Function at 0x4190e0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x401e76
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x280
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x4015b0
xor ebx, ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x2c], ebx
mov ecx, 6
xor eax, eax
lea edi, [ebp - 0x48]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0xfc], ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x11c], ebx
mov byte [ebp - 0x130], al
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x334]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
push 0x407ba0
push esi
call dword [eax + 0x54]
fnclex
cmp eax, ebx
jge 0x41922c
push 0x54
push 0x405fdc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 4
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 5
mov dword [ebp - 0x130], ebx
lea ecx, [ebp - 0x130]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.004202b0
mov edx, eax
lea ecx, [ebp - 0x6c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call esi
mov edx, eax
mov ecx, 0x42a080
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 6
mov eax, dword [ebp + 0x14]
push eax
call fcn.00425830
mov dword [ebp - 4], 7
mov ecx, dword [0x42a08c]
sub ecx, 1
jo 0x41e360
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x164], eax
xor eax, eax
mov dword [ebp - 0x24], eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
cmp ax, word [ebp - 0x164]
jg 0x41a02d
mov dword [ebp - 4], 8
cmp ax, 1
je 0x419d18
mov dword [ebp - 4], 9
mov ecx, dword [0x42a09c]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x419322
cmp word [ecx], 1
jne 0x419322
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41931a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x41932b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0xc]
push edx
call fcn.00418fe0
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
xor ebx, ebx
mov dword [ebp - 0x130], ebx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], ebx
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x70]
push edx
call fcn.004202b0
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0xa
mov eax, dword [0x42a09c]
cmp eax, ebx
je 0x4193c5
cmp word [eax], 1
jne 0x4193c5
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x4193b7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x42a09c]
lea ebx, [ebx + ebx*2]
shl ebx, 3
mov dword [ebp - 0x1b8], ebx
jmp 0x4193d6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1b8], eax
mov eax, dword [0x42a09c]
test eax, eax
je 0x4193ff
cmp word [eax], 1
jne 0x4193ff
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x4193f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [0x42a09c]
lea ebx, [ebx + ebx*2]
shl ebx, 3
jmp 0x41940c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov eax, dword [0x42a09c]
mov edx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [edx + eax + 0xc]
push ecx
push 0x4060b4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
mov edx, dword [0x42a09c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ebx]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
mov eax, dword [0x42a09c]
test eax, eax
je 0x419468
cmp word [eax], 1
jne 0x419468
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x419460
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [ebx + ebx*2]
shl ebx, 3
jmp 0x419470
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x70]
push eax
call fcn.00418fe0
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
mov edx, eax
mov ecx, dword [0x42a09c]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + ebx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x130], 0x3c
mov ecx, dword [0x42a09c]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41952c
cmp word [ecx], 1
jne 0x41952c
movsx eax, word [ebp - 0x24]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x148], eax
cmp eax, dword [ecx + 0x10]
jb 0x419524
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x148]
lea eax, [eax + eax*2]
shl eax, 3
jmp 0x419535
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x130]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0xc]
push edx
call fcn.00421230
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ebx, dword [ebx]
push 0x407bc8
mov ecx, dword [ebp - 0x6c]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407be0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x14c]
push ebx
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x41959f
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xc
mov eax, dword [0x42a09c]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x419603
cmp word [ecx], 1
jne 0x419603
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x4195fb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x41960c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.00418d10
mov dword [ebp - 0x130], eax
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
cmp word [ebp - 0x130], 0xffff
je 0x419809
mov dword [ebp - 4], 0x1b
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov ecx, dword [ebx]
lea edx, [ebp - 0x130]
push edx
push ebx
call dword [ecx + 0x88]
fnclex
test eax, eax
jge 0x419682
push 0x88
push 0x405a04
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor ebx, ebx
cmp word [ebp - 0x130], bx
sete bl
neg ebx
xor eax, eax
cmp word [0x42a0b0], ax
sete al
neg eax
and ebx, eax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test bx, bx
jne 0x419fcc
mov dword [ebp - 4], 0x1d
mov ecx, 0x80020004
mov dword [ebp - 0xe0], ecx
mov eax, 0xa
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xf4], 0x405624
mov dword [ebp - 0xfc], 8
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x42a09c]
test eax, eax
je 0x41972d
cmp word [eax], 1
jne 0x41972d
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x419725
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [ebx + ebx*2]
shl ebx, 3
jmp 0x419735
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
push 0x407df0
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407ed0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov ecx, dword [0x42a09c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + ebx + 0xc]
push eax
call edi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
push 0x122
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
mov ebx, eax
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
mov dword [ebp - 4], 0x1e
mov eax, ebx
sub eax, 3
je 0x41a01c
dec eax
jne 0x419d18
jmp 0x4195c2
mov dword [ebp - 4], 0xd
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0xe
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
lea ecx, [ebp - 0x130]
push ecx
push ebx
call dword [eax + 0x88]
fnclex
test eax, eax
jge 0x419863
push 0x88
push 0x405a04
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor ebx, ebx
cmp word [ebp - 0x130], bx
sete bl
neg ebx
xor edx, edx
cmp word [0x42a0b0], dx
sete dl
neg edx
and ebx, edx
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test bx, bx
jne 0x419fc0
mov dword [ebp - 4], 0x10
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x4198cd
cmp word [ecx], 1
jne 0x4198cd
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x4198c5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x4198d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 8], 1
je 0x419b7d
mov dword [ebp - 4], 0x11
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x334]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x130], 0x3c
mov eax, dword [0x42a09c]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x419954
cmp word [ecx], 1
jne 0x419954
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41994c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x41995d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x130]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.00421230
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x14c]
mov ebx, dword [eax]
push 0x407bf0
mov ecx, dword [ebp - 0x6c]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407be0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov edx, ebx
mov ebx, dword [ebp - 0x14c]
push ebx
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4199cb
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x12
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x419a25
cmp word [ecx], 1
jne 0x419a25
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x419a1d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x419a31
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
push 0x4079f4
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0xc]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x406d2c
call edi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
push 2
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcShell]
fstp st(0)
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x13
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x14
push 0xfa
call fcn.00405e84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x15
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x419ae0
cmp word [ecx], 1
jne 0x419ae0
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x419ad8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x419aec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax + 8], 4
jne 0x419d18
mov dword [ebp - 4], 0x16
xor edx, edx
lea ecx, [ebp - 0x70]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov dword [ebp - 0x13c], 0
xor edx, edx
lea ecx, [ebp - 0x6c]
call ebx
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 3
mov edx, dword [0x42a09c]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x419cc8
cmp word [ecx], 1
jne 0x419cc8
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x419c7b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x419cd1
mov dword [ebp - 4], 0x17
test ecx, ecx
je 0x419bae
cmp word [ecx], 1
jne 0x419bae
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x419ba6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x419bba
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 8], 4
jne 0x419d18
mov dword [ebp - 4], 0x18
test ecx, ecx
je 0x419bf9
cmp word [ecx], 1
jne 0x419bf9
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x419bf1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x419c05
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax + 8], 0x10
jne 0x419c83
mov dword [ebp - 4], 0x19
xor edx, edx
lea ecx, [ebp - 0x70]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov dword [ebp - 0x13c], 0
xor edx, edx
lea ecx, [ebp - 0x6c]
call ebx
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 1
mov edx, dword [0x42a09c]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x419cc8
cmp word [ecx], 1
jne 0x419cc8
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x419c7b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x419cd1
mov dword [ebp - 4], 0x1a
xor edx, edx
lea ecx, [ebp - 0x70]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov dword [ebp - 0x13c], 0
xor edx, edx
lea ecx, [ebp - 0x6c]
call ebx
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 8
mov eax, dword [0x42a09c]
push eax
lea ecx, [ebp - 0x54]
push ecx
jmp 0x419c53
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x70]
push edx
lea edx, [ebp - 0x13c]
push edx
lea edx, [ebp - 0x6c]
push edx
lea edx, [ebp - 0x138]
push edx
lea edx, [ebp - 0x134]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0xc]
push edx
call fcn.00416350
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x20
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x148], eax
mov ecx, dword [eax]
lea edx, [ebp - 0x130]
push edx
push eax
call dword [ecx + 0x88]
fnclex
test eax, eax
jge 0x419d6f
push 0x88
push 0x405a04
mov ecx, dword [ebp - 0x148]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor edx, edx
cmp word [ebp - 0x130], dx
sete dl
neg edx
xor eax, eax
cmp word [0x42a0b0], ax
sete al
neg eax
and edx, eax
mov word [ebp - 0x150], dx
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp word [ebp - 0x150], 0
jne 0x419fd8
mov dword [ebp - 4], 0x22
mov cx, word [ebp - 0x24]
add cx, 1
jo 0x41e360
movsx edx, cx
mov dword [ebp - 0x1c4], edx
fild dword [ebp - 0x1c4]
fstp qword [ebp - 0x1cc]
fild dword [0x42a08c]
fstp qword [ebp - 0x1d4]
fld qword [ebp - 0x1cc]
cmp dword [section..data], 0
jne 0x419dfb
fdiv qword [ebp - 0x1d4]
jmp 0x419e0c
push dword [ebp - 0x1d0]
push dword [ebp - 0x1d4]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fmul qword [0x401728]
fstp qword [ebp - 0xb0]
fnstsw ax
test al, 0xd
jne 0x41e35b
mov dword [ebp - 0xb8], 5
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea edx, [ebp - 0xc8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
mov byte [ebp - 0x104], al
mov ecx, 0x11
mov dword [ebp - 0x10c], ecx
mov eax, dword [ebx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x108]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x104]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x100]
mov dword [edx + 0xc], ecx
push 0x68030000
mov edx, dword [eax]
push eax
call dword [edx + 0x3cc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xb8]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x23
mov eax, dword [ebx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x148], eax
mov ecx, dword [ebx]
mov ebx, dword [eax]
push 0
push 0x68030000
mov eax, dword [ecx]
push ecx
call dword [eax + 0x3cc]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x407ee4
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
mov eax, ebx
mov ebx, dword [ebp - 0x148]
push ebx
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x419f6b
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x24
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x41e360
mov dword [ebp - 0x24], eax
xor ebx, ebx
jmp 0x4192c2
mov dword [ebp - 4], 0xf
jmp 0x41dc82
mov dword [ebp - 4], 0x1c
jmp 0x41dc82
mov dword [ebp - 4], 0x21
mov ebx, dword [ebx]
mov ecx, 6
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0x130], al
mov edx, dword [ebx]
lea eax, [ebp - 0x130]
push eax
push ebx
call dword [edx + 0x6f8]
fnclex
test eax, eax
jge 0x41e245
push 0x6f8
push 0x405690
push ebx
jmp 0x41e23e
mov dword [ebp - 4], 0x1f
mov ecx, dword [ebp + 0x10]
mov esi, dword [ecx]
jmp 0x41d50c
mov dword [ebp - 4], 0x25
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x148], eax
mov ecx, dword [eax]
push 0x407ef8
push eax
call dword [ecx + 0x54]
fnclex
cmp eax, ebx
jge 0x41a07c
push 0x54
push 0x405fdc
mov edx, dword [ebp - 0x148]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x26
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x27
mov ecx, dword [0x42a094]
sub ecx, 1
jo 0x41e360
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x24], ebx
mov ax, word [ebp - 0x16c]
cmp word [ebp - 0x24], ax
jg 0x41b640
mov dword [ebp - 4], 0x28
mov ecx, dword [0x42a0a0]
cmp ecx, ebx
je 0x41a102
cmp word [ecx], 1
jne 0x41a102
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41a0fa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x41a10e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov edx, dword [ecx + 0xc]
mov ebx, dword [edx + eax + 0xc]
test ebx, ebx
jne 0x41a531
mov dword [ebp - 4], 0x29
test ecx, ecx
je 0x41a154
cmp word [ecx], 1
jne 0x41a154
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41a146
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea ebx, [ebx + ebx*2]
shl ebx, 3
mov dword [ebp - 0x1dc], ebx
jmp 0x41a166
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1dc], eax
mov ecx, dword [0x42a0a0]
test ecx, ecx
je 0x41a190
cmp word [ecx], 1
jne 0x41a190
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41a188
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea ebx, [ebx + ebx*2]
shl ebx, 3
jmp 0x41a19e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x42a0a0]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1dc]
mov edx, dword [eax + ecx + 4]
push edx
push 0x4060b4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
mov eax, dword [0x42a0a0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + ebx + 8]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41a20d
cmp word [ecx], 1
jne 0x41a20d
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jb 0x41a205
call ebx
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a21c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edx, [ebp - 0x70]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.00424ab0
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x2a
mov ecx, dword [0x42a0a0]
test ecx, ecx
je 0x41a27b
cmp word [ecx], 1
jne 0x41a27b
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a273
call ebx
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a283
call ebx
mov ecx, dword [0x42a0a0]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 0x10], 1
jne 0x41a3e1
mov dword [ebp - 4], 0x2b
xor edx, edx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x138], 0
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x5c]
push ecx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
call ebx
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41a2ec
cmp word [eax], 1
jne 0x41a2ec
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a2de
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1e0], edi
jmp 0x41a2f8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e0], eax
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x58]
push eax
call ebx
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41a32c
cmp word [eax], 1
jne 0x41a32c
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a324
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41a334
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov dword [ebp - 0x134], 4
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41a379
cmp word [ecx], 1
jne 0x41a379
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a371
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a382
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x6c]
push edx
lea edx, [ebp - 0x138]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1e0]
lea edx, [edx + edi + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
add edx, ebx
push edx
lea edx, [ebp - 0x134]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
call fcn.00416350
lea eax, [ebp - 0x54]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call edi
lea ecx, [ebp - 0x58]
push ecx
call edi
lea edx, [ebp - 0x5c]
push edx
call edi
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
jmp 0x41b359
mov dword [ebp - 4], 0x2c
test ecx, ecx
je 0x41a40e
cmp word [ecx], 1
jne 0x41a40e
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a406
call ebx
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a416
call ebx
mov ecx, dword [0x42a0a0]
mov ecx, dword [ecx + 0xc]
test byte [ecx + eax + 0x10], 2
je 0x41b359
mov dword [ebp - 4], 0x2d
xor edx, edx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x138], 0
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x5c]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
call ebx
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41a480
cmp word [eax], 1
jne 0x41a480
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a472
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1e4], edi
jmp 0x41a48c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e4], eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x58]
push edx
call ebx
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41a4c0
cmp word [eax], 1
jne 0x41a4c0
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a4b8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41a4c8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov dword [ebp - 0x134], 6
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41a50c
cmp word [ecx], 1
jne 0x41a50c
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a504
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a515
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x6c]
push edx
lea edx, [ebp - 0x138]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1e4]
jmp 0x41a399
mov dword [ebp - 4], 0x2e
test ecx, ecx
je 0x41a562
cmp word [ecx], 1
jne 0x41a562
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a55a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a56e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x14]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 0xffffffff
jle 0x41a700
mov dword [ebp - 4], 0x2f
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41a5ca
cmp word [ecx], 1
jne 0x41a5ca
mov ebx, dword [ebp - 0x24]
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a5c2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a5d6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov ebx, dword [ebp - 0x24]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax + 0x14]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xfc], 0x6011
push 0
push 0x40
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0xb8]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
call edi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.00418fe0
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc8], 8
push 0
push 0x80
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0xd8]
push edx
call edi
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xec]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
mov ecx, dword [0x42a0a0]
test ecx, ecx
je 0x41a6ad
cmp word [ecx], 1
jne 0x41a6ad
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a6a5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a6b9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea edx, [ebp - 0xec]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0x14]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
jmp 0x41a703
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 4], 0x30
mov ecx, dword [0x42a0a0]
test ecx, ecx
je 0x41a739
cmp word [ecx], 1
jne 0x41a739
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a731
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a745
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 0x10], 1
jne 0x41aa2d
mov dword [ebp - 4], 0x31
push ecx
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x41a791
cmp word [eax], 1
jne 0x41a791
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a783
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1e8], edi
jmp 0x41a79d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e8], eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x60]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41a7da
cmp word [eax], 1
jne 0x41a7da
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a7cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1ec], edi
jmp 0x41a7e6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1ec], eax
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41a822
cmp word [eax], 1
jne 0x41a822
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a814
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1f0], edi
jmp 0x41a82e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f0], eax
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41a865
cmp word [eax], 1
jne 0x41a865
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a85d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41a86d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41a8a8
cmp word [ecx], 1
jne 0x41a8a8
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41a8a0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41a8b1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1e8]
lea edx, [edx + edi + 0xc]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1ec]
lea edx, [edx + edi + 0x14]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1f0]
lea edx, [edx + edi + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
lea edx, [edx + ebx + 4]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.00424b60
lea edx, [ebp - 0x54]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call edi
lea eax, [ebp - 0x58]
push eax
call edi
lea ecx, [ebp - 0x5c]
push ecx
call edi
lea edx, [ebp - 0x60]
push edx
call edi
lea eax, [ebp - 0x64]
push eax
call edi
mov dword [ebp - 4], 0x32
xor edx, edx
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x138], 0
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x5c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41a978
cmp word [eax], 1
jne 0x41a978
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a96a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1f4], edi
jmp 0x41a984
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f4], eax
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x58]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41a9bb
cmp word [eax], 1
jne 0x41a9bb
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41a9b3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41a9c3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov dword [ebp - 0x134], 5
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41aa08
cmp word [ecx], 1
jne 0x41aa08
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41aa00
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41aa11
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x6c]
push edx
lea edx, [ebp - 0x138]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1f4]
jmp 0x41a399
mov dword [ebp - 4], 0x33
test ecx, ecx
je 0x41aa5d
cmp word [ecx], 1
jne 0x41aa5d
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41aa55
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41aa69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 0x10], 2
jne 0x41ac44
mov dword [ebp - 4], 0x34
push ecx
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x41aab5
cmp word [eax], 1
jne 0x41aab5
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41aaa7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1f8], edi
jmp 0x41aac1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x60]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41aafe
cmp word [eax], 1
jne 0x41aafe
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41aaf0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x1fc], edi
jmp 0x41ab0a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41ab46
cmp word [eax], 1
jne 0x41ab46
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41ab38
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x200], edi
jmp 0x41ab52
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41ab89
cmp word [eax], 1
jne 0x41ab89
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41ab81
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41ab91
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41abcc
cmp word [ecx], 1
jne 0x41abcc
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41abc4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41abd5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1f8]
lea edx, [edx + edi + 0xc]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x1fc]
lea edx, [edx + edi + 0x14]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x200]
lea edx, [edx + edi + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
lea edx, [edx + ebx + 4]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.00424b60
lea edx, [ebp - 0x54]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call edi
lea eax, [ebp - 0x58]
push eax
call edi
lea ecx, [ebp - 0x5c]
push ecx
call edi
lea edx, [ebp - 0x60]
push edx
call edi
lea eax, [ebp - 0x64]
jmp 0x41b356
mov dword [ebp - 4], 0x35
test ecx, ecx
je 0x41ac74
cmp word [ecx], 1
jne 0x41ac74
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41ac6c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41ac80
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 0x10], 4
jne 0x41ae1f
mov dword [ebp - 4], 0x36
push ecx
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x41accc
cmp word [eax], 1
jne 0x41accc
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41acbe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x204], edi
jmp 0x41acd8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x60]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41ad15
cmp word [eax], 1
jne 0x41ad15
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41ad07
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x208], edi
jmp 0x41ad21
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41ad5d
cmp word [eax], 1
jne 0x41ad5d
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41ad4f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x20c], edi
jmp 0x41ad69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41ada0
cmp word [eax], 1
jne 0x41ada0
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41ad98
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41ada8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41ade3
cmp word [ecx], 1
jne 0x41ade3
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41addb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41adec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x204]
lea edx, [edx + edi + 0xc]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x208]
lea edx, [edx + edi + 0x14]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x20c]
jmp 0x41b07f
mov dword [ebp - 4], 0x37
test ecx, ecx
je 0x41ae4f
cmp word [ecx], 1
jne 0x41ae4f
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41ae47
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41ae5b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
lea edx, [ebp - 0x48]
push edx
push 0x405b88
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaRecAssign]
call ebx
mov dword [ebp - 4], 0x38
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x48]
push ecx
call fcn.00424e10
test eax, eax
jne 0x41aeef
mov dword [ebp - 4], 0x39
mov ecx, dword [0x42a0a0]
test ecx, ecx
je 0x41aecd
cmp word [ecx], 1
jne 0x41aecd
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41aec5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41aed9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea edx, [ebp - 0x48]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
push 0x405b88
call ebx
jmp 0x41b0be
mov dword [ebp - 4], 0x3a
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x41af34
cmp word [eax], 1
jne 0x41af34
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41af26
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x210], edi
jmp 0x41af40
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x60]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
call ebx
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41af80
cmp word [eax], 1
jne 0x41af80
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41af72
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x214], edi
jmp 0x41af8c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call ebx
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41afc5
cmp word [eax], 1
jne 0x41afc5
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41afb7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x218], edi
jmp 0x41afd1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x58]
push eax
call ebx
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41b005
cmp word [eax], 1
jne 0x41b005
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41affd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41b00d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41b048
cmp word [ecx], 1
jne 0x41b048
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41b040
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41b051
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x210]
lea edx, [edx + edi + 0xc]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x214]
lea edx, [edx + edi + 0x14]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x218]
lea edx, [edx + edi + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
lea edx, [edx + ebx + 4]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.00424b60
lea edx, [ebp - 0x54]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call edi
lea eax, [ebp - 0x58]
push eax
call edi
lea ecx, [ebp - 0x5c]
push ecx
call edi
lea edx, [ebp - 0x60]
push edx
call edi
lea eax, [ebp - 0x64]
push eax
call edi
mov dword [ebp - 4], 0x3b
mov ecx, dword [0x42a0a0]
test ecx, ecx
je 0x41b0f5
cmp word [ecx], 1
jne 0x41b0f5
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41b0ed
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41b101
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a0]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x14]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
cmp eax, 0xffffffff
jle 0x41b1c1
mov dword [ebp - 4], 0x3c
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
call ebx
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41b15d
cmp word [ecx], 1
jne 0x41b15d
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41b155
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41b166
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax + 0x14]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xfc], 0x6011
push 0
push 0x40
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x41b1dc
mov dword [ebp - 4], 0x3d
mov edx, 0x406260
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov dword [ebp - 4], 0x3e
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x60]
push eax
call ebx
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41b21d
cmp word [eax], 1
jne 0x41b21d
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41b20f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x21c], edi
jmp 0x41b229
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov ecx, dword [0x42a0a0]
push ecx
lea edx, [ebp - 0x5c]
push edx
call ebx
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41b263
cmp word [eax], 1
jne 0x41b263
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41b255
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x220], edi
jmp 0x41b26f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov eax, dword [0x42a0a0]
push eax
lea ecx, [ebp - 0x58]
push ecx
call ebx
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41b2a2
cmp word [eax], 1
jne 0x41b2a2
movsx edi, word [ebp - 0x24]
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41b29a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea ebx, [edi + edi*2]
shl ebx, 3
jmp 0x41b2aa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
mov dword [ebp - 0x134], 7
mov edx, dword [0x42a0a0]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41b2ef
cmp word [ecx], 1
jne 0x41b2ef
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41b2e7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41b2f8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x4c]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x21c]
lea edx, [edx + edi + 0xc]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov edi, dword [ebp - 0x220]
lea edx, [edx + edi + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
add edx, ebx
push edx
lea edx, [ebp - 0x134]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
call fcn.00416350
lea eax, [ebp - 0x54]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call edi
lea ecx, [ebp - 0x58]
push ecx
call edi
lea edx, [ebp - 0x5c]
push edx
call edi
lea eax, [ebp - 0x60]
push eax
call edi
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x104], 0x4b
mov dword [ebp - 0x10c], 2
mov cx, word [ebp - 0x24]
add cx, 1
jo 0x41e360
movsx edx, cx
mov dword [ebp - 0x224], edx
fild dword [ebp - 0x224]
fstp qword [ebp - 0x22c]
fild dword [0x42a094]
fstp qword [ebp - 0x234]
fld qword [ebp - 0x22c]
cmp dword [section..data], 0
jne 0x41b3ba
fdiv qword [ebp - 0x234]
jmp 0x41b3cb
push dword [ebp - 0x230]
push dword [ebp - 0x234]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fmul qword [0x401720]
fstp qword [ebp - 0xb0]
fnstsw ax
test al, 0xd
jne 0x41e35b
mov dword [ebp - 0xb8], 5
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
mov byte [ebp - 0x114], al
mov ecx, 0x11
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x118]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x110]
mov dword [edx + 0xc], ecx
push 0x68030000
mov edx, dword [eax]
push eax
call dword [edx + 0x3cc]
push eax
lea eax, [ebp - 0xa4]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x40
mov eax, dword [ebx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
push eax
lea edx, [ebp - 0xa8]
push edx
call edi
mov edi, eax
mov eax, dword [ebx]
mov ebx, dword [edi]
push 0
push 0x68030000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3cc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x407ee4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push edi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x41b539
push 0x54
push 0x405fdc
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x41
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x42
push 0x32
call fcn.00405e84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x43
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
mov ecx, dword [edi]
lea edx, [ebp - 0x130]
push edx
push edi
call dword [ecx + 0x88]
fnclex
test eax, eax
jge 0x41b5dc
push 0x88
push 0x405a04
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor eax, eax
cmp word [ebp - 0x130], ax
sete al
neg eax
xor ecx, ecx
cmp word [0x42a0b0], cx
sete cl
neg ecx
and eax, ecx
mov di, ax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test di, di
jne 0x41b634
mov dword [ebp - 4], 0x45
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x41e360
mov dword [ebp - 0x24], eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
xor ebx, ebx
jmp 0x41a0ba
mov dword [ebp - 4], 0x44
jmp 0x41d50a
mov dword [ebp - 4], 0x46
mov ecx, 0x5a
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0xf4], al
mov ecx, 0x11
mov dword [ebp - 0xfc], ecx
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 0xc], ecx
push 0x68030000
mov edx, dword [eax]
push eax
call dword [edx + 0x3cc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x47
mov eax, dword [ebx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
push 0x407f28
push ebx
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x41b6fb
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x48
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov ecx, dword [ebx]
push 0x407f40
push ebx
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x41b74c
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x49
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x4a
mov ecx, dword [0x42a098]
sub ecx, 1
jo 0x41e360
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x174], eax
xor ebx, ebx
mov dword [ebp - 0x24], ebx
cmp bx, word [ebp - 0x174]
jg 0x41d53c
mov dword [ebp - 4], 0x4b
mov edx, dword [0x42a0a4]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41b7e0
cmp word [ecx], 1
jne 0x41b7e0
movsx ebx, bx
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41b7d2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41b7e9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
call fcn.00418fe0
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41b841
cmp word [ecx], 1
jne 0x41b841
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41b833
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41b84d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov edx, dword [ebp - 0x6c]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax + 4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4c
mov edx, dword [0x42a0a4]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41b8ae
cmp word [ecx], 1
jne 0x41b8ae
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41b8a0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41b8b7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 8]
push edx
call fcn.00418fe0
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41b90f
cmp word [ecx], 1
jne 0x41b90f
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41b901
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41b91b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov edx, dword [ebp - 0x6c]
mov ecx, dword [ecx + 0xc]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4d
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41b971
cmp word [ecx], 1
jne 0x41b971
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41b963
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41b97d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov edx, dword [ecx + 0xc]
mov al, byte [edx + eax + 0x18]
mov ecx, dword [ebp + 0xc]
and al, byte [ecx]
test al, 1
je 0x41bff0
mov dword [ebp - 4], 0x4e
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x334]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x130], 0x28
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41ba04
cmp word [ecx], 1
jne 0x41ba04
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41b9f6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41ba0d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x130]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
call fcn.00421230
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [ebp - 0x14c]
mov ebx, dword [ecx]
push 0x407f74
mov edx, dword [ebp - 0x6c]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407be0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov eax, ebx
mov ebx, dword [ebp - 0x14c]
push ebx
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x41ba7d
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x4f
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x64]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x41bae5
cmp word [eax], 1
jne 0x41bae5
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41bad7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41baeb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41bb2e
cmp word [eax], 1
jne 0x41bb2e
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41bb20
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41bb34
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
mov edx, dword [0x42a0a4]
push edx
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41bb78
cmp word [eax], 1
jne 0x41bb78
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41bb6a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41bb7e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x58]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41bbc2
cmp word [eax], 1
jne 0x41bbc2
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41bbb4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41bbc8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41bc0e
cmp word [ecx], 1
jne 0x41bc0e
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41bc00
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41bc17
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x23c]
lea edx, [edx + ebx + 0x10]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x240]
lea edx, [edx + ebx + 0xc]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x244]
lea edx, [edx + ebx + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x248]
lea edx, [edx + ebx + 4]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.00425d60
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea edx, [ebp - 0x54]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call ebx
lea eax, [ebp - 0x58]
push eax
call ebx
lea ecx, [ebp - 0x5c]
push ecx
call ebx
lea edx, [ebp - 0x60]
push edx
call ebx
lea eax, [ebp - 0x64]
push eax
call ebx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x4c]
call esi
mov dword [ebp - 4], 0x50
mov ecx, dword [ebp - 0x4c]
push ecx
push 0x406260
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x41bf7e
mov dword [ebp - 4], 0x51
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
lea ecx, [ebp - 0x134]
push ecx
push ebx
call dword [eax + 0x1c]
fnclex
test eax, eax
jge 0x41bcfd
push 0x1c
push 0x407d48
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
lea ecx, [ebp - 0x90]
push ecx
push ebx
call dword [eax + 0x2c]
fnclex
test eax, eax
jge 0x41bd35
push 0x2c
push 0x407d48
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, 0x80020004
mov dword [ebp - 0xe0], eax
mov ecx, 0xa
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xf4], 0x405624
mov dword [ebp - 0xfc], 8
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x42a0a4]
test eax, eax
je 0x41bdb8
cmp word [eax], 1
jne 0x41bdb8
movsx ecx, word [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x158], ecx
cmp ecx, dword [eax + 0x10]
jb 0x41bda4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x158]
lea ebx, [eax*8]
sub ebx, eax
shl ebx, 2
jmp 0x41bdc0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
push 0x407fd0
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407ed0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov edx, dword [0x42a0a4]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ebx + 4]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40805c
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
mov edx, dword [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
push 0x408080
call edi
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
mov eax, dword [ebp - 0x90]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x98]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x9c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0xa0]
call esi
push eax
push 0x4080a4
call edi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
push 0x30
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0xe
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x48
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x41bff0
mov dword [ebp - 4], 0x52
xor edx, edx
lea ecx, [ebp - 0x70]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov dword [ebp - 0x13c], 0
xor edx, edx
lea ecx, [ebp - 0x6c]
call ebx
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 1
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x4c]
push eax
call fcn.00416350
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x53
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x54
push 0x32
call fcn.00405e84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x55
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41c04e
cmp word [ecx], 1
jne 0x41c04e
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c040
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c05a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov ecx, dword [ecx + 0xc]
mov dl, byte [ecx + eax + 0x18]
mov eax, dword [ebp + 0xc]
and dl, byte [eax]
test dl, 2
je 0x41c6cf
mov dword [ebp - 4], 0x56
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x130], 0x28
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41c0e3
cmp word [ecx], 1
jne 0x41c0e3
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c0d5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c0ec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x130]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
call fcn.00421230
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [ebp - 0x14c]
mov ebx, dword [ecx]
push 0x4080d4
mov edx, dword [ebp - 0x6c]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407be0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov eax, ebx
mov ebx, dword [ebp - 0x14c]
push ebx
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x41c15c
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x57
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x64]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x41c1c4
cmp word [eax], 1
jne 0x41c1c4
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41c1b6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c1ca
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x41c20d
cmp word [eax], 1
jne 0x41c20d
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41c1ff
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c213
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov edx, dword [0x42a0a4]
push edx
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x5c]
test eax, eax
je 0x41c257
cmp word [eax], 1
jne 0x41c257
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41c249
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c25d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x58]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x58]
test eax, eax
je 0x41c2a1
cmp word [eax], 1
jne 0x41c2a1
movsx ebx, word [ebp - 0x24]
sub ebx, dword [eax + 0x14]
cmp ebx, dword [eax + 0x10]
jb 0x41c293
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c2a7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x54]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41c2ed
cmp word [ecx], 1
jne 0x41c2ed
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c2df
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c2f6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x64]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x250]
lea edx, [edx + ebx + 0x10]
push edx
mov edx, dword [ebp - 0x60]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x254]
lea edx, [edx + ebx + 0xc]
push edx
mov edx, dword [ebp - 0x5c]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x258]
lea edx, [edx + ebx + 8]
push edx
mov edx, dword [ebp - 0x58]
mov edx, dword [edx + 0xc]
mov ebx, dword [ebp - 0x25c]
lea edx, [edx + ebx + 4]
push edx
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.004260e0
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea edx, [ebp - 0x54]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call ebx
lea eax, [ebp - 0x58]
push eax
call ebx
lea ecx, [ebp - 0x5c]
push ecx
call ebx
lea edx, [ebp - 0x60]
push edx
call ebx
lea eax, [ebp - 0x64]
push eax
call ebx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x4c]
call esi
mov dword [ebp - 4], 0x58
mov ecx, dword [ebp - 0x4c]
push ecx
push 0x406260
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x41c65d
mov dword [ebp - 4], 0x59
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
lea ecx, [ebp - 0x134]
push ecx
push ebx
call dword [eax + 0x1c]
fnclex
test eax, eax
jge 0x41c3dc
push 0x1c
push 0x407d48
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
lea ecx, [ebp - 0x90]
push ecx
push ebx
call dword [eax + 0x2c]
fnclex
test eax, eax
jge 0x41c414
push 0x2c
push 0x407d48
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, 0x80020004
mov dword [ebp - 0xe0], eax
mov ecx, 0xa
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xf4], 0x405624
mov dword [ebp - 0xfc], 8
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x42a0a4]
test eax, eax
je 0x41c497
cmp word [eax], 1
jne 0x41c497
movsx ecx, word [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x158], ecx
cmp ecx, dword [eax + 0x10]
jb 0x41c483
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x158]
lea ebx, [eax*8]
sub ebx, eax
shl ebx, 2
jmp 0x41c49f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
push 0x408120
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407ed0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov edx, dword [0x42a0a4]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ebx + 4]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40805c
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
mov edx, dword [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
push 0x408080
call edi
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
mov eax, dword [ebp - 0x90]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x98]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x9c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0xa0]
call esi
push eax
push 0x4080a4
call edi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
push 0x30
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0x9c]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0xe
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0xa4]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x48
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x41c6cf
mov dword [ebp - 4], 0x5a
xor edx, edx
lea ecx, [ebp - 0x70]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov dword [ebp - 0x13c], 0
xor edx, edx
lea ecx, [ebp - 0x6c]
call ebx
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 1
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x4c]
push eax
call fcn.00416350
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x5b
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x5c
push 0x32
call fcn.00405e84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x5d
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41c72d
cmp word [ecx], 1
jne 0x41c72d
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c71f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c739
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov ecx, dword [ecx + 0xc]
mov dl, byte [ecx + eax + 0x18]
mov eax, dword [ebp + 0xc]
and dl, byte [eax]
test dl, 4
je 0x41d228
mov dword [ebp - 4], 0x5e
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x130], 0x1e
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41c7c2
cmp word [ecx], 1
jne 0x41c7c2
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c7b4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c7cb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x130]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 4]
push edx
call fcn.00421230
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [ebp - 0x14c]
mov ebx, dword [ecx]
push 0x4081b0
mov edx, dword [ebp - 0x6c]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407be0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov eax, ebx
mov ebx, dword [ebp - 0x14c]
push ebx
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x41c83b
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x5f
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41c89b
cmp word [ecx], 1
jne 0x41c89b
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c88d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c8a7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x14]
push edx
push 0x406260
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
je 0x41ca05
mov dword [ebp - 4], 0x60
xor ebx, ebx
mov dword [ebp - 4], 0x61
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], 0x62
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41c91e
cmp word [ecx], 1
jne 0x41c91e
movsx edx, word [ebp - 0x24]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x148], edx
cmp edx, dword [ecx + 0x10]
jb 0x41c910
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov edx, dword [ebp - 0x148]
lea eax, [edx*8]
sub eax, edx
shl eax, 2
jmp 0x41c92a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
add bx, 1
jo 0x41e360
movsx edx, bx
push edx
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x14]
push edx
push 0x4060b4
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov ebx, eax
mov dword [ebp - 4], 0x63
mov ax, word [ebp - 0x2c]
add ax, 1
jo 0x41e360
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], 0x64
test bx, bx
jne 0x41c8d5
mov dword [ebp - 4], 0x65
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x54]
test ecx, ecx
je 0x41c9c7
cmp word [ecx], 1
jne 0x41c9c7
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41c9b9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41c9d0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x54]
lea edx, [ebp - 0x2c]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0x14]
push edx
call fcn.004265e0
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
call ebx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x4c]
call esi
jmp 0x41ca0b
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x66
mov ecx, dword [ebp - 0x4c]
push ecx
push 0x406260
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x41cbaa
mov dword [ebp - 4], 0x67
mov eax, 0x80020004
mov dword [ebp - 0xe0], eax
mov ecx, 0xa
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xf4], 0x405624
mov dword [ebp - 0xfc], 8
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x42a0a4]
test eax, eax
je 0x41cab3
cmp word [eax], 1
jne 0x41cab3
movsx ecx, word [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x148], ecx
cmp ecx, dword [eax + 0x10]
jb 0x41ca9f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x148]
lea ebx, [eax*8]
sub ebx, eax
shl ebx, 2
jmp 0x41cabb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
push 0x40820c
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x40829c
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov edx, dword [0x42a0a4]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ebx + 0x14]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
push 0x4080a4
call edi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
push 0x30
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
jmp 0x41d228
mov dword [ebp - 4], 0x68
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x41cc01
cmp word [ecx], 1
jne 0x41cc01
movsx eax, word [ebp - 0x24]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x15c], eax
cmp eax, dword [ecx + 0x10]
jb 0x41cbed
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x15c]
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 2
mov dword [ebp - 0x264], ecx
jmp 0x41cc0d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x64]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x64]
test ecx, ecx
je 0x41cc5c
cmp word [ecx], 1
jne 0x41cc5c
movsx eax, word [ebp - 0x24]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x158], eax
cmp eax, dword [ecx + 0x10]
jb 0x41cc48
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x158]
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 2
mov dword [ebp - 0x268], ecx
jmp 0x41cc68
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
mov edx, dword [0x42a0a4]
push edx
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x41ccb8
cmp word [ecx], 1
jne 0x41ccb8
movsx eax, word [ebp - 0x24]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x154], eax
cmp eax, dword [ecx + 0x10]
jb 0x41cca4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x154]
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 2
mov dword [ebp - 0x26c], ecx
jmp 0x41ccc4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [0x42a0a4]
push ecx
lea edx, [ebp - 0x5c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x5c]
test ecx, ecx
je 0x41cd14
cmp word [ecx], 1
jne 0x41cd14
movsx eax, word [ebp - 0x24]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x150], eax
cmp eax, dword [ecx + 0x10]
jb 0x41cd00
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x150]
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 2
mov dword [ebp - 0x270], ecx
jmp 0x41cd20
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov eax, dword [0x42a0a4]
push eax
lea ecx, [ebp - 0x58]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x58]
test ecx, ecx
je 0x41cd6f
cmp word [ecx], 1
jne 0x41cd6f
movsx eax, word [ebp - 0x24]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x14c], eax
cmp eax, dword [ecx + 0x10]
jb 0x41cd5b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x14c]
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 2
mov dword [ebp - 0x274], ecx
jmp 0x41cd7b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
mov edx, dword [0x42a0a4]
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x41cdc5
cmp word [eax], 1
jne 0x41cdc5
movsx ecx, word [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x148], ecx
cmp ecx, dword [eax + 0x10]
jb 0x41cdb7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x148]
lea eax, [ecx*8]
sub eax, ecx
shl eax, 2
jmp 0x41cdcb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x68]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x264]
lea edx, [edx + ecx + 0x14]
push edx
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x268]
lea edx, [edx + ecx + 0x10]
push edx
mov ecx, dword [ebp - 0x60]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x26c]
lea edx, [edx + ecx + 0xc]
push edx
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x270]
lea edx, [edx + ecx + 8]
push edx
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x274]
lea edx, [edx + ecx + 4]
push edx
mov ecx, dword [ebp - 0x54]
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.00426780
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea eax, [ebp - 0x54]
push eax
call ebx
lea ecx, [ebp - 0x58]
push ecx
call ebx
lea edx, [ebp - 0x5c]
push edx
call ebx
lea eax, [ebp - 0x60]
push eax
call ebx
lea ecx, [ebp - 0x64]
push ecx
call ebx
lea edx, [ebp - 0x68]
push edx
call ebx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
lea ecx, [ebp - 0x4c]
call esi
mov dword [ebp - 4], 0x69
mov eax, dword [ebp - 0x50]
push eax
push 0x406260
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x41cedf
mov dword [ebp - 4], 0x6a
mov ecx, dword [0x42a0a4]
test ecx, ecx
je 0x41cebf
cmp word [ecx], 1
jne 0x41cebf
movsx ebx, word [ebp - 0x24]
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41ceb1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
lea eax, [ebx*8]
sub eax, ebx
shl eax, 2
jmp 0x41cecb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a0a4]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0x14]
lea ecx, [ebp - 0x50]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
jmp 0x41cee5
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x6b
mov edx, dword [ebp - 0x4c]
push edx
push 0x406260
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x41d1c2
mov dword [ebp - 4], 0x6c
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov ecx, dword [ebx]
lea edx, [ebp - 0x134]
push edx
push ebx
call dword [ecx + 0x1c]
fnclex
test eax, eax
jge 0x41cf42
push 0x1c
push 0x407d48
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov ecx, dword [ebx]
lea edx, [ebp - 0x90]
push edx
push ebx
call dword [ecx + 0x2c]
fnclex
test eax, eax
jge 0x41cf7a
push 0x2c
push 0x407d48
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, 0x80020004
mov dword [ebp - 0xe0], eax
mov ecx, 0xa
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xf4], 0x405624
mov dword [ebp - 0xfc], 8
lea edx, [ebp - 0xfc]
lea ecx, [ebp - 0xc8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [0x42a0a4]
test eax, eax
je 0x41cffd
cmp word [eax], 1
jne 0x41cffd
movsx ecx, word [ebp - 0x24]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x158], ecx
cmp ecx, dword [eax + 0x10]
jb 0x41cfe9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x158]
lea ebx, [eax*8]
sub ebx, eax
shl ebx, 2
jmp 0x41d005
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ebx, eax
push 0x4082b4
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0x407ed0
call edi
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
mov eax, dword [0x42a0a4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + ebx + 4]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40805c
call edi
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
push eax
mov eax, dword [ebp - 0x134]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x84]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x8c]
call esi
push eax
push 0x408080
call edi
mov edx, eax
lea ecx, [ebp - 0x94]
call esi
push eax
mov ecx, dword [ebp - 0x90]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x98]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0x9c]
call esi
push eax
push 0x4065f4
call edi
mov edx, eax
lea ecx, [ebp - 0xa0]
call esi
push eax
push 0x4080a4
call edi
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb8], 8
lea edx, [ebp - 0xe8]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
push 0x30
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0xe
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0xa4]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x48
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xd8]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x41d228
mov dword [ebp - 4], 0x6d
xor edx, edx
lea ecx, [ebp - 0x70]
call ebx
xor edi, edi
mov dword [ebp - 0x13c], edi
xor edx, edx
lea ecx, [ebp - 0x6c]
call ebx
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x134], 1
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x4c]
push ecx
call fcn.00416350
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x6e
mov dword [ebp - 0x104], 0x5a
mov dword [ebp - 0x10c], 2
mov cx, word [ebp - 0x24]
add cx, 1
jo 0x41e360
movsx edx, cx
mov dword [ebp - 0x278], edx
fild dword [ebp - 0x278]
fstp qword [ebp - 0x280]
fild dword [0x42a098]
fstp qword [ebp - 0x288]
fld qword [ebp - 0x280]
cmp dword [section..data], 0
jne 0x41d289
fdiv qword [ebp - 0x288]
jmp 0x41d29a
push dword [ebp - 0x284]
push dword [ebp - 0x288]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fmul qword [0x401718]
fstp qword [ebp - 0xb0]
fnstsw ax
test al, 0xd
jne 0x41e35b
mov dword [ebp - 0xb8], 5
push 0
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0xc8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
mov byte [ebp - 0x114], al
mov ecx, 0x11
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x118]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x110]
mov dword [edx + 0xc], ecx
push 0x68030000
mov edx, dword [eax]
push eax
call dword [edx + 0x3cc]
push eax
lea eax, [ebp - 0xa4]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x6f
mov eax, dword [ebx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
push eax
lea edx, [ebp - 0xa8]
push edx
call edi
mov edi, eax
mov eax, dword [ebx]
mov ebx, dword [edi]
push 0
push 0x68030000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3cc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x407ee4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push edi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x41d408
push 0x54
push 0x405fdc
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x70
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x71
push 0x32
call fcn.00405e84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x72
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
mov edx, dword [eax]
push eax
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
mov ecx, dword [edi]
lea edx, [ebp - 0x130]
push edx
push edi
call dword [ecx + 0x88]
fnclex
test eax, eax
jge 0x41d4ab
push 0x88
push 0x405a04
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor eax, eax
cmp word [ebp - 0x130], ax
sete al
neg eax
xor ecx, ecx
cmp word [0x42a0b0], cx
sete cl
neg ecx
and eax, ecx
mov di, ax
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test di, di
jne 0x41d503
mov dword [ebp - 4], 0x74
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x41e360
mov dword [ebp - 0x24], eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov ebx, eax
jmp 0x41b78c
mov dword [ebp - 4], 0x73
mov esi, dword [ebx]
mov ecx, 6
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0x130], al
mov edx, dword [esi]
lea eax, [ebp - 0x130]
push eax
push esi
call dword [edx + 0x6f8]
fnclex
test eax, eax
jge 0x41e245
jmp 0x41e233
mov dword [ebp - 4], 0x75
mov ecx, 0x5f
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0xf4], al
mov ecx, 0x11
mov dword [ebp - 0xfc], ecx
mov ebx, dword [ebp + 0x10]
mov eax, dword [ebx]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf8]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 0xc], ecx
push 0x68030000
mov edx, dword [eax]
push eax
call dword [edx + 0x3cc]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x76
mov eax, dword [ebx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov eax, dword [ebx]
push 0x408348
push ebx
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x41d5f7
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x77
mov ecx, dword [ebp + 0x10]
mov eax, dword [ecx]
mov edx, dword [eax]
push eax
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, eax
mov ecx, dword [ebx]
push 0x408360
push ebx
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x41d648
push 0x54
push 0x405fdc
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x78
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x79
mov ecx, dword [0x42a08c]
sub ecx, 1
jo 0x41e360
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x17c], eax
xor ebx, ebx
mov dword [ebp - 0x24], ebx
cmp bx, word [ebp - 0x17c]
jg 0x41dcb7
mov dword [ebp - 4], 0x7a
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x41d6d7
cmp word [ecx], 1
jne 0x41d6d7
movsx eax, bx
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x148], eax
cmp eax, dword [ecx + 0x10]
jb 0x41d6cf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov eax, dword [ebp - 0x148]
lea eax, [eax + eax*2]
shl eax, 3
jmp 0x41d6e3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov edx, dword [ecx + 0xc]
test byte [edx + eax + 8], 2
je 0x41d9be
mov dword [ebp - 4], 0x7b
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x334]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x14c], eax
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x41d749
cmp word [ecx], 1
jne 0x41d749
movsx ebx, bx
sub ebx, dword [ecx + 0x14]
cmp ebx, dword [ecx + 0x10]
jb 0x41d741
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [ebx + ebx*2]
shl eax, 3
jmp 0x41d755
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov edx, dword [ebp - 0x14c]
mov ebx, dword [edx]
push 0x407fb8
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x407be0
call edi
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
mov edi, dword [ebp - 0x14c]
push edi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x41d7a1
push 0x54
push 0x405fdc
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x7c
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x41d7f9
cmp word [ecx], 1
jne 0x41d7f9
mov ebx, dword [ebp - 0x24]
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41d7f1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41d808
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov ebx, dword [ebp - 0x24]
push 1
push 0xffffffffffffffff
push 0x4060b4
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax + 0xc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcInStrRev]
mov dword [ebp - 0x134], eax
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x41d854
cmp word [ecx], 1
jne 0x41d854
movsx edi, bx
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x41d84c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
lea eax, [edi + edi*2]
shl eax, 3
jmp 0x41d860
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov edx, dword [ebp - 0x134]
push edx
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax + 0xc]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call esi
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x80], 0
mov eax, dword [0x42a09c]
test eax, eax
je 0x41d8ba
cmp word [eax], 1
jne 0x41d8ba
movsx edi, bx
sub edi, dword [eax + 0x14]
cmp edi, dword [eax + 0x10]
jb 0x41d8ac
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea edi, [edi + edi*2]
shl edi, 3
mov dword [ebp - 0x28c], edi
jmp 0x41d8c6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
push 1
mov edx, dword [ebp - 0x1b0]
lea ecx, [ebp - 0x78]
call esi
push eax
lea ecx, [ebp - 0x7c]
push ecx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
call edi
push eax
push 0x406260
lea edx, [ebp - 0x74]
push edx
call edi
push eax
mov eax, dword [0x42a09c]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x28c]
mov eax, dword [ecx + edx + 0xc]
push eax
lea ecx, [ebp - 0x70]
push ecx
call edi
push eax
push 0x406dc0
lea edx, [ebp - 0x6c]
push edx
call edi
push eax
push 0
call fcn.00405c70
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call edi
mov ecx, dword [0x42a09c]
test ecx, ecx
je 0x41d95d
cmp word [ecx], 1
jne 0x41d95d
movsx eax, bx
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x154], eax
cmp eax, dword [ecx + 0x10]
jb 0x41d955
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov eax, dword [ebp - 0x154]
lea eax, [eax + eax*2]
shl eax, 3
jmp 0x41d969
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [0x42a09c]
mov edx, dword [ebp - 0x70]
push edx
mov ecx, dword [ecx + 0xc]
lea edx, [ecx + eax + 0xc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x1c
mov dword [ebp - 4], 0x7d
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x7e
push 0xfa
call fcn.00405e84
call edi
mov dword [ebp - 4], 0x7f
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
mov eax, dword [edi]
lea ecx, [ebp - 0x130]
push ecx
push edi
call dword [eax + 0x88]
fnclex
test eax, eax
jge 0x41da0b
push 0x88
push 0x405a04
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor edx, edx
cmp word [ebp - 0x130], dx
sete dl
neg edx
xor eax, eax
cmp word [0x42a0b0], ax
sete al
neg eax
and edx, eax
mov di, dx
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test di, di
jne 0x41dc7b
mov dword [ebp - 4], 0x81
mov dword [ebp - 0x104], 0x5f
mov dword [ebp - 0x10c], 2
add bx, 1
jo 0x41e360
movsx ecx, bx
mov dword [ebp - 0x290], ecx
fild dword [ebp - 0x290]
fstp qword [ebp - 0x298]
fild dword [0x42a08c]
fstp qword [ebp - 0x2a0]
fld qword [ebp - 0x298]
cmp dword [section..data], 0
jne 0x41da9e
fdiv qword [ebp - 0x2a0]
jmp 0x41daaf
push dword [ebp - 0x29c]
push dword [ebp - 0x2a0]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fmul qword [0x401718]
fstp qword [ebp - 0xb0]
fnstsw ax
test al, 0xd
jne 0x41e35b
mov dword [ebp - 0xb8], 5
push 0
lea edx, [ebp - 0xb8]
push edx
lea eax, [ebp - 0xc8]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcRound]
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xd8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
mov byte [ebp - 0x114], al
mov ecx, 0x11
mov edi, dword [ebp + 0x10]
mov eax, dword [edi]
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x118]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x110]
mov dword [edx + 0xc], ecx
push 0x68030000
mov edx, dword [eax]
push eax
call dword [edx + 0x3cc]
push eax
lea eax, [ebp - 0xa4]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x82
mov eax, dword [edi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x330]
push eax
lea edx, [ebp - 0xa8]
push edx
call ebx
mov edi, eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ebx, dword [edi]
push 0
push 0x68030000
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3cc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrUI1]
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
push eax
push 0x407ee4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push edi
call dword [ebx + 0x54]
fnclex
test eax, eax
jge 0x41dc20
push 0x54
push 0x405fdc
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0xa4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x83
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x41e360
mov ebx, eax
mov dword [ebp - 0x24], ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
jmp 0x41d688
mov dword [ebp - 4], 0x80
mov edx, dword [ebp + 0x10]
mov esi, dword [edx]
mov ecx, 6
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0x130], al
mov eax, dword [esi]
lea ecx, [ebp - 0x130]
push ecx
push esi
call dword [eax + 0x6f8]
fnclex
test eax, eax
jge 0x41e245
jmp 0x41e233
mov dword [ebp - 4], 0x84
mov edx, dword [ebp + 0x10]
mov eax, dword [edx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x334]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
mov eax, dword [edi]
push 0x408360
push edi
call dword [eax + 0x54]
fnclex
test eax, eax
jge 0x41dcfc
push 0x54
push 0x405fdc
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x85
mov dword [ebp - 0xb0], 0x80020004
mov dword [ebp - 0xb8], 0xa
lea ecx, [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcFreeFile]
mov edi, eax
lea ecx, [ebp - 0xb8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x86
mov edx, 0x407a14
lea ecx, [ebp - 0x6c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x6c]
push eax
call fcn.00418fe0
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x70]
call esi
push eax
push edi
push 0xffffffffffffffff
push 0x220
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 4], 0x87
mov ecx, 1
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
call ebx
mov byte [0x42a089], al
mov dword [ebp - 4], 0x88
mov ecx, dword [0x42a0ac]
mov dword [0x42a08c], ecx
mov dword [ebp - 4], 0x89
push edi
call dword [sym.imp.MSVBVM60.DLL_rtcFileLength]
add eax, 1
jo 0x41e360
mov dword [0x42a04c], eax
mov dword [ebp - 4], 0x8a
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaFileSeek]
mov dword [ebp - 4], 0x8b
push 0
mov edx, dword [0x42a0ac]
sub edx, 1
jo 0x41e360
push edx
push 1
push 0x405bc8
push 0x42a0a8
push 0x18
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x8c
push edi
push 0x42a070
push 0x4074e8
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaPutOwner3]
call esi
mov dword [ebp - 4], 0x8d
push edi
push 0x42a0a8
push 0x407880
call esi
mov dword [ebp - 4], 0x8e
push edi
push 0x42a04c
push 0x24
call dword [sym.imp.MSVBVM60.DLL___vbaPut3]
mov dword [ebp - 4], 0x8f
push edi
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
mov dword [ebp - 4], 0x90
xor ecx, ecx
call ebx
mov byte [0x42a089], al
mov dword [ebp - 4], 0x91
call dword [sym.imp.MSVBVM60.DLL_rtcDoEvents]
mov dword [ebp - 4], 0x92
push 0xfa
call fcn.00405e84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x93
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2fc]
push eax
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, dword [esi]
lea ecx, [ebp - 0x130]
push ecx
push esi
call dword [eax + 0x88]
fnclex
test eax, eax
jge 0x41defb
push 0x88
push 0x405a04
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x41df01
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor edx, edx
cmp word [ebp - 0x130], dx
sete dl
neg edx
xor eax, eax
cmp word [0x42a0b0], ax
sete al
neg eax
and edx, eax
mov si, dx
lea ecx, [ebp - 0xa4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test si, si
je 0x41df85
mov dword [ebp - 4], 0x94
mov ecx, dword [ebp + 0x10]
mov esi, dword [ecx]
mov ecx, 6
call ebx
mov byte [ebp - 0x130], al
mov edx, dword [esi]
lea eax, [ebp - 0x130]
push eax
push esi
call dword [edx + 0x6f8]
fnclex
test eax, eax
jge 0x41e245
push 0x6f8
push 0x405690
push esi
push eax
call edi
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x41e348
jmp 0x41e328
mov dword [ebp - 4], 0x95
mov ecx, dword [ebp + 0x10]
mov esi, dword [ecx]
mov ecx, 5
call ebx
mov byte [ebp - 0x130], al
mov edx, dword [esi]
lea eax, [ebp - 0x130]
push eax
push esi
call dword [edx + 0x6f8]
fnclex
test eax, eax
jge 0x41e245
push 0x6f8
push 0x405690
push esi
push eax
call edi
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x41e348
jmp 0x41e328
push 0x6f8
push 0x405690
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x41e348
jmp 0x41e328
lea eax, [ebp - 0x48]
push eax
push 0x405b88
call dword [sym.imp.MSVBVM60.DLL___vbaRecDestruct]
lea ecx, [ebp - 0x4c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call esi
lea ecx, [ebp - 0x50]
call esi
ret
jmp 0x401e7c
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop