Function at 0x43a590
Capabilities:
Hash data using sha1

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x403456
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x128
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x403148
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 3
push 0x41cef0
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], 0x67452301
mov dword [ebp - 4], 4
mov edx, dword [ebp + 0x20]
mov dword [edx], 0xefcdab89
mov dword [ebp - 4], 5
mov eax, dword [ebp + 0x24]
mov dword [eax], 0x98badcfe
mov dword [ebp - 4], 6
mov ecx, dword [ebp + 0x28]
mov dword [ecx], 0x10325476
mov dword [ebp - 4], 7
mov edx, dword [ebp + 0x2c]
mov dword [edx], 0xc3d2e1f0
mov dword [ebp - 4], 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 1
jo 0x43b3e6
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0x4c]
push edx
call fcn.0043b4b0
mov dword [ebp - 0x48], eax
mov dword [ebp - 4], 0xa
mov eax, dword [ebp - 0x4c]
cdq
and edx, 0x1fffffff
add eax, edx
sar eax, 0x1d
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x28]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
mov dword [ebp - 4], 0xc
push 0
mov edx, dword [ebp - 0x4c]
add edx, 8
jo 0x43b3e6
and edx, 0xffffffc0
add edx, 0x3f
jo 0x43b3e6
push edx
push 1
push 0x11
mov eax, dword [ebp + 8]
push eax
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0xd
mov ecx, dword [ebp + 8]
cmp dword [ecx], 0
je 0x43a73b
mov edx, dword [ebp + 8]
mov eax, dword [edx]
cmp word [eax], 1
jne 0x43a73b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4c]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x7c], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x7c]
cmp eax, dword [edx + 0x10]
jae 0x43a724
mov dword [ebp - 0xd4], 0
jmp 0x43a730
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xd4], eax
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0xd8], ecx
jmp 0x43a747
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xd8], eax
mov ecx, 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0xd8]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0xe
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xf
mov ecx, dword [ebp + 8]
cmp dword [ecx], 0
je 0x43a7dc
mov edx, dword [ebp + 8]
mov eax, dword [edx]
cmp word [eax], 1
jne 0x43a7dc
mov ecx, dword [ebp - 0x4c]
sub ecx, 4
jo 0x43b3e6
mov edx, dword [ebp + 8]
mov eax, dword [edx]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x7c], ecx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x7c]
cmp eax, dword [edx + 0x10]
jae 0x43a7c5
mov dword [ebp - 0xdc], 0
jmp 0x43a7d1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xdc], eax
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0xe0], ecx
jmp 0x43a7e8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I4]
mov edx, dword [ebp + 8]
mov ecx, dword [edx]
mov edx, dword [ecx + 0xc]
mov ecx, dword [ebp - 0xe0]
mov byte [edx + ecx], al
mov dword [ebp - 4], 0x10
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43a863
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43a863
mov edx, dword [ebp - 0x4c]
sub edx, 3
jo 0x43b3e6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43a84c
mov dword [ebp - 0xe4], 0
jmp 0x43a858
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xe4], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xe8], edx
jmp 0x43a86f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0xe8]
mov cl, byte [ebp - 0x25]
mov byte [edx + eax], cl
mov dword [ebp - 4], 0x11
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43a8e4
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43a8e4
mov edx, dword [ebp - 0x4c]
sub edx, 2
jo 0x43b3e6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43a8cd
mov dword [ebp - 0xec], 0
jmp 0x43a8d9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xec], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xf0], edx
jmp 0x43a8f0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0xf0]
mov cl, byte [ebp - 0x26]
mov byte [edx + eax], cl
mov dword [ebp - 4], 0x12
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43a965
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43a965
mov edx, dword [ebp - 0x4c]
sub edx, 1
jo 0x43b3e6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43a94e
mov dword [ebp - 0xf4], 0
jmp 0x43a95a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0xf8], edx
jmp 0x43a971
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0xf8]
mov cl, byte [ebp - 0x27]
mov byte [edx + eax], cl
mov dword [ebp - 4], 0x13
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43a9dd
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43a9dd
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43a9c6
mov dword [ebp - 0xfc], 0
jmp 0x43a9d2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0xfc], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x100], edx
jmp 0x43a9e9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x100]
mov cl, byte [ebp - 0x28]
mov byte [edx + eax], cl
mov dword [ebp - 4], 0x14
mov edx, dword [ebp - 0x2c]
cmp edx, dword [ebp - 0x4c]
jge 0x43b3bb
mov dword [ebp - 4], 0x15
mov word [ebp - 0x94], 0xf
mov word [ebp - 0x90], 1
mov word [ebp - 0x24], 0
jmp 0x43aa46
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x90]
jo 0x43b3e6
mov word [ebp - 0x24], ax
mov cx, word [ebp - 0x24]
cmp cx, word [ebp - 0x94]
jg 0x43acc3
mov dword [ebp - 4], 0x16
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43aaaf
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43aaaf
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [eax + 0x14]
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43aa98
mov dword [ebp - 0x104], 0
jmp 0x43aaa4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x108], edx
jmp 0x43aabb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x108], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x108]
mov cl, byte [edx + eax]
mov byte [ebp - 0x25], cl
mov dword [ebp - 4], 0x17
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43ab30
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43ab30
mov edx, dword [ebp - 0x2c]
add edx, 1
jo 0x43b3e6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43ab19
mov dword [ebp - 0x10c], 0
jmp 0x43ab25
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x10c], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x110], edx
jmp 0x43ab3c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x110]
mov cl, byte [edx + eax]
mov byte [ebp - 0x26], cl
mov dword [ebp - 4], 0x18
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43abb1
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43abb1
mov edx, dword [ebp - 0x2c]
add edx, 2
jo 0x43b3e6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43ab9a
mov dword [ebp - 0x114], 0
jmp 0x43aba6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x114], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x118], edx
jmp 0x43abbd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x118]
mov cl, byte [edx + eax]
mov byte [ebp - 0x27], cl
mov dword [ebp - 4], 0x19
mov edx, dword [ebp + 8]
cmp dword [edx], 0
je 0x43ac32
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
cmp word [ecx], 1
jne 0x43ac32
mov edx, dword [ebp - 0x2c]
add edx, 3
jo 0x43b3e6
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
sub edx, dword [ecx + 0x14]
mov dword [ebp - 0x7c], edx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [eax + 0x10]
jae 0x43ac1b
mov dword [ebp - 0x11c], 0
jmp 0x43ac27
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x11c], eax
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x120], edx
jmp 0x43ac3e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x120]
mov cl, byte [edx + eax]
mov byte [ebp - 0x28], cl
mov dword [ebp - 4], 0x1a
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x48]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaCopyBytes]
mov dword [ebp - 4], 0x1b
movsx ecx, word [ebp - 0x24]
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0x51
jae 0x43ac89
mov dword [ebp - 0x124], 0
jmp 0x43ac95
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x124], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x48]
mov dword [eax + edx*4], ecx
mov dword [ebp - 4], 0x1c
mov edx, dword [ebp - 0x2c]
add edx, 4
jo 0x43b3e6
mov dword [ebp - 0x2c], edx
mov dword [ebp - 4], 0x1d
jmp 0x43aa31
mov dword [ebp - 4], 0x1e
mov word [ebp - 0x9c], 0x4f
mov word [ebp - 0x98], 1
mov word [ebp - 0x24], 0x10
jmp 0x43acf9
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0x98]
jo 0x43b3e6
mov word [ebp - 0x24], ax
mov cx, word [ebp - 0x24]
cmp cx, word [ebp - 0x9c]
jg 0x43ae58
mov dword [ebp - 4], 0x1f
mov dx, word [ebp - 0x24]
sub dx, 3
jo 0x43b3e6
movsx eax, dx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x51
jae 0x43ad37
mov dword [ebp - 0x128], 0
jmp 0x43ad43
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x128], eax
mov cx, word [ebp - 0x24]
sub cx, 8
jo 0x43b3e6
movsx edx, cx
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0x51
jae 0x43ad6f
mov dword [ebp - 0x12c], 0
jmp 0x43ad7b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x12c], eax
mov ax, word [ebp - 0x24]
sub ax, 0xe
jo 0x43b3e6
movsx ecx, ax
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 0x51
jae 0x43ada7
mov dword [ebp - 0x130], 0
jmp 0x43adb3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x130], eax
mov dx, word [ebp - 0x24]
sub dx, 0x10
jo 0x43b3e6
movsx eax, dx
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x51
jae 0x43addf
mov dword [ebp - 0x134], 0
jmp 0x43adeb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x134], eax
movsx ecx, word [ebp - 0x24]
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0x51
jae 0x43ae04
mov dword [ebp - 0x138], 0
jmp 0x43ae10
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x84]
mov esi, dword [ebp - 0x58]
mov edx, dword [eax + edx*4]
xor edx, dword [esi + ecx*4]
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x58]
xor edx, dword [ecx + eax*4]
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x58]
xor edx, dword [ecx + eax*4]
push edx
call fcn.0043b560
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x58]
mov dword [ecx + edx*4], eax
mov dword [ebp - 4], 0x20
jmp 0x43ace4
mov dword [ebp - 4], 0x21
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x22
mov ecx, dword [ebp + 0x20]
mov edx, dword [ecx]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x23
mov eax, dword [ebp + 0x24]
mov ecx, dword [eax]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 4], 0x24
mov edx, dword [ebp + 0x28]
mov eax, dword [edx]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x25
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ecx]
mov dword [ebp - 0x44], edx
mov dword [ebp - 4], 0x26
mov word [ebp - 0xa4], 0x13
mov word [ebp - 0xa0], 1
mov word [ebp - 0x24], 0
jmp 0x43aed9
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0xa0]
jo 0x43b3e6
mov word [ebp - 0x24], ax
mov cx, word [ebp - 0x24]
cmp cx, word [ebp - 0xa4]
jg 0x43afc8
mov dword [ebp - 4], 0x27
mov edx, dword [ebp - 0x30]
push edx
call fcn.0043b640
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x6c]
push ecx
call fcn.0043b3f0
mov dword [ebp - 0x70], eax
movsx edx, word [ebp - 0x24]
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0x51
jae 0x43af26
mov dword [ebp - 0x13c], 0
jmp 0x43af32
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0043b3f0
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 0x74]
push edx
call fcn.0043b3f0
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
not ecx
and ecx, dword [ebp - 0x40]
or eax, ecx
push eax
mov edx, dword [ebp - 0x78]
push edx
call fcn.0043b3f0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0x28
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 0x29
mov ecx, dword [ebp - 0x38]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 4], 0x2a
mov edx, dword [ebp - 0x34]
push edx
call fcn.0043b710
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x2b
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov dword [ebp - 4], 0x2c
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 4], 0x2d
jmp 0x43aec4
mov dword [ebp - 4], 0x2e
mov word [ebp - 0xac], 0x27
mov word [ebp - 0xa8], 1
mov word [ebp - 0x24], 0x14
jmp 0x43affe
mov dx, word [ebp - 0x24]
add dx, word [ebp - 0xa8]
jo 0x43b3e6
mov word [ebp - 0x24], dx
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0xac]
jg 0x43b0e6
mov dword [ebp - 4], 0x2f
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.0043b640
mov dword [ebp - 0x6c], eax
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x6c]
push eax
call fcn.0043b3f0
mov dword [ebp - 0x70], eax
movsx ecx, word [ebp - 0x24]
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0x51
jae 0x43b04b
mov dword [ebp - 0x140], 0
jmp 0x43b057
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x140], eax
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x58]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 0x70]
push edx
call fcn.0043b3f0
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.0043b3f0
mov dword [ebp - 0x78], eax
mov edx, dword [ebp - 0x34]
xor edx, dword [ebp - 0x38]
xor edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp - 0x78]
push eax
call fcn.0043b3f0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0x30
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0x31
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x40], edx
mov dword [ebp - 4], 0x32
mov eax, dword [ebp - 0x34]
push eax
call fcn.0043b710
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x33
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x34
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x35
jmp 0x43afe9
mov dword [ebp - 4], 0x36
mov word [ebp - 0xb4], 0x3b
mov word [ebp - 0xb0], 1
mov word [ebp - 0x24], 0x28
jmp 0x43b11c
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0xb0]
jo 0x43b3e6
mov word [ebp - 0x24], ax
mov cx, word [ebp - 0x24]
cmp cx, word [ebp - 0xb4]
jg 0x43b211
mov dword [ebp - 4], 0x37
mov edx, dword [ebp - 0x30]
push edx
call fcn.0043b640
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x6c]
push ecx
call fcn.0043b3f0
mov dword [ebp - 0x70], eax
movsx edx, word [ebp - 0x24]
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0x51
jae 0x43b169
mov dword [ebp - 0x144], 0
jmp 0x43b175
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0043b3f0
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x74]
push edx
call fcn.0043b3f0
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x40]
or eax, ecx
mov edx, dword [ebp - 0x38]
and edx, dword [ebp - 0x40]
or eax, edx
push eax
mov eax, dword [ebp - 0x78]
push eax
call fcn.0043b3f0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0x38
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x44], ecx
mov dword [ebp - 4], 0x39
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x40], edx
mov dword [ebp - 4], 0x3a
mov eax, dword [ebp - 0x34]
push eax
call fcn.0043b710
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x3b
mov ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov dword [ebp - 4], 0x3c
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edx
mov dword [ebp - 4], 0x3d
jmp 0x43b107
mov dword [ebp - 4], 0x3e
mov word [ebp - 0xbc], 0x4f
mov word [ebp - 0xb8], 1
mov word [ebp - 0x24], 0x3c
jmp 0x43b247
mov ax, word [ebp - 0x24]
add ax, word [ebp - 0xb8]
jo 0x43b3e6
mov word [ebp - 0x24], ax
mov cx, word [ebp - 0x24]
cmp cx, word [ebp - 0xbc]
jg 0x43b32f
mov dword [ebp - 4], 0x3f
mov edx, dword [ebp - 0x30]
push edx
call fcn.0043b640
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x6c]
push ecx
call fcn.0043b3f0
mov dword [ebp - 0x70], eax
movsx edx, word [ebp - 0x24]
mov dword [ebp - 0x7c], edx
cmp dword [ebp - 0x7c], 0x51
jae 0x43b294
mov dword [ebp - 0x148], 0
jmp 0x43b2a0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ecx + eax*4]
push edx
mov eax, dword [ebp - 0x70]
push eax
call fcn.0043b3f0
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp + 0x18]
push ecx
mov edx, dword [ebp - 0x74]
push edx
call fcn.0043b3f0
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x34]
xor eax, dword [ebp - 0x38]
xor eax, dword [ebp - 0x40]
push eax
mov ecx, dword [ebp - 0x78]
push ecx
call fcn.0043b3f0
mov dword [ebp - 0x3c], eax
mov dword [ebp - 4], 0x40
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x44], edx
mov dword [ebp - 4], 0x41
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x42
mov ecx, dword [ebp - 0x34]
push ecx
call fcn.0043b710
mov dword [ebp - 0x38], eax
mov dword [ebp - 4], 0x43
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x34], edx
mov dword [ebp - 4], 0x44
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0x45
jmp 0x43b232
mov dword [ebp - 4], 0x46
mov ecx, dword [ebp - 0x30]
push ecx
mov edx, dword [ebp + 0x1c]
mov eax, dword [edx]
push eax
call fcn.0043b3f0
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], eax
mov dword [ebp - 4], 0x47
mov edx, dword [ebp - 0x34]
push edx
mov eax, dword [ebp + 0x20]
mov ecx, dword [eax]
push ecx
call fcn.0043b3f0
mov edx, dword [ebp + 0x20]
mov dword [edx], eax
mov dword [ebp - 4], 0x48
mov eax, dword [ebp - 0x38]
push eax
mov ecx, dword [ebp + 0x24]
mov edx, dword [ecx]
push edx
call fcn.0043b3f0
mov ecx, dword [ebp + 0x24]
mov dword [ecx], eax
mov dword [ebp - 4], 0x49
mov edx, dword [ebp - 0x40]
push edx
mov eax, dword [ebp + 0x28]
mov ecx, dword [eax]
push ecx
call fcn.0043b3f0
mov edx, dword [ebp + 0x28]
mov dword [edx], eax
mov dword [ebp - 4], 0x4a
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ecx]
push edx
call fcn.0043b3f0
mov ecx, dword [ebp + 0x2c]
mov dword [ecx], eax
jmp 0x43a9fd
push 0x43b3d3
lea edx, [ebp - 0x64]
mov dword [ebp - 0x6c], edx
lea eax, [ebp - 0x6c]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3