebp - 0x8f0]
call esi
lea ecx, [ebp - 0x900]
call esi
lea ecx, [ebp - 0x910]
call esi
lea ecx, [ebp - 0x920]
call esi
lea ecx, [ebp - 0x930]
call esi
lea ecx, [ebp - 0x940]
call esi
lea ecx, [ebp - 0x950]
call esi
lea ecx, [ebp - 0x960]
call esi
lea ecx, [ebp - 0x970]
call esi
lea ecx, [ebp - 0x980]
call esi
lea ecx, [ebp - 0x990]
call esi
lea ecx, [ebp - 0x9a0]
call esi
lea ecx, [ebp - 0x9b0]
call esi
lea ecx, [ebp - 0x9c0]
call esi
lea ecx, [ebp - 0x9d0]
call esi
lea ecx, [ebp - 0x9e0]
call esi
lea ecx, [ebp - 0x9f0]
call esi
lea ecx, [ebp - 0xa00]
call esi
lea ecx, [ebp - 0xa10]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop