Function at 0x41cf80
Capabilities:
Authenticate hmac

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x402906
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x270
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x401348
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 2
push 0x40a6b0
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x40a6cc
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x40a6b0
lea edx, [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x40a6cc
lea eax, [ebp - 0xa8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 2
push 0x40a6b0
lea ecx, [ebp - 0xe0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTypeName]
mov edx, eax
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 4
mov edx, dword [ebp - 0xfc]
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 5
mov eax, dword [ebp - 0x198]
push eax
push 0x40a5b0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x41d0b7
mov dword [ebp - 4], 6
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarCopy]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x41d6a8
mov dword [ebp - 4], 7
mov ecx, dword [ebp - 0x198]
push ecx
push 0x40a5c4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x41d11c
mov dword [ebp - 4], 8
push 0
push 0x40a5d4
mov edx, dword [ebp + 8]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x41d6a8
mov dword [ebp - 4], 9
mov ecx, dword [ebp - 0x198]
push ecx
push 0x40a5e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x41d33d
mov dword [ebp - 4], 0xa
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x19c]
push eax
push 0x40a5f4
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov dword [ebp - 0x1f4], eax
jmp 0x41d2bc
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x14c], 0x409b64
mov dword [ebp - 0x154], 0x8008
push 0
push 0x40a5d4
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x18c]
test ecx, ecx
je 0x41d296
mov dword [ebp - 4], 0xc
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 8
mov dword [ebp - 0x15c], 0x40a608
mov dword [ebp - 0x164], 8
lea eax, [ebp - 0x154]
push eax
push 0
push 0x40a5d4
mov ecx, dword [ebp - 0xf8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x19c]
push ecx
push 0x40a5f4
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jne 0x41d17f
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4008
mov eax, dword [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x41ecf1
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x41d6a8
mov dword [ebp - 4], 0x10
mov ecx, dword [ebp - 0x198]
push ecx
push 0x40a610
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x41d5f8
mov dword [ebp - 4], 0x11
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x1a4], ax
mov word [ebp - 0x1a0], 1
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xc8], ax
jmp 0x41d3d3
mov ax, word [ebp - 0xc8]
add ax, word [ebp - 0x1a0]
jo 0x41ecf1
mov word [ebp - 0xc8], ax
mov cx, word [ebp - 0xc8]
cmp cx, word [ebp - 0x1a4]
jg 0x41d584
mov dword [ebp - 4], 0x12
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x15c], 0x409b64
mov dword [ebp - 0x164], 0x8008
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov edx, dword [ebp - 0x150]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x14c]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x148]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov word [ebp - 0x18c], ax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x18c]
test eax, eax
je 0x41d578
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xc8]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
mov dword [ebp - 0x16c], 0x40a608
mov dword [ebp - 0x174], 8
lea eax, [ebp - 0x164]
push eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x154]
mov dword [ecx], edx
mov eax, dword [ebp - 0x150]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x14c]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x148]
mov dword [ecx + 0xc], eax
push 1
mov ecx, dword [ebp + 8]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
push eax
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x174]
push ecx
lea edx, [ebp - 0x134]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x15
jmp 0x41d3b8
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0xbc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
mov ecx, dword [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x41ecf1
push eax
lea edx, [ebp - 0x154]
push edx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x41d6a8
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x13c], 0x80020004
mov dword [ebp - 0x144], 0xa
mov dword [ebp - 0x12c], 0x80020004
mov dword [ebp - 0x134], 0xa
mov dword [ebp - 0x11c], 0x80020004
mov dword [ebp - 0x124], 0xa
mov edx, dword [ebp - 0xfc]
push edx
push 0x40a634
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], 8
lea eax, [ebp - 0x144]
push eax
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x124]
push edx
push 0
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x144]
push ecx
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x1a
mov edx, dword [ebp - 0xbc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0xb4], ax
mov dword [ebp - 4], 0x1b
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0x11
jae 0x41d710
mov dword [ebp - 0x1f8], 0
jmp 0x41d71c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x2e
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18c], 2
cmp dword [ebp - 0x18c], 0x11
jae 0x41d751
mov dword [ebp - 0x1fc], 0
jmp 0x41d75d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x59
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18c], 3
cmp dword [ebp - 0x18c], 0x11
jae 0x41d792
mov dword [ebp - 0x200], 0
jmp 0x41d79e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x8e
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x18c], 4
cmp dword [ebp - 0x18c], 0x11
jae 0x41d7d3
mov dword [ebp - 0x204], 0
jmp 0x41d7df
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x3f
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x18c], 5
cmp dword [ebp - 0x18c], 0x11
jae 0x41d814
mov dword [ebp - 0x208], 0
jmp 0x41d820
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xe7
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x18c], 6
cmp dword [ebp - 0x18c], 0x11
jae 0x41d855
mov dword [ebp - 0x20c], 0
jmp 0x41d861
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x20
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x18c], 7
cmp dword [ebp - 0x18c], 0x11
jae 0x41d896
mov dword [ebp - 0x210], 0
jmp 0x41d8a2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x81
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x18c], 8
cmp dword [ebp - 0x18c], 0x11
jae 0x41d8d7
mov dword [ebp - 0x214], 0
jmp 0x41d8e3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x33
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x18c], 9
cmp dword [ebp - 0x18c], 0x11
jae 0x41d918
mov dword [ebp - 0x218], 0
jmp 0x41d924
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x1c
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x18c], 0xa
cmp dword [ebp - 0x18c], 0x11
jae 0x41d959
mov dword [ebp - 0x21c], 0
jmp 0x41d965
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x61
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x18c], 0xb
cmp dword [ebp - 0x18c], 0x11
jae 0x41d99a
mov dword [ebp - 0x220], 0
jmp 0x41d9a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0xf8
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x18c], 0xc
cmp dword [ebp - 0x18c], 0x11
jae 0x41d9db
mov dword [ebp - 0x224], 0
jmp 0x41d9e7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x29
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x18c], 0xd
cmp dword [ebp - 0x18c], 0x11
jae 0x41da1c
mov dword [ebp - 0x228], 0
jmp 0x41da28
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0x88
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x18c], 0xe
cmp dword [ebp - 0x18c], 0x11
jae 0x41da5d
mov dword [ebp - 0x22c], 0
jmp 0x41da69
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x34]
mov word [edx + ecx*2], 0x35
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18c], 0xf
cmp dword [ebp - 0x18c], 0x11
jae 0x41da9e
mov dword [ebp - 0x230], 0
jmp 0x41daaa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x34]
mov word [ecx + eax*2], 0x4e
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x18c], 0x10
cmp dword [ebp - 0x18c], 0x11
jae 0x41dadf
mov dword [ebp - 0x234], 0
jmp 0x41daeb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x34]
mov word [eax + edx*2], 0xa4
mov dword [ebp - 4], 0x2c
mov word [ebp - 0xc0], 0
mov dword [ebp - 4], 0x2d
mov word [ebp - 0x1ac], 0x200
mov word [ebp - 0x1a8], 1
mov word [ebp - 0xb8], 0
jmp 0x41db49
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1a8]
jo 0x41ecf1
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1ac]
jg 0x41dbb4
mov dword [ebp - 4], 0x2e
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x41db85
mov dword [ebp - 0x238], 0
jmp 0x41db91
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov ax, word [ebp - 0xb8]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x2f
jmp 0x41db2e
mov dword [ebp - 4], 0x30
mov word [ebp - 0x1b4], 0x200
mov word [ebp - 0x1b0], 1
mov word [ebp - 0xb8], 0
jmp 0x41dbf3
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1b0]
jo 0x41ecf1
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1b4]
jg 0x41dd64
mov dword [ebp - 4], 0x31
mov ax, word [ebp - 0xc0]
add ax, word [ebp - 0xb8]
jo 0x41ecf1
and ax, 0xff
jns 0x41dc30
dec ax
or ax, 0xff00
inc ax
mov word [ebp - 0xc0], ax
mov dword [ebp - 4], 0x32
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x41dc63
mov dword [ebp - 0x23c], 0
jmp 0x41dc6f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [eax + edx*2]
mov word [ebp - 0x54], cx
mov dword [ebp - 4], 0x33
movsx edx, word [ebp - 0xc0]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x41dcaf
mov dword [ebp - 0x240], 0
jmp 0x41dcbb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x41dce0
mov dword [ebp - 0x244], 0
jmp 0x41dcec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x244], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x190]
mov esi, dword [ebp - 0x9c]
mov ax, word [esi + eax*2]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x34
movsx ecx, word [ebp - 0xc0]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x41dd38
mov dword [ebp - 0x248], 0
jmp 0x41dd44
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
mov cx, word [ebp - 0x54]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x35
jmp 0x41dbd8
mov dword [ebp - 4], 0x36
mov edx, dword [ebp + 0x10]
cmp word [edx], 1
jne 0x41df3d
mov dword [ebp - 4], 0x37
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x38
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x14c], 0x40a698
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x114]
push eax
push 0x10
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x114]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x3a
mov word [ebp - 0x1bc], 0x200
mov word [ebp - 0x1b8], 1
mov word [ebp - 0xb8], 0
jmp 0x41de48
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1b8]
jo 0x41ecf1
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1bc]
jg 0x41df38
mov dword [ebp - 4], 0x3b
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x201
jae 0x41de88
mov dword [ebp - 0x24c], 0
jmp 0x41de94
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x9c]
movsx ecx, word [eax + edx*2]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x201
jae 0x41dec2
mov dword [ebp - 0x250], 0
jmp 0x41dece
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov dx, word [ebp - 0xe8]
add dx, 0x30
jo 0x41ecf1
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x64]
mov word [ecx + eax*2], dx
mov dword [ebp - 4], 0x3c
mov dx, word [ebp - 0xe8]
add dx, 1
jo 0x41ecf1
mov word [ebp - 0xe8], dx
mov dword [ebp - 4], 0x3d
cmp word [ebp - 0xe8], 0xa
jne 0x41df2c
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x40
jmp 0x41de2d
jmp 0x41e2b0
mov dword [ebp - 4], 0x41
mov eax, dword [ebp + 0x10]
cmp word [eax], 2
jne 0x41e22f
mov dword [ebp - 4], 0x42
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x43
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x44
mov word [ebp - 0x48], 0x10
mov dword [ebp - 4], 0x45
mov dword [ebp - 0x14c], 0x40a698
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x10
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x46
mov word [ebp - 0xc4], 0
mov dword [ebp - 4], 0x47
mov word [ebp - 0x1c4], 0x200
mov word [ebp - 0x1c0], 1
mov word [ebp - 0xb8], 0
jmp 0x41e03e
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1c0]
jo 0x41ecf1
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1c4]
jg 0x41e22a
mov dword [ebp - 4], 0x48
movsx edx, word [ebp - 0xc4]
test edx, edx
je 0x41e14d
mov dword [ebp - 4], 0x49
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x41e094
mov dword [ebp - 0x254], 0
jmp 0x41e0a0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x9c]
movsx eax, word [edx + ecx*2]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x201
jae 0x41e0ce
mov dword [ebp - 0x258], 0
jmp 0x41e0da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov cx, word [ebp - 0xe8]
add cx, 0x30
jo 0x41ecf1
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x64]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x4a
mov cx, word [ebp - 0xe8]
add cx, 1
jo 0x41ecf1
mov word [ebp - 0xe8], cx
mov dword [ebp - 4], 0x4b
cmp word [ebp - 0xe8], 0xa
jne 0x41e138
mov dword [ebp - 4], 0x4c
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x4e
mov word [ebp - 0xc4], 0
jmp 0x41e21e
mov dword [ebp - 4], 0x50
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x201
jae 0x41e179
mov dword [ebp - 0x25c], 0
jmp 0x41e185
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x9c]
movsx edx, word [ecx + eax*2]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x201
jae 0x41e1b3
mov dword [ebp - 0x260], 0
jmp 0x41e1bf
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov ax, word [ebp - 0x28]
add ax, 0x41
jo 0x41ecf1
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x64]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x51
mov ax, word [ebp - 0x28]
add ax, 1
jo 0x41ecf1
mov word [ebp - 0x28], ax
mov dword [ebp - 4], 0x52
cmp word [ebp - 0x28], 0x1a
jne 0x41e20e
mov dword [ebp - 4], 0x53
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x55
mov word [ebp - 0xc4], 0xffff
mov dword [ebp - 4], 0x57
jmp 0x41e023
jmp 0x41e2b0
mov dword [ebp - 4], 0x59
mov word [ebp - 0x48], 8
mov dword [ebp - 4], 0x5a
mov dword [ebp - 0x14c], 0x40a698
mov dword [ebp - 0x154], 8
lea edx, [ebp - 0x154]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x114]
push ecx
push 0x13
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStringVar]
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5c
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x5d
mov ax, word [ebp - 0xb4]
mov word [ebp - 0x1cc], ax
mov word [ebp - 0x1c8], 1
mov word [ebp - 0xb8], 1
jmp 0x41e304
mov cx, word [ebp - 0xb8]
add cx, word [ebp - 0x1c8]
jo 0x41ecf1
mov word [ebp - 0xb8], cx
mov dx, word [ebp - 0xb8]
cmp dx, word [ebp - 0x1cc]
jg 0x41e4d4
mov dword [ebp - 4], 0x5e
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x11
jae 0x41e341
mov dword [ebp - 0x264], 0
jmp 0x41e34d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x154], 0x4008
lea edx, [ebp - 0x114]
push edx
movsx eax, word [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x124]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x41e3bc
mov dword [ebp - 0x268], 0
jmp 0x41e3c8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x104]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0xd4]
mov cx, word [edx + ecx*2]
add cx, ax
jo 0x41ecf1
xor cx, 0x12
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0xd4]
mov word [eax + edx*2], cx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5f
movsx eax, word [ebp - 0xf4]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x41e45e
mov dword [ebp - 0x26c], 0
jmp 0x41e46a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0xd4]
mov ax, word [ebp - 0x4c]
add ax, word [edx + ecx*2]
jo 0x41ecf1
mov word [ebp - 0x4c], ax
mov dword [ebp - 4], 0x60
mov cx, word [ebp - 0xf4]
add cx, 1
jo 0x41ecf1
mov word [ebp - 0xf4], cx
mov dword [ebp - 4], 0x61
cmp word [ebp - 0xf4], 9
jne 0x41e4c8
mov dword [ebp - 4], 0x62
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x64
jmp 0x41e2e9
mov dword [ebp - 4], 0x65
mov dx, word [ebp - 0x24]
mov word [ebp - 0x1d4], dx
mov word [ebp - 0x1d0], 1
mov word [ebp - 0xb8], 1
jmp 0x41e515
mov ax, word [ebp - 0xb8]
add ax, word [ebp - 0x1d0]
jo 0x41ecf1
mov word [ebp - 0xb8], ax
mov cx, word [ebp - 0xb8]
cmp cx, word [ebp - 0x1d4]
jg 0x41e6d9
mov dword [ebp - 4], 0x66
movsx edx, word [ebp - 0xf4]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x41e552
mov dword [ebp - 0x270], 0
jmp 0x41e55e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x114], 2
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4008
lea ecx, [ebp - 0x114]
push ecx
movsx edx, word [ebp - 0xb8]
push edx
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x124]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
movsx edx, word [ebp - 0xf4]
mov dword [ebp - 0x18c], edx
cmp dword [ebp - 0x18c], 0x11
jae 0x41e5ca
mov dword [ebp - 0x274], 0
jmp 0x41e5d6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcAnsiValueBstr]
mov edx, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x80]
mov dx, word [ecx + edx*2]
add dx, ax
jo 0x41ecf1
xor dx, 0x19
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x80]
mov word [ecx + eax*2], dx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x114]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x67
movsx ecx, word [ebp - 0xf4]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x41e666
mov dword [ebp - 0x278], 0
jmp 0x41e672
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov cx, word [ebp - 0x58]
add cx, word [eax + edx*2]
jo 0x41ecf1
mov word [ebp - 0x58], cx
mov dword [ebp - 4], 0x68
mov dx, word [ebp - 0xf4]
add dx, 1
jo 0x41ecf1
mov word [ebp - 0xf4], dx
mov dword [ebp - 4], 0x69
cmp word [ebp - 0xf4], 9
jne 0x41e6cd
mov dword [ebp - 4], 0x6a
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x6c
jmp 0x41e4fa
mov dword [ebp - 4], 0x6d
mov ax, word [ebp - 0x4c]
add ax, word [ebp - 0x58]
jo 0x41ecf1
and ax, 0x1ff
jns 0x41e6fc
dec ax
or ax, 0xfe00
inc ax
mov word [ebp - 0xb0], ax
mov dword [ebp - 4], 0x6e
mov word [ebp - 0xf4], 1
mov dword [ebp - 4], 0x6f
mov word [ebp - 0xf0], 1
mov dword [ebp - 4], 0x70
mov cx, word [ebp - 0x48]
mov word [ebp - 0x1dc], cx
mov word [ebp - 0x1d8], 1
mov word [ebp - 0xb8], 1
jmp 0x41e764
mov dx, word [ebp - 0xb8]
add dx, word [ebp - 0x1d8]
jo 0x41ecf1
mov word [ebp - 0xb8], dx
mov ax, word [ebp - 0xb8]
cmp ax, word [ebp - 0x1dc]
jg 0x41ebaa
mov dword [ebp - 4], 0x71
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x190], ecx
cmp dword [ebp - 0x190], 0x11
jae 0x41e7a1
mov dword [ebp - 0x27c], 0
jmp 0x41e7ad
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0x11
jae 0x41e7cf
mov dword [ebp - 0x280], 0
jmp 0x41e7db
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x280], eax
movsx eax, word [ebp - 0xb8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x11
jae 0x41e7fd
mov dword [ebp - 0x284], 0
jmp 0x41e809
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x284], eax
mov ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x194]
mov esi, dword [ebp - 0x34]
mov cx, word [edx + ecx*2]
xor cx, word [esi + eax*2]
mov edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x80]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x72
movsx ecx, word [ebp - 0xb8]
mov dword [ebp - 0x18c], ecx
cmp dword [ebp - 0x18c], 0x11
jae 0x41e859
mov dword [ebp - 0x288], 0
jmp 0x41e865
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
movsx edx, word [ebp - 0xb8]
mov dword [ebp - 0x190], edx
cmp dword [ebp - 0x190], 0x11
jae 0x41e887
mov dword [ebp - 0x28c], 0
jmp 0x41e893
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0x190]
mov esi, dword [ebp - 0x80]
mov ax, word [ecx + eax*2]
xor ax, word [esi + edx*2]
mov cx, ax
and cx, 0x1ff
jns 0x41e8c3
dec cx
or cx, 0xfe00
inc cx
sub cx, word [ebp - 0xb0]
jo 0x41ecf1
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
mov word [ebp - 0xec], ax
mov dword [ebp - 4], 0x73
mov ecx, dword [ebp + 0x10]
cmp word [ecx], 3
jne 0x41eb01
mov dword [ebp - 4], 0x74
cmp word [ebp - 0xec], 0x10
jge 0x41e9b9
mov dword [ebp - 4], 0x75
mov dword [ebp - 0x15c], 0x40a6a0
mov dword [ebp - 0x164], 8
lea edx, [ebp - 0xec]
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x154], 0x4002
lea eax, [ebp - 0x154]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xf4]
push eax
push 2
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x114]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x41ea34
mov dword [ebp - 4], 0x77
lea eax, [ebp - 0xec]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x154], 0x4002
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0x50]
push eax
movsx ecx, word [ebp - 0xf4]
push ecx
push 2
lea edx, [ebp - 0x114]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x79
cmp word [ebp - 0xf0], 2
jne 0x41ea9d
cmp word [ebp - 0xf4], 0x12
jge 0x41ea9d
mov dword [ebp - 4], 0x7a
mov ax, word [ebp - 0xf4]
add ax, 1
jo 0x41ecf1
mov word [ebp - 0xf4], ax
mov dword [ebp - 4], 0x7b
lea ecx, [ebp - 0x50]
push ecx
mov dx, word [ebp - 0xf4]
add dx, 1
jo 0x41ecf1
movsx eax, dx
push eax
push 1
push 0x40a6a8
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
mov dword [ebp - 4], 0x7d
mov cx, word [ebp - 0xf4]
add cx, 2
jo 0x41ecf1
mov word [ebp - 0xf4], cx
mov dword [ebp - 4], 0x7e
mov dx, word [ebp - 0xf0]
add dx, 1
jo 0x41ecf1
mov word [ebp - 0xf0], dx
mov dword [ebp - 4], 0x7f
cmp word [ebp - 0xf0], 3
jne 0x41eafc
mov dword [ebp - 4], 0x80
mov word [ebp - 0xf0], 1
jmp 0x41eb9e
mov dword [ebp - 4], 0x83
movsx eax, word [ebp - 0xec]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x201
jae 0x41eb2d
mov dword [ebp - 0x290], 0
jmp 0x41eb39
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x64]
movsx eax, word [edx + ecx*2]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea edx, [ebp - 0x50]
push edx
movsx eax, word [ebp - 0xb8]
push eax
push 1
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x85
jmp 0x41e749
mov dword [ebp - 4], 0x86
mov edx, dword [ebp - 0x50]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x41ecd8
jmp 0x41ec11
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x19c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x178], ecx
lea edx, [ebp - 0x178]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0x17c]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x8c]
mov dword [ebp - 0x180], edx
lea eax, [ebp - 0x180]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x184], ecx
lea edx, [ebp - 0x184]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x188], eax
lea ecx, [ebp - 0x188]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3