Function at 0x433eb0
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x402ad6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x270
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x402810
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 2
push 0x417838
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x417854
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x417838
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x417854
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x417838
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTypeName]
mov edx, eax
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x198]
push eax
push 0x417758
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x433fe7
mov dword [ebp - 4], 6
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x4345d8
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41776c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x43404c
mov dword [ebp - 4], 8
push 0
push 0x41777c
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4345d8
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x198]
push ecx
push 0x41778c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x43426d
mov dword [ebp - 4], 0xa
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x19c]
push eax
push 0x41779c
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov dword [ebp - 0x1f4], eax
jmp 0x4341ec
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0x413850
mov dword [ebp - 0x154], 0x8008
push 0
push 0x41777c
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x18c]
test ecx, ecx
je 0x4341c6
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 8
mov dword [ebp - 0x15c], 0x4174e0
mov dword [ebp - 0x164], 8
lea eax, [ebp - 0x154]
push eax
push 0
push 0x41777c
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x19c]
push ecx
push 0x41779c
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jne 0x4340af
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4008
mov eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x435c21
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4345d8
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x198]
push ecx
push 0x4177b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x434528
mov dword [ebp - 4], 0x11
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a0], 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xc8], ax
jmp 0x434303
mov ax, word [ebp - 0xc8]
add ax, word [ebp - 0x1a0]
jo 0x435c21
mov word [ebp - 0xc8], ax
mov cx, word [ebp - 0xc8]
cmp cx, word [ebp - 0x1a4]
jg 0x4344b4
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x15c], 0x413850
mov dword [ebp - 0x164], 0x8008
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov edx, dword [ebp - 0x150]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x148]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x18c]
test eax, eax
je 0x4344a8
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x16c], 0x4174e0
mov dword [ebp - 0x174], 8
lea eax, [ebp - 0x164]
push eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x154]
mov dword [ecx], edx
mov eax, dword [ebp - 0x150]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x14c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x148]
mov dword [ecx + 0xc], eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x15
jmp 0x4342e8
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
mov ecx, dword [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x435c21
push eax
lea edx, [ebp - 0x154]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4345d8
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x13c], 0x80020004
mov dword [ebp - 0x144], 0xa
mov dword [ebp - 0x12c], 0x80020004
mov dword [ebp - 0x134], 0xa
mov dword [ebp - 0x11c], 0x80020004
mov dword [ebp - 0x124], 0xa
mov edx, dword [ebp - 0xfc]
push edx
push 0x4177d4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 8
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x124]
push edx
push 0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x1a
mov edx, dword [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xb4], ax
mov dword [ebp - 4], 0x1b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0x11
jae 0x434640
mov dword [ebp - 0x1f8], 0
jmp 0x43464c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x2e
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18c], 2
cmp dword [ebp - 0x18c], 0x11
jae 0x434681
mov dword [ebp - 0x1fc], 0
jmp 0x43468d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x59
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18c], 3
cmp dword [ebp - 0x18c], 0x11
jae 0x4346c2
mov dword [ebp - 0x200], 0
jmp 0x4346ce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x8e
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x18c], 4
cmp dword [ebp - 0x18c], 0x11
jae 0x434703
mov dword [ebp - 0x204], 0
jmp 0x43470f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x3f
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18c], 5
cmp dword [ebp - 0x18c], 0x11
jae 0x434744
mov dword [ebp - 0x208], 0
jmp 0x434750
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xe7
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x18c], 6
cmp dword [ebp - 0x18c], 0x11
jae 0x434785
mov dword [ebp - 0x20c], 0
jmp 0x434791
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x20
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18c], 7
cmp dword [ebp - 0x18c], 0x11
jae 0x4347c6
mov dword [ebp - 0x210], 0
jmp 0x4347d2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x81
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x18c], 8
cmp dword [ebp - 0x18c], 0x11
jae 0x434807
mov dword [ebp - 0x214], 0
jmp 0x434813
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x33
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18c], 9
cmp dword [ebp - 0x18c], 0x11
jae 0x434848
mov dword [ebp - 0x218], 0
jmp 0x434854
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x1c
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x18c], 0xa
cmp dword [ebp - 0x18c], 0x11
jae 0x434889
mov dword [ebp - 0x21c], 0
jmp 0x434895
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x61
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18c], 0xb
cmp dword [ebp - 0x18c], 0x11
jae 0x4348ca
mov dword [ebp - 0x220], 0
jmp 0x4348d6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xf8
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x18c], 0xc
cmp dword [ebp - 0x18c], 0x11
jae 0x43490b
mov dword [ebp - 0x224], 0
jmp 0x434917
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x29
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18c], 0xd
cmp dword [ebp - 0x18c], 0x11
jae 0x43494c
mov dword [ebp - 0x228], 0
jmp 0x434958
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x88
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x18c], 0xe
cmp dword [ebp - 0x18c], 0x11
jae 0x43498d
mov dword [ebp - 0x22c], 0
jmp 0x434999
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x35
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18c], 0xf
cmp dword [ebp - 0x18c], 0x11
jae 0x4349ce
mov dword [ebp - 0x230], 0
jmp 0x4349da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x4e
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x18c], 0x10
cmp dword [ebp - 0x18c], 0x11
jae 0x434a0f
mov dword [ebp - 0x234], 0
jmp 0x434a1b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0xa4
mov dword [ebp - 4], 0x2c
mov word [ebp - 0xc0], 0
mov dword [ebp - 4], 0x2d
mov word [ebp - 0x1ac], 0x200
mov word [ebp - 0x1a8], 1
mov word [ebp - 0xb8], 0
jmp 0x434a79
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1a8]
jo 0x435c21
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1ac]
jg 0x434ae4
mov dword [ebp - 4], 0x2e
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x434ab5
mov dword [ebp - 0x238], 0
jmp 0x434ac1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov ax, word [ebp - 0xb8]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x2f
jmp 0x434a5e
mov dword [ebp - 4], 0x30
mov word [ebp - 0x1b4], 0x200
mov word [ebp - 0x1b0], 1
mov word [ebp - 0xb8], 0
jmp 0x434b23
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1b0]
jo 0x435c21
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1b4]
jg 0x434c94
mov dword [ebp - 4], 0x31
mov ax, word [ebp - 0xc0]
add ax, word [ebp - 0xb8]
jo 0x435c21
and ax, 0xff
jns 0x434b60
dec ax
or ax, 0xff00
inc ax
mov word [ebp - 0xc0], ax
mov dword [ebp - 4], 0x32
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x434b93
mov dword [ebp - 0x23c], 0
jmp 0x434b9f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [eax + edx*2]
mov word [ebp - 0x54], cx
mov dword [ebp - 4], 0x33
movsx edx, word [ebp - 0xc0]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x434bdf
mov dword [ebp - 0x240], 0
jmp 0x434beb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x434c10
mov dword [ebp - 0x244], 0
jmp 0x434c1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x190]
mov esi, dword [ebp - 0x9c]
mov ax, word [esi + eax*2]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x34
movsx ecx, word [ebp - 0xc0]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x434c68
mov dword [ebp - 0x248], 0
jmp 0x434c74
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [ebp - 0x54]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x35
jmp 0x434b08
mov dword [ebp - 4], 0x36
mov edx, dword [ebp + 0x10]
cmp word [edx], 1
jne 0x434e6d
mov dword [ebp - 4], 0x37
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x38
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x14c], 0x414afc
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x114]
push eax
push 0x10
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x3a
mov word [ebp - 0x1bc], 0x200
mov word [ebp - 0x1b8], 1
mov word [ebp - 0xb8], 0
jmp 0x434d78
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1b8]
jo 0x435c21
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1bc]
jg 0x434e68
mov dword [ebp - 4], 0x3b
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x434db8
mov dword [ebp - 0x24c], 0
jmp 0x434dc4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
movsx ecx, word [eax + edx*2]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x201
jae 0x434df2
mov dword [ebp - 0x250], 0
jmp 0x434dfe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov dx, word [ebp - 0xe8]
add dx, 0x30
jo 0x435c21
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x64]
mov word [ecx + eax*2], dx
mov dword [ebp - 4], 0x3c
mov dx, word [ebp - 0xe8]
add dx, 1
jo 0x435c21
mov word [ebp - 0xe8], dx
mov dword [ebp - 4], 0x3d
cmp word [ebp - 0xe8], 0xa
jne 0x434e5c
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x40
jmp 0x434d5d
jmp 0x4351e0
mov dword [ebp - 4], 0x41
mov eax, dword [ebp + 0x10]
cmp word [eax], 2
jne 0x43515f
mov dword [ebp - 4], 0x42
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x43
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x44
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x14c], 0x414afc
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x10
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x46
mov word [ebp - 0xc4], 0
mov dword [ebp - 4], 0x47
mov word [ebp - 0x1c4], 0x200
mov word [ebp - 0x1c0], 1
mov word [ebp - 0xb8], 0
jmp 0x434f6e
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1c0]
jo 0x435c21
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1c4]
jg 0x43515a
mov dword [ebp - 4], 0x48
movsx edx, word [ebp - 0xc4]
test edx, edx
je 0x43507d
mov dword [ebp - 4], 0x49
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x434fc4
mov dword [ebp - 0x254], 0
jmp 0x434fd0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
movsx eax, word [edx + ecx*2]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x201
jae 0x434ffe
mov dword [ebp - 0x258], 0
jmp 0x43500a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov cx, word [ebp - 0xe8]
add cx, 0x30
jo 0x435c21
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x64]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x4a
mov cx, word [ebp - 0xe8]
add cx, 1
jo 0x435c21
mov word [ebp - 0xe8], cx
mov dword [ebp - 4], 0x4b
cmp word [ebp - 0xe8], 0xa
jne 0x435068
mov dword [ebp - 4], 0x4c
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x4e
mov word [ebp - 0xc4], 0
jmp 0x43514e
mov dword [ebp - 4], 0x50
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x201
jae 0x4350a9
mov dword [ebp - 0x25c], 0
jmp 0x4350b5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x9c]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x4350e3
mov dword [ebp - 0x260], 0
jmp 0x4350ef
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov ax, word [ebp - 0x28]
add ax, 0x41
jo 0x435c21
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x64]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x51
mov ax, word [ebp - 0x28]
add ax, 1
jo 0x435c21
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0x52
cmp word [ebp - 0x28], 0x1a
jne 0x43513e
mov dword [ebp - 4], 0x53
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x55
mov word [ebp - 0xc4], 0xffff
mov dword [ebp - 4], 0x57
jmp 0x434f53
jmp 0x4351e0
mov dword [ebp - 4], 0x59
mov word [ebp - 0x48], 8
mov dword [ebp - 4], 0x5a
mov dword [ebp - 0x14c], 0x414afc
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x13
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5c
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x5d
mov ax, word [ebp - 0xb4]
mov word [ebp - 0x1cc], ax
mov word [ebp - 0x1c8], 1
mov word [ebp - 0xb8], 1
jmp 0x435234
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1c8]
jo 0x435c21
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1cc]
jg 0x435404
mov dword [ebp - 4], 0x5e
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x11
jae 0x435271
mov dword [ebp - 0x264], 0
jmp 0x43527d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x154], 0x4008
lea edx, [ebp - 0x114]
push edx
movsx eax, word [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x4352ec
mov dword [ebp - 0x268], 0
jmp 0x4352f8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0xd4]
mov cx, word [edx + ecx*2]
add cx, ax
jo 0x435c21
xor cx, 0x12
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0xd4]
mov word [eax + edx*2], cx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5f
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x43538e
mov dword [ebp - 0x26c], 0
jmp 0x43539a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0xd4]
mov ax, word [ebp - 0x4c]
add ax, word [edx + ecx*2]
jo 0x435c21
mov word [ebp - 0x4c], ax
mov dword [ebp - 4], 0x60
mov cx, word [ebp - 0xf4]
add cx, 1
jo 0x435c21
mov word [ebp - 0xf4], cx
mov dword [ebp - 4], 0x61
cmp word [ebp - 0xf4], 9
jne 0x4353f8
mov dword [ebp - 4], 0x62
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x64
jmp 0x435219
mov dword [ebp - 4], 0x65
mov dx, word [ebp - 0x24]
mov word [ebp - 0x1d4], dx
mov word [ebp - 0x1d0], 1
mov word [ebp - 0xb8], 1
jmp 0x435445
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1d0]
jo 0x435c21
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1d4]
jg 0x435609
mov dword [ebp - 4], 0x66
movsx edx, word [ebp - 0xf4]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x435482
mov dword [ebp - 0x270], 0
jmp 0x43548e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
lea ecx, [ebp - 0x114]
push ecx
movsx edx, word [ebp - 0xb8]
push edx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx edx, word [ebp - 0xf4]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x11
jae 0x4354fa
mov dword [ebp - 0x274], 0
jmp 0x435506
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x80]
mov dx, word [ecx + edx*2]
add dx, ax
jo 0x435c21
xor dx, 0x19
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x80]
mov word [ecx + eax*2], dx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x114]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x67
movsx ecx, word [ebp - 0xf4]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x435596
mov dword [ebp - 0x278], 0
jmp 0x4355a2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x58]
add cx, word [eax + edx*2]
jo 0x435c21
mov word [ebp - 0x58], cx
mov dword [ebp - 4], 0x68
mov dx, word [ebp - 0xf4]
add dx, 1
jo 0x435c21
mov word [ebp - 0xf4], dx
mov dword [ebp - 4], 0x69
cmp word [ebp - 0xf4], 9
jne 0x4355fd
mov dword [ebp - 4], 0x6a
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x6c
jmp 0x43542a
mov dword [ebp - 4], 0x6d
mov ax, word [ebp - 0x4c]
add ax, word [ebp - 0x58]
jo 0x435c21
and ax, 0x1ff
jns 0x43562c
dec ax
or ax, 0xfe00
inc ax
mov word [ebp - 0xb0], ax
mov dword [ebp - 4], 0x6e
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x6f
mov word [ebp - 0xf0], 1
mov dword [ebp - 4], 0x70
mov cx, word [ebp - 0x48]
mov word [ebp - 0x1dc], cx
mov word [ebp - 0x1d8], 1
mov word [ebp - 0xb8], 1
jmp 0x435694
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1d8]
jo 0x435c21
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1dc]
jg 0x435ada
mov dword [ebp - 4], 0x71
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x11
jae 0x4356d1
mov dword [ebp - 0x27c], 0
jmp 0x4356dd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0x11
jae 0x4356ff
mov dword [ebp - 0x280], 0
jmp 0x43570b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x280], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x43572d
mov dword [ebp - 0x284], 0
jmp 0x435739
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x194]
mov esi, dword [ebp - 0x34]
mov cx, word [edx + ecx*2]
xor cx, word [esi + eax*2]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x72
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x435789
mov dword [ebp - 0x288], 0
jmp 0x435795
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x4357b7
mov dword [ebp - 0x28c], 0
jmp 0x4357c3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x190]
mov esi, dword [ebp - 0x80]
mov ax, word [ecx + eax*2]
xor ax, word [esi + edx*2]
mov cx, ax
and cx, 0x1ff
jns 0x4357f3
dec cx
or cx, 0xfe00
inc cx
sub cx, word [ebp - 0xb0]
jo 0x435c21
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
mov word [ebp - 0xec], ax
mov dword [ebp - 4], 0x73
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 3
jne 0x435a31
mov dword [ebp - 4], 0x74
cmp word [ebp - 0xec], 0x10
jge 0x4358e9
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x15c], 0x413e58
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xec]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xf4]
push eax
push 2
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x435964
mov dword [ebp - 4], 0x77
lea eax, [ebp - 0xec]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4002
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0x50]
push eax
movsx ecx, word [ebp - 0xf4]
push ecx
push 2
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x79
cmp word [ebp - 0xf0], 2
jne 0x4359cd
cmp word [ebp - 0xf4], 0x12
jge 0x4359cd
mov dword [ebp - 4], 0x7a
mov ax, word [ebp - 0xf4]
add ax, 1
jo 0x435c21
mov word [ebp - 0xf4], ax
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x50]
push ecx
mov dx, word [ebp - 0xf4]
add dx, 1
jo 0x435c21
movsx eax, dx
push eax
push 1
push 0x415030
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
mov dword [ebp - 4], 0x7d
mov cx, word [ebp - 0xf4]
add cx, 2
jo 0x435c21
mov word [ebp - 0xf4], cx
mov dword [ebp - 4], 0x7e
mov dx, word [ebp - 0xf0]
add dx, 1
jo 0x435c21
mov word [ebp - 0xf0], dx
mov dword [ebp - 4], 0x7f
cmp word [ebp - 0xf0], 3
jne 0x435a2c
mov dword [ebp - 4], 0x80
mov word [ebp - 0xf0], 1
jmp 0x435ace
mov dword [ebp - 4], 0x83
movsx eax, word [ebp - 0xec]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x435a5d
mov dword [ebp - 0x290], 0
jmp 0x435a69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx + ecx*2]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xb8]
push eax
push 1
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x85
jmp 0x435679
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x435c08
jmp 0x435b41
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x19c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x178], ecx
lea edx, [ebp - 0x178]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x8c]
mov dword [ebp - 0x180], edx
lea eax, [ebp - 0x180]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x184], ecx
lea edx, [ebp - 0x184]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x188], eax
lea ecx, [ebp - 0x188]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3