Function at 0x445220
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x401e76
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x174
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x401840
mov edx, dword [ebp + 8]
xor esi, esi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x78], esi
mov dword [ebp - 0x88], esi
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xd8], esi
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x118], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
xor ecx, ecx
cmp word [ebp + 0x10], si
lea eax, [ebp + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL_rtcImmediateIf]
mov dword [ebp - 0xf0], eax
mov eax, 0x4002
sete cl
neg ecx
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xe8], eax
lea edx, [ebp - 0xf8]
mov word [ebp - 0xd0], cx
lea eax, [ebp - 0xe8]
push edx
lea ecx, [ebp - 0xd8]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
mov dword [ebp - 0xe0], 0x4601d8
mov dword [ebp - 0xd8], 0xb
call ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea ecx, [ebp - 0x68]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [ebp + 0x10], eax
call edi
add esp, 0xc
xor ecx, ecx
cmp word [ebp + 0x14], si
lea eax, [ebp + 0x14]
mov dword [ebp - 0xf0], eax
mov eax, 0x4002
sete cl
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xe0], 0x4601da
mov dword [ebp - 0xe8], eax
neg ecx
lea edx, [ebp - 0xf8]
mov word [ebp - 0xd0], cx
lea eax, [ebp - 0xe8]
push edx
lea ecx, [ebp - 0xd8]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
mov dword [ebp - 0xd8], 0xb
call ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0x68]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [ebp + 0x14], eax
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
add esp, 0xc
xor ecx, ecx
call esi
cmp word [ebp + 0xc], ax
jne 0x445aa7
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x12c], eax
mov esi, 8
mov eax, dword [ebp - 0x18]
cmp ax, word [ebp - 0x12c]
jg 0x445649
movsx eax, ax
dec eax
cmp eax, 0x78
mov dword [ebp - 0x188], eax
jb 0x44541a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x2c]
mov edx, dword [0x460178]
mov eax, dword [ebp - 0x188]
push ecx
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e638
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x4099e4
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x18]
xor edx, edx
cmp ax, word [ebp + 0x10]
lea ecx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xd8]
sete dl
neg edx
mov word [ebp - 0xd0], dx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x98]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 6
call edi
mov eax, dword [ebp - 0x188]
add esp, 0x1c
cmp eax, 0x78
jb 0x44551f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x28]
push edx
push 0x40a9b8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x188]
push eax
mov eax, dword [0x460194]
mov edx, dword [eax + ecx*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e640
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov cx, word [ebp - 0x18]
xor eax, eax
cmp cx, word [ebp + 0x10]
lea edx, [ebp - 0x78]
push edx
lea ecx, [ebp - 0xd8]
sete al
neg eax
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0x88]
push ecx
push edx
mov dword [ebp - 0xd8], 0xb
call ebx
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x4453f5
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x134], eax
mov eax, 1
mov dword [ebp - 0x18], eax
cmp ax, word [ebp - 0x134]
jg 0x4458ab
movsx eax, ax
dec eax
cmp eax, 0xa
mov dword [ebp - 0x188], eax
jb 0x44567c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x24]
mov edx, dword [0x4601b0]
mov eax, dword [ebp - 0x188]
push ecx
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e638
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x4099e4
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x18]
xor edx, edx
cmp ax, word [ebp + 0x14]
lea ecx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xd8]
sete dl
neg edx
mov word [ebp - 0xd0], dx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x98]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 6
call edi
mov eax, dword [ebp - 0x188]
add esp, 0x1c
cmp eax, 0xa
jb 0x445781
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x20]
push edx
push 0x40a9b8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x188]
push eax
mov eax, dword [0x4601cc]
mov edx, dword [eax + ecx*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e640
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov cx, word [ebp - 0x18]
xor eax, eax
cmp cx, word [ebp + 0x14]
lea edx, [ebp - 0x78]
push edx
lea ecx, [ebp - 0xd8]
sete al
neg eax
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0x88]
push ecx
push edx
mov dword [ebp - 0xd8], 0xb
call ebx
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x44565a
cmp word [ebp + 0x14], 0
jne 0x445941
mov eax, dword [ebp - 0x1c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x40e64c
push eax
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 0x40e66c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
mov ecx, dword [ebp - 0x2c]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
push eax
push 0x40e674
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov edx, dword [ebp - 0x28]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
push 0x40c880
call edi
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
lea edx, [ebp - 0x40]
push ecx
lea eax, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x38]
push eax
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x18
jmp 0x447026
cmp word [ebp + 0x10], 0
push 0x40e64c
jne 0x4459d7
mov edx, dword [ebp - 0x1c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push edx
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 0x40e66c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
push eax
mov eax, dword [ebp - 0x24]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
push eax
push 0x40e674
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
mov ecx, dword [ebp - 0x20]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
push 0x40c880
call edi
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
lea edx, [ebp - 0x48]
lea eax, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x40]
push eax
lea edx, [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x38]
push edx
push eax
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x18
jmp 0x447026
mov ecx, dword [ebp - 0x1c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push ecx
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 0x40e66c
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
mov edx, dword [ebp - 0x2c]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
push eax
push 0x40e638
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
push eax
mov eax, dword [ebp - 0x24]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
push 0x40e674
call edi
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
mov ecx, dword [ebp - 0x28]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x50]
call esi
push eax
push 0x40e638
call edi
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
mov edx, dword [ebp - 0x20]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x58]
call esi
push eax
push 0x40c880
call edi
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
lea eax, [ebp - 0x58]
lea ecx, [ebp - 0x54]
push eax
lea edx, [ebp - 0x50]
push ecx
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0x48]
push eax
lea edx, [ebp - 0x44]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x38]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
jmp 0x447026
mov ecx, 2
call esi
cmp word [ebp + 0xc], ax
jne 0x445efe
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x13c], eax
mov esi, 8
mov eax, dword [ebp - 0x18]
cmp ax, word [ebp - 0x13c]
jg 0x445c1d
movsx eax, ax
dec eax
cmp eax, 0x78
mov dword [ebp - 0x11c], eax
jb 0x445af2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x28]
push ecx
push 0x40a9b8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [0x460194]
push eax
mov eax, dword [ebp - 0x11c]
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e640
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x18]
xor edx, edx
cmp ax, word [ebp + 0x10]
lea ecx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xd8]
sete dl
neg edx
mov word [ebp - 0xd0], dx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x98]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 6
call edi
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x445acd
mov edx, dword [ebp + 0x14]
mov eax, 1
mov dword [ebp - 0x144], edx
mov dword [ebp - 0x18], eax
cmp ax, word [ebp - 0x144]
jg 0x445d7b
movsx eax, ax
dec eax
cmp eax, 0xa
mov dword [ebp - 0x11c], eax
jb 0x445c50
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x20]
push eax
push 0x40a9b8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x4601cc]
mov edx, dword [ebp - 0x11c]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e640
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dx, word [ebp - 0x18]
xor ecx, ecx
cmp dx, word [ebp + 0x14]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xd8]
sete cl
neg ecx
mov word [ebp - 0xd0], cx
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0xd8], 0xb
call ebx
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x98]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xd8]
push edx
push eax
push 6
call edi
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x445c2e
mov ecx, dword [ebp - 0x1c]
push 0x40e64c
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e690
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x28]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x4099e4
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40e638
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0x20]
push eax
push 0x4099e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x78]
neg eax
neg eax
mov word [ebp - 0xd0], ax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xd8]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
mov edx, dword [ebp - 0x20]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea eax, [ebp - 0x98]
mov dword [ebp - 0x100], edx
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x110], 0x40c880
mov dword [ebp - 0x118], esi
call ebx
push eax
lea eax, [ebp - 0x108]
lea ecx, [ebp - 0xb8]
push eax
push ecx
call ebx
push eax
lea edx, [ebp - 0x118]
lea eax, [ebp - 0xc8]
push edx
push eax
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x38]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xc8]
lea ecx, [ebp - 0xb8]
push eax
lea edx, [ebp - 0xa8]
push ecx
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x98]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xd8]
push eax
push ecx
push esi
call edi
add esp, 0x30
jmp 0x447026
mov ecx, 1
call esi
cmp word [ebp + 0xc], ax
jne 0x4462be
mov edx, dword [ebp + 0x10]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x14c], edx
mov esi, 8
mov eax, dword [ebp - 0x18]
cmp ax, word [ebp - 0x14c]
jg 0x4460ae
movsx eax, ax
dec eax
cmp eax, 0x78
mov dword [ebp - 0x188], eax
jb 0x445f5a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x188]
cmp eax, 0x78
jb 0x445f5a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [0x460178]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e6a8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x460194]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e640
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dx, word [ebp - 0x18]
xor ecx, ecx
cmp dx, word [ebp + 0x10]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xd8]
sete cl
neg ecx
mov word [ebp - 0xd0], cx
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0xd8], 0xb
call ebx
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x38]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x28
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x445f24
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x154], eax
mov eax, 1
mov dword [ebp - 0x18], eax
cmp ax, word [ebp - 0x154]
jg 0x446246
movsx eax, ax
dec eax
cmp eax, 0xa
mov dword [ebp - 0x188], eax
jb 0x4460f2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x188]
cmp eax, 0xa
jb 0x4460f2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x24]
mov edx, dword [0x4601b0]
mov eax, dword [ebp - 0x188]
push ecx
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e6a8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [0x4601cc]
push eax
mov eax, dword [ebp - 0x188]
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e6b4
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x18]
xor edx, edx
cmp ax, word [ebp + 0x14]
lea ecx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xd8]
sete dl
neg edx
mov word [ebp - 0xd0], dx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x98]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xd8]
push edx
push eax
push 6
call edi
mov eax, 1
add esp, 0x28
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x4460bf
mov ecx, dword [ebp - 0x1c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x40e6c8
push ecx
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 0x40e6dc
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
mov edx, dword [ebp - 0x2c]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
push eax
push 0x40e6ec
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
push eax
mov eax, dword [ebp - 0x24]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x44]
lea edx, [ebp - 0x40]
push ecx
lea eax, [ebp - 0x3c]
push edx
lea ecx, [ebp - 0x38]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
jmp 0x447026
mov ecx, 3
call esi
cmp word [ebp + 0xc], ax
jne 0x4464c1
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x15c], edx
mov esi, 8
mov eax, dword [ebp - 0x18]
cmp ax, word [ebp - 0x15c]
jg 0x44646e
movsx eax, ax
dec eax
cmp eax, 0xa
mov dword [ebp - 0x188], eax
jb 0x44631a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x188]
cmp eax, 0xa
jb 0x44631a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x24]
mov ecx, dword [0x4601b0]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e6a8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x4601cc]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e6b4
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dx, word [ebp - 0x18]
xor ecx, ecx
cmp dx, word [ebp + 0x14]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xd8]
sete cl
neg ecx
mov word [ebp - 0xd0], cx
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0xd8], 0xb
call ebx
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x38]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x28
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x4462e4
mov eax, dword [ebp - 0x1c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x40e700
push eax
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
push 0x40e6ec
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
jmp 0x447026
mov ecx, 4
call esi
cmp word [ebp + 0xc], ax
jne 0x446a28
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x164], ecx
mov esi, 8
mov eax, dword [ebp - 0x18]
cmp ax, word [ebp - 0x164]
jg 0x446616
movsx eax, ax
dec eax
cmp eax, 0x78
mov dword [ebp - 0x11c], eax
jb 0x44650c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x460178]
mov ecx, dword [ebp - 0x11c]
push edx
mov edx, dword [eax + ecx*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e638
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x4099e4
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov cx, word [ebp - 0x18]
xor eax, eax
cmp cx, word [ebp + 0x10]
lea edx, [ebp - 0x78]
push edx
lea ecx, [ebp - 0xd8]
sete al
neg eax
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0x88]
push ecx
push edx
mov dword [ebp - 0xd8], 0xb
call ebx
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x4464e7
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x16c], eax
mov eax, 1
cmp ax, word [ebp - 0x16c]
mov dword [ebp - 0x18], eax
jg 0x446900
movsx eax, ax
dec eax
cmp eax, 0xa
mov dword [ebp - 0x188], eax
jb 0x446649
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x4601b0]
mov edx, dword [ebp - 0x188]
mov dword [ebp - 0xd8], 0x4008
lea eax, [ecx + edx*4]
lea ecx, [ebp - 0xd8]
lea edx, [ebp - 0x68]
push ecx
push edx
mov dword [ebp - 0xd0], eax
call dword [sym.imp.MSVBVM60.DLL_rtcUpperCaseVar]
lea eax, [ebp - 0x68]
push 1
lea ecx, [ebp - 0xe8]
push eax
push ecx
lea edx, [ebp - 0x78]
push 0
push edx
mov dword [ebp - 0xe0], 0x40e720
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xf8], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
mov word [ebp - 0x120], ax
call edi
mov eax, dword [ebp - 0x188]
add esp, 0xc
cmp word [ebp - 0x120], 0
je 0x446795
cmp eax, 0xa
jb 0x4466f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
cmp dword [ebp - 0x188], 0xa
jb 0x446708
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x24]
mov ecx, dword [0x4601b0]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40aeb4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x4601cc]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e72c
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dword [ebp - 0xe0], 0x4099e4
jmp 0x446837
cmp eax, 0xa
jb 0x4467a0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
cmp dword [ebp - 0x188], 0xa
jb 0x4467af
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x24]
mov ecx, dword [0x4601b0]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e73c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x4601cc]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e6b4
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dword [ebp - 0xe0], 0x40a9b8
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dx, word [ebp - 0x18]
xor ecx, ecx
cmp dx, word [ebp + 0x14]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xd8]
sete cl
neg ecx
mov word [ebp - 0xd0], cx
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0xd8], 0xb
call ebx
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x38]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x28
add ax, word [ebp - 0x18]
jo 0x4470f4
jmp 0x446624
mov eax, dword [ebp - 0x2c]
push 0x40e550
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e564
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x1c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, dword [ebp - 0x24]
push 0x40e6ec
push edx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x78], esi
mov dword [ebp - 0xe0], 0x4099e4
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0x24]
push eax
push 0x4099e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x78]
inc eax
lea edx, [ebp - 0x68]
neg eax
mov word [ebp - 0xd0], ax
push ecx
lea eax, [ebp - 0xd8]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x3c]
lea eax, [ebp - 0x38]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x98]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xd8]
push edx
push eax
push 6
call edi
add esp, 0x28
jmp 0x447026
mov ecx, 5
call esi
cmp word [ebp + 0xc], ax
jne 0x447026
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x174], ecx
mov esi, 8
cmp ax, word [ebp - 0x174]
jg 0x446dd2
movsx eax, ax
dec eax
cmp eax, 0x78
mov dword [ebp - 0x188], eax
jb 0x446a73
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x2c]
mov eax, dword [0x460178]
mov ecx, dword [ebp - 0x188]
push edx
mov edx, dword [eax + ecx*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e638
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x4099e4
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov cx, word [ebp - 0x18]
xor eax, eax
cmp cx, word [ebp + 0x10]
lea edx, [ebp - 0x78]
push edx
lea ecx, [ebp - 0xd8]
sete al
neg eax
mov word [ebp - 0xd0], ax
lea eax, [ebp - 0x68]
push eax
lea edx, [ebp - 0x88]
push ecx
push edx
mov dword [ebp - 0xd8], 0xb
call ebx
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xa8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, dword [ebp - 0x188]
add esp, 0x1c
cmp eax, 0x78
jb 0x446b77
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x460194]
mov ecx, dword [ebp - 0x188]
mov edx, dword [eax + ecx*4]
push edx
push 0x4099e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
mov eax, dword [ebp - 0x188]
jne 0x446c9c
cmp eax, 0x78
jb 0x446baa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x460178]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e638
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x4099e4
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dx, word [ebp - 0x18]
xor ecx, ecx
cmp dx, word [ebp + 0x10]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xd8]
sete cl
neg ecx
mov word [ebp - 0xd0], cx
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0xd8], 0xb
call ebx
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xa8]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0x98]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xd8]
push edx
push eax
jmp 0x446db4
cmp eax, 0x78
jb 0x446ca7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x28]
push ecx
push 0x40a9b8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [0x460194]
push eax
mov eax, dword [ebp - 0x188]
mov ecx, dword [edx + eax*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e640
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x18]
xor edx, edx
cmp ax, word [ebp + 0x10]
lea ecx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0xd8]
sete dl
neg edx
mov word [ebp - 0xd0], dx
lea edx, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x88]
push eax
push ecx
mov dword [ebp - 0xd8], 0xb
call ebx
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xa8]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0x98]
push eax
lea edx, [ebp - 0x78]
push ecx
lea eax, [ebp - 0x68]
push edx
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 6
call edi
mov eax, 1
add esp, 0x1c
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x446a51
mov edx, dword [ebp + 0x14]
mov eax, 1
mov dword [ebp - 0x17c], edx
mov dword [ebp - 0x18], eax
cmp ax, word [ebp - 0x17c]
jg 0x446f6a
movsx eax, ax
dec eax
cmp eax, 0xa
mov dword [ebp - 0x188], eax
jb 0x446e16
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x188]
cmp eax, 0xa
jb 0x446e16
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x24]
mov ecx, dword [0x4601b0]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40e6a8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x4601cc]
mov edx, dword [ebp - 0x188]
push eax
mov eax, dword [ecx + edx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x98], esi
mov dword [ebp - 0xf0], 0x40e6b4
mov dword [ebp - 0xf8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xe8]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0xe0], 0x40a9b8
mov dword [ebp - 0xe8], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dx, word [ebp - 0x18]
xor ecx, ecx
cmp dx, word [ebp + 0x14]
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xd8]
sete cl
neg ecx
mov word [ebp - 0xd0], cx
lea ecx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0x88]
push edx
push eax
mov dword [ebp - 0xd8], 0xb
call ebx
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xa8]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x3c]
lea edx, [ebp - 0x38]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0x98]
push ecx
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xd8]
push ecx
push edx
push 6
call edi
mov eax, 1
add esp, 0x28
add ax, word [ebp - 0x18]
jo 0x4470f4
mov dword [ebp - 0x18], eax
jmp 0x446de3
mov eax, dword [ebp - 0x1c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x40e64c
push eax
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call edi
push eax
push 0x40d70c
call ebx
mov edx, eax
lea ecx, [ebp - 0x3c]
call edi
mov ecx, dword [ebp - 0x2c]
push eax
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x40]
call edi
push eax
push 0x40e578
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
mov edx, dword [ebp - 0x28]
push eax
push edx
call ebx
mov edx, eax
lea ecx, [ebp - 0x48]
call edi
push eax
push 0x40e564
call ebx
mov edx, eax
lea ecx, [ebp - 0x4c]
call edi
push eax
mov eax, dword [ebp - 0x1c]
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x50]
call edi
push eax
push 0x40e6ec
call ebx
mov edx, eax
lea ecx, [ebp - 0x54]
call edi
mov ecx, dword [ebp - 0x24]
push eax
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x30]
call edi
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x50]
push edx
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x44]
push edx
lea ecx, [ebp - 0x40]
push eax
lea edx, [ebp - 0x3c]
push ecx
lea eax, [ebp - 0x38]
push edx
push eax
push esi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x24
mov edx, dword [ebp - 0x30]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
xor eax, eax
push 0x4470de
mov word [0x4601da], ax
mov word [0x4601d8], ax
jmp 0x4470b9
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1c]
call esi
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x30]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop