Function at 0x485410
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x404a36
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x2bc
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x404288
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
push 8
push 0x414c70
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
mov dword [ebp - 4], 2
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jae 0x48548c
mov dword [ebp - 0x144], 0
jmp 0x485498
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x144], eax
mov edx, 0x418f90
mov ecx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x4c]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x94]
push ecx
call fcn.00468460
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 4
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jae 0x485508
mov dword [ebp - 0x148], 0
jmp 0x485514
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x148], eax
mov edx, 0x419014
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 5
lea edx, [ebp - 0x58]
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.00468460
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 6
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jae 0x485584
mov dword [ebp - 0x14c], 0
jmp 0x485590
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x14c], eax
mov edx, 0x4190c4
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 7
lea edx, [ebp - 0x58]
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.00468460
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 8
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jae 0x485600
mov dword [ebp - 0x150], 0
jmp 0x48560c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x150], eax
mov edx, 0x417a6c
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 9
lea edx, [ebp - 0x58]
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.00468460
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
jae 0x48567c
mov dword [ebp - 0x154], 0
jmp 0x485688
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x154], eax
mov edx, 0x419154
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x4c]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xb
lea edx, [ebp - 0x58]
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0x94]
push edx
call fcn.00468460
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xc
mov eax, dword [ebp - 0x34]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x118], ax
mov word [ebp - 0x114], 1
mov ecx, dword [ebp - 0x34]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaLbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x24], ax
jmp 0x48572c
mov dx, word [ebp - 0x24]
add dx, word [ebp - 0x114]
jo 0x487bf7
mov word [ebp - 0x24], dx
mov ax, word [ebp - 0x24]
cmp ax, word [ebp - 0x118]
jg 0x48602a
mov dword [ebp - 4], 0xd
push 0
movsx ecx, word [ebp - 0x24]
push ecx
push 1
push 0x40db7c
lea edx, [ebp - 0x2c]
push edx
push 0x14
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x34], 0
je 0x4857c0
mov eax, dword [ebp - 0x34]
cmp word [eax], 1
jne 0x4857c0
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x34]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax + 0x10]
jae 0x4857a3
mov dword [ebp - 0x158], 0
jmp 0x4857af
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x158], eax
mov edx, dword [ebp - 0x104]
shl edx, 4
mov dword [ebp - 0x15c], edx
jmp 0x4857cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x108], 1
cmp dword [ebp - 0x108], 3
jae 0x4857eb
mov dword [ebp - 0x160], 0
jmp 0x4857f7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x2c], 0
je 0x48584d
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x48584d
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x485830
mov dword [ebp - 0x164], 0
jmp 0x48583c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x168], edx
jmp 0x485859
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x108]
mov edx, dword [ecx + edx*4]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x168]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x2c], 0
je 0x4858dd
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x4858dd
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x4858c0
mov dword [ebp - 0x16c], 0
jmp 0x4858cc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x170], eax
jmp 0x4858e9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x170], eax
mov edx, 0x418e78
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x170]
lea ecx, [eax + ecx + 4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x2c], 0
je 0x485961
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x485961
movsx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x485944
mov dword [ebp - 0x174], 0
jmp 0x485950
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x174], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x178], ecx
jmp 0x48596d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x178], eax
mov edx, 0x40ba1c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x178]
lea ecx, [ecx + eax + 0x10]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x34], 0
je 0x4859e5
mov ecx, dword [ebp - 0x34]
cmp word [ecx], 1
jne 0x4859e5
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x34]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x4859c8
mov dword [ebp - 0x17c], 0
jmp 0x4859d4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x100]
shl eax, 4
mov dword [ebp - 0x180], eax
jmp 0x4859f1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 3
jae 0x485a10
mov dword [ebp - 0x184], 0
jmp 0x485a1c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x184], eax
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx + 0xc]
add edx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x104]
mov edx, dword [edx + eax*4]
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x12
mov ecx, dword [ebp - 0x110]
push ecx
push 0x418f90
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x485b6b
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x2c], 0
je 0x485abb
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x485abb
movsx eax, word [ebp - 0x24]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x485a9e
mov dword [ebp - 0x188], 0
jmp 0x485aaa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x188], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x18c], ecx
jmp 0x485ac7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x18c], eax
mov edx, 0x4191ec
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x18c]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x2c], 0
je 0x485b3f
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x485b3f
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x485b22
mov dword [ebp - 0x190], 0
jmp 0x485b2e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x194], eax
jmp 0x485b4b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x194], eax
mov edx, 0x418f90
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x194]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x48601e
mov dword [ebp - 4], 0x15
mov edx, dword [ebp - 0x110]
push edx
push 0x419014
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x485c99
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x2c], 0
je 0x485be9
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x485be9
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x485bcc
mov dword [ebp - 0x198], 0
jmp 0x485bd8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x198], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x19c], edx
jmp 0x485bf5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x19c], eax
mov edx, 0x419204
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x19c]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x2c], 0
je 0x485c6d
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x485c6d
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x485c50
mov dword [ebp - 0x1a0], 0
jmp 0x485c5c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x1a4], eax
jmp 0x485c79
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a4], eax
mov edx, 0x419014
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1a4]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x48601e
mov dword [ebp - 4], 0x18
mov edx, dword [ebp - 0x110]
push edx
push 0x4190c4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x485dc7
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x2c], 0
je 0x485d17
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x485d17
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x485cfa
mov dword [ebp - 0x1a8], 0
jmp 0x485d06
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1a8], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x1ac], edx
jmp 0x485d23
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1ac], eax
mov edx, 0x419220
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1ac]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x2c], 0
je 0x485d9b
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x485d9b
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x485d7e
mov dword [ebp - 0x1b0], 0
jmp 0x485d8a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x1b4], eax
jmp 0x485da7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1b4], eax
mov edx, 0x4190c4
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1b4]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x48601e
mov dword [ebp - 4], 0x1b
mov edx, dword [ebp - 0x110]
push edx
push 0x417a6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x485ef5
mov dword [ebp - 4], 0x1c
cmp dword [ebp - 0x2c], 0
je 0x485e45
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x485e45
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x485e28
mov dword [ebp - 0x1b8], 0
jmp 0x485e34
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1b8], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x1bc], edx
jmp 0x485e51
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1bc], eax
mov edx, 0x419244
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1bc]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x2c], 0
je 0x485ec9
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x485ec9
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x485eac
mov dword [ebp - 0x1c0], 0
jmp 0x485eb8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x1c4], eax
jmp 0x485ed5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1c4], eax
mov edx, 0x417a6c
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1c4]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x48601e
mov dword [ebp - 4], 0x1e
mov edx, dword [ebp - 0x110]
push edx
push 0x419154
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x48601e
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x2c], 0
je 0x485f73
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x485f73
movsx ecx, word [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x485f56
mov dword [ebp - 0x1c8], 0
jmp 0x485f62
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1c8], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x1cc], edx
jmp 0x485f7f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1cc], eax
mov edx, 0x41926c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x1cc]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x2c], 0
je 0x485ff7
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x485ff7
movsx edx, word [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x485fda
mov dword [ebp - 0x1d0], 0
jmp 0x485fe6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x1d4], eax
jmp 0x486003
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1d4], eax
mov edx, 0x419154
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x1d4]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x22
jmp 0x485717
mov dword [ebp - 4], 0x23
mov dx, word [ebp - 0x24]
mov word [ebp - 0x30], dx
mov dword [ebp - 4], 0x24
mov edx, 0x40ba24
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 7
lea eax, [ebp - 0xfc]
push eax
call fcn.00469260
mov edx, eax
lea ecx, [ebp - 0x64]
call dword [fcn.00401294]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.0046d2d0
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401294]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x64]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x25
mov eax, dword [ebp - 0x3c]
push eax
push 0x40ba1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x486829
mov dword [ebp - 4], 0x26
mov dword [ebp - 0xcc], 0x413b08
mov dword [ebp - 0xd4], 8
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea ecx, [ebp - 0xa4]
push ecx
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0xfc], eax
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x94]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x27
cmp word [ebp - 0x24], 0
jle 0x48617a
mov dword [ebp - 4], 0x28
mov ax, word [ebp - 0x24]
sub ax, 1
jo 0x487bf7
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x40]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
movsx edx, word [ebp - 0x24]
add ecx, edx
jo 0x487bf7
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x120], ax
mov word [ebp - 0x11c], 1
mov ax, word [ebp - 0x24]
mov word [ebp - 0x24], ax
jmp 0x4861d0
mov cx, word [ebp - 0x24]
add cx, word [ebp - 0x11c]
jo 0x487bf7
mov word [ebp - 0x24], cx
mov dx, word [ebp - 0x24]
cmp dx, word [ebp - 0x120]
jg 0x486829
mov dword [ebp - 4], 0x2b
mov eax, dword [ebp - 0x40]
push eax
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0x60], 0
je 0x48624c
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x48624c
movsx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x60]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x48622f
mov dword [ebp - 0x1d8], 0
jmp 0x48623b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1d8], eax
mov ecx, dword [ebp - 0x100]
shl ecx, 2
mov dword [ebp - 0x1dc], ecx
jmp 0x486258
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1dc], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
add eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0x4008
push 3
lea ecx, [ebp - 0xd4]
push ecx
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
mov dword [ebp - 0xdc], 0x419298
mov dword [ebp - 0xe4], 0x8008
cmp dword [ebp - 0x40], 0
je 0x486312
mov eax, dword [ebp - 0x40]
cmp word [eax], 1
jne 0x486312
movsx ecx, word [ebp - 0x28]
mov edx, dword [ebp - 0x40]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax + 0x10]
jae 0x4862f5
mov dword [ebp - 0x1e0], 0
jmp 0x486301
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e0], eax
mov edx, dword [ebp - 0x104]
shl edx, 2
mov dword [ebp - 0x1e4], edx
jmp 0x48631e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ecx + edx]
push eax
push 0x40ba1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0xec], ax
mov dword [ebp - 0xf4], 0xb
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpNe]
push eax
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0xc4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x108], ax
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x94]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x486804
mov dword [ebp - 4], 0x2c
push 0
movsx ecx, word [ebp - 0x30]
push ecx
push 1
push 0x40db7c
lea edx, [ebp - 0x2c]
push edx
push 0x14
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x2d
cmp dword [0x4920a4], 0
jne 0x486411
push 0x4920a4
push 0x40d46c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x1e8], 0x4920a4
jmp 0x48641b
mov dword [ebp - 0x1e8], 0x4920a4
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [eax]
mov dword [ebp - 0x108], ecx
cmp dword [ebp - 0x40], 0
je 0x48647f
mov edx, dword [ebp - 0x40]
cmp word [edx], 1
jne 0x48647f
movsx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x40]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x104]
cmp eax, dword [edx + 0x10]
jae 0x486462
mov dword [ebp - 0x1ec], 0
jmp 0x48646e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1ec], eax
mov ecx, dword [ebp - 0x104]
shl ecx, 2
mov dword [ebp - 0x1f0], ecx
jmp 0x48648b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f0], eax
lea edx, [ebp - 0x64]
push edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x1f0]
mov eax, dword [ecx + edx]
push eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x108]
push eax
call dword [edx + 0x2c]
fnclex
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jge 0x4864e5
push 0x2c
push 0x40d47c
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x10c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1f4], eax
jmp 0x4864ef
mov dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x2c], 0
je 0x486545
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x486545
movsx ecx, word [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x486528
mov dword [ebp - 0x1f8], 0
jmp 0x486534
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1f8], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x1fc], edx
jmp 0x486551
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x1fc], eax
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x1fc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x2c], 0
je 0x4865cc
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x4865cc
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x4865af
mov dword [ebp - 0x200], 0
jmp 0x4865bb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x204], eax
jmp 0x4865d8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x204], eax
mov edx, 0x4192a4
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x204]
lea ecx, [eax + ecx + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x2f
cmp dword [ebp - 0x2c], 0
je 0x486650
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x486650
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x486633
mov dword [ebp - 0x208], 0
jmp 0x48663f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x208], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x20c], ecx
jmp 0x48665c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x20c], eax
mov edx, 0x40ba1c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x20c]
lea ecx, [ecx + eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x40], 0
je 0x4866d4
mov ecx, dword [ebp - 0x40]
cmp word [ecx], 1
jne 0x4866d4
movsx edx, word [ebp - 0x28]
mov eax, dword [ebp - 0x40]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x104], edx
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x104]
cmp edx, dword [ecx + 0x10]
jae 0x4866b7
mov dword [ebp - 0x210], 0
jmp 0x4866c3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x104]
shl eax, 2
mov dword [ebp - 0x214], eax
jmp 0x4866e0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x2c], 0
je 0x486736
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x486736
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x486719
mov dword [ebp - 0x218], 0
jmp 0x486725
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x21c], eax
jmp 0x486742
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x21c], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x214]
mov edx, dword [edx + eax]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x21c]
lea ecx, [eax + ecx + 0x10]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x31
cmp dword [ebp - 0x2c], 0
je 0x4867c4
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4867c4
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x4867a7
mov dword [ebp - 0x220], 0
jmp 0x4867b3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x220], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x224], ecx
jmp 0x4867d0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x224], eax
mov edx, 0x418e78
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x224]
lea ecx, [ecx + eax + 4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x32
mov cx, word [ebp - 0x30]
add cx, 1
jo 0x487bf7
mov word [ebp - 0x30], cx
mov dword [ebp - 4], 0x34
mov dx, word [ebp - 0x28]
add dx, 1
jo 0x487bf7
mov word [ebp - 0x28], dx
mov dword [ebp - 4], 0x35
jmp 0x4861bb
mov dword [ebp - 4], 0x37
mov word [ebp - 0x28], 0
mov dword [ebp - 4], 0x38
mov edx, 0x40ba24
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0xf8], 0
mov dword [ebp - 0xfc], 0x18
lea eax, [ebp - 0xfc]
push eax
call fcn.00469260
mov edx, eax
lea ecx, [ebp - 0x64]
call dword [fcn.00401294]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0xf8]
push edx
lea eax, [ebp - 0x64]
push eax
call fcn.0046d2d0
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401294]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x64]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x39
mov eax, dword [ebp - 0x3c]
push eax
push 0x40ba1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x487026
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0xcc], 0x413b08
mov dword [ebp - 0xd4], 8
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
push 0xffffffffffffffff
lea ecx, [ebp - 0x94]
push ecx
mov edx, dword [ebp - 0x3c]
push edx
lea eax, [ebp - 0xa4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea ecx, [ebp - 0xa4]
push ecx
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0xfc], eax
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x94]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x3b
cmp word [ebp - 0x24], 0
jle 0x486977
mov dword [ebp - 4], 0x3c
mov ax, word [ebp - 0x24]
sub ax, 1
jo 0x487bf7
mov word [ebp - 0x24], ax
mov dword [ebp - 4], 0x3e
mov ecx, dword [ebp - 0x40]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
movsx edx, word [ebp - 0x24]
add ecx, edx
jo 0x487bf7
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov word [ebp - 0x128], ax
mov word [ebp - 0x124], 1
mov ax, word [ebp - 0x24]
mov word [ebp - 0x24], ax
jmp 0x4869cd
mov cx, word [ebp - 0x24]
add cx, word [ebp - 0x124]
jo 0x487bf7
mov word [ebp - 0x24], cx
mov dx, word [ebp - 0x24]
cmp dx, word [ebp - 0x128]
jg 0x487026
mov dword [ebp - 4], 0x3f
mov eax, dword [ebp - 0x40]
push eax
lea ecx, [ebp - 0x60]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
cmp dword [ebp - 0x60], 0
je 0x486a49
mov edx, dword [ebp - 0x60]
cmp word [edx], 1
jne 0x486a49
movsx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x60]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x486a2c
mov dword [ebp - 0x228], 0
jmp 0x486a38
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x228], eax
mov ecx, dword [ebp - 0x100]
shl ecx, 2
mov dword [ebp - 0x22c], ecx
jmp 0x486a55
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x22c], eax
mov edx, dword [ebp - 0x60]
mov eax, dword [edx + 0xc]
add eax, dword [ebp - 0x22c]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xd4], 0x4008
push 3
lea ecx, [ebp - 0xd4]
push ecx
lea edx, [ebp - 0x94]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x94]
push ecx
lea edx, [ebp - 0xa4]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLowerCaseVar]
mov dword [ebp - 0xdc], 0x419298
mov dword [ebp - 0xe4], 0x8008
cmp dword [ebp - 0x40], 0
je 0x486b0f
mov eax, dword [ebp - 0x40]
cmp word [eax], 1
jne 0x486b0f
movsx ecx, word [ebp - 0x28]
mov edx, dword [ebp - 0x40]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax + 0x10]
jae 0x486af2
mov dword [ebp - 0x230], 0
jmp 0x486afe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x230], eax
mov edx, dword [ebp - 0x104]
shl edx, 2
mov dword [ebp - 0x234], edx
jmp 0x486b1b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x234]
mov eax, dword [ecx + edx]
push eax
push 0x40ba1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0xec], ax
mov dword [ebp - 0xf4], 0xb
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0xe4]
push edx
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpNe]
push eax
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0xc4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x108], ax
lea eax, [ebp - 0xf4]
push eax
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x94]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
movsx eax, word [ebp - 0x108]
test eax, eax
je 0x487001
mov dword [ebp - 4], 0x40
push 0
movsx ecx, word [ebp - 0x30]
push ecx
push 1
push 0x40db7c
lea edx, [ebp - 0x2c]
push edx
push 0x14
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x41
cmp dword [0x4920a4], 0
jne 0x486c0e
push 0x4920a4
push 0x40d46c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x238], 0x4920a4
jmp 0x486c18
mov dword [ebp - 0x238], 0x4920a4
mov eax, dword [ebp - 0x238]
mov ecx, dword [eax]
mov dword [ebp - 0x108], ecx
cmp dword [ebp - 0x40], 0
je 0x486c7c
mov edx, dword [ebp - 0x40]
cmp word [edx], 1
jne 0x486c7c
movsx eax, word [ebp - 0x28]
mov ecx, dword [ebp - 0x40]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x104], eax
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x104]
cmp eax, dword [edx + 0x10]
jae 0x486c5f
mov dword [ebp - 0x23c], 0
jmp 0x486c6b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x23c], eax
mov ecx, dword [ebp - 0x104]
shl ecx, 2
mov dword [ebp - 0x240], ecx
jmp 0x486c88
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x240], eax
lea edx, [ebp - 0x64]
push edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x240]
mov eax, dword [ecx + edx]
push eax
mov ecx, dword [ebp - 0x108]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x108]
push eax
call dword [edx + 0x2c]
fnclex
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jge 0x486ce2
push 0x2c
push 0x40d47c
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp - 0x10c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x244], eax
jmp 0x486cec
mov dword [ebp - 0x244], 0
cmp dword [ebp - 0x2c], 0
je 0x486d42
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x486d42
movsx ecx, word [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x486d25
mov dword [ebp - 0x248], 0
jmp 0x486d31
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x248], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x24c], edx
jmp 0x486d4e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x24c], eax
mov edx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
add ecx, dword [ebp - 0x24c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x42
cmp dword [ebp - 0x2c], 0
je 0x486dc9
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x486dc9
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x486dac
mov dword [ebp - 0x250], 0
jmp 0x486db8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x254], eax
jmp 0x486dd5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x254], eax
mov edx, 0x4192d0
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x254]
lea ecx, [eax + ecx + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x43
cmp dword [ebp - 0x2c], 0
je 0x486e4d
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x486e4d
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x486e30
mov dword [ebp - 0x258], 0
jmp 0x486e3c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x258], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x25c], ecx
jmp 0x486e59
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x25c], eax
mov edx, 0x40ba1c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x25c]
lea ecx, [ecx + eax + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x44
cmp dword [ebp - 0x40], 0
je 0x486ed1
mov ecx, dword [ebp - 0x40]
cmp word [ecx], 1
jne 0x486ed1
movsx edx, word [ebp - 0x28]
mov eax, dword [ebp - 0x40]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x104], edx
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x104]
cmp edx, dword [ecx + 0x10]
jae 0x486eb4
mov dword [ebp - 0x260], 0
jmp 0x486ec0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x104]
shl eax, 2
mov dword [ebp - 0x264], eax
jmp 0x486edd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x2c], 0
je 0x486f33
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x486f33
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x486f16
mov dword [ebp - 0x268], 0
jmp 0x486f22
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x26c], eax
jmp 0x486f3f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x26c], eax
mov ecx, dword [ebp - 0x40]
mov edx, dword [ecx + 0xc]
mov eax, dword [ebp - 0x264]
mov edx, dword [edx + eax]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x26c]
lea ecx, [eax + ecx + 0x10]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x45
cmp dword [ebp - 0x2c], 0
je 0x486fc1
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x486fc1
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x486fa4
mov dword [ebp - 0x270], 0
jmp 0x486fb0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x270], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x274], ecx
jmp 0x486fcd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x274], eax
mov edx, 0x418e78
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x274]
lea ecx, [ecx + eax + 4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x46
mov cx, word [ebp - 0x30]
add cx, 1
jo 0x487bf7
mov word [ebp - 0x30], cx
mov dword [ebp - 4], 0x48
mov dx, word [ebp - 0x28]
add dx, 1
jo 0x487bf7
mov word [ebp - 0x28], dx
mov dword [ebp - 4], 0x49
jmp 0x4869b8
mov dword [ebp - 4], 0x4b
push 0x1f4
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401294]
mov dword [ebp - 4], 0x4c
call fcn.00469600
mov edx, eax
lea ecx, [ebp - 0x64]
call dword [fcn.00401294]
push eax
push 0x419324
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x78]
call dword [fcn.00401294]
push eax
lea eax, [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x1f4
mov ecx, dword [ebp - 0x3c]
push ecx
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x40ba1c
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x419314
lea ecx, [ebp - 0x6c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x419300
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.0040d27c
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x64]
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x20
mov dword [ebp - 4], 0x4d
lea eax, [ebp - 0x3c]
push eax
call fcn.00431db0
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401294]
mov dword [ebp - 4], 0x4e
mov ecx, dword [ebp - 0x3c]
push ecx
push 0x40ba1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x4874a3
mov dword [ebp - 4], 0x4f
mov dx, word [ebp - 0x30]
add dx, 1
jo 0x487bf7
mov word [ebp - 0x30], dx
mov dword [ebp - 4], 0x50
push 0
movsx eax, word [ebp - 0x30]
push eax
push 1
push 0x40db7c
lea ecx, [ebp - 0x2c]
push ecx
push 0x14
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x51
cmp dword [ebp - 0x2c], 0
je 0x4871d6
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4871d6
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x4871b9
mov dword [ebp - 0x278], 0
jmp 0x4871c5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x278], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x27c], ecx
jmp 0x4871e2
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x27c], eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x27c]
lea ecx, [ecx + eax + 0x10]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x52
cmp dword [0x4920a4], 0
jne 0x487227
push 0x4920a4
push 0x40d46c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x280], 0x4920a4
jmp 0x487231
mov dword [ebp - 0x280], 0x4920a4
mov ecx, dword [ebp - 0x280]
mov edx, dword [ecx]
mov dword [ebp - 0x104], edx
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x104]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x104]
push ecx
call dword [eax + 0x2c]
fnclex
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jge 0x48728d
push 0x2c
push 0x40d47c
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x108]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x284], eax
jmp 0x487297
mov dword [ebp - 0x284], 0
cmp dword [ebp - 0x2c], 0
je 0x4872ed
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x4872ed
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x4872d0
mov dword [ebp - 0x288], 0
jmp 0x4872dc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x28c], eax
jmp 0x4872f9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x28c], eax
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx + 0xc]
add ecx, dword [ebp - 0x28c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x53
cmp dword [ebp - 0x2c], 0
je 0x487374
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x487374
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x487357
mov dword [ebp - 0x290], 0
jmp 0x487363
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x290], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x294], ecx
jmp 0x487380
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x294], eax
mov edx, 0x41933c
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x294]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x54
cmp dword [ebp - 0x2c], 0
je 0x4873f8
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x4873f8
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x4873db
mov dword [ebp - 0x298], 0
jmp 0x4873e7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x29c], eax
jmp 0x487404
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x29c], eax
mov edx, 0x40ba1c
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x29c]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x55
cmp dword [ebp - 0x2c], 0
je 0x48747c
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x48747c
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x48745f
mov dword [ebp - 0x2a0], 0
jmp 0x48746b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x2a4], ecx
jmp 0x487488
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a4], eax
mov edx, 0x418e78
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x2a4]
lea ecx, [ecx + eax + 4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x57
push 0x1f4
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401294]
mov dword [ebp - 4], 0x58
call fcn.00469600
mov edx, eax
lea ecx, [ebp - 0x64]
call dword [fcn.00401294]
push eax
push 0x419324
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x78]
call dword [fcn.00401294]
push eax
lea ecx, [ebp - 0x7c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x1f4
mov edx, dword [ebp - 0x3c]
push edx
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x40ba1c
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x419364
lea edx, [ebp - 0x6c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x419300
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
call fcn.0040d27c
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x74]
push ecx
lea edx, [ebp - 0x3c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToUnicode]
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x6c]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x64]
push eax
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x20
mov dword [ebp - 4], 0x59
lea ecx, [ebp - 0x3c]
push ecx
call fcn.00431db0
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [fcn.00401294]
mov dword [ebp - 4], 0x5a
mov edx, dword [ebp - 0x3c]
push edx
push 0x40ba1c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x487920
mov dword [ebp - 4], 0x5b
mov ax, word [ebp - 0x30]
add ax, 1
jo 0x487bf7
mov word [ebp - 0x30], ax
mov dword [ebp - 4], 0x5c
push 0
movsx ecx, word [ebp - 0x30]
push ecx
push 1
push 0x40db7c
lea edx, [ebp - 0x2c]
push edx
push 0x14
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x5d
cmp dword [ebp - 0x2c], 0
je 0x487653
mov eax, dword [ebp - 0x2c]
cmp word [eax], 1
jne 0x487653
movsx ecx, word [ebp - 0x30]
mov edx, dword [ebp - 0x2c]
sub ecx, dword [edx + 0x14]
mov dword [ebp - 0x100], ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax + 0x10]
jae 0x487636
mov dword [ebp - 0x2a8], 0
jmp 0x487642
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2a8], eax
mov edx, dword [ebp - 0x100]
imul edx, edx, 0x14
mov dword [ebp - 0x2ac], edx
jmp 0x48765f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2ac], eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x2ac]
lea ecx, [ecx + eax + 0x10]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x5e
cmp dword [0x4920a4], 0
jne 0x4876a4
push 0x4920a4
push 0x40d46c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x2b0], 0x4920a4
jmp 0x4876ae
mov dword [ebp - 0x2b0], 0x4920a4
mov ecx, dword [ebp - 0x2b0]
mov edx, dword [ecx]
mov dword [ebp - 0x104], edx
lea eax, [ebp - 0x64]
push eax
mov ecx, dword [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x104]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x104]
push ecx
call dword [eax + 0x2c]
fnclex
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jge 0x48770a
push 0x2c
push 0x40d47c
mov edx, dword [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x108]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x2b4], eax
jmp 0x487714
mov dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2c], 0
je 0x48776a
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x48776a
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x48774d
mov dword [ebp - 0x2b8], 0
jmp 0x487759
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x2bc], eax
jmp 0x487776
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2bc], eax
mov edx, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x2c]
mov ecx, dword [ecx + 0xc]
add ecx, dword [ebp - 0x2bc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x5f
cmp dword [ebp - 0x2c], 0
je 0x4877f1
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4877f1
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x4877d4
mov dword [ebp - 0x2c0], 0
jmp 0x4877e0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c0], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x2c4], ecx
jmp 0x4877fd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c4], eax
mov edx, 0x419370
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x2c4]
lea ecx, [ecx + eax + 8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x60
cmp dword [ebp - 0x2c], 0
je 0x487875
mov ecx, dword [ebp - 0x2c]
cmp word [ecx], 1
jne 0x487875
movsx edx, word [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
sub edx, dword [eax + 0x14]
mov dword [ebp - 0x100], edx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x100]
cmp edx, dword [ecx + 0x10]
jae 0x487858
mov dword [ebp - 0x2c8], 0
jmp 0x487864
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x100]
imul eax, eax, 0x14
mov dword [ebp - 0x2cc], eax
jmp 0x487881
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2cc], eax
mov edx, 0x40ba1c
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ecx + 0xc]
mov ecx, dword [ebp - 0x2cc]
lea ecx, [eax + ecx + 0xc]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x61
cmp dword [ebp - 0x2c], 0
je 0x4878f9
mov edx, dword [ebp - 0x2c]
cmp word [edx], 1
jne 0x4878f9
movsx eax, word [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x100]
cmp eax, dword [edx + 0x10]
jae 0x4878dc
mov dword [ebp - 0x2d0], 0
jmp 0x4878e8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2d0], eax
mov ecx, dword [ebp - 0x100]
imul ecx, ecx, 0x14
mov dword [ebp - 0x2d4], ecx
jmp 0x487905
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x2d4], eax
mov edx, 0x418e78
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x2d4]
lea ecx, [ecx + eax + 4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x63
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x38]
push edx
push 0x40db7c
call dword [sym.imp.MSVBVM60.DLL___vbaAryRecMove]
jmp 0x487af9
push 0x487be3
jmp 0x487b8b
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x2c]
push edx
push 0x40db7c
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea eax, [ebp - 0x34]
push eax
push 0x40e5c0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x40]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x58]
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0xfc]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3