Function at 0x11014630
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x11001966
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x5a4
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x11001838
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x364], eax
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x464], eax
mov dword [ebp - 0x474], eax
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaRedim]
push 0x11
push 1
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x494], eax
push eax
lea eax, [ebp - 0x94]
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov edi, 3
mov dword [ebp - 0x9c], 0x243f6a88
mov dword [ebp - 0xa4], edi
mov ecx, dword [eax + 0x14]
add esp, 0x1c
shl ecx, 4
mov esi, ecx
mov ecx, dword [eax + 0xc]
sub ecx, esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0xa4]
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x85a308d3
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x540], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x540]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x13198a2e
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x3707344
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xa4093822
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x299f31d0
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0x82efa98
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 7
mov dword [ebp - 0x10c], 0xec4e6c89
mov dword [ebp - 0x114], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x114]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x452821e6
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x38d01377
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0xbe5466cf
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x34e90c6c
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0xc0ac29b7
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xc97c50dd
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x3f84d5b5
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xb5470917
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
mov dword [ebp - 0x19c], 0x9216d5d9
mov dword [ebp - 0x1a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x8979fb1b
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x11
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x11014c25
movsx eax, ax
lea ecx, [ebp - 0x18]
cmp eax, 0x12
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x11014bb7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [0x110251b4]
mov edx, dword [ebp - 0x498]
mov dword [ecx + edx*4], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x11014b7f
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xd1310ba6
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x544], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x544]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x98dfb5ac
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x548], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x548]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x2ffd72db
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xd01adfb7
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xb8e1afed
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x6a267e96
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xba7c9045
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xf12c7f99
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x24a19947
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xb3916cf7
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x801f2e2
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x858efc16
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x636920d8
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x71574e69
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0xa458fea3
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xf4933d7e
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0xd95748f
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x728eb658
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x718bcd58
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x82154aee
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x7b54a41d
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xc25a59b5
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x9c30d539
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x2af26013
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0xc5d1b023
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x286085f0
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xca417918
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xb8db38ef
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x8e79dcb0
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x603a180e
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x6c9e0e8b
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0xb01e8a3e
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0xd71577c1
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0xbd314b27
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x78af2fda
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x55605c60
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0xe65525f3
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xaa55ab94
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x57489862
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x63e81440
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x55ca396a
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x2aab10b6
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xb4cc5c34
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x1141e8ce
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xa15486af
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x7c72e993
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0xb3ee1411
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x636fbc2a
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0x2ba9c55d
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x741831f6
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0xce5c3e16
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x9b87931e
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0xafd6ba33
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x6c24cf5c
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x7a325381
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x28958677
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0x3b8f4898
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x6b4bb9af
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0xc4bfe81b
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x66282193
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x61d809cc
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xfb21a991
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x487cac60
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x5dec8032
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x11015827
movsx eax, ax
lea ecx, [ebp - 0x18]
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x110157b6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101577c
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xef845d5d
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x54c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x54c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xe98575b1
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x550], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x550]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xdc262302
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xeb651b88
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x23893e81
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0xd396acc5
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xf6d6ff3
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x83f44239
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x2e0b4482
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xa4842004
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x69c8f04a
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x9e1f9b5e
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x21c66842
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xf6e96c9a
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x670c9c61
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xabd388f0
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x6a51a0d2
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0xd8542f68
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x960fa728
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0xab5133a3
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x6eef0b6c
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x137a3be4
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xba3bf050
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x7efb2a98
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0xa1f1651d
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x39af0176
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0x66ca593e
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x82430e88
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x8cee8619
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x456f9fb4
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x7d84a5c3
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x3b8b5ebe
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0xe06f75d8
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x85c12073
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x401a449f
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x56c16aa6
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x4ed3aa62
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0x363f7706
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x1bfedf72
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x429b023d
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x37d0d724
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xd00a1248
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xdb0fead3
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x49f1c09b
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0x75372c9
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x80991b7b
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x25d479d8
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0xf6e8def7
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xe3fe501a
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0xb6794c3b
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x976ce0bd
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x4c006ba
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0xc1a94fb6
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x409f60c4
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x5e5c9ec2
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x196a2463
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0x68fb6faf
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x3e6c53b5
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x1339b2eb
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x3b52ec6f
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x6dfc511f
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x9b30952c
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0xcc814544
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0xaf5ebd09
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x11016433
add ax, 0x40
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x110163c2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101637e
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xbee3d004
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x554], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x554]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xde334afd
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x558], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x558]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x660f2807
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x192e4bb3
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xc0cba857
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x45c8740f
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xd20b5f39
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xb9d3fbdb
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x5579c0bd
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x1a60320a
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0xd6a100c6
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x402c7279
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x679f25fe
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xfb1fa3cc
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x8ea5e9f8
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xdb3222f8
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x3c7516df
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0xfd616b15
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x2f501ec8
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0xad0552ab
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x323db5fa
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xfd238760
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x53317b48
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x3e00df82
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x9e5c57bb
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0xca6f8ca0
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0x1a87562e
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xdf1769db
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0xd542a8f6
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x287effc3
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0xac6732c6
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x8c4f5573
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x695b27b0
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0xbbca58c8
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0xe1ffa35d
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0xb8f011a0
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x10fa3d98
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xfd2183b8
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x4afcb56c
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x2dd1d35b
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x9a53e479
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xb6f84565
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xd28e49bc
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x4bfb9790
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xe1ddf2da
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xa4cb7e33
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x62fb1341
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0xcee4c6e8
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xef20cada
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x36774c01
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0xd07e9efe
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x2bf11fb4
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x95dbda4d
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0xae909198
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0xeaad8e71
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x6b93d5a0
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xd08ed1d0
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0xafc725e0
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x8e3c5b2f
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x8e7594b7
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x8ff6e2fb
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xf2122b64
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x8888b812
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x900df01c
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101703f
add ax, 0x80
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x11016fce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x11016f8a
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x4fad5ea0
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x55c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x55c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x688fc31c
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x560], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x560]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xd1cff191
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xb3a8c1ad
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x2f2f2218
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0xbe0e1777
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xea752dfe
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x8b021fa1
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xe5a0cc0f
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xb56f74e8
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x18acf3d6
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0xce89e299
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0xb4a84fe0
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xfd13e0b7
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x7cc43b81
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xd2ada8d9
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x165fa266
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x80957705
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x93cc7314
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x211a1477
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0xe6ad2065
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x77b5fa86
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xc75442f5
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0xfb9d35cf
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0xebcdaf0c
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x7b3e89a0
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xd6411bd3
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xae1e7e49
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x250e2d
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x2071b35e
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x226800bb
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x57b8e0af
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x2464369b
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0xf009b91e
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x5563911d
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x59dfa6aa
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x78c14389
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xd95a537f
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x207d5ba2
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x2e5b9c5
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x83260376
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x6295cfa9
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x11c81968
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x4e734a41
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xb3472dca
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x7b14a94a
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x1b510052
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x9a532915
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xd60f573f
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0xbc9bc6e4
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x2b60a476
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x81e67400
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x8ba6fb5
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x571be91f
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0xf296ec6b
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x2a0dd915
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xb6636521
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0xe7b9f9b6
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0xff34052e
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xc5855664
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x53b02d5d
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xa99f8fa1
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x8ba4799
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x6e85076a
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x11017c4b
add ax, 0xc0
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x11017bda
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x11017b96
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x4b7a70e9
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x564], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x564]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xb5b32944
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x568], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x568]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xdb75092e
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xc4192623
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xad6ea6b0
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x49a7df7d
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0x9cee60b8
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x8fedb266
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xecaa8c71
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x699a17ff
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x5664526c
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0xc2b19ee1
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x193602a5
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x75094c29
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0xa0591340
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xe4183a3e
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x3f54989a
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x5b429d65
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x6b8fe4d6
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x99f73fd6
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0xa1d29c07
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xefe830f5
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x4d2d38e6
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0xf0255dc1
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x4cdd2086
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x8470eb26
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0x6382e9c6
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x21ecc5e
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x9686b3f
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x3ebaefc9
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x3c971814
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x6b6a70a1
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x687f3584
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x52a0e286
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0xb79c5305
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0xaa500737
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x3e07841c
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0x7fdeae5c
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x8e7d44ec
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x5716f2b8
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xb03ada37
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xf0500c0d
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xf01c1f04
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x200b3ff
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xae0cf51a
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x3cb574b2
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x25837a58
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0xdc0921bd
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xd19113f9
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x7ca92ff6
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x94324773
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x22f54701
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x3ae5e581
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x37c2dadc
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0xc8b57634
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x9af3dda7
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xa9446146
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0xfd0030e
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0xecc8c73e
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xa4751e41
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0xe238cd99
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x3bea0e2f
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x3280bba1
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x183eb331
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101884e
movsx eax, ax
lea ecx, [ebp - 0x18]
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x110187dc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 4], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x110187a2
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x4e548b38
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x56c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x56c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x4f6db908
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x570], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x570]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x6f420d03
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xf60a04bf
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x2cb81290
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x24977c79
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0x5679b072
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xbcaf89af
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xde9a771f
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xd9930810
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0xb38bae12
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0xdccf3f2e
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x5512721f
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x2e6b7124
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x501adde6
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x9f84cd87
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x7a584718
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x7408da17
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0xbc9f9abc
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0xe94b7d8c
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0xec7aec3a
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xdb851dfa
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x63094366
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0xc464c3d2
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0xef1c1847
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x3215d908
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xdd433b37
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x24c2ba16
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x12a14d43
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x2a65c451
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x50940002
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x133ae4dd
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x71dff89e
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x10314e55
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x81ac77d6
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x5f11199b
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x43556f1
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xd7a3c76b
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x3c11183b
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x5924a509
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xf28fe6ed
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x97f1fbfa
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x9ebabf2c
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x1e153c6e
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0x86e34570
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xeae96fb1
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x860e5e0a
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x5a3e2ab3
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0x771fe71c
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x4e3d06fa
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x2965dcb9
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x99e71d0f
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x803e89d6
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x5266c825
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x2e4cc978
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x9c10b36a
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xc6150eba
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x94e2ea78
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0xa5fc3c53
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x1e0a2df4
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0xf2f74ea7
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x361d2b3d
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x1939260f
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x19c27960
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101945b
add ax, 0x40
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x110193e9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 4], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x110193a5
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x5223a708
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x574], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x574]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xf71312b6
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x578], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x578]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xebadfe6e
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xeac31f66
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xe3bc4595
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0xa67bc883
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xb17f37d1
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x18cff28
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xc332ddef
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xbe6c5aa5
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x65582185
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x68ab9802
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0xeecea50f
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xdb2f953b
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x2aef7dad
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x5b6e2f84
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x1521b628
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x29076170
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0xecdd4775
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x619f1510
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x13cca830
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xeb61bd96
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x334fe1e
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0xaa0363cf
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0xb5735c90
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x4c70a239
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xd59e9e0b
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xcbaade14
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0xeecc86bc
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x60622ca7
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x9cab5cab
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0xb2f3846e
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x648b1eaf
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x19bdf0ca
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0xa02369b9
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x655abb50
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x40685a32
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0x3c2ab4b3
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x319ee9d5
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0xc021b8f7
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x9b540b19
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x875fa099
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x95f7997e
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x623d7da8
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xf837889a
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x97e32d77
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x11ed935f
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x16681281
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xe358829
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0xc7e61fd6
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x96dedfa1
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x7858ba99
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x57f584a5
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x1b227263
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x9b83c3ff
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x1ac24696
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xcdb30aeb
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x532e3054
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x8fd948e4
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x6dbc3128
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x58ebf2ef
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x34c6ffea
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0xfe28ed61
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0xee7c3c73
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101a068
add ax, 0x80
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x11019ff6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 4], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x11019fb2
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x5d4a14d9
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x57c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x57c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xe864b7e3
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x580], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x580]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x42105d14
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x203e13e0
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x45eee2b6
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0xa3aaabea
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xdb6c4f15
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xfacb4fd0
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xc742f442
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xef6abbb5
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x654f3b1d
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x41cd2105
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0xd81e799e
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x86854dc7
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0xe44b476a
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x3d816250
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0xcf62a1f2
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x5b8d2646
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0xfc8883a0
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0xc1c7b6a3
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x7f1524c3
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x69cb7492
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x47848a0b
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x5692b285
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x95bbf00
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0xad19489d
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0x1462b174
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x23820e00
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x58428d2a
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0xc55f5ea
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x1dadf43e
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x233f7061
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x3372f092
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x8d937e41
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0xd65fecf1
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x6c223bdb
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x7cde3759
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xcbee7460
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x4085f2a7
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0xce77326e
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xa6078084
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x19f8509e
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xe8efd855
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x61d99735
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xa969a7aa
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xc50c06c2
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x5a04abfc
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x800bcadc
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0x9e447a2e
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0xc3453484
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0xfdd56705
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0xe1e9ec9
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0xdb73dbd3
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x105588cd
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x675fda79
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0xe3674340
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xc5c43465
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x713e38d8
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x3d28f89e
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xf16dff20
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x153e21e7
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x8fb03d4a
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0xe6e39f2b
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0xdb83adf7
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101ac75
add ax, 0xc0
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101ac03
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 4], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101abbf
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xe93d5a68
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x584], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x584]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x948140f7
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x588], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x588]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xf64c261c
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x94692934
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x411520f7
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x7602d4f7
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xbcf46b2e
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xd4a20068
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xd4082471
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x3320f46a
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x43b7d4b7
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x500061af
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x1e39f62e
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x97244546
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x14214f74
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xbf8b8840
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x4d95fc1d
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x96b591af
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x70f4ddd3
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x66a02f45
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0xbfbc09ec
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x3bd9785
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x7fac6dd0
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x31cb8504
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x96eb27b3
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x55fd3941
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xda2547e6
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xabca0a9a
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x28507825
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x530429f4
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0xa2c86da
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0xe9b66dfb
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x68dc1462
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0xd7486900
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x680ec0a4
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x27a18dee
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x4f3ffea2
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xe887ad8c
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0xb58ce006
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x7af4d6b6
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xaace1e7c
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xd3375fec
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xce78a399
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x406b2a42
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0x20fe9e35
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xd9f385b9
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0xee39d7ab
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x3b124e8b
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0x1dc9faf7
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x4b6d1856
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x26a36631
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0xeae397b2
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x3a6efa74
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0xdd5b4332
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x6841e7f7
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0xca7820fb
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xfb0af54e
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0xd8feb397
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x454056ac
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xba489527
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x55533a3a
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x20838d87
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0xfe6ba9b7
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0xd096954b
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101b878
movsx eax, ax
lea ecx, [ebp - 0x18]
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101b806
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 8], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101b7cc
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x55a867bc
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x58c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x58c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xa1159a58
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x590], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x590]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xcca92963
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x99e1db33
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xa62a4a56
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x3f3125f9
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0x5ef47e1c
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x9029317c
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xfdf8e802
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x4272f70
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x80bb155c
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x5282ce3
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x95c11548
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xe4c66d22
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x48c1133f
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xc70f86dc
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x7f9c9ee
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x41041f0f
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x404779a4
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x5d886e17
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x325f51eb
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xd59bc0d1
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xf2bcc18f
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x41113564
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x257b7834
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x602a9c60
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xdff8e8a3
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x1f636c1b
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0xe12b4c2
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x2e1329e
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0xaf664fd1
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0xcad18115
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x6b2395e0
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x333e92e1
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x3b240b62
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0xeebeb922
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x85b2a20e
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xe6ba0d99
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0xde720c8c
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x2da2f728
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xd0127845
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x95b794fd
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x647d0862
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0xe7ccf5f0
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0x5449a36f
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x877d48fa
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0xc39dfd27
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0xf33e8d1e
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xa476341
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x992eff74
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x3a6f6eab
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0xf4f8fd37
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0xa812dc60
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0xa1ebddf8
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x991be14c
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0xdb6e6b0d
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xc67b5510
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x6d672c37
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x2765d43b
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xdcd0e804
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0xf1290dc7
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xcc00ffa3
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0xb5390f92
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x690fed0b
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101c485
add ax, 0x40
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101c413
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 8], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101c3cf
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x667b9ffb
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x594], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x594]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xcedb7d9c
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x598], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x598]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xa091cf0b
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xd9155ea3
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xbb132f88
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x515bad24
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0x7b9479bf
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x763bd6eb
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x37392eb3
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xcc115979
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x8026e297
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0xf42e312d
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x6842ada7
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xc66a2b3b
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x12754ccc
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x782ef11c
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x6a124237
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0xb79251e7
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x6a1bbe6
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x4bfb6350
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x1a6b1018
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x11caedfa
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0x3d25bdd8
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0xe2e1c3c9
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x44421659
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0xa121386
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xd90cec6e
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xd5abea2a
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x64af674e
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0xda86a85f
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0xbebfe988
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x64e4c3fe
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x9dbc8057
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0xf0f7c086
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x60787bf8
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x6003604d
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0xd1fd8346
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xf6381fb0
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x7745ae04
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0xd736fccc
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x83426b33
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xf01eab71
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xb0804187
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x3c005e5f
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0x77a057be
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xbde8ae24
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x55464299
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0xbf582e61
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0x4e58f48f
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0xf2ddfda2
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0xf474ef38
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x8789bdc2
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x5366f9c3
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0xc8b38e74
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0xb475f255
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x46fcd9b9
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0x7aeb2661
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x8b1ddf84
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x846a0e79
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x915f95e2
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x466e598e
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x20b45770
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x8cd55591
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0xc902de4c
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101d092
add ax, 0x80
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101d020
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 8], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101cfdc
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xb90bace1
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x59c], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x59c]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xbb8205d0
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x5a0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5a0]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x11a86248
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x7574a99e
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xb77f19b6
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0xe0a9dc09
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0x662d09a1
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xc4324633
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xe85a1f02
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x9f0be8c
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x4a99a025
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x1d6efe10
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x1ab93d1d
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0xba5a4df
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0xa186f20f
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x2868f169
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0xdcb7da83
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x573906fe
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0xa1e2ce9b
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x4fcd7f52
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x50115e01
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xa70683fa
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xa002b5c4
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0xde6d027
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x9af88c27
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x773f8641
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xc3604c06
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x61a806b5
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0xf0177a28
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0xc0f586e0
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x6058aa
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x30dc7d62
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x11e69ed7
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x2338ea63
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x53c2dd94
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0xc2c21634
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0xbbcbee56
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0x90bcb6de
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0xebfc7da1
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0xce591d76
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x6f05e409
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x4b7c0188
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x39720a3d
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x7c927c24
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0x86e3725f
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x724d9db9
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x1ac15bb4
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0xd39eb8fc
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xed545578
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x8fca5b5
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0xd83d7cd3
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x4dad0fc4
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x1e50ef5e
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0xb161e6f8
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0xa28514d9
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x6c51133c
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0x6fd5c7e7
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x56e14ec4
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x362abfce
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xddc6c837
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0xd79a3234
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0x92638212
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x670efa8e
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x406000e0
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101dc9f
add ax, 0xc0
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101dc2d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 8], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101dbe9
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x3a39ce37
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x5a4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5a4]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xd3faf5cf
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x5a8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5a8]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xabc27737
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0x5ac52d1b
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x5cb0679e
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x4fa33742
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xd3822740
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x99bc9bbe
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0xd5118e9d
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xbf0f7315
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0xd62d1c7e
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0xc700c47b
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0xb78c1b6b
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x21a19045
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0xb26eb1be
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x6a366eb4
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x5748ab2f
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0xbc946e79
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0xc6a376d2
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x6549c2c8
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x530ff8ee
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x468dde7d
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xd5730a1d
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x4cd04dc6
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x2939bbdb
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0xa9ba4650
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0xac9526e8
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xbe5ee304
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0xa1fad5f0
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0x6a2d519a
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0x63ef8ce2
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0x9a86ee22
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0xc089c2b8
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x43242ef6
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0xa51e03aa
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x9cf2d0a4
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x83c061ba
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0x9be96a4d
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x8fe51550
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0xba645bd6
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0x2826a2f9
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xa73a3ae1
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x4ba99586
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0xef5562e9
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xc72fefd3
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xf752f7da
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x3f046f69
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x77fa0a59
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0x80e4a915
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x87b08601
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x9b09e6ad
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x3b3ee593
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0xe990fd5a
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x9e34d797
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x2cf0b7d9
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x22b8b51
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0x96d5ac3a
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x17da67d
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0xd1cf3ed6
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x7c7d2d28
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x1f9f25cf
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xadf2b89b
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x5ad6b472
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x5a88f54c
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101e8a2
movsx eax, ax
lea ecx, [ebp - 0x18]
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101e830
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 0xc], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101e7f6
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xe029ac71
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x5ac], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5ac]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0xe019a5e6
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x5b0], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5b0]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0x47b0acfd
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xed93fa9b
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0xe8d3c48d
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0x283b57cc
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xf8d56629
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0x79132e28
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x785f0191
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0xed756055
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0xf7960e44
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0xe3d35e8c
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0x15056dd4
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x88f46dba
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x3a16125
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0x564f0bd
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0xc3eb9e15
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x3c9057a2
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x97271aec
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0xa93a072a
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x1b3f6d9b
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0x1e6321f5
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xf59c66fb
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x26dcf319
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0x7533d928
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0xb155fdf5
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0x3563482
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0x8aba3cbb
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0x28517711
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0xc20ad9f8
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0xabcc5167
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0xccad925f
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x4de81751
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0x3830dc8e
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0x379d5862
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0x9320f991
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0xea7a90c2
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xfb3e7bce
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x5121ce64
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0x774fbe32
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xa8b6e37e
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0xc3293d46
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0x48de5369
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x6413e680
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xa2ae0810
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0xdd6db224
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0x69852dfd
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x9072166
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xb39a460a
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0x6445c0dd
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0x586cdecf
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x1c20c8ae
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0x5bbef7dd
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0x1b588d40
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0xccd2017f
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0x6bb4e3bb
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xdda26a7e
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x3a59ff45
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x3e350a44
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0xbcb4cdd5
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x72eacea8
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xfa6484bb
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0x8d6612ae
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0xbf3c6f47
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x1101f4af
add ax, 0x40
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1101f43d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 0xc], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x1101f3f9
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0xd29be463
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov dword [ebp - 0x5b4], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5b4]
sub ecx, eax
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x542f5d9e
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov dword [ebp - 0x5b8], ecx
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x5b8]
sub ecx, eax
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 2
mov dword [ebp - 0xbc], 0xaec2771b
mov dword [ebp - 0xc4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, edi
mov dword [ebp - 0xcc], 0xf64e6370
mov dword [ebp - 0xd4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 4
mov dword [ebp - 0xdc], 0x740e0d8d
mov dword [ebp - 0xe4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 5
mov dword [ebp - 0xec], 0xe75b1357
mov dword [ebp - 0xf4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 6
mov dword [ebp - 0xfc], 0xf8721671
mov dword [ebp - 0x104], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x104]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x10c], 0xaf537d5d
mov dword [ebp - 0x114], edi
lea edx, [ebp - 0x114]
mov eax, dword [ebp - 0x94]
mov ecx, 7
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 8
mov dword [ebp - 0x11c], 0x4040cb08
mov dword [ebp - 0x124], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 9
mov dword [ebp - 0x12c], 0x4eb4e2cc
mov dword [ebp - 0x134], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xa
mov dword [ebp - 0x13c], 0x34d2466a
mov dword [ebp - 0x144], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xb
mov dword [ebp - 0x14c], 0x115af84
mov dword [ebp - 0x154], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xc
mov dword [ebp - 0x15c], 0xe1b00428
mov dword [ebp - 0x164], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xd
mov dword [ebp - 0x16c], 0x95983a1d
mov dword [ebp - 0x174], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xe
mov dword [ebp - 0x17c], 0x6b89fb4
mov dword [ebp - 0x184], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0xf
mov dword [ebp - 0x18c], 0xce6ea048
mov dword [ebp - 0x194], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x19c], 0x6f3f3b82
mov dword [ebp - 0x1a4], edi
lea edx, [ebp - 0x1a4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x10
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x11
mov dword [ebp - 0x1ac], 0x3520ab82
mov dword [ebp - 0x1b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x12
mov dword [ebp - 0x1bc], 0x11a1d4b
mov dword [ebp - 0x1c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x13
mov dword [ebp - 0x1cc], 0x277227f8
mov dword [ebp - 0x1d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x14
mov dword [ebp - 0x1dc], 0x611560b1
mov dword [ebp - 0x1e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov dword [ebp - 0x1ec], 0xe7933fdc
mov dword [ebp - 0x1f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x1f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x16
mov dword [ebp - 0x1fc], 0xbb3a792b
mov dword [ebp - 0x204], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x17
mov dword [ebp - 0x20c], 0x344525bd
mov dword [ebp - 0x214], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x18
mov dword [ebp - 0x21c], 0xa08839e1
mov dword [ebp - 0x224], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x22c], 0x51ce794b
mov dword [ebp - 0x234], edi
lea edx, [ebp - 0x234]
mov eax, dword [ebp - 0x94]
mov ecx, 0x19
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1a
mov dword [ebp - 0x23c], 0x2f32c9b7
mov dword [ebp - 0x244], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1b
mov dword [ebp - 0x24c], 0xa01fbac9
mov dword [ebp - 0x254], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1c
mov dword [ebp - 0x25c], 0xe01cc87e
mov dword [ebp - 0x264], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1d
mov dword [ebp - 0x26c], 0xbcc7d1f6
mov dword [ebp - 0x274], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1e
mov dword [ebp - 0x27c], 0xcf0111c3
mov dword [ebp - 0x284], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x1f
mov dword [ebp - 0x28c], 0xa1e8aac7
mov dword [ebp - 0x294], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x20
mov dword [ebp - 0x29c], 0x1a908749
mov dword [ebp - 0x2a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x21
mov dword [ebp - 0x2ac], 0xd44fbd9a
mov dword [ebp - 0x2b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x2bc], 0xd0dadecb
mov dword [ebp - 0x2c4], edi
lea edx, [ebp - 0x2c4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x22
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x23
mov dword [ebp - 0x2cc], 0xd50ada38
mov dword [ebp - 0x2d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x24
mov dword [ebp - 0x2dc], 0x339c32a
mov dword [ebp - 0x2e4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x25
mov dword [ebp - 0x2ec], 0xc6913667
mov dword [ebp - 0x2f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x26
mov dword [ebp - 0x2fc], 0x8df9317c
mov dword [ebp - 0x304], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x27
mov dword [ebp - 0x30c], 0xe0b12b4f
mov dword [ebp - 0x314], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x28
mov dword [ebp - 0x31c], 0xf79e59b7
mov dword [ebp - 0x324], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x29
mov dword [ebp - 0x32c], 0x43f5bb3a
mov dword [ebp - 0x334], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2a
mov dword [ebp - 0x33c], 0xf2d519ff
mov dword [ebp - 0x344], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x34c], 0x27d9459c
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov eax, dword [ebp - 0x94]
mov ecx, 0x2b
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2c
mov dword [ebp - 0x35c], 0xbf97222c
mov dword [ebp - 0x364], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2d
mov dword [ebp - 0x36c], 0x15e6fc2a
mov dword [ebp - 0x374], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2e
mov dword [ebp - 0x37c], 0xf91fc71
mov dword [ebp - 0x384], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x2f
mov dword [ebp - 0x38c], 0x9b941525
mov dword [ebp - 0x394], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x30
mov dword [ebp - 0x39c], 0xfae59361
mov dword [ebp - 0x3a4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x31
mov dword [ebp - 0x3ac], 0xceb69ceb
mov dword [ebp - 0x3b4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x32
mov dword [ebp - 0x3bc], 0xc2a86459
mov dword [ebp - 0x3c4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x33
mov dword [ebp - 0x3cc], 0x12baa8d1
mov dword [ebp - 0x3d4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x3dc], 0xb6c1075e
mov dword [ebp - 0x3e4], edi
lea edx, [ebp - 0x3e4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x34
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x35
mov dword [ebp - 0x3ec], 0xe3056a0c
mov dword [ebp - 0x3f4], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x36
mov dword [ebp - 0x3fc], 0x10d25065
mov dword [ebp - 0x404], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x37
mov dword [ebp - 0x40c], 0xcb03a442
mov dword [ebp - 0x414], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x38
mov dword [ebp - 0x41c], 0xe0ec6e0e
mov dword [ebp - 0x424], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x39
mov dword [ebp - 0x42c], 0x1698db3b
mov dword [ebp - 0x434], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3a
mov dword [ebp - 0x43c], 0x4c98a0be
mov dword [ebp - 0x444], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x444]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3b
mov dword [ebp - 0x44c], 0x3278e964
mov dword [ebp - 0x454], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3c
mov dword [ebp - 0x45c], 0x9f1f9532
mov dword [ebp - 0x464], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov dword [ebp - 0x46c], 0xe0d392df
mov dword [ebp - 0x474], edi
lea edx, [ebp - 0x474]
mov eax, dword [ebp - 0x94]
mov ecx, 0x3d
sub ecx, dword [eax + 0x14]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3e
mov dword [ebp - 0x47c], 0xd3a0342b
mov dword [ebp - 0x484], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov ecx, 0x3f
mov dword [ebp - 0x48c], 0x8971f21e
mov dword [ebp - 0x494], edi
sub ecx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x60]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea eax, [ebp - 0x94]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
xor eax, eax
mov ecx, 0x3f
mov dword [ebp - 0x18], eax
cmp ax, cx
jg 0x110200bc
add ax, 0x80
lea ecx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x1102004a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xa0]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x9c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x98]
mov dword [edx + 8], eax
lea eax, [ebp - 0x60]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 0xc], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, 1
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x11020006
push 0
push 0x3f
push 1
lea eax, [ebp - 0x94]
push 0
push eax
push 0x10
push 0x880
call ebx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x9c], 0x1b0a7441
mov dword [ebp - 0xa4], edi
add esp, 0x1c
mov ecx, dword [eax + 0x14]
lea edx, [ebp - 0xa4]
shl ecx, 4
mov ebx, ecx
mov ecx, dword [eax + 0xc]
sub ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xac], 0x4ba3348c
mov dword [ebp - 0xb4], edi
lea edx, [ebp - 0xb4]
mov ecx, dword [eax + 0x14]
shl ecx, 4
mov ebx, ecx
mov ecx, dword [eax + 0xc]
sub ecx, ebx
add ecx, 0x10
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xbc], 0xc5be7120
mov dword [ebp - 0xc4], edi
mov ecx, 2
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xc4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xcc], 0xc37632d8
mov dword [ebp - 0xd4], edi
mov ecx, edi
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xd4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xdc], 0xdf359f8d
mov dword [ebp - 0xe4], edi
mov ecx, 4
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xe4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xec], 0x9b992f2e
mov dword [ebp - 0xf4], edi
mov ecx, 5
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0xf4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xfc], 0xe60b6f47
mov dword [ebp - 0x104], edi
lea edx, [ebp - 0x104]
mov ebx, dword [eax + 0x14]
mov ecx, 6
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x10c], 0xfe3f11d
mov dword [ebp - 0x114], edi
mov ecx, 7
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x114]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x11c], 0xe54cda54
mov dword [ebp - 0x124], edi
mov ecx, 8
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x124]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x12c], 0x1edad891
mov dword [ebp - 0x134], edi
mov ecx, 9
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x134]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x13c], 0xce6279cf
mov dword [ebp - 0x144], edi
mov ecx, 0xa
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x144]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x14c], 0xcd3e7e6f
mov dword [ebp - 0x154], edi
mov ecx, 0xb
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x154]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x15c], 0x1618b166
mov dword [ebp - 0x164], edi
mov ecx, 0xc
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x164]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x16c], 0xfd2c1d05
mov dword [ebp - 0x174], edi
mov ecx, 0xd
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x174]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x17c], 0x848fd2c5
mov dword [ebp - 0x184], edi
mov ecx, 0xe
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x184]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x18c], 0xf6fb2299
mov dword [ebp - 0x194], edi
mov ecx, 0xf
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x194]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x19c], 0xf523f357
mov dword [ebp - 0x1a4], edi
mov ecx, 0x10
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x1a4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1ac], 0xa6327623
mov dword [ebp - 0x1b4], edi
mov ecx, 0x11
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x1b4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1bc], 0x93a83531
mov dword [ebp - 0x1c4], edi
mov ecx, 0x12
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x1c4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1cc], 0x56cccd02
mov dword [ebp - 0x1d4], edi
mov ecx, 0x13
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x1d4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1dc], 0xacf08162
mov dword [ebp - 0x1e4], edi
mov ecx, 0x14
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x1e4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov dword [ebp - 0x1ec], 0x5a75ebb5
mov dword [ebp - 0x1f4], edi
lea edx, [ebp - 0x1f4]
mov eax, dword [ebp - 0x94]
mov ecx, 0x15
mov ebx, dword [eax + 0x14]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1fc], 0x6e163697
mov dword [ebp - 0x204], edi
mov ecx, 0x16
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x204]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x20c], 0x88d273cc
mov dword [ebp - 0x214], edi
mov ecx, 0x17
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x214]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x21c], 0xde966292
mov dword [ebp - 0x224], edi
mov ecx, 0x18
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x224]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x22c], 0x81b949d0
mov dword [ebp - 0x234], edi
mov ecx, 0x19
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x234]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x23c], 0x4c50901b
mov dword [ebp - 0x244], edi
mov ecx, 0x1a
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x244]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24c], 0x71c65614
mov dword [ebp - 0x254], edi
mov ecx, 0x1b
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x254]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x25c], 0xe6c6c7bd
mov dword [ebp - 0x264], edi
mov ecx, 0x1c
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x264]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x26c], 0x327a140a
mov dword [ebp - 0x274], edi
mov ecx, 0x1d
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x274]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x27c], 0x45e1d006
mov dword [ebp - 0x284], edi
mov ecx, 0x1e
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x284]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x28c], 0xc3f27b9a
mov dword [ebp - 0x294], edi
mov ecx, 0x1f
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x294]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x29c], 0xc9aa53fd
mov dword [ebp - 0x2a4], edi
mov ecx, 0x20
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2a4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2ac], 0x62a80f00
mov dword [ebp - 0x2b4], edi
mov ecx, 0x21
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2b4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2bc], 0xbb25bfe2
mov dword [ebp - 0x2c4], edi
mov ecx, 0x22
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2c4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2cc], 0x35bdd2f6
mov dword [ebp - 0x2d4], edi
mov ecx, 0x23
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2d4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2dc], 0x71126905
mov dword [ebp - 0x2e4], edi
mov ecx, 0x24
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2e4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2ec], 0xb2040222
mov dword [ebp - 0x2f4], edi
mov ecx, 0x25
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x2f4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2fc], 0xb6cbcf7c
mov dword [ebp - 0x304], edi
mov ecx, 0x26
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x304]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x30c], 0xcd769c2b
mov dword [ebp - 0x314], edi
mov ecx, 0x27
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x314]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x31c], 0x53113ec0
mov dword [ebp - 0x324], edi
mov ecx, 0x28
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x324]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x32c], 0x1640e3d3
mov dword [ebp - 0x334], edi
mov ecx, 0x29
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x334]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x33c], 0x38abbd60
mov dword [ebp - 0x344], edi
mov ecx, 0x2a
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x344]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov dword [ebp - 0x34c], 0x2547adf0
mov dword [ebp - 0x354], edi
lea edx, [ebp - 0x354]
mov ecx, 0x2b
mov eax, dword [ebp - 0x94]
mov ebx, dword [eax + 0x14]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x35c], 0xba38209c
mov dword [ebp - 0x364], edi
mov ecx, 0x2c
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x364]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x36c], 0xf746ce76
mov dword [ebp - 0x374], edi
mov ecx, 0x2d
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x374]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x37c], 0x77afa1c5
mov dword [ebp - 0x384], edi
mov ecx, 0x2e
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x384]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x38c], 0x20756060
mov dword [ebp - 0x394], edi
mov ecx, 0x2f
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x394]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x39c], 0x85cbfe4e
mov dword [ebp - 0x3a4], edi
mov ecx, 0x30
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x3a4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3ac], 0x8ae88dd8
mov dword [ebp - 0x3b4], edi
mov ecx, 0x31
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x3b4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3bc], 0x7aaaf9b0
mov dword [ebp - 0x3c4], edi
mov ecx, 0x32
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x3c4]
sub ecx, ebx
shl ecx, 4
add ecx, dword [eax + 0xc]
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3cc], 0x4cf9aa7e
mov dword [ebp - 0x3d4], edi
mov ecx, 0x33
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x3d4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3dc], 0x1948c25c
mov dword [ebp - 0x3e4], edi
mov ecx, 0x34
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x3e4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3ec], 0x2fb8a8c
mov dword [ebp - 0x3f4], edi
mov ecx, 0x35
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x3f4]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3fc], 0x1c36ae4
mov dword [ebp - 0x404], edi
mov ecx, 0x36
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x404]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x40c], 0xd6ebe1f9
mov dword [ebp - 0x414], edi
mov ecx, 0x37
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x414]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x41c], 0x90d4f869
mov dword [ebp - 0x424], edi
mov ecx, 0x38
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x424]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x42c], 0xa65cdea0
mov dword [ebp - 0x434], edi
mov ecx, 0x39
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x434]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov dword [ebp - 0x43c], 0x3f09252d
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x444], edi
mov ecx, 0x3a
lea edx, [ebp - 0x444]
mov ebx, dword [eax + 0x14]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x44c], 0xc208e69f
mov dword [ebp - 0x454], edi
mov ecx, 0x3b
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x454]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x45c], 0xb74e6132
mov dword [ebp - 0x464], edi
mov ecx, 0x3c
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x464]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x46c], 0xce77e25b
mov dword [ebp - 0x474], edi
mov ecx, 0x3d
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x474]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x47c], 0x578fdfe3
mov dword [ebp - 0x484], edi
mov ecx, 0x3e
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x484]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x48c], 0x3ac372e6
mov dword [ebp - 0x494], edi
mov ecx, 0x3f
mov ebx, dword [eax + 0x14]
lea edx, [ebp - 0x494]
sub ecx, ebx
mov ebx, dword [eax + 0xc]
shl ecx, 4
add ecx, ebx
call esi
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x60]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcArray]
lea ecx, [ebp - 0x94]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaErase]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call esi
mov ebx, 0x3f
mov esi, 1
xor eax, eax
cmp ax, bx
mov dword [ebp - 0x18], eax
jg 0x11020dae
add ax, 0xc0
lea edx, [ebp - 0x18]
jo 0x11020fbb
movsx eax, ax
cmp eax, 0x100
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xa4], 0x4002
mov dword [ebp - 0x498], eax
jb 0x11020d3e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa0]
sub esp, 0x10
mov eax, esp
push 1
mov dword [eax], ecx
mov ecx, dword [ebp - 0x9c]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x98]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x60]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x2c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x498]
mov edx, dword [0x110251d0]
shl ecx, 4
mov dword [ecx + edx + 0xc], eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ax, si
add ax, word [ebp - 0x18]
jo 0x11020fbb
jmp 0x11020cff
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
xor ecx, ecx
mov dword [ebp - 0x52c], edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x18], ecx
cmp cx, word [ebp - 0x52c]
jg 0x11020f22
xor ebx, ebx
mov eax, 0xff
cmp bx, ax
jg 0x11020f0a
movsx eax, cx
cmp eax, 4
mov dword [ebp - 0x49c], eax
jb 0x11020df6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
movsx eax, bx
cmp eax, 0x100
jb 0x11020e06
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x49c]
movsx eax, bx
lea edx, [ecx + eax*4]
mov eax, dword [0x110251d0]
cmp dword [eax + edx*4], 0
jne 0x11020ef2
mov ecx, 0xa
mov eax, 0x80020004
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x80], ecx
mov dword [ebp - 0x70], ecx
mov ecx, dword [ebp - 0x18]
push 0x11005e88
push ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x68], eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
push eax
push 0x110041a0
call edi
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
push ebx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x50]
call esi
push eax
push 0x11005eac
call edi
mov dword [ebp - 0x58], eax
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x70]
push eax
push ecx
lea edx, [ebp - 0x60]
push 0
push edx
mov dword [ebp - 0x60], 8
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x40]
push eax
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x60]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x2c
mov ecx, dword [ebp - 0x18]
mov eax, 1
add ax, bx
jo 0x11020fbb
mov ebx, eax
jmp 0x11020dd4
mov eax, 1
add ax, cx
jo 0x11020fbb
mov ecx, eax
mov dword [ebp - 0x18], ecx
jmp 0x11020dc5
push 0x11020f8c
jmp 0x11020f82
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop