Function at 0x4070d0
Capabilities:
Parse pe header

Disassembly:
jmp dword [sym.imp.MSVBVM60.DLL___vbaFPException]
push ebp
mov ebp, esp
sub esp, 0x18
push 0x401856
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x538
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401308
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 8
push 0x403c2c
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea edx, [ebp - 0x84]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 8
push 0x403c2c
lea ecx, [ebp - 0x150]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov word [ebp - 0xb4], 0xffff
mov dword [ebp - 4], 4
mov dword [ebp - 0xec], 0
mov dword [ebp - 4], 5
mov dword [ebp - 0x16c], 0x80020004
mov dword [ebp - 0x174], 0xa
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcFreeFile]
mov word [0x41206c], ax
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 6
mov edx, 0x40263c
mov ecx, 0x412060
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 7
mov eax, dword [ebp + 0x20]
mov ecx, dword [eax]
push ecx
mov dx, word [0x41206c]
push edx
push 0xffffffffffffffff
push 0x4002
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
mov dword [ebp - 4], 8
lea eax, [ebp - 0x174]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
mov dword [ebp - 0x23c], 0x402c98
mov dword [ebp - 0x244], 8
lea edx, [ebp - 0x244]
lea ecx, [ebp - 0x184]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 1
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
push 0x46
lea edx, [ebp - 0x1a4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
mov dword [ebp - 0x24c], 0x402cb4
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 1
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
lea edx, [ebp - 0x1e4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1f4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xa
mov edx, 0x402560
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x160]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xb
mov edx, 0x402560
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
push ecx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xc
push 0x14
lea edx, [ebp - 0x174]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceVar]
mov dword [ebp - 0x23c], 0x402ccc
mov dword [ebp - 0x244], 8
mov dword [ebp - 0x24c], 0x40200c
mov dword [ebp - 0x254], 8
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xd
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe
mov word [ebp - 0x158], 4
mov dword [ebp - 4], 0xf
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x40753a
mov dword [ebp - 0x338], 0
jmp 0x407546
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x338], eax
mov edx, 0x402d54
mov ecx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0xc0]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x10
mov ecx, 2
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40758a
mov dword [ebp - 0x33c], 0
jmp 0x407596
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x33c], eax
mov edx, 0x402d60
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xc0]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x11
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4075da
mov dword [ebp - 0x340], 0
jmp 0x4075e6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x340], eax
mov edx, 0x402d6c
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xc0]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x12
mov edx, 4
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40762a
mov dword [ebp - 0x344], 0
jmp 0x407636
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x344], eax
mov edx, 0x402d78
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xc0]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x13
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40767a
mov dword [ebp - 0x348], 0
jmp 0x407686
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x348], eax
mov edx, 0x402d84
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x144]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x14
mov edx, 2
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4076ca
mov dword [ebp - 0x34c], 0
jmp 0x4076d6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x34c], eax
mov edx, 0x402d90
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x144]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x15
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40771a
mov dword [ebp - 0x350], 0
jmp 0x407726
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x350], eax
mov edx, 0x40268c
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x144]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x16
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40776a
mov dword [ebp - 0x354], 0
jmp 0x407776
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x354], eax
mov edx, 0x402da0
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x54]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x17
mov edx, 2
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4077b7
mov dword [ebp - 0x358], 0
jmp 0x4077c3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x358], eax
mov edx, 0x402dac
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x54]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x18
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407804
mov dword [ebp - 0x35c], 0
jmp 0x407810
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x35c], eax
mov edx, 0x402db8
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x54]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x19
mov edx, 4
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407851
mov dword [ebp - 0x360], 0
jmp 0x40785d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x360], eax
mov edx, 0x402dc4
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x54]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1a
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40789e
mov dword [ebp - 0x364], 0
jmp 0x4078aa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x364], eax
mov edx, 0x402dd0
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1b
mov edx, 2
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4078eb
mov dword [ebp - 0x368], 0
jmp 0x4078f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x368], eax
mov edx, 0x402de8
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1c
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407938
mov dword [ebp - 0x36c], 0
jmp 0x407944
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x36c], eax
mov edx, 0x402e00
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1d
mov edx, 4
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407985
mov dword [ebp - 0x370], 0
jmp 0x407991
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x370], eax
mov edx, 0x402e1c
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x78]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1e
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4079d2
mov dword [ebp - 0x374], 0
jmp 0x4079de
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x374], eax
mov edx, 0x402e38
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x114]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1f
mov edx, 2
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407a22
mov dword [ebp - 0x378], 0
jmp 0x407a2e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x378], eax
mov edx, 0x402ea8
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x114]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x20
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407a72
mov dword [ebp - 0x37c], 0
jmp 0x407a7e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x37c], eax
mov edx, 0x402f64
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x114]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x21
mov edx, 4
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407ac2
mov dword [ebp - 0x380], 0
jmp 0x407ace
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x380], eax
mov edx, 0x402fd8
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x114]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x22
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4008
push 2
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x174]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x264], 0x4008
push 4
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x274], 0x4008
mov dword [ebp - 0x24c], 0x40303c
mov dword [ebp - 0x254], 0x8008
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x254]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
mov edx, eax
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcImmediateIf]
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x174]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x23
mov word [ebp - 0x2b8], 0
mov edx, 0x403048
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x160]
push eax
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x24
mov word [ebp - 0xe4], 1
mov dword [ebp - 4], 0x25
mov eax, dword [ebp - 0xe0]
push eax
push 0x403054
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x409248
mov dword [ebp - 4], 0x26
mov cx, word [ebp - 0x158]
mov word [ebp - 0x2fc], cx
mov word [ebp - 0x2f8], 1
mov word [ebp - 0x24], 1
jmp 0x407cee
mov dx, word [ebp - 0x24]
add dx, word [ebp - 0x2f8]
jo 0x40d4cc
mov word [ebp - 0x24], dx
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x2fc]
jg 0x409243
mov dword [ebp - 4], 0x27
mov dword [0x412070], 0
mov dword [0x412074], 0
mov dword [ebp - 4], 0x28
mov dword [0x412078], 0
mov dword [0x41207c], 0
mov dword [ebp - 4], 0x29
mov dword [0x412080], 0
mov dword [0x412084], 0
mov dword [ebp - 4], 0x2a
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x407d79
mov dword [ebp - 0x384], 0
jmp 0x407d85
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x384], eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xf8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2b
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407de7
mov dword [ebp - 0x388], 0
jmp 0x407df3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x388], eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2c
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x407e52
mov dword [ebp - 0x38c], 0
jmp 0x407e5e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x38c], eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x98]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2d
mov dx, word [ebp - 0x24]
mov word [ebp - 0x300], dx
movsx eax, word [ebp - 0x300]
mov dword [ebp - 0x390], eax
jmp 0x407ebd
mov dword [ebp - 4], 0x2f
mov dword [0x412088], 0
mov dword [0x41208c], 0
mov dword [ebp - 4], 0x30
mov dword [0x412090], 0
mov dword [0x412094], 0
mov dword [ebp - 4], 0x31
mov dword [0x412098], 0
mov dword [0x41209c], 0
mov dword [ebp - 4], 0x32
mov word [ebp - 0x2b8], 0
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x407f40
mov dword [ebp - 0x394], 0
jmp 0x407f4c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x394], eax
push 0x412098
push 0x412090
push 0x412088
lea edx, [ebp - 0x2b8]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x78]
lea ecx, [eax + edx*4]
push ecx
call fcn.0040dbb0
mov dword [ebp - 4], 0x33
mov edx, dword [0x412088]
mov dword [0x412070], edx
mov eax, dword [0x41208c]
mov dword [0x412074], eax
mov dword [ebp - 4], 0x34
mov ecx, dword [0x412090]
mov dword [0x412078], ecx
mov edx, dword [0x412094]
mov dword [0x41207c], edx
mov dword [ebp - 4], 0x35
mov eax, dword [0x412098]
mov dword [0x412080], eax
mov ecx, dword [0x41209c]
mov dword [0x412084], ecx
mov dword [ebp - 4], 0x37
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40800a
mov dword [ebp - 0x398], 0
jmp 0x408016
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x398], eax
mov eax, dword [0x412074]
push eax
mov ecx, dword [0x412070]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xf8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x38
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x408083
mov dword [ebp - 0x39c], 0
jmp 0x40808f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x39c], eax
mov eax, dword [0x41207c]
push eax
mov ecx, dword [0x412078]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x39
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4080f9
mov dword [ebp - 0x3a0], 0
jmp 0x408105
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3a0], eax
mov eax, dword [0x412084]
push eax
mov ecx, dword [0x412080]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x98]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x3a
mov word [ebp - 0x2b8], 0
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40817b
mov dword [ebp - 0x3a4], 0
jmp 0x408187
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3a4], eax
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xc0]
lea edx, [ecx + eax*4]
push edx
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x3b
mov eax, dword [ebp - 0x138]
push eax
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x408840
mov dword [ebp - 4], 0x3c
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fstp qword [ebp - 0xd8]
mov dword [ebp - 4], 0x3d
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x184]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, dword [0x412074]
push edx
mov eax, dword [0x412070]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx ecx, word [ebp - 0xe4]
mov dword [ebp - 0x3a8], ecx
fild dword [ebp - 0x3a8]
fstp qword [ebp - 0x3b0]
fsub qword [ebp - 0x3b0]
fstp qword [ebp - 0x16c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x174], 5
push 1
push 1
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x26c], 0x40305c
mov dword [ebp - 0x274], 8
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x1b4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, dword [0x412074]
push edx
mov eax, dword [0x412070]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx ecx, word [ebp - 0xe4]
mov dword [ebp - 0x3b4], ecx
fild dword [ebp - 0x3b4]
fstp qword [ebp - 0x3bc]
fadd qword [ebp - 0x3bc]
fstp qword [ebp - 0x19c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x1a4], 5
push 1
push 1
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 0x41
jne 0x408379
mov dword [ebp - 0x3c0], 1
jmp 0x408383
mov dword [ebp - 0x3c0], 0
lea eax, [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 1
je 0x4083a9
mov dword [ebp - 0x3c4], 1
jmp 0x4083b3
mov dword [ebp - 0x3c4], 0
mov ecx, dword [ebp - 0x3c0]
neg ecx
mov edx, dword [ebp - 0x3c4]
neg edx
or cx, dx
mov word [ebp - 0x2dc], cx
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
movsx ecx, word [ebp - 0x2dc]
test ecx, ecx
je 0x408840
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x3f
mov edx, dword [ebp - 0xec]
add edx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], edx
mov dword [ebp - 4], 0x40
cmp word [ebp - 0x24], 1
jne 0x408673
mov dword [ebp - 4], 0x41
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403084
mov dword [ebp - 0x264], 8
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40850e
mov dword [ebp - 0x3c8], 0
jmp 0x40851a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3c8], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x4030bc
mov dword [ebp - 0x284], 8
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2e0], edx
cmp dword [ebp - 0x2e0], 4
jae 0x40856f
mov dword [ebp - 0x3cc], 0
jmp 0x40857b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x28c], edx
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], 0x402650
mov dword [ebp - 0x2a4], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x294]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
jmp 0x408802
mov dword [ebp - 4], 0x43
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x402f18
mov dword [ebp - 0x264], 8
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40870b
mov dword [ebp - 0x3d0], 0
jmp 0x408717
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3d0], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x403134
mov dword [ebp - 0x284], 8
mov dword [ebp - 0x28c], 0x402650
mov dword [ebp - 0x294], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 4], 0x45
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x46
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x49
cmp word [ebp - 0x24], 4
je 0x408f19
mov dword [ebp - 4], 0x4a
mov word [ebp - 0x2b8], 0
movsx eax, word [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x408884
mov dword [ebp - 0x3d4], 0
jmp 0x408890
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3d4], eax
lea ecx, [ebp - 0x2b8]
push ecx
mov edx, dword [ebp + 0x1c]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x144]
lea eax, [edx + ecx*4]
push eax
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x4b
mov ecx, dword [ebp - 0x138]
push ecx
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x408f19
mov dword [ebp - 4], 0x4c
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fstp qword [ebp - 0xd8]
mov dword [ebp - 4], 0x4d
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x184]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x41207c]
push eax
mov ecx, dword [0x412078]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx edx, word [ebp - 0xe4]
mov dword [ebp - 0x3d8], edx
fild dword [ebp - 0x3d8]
fstp qword [ebp - 0x3e0]
fsub qword [ebp - 0x3e0]
fstp qword [ebp - 0x16c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x174], 5
push 1
push 1
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x26c], 0x40305c
mov dword [ebp - 0x274], 8
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x1b4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x41207c]
push eax
mov ecx, dword [0x412078]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx edx, word [ebp - 0xe4]
mov dword [ebp - 0x3e4], edx
fild dword [ebp - 0x3e4]
fstp qword [ebp - 0x3ec]
fadd qword [ebp - 0x3ec]
fstp qword [ebp - 0x19c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x1a4], 5
push 1
push 1
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 0x41
jne 0x408a82
mov dword [ebp - 0x3f0], 1
jmp 0x408a8c
mov dword [ebp - 0x3f0], 0
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 1
je 0x408ab2
mov dword [ebp - 0x3f4], 1
jmp 0x408abc
mov dword [ebp - 0x3f4], 0
mov edx, dword [ebp - 0x3f0]
neg edx
mov eax, dword [ebp - 0x3f4]
neg eax
or dx, ax
mov word [ebp - 0x2dc], dx
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
movsx edx, word [ebp - 0x2dc]
test edx, edx
je 0x408f19
mov dword [ebp - 4], 0x4e
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x4f
mov eax, dword [ebp - 0xec]
add eax, 1
jo 0x40d4cc
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0x50
cmp word [ebp - 0x24], 1
jne 0x408d7c
mov dword [ebp - 4], 0x51
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403084
mov dword [ebp - 0x264], 8
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x408c17
mov dword [ebp - 0x3f8], 0
jmp 0x408c23
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x144]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x40319c
mov dword [ebp - 0x284], 8
movsx eax, word [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x408c78
mov dword [ebp - 0x3fc], 0
jmp 0x408c84
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x3fc], eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], 0x402650
mov dword [ebp - 0x2a4], 8
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x1a4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x294]
push edx
lea eax, [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x2a4]
push ecx
lea edx, [ebp - 0x1d4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
jmp 0x408edb
mov dword [ebp - 4], 0x53
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4031f8
mov dword [ebp - 0x264], 8
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x408e14
mov dword [ebp - 0x400], 0
jmp 0x408e20
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x403234
mov dword [ebp - 0x284], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov dword [ebp - 4], 0x55
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x160]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x56
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x5a
mov word [ebp - 0x2b8], 0
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x408f4b
mov dword [ebp - 0x404], 0
jmp 0x408f57
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x404], eax
lea edx, [ebp - 0x2b8]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x54]
lea ecx, [eax + edx*4]
push ecx
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x5b
mov edx, dword [ebp - 0x138]
push edx
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x409237
mov dword [ebp - 4], 0x5c
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fcomp qword [0x412080]
fnstsw ax
test ah, 0x40
jne 0x409237
mov dword [ebp - 4], 0x5d
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x5e
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0x5f
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xec]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x40329c
mov dword [ebp - 0x264], 8
movsx eax, word [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x40909c
mov dword [ebp - 0x408], 0
jmp 0x4090a8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x408], eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x4032f4
mov dword [ebp - 0x284], 8
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 4
jae 0x4090fa
mov dword [ebp - 0x40c], 0
jmp 0x409106
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x40c], eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], 0x402650
mov dword [ebp - 0x2a4], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x2a4]
push edx
lea eax, [ebp - 0x1d4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov dword [ebp - 4], 0x60
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x61
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x64
jmp 0x407cd9
jmp 0x40a7f9
mov dword [ebp - 4], 0x65
mov eax, dword [ebp - 0xe0]
push eax
push 0x402f50
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x40a7f9
mov dword [ebp - 4], 0x66
mov cx, word [ebp - 0x158]
mov word [ebp - 0x308], cx
mov word [ebp - 0x304], 1
mov word [ebp - 0x24], 1
jmp 0x4092a4
mov dx, word [ebp - 0x24]
add dx, word [ebp - 0x304]
jo 0x40d4cc
mov word [ebp - 0x24], dx
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x308]
jg 0x40a7f9
mov dword [ebp - 4], 0x67
mov dword [0x412070], 0
mov dword [0x412074], 0
mov dword [ebp - 4], 0x68
mov dword [0x412078], 0
mov dword [0x41207c], 0
mov dword [ebp - 4], 0x69
mov dword [0x412080], 0
mov dword [0x412084], 0
mov dword [ebp - 4], 0x6a
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40932f
mov dword [ebp - 0x410], 0
jmp 0x40933b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x410], eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xf8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x6b
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40939d
mov dword [ebp - 0x414], 0
jmp 0x4093a9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x414], eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x6c
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x409408
mov dword [ebp - 0x418], 0
jmp 0x409414
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x418], eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x98]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x6d
mov dx, word [ebp - 0x24]
mov word [ebp - 0x30c], dx
movsx eax, word [ebp - 0x30c]
mov dword [ebp - 0x41c], eax
jmp 0x409473
mov dword [ebp - 4], 0x6f
mov dword [0x412088], 0
mov dword [0x41208c], 0
mov dword [ebp - 4], 0x70
mov dword [0x412090], 0
mov dword [0x412094], 0
mov dword [ebp - 4], 0x71
mov dword [0x412098], 0
mov dword [0x41209c], 0
mov dword [ebp - 4], 0x72
mov word [ebp - 0x2b8], 0
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x4094f6
mov dword [ebp - 0x420], 0
jmp 0x409502
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x420], eax
push 0x412098
push 0x412090
push 0x412088
lea edx, [ebp - 0x2b8]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x78]
lea ecx, [eax + edx*4]
push ecx
call fcn.0040dbb0
mov dword [ebp - 4], 0x73
mov edx, dword [0x412088]
mov dword [0x412070], edx
mov eax, dword [0x41208c]
mov dword [0x412074], eax
mov dword [ebp - 4], 0x74
mov ecx, dword [0x412090]
mov dword [0x412078], ecx
mov edx, dword [0x412094]
mov dword [0x41207c], edx
mov dword [ebp - 4], 0x75
mov eax, dword [0x412098]
mov dword [0x412080], eax
mov ecx, dword [0x41209c]
mov dword [0x412084], ecx
mov dword [ebp - 4], 0x77
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4095c0
mov dword [ebp - 0x424], 0
jmp 0x4095cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x424], eax
mov eax, dword [0x412074]
push eax
mov ecx, dword [0x412070]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xf8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x78
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x409639
mov dword [ebp - 0x428], 0
jmp 0x409645
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x428], eax
mov eax, dword [0x41207c]
push eax
mov ecx, dword [0x412078]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x30]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x79
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x4096af
mov dword [ebp - 0x42c], 0
jmp 0x4096bb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x42c], eax
mov eax, dword [0x412084]
push eax
mov ecx, dword [0x412080]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x98]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x7a
mov word [ebp - 0x2b8], 0
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x409731
mov dword [ebp - 0x430], 0
jmp 0x40973d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x430], eax
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0xc0]
lea edx, [ecx + eax*4]
push edx
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x7b
mov eax, dword [ebp - 0x138]
push eax
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x409df6
mov dword [ebp - 4], 0x7c
mov ecx, dword [ebp - 0x138]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fstp qword [ebp - 0xd8]
mov dword [ebp - 4], 0x7d
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x184]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, dword [0x412074]
push edx
mov eax, dword [0x412070]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx ecx, word [ebp - 0xe4]
mov dword [ebp - 0x434], ecx
fild dword [ebp - 0x434]
fstp qword [ebp - 0x43c]
fsub qword [ebp - 0x43c]
fstp qword [ebp - 0x16c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x174], 5
push 1
push 1
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x26c], 0x40305c
mov dword [ebp - 0x274], 8
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x1b4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, dword [0x412074]
push edx
mov eax, dword [0x412070]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx ecx, word [ebp - 0xe4]
mov dword [ebp - 0x440], ecx
fild dword [ebp - 0x440]
fstp qword [ebp - 0x448]
fadd qword [ebp - 0x448]
fstp qword [ebp - 0x19c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x1a4], 5
push 1
push 1
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 0x41
jne 0x40992f
mov dword [ebp - 0x44c], 1
jmp 0x409939
mov dword [ebp - 0x44c], 0
lea eax, [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 1
je 0x40995f
mov dword [ebp - 0x450], 1
jmp 0x409969
mov dword [ebp - 0x450], 0
mov ecx, dword [ebp - 0x44c]
neg ecx
mov edx, dword [ebp - 0x450]
neg edx
or cx, dx
mov word [ebp - 0x2dc], cx
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
movsx ecx, word [ebp - 0x2dc]
test ecx, ecx
je 0x409df6
mov dword [ebp - 4], 0x7e
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x7f
mov edx, dword [ebp - 0xec]
add edx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], edx
mov dword [ebp - 4], 0x80
cmp word [ebp - 0x24], 1
jne 0x409c29
mov dword [ebp - 4], 0x81
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403084
mov dword [ebp - 0x264], 8
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x409ac4
mov dword [ebp - 0x454], 0
jmp 0x409ad0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x454], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x4030bc
mov dword [ebp - 0x284], 8
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2e0], edx
cmp dword [ebp - 0x2e0], 4
jae 0x409b25
mov dword [ebp - 0x458], 0
jmp 0x409b31
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x28c], edx
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], 0x402650
mov dword [ebp - 0x2a4], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x294]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x2a4]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
jmp 0x409db8
mov dword [ebp - 4], 0x83
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x402f18
mov dword [ebp - 0x264], 8
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x409cc1
mov dword [ebp - 0x45c], 0
jmp 0x409ccd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x45c], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x403134
mov dword [ebp - 0x284], 8
mov dword [ebp - 0x28c], 0x402650
mov dword [ebp - 0x294], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 4], 0x85
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x86
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x89
cmp word [ebp - 0x24], 4
je 0x40a4cf
mov dword [ebp - 4], 0x8a
mov word [ebp - 0x2b8], 0
movsx eax, word [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x409e3a
mov dword [ebp - 0x460], 0
jmp 0x409e46
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x460], eax
lea ecx, [ebp - 0x2b8]
push ecx
mov edx, dword [ebp + 0x1c]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x144]
lea eax, [edx + ecx*4]
push eax
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x8b
mov ecx, dword [ebp - 0x138]
push ecx
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x40a4cf
mov dword [ebp - 4], 0x8c
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fstp qword [ebp - 0xd8]
mov dword [ebp - 4], 0x8d
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x184]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x41207c]
push eax
mov ecx, dword [0x412078]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx edx, word [ebp - 0xe4]
mov dword [ebp - 0x464], edx
fild dword [ebp - 0x464]
fstp qword [ebp - 0x46c]
fsub qword [ebp - 0x46c]
fstp qword [ebp - 0x16c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x174], 5
push 1
push 1
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x26c], 0x40305c
mov dword [ebp - 0x274], 8
lea edx, [ebp - 0x274]
lea ecx, [ebp - 0x1b4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x41207c]
push eax
mov ecx, dword [0x412078]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
movsx edx, word [ebp - 0xe4]
mov dword [ebp - 0x470], edx
fild dword [ebp - 0x470]
fstp qword [ebp - 0x478]
fadd qword [ebp - 0x478]
fstp qword [ebp - 0x19c]
fnstsw ax
test al, 0xd
jne 0x40d4c7
mov dword [ebp - 0x1a4], 5
push 1
push 1
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x1c4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 0x41
jne 0x40a038
mov dword [ebp - 0x47c], 1
jmp 0x40a042
mov dword [ebp - 0x47c], 0
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fcomp qword [ebp - 0xd8]
fnstsw ax
test ah, 1
je 0x40a068
mov dword [ebp - 0x480], 1
jmp 0x40a072
mov dword [ebp - 0x480], 0
mov edx, dword [ebp - 0x47c]
neg edx
mov eax, dword [ebp - 0x480]
neg eax
or dx, ax
mov word [ebp - 0x2dc], dx
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea eax, [ebp - 0x1c4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
movsx edx, word [ebp - 0x2dc]
test edx, edx
je 0x40a4cf
mov dword [ebp - 4], 0x8e
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x8f
mov eax, dword [ebp - 0xec]
add eax, 1
jo 0x40d4cc
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0x90
cmp word [ebp - 0x24], 1
jne 0x40a332
mov dword [ebp - 4], 0x91
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403084
mov dword [ebp - 0x264], 8
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40a1cd
mov dword [ebp - 0x484], 0
jmp 0x40a1d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x144]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x40319c
mov dword [ebp - 0x284], 8
movsx eax, word [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40a22e
mov dword [ebp - 0x488], 0
jmp 0x40a23a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x488], eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x114]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], 0x402650
mov dword [ebp - 0x2a4], 8
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x1a4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x284]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x294]
push edx
lea eax, [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x2a4]
push ecx
lea edx, [ebp - 0x1d4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
jmp 0x40a491
mov dword [ebp - 4], 0x93
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4031f8
mov dword [ebp - 0x264], 8
movsx edx, word [ebp - 0x24]
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40a3ca
mov dword [ebp - 0x48c], 0
jmp 0x40a3d6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x2dc]
mov ecx, dword [ebp - 0x114]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x26c], edx
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x403234
mov dword [ebp - 0x284], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x1b4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov dword [ebp - 4], 0x95
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x160]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x96
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x9a
mov word [ebp - 0x2b8], 0
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40a501
mov dword [ebp - 0x490], 0
jmp 0x40a50d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x490], eax
lea edx, [ebp - 0x2b8]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x54]
lea ecx, [eax + edx*4]
push ecx
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x9b
mov edx, dword [ebp - 0x138]
push edx
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x40a7ed
mov dword [ebp - 4], 0x9c
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fcomp qword [0x412080]
fnstsw ax
test ah, 0x40
jne 0x40a7ed
mov dword [ebp - 4], 0x9d
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x9e
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0x9f
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xec]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x40329c
mov dword [ebp - 0x264], 8
movsx eax, word [ebp - 0x24]
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x40a652
mov dword [ebp - 0x494], 0
jmp 0x40a65e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x494], eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x54]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x27c], 0x4032f4
mov dword [ebp - 0x284], 8
movsx ecx, word [ebp - 0x24]
sub ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 4
jae 0x40a6b0
mov dword [ebp - 0x498], 0
jmp 0x40a6bc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x498], eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x114]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], 0x402650
mov dword [ebp - 0x2a4], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x294]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x2a4]
push edx
lea eax, [ebp - 0x1d4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x1c4]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov dword [ebp - 4], 0xa0
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xa1
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xa4
jmp 0x40928f
mov dword [ebp - 4], 0xa6
mov eax, dword [ebp - 0xe0]
push eax
push 0x403054
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x40b5ff
mov dword [ebp - 4], 0xa7
mov word [ebp - 0x2b8], 0
mov edx, 0x402f58
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x2b8]
push ecx
mov edx, dword [ebp + 0x1c]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x160]
push ecx
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xa8
mov edx, dword [ebp - 0x138]
push edx
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x40ab38
mov dword [ebp - 4], 0xa9
mov dword [ebp - 0x24c], 0x403114
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x40a8ed
mov dword [ebp - 0x49c], 0
jmp 0x40a8f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x30]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4008
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x40305c
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x264]
lea ecx, [ebp - 0x194]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 1
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x1a4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x1a4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x4a4]
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fcomp qword [ebp - 0x4a4]
fnstsw ax
test ah, 0x40
jne 0x40a9b2
mov dword [ebp - 0x4a8], 1
jmp 0x40a9bc
mov dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
neg eax
mov word [ebp - 0x2e0], ax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
movsx eax, word [ebp - 0x2e0]
test eax, eax
je 0x40ab38
mov dword [ebp - 4], 0xaa
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xab
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0xac
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xec]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403314
mov dword [ebp - 0x264], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xad
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x160]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xae
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xb1
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, 1
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40ab88
mov dword [ebp - 0x4ac], 0
jmp 0x40ab94
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4ac], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0xf8]
lea ecx, [eax + edx*4]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4008
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x26c]
mov dword [ebp - 0x274], 0x8005
mov dword [ebp - 0x25c], 0x40305c
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x264]
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 3
sub eax, 1
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 4
jae 0x40ac38
mov dword [ebp - 0x4b0], 0
jmp 0x40ac44
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4b0], eax
mov ecx, 2
sub ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 4
jae 0x40ac67
mov dword [ebp - 0x4b4], 0
jmp 0x40ac73
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4b4], eax
mov dx, word [ebp - 0xe4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCySub]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x194], 8
push 1
push 1
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x28c], 0x40305c
mov dword [ebp - 0x294], 8
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jae 0x40ad41
mov dword [ebp - 0x4b8], 0
jmp 0x40ad4d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4b8], eax
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0xf8]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], 0x4008
push 1
push 1
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x1e4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x2ac]
mov dword [ebp - 0x2b4], 0x8005
mov dword [ebp - 0x29c], 0x40305c
mov dword [ebp - 0x2a4], 8
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x204]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2f0], edx
cmp dword [ebp - 0x2f0], 4
jae 0x40adf1
mov dword [ebp - 0x4bc], 0
jmp 0x40adfd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4bc], eax
mov eax, 2
sub eax, 1
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 4
jae 0x40ae20
mov dword [ebp - 0x4c0], 0
jmp 0x40ae2c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4c0], eax
mov cx, word [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 8
push 1
push 1
lea edx, [ebp - 0x204]
push edx
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpLt]
push eax
lea edx, [ebp - 0x2b4]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea edx, [ebp - 0x234]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2f4], ax
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x204]
push ecx
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1e4]
push ecx
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 0xc
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x34
movsx eax, word [ebp - 0x2f4]
test eax, eax
je 0x40b0a2
mov dword [ebp - 4], 0xb2
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xb3
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0xb4
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xec]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4033cc
mov dword [ebp - 0x264], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xb5
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x160]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xb6
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xb8
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, 1
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40b0f2
mov dword [ebp - 0x4c4], 0
jmp 0x40b0fe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4c4], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x30]
lea ecx, [eax + edx*4]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4008
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x26c]
mov dword [ebp - 0x274], 0x8005
mov dword [ebp - 0x25c], 0x40305c
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x264]
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 3
sub eax, 1
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 4
jae 0x40b19f
mov dword [ebp - 0x4c8], 0
jmp 0x40b1ab
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4c8], eax
mov ecx, 2
sub ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 4
jae 0x40b1ce
mov dword [ebp - 0x4cc], 0
jmp 0x40b1da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4cc], eax
mov dx, word [ebp - 0xe4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCySub]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x194], 8
push 1
push 1
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x1b4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x28c], 0x40305c
mov dword [ebp - 0x294], 8
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jae 0x40b2a2
mov dword [ebp - 0x4d0], 0
jmp 0x40b2ae
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4d0], eax
mov ecx, dword [ebp - 0x2e8]
mov edx, dword [ebp - 0x30]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], 0x4008
push 1
push 1
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x1e4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x2ac]
mov dword [ebp - 0x2b4], 0x8005
mov dword [ebp - 0x29c], 0x40305c
mov dword [ebp - 0x2a4], 8
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x204]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2f0], edx
cmp dword [ebp - 0x2f0], 4
jae 0x40b34f
mov dword [ebp - 0x4d4], 0
jmp 0x40b35b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4d4], eax
mov eax, 2
sub eax, 1
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 4
jae 0x40b37e
mov dword [ebp - 0x4d8], 0
jmp 0x40b38a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4d8], eax
mov cx, word [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov edx, dword [ebp - 0x2f0]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov edx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 8
push 1
push 1
lea edx, [ebp - 0x204]
push edx
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x214]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1c4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpLt]
push eax
lea edx, [ebp - 0x2b4]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x224]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea edx, [ebp - 0x234]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2f4], ax
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x204]
push ecx
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1e4]
push ecx
lea edx, [ebp - 0x1d4]
push edx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 0xc
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x34
movsx eax, word [ebp - 0x2f4]
test eax, eax
je 0x40b5fa
mov dword [ebp - 4], 0xb9
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xba
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0xbb
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xec]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403500
mov dword [ebp - 0x264], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xbc
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x160]
push eax
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xbd
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
jmp 0x40c3ad
mov dword [ebp - 4], 0xbf
mov ecx, dword [ebp - 0xe0]
push ecx
push 0x402f50
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x40c3ad
mov dword [ebp - 4], pe_nt_image_headers32
mov word [ebp - 0x2b8], 0
mov edx, 0x402f58
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x2b8]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x160]
push edx
call fcn.0040d640
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xc1
mov eax, dword [ebp - 0x138]
push eax
push 0x402560
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x40b8eb
mov dword [ebp - 4], 0xc2
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, 1
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40b6f3
mov dword [ebp - 0x4dc], 0
jmp 0x40b6ff
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4dc], eax
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x30]
lea ecx, [eax + edx*4]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4008
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x4e4]
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Str]
fcomp qword [ebp - 0x4e4]
fnstsw ax
test ah, 0x40
jne 0x40b773
mov dword [ebp - 0x4e8], 1
jmp 0x40b77d
mov dword [ebp - 0x4e8], 0
mov ecx, dword [ebp - 0x4e8]
neg ecx
mov word [ebp - 0x2e0], cx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
movsx edx, word [ebp - 0x2e0]
test edx, edx
je 0x40b8eb
mov dword [ebp - 4], 0xc3
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xc4
mov eax, dword [ebp - 0xec]
add eax, 1
jo 0x40d4cc
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0xc5
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403314
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xc6
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xc7
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xca
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x40b93b
mov dword [ebp - 0x4ec], 0
jmp 0x40b947
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4ec], eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0xf8]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4008
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x26c]
mov dword [ebp - 0x274], 0x8005
mov dword [ebp - 0x25c], 0x40305c
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x264]
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2e4], edx
cmp dword [ebp - 0x2e4], 4
jae 0x40b9eb
mov dword [ebp - 0x4f0], 0
jmp 0x40b9f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4f0], eax
mov eax, 2
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40ba1a
mov dword [ebp - 0x4f4], 0
jmp 0x40ba26
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4f4], eax
mov cx, word [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov edx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCySub]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x194], 8
push 1
push 1
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x28c], 0x40305c
mov dword [ebp - 0x294], 8
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 4
jae 0x40baf4
mov dword [ebp - 0x4f8], 0
jmp 0x40bb00
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0xf8]
lea edx, [ecx + eax*4]
mov dword [ebp - 0x27c], edx
mov dword [ebp - 0x284], 0x4008
push 1
push 1
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x1e4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x2ac]
mov dword [ebp - 0x2b4], 0x8005
mov dword [ebp - 0x29c], 0x40305c
mov dword [ebp - 0x2a4], 8
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x204]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, 3
sub ecx, 1
mov dword [ebp - 0x2f0], ecx
cmp dword [ebp - 0x2f0], 4
jae 0x40bba4
mov dword [ebp - 0x4fc], 0
jmp 0x40bbb0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x4fc], eax
mov edx, 2
sub edx, 1
mov dword [ebp - 0x2ec], edx
cmp dword [ebp - 0x2ec], 4
jae 0x40bbd3
mov dword [ebp - 0x500], 0
jmp 0x40bbdf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x500], eax
mov ax, word [ebp - 0xe4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov ecx, dword [ebp - 0x2ec]
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 8
push 1
push 1
lea ecx, [ebp - 0x204]
push ecx
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpLt]
push eax
lea ecx, [ebp - 0x2b4]
push ecx
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea ecx, [ebp - 0x234]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2f4], ax
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x1f4]
push ecx
lea edx, [ebp - 0x1e4]
push edx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 0xc
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x34
movsx edx, word [ebp - 0x2f4]
test edx, edx
je 0x40be55
mov dword [ebp - 4], 0xcb
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xcc
mov eax, dword [ebp - 0xec]
add eax, 1
jo 0x40d4cc
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0xcd
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4033cc
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xce
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xcf
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xd1
mov dword [ebp - 0x24c], 0x40305c
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jae 0x40bea5
mov dword [ebp - 0x504], 0
jmp 0x40beb1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x504], eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x30]
lea eax, [edx + ecx*4]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4008
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x26c]
mov dword [ebp - 0x274], 0x8005
mov dword [ebp - 0x25c], 0x40305c
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x264]
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, 3
sub edx, 1
mov dword [ebp - 0x2e4], edx
cmp dword [ebp - 0x2e4], 4
jae 0x40bf52
mov dword [ebp - 0x508], 0
jmp 0x40bf5e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x508], eax
mov eax, 2
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40bf81
mov dword [ebp - 0x50c], 0
jmp 0x40bf8d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x50c], eax
mov cx, word [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov edx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov edx, dword [ebp - 0x2e0]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCySub]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x194], 8
push 1
push 1
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x1b4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x28c], 0x40305c
mov dword [ebp - 0x294], 8
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 4
jae 0x40c055
mov dword [ebp - 0x510], 0
jmp 0x40c061
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x30]
lea edx, [ecx + eax*4]
mov dword [ebp - 0x27c], edx
mov dword [ebp - 0x284], 0x4008
push 1
push 1
lea eax, [ebp - 0x1d4]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x1e4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea eax, [ebp - 0x1e4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8ErrVar]
fstp qword [ebp - 0x2ac]
mov dword [ebp - 0x2b4], 0x8005
mov dword [ebp - 0x29c], 0x40305c
mov dword [ebp - 0x2a4], 8
lea edx, [ebp - 0x2a4]
lea ecx, [ebp - 0x204]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ecx, 3
sub ecx, 1
mov dword [ebp - 0x2f0], ecx
cmp dword [ebp - 0x2f0], 4
jae 0x40c102
mov dword [ebp - 0x514], 0
jmp 0x40c10e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x514], eax
mov edx, 2
sub edx, 1
mov dword [ebp - 0x2ec], edx
cmp dword [ebp - 0x2ec], 4
jae 0x40c131
mov dword [ebp - 0x518], 0
jmp 0x40c13d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x518], eax
mov ax, word [ebp - 0xe4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
push edx
push eax
mov ecx, dword [ebp - 0x2f0]
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
mov ecx, dword [ebp - 0x2ec]
mov edx, dword [ebp - 0x30]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyStr]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyAdd]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCy]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 8
push 1
push 1
lea ecx, [ebp - 0x204]
push ecx
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x274]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1c4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpLt]
push eax
lea ecx, [ebp - 0x2b4]
push ecx
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x224]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea ecx, [ebp - 0x234]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2f4], ax
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x204]
push eax
lea ecx, [ebp - 0x1f4]
push ecx
lea edx, [ebp - 0x1e4]
push edx
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 0xc
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x34
movsx edx, word [ebp - 0x2f4]
test edx, edx
je 0x40c3ad
mov dword [ebp - 4], 0xd2
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xd3
mov eax, dword [ebp - 0xec]
add eax, 1
jo 0x40d4cc
mov dword [ebp - 0xec], eax
mov dword [ebp - 4], 0xd4
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403500
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xd5
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xd6
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xd9
mov word [0x4120a0], 0
mov dword [ebp - 4], 0xda
mov edx, 0x402560
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xdb
mov edx, 0x4035ec
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0x2b8], 0
mov eax, 3
sub eax, 1
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 4
jae 0x40c419
mov dword [ebp - 0x51c], 0
jmp 0x40c425
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x51c], eax
mov ecx, 2
sub ecx, 1
mov dword [ebp - 0x2e0], ecx
cmp dword [ebp - 0x2e0], 4
jae 0x40c448
mov dword [ebp - 0x520], 0
jmp 0x40c454
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x520], eax
mov edx, 1
sub edx, 1
mov dword [ebp - 0x2dc], edx
cmp dword [ebp - 0x2dc], 4
jae 0x40c477
mov dword [ebp - 0x524], 0
jmp 0x40c483
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x524], eax
push 0x4120a0
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x2b8]
push ecx
mov edx, dword [ebp + 0x1c]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
call fcn.0040e470
mov word [ebp - 0x2e8], ax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
movsx ecx, word [ebp - 0x2e8]
test ecx, ecx
je 0x40c80c
mov dword [ebp - 4], 0xdc
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp - 0xec]
add edx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], edx
mov dword [ebp - 4], 0xde
mov ax, word [0x4120a0]
mov word [ebp - 0x310], ax
movsx ecx, word [ebp - 0x310]
mov dword [ebp - 0x528], ecx
cmp dword [ebp - 0x528], 1
je 0x40c572
cmp dword [ebp - 0x528], 2
je 0x40c63d
cmp dword [ebp - 0x528], 3
je 0x40c708
jmp 0x40c7ce
mov dword [ebp - 4], 0xe0
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xec]
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea eax, [ebp - 0x174]
push eax
lea ecx, [ebp - 0x244]
push ecx
lea edx, [ebp - 0x184]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4035f4
mov dword [ebp - 0x264], 8
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x264]
push ecx
lea edx, [ebp - 0x194]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x194]
push eax
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x174]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
jmp 0x40c7ce
mov dword [ebp - 4], 0xe2
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xec]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x244]
push edx
lea eax, [ebp - 0x184]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4036e4
mov dword [ebp - 0x264], 8
lea ecx, [ebp - 0x184]
push ecx
lea edx, [ebp - 0x264]
push edx
lea eax, [ebp - 0x194]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x194]
push ecx
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x174]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
jmp 0x40c7ce
mov dword [ebp - 4], 0xe4
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4037d4
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xe6
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xe7
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xe9
mov word [0x4120a0], 0
mov dword [ebp - 4], 0xea
mov edx, 0x402560
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xeb
mov edx, 0x403898
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0x2b8], 0
mov edx, 0x402560
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40c889
mov dword [ebp - 0x52c], 0
jmp 0x40c895
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x52c], eax
mov ecx, 2
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40c8b8
mov dword [ebp - 0x530], 0
jmp 0x40c8c4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x530], eax
push 0x4120a0
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
call fcn.0040e470
mov word [ebp - 0x2e4], ax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
movsx eax, word [ebp - 0x2e4]
test eax, eax
je 0x40caa5
mov dword [ebp - 4], 0xec
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xed
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0xee
mov dx, word [0x4120a0]
mov word [ebp - 0x314], dx
movsx eax, word [ebp - 0x314]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 4
je 0x40c9a1
jmp 0x40ca67
mov dword [ebp - 4], 0xf0
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x4038c8
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xf2
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xf3
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xf5
mov word [0x4120a0], 0
mov dword [ebp - 4], 0xf6
mov edx, 0x402560
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xf7
mov edx, 0x40398c
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0x2b8], 0
mov edx, 0x402560
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, 1
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40cb22
mov dword [ebp - 0x538], 0
jmp 0x40cb2e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x538], eax
mov ecx, 3
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40cb51
mov dword [ebp - 0x53c], 0
jmp 0x40cb5d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x53c], eax
push 0x4120a0
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
call fcn.0040e470
mov word [ebp - 0x2e4], ax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
movsx eax, word [ebp - 0x2e4]
test eax, eax
je 0x40cd3e
mov dword [ebp - 4], 0xf8
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0xf9
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0xfa
mov dx, word [0x4120a0]
mov word [ebp - 0x318], dx
movsx eax, word [ebp - 0x318]
mov dword [ebp - 0x540], eax
cmp dword [ebp - 0x540], 4
je 0x40cc3a
jmp 0x40cd00
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403998
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xfe
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0xff
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x101
mov word [0x4120a0], 0
mov dword [ebp - 4], 0x102
mov edx, 0x402560
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x103
mov edx, 0x403a60
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0x2b8], 0
mov edx, 0x402560
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, 4
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40cdbb
mov dword [ebp - 0x544], 0
jmp 0x40cdc7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x544], eax
mov ecx, 2
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40cdea
mov dword [ebp - 0x548], 0
jmp 0x40cdf6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x548], eax
push 0x4120a0
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
call fcn.0040e470
mov word [ebp - 0x2e4], ax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
movsx eax, word [ebp - 0x2e4]
test eax, eax
je 0x40cfd7
mov dword [ebp - 4], 0x104
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x105
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0x106
mov dx, word [0x4120a0]
mov word [ebp - 0x31c], dx
movsx eax, word [ebp - 0x31c]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 4
je 0x40ced3
jmp 0x40cf99
mov dword [ebp - 4], 0x108
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403ab0
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x10a
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x10b
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x10d
mov word [0x4120a0], 0
mov dword [ebp - 4], 0x10e
mov edx, 0x402560
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x10f
mov edx, 0x403b68
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0x2b8], 0
mov edx, 0x402560
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, 2
sub eax, 1
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jae 0x40d054
mov dword [ebp - 0x550], 0
jmp 0x40d060
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x550], eax
mov ecx, 4
sub ecx, 1
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 4
jae 0x40d083
mov dword [ebp - 0x554], 0
jmp 0x40d08f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x554], eax
push 0x4120a0
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x2b8]
push eax
mov ecx, dword [ebp + 0x1c]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x78]
lea eax, [edx + ecx*4]
push eax
call fcn.0040e470
mov word [ebp - 0x2e4], ax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
movsx eax, word [ebp - 0x2e4]
test eax, eax
je 0x40d270
mov dword [ebp - 4], 0x110
mov word [ebp - 0xb4], 0
mov dword [ebp - 4], 0x111
mov ecx, dword [ebp - 0xec]
add ecx, 1
jo 0x40d4cc
mov dword [ebp - 0xec], ecx
mov dword [ebp - 4], 0x112
mov dx, word [0x4120a0]
mov word [ebp - 0x320], dx
movsx eax, word [ebp - 0x320]
mov dword [ebp - 0x558], eax
cmp dword [ebp - 0x558], 4
je 0x40d16c
jmp 0x40d232
mov dword [ebp - 4], 0x114
mov dword [ebp - 0x24c], 0x403078
mov dword [ebp - 0x254], 8
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x174]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xec]
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x244], 0x4003
push 1
push 1
lea edx, [ebp - 0x174]
push edx
lea eax, [ebp - 0x244]
push eax
lea ecx, [ebp - 0x184]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x25c], 0x403b74
mov dword [ebp - 0x264], 8
lea edx, [ebp - 0x184]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x194]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x194]
push edx
lea eax, [ebp - 0x184]
push eax
lea ecx, [ebp - 0x174]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x116
mov edx, dword [ebp - 0x12c]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x160]
push edx
call fcn.00406d30
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x117
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x119
mov ax, word [0x41206c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
jmp 0x40d295
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x40d4ad
jmp 0x40d326
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x2bc], ecx
lea edx, [ebp - 0x2bc]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x60]
mov dword [ebp - 0x2c0], eax
lea ecx, [ebp - 0x2c0]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0x84]
mov dword [ebp - 0x2c4], edx
lea eax, [ebp - 0x2c4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x2c8], ecx
lea edx, [ebp - 0x2c8]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xcc]
mov dword [ebp - 0x2cc], eax
lea ecx, [ebp - 0x2cc]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xdc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xe8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x104]
mov dword [ebp - 0x2d0], edx
lea eax, [ebp - 0x2d0]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x2d4], ecx
lea edx, [ebp - 0x2d4]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x130]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x134]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x150]
mov dword [ebp - 0x2d8], eax
lea ecx, [ebp - 0x2d8]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x15c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
jmp 0x40185c
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3