Function at 0x41c3fa
Capabilities:
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x4027e6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x404
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401cd8
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call sub.MSVBVM60.DLL___vbaOnError
mov dword [ebp - 4], 3
cmp word [0x449050], 0xffff
jne 0x41c463
jmp 0x41ff6b
mov dword [ebp - 4], 6
push 0x404fc0
push 0x406004
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xf0]
push eax
call fcn.0043db20
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
mov dword [ebp - 4], 7
push 0
push 0x2a
push 0
push 0xf
push 2
push 0xc
lea eax, [ebp - 0xa0]
push eax
push 0x10
push 0x880
call sub.MSVBVM60.DLL___vbaRedim
add esp, 0x24
mov dword [ebp - 4], 8
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaUbound
mov ecx, eax
sub ecx, 1
jo 0x4207cf
call sub.MSVBVM60.DLL___vbaI2I4
mov word [ebp - 0x44], ax
mov dword [ebp - 4], 9
and word [ebp - 0xac], 0
mov dword [ebp - 4], 0xa
mov ax, word [ebp - 0x40]
sub ax, word [ebp - 0x94]
neg ax
sbb eax, eax
inc eax
neg eax
sub ax, word [ebp - 0x50]
neg ax
sbb eax, eax
inc eax
neg eax
sub ax, word [ebp - 0xbc]
neg ax
sbb eax, eax
inc eax
neg eax
neg ax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x38], ax
mov dword [ebp - 4], 0xb
mov word [ebp - 0xe4], 1
mov dword [ebp - 4], 0xc
and word [ebp - 0x64], 0
mov dword [ebp - 4], 0xd
and word [ebp - 0x48], 0
mov dword [ebp - 4], 0xe
and word [ebp - 0x78], 0
mov dword [ebp - 4], 0xf
and word [ebp - 0x9c], 0
mov dword [ebp - 4], 0x10
and word [ebp - 0x5c], 0
mov dword [ebp - 4], 0x11
cmp dword [0x449188], 0
jne 0x41c5b8
push 0x449188
push 0x4061ac
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x300], 0x449188
jmp 0x41c5c2
mov dword [ebp - 0x300], 0x449188
mov eax, dword [ebp - 0x300]
mov eax, dword [eax]
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x22c]
push eax
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
push dword [ebp - 0x250]
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41c619
push 0x24
push 0x40619c
push dword [ebp - 0x250]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x304], eax
jmp 0x41c620
and dword [ebp - 0x304], 0
mov ecx, dword [ebp - 0x22c]
call sub.MSVBVM60.DLL___vbaI2I4
mov word [ebp - 0x5c], ax
mov dword [ebp - 4], 0x12
and word [ebp - 0xd0], 0
mov dword [ebp - 4], 0x13
and word [ebp - 0xce], 0
mov dword [ebp - 4], 0x14
and word [ebp - 0xcc], 0
mov dword [ebp - 4], 0x15
lea eax, [ebp - 0xd8]
push eax
call fcn.004401a1
mov edx, eax
lea ecx, [ebp - 0x8c]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0x16
mov word [ebp - 0xd0], 0x17
mov dword [ebp - 4], 0x17
mov word [ebp - 0xce], 0x3b
mov dword [ebp - 4], 0x18
and word [ebp - 0xcc], 0
mov dword [ebp - 4], 0x19
lea eax, [ebp - 0xd8]
push eax
call fcn.004401a1
mov edx, eax
lea ecx, [ebp - 0x88]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0x1a
movsx eax, word [0x44905c]
test eax, eax
je 0x41ce57
mov dword [ebp - 4], 0x1b
push 1
call sub.MSVBVM60.DLL_rtcSetCurrentCalendar
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x22c], 0x21
lea eax, [ebp - 0x22c]
push eax
call fcn.004404b3
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaI2Str
mov word [ebp - 0xa4], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
mov dword [ebp - 4], 0x1d
movsx eax, word [ebp - 0xa4]
test eax, eax
jne 0x41c8fe
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 0x404dd4
mov dword [ebp - 0x1e0], 8
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1f0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x7c]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 3
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x10
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 0x403e9c
mov dword [ebp - 0x1e0], 8
mov dword [ebp - 0x1f8], 0x403e9c
mov dword [ebp - 0x200], 8
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1f0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x150]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x210]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x160]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 5
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x18
jmp 0x41cce8
mov dword [ebp - 4], 0x20
cmp word [ebp - 0xa4], 1
jne 0x41cb07
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x1d8], 0x4053c0
mov dword [ebp - 0x1e0], 8
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1e8], 0x403e9c
mov dword [ebp - 0x1f0], 8
lea eax, [ebp - 0x1e0]
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x200]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x150]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrErrVarCopy
mov edx, eax
lea ecx, [ebp - 0x7c]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 5
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x18
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x1b8], 0x403e9c
mov dword [ebp - 0x1c0], 8
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
mov dword [ebp - 0x1f8], 0x403e9c
mov dword [ebp - 0x200], 8
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1f0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x150]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x210]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x160]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrErrVarCopy
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 6
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x1c
jmp 0x41cce8
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x1b8], 0x403e9c
mov dword [ebp - 0x1c0], 8
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
mov dword [ebp - 0x1f8], 0x4045f8
mov dword [ebp - 0x200], 8
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1f0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x150]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x7c]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x14
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x1b8], 0x403e9c
mov dword [ebp - 0x1c0], 8
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
mov dword [ebp - 0x1f8], 0x403e9c
mov dword [ebp - 0x200], 8
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1f0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x150]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x210]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x160]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 5
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x18
mov dword [ebp - 4], 0x27
lea eax, [ebp - 0x2c]
push eax
push dword [ebp - 0x7c]
lea eax, [ebp - 0x120]
push eax
call fcn.00445d8e
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0x28
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x24]
lea eax, [ebp - 0x120]
push eax
call fcn.00445d8e
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0x29
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x4207cf
mov word [ebp - 0xd6], ax
mov dword [ebp - 4], 0x2a
mov ax, word [ebp - 0x2a]
mov word [ebp - 0xd2], ax
mov dword [ebp - 4], 0x2b
mov ax, word [ebp - 0x28]
mov word [ebp - 0xd8], ax
mov dword [ebp - 4], 0x2c
and word [ebp - 0xd0], 0
mov dword [ebp - 4], 0x2d
and word [ebp - 0xce], 0
mov dword [ebp - 4], 0x2e
and word [ebp - 0xcc], 0
mov dword [ebp - 4], 0x2f
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00405094
call sub.MSVBVM60.DLL___vbaSetSystemError
mov dword [ebp - 4], 0x30
mov ax, word [ebp - 0x84]
add ax, 1
jo 0x4207cf
mov word [ebp - 0xd6], ax
mov dword [ebp - 4], 0x31
mov ax, word [ebp - 0x82]
mov word [ebp - 0xd2], ax
mov dword [ebp - 4], 0x32
mov ax, word [ebp - 0x80]
mov word [ebp - 0xd8], ax
mov dword [ebp - 4], 0x33
mov word [ebp - 0xd0], 0x17
mov dword [ebp - 4], 0x34
mov word [ebp - 0xce], 0x3b
mov dword [ebp - 4], 0x35
and word [ebp - 0xcc], 0
mov dword [ebp - 4], 0x36
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00405094
call sub.MSVBVM60.DLL___vbaSetSystemError
jmp 0x41d00e
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1c0], 2
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0xd6], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0x39
mov word [ebp - 0xd2], 1
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0xd8], ax
mov dword [ebp - 4], 0x3b
and word [ebp - 0xd0], 0
mov dword [ebp - 4], 0x3c
and word [ebp - 0xce], 0
mov dword [ebp - 4], 0x3d
and word [ebp - 0xcc], 0
mov dword [ebp - 4], 0x3e
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00405094
call sub.MSVBVM60.DLL___vbaSetSystemError
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1c0], 2
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0xd6], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0x40
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0xd2], ax
mov dword [ebp - 4], 0x41
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0xd8], ax
mov dword [ebp - 4], 0x42
mov word [ebp - 0xd0], 0x17
mov dword [ebp - 4], 0x43
mov word [ebp - 0xce], 0x3b
mov dword [ebp - 4], 0x44
and word [ebp - 0xcc], 0
mov dword [ebp - 4], 0x45
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.00405094
call sub.MSVBVM60.DLL___vbaSetSystemError
mov dword [ebp - 4], 0x47
fld qword [ebp - 0xb4]
push ecx
push ecx
fstp qword [esp]
call sub.MSVBVM60.DLL___vbaStrDate
mov edx, eax
lea ecx, [ebp - 0x58]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0x48
fld qword [ebp - 0x34]
push ecx
push ecx
fstp qword [esp]
call sub.MSVBVM60.DLL___vbaStrDate
mov edx, eax
lea ecx, [ebp - 0x4c]
call sub.MSVBVM60.DLL___vbaStrMove
mov dword [ebp - 4], 0x49
mov word [ebp - 0x270], 0x2a
mov word [ebp - 0x26c], 1
and word [ebp - 0x38], 0
jmp 0x41d082
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x26c]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x270]
jg 0x41d124
mov dword [ebp - 4], 0x4a
mov word [ebp - 0x278], 0xf
mov word [ebp - 0x274], 1
and word [ebp - 0x40], 0
jmp 0x41d0c8
mov ax, word [ebp - 0x40]
add ax, word [ebp - 0x274]
jo 0x4207cf
mov word [ebp - 0x40], ax
mov ax, word [ebp - 0x40]
cmp ax, word [ebp - 0x278]
jg 0x41d118
mov dword [ebp - 4], 0x4b
mov dword [ebp - 0x1c0], 1
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0x40]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarMove
mov dword [ebp - 4], 0x4c
jmp 0x41d0b3
mov dword [ebp - 4], 0x4d
jmp 0x41d06d
mov dword [ebp - 4], 0x4e
and dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1c0], 0x8002
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
call sub.MSVBVM60.DLL___vbaVarTstNe
movsx eax, ax
test eax, eax
je 0x41d27a
mov dword [ebp - 4], 0x4f
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x1c0], 2
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x280], ax
mov word [ebp - 0x27c], 1
and word [ebp - 0x38], 0
jmp 0x41d1d1
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x27c]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x280]
jg 0x41d27a
mov dword [ebp - 4], 0x50
mov word [ebp - 0x288], 4
mov word [ebp - 0x284], 1
and word [ebp - 0x40], 0
jmp 0x41d217
mov ax, word [ebp - 0x40]
add ax, word [ebp - 0x284]
jo 0x4207cf
mov word [ebp - 0x40], ax
mov ax, word [ebp - 0x40]
cmp ax, word [ebp - 0x288]
jg 0x41d26e
mov dword [ebp - 4], 0x51
or dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x1c0], 2
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0x40]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarMove
mov dword [ebp - 4], 0x52
jmp 0x41d202
mov dword [ebp - 4], 0x53
jmp 0x41d1bc
mov dword [ebp - 4], 0x55
mov word [ebp - 0x290], 0x2a
mov word [ebp - 0x28c], 1
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x38], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
jmp 0x41d2e9
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x28c]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x290]
jg 0x41d392
mov dword [ebp - 4], 0x56
mov word [ebp - 0x298], 4
mov word [ebp - 0x294], 1
and word [ebp - 0x40], 0
jmp 0x41d32f
mov ax, word [ebp - 0x40]
add ax, word [ebp - 0x294]
jo 0x4207cf
mov word [ebp - 0x40], ax
mov ax, word [ebp - 0x40]
cmp ax, word [ebp - 0x298]
jg 0x41d386
mov dword [ebp - 4], 0x57
or dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x1c0], 2
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0x40]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarMove
mov dword [ebp - 4], 0x58
jmp 0x41d31a
mov dword [ebp - 4], 0x59
jmp 0x41d2d4
mov dword [ebp - 4], 0x5a
mov word [ebp - 0x40], 1
mov dword [ebp - 4], 0x5b
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x2a0], ax
mov word [ebp - 0x29c], 1
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1f0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x38], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
jmp 0x41d448
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x29c]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x2a0]
jg 0x41d4bc
mov dword [ebp - 4], 0x5c
mov ax, word [ebp - 0x40]
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 2
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x38]
push eax
push 0
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarMove
mov dword [ebp - 4], 0x5d
mov ax, word [ebp - 0x40]
add ax, 1
jo 0x4207cf
mov word [ebp - 0x40], ax
mov dword [ebp - 4], 0x5e
jmp 0x41d433
mov dword [ebp - 4], 0x5f
mov ax, word [ebp - 0x5c]
mov word [ebp - 0x2a8], ax
mov word [ebp - 0x2a4], 1
mov word [ebp - 0xc8], 1
jmp 0x41d4fd
mov ax, word [ebp - 0xc8]
add ax, word [ebp - 0x2a4]
jo 0x4207cf
mov word [ebp - 0xc8], ax
mov ax, word [ebp - 0xc8]
cmp ax, word [ebp - 0x2a8]
jg 0x41fe46
mov dword [ebp - 4], 0x60
cmp dword [0x449188], 0
jne 0x41d53c
push 0x449188
push 0x4061ac
call sub.MSVBVM60.DLL___vbaNew2
mov dword [ebp - 0x308], 0x449188
jmp 0x41d546
mov dword [ebp - 0x308], 0x449188
mov eax, dword [ebp - 0x308]
mov eax, dword [eax]
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1c0], 0x4002
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
push dword [ebp - 0x250]
call dword [eax + 0x1c]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41d5ba
push 0x1c
push 0x40619c
push dword [ebp - 0x250]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x30c], eax
jmp 0x41d5c1
and dword [ebp - 0x30c], 0
push 0x404628
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaCastObjVar
push eax
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0x61
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41d634
push 0x80
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x310], eax
jmp 0x41d63b
and dword [ebp - 0x310], 0
fld qword [ebp - 0x234]
fcomp qword [ebp - 0xb4]
fnstsw ax
sahf
jb 0x41d658
mov dword [ebp - 0x314], 1
jmp 0x41d65f
and dword [ebp - 0x314], 0
lea eax, [ebp - 0x23c]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41d6a5
push 0x80
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x318], eax
jmp 0x41d6ac
and dword [ebp - 0x318], 0
fld qword [ebp - 0x23c]
fcomp qword [ebp - 0x34]
fnstsw ax
sahf
ja 0x41d6c6
mov dword [ebp - 0x31c], 1
jmp 0x41d6cd
and dword [ebp - 0x31c], 0
lea eax, [ebp - 0x244]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jge 0x41d713
push 0x80
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x258]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x320], eax
jmp 0x41d71a
and dword [ebp - 0x320], 0
fld qword [ebp - 0x244]
fcomp qword [ebp - 0xb4]
fnstsw ax
sahf
jae 0x41d737
mov dword [ebp - 0x324], 1
jmp 0x41d73e
and dword [ebp - 0x324], 0
lea eax, [ebp - 0x24c]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x78]
fnclex
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jge 0x41d77e
push 0x78
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x25c]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x328], eax
jmp 0x41d785
and dword [ebp - 0x328], 0
fld qword [ebp - 0x24c]
fcomp qword [ebp - 0xb4]
fnstsw ax
sahf
jb 0x41d7a2
mov dword [ebp - 0x32c], 1
jmp 0x41d7a9
and dword [ebp - 0x32c], 0
push dword [ebp - 0x3c]
lea eax, [ebp - 0x110]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
lea eax, [ebp - 0x110]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1c0], 0x4009
lea eax, [ebp - 0x1c0]
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
push 0x404628
push dword [ebp - 0x110]
call sub.MSVBVM60.DLL___vbaCastObj
push eax
lea eax, [ebp - 0x3c]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov esi, dword [ebp - 0x314]
neg esi
mov eax, dword [ebp - 0x31c]
neg eax
and si, ax
mov eax, dword [ebp - 0x324]
neg eax
mov ecx, dword [ebp - 0x32c]
neg ecx
and ax, cx
or si, ax
push dword [ebp - 0xf0]
push 0x405dc8
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
neg eax
neg eax
and si, ax
mov word [ebp - 0x260], si
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x110]
call sub.MSVBVM60.DLL___vbaFreeObj
movsx eax, word [ebp - 0x260]
test eax, eax
je 0x41fe3a
mov dword [ebp - 4], 0x62
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41d8be
push 0x80
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x330], eax
jmp 0x41d8c5
and dword [ebp - 0x330], 0
fld qword [ebp - 0x234]
fcomp qword [ebp - 0xb4]
fnstsw ax
sahf
jb 0x41d8e2
mov dword [ebp - 0x334], 1
jmp 0x41d8e9
and dword [ebp - 0x334], 0
lea eax, [ebp - 0x23c]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x78]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41d929
push 0x78
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x338], eax
jmp 0x41d930
and dword [ebp - 0x338], 0
fld qword [ebp - 0x23c]
fcomp qword [ebp - 0xb4]
fnstsw ax
sahf
jae 0x41d94d
mov dword [ebp - 0x33c], 1
jmp 0x41d954
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x334]
or eax, dword [ebp - 0x33c]
test eax, eax
jne 0x41db81
mov dword [ebp - 4], 0x63
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x78]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41d9af
push 0x78
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x340], eax
jmp 0x41d9b6
and dword [ebp - 0x340], 0
fld qword [ebp - 0x234]
fstp qword [ebp - 0x118]
mov dword [ebp - 0x120], 7
push 1
push 1
lea eax, [ebp - 0x120]
push eax
push 0x406160
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL_rtcDatePart
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x48], ax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0xc
mov dword [ebp - 4], 0x64
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x64], ax
mov dword [ebp - 4], 0x65
push 1
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x58]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41da71
push 0x58
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x344], eax
jmp 0x41da78
and dword [ebp - 0x344], 0
mov dword [ebp - 4], 0x66
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x78]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41dabf
push 0x78
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x348], eax
jmp 0x41dac6
and dword [ebp - 0x348], 0
fld qword [ebp - 0x234]
fcomp qword [ebp - 0x34]
fnstsw ax
sahf
ja 0x41db20
mov dword [ebp - 4], 0x67
push dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41db17
push 0x50
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x34c], eax
jmp 0x41db1e
and dword [ebp - 0x34c], 0
jmp 0x41db7c
mov dword [ebp - 4], 0x69
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41db75
push 0x50
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x350], eax
jmp 0x41db7c
and dword [ebp - 0x350], 0
jmp 0x41dc46
mov dword [ebp - 4], 0x6c
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41dbc8
push 0x54
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x354], eax
jmp 0x41dbcf
and dword [ebp - 0x354], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
lea eax, [ebp - 0x1c0]
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
call sub.MSVBVM60.DLL___vbaI2Var
mov word [ebp - 0x64], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0x6e
or word [ebp - 0xb8], 0xffff
mov dword [ebp - 4], 0x6f
mov word [ebp - 0x40], 1
mov dword [ebp - 4], 0x70
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0x40]
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061dc
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41de7b
mov dword [ebp - 4], 0x71
mov ax, word [ebp - 0x44]
sub ax, 1
jo 0x4207cf
cmp word [ebp - 0x40], ax
jne 0x41de5d
mov dword [ebp - 4], 0x72
push 0
push 0x2a
push 0
mov ax, word [ebp - 0x44]
add ax, 5
jo 0x4207cf
movsx eax, ax
push eax
push 2
push 0xc
lea eax, [ebp - 0xa0]
push eax
push 0x10
push 0x880
call sub.MSVBVM60.DLL___vbaRedimPreserve
add esp, 0x24
mov dword [ebp - 4], 0x73
mov word [ebp - 0x2b0], 0x2a
mov word [ebp - 0x2ac], 1
and word [ebp - 0x38], 0
jmp 0x41dd7a
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x2ac]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x2b0]
jg 0x41de44
mov dword [ebp - 4], 0x74
mov ax, word [ebp - 0x44]
add ax, 5
jo 0x4207cf
mov word [ebp - 0x2b8], ax
mov word [ebp - 0x2b4], 1
mov ax, word [ebp - 0x44]
add ax, 1
jo 0x4207cf
mov word [ebp - 0xbc], ax
jmp 0x41dde2
mov ax, word [ebp - 0xbc]
add ax, word [ebp - 0x2b4]
jo 0x4207cf
mov word [ebp - 0xbc], ax
mov ax, word [ebp - 0xbc]
cmp ax, word [ebp - 0x2b8]
jg 0x41de38
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x1c0], 1
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0xbc]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarMove
mov dword [ebp - 4], 0x76
jmp 0x41ddc7
mov dword [ebp - 4], 0x77
jmp 0x41dd65
mov dword [ebp - 4], 0x78
mov ax, word [ebp - 0x44]
add ax, 5
jo 0x4207cf
mov word [ebp - 0x44], ax
mov dword [ebp - 4], 0x7a
mov ax, word [ebp - 0x40]
add ax, 1
jo 0x4207cf
mov word [ebp - 0x40], ax
jmp 0x41dc62
mov dword [ebp - 4], 0x7c
mov ax, word [ebp - 0x40]
mov word [ebp - 0x9c], ax
mov dword [ebp - 4], 0x7d
push dword [ebp - 0x3c]
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0x9c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetObjAddref
mov dword [ebp - 4], 0x7e
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x4c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41df01
push 0x4c
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x358], eax
jmp 0x41df08
and dword [ebp - 0x358], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0xc4], ax
mov dword [ebp - 4], 0x7f
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x5c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41df5d
push 0x5c
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x35c], eax
jmp 0x41df64
and dword [ebp - 0x35c], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0xc0], ax
mov dword [ebp - 4], 0x80
cmp word [ebp - 0x40], 1
je 0x41e792
cmp word [ebp - 0xc4], 1
jg 0x41df9d
movsx eax, word [ebp - 0xc0]
test eax, eax
je 0x41e792
mov dword [ebp - 4], 0x81
mov ax, word [ebp - 0x40]
mov word [ebp - 0x2c0], ax
mov word [ebp - 0x2bc], 1
mov word [ebp - 0x6c], 1
jmp 0x41dfd5
mov ax, word [ebp - 0x6c]
add ax, word [ebp - 0x2bc]
jo 0x4207cf
mov word [ebp - 0x6c], ax
mov ax, word [ebp - 0x6c]
cmp ax, word [ebp - 0x2c0]
jg 0x41e792
mov dword [ebp - 4], 0x82
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061ec
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41e786
mov dword [ebp - 4], 0x83
push 0x404628
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaCastObjVar
push eax
lea eax, [ebp - 0x60]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0x84
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
push dword [ebp - 0x60]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e0ed
push 0x54
push 0x404628
push dword [ebp - 0x60]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x360], eax
jmp 0x41e0f4
and dword [ebp - 0x360], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0x1e8], ax
mov dword [ebp - 0x1f0], 0x8002
mov ax, word [ebp - 0x64]
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaVarTstEq
mov word [ebp - 0x254], ax
lea ecx, [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaFreeVar
movsx eax, word [ebp - 0x254]
test eax, eax
je 0x41e786
mov dword [ebp - 4], 0x85
mov ax, word [ebp - 0x40]
add ax, 1
jo 0x4207cf
mov word [ebp - 0x2c8], ax
mov word [ebp - 0x2c4], 1
mov ax, word [ebp - 0x6c]
add ax, 1
jo 0x4207cf
mov word [ebp - 0xdc], ax
jmp 0x41e1f0
mov ax, word [ebp - 0xdc]
add ax, word [ebp - 0x2c4]
jo 0x4207cf
mov word [ebp - 0xdc], ax
mov ax, word [ebp - 0xdc]
cmp ax, word [ebp - 0x2c8]
jg 0x41e786
mov dword [ebp - 4], 0x86
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0xdc]
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061ec
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41e77a
mov dword [ebp - 4], 0x87
push 0x404628
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0xdc]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaCastObjVar
push eax
lea eax, [ebp - 0x90]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0x88
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
push dword [ebp - 0x90]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e31d
push 0x54
push 0x404628
push dword [ebp - 0x90]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x364], eax
jmp 0x41e324
and dword [ebp - 0x364], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0x1e8], ax
mov dword [ebp - 0x1f0], 0x8002
mov ax, word [ebp - 0x64]
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x1c0]
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaVarTstEq
mov word [ebp - 0x254], ax
lea ecx, [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaFreeVar
movsx eax, word [ebp - 0x254]
test eax, eax
je 0x41e77a
mov dword [ebp - 4], 0x89
lea eax, [ebp - 0x23c]
push eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
push dword [ebp - 0x60]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e416
push 0x80
push 0x404628
push dword [ebp - 0x60]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x368], eax
jmp 0x41e41d
and dword [ebp - 0x368], 0
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
push dword [ebp - 0x90]
call dword [eax + 0x3c]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41e466
push 0x3c
push 0x404628
push dword [ebp - 0x90]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x36c], eax
jmp 0x41e46d
and dword [ebp - 0x36c], 0
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
push dword [ebp - 0x60]
call dword [eax + 0x3c]
fnclex
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jge 0x41e4ad
push 0x3c
push 0x404628
push dword [ebp - 0x60]
push dword [ebp - 0x258]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x370], eax
jmp 0x41e4b4
and dword [ebp - 0x370], 0
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x90]
mov eax, dword [eax]
push dword [ebp - 0x90]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
jge 0x41e503
push 0x80
push 0x404628
push dword [ebp - 0x90]
push dword [ebp - 0x25c]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x374], eax
jmp 0x41e50a
and dword [ebp - 0x374], 0
fld qword [ebp - 0x234]
fcomp qword [ebp - 0x23c]
fnstsw ax
sahf
ja 0x41e527
mov dword [ebp - 0x378], 1
jmp 0x41e52e
and dword [ebp - 0x378], 0
mov ax, word [ebp - 0x224]
xor ecx, ecx
cmp ax, word [ebp - 0x228]
setg cl
neg ecx
mov eax, dword [ebp - 0x378]
neg eax
and cx, ax
movsx eax, cx
test eax, eax
je 0x41e77a
mov dword [ebp - 4], 0x8a
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x60]
mov eax, dword [eax]
push dword [ebp - 0x60]
call dword [eax + 0x4c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e5a0
push 0x4c
push 0x404628
push dword [ebp - 0x60]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x37c], eax
jmp 0x41e5a7
and dword [ebp - 0x37c], 0
mov ax, word [ebp - 0x64]
add ax, word [ebp - 0x224]
jo 0x4207cf
sub ax, 1
jo 0x4207cf
mov word [ebp - 0x2d0], ax
mov word [ebp - 0x2cc], 1
mov ax, word [ebp - 0x64]
add ax, 1
jo 0x4207cf
mov word [ebp - 0x38], ax
jmp 0x41e5fb
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x2cc]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x2d0]
jg 0x41e6c0
mov dword [ebp - 4], 0x8b
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0xdc]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetVarAddref
mov dword [ebp - 4], 0x8c
push 0
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetObjAddref
mov dword [ebp - 4], 0x8d
mov dword [ebp - 0x1c0], 1
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x38]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarMove
mov dword [ebp - 4], 0x8e
jmp 0x41e5e6
mov dword [ebp - 4], 0x8f
push 0x404628
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0xdc]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaCastObjVar
push eax
lea eax, [ebp - 0x54]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0x90
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0xdc]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetVarAddref
mov dword [ebp - 4], 0x91
push dword [ebp - 0x54]
movsx eax, word [ebp - 0x64]
push eax
movsx eax, word [ebp - 0x6c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetObjAddref
mov dword [ebp - 4], 0x92
mov ax, word [ebp - 0x6c]
mov word [ebp - 0x9c], ax
mov dword [ebp - 4], 0x96
jmp 0x41e1d5
mov dword [ebp - 4], 0x99
jmp 0x41dfc0
mov dword [ebp - 4], 0x9b
cmp word [ebp - 0xc4], 1
jle 0x41fdf1
mov dword [ebp - 4], 0x9c
mov ax, word [ebp - 0x64]
cwd
mov cx, 7
idiv cx
mov ax, 7
sub ax, dx
jo 0x4207cf
cmp word [ebp - 0xc4], ax
jle 0x41ea8e
mov dword [ebp - 4], 0x9d
mov ax, word [ebp - 0x64]
cwd
mov cx, 7
idiv cx
mov ax, 7
sub ax, dx
jo 0x4207cf
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e830
push 0x48
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x380], eax
jmp 0x41e837
and dword [ebp - 0x380], 0
mov dword [ebp - 4], 0x9e
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e87e
push 0x44
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x384], eax
jmp 0x41e885
and dword [ebp - 0x384], 0
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41e8c5
push 0x54
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x388], eax
jmp 0x41e8cc
and dword [ebp - 0x388], 0
mov ax, word [ebp - 0x224]
add ax, word [ebp - 0x228]
jo 0x4207cf
sub ax, 1
jo 0x4207cf
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 0x8002
lea eax, [ebp - 0x1c0]
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaVarTstGt
movsx eax, ax
test eax, eax
je 0x41ea23
mov dword [ebp - 4], 0x9f
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41e968
push 0x54
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x38c], eax
jmp 0x41e96f
and dword [ebp - 0x38c], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaI2Var
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41ea11
push 0x48
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x390], eax
jmp 0x41ea18
and dword [ebp - 0x390], 0
lea ecx, [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0xa1
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41ea6a
push 0x44
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x394], eax
jmp 0x41ea71
and dword [ebp - 0x394], 0
mov ax, word [ebp - 0xc4]
sub ax, word [ebp - 0x224]
jo 0x4207cf
mov word [ebp - 0x70], ax
jmp 0x41ecd3
mov dword [ebp - 4], 0xa3
and word [ebp - 0x70], 0
mov dword [ebp - 4], 0xa4
push dword [ebp - 0xc4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41eae0
push 0x48
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x398], eax
jmp 0x41eae7
and dword [ebp - 0x398], 0
mov dword [ebp - 4], 0xa5
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41eb2e
push 0x44
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x39c], eax
jmp 0x41eb35
and dword [ebp - 0x39c], 0
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41eb75
push 0x54
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3a0], eax
jmp 0x41eb7c
and dword [ebp - 0x3a0], 0
mov ax, word [ebp - 0x224]
add ax, word [ebp - 0x228]
jo 0x4207cf
sub ax, 1
jo 0x4207cf
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 0x8002
lea eax, [ebp - 0x1c0]
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaVarTstGt
movsx eax, ax
test eax, eax
je 0x41ecd3
mov dword [ebp - 4], 0xa6
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41ec18
push 0x54
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3a4], eax
jmp 0x41ec1f
and dword [ebp - 0x3a4], 0
mov ax, word [ebp - 0x224]
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaI2Var
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41ecc1
push 0x48
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3a8], eax
jmp 0x41ecc8
and dword [ebp - 0x3a8], 0
lea ecx, [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaFreeVar
mov dword [ebp - 4], 0xa9
mov ax, word [ebp - 0xc4]
sub ax, 1
jo 0x4207cf
mov cx, word [ebp - 0x64]
add cx, ax
jo 0x4207cf
mov word [ebp - 0x2d8], cx
mov word [ebp - 0x2d4], 1
mov ax, word [ebp - 0x64]
add ax, 1
jo 0x4207cf
mov word [ebp - 0x40], ax
jmp 0x41ed31
mov ax, word [ebp - 0x40]
add ax, word [ebp - 0x2d4]
jo 0x4207cf
mov word [ebp - 0x40], ax
mov ax, word [ebp - 0x40]
cmp ax, word [ebp - 0x2d8]
jg 0x41fdef
mov dword [ebp - 4], 0xaa
mov ax, word [ebp - 0x40]
mov word [ebp - 0x1e8], ax
mov dword [ebp - 0x1f0], 0x8002
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1e0], 2
lea eax, [ebp - 0x1f0]
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
call sub.MSVBVM60.DLL___vbaVarTstGt
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41eddf
jmp 0x41fdef
mov dword [ebp - 4], 0xad
push 0x403740
call sub.MSVBVM60.DLL___vbaNew
push eax
lea eax, [ebp - 0x74]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0xae
push dword [ebp - 0x74]
lea eax, [ebp - 0x264]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
mov dword [ebp - 4], 0xaf
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41ee5d
push 0x80
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3ac], eax
jmp 0x41ee64
and dword [ebp - 0x3ac], 0
fld qword [ebp - 0x234]
push ecx
push ecx
fstp qword [esp]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x7c]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41eeb1
push 0x7c
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3b0], eax
jmp 0x41eeb8
and dword [ebp - 0x3b0], 0
mov dword [ebp - 4], 0xb0
lea eax, [ebp - 0x234]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x78]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41eeff
push 0x78
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3b4], eax
jmp 0x41ef06
and dword [ebp - 0x3b4], 0
fld qword [ebp - 0x234]
push ecx
push ecx
fstp qword [esp]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x74]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41ef53
push 0x74
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3b8], eax
jmp 0x41ef5a
and dword [ebp - 0x3b8], 0
mov dword [ebp - 4], 0xb1
lea eax, [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x68]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41efa1
push 0x68
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3bc], eax
jmp 0x41efa8
and dword [ebp - 0x3bc], 0
push dword [ebp - 0xf0]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x64]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41eff0
push 0x64
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3c0], eax
jmp 0x41eff7
and dword [ebp - 0x3c0], 0
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
mov dword [ebp - 4], 0xb2
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x5c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f049
push 0x5c
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3c4], eax
jmp 0x41f050
and dword [ebp - 0x3c4], 0
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x60]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f098
push 0x60
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3c8], eax
jmp 0x41f09f
and dword [ebp - 0x3c8], 0
mov dword [ebp - 4], 0xb3
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x4c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f0e6
push 0x4c
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3cc], eax
jmp 0x41f0ed
and dword [ebp - 0x3cc], 0
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f135
push 0x50
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3d0], eax
jmp 0x41f13c
and dword [ebp - 0x3d0], 0
mov dword [ebp - 4], 0xb4
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f183
push 0x54
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3d4], eax
jmp 0x41f18a
and dword [ebp - 0x3d4], 0
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x58]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f1d2
push 0x58
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3d8], eax
jmp 0x41f1d9
and dword [ebp - 0x3d8], 0
mov dword [ebp - 4], 0xb5
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f220
push 0x44
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3dc], eax
jmp 0x41f227
and dword [ebp - 0x3dc], 0
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f26f
push 0x48
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3e0], eax
jmp 0x41f276
and dword [ebp - 0x3e0], 0
mov dword [ebp - 4], 0xb6
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x3c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f2bd
push 0x3c
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3e4], eax
jmp 0x41f2c4
and dword [ebp - 0x3e4], 0
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f30c
push 0x40
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3e8], eax
jmp 0x41f313
and dword [ebp - 0x3e8], 0
mov dword [ebp - 4], 0xb7
lea eax, [ebp - 0xf0]
push eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x34]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f35a
push 0x34
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3ec], eax
jmp 0x41f361
and dword [ebp - 0x3ec], 0
push dword [ebp - 0xf0]
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
push dword [ebp - 0x264]
call dword [eax + 0x38]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f3a9
push 0x38
push 0x404628
push dword [ebp - 0x264]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3f0], eax
jmp 0x41f3b0
and dword [ebp - 0x3f0], 0
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
mov dword [ebp - 4], pe_nt_image_headers32
push 0
lea eax, [ebp - 0x264]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
mov dword [ebp - 4], 0xb9
mov ax, word [ebp - 0x40]
cwd
mov cx, 7
idiv cx
movsx eax, dx
test eax, eax
je 0x41f7cd
mov dword [ebp - 4], 0xba
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x64]
push eax
mov ax, word [ebp - 0x9c]
sub ax, 1
jo 0x4207cf
movsx eax, ax
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061ec
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41f611
mov dword [ebp - 4], 0xbb
push 0x404628
movsx eax, word [ebp - 0x64]
push eax
mov ax, word [ebp - 0x9c]
sub ax, 1
jo 0x4207cf
movsx eax, ax
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaCastObjVar
push eax
lea eax, [ebp - 0xe8]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0xbc
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
push dword [ebp - 0xe8]
call dword [eax + 0x5c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f522
push 0x5c
push 0x404628
push dword [ebp - 0xe8]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3f4], eax
jmp 0x41f529
and dword [ebp - 0x3f4], 0
lea eax, [ebp - 0x228]
push eax
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
push dword [ebp - 0xe8]
call dword [eax + 0x4c]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41f572
push 0x4c
push 0x404628
push dword [ebp - 0xe8]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3f8], eax
jmp 0x41f579
and dword [ebp - 0x3f8], 0
xor eax, eax
cmp word [ebp - 0x224], 0xffff
sete al
xor ecx, ecx
cmp word [ebp - 0x228], 1
setle cl
and eax, ecx
test eax, eax
jne 0x41f60f
mov dword [ebp - 4], 0xbd
push 0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f5db
push 0x48
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x3fc], eax
jmp 0x41f5e2
and dword [ebp - 0x3fc], 0
mov dword [ebp - 4], 0xbe
push dword [ebp - 0x74]
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x9c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetObjAddref
jmp 0x41f687
mov dword [ebp - 4], 0xc1
push 0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f653
push 0x48
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x400], eax
jmp 0x41f65a
and dword [ebp - 0x400], 0
mov dword [ebp - 4], 0xc2
push dword [ebp - 0x74]
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x9c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetObjAddref
mov dword [ebp - 4], 0xc4
cmp word [ebp - 0x9c], 1
jle 0x41f7c8
mov dword [ebp - 4], 0xc5
mov ax, word [ebp - 0x9c]
sub ax, 1
jo 0x4207cf
mov word [ebp - 0x2e0], ax
mov word [ebp - 0x2dc], 1
mov word [ebp - 0x38], 1
jmp 0x41f6e1
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x2dc]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x2e0]
jg 0x41f7c8
mov dword [ebp - 4], 0xc6
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x38]
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061dc
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41f7bc
mov dword [ebp - 4], 0xc7
mov dword [ebp - 0x1b8], 0x406208
mov dword [ebp - 0x1c0], 8
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x38]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarCopy
mov dword [ebp - 4], 0xc9
jmp 0x41f6cc
jmp 0x41fd27
mov dword [ebp - 4], 0xcc
mov ax, word [ebp - 0x40]
add ax, word [ebp - 0x70]
jo 0x4207cf
mov word [ebp - 0x1d8], ax
mov dword [ebp - 0x1e0], 0x8002
lea eax, [ebp - 0x1e0]
push eax
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
call sub.MSVBVM60.DLL___vbaVarTstGt
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41f9e3
mov dword [ebp - 4], 0xcd
mov ax, word [ebp - 0x40]
mov word [ebp - 0x1d8], ax
mov dword [ebp - 0x1e0], 2
mov dword [ebp - 0x1e8], 7
mov dword [ebp - 0x1f0], 0x8002
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
lea eax, [ebp - 0x1f0]
push eax
call sub.MSVBVM60.DLL___vbaVarTstLe
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41f995
mov dword [ebp - 4], 0xce
mov ax, word [ebp - 0x40]
mov word [ebp - 0x1d8], ax
mov dword [ebp - 0x1e0], 2
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
lea eax, [ebp - 0x120]
push eax
call sub.MSVBVM60.DLL___vbaVarAdd
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x130]
push eax
call sub.MSVBVM60.DLL___vbaVarSub
push eax
call sub.MSVBVM60.DLL___vbaI2Var
push eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f981
push 0x48
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x404], eax
jmp 0x41f988
and dword [ebp - 0x404], 0
lea ecx, [ebp - 0x120]
call sub.MSVBVM60.DLL___vbaFreeVar
jmp 0x41f9de
mov dword [ebp - 4], 0xd0
push 7
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41f9d7
push 0x48
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x408], eax
jmp 0x41f9de
and dword [ebp - 0x408], 0
jmp 0x41fa86
mov dword [ebp - 4], 0xd2
cmp word [ebp - 0x70], 7
jle 0x41fa3c
mov dword [ebp - 4], 0xd3
push 7
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41fa33
push 0x48
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x40c], eax
jmp 0x41fa3a
and dword [ebp - 0x40c], 0
jmp 0x41fa86
mov dword [ebp - 4], 0xd5
push dword [ebp - 0x70]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41fa7f
push 0x48
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x410], eax
jmp 0x41fa86
and dword [ebp - 0x410], 0
mov dword [ebp - 4], 0xd7
lea eax, [ebp - 0x224]
push eax
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
push dword [ebp - 0x74]
call dword [eax + 0x44]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41facd
push 0x44
push 0x404628
push dword [ebp - 0x74]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x414], eax
jmp 0x41fad4
and dword [ebp - 0x414], 0
mov ax, word [ebp - 0x70]
sub ax, word [ebp - 0x224]
jo 0x4207cf
mov word [ebp - 0x70], ax
mov dword [ebp - 4], 0xd8
mov word [ebp - 0x94], 1
mov dword [ebp - 4], 0xd9
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x94]
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061dc
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41fba7
mov dword [ebp - 4], 0xda
mov ax, word [ebp - 0x94]
add ax, 1
jo 0x4207cf
mov word [ebp - 0x94], ax
jmp 0x41faf9
mov dword [ebp - 4], 0xdc
mov ax, word [ebp - 0x94]
mov word [ebp - 0x9c], ax
mov dword [ebp - 4], 0xdd
cmp word [ebp - 0x9c], 1
jle 0x41fcfa
mov dword [ebp - 4], 0xde
mov ax, word [ebp - 0x9c]
sub ax, 1
jo 0x4207cf
mov word [ebp - 0x2e8], ax
mov word [ebp - 0x2e4], 1
mov word [ebp - 0x38], 1
jmp 0x41fc16
mov ax, word [ebp - 0x38]
add ax, word [ebp - 0x2e4]
jo 0x4207cf
mov word [ebp - 0x38], ax
mov ax, word [ebp - 0x38]
cmp ax, word [ebp - 0x2e8]
jg 0x41fcfa
mov dword [ebp - 4], 0xdf
push dword [ebp - 0xa0]
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryLock
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x38]
push eax
push dword [ebp - 0xec]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xec]
push eax
call sub.MSVBVM60.DLL___vbaAryUnlock
push dword [ebp - 0xf0]
push 0x4061dc
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
inc eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41fcee
mov dword [ebp - 4], 0xe0
mov dword [ebp - 0x1b8], 0x406208
mov dword [ebp - 0x1c0], 8
lea esi, [ebp - 0x1c0]
movsx eax, word [ebp - 0x40]
push eax
push 1
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
mov ecx, eax
mov edx, esi
call sub.MSVBVM60.DLL___vbaVarCopy
mov dword [ebp - 4], 0xe2
jmp 0x41fc01
mov dword [ebp - 4], 0xe4
push dword [ebp - 0x74]
movsx eax, word [ebp - 0x40]
push eax
movsx eax, word [ebp - 0x9c]
push eax
push dword [ebp - 0xa0]
push 2
call sub.MSVBVM60.DLL___vbaDerefAry
add esp, 0x10
push eax
call sub.MSVBVM60.DLL___vbaVarSetObjAddref
mov dword [ebp - 4], 0xe6
push dword [ebp - 0x74]
lea eax, [ebp - 0x110]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
lea eax, [ebp - 0x110]
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1c0], 0x4009
lea eax, [ebp - 0x1c0]
push eax
call sub.MSVBVM60.DLL_rtcTypeName
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
push 0x404628
push dword [ebp - 0x110]
call sub.MSVBVM60.DLL___vbaCastObj
push eax
lea eax, [ebp - 0x74]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
push dword [ebp - 0xf0]
push 0x405dc8
call sub.MSVBVM60.DLL___vbaStrCmp
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x250], ax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x110]
call sub.MSVBVM60.DLL___vbaFreeObj
movsx eax, word [ebp - 0x250]
test eax, eax
je 0x41fde3
mov dword [ebp - 4], 0xe7
push 0x404628
push 0
call sub.MSVBVM60.DLL___vbaCastObj
push eax
lea eax, [ebp - 0x74]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0xe9
jmp 0x41ed1c
jmp 0x41fe3a
mov dword [ebp - 4], 0xeb
push 1
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
push dword [ebp - 0x3c]
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x41fe33
push 0x48
push 0x404628
push dword [ebp - 0x3c]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x418], eax
jmp 0x41fe3a
and dword [ebp - 0x418], 0
mov dword [ebp - 4], 0xee
jmp 0x41d4e2
mov dword [ebp - 4], 0xef
cmp word [0x449050], 0xffff
jne 0x41fe5c
jmp 0x41ff6b
mov dword [ebp - 4], 0xf2
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x220], 0x200c
push dword [ebp - 0xb8]
push 0x10
pop eax
call sub.MSVBVM60.DLL___vbaChkstk
lea esi, [ebp - 0x220]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0x14]
lea ecx, [ebp - 0x200]
call sub.MSVBVM60.DLL___vbaVarVargNofree
mov esi, eax
push 0x10
pop eax
call sub.MSVBVM60.DLL___vbaChkstk
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0x10]
lea ecx, [ebp - 0x1e0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
mov esi, eax
push 0x10
pop eax
call sub.MSVBVM60.DLL___vbaChkstk
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov edx, dword [ebp + 0xc]
lea ecx, [ebp - 0x1d0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI4Var
push eax
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x1c0]
call sub.MSVBVM60.DLL___vbaVarVargNofree
push eax
call sub.MSVBVM60.DLL___vbaI2Var
push eax
call fcn.00422428
cmp eax, 1
jne 0x41ff16
mov dword [ebp - 4], 0xf3
mov dword [ebp - 0xa8], 1
jmp 0x41ff2c
mov dword [ebp - 4], 0xf5
mov edx, 0x406218
lea ecx, [ebp - 0x68]
call sub.MSVBVM60.DLL___vbaStrCopy
jmp 0x41ff6b
mov dword [ebp - 4], 0xf8
push 0x405604
push 0x406004
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xf0]
push eax
call fcn.0043db20
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaFreeStr
jmp 0x420668
mov dword [ebp - 4], 0xfb
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x110]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x22c]
push eax
mov eax, dword [ebp - 0x250]
mov eax, dword [eax]
push dword [ebp - 0x250]
call dword [eax + 0x1c]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x41ffd3
push 0x1c
push 0x4041a4
push dword [ebp - 0x250]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x41c], eax
jmp 0x41ffda
and dword [ebp - 0x41c], 0
xor eax, eax
cmp dword [ebp - 0x22c], 0
setne al
neg eax
mov word [ebp - 0x258], ax
lea ecx, [ebp - 0x110]
call sub.MSVBVM60.DLL___vbaFreeObj
movsx eax, word [ebp - 0x258]
test eax, eax
je 0x4203bd
mov dword [ebp - 4], 0xfc
call sub.MSVBVM60.DLL_rtcErrObj
push eax
lea eax, [ebp - 0x268]
push eax
call sub.MSVBVM60.DLL___vbaObjSet
mov dword [ebp - 4], 0xfd
lea eax, [ebp - 0x22c]
push eax
mov eax, dword [ebp - 0x268]
mov eax, dword [eax]
push dword [ebp - 0x268]
call dword [eax + 0x1c]
fnclex
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jge 0x420072
push 0x1c
push 0x4041a4
push dword [ebp - 0x268]
push dword [ebp - 0x250]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x420], eax
jmp 0x420079
and dword [ebp - 0x420], 0
lea eax, [ebp - 0xf8]
push eax
mov eax, dword [ebp - 0x268]
mov eax, dword [eax]
push dword [ebp - 0x268]
call dword [eax + 0x2c]
fnclex
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0
jge 0x4200c2
push 0x2c
push 0x4041a4
push dword [ebp - 0x268]
push dword [ebp - 0x254]
call sub.MSVBVM60.DLL___vbaHresultCheckObj
mov dword [ebp - 0x424], eax
jmp 0x4200c9
and dword [ebp - 0x424], 0
push 0x4049a4
push dword [ebp - 0x22c]
call sub.MSVBVM60.DLL___vbaStrI4
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf4]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x4049b8
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xfc]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push dword [ebp - 0xf8]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x100]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x4049c0
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x104]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x406004
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 8
mov dword [ebp - 0x1c8], 0x404a38
mov dword [ebp - 0x1d0], 8
lea edx, [ebp - 0x1d0]
lea ecx, [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaVarDup
push 0x404a20
mov ax, word [0x449052]
push eax
call sub.MSVBVM60.DLL___vbaStrI2
mov edx, eax
lea ecx, [ebp - 0x108]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0x10c]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x404a38
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x120], 8
xor eax, eax
cmp word [0x449052], 0
setne al
neg eax
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 0xb
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL_rtcImmediateIf
mov dword [ebp - 0x1d8], 0x4043c8
mov dword [ebp - 0x1e0], 8
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1f0], 8
mov dword [ebp - 0x1f8], 0x4043c8
mov dword [ebp - 0x200], 8
mov dword [ebp - 0x208], 0x404a40
mov dword [ebp - 0x210], 8
mov ax, word [0x449050]
mov word [ebp - 0x218], ax
mov dword [ebp - 0x220], 0xb
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x160]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x170]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x180]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x190]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x210]
push eax
lea eax, [ebp - 0x1a0]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x1b0]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x68]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xf0]
push eax
push 8
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x24
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0xc
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x34
mov dword [ebp - 4], 0xfe
push 0
lea eax, [ebp - 0x268]
push eax
call sub.MSVBVM60.DLL___vbaObjSetAddref
jmp 0x4205de
mov dword [ebp - 4], 0x100
push 0x4049a4
push dword [ebp - 0x68]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x4049c0
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf4]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x406004
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 8
mov dword [ebp - 0x1c8], 0x404a38
mov dword [ebp - 0x1d0], 8
lea edx, [ebp - 0x1d0]
lea ecx, [ebp - 0x130]
call sub.MSVBVM60.DLL___vbaVarDup
push 0x404a20
mov ax, word [0x449052]
push eax
call sub.MSVBVM60.DLL___vbaStrI2
mov edx, eax
lea ecx, [ebp - 0xf8]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xfc]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x404a38
call sub.MSVBVM60.DLL___vbaStrCat
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x120], 8
xor eax, eax
cmp word [0x449052], 0
setne al
neg eax
mov word [ebp - 0x1b8], ax
mov dword [ebp - 0x1c0], 0xb
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1c0]
push eax
lea eax, [ebp - 0x140]
push eax
call sub.MSVBVM60.DLL_rtcImmediateIf
mov dword [ebp - 0x1d8], 0x4043c8
mov dword [ebp - 0x1e0], 8
mov dword [ebp - 0x1e8], 0x404a40
mov dword [ebp - 0x1f0], 8
mov ax, word [0x449050]
mov word [ebp - 0x1f8], ax
mov dword [ebp - 0x200], 0xb
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x160]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x1e0]
push eax
lea eax, [ebp - 0x170]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x1f0]
push eax
lea eax, [ebp - 0x180]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x190]
push eax
call sub.MSVBVM60.DLL___vbaVarCat
push eax
call sub.MSVBVM60.DLL___vbaStrVarMove
mov edx, eax
lea ecx, [ebp - 0x68]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xf0]
push eax
push 4
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x14
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x150]
push eax
lea eax, [ebp - 0x130]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1c0]
push eax
push 0xa
call sub.MSVBVM60.DLL___vbaFreeVarList
add esp, 0x2c
mov dword [ebp - 4], 0x102
push 0x404a6c
push 0x406004
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf0]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push 0x4043c8
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf4]
call sub.MSVBVM60.DLL___vbaStrMove
push eax
push dword [ebp - 0x68]
call sub.MSVBVM60.DLL___vbaStrCat
mov edx, eax
lea ecx, [ebp - 0xf8]
call sub.MSVBVM60.DLL___vbaStrMove
lea eax, [ebp - 0xf8]
push eax
call fcn.0043db20
lea eax, [ebp - 0xf8]
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xf0]
push eax
push 3
call sub.MSVBVM60.DLL___vbaFreeStrList
add esp, 0x10
mov dword [ebp - 4], 0x103
and dword [ebp - 0xa8], 0
wait
push 0x4207b8
jmp 0x42071d
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x264]
push eax
push 2
call sub.MSVBVM60.DLL___vbaFreeObjList
add esp, 0xc
lea ecx, [ebp - 0x24]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x3c]
call sub.MSVBVM60.DLL___vbaFreeObj
lea ecx, [ebp - 0x4c]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x54]
call sub.MSVBVM60.DLL___vbaFreeObj
lea ecx, [ebp - 0x58]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x60]
call sub.MSVBVM60.DLL___vbaFreeObj
lea ecx, [ebp - 0x68]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x74]
call sub.MSVBVM60.DLL___vbaFreeObj
lea ecx, [ebp - 0x7c]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x88]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x8c]
call sub.MSVBVM60.DLL___vbaFreeStr
lea ecx, [ebp - 0x90]
call sub.MSVBVM60.DLL___vbaFreeObj
lea eax, [ebp - 0xa0]
push eax
push 0
call sub.MSVBVM60.DLL___vbaAryDestruct
lea ecx, [ebp - 0xe8]
call sub.MSVBVM60.DLL___vbaFreeObj
ret
call sub.MSVBVM60.DLL___vbaErrorOverflow