Function at 0x413e00
Capabilities:
Reference sql statements

Disassembly:
jmp dword [sym.imp.MSVBVM60.DLL___vbaFPException]
push ebp
mov ebp, esp
sub esp, 8
push 0x401316
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x380
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401268
xor esi, esi
lea eax, [ebp - 0x1f4]
push esi
push 0x401d9c
push eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xe0], esi
mov dword [ebp - 0xe4], esi
mov dword [ebp - 0xe8], esi
mov dword [ebp - 0xf8], esi
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x118], esi
mov dword [ebp - 0x128], esi
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x158], esi
mov dword [ebp - 0x168], esi
mov dword [ebp - 0x178], esi
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x198], esi
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x1b8], esi
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1cc], esi
mov dword [ebp - 0x1d0], esi
mov dword [ebp - 0x1d4], esi
mov dword [ebp - 0x1d8], esi
mov dword [ebp - 0x1dc], esi
mov dword [ebp - 0x1e0], esi
mov dword [ebp - 0x1e4], esi
mov dword [ebp - 0x1f4], esi
mov dword [ebp - 0x204], esi
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x224], esi
mov dword [ebp - 0x234], esi
mov dword [ebp - 0x244], esi
mov dword [ebp - 0x254], esi
mov dword [ebp - 0x264], esi
mov dword [ebp - 0x274], esi
mov dword [ebp - 0x284], esi
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x2a4], esi
mov dword [ebp - 0x2b4], esi
mov dword [ebp - 0x2c4], esi
mov dword [ebp - 0x2c8], esi
mov dword [ebp - 0x2ec], esi
mov dword [ebp - 0x2fc], esi
mov dword [ebp - 0x30c], esi
mov dword [ebp - 0x31c], esi
mov dword [ebp - 0x32c], esi
mov dword [ebp - 0x33c], esi
mov dword [ebp - 0x34c], esi
mov dword [ebp - 0x35c], esi
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea ecx, [ebp - 0x1f4]
lea edx, [ebp - 0x148]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetVar]
push 0x401d54
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
push 0x442030
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ebx, dword [ebp + 8]
mov eax, dword [ebx]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcFileLen]
test eax, eax
jle 0x4172aa
push 0x40280c
mov eax, 0x4008
sub esp, 0x10
mov dword [ebp - 0x284], eax
mov edi, esp
sub esp, 0x10
mov edx, 2
mov ecx, 1
mov dword [edi], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x294], edx
mov dword [ebp - 0x28c], ecx
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x27c], ebx
mov dword [edi + 8], ebx
mov dword [edi + 0xc], eax
mov eax, esp
push 2
push 0x4027f0
mov dword [eax], edx
mov edx, dword [ebp - 0x290]
mov dword [eax + 4], edx
lea edx, [ebp - 0x148]
push edx
mov dword [eax + 8], ecx
mov ecx, dword [ebp - 0x288]
mov dword [eax + 0xc], ecx
lea eax, [ebp - 0x1f4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x30
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
lea ecx, [ebp - 0xe4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0x1d8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x34]
cmp eax, esi
fnclex
jge 0x41409e
mov edx, dword [ebp - 0xe4]
push 0x34
push 0x40280c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x1d8]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x1d8], esi
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 8
call edi
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x27c], 0x402820
mov dword [ebp - 0x284], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push esi
lea eax, [ebp - 0x1f4]
push 0xffffffffffffffff
lea ecx, [ebp - 0x118]
push eax
lea edx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0x188]
call edi
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0xe4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x4c]
cmp eax, esi
fnclex
jge 0x41416d
mov edx, dword [ebp - 0xe4]
push 0x4c
push 0x40280c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x284]
push esi
push eax
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x284], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcDir]
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 8
call edi
mov ecx, dword [ebx]
lea edx, [ebp - 0x1f4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcFileDateTime]
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x178]
call edi
mov edx, 0x4420f0
mov ecx, 0x442160
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
lea eax, [ebp - 0x188]
push eax
call ebx
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0x380], eax
fild dword [ebp - 0x380]
fstp qword [ebp - 0x388]
fld qword [ebp - 0x388]
cmp dword [section..data], 0
jne 0x414217
fdiv qword [0x401260]
jmp 0x414228
push dword [0x401264]
push dword [0x401260]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fnstsw ax
test al, 0xd
jne 0x41748b
call dword [sym.imp.MSVBVM60.DLL___vbaFPInt]
fadd qword [0x401248]
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x284], 5
fstp qword [ebp - 0x27c]
fnstsw ax
test al, 0xd
jne 0x41748b
call edi
lea edx, [ebp - 0x1c8]
push esi
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
push 1
lea eax, [ebp - 0x1cc]
push 0xc
push eax
push 0x10
push 0x880
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x27c], esi
mov dword [ebp - 0x284], 2
call edi
lea ecx, [ebp - 0x188]
mov edi, 2
push ecx
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x284], edi
call ebx
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
sub eax, 1
mov dword [ebp - 0x294], 3
jo 0x417490
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x29c], esi
mov dword [ebp - 0x2a4], edi
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x2a4]
push ecx
lea eax, [ebp - 0x2fc]
push edx
lea ecx, [ebp - 0x2ec]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov esi, dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoadRefLock]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
test eax, eax
mov dword [ebp - 0x27c], 1
je 0x4154ac
mov eax, 0x8002
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x2b4], eax
lea edx, [ebp - 0x50]
mov dword [ebp - 0x28c], ecx
lea eax, [ebp - 0x284]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
mov dword [ebp - 0x294], 0x400c
mov dword [ebp - 0x29c], 0x401ff4
mov dword [ebp - 0x2a4], 8
mov dword [ebp - 0x2ac], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
mov eax, dword [ebp - 0x294]
push 1
mov ecx, dword [ebp - 0x290]
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], eax
mov eax, dword [ebp - 0x28c]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x288]
mov dword [edx + 8], eax
lea eax, [ebp - 0x204]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x188]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea ecx, [ebp - 0x2a4]
lea edx, [ebp - 0x214]
push eax
push ecx
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea eax, [ebp - 0x2b4]
lea ecx, [ebp - 0x224]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
lea edx, [ebp - 0x234]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2cc], ax
lea eax, [ebp - 0x214]
lea ecx, [ebp - 0x204]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0x2cc], 0
je 0x414bda
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x40]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x188]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x28c], 0x401ff4
mov dword [ebp - 0x294], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0x204]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0x214]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x204]
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 0x400c
lea eax, [ebp - 0x1a8]
push ecx
mov dword [ebp - 0x284], ecx
mov edx, esp
mov dword [ebp - 0x27c], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d0]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x1f4]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x204]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d0]
push edx
call ebx
lea eax, [ebp - 0xe0]
mov dword [ebp - 0x28c], 0x401ff4
mov dword [ebp - 0x294], 8
mov dword [ebp - 0x29c], eax
mov ecx, 0x400c
sub esp, 0x10
mov dword [ebp - 0x2a4], ecx
mov edx, esp
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x2a0]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d4]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x30]
lea eax, [ebp - 0x224]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x234]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d4]
push edx
call ebx
lea eax, [ebp - 0x204]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x214]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0x244]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xe8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x244]
lea eax, [ebp - 0x234]
push edx
lea ecx, [ebp - 0x214]
push eax
lea edx, [ebp - 0x224]
push ecx
lea eax, [ebp - 0x204]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x284]
mov dword [ebp - 0x284], 0
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
lea eax, [ebp - 0x90]
mov ecx, 0x400c
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x284], ecx
je 0x414777
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x30]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea eax, [ebp - 0x1f4]
lea ecx, [ebp - 0x1d8]
push 0
push 0xffffffffffffffff
push 1
push 0x401dd8
push 0x402828
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov dword [ebp - 0x1fc], eax
lea edx, [ebp - 0x204]
lea eax, [ebp - 0x214]
push edx
push eax
mov dword [ebp - 0x204], 8
call esi
lea edx, [ebp - 0x214]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x204]
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0xd0]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
jmp 0x4148f1
sub esp, 0x10
mov edx, esp
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x30]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea eax, [ebp - 0x1f4]
lea ecx, [ebp - 0x1d8]
push 0
push 0xffffffffffffffff
push 1
push 0x401dd8
push 0x402828
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov dword [ebp - 0x1fc], eax
lea edx, [ebp - 0x204]
lea eax, [ebp - 0x214]
push edx
push eax
mov dword [ebp - 0x204], 8
call esi
lea edx, [ebp - 0x214]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x204]
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 0x400c
lea eax, [ebp - 0x138]
push ecx
mov dword [ebp - 0x284], ecx
mov edx, esp
mov dword [ebp - 0x27c], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x30]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea eax, [ebp - 0x1f4]
lea ecx, [ebp - 0x1d8]
push 0
push 0xffffffffffffffff
push 1
push 0x401dd8
push 0x402828
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
lea edx, [ebp - 0x204]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x204], 8
push edx
lea eax, [ebp - 0x214]
push eax
call esi
lea edx, [ebp - 0x214]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x204]
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0xd0]
lea ecx, [ebp - 0x284]
push eax
lea edx, [ebp - 0x1f4]
push ecx
push edx
mov dword [ebp - 0x27c], 0x401ff4
mov dword [ebp - 0x284], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x128]
lea ecx, [ebp - 0x204]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0xe8]
push edx
push 0x402830
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
neg eax
sbb eax, eax
lea ecx, [ebp - 0x108]
neg eax
neg eax
mov word [ebp - 0x28c], ax
lea eax, [ebp - 0x294]
push eax
lea edx, [ebp - 0x284]
push ecx
lea eax, [ebp - 0x1f4]
push edx
push eax
mov dword [ebp - 0x294], 0xb
mov dword [ebp - 0x27c], 0x402830
mov dword [ebp - 0x284], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpNe]
lea ecx, [ebp - 0x204]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x294]
mov word [ebp - 0x2cc], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0x2cc], 0
je 0x414bda
mov eax, dword [ebp - 0x1cc]
test eax, eax
je 0x414a6c
cmp word [eax], 1
jne 0x414a6c
lea edx, [ebp - 0x40]
lea eax, [ebp - 0x284]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
mov dword [ebp - 0x27c], 0x1388
mov dword [ebp - 0x284], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
lea edx, [ebp - 0x204]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0x2d0], eax
jb 0x414a5b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x1cc]
mov eax, dword [ebp - 0x2d0]
shl eax, 4
mov dword [ebp - 0x38c], eax
jmp 0x414a7e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x29c], 0x401ff4
mov dword [ebp - 0x28c], eax
mov eax, 8
test ecx, ecx
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x2ac], 0x402614
mov dword [ebp - 0x2b4], eax
je 0x414b29
cmp word [ecx], 1
jne 0x414b29
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x2c4]
push ecx
lea eax, [ebp - 0x254]
push edx
push eax
mov dword [ebp - 0x2bc], 0x1388
mov dword [ebp - 0x2c4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
lea ecx, [ebp - 0x264]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x1cc]
mov edx, dword [ecx + 0x14]
sub eax, edx
mov edx, dword [ecx + 0x10]
cmp eax, edx
mov dword [ebp - 0x2cc], eax
jb 0x414b1e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov eax, dword [ebp - 0x2cc]
shl eax, 4
jmp 0x414b2f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov edx, dword [ebp - 0x1cc]
mov dword [ebp - 0x390], eax
lea ecx, [ebp - 0x294]
mov eax, dword [edx + 0xc]
mov edx, dword [ebp - 0x38c]
add eax, edx
lea edx, [ebp - 0x214]
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x2a4]
lea ecx, [ebp - 0x224]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x108]
lea eax, [ebp - 0x234]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea ecx, [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x244]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0x390]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x244]
lea edx, [ebp - 0x234]
push ecx
lea eax, [ebp - 0x224]
push edx
lea ecx, [ebp - 0x214]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
push 1
mov ecx, 0x400c
sub esp, 0x10
mov dword [ebp - 0x284], ecx
mov edx, esp
lea eax, [ebp - 0x40]
mov dword [ebp - 0x27c], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x28c], 0x40283c
mov dword [ebp - 0x294], 8
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x188]
push ecx
mov dword [ebp - 0x29c], 0
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x2a4], 0x8002
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea ecx, [ebp - 0x204]
push eax
lea eax, [ebp - 0x294]
push eax
push 0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
lea edx, [ebp - 0x2a4]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov word [ebp - 0x2cc], ax
lea eax, [ebp - 0x204]
lea ecx, [ebp - 0x1f4]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
cmp word [ebp - 0x2cc], 0
je 0x41548f
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x40]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x188]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
add esp, 0x1c
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x28c], 0x401ff4
mov dword [ebp - 0x294], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 0
lea eax, [ebp - 0x204]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0x214]
lea ecx, [ebp - 0x168]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x204]
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x168]
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x284], 2
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov ecx, dword [eax]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0x28c], eax
lea edx, [ebp - 0x284]
lea eax, [ebp - 0x294]
push edx
lea ecx, [ebp - 0x2a4]
push eax
lea edx, [ebp - 0x31c]
push ecx
lea eax, [ebp - 0x30c]
push edx
lea ecx, [ebp - 0x20]
push eax
push ecx
mov dword [ebp - 0x294], 3
mov dword [ebp - 0x29c], 1
mov dword [ebp - 0x2a4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x415450
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d0]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x1f4]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x204]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d0]
push edx
call ebx
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x2a4], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x28c], 0x402850
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d4]
push ecx
mov dword [ebp - 0x294], 0x8008
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x224]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x234]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d4]
push edx
call ebx
lea eax, [ebp - 0x204]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x214]
push ecx
push edx
mov dword [ebp - 0x2ac], 0x402868
mov dword [ebp - 0x2b4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x244]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x234]
mov word [ebp - 0x2cc], ax
lea edx, [ebp - 0x224]
push ecx
lea eax, [ebp - 0x204]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
cmp word [ebp - 0x2cc], 0
je 0x414f71
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x1a8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d0]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x1f4]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x204]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d0]
push edx
call ebx
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x2a4], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x28c], 0x402878
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d4]
push ecx
mov dword [ebp - 0x294], 0x8008
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x224]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x234]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d4]
push edx
call ebx
lea eax, [ebp - 0x204]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x214]
push ecx
push edx
mov dword [ebp - 0x2ac], 0x402890
mov dword [ebp - 0x2b4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0x234]
lea ecx, [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x244]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x234]
mov word [ebp - 0x2cc], ax
lea edx, [ebp - 0x224]
push ecx
lea eax, [ebp - 0x204]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
cmp word [ebp - 0x2cc], 0
je 0x4150ea
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d0]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x1f4]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x204]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d0]
push edx
call ebx
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x2a4], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d4]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x234]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x244]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d4]
push edx
call ebx
lea eax, [ebp - 0x204]
push 5
lea ecx, [ebp - 0x214]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0x244]
push 7
lea eax, [ebp - 0x254]
push edx
push eax
mov dword [ebp - 0x28c], 0x4028a0
mov dword [ebp - 0x294], 0x8008
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0x214]
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x224]
push edx
push eax
mov dword [ebp - 0x2ac], 0x4028b0
mov dword [ebp - 0x2b4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x254]
lea edx, [ebp - 0x2b4]
push ecx
lea eax, [ebp - 0x264]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
lea ecx, [ebp - 0x274]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2cc], ax
lea edx, [ebp - 0x254]
lea eax, [ebp - 0x244]
push edx
lea ecx, [ebp - 0x234]
push eax
lea edx, [ebp - 0x214]
push ecx
lea eax, [ebp - 0x204]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
cmp word [ebp - 0x2cc], 0
je 0x41529d
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d0]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x1f4]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x204]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d0]
push edx
call ebx
lea eax, [ebp - 0x204]
push 4
lea ecx, [ebp - 0x214]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x2a4], ecx
lea eax, [ebp - 0x20]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x2a0]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x28c], 0x4028c4
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x1d4]
push ecx
mov dword [ebp - 0x294], 0x8008
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x298]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x234]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0x244]
push eax
push ecx
call esi
lea edx, [ebp - 0x1d4]
push edx
call ebx
lea eax, [ebp - 0x214]
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x224]
push ecx
push edx
mov dword [ebp - 0x2ac], 0x4028d4
mov dword [ebp - 0x2b4], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0x244]
lea ecx, [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x254]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x244]
mov word [ebp - 0x2cc], ax
lea edx, [ebp - 0x234]
push ecx
lea eax, [ebp - 0x214]
push edx
lea ecx, [ebp - 0x204]
push eax
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
cmp word [ebp - 0x2cc], 0
je 0x415433
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0x31c]
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x20]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x414df0
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x284], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x27c], 1
mov dword [ebp - 0x284], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x2fc]
lea ecx, [ebp - 0x2ec]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x414338
mov eax, 2
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x294], eax
lea eax, [ebp - 0x284]
lea edx, [ebp - 0x294]
push eax
push ecx
lea eax, [ebp - 0x33c]
push edx
lea ecx, [ebp - 0x32c]
push eax
lea edx, [ebp - 0x40]
push ecx
push edx
mov dword [ebp - 0x28c], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
test eax, eax
je 0x4155e9
mov eax, dword [ebp - 0x1cc]
test eax, eax
je 0x41553f
cmp word [eax], 1
jne 0x41553f
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov esi, eax
mov eax, dword [ebp - 0x1cc]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub esi, edx
cmp esi, ecx
jb 0x415538
call edi
shl esi, 4
mov eax, esi
jmp 0x415541
call edi
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x284], 0
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0x284]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x4155cc
mov eax, dword [ebp - 0x1cc]
test eax, eax
je 0x4155a0
cmp word [eax], 1
jne 0x4155a0
lea ecx, [ebp - 0x40]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov esi, eax
mov eax, dword [ebp - 0x1cc]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub esi, edx
cmp esi, ecx
jb 0x415599
call edi
shl esi, 4
mov eax, esi
jmp 0x4155a2
call edi
mov ecx, dword [ebp - 0x1cc]
lea edx, [ebp - 0xc0]
push edx
mov edx, dword [ecx + 0xc]
add edx, eax
lea eax, [ebp - 0x1f4]
push edx
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0xc0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x33c]
lea edx, [ebp - 0x32c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x415500
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
lea ecx, [ebp - 0x284]
push 0x442140
lea edx, [ebp - 0x1f4]
mov eax, 0x8008
push ecx
push edx
mov dword [ebp - 0x27c], 0x402528
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x28c], 0x402628
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x29c], 0x402634
mov dword [ebp - 0x2a4], eax
call esi
push eax
lea eax, [ebp - 0x294]
push 0x442140
lea ecx, [ebp - 0x204]
push eax
push ecx
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarOr]
lea edx, [ebp - 0x214]
push eax
push edx
call edi
push eax
lea eax, [ebp - 0x2a4]
push 0x442140
lea ecx, [ebp - 0x224]
push eax
push ecx
call esi
lea edx, [ebp - 0x234]
push eax
push edx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x416297
mov esi, 8
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x27c], 0x402640
mov dword [ebp - 0x284], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0x1f4]
push eax
push 0x442130
push ecx
mov dword [ebp - 0x27c], 0x40242c
mov dword [ebp - 0x284], esi
mov dword [ebp - 0x28c], 0x40248c
mov dword [ebp - 0x294], esi
mov dword [ebp - 0x29c], 0x4023e4
mov dword [ebp - 0x2a4], esi
call ebx
push eax
lea edx, [ebp - 0x294]
lea eax, [ebp - 0x204]
push edx
push eax
call ebx
push eax
lea ecx, [ebp - 0x214]
push 0x442090
push ecx
call ebx
push eax
lea edx, [ebp - 0x2a4]
lea eax, [ebp - 0x224]
push edx
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x214]
lea edx, [ebp - 0x204]
push ecx
lea eax, [ebp - 0x1f4]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x442010]
mov ecx, 9
mov dword [ebp - 0x27c], eax
push 0xffffffffffffffff
push 3
push 2
mov dword [ebp - 0x284], ecx
sub esp, 0x10
mov edx, dword [0x442030]
mov ebx, esp
sub esp, 0x10
mov edi, dword [edx]
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebx + 4], ecx
mov ecx, esp
push edx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xa8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
call dword [edi + 0xa0]
test eax, eax
fnclex
jge 0x4157e8
mov ecx, dword [0x442030]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xa0
push 0x4020a8
push ecx
push eax
call edi
jmp 0x4157ee
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [0x442030]
lea ecx, [ebp - 0x2c8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x415817
mov edx, dword [0x442030]
push 0x50
push 0x4020a8
push edx
push eax
call edi
cmp word [ebp - 0x2c8], 0
jne 0x415dd7
mov eax, dword [0x442030]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x41584d
mov edx, dword [0x442030]
push 0x98
push 0x4020a8
push edx
push eax
call edi
mov eax, dword [0x442030]
lea edx, [ebp - 0x1e0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x415876
mov ecx, dword [0x442030]
push 0x54
push 0x4020a8
push ecx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, esi
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402654
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x4158d5
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov eax, dword [ebp - 0x1e4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 9
call esi
lea ecx, [ebp - 0x1e0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x1f4]
mov dword [ebp - 0x27c], 0x402614
mov dword [ebp - 0x284], 8
call ebx
push 0
lea eax, [ebp - 0x1f4]
push 0xffffffffffffffff
lea ecx, [ebp - 0xc0]
push eax
lea edx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0x204]
lea ecx, [ebp - 0xa0]
call esi
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xa0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov edx, dword [eax]
push edx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0x27c], eax
lea eax, [ebp - 0x284]
lea ecx, [ebp - 0x158]
push eax
push ecx
mov dword [ebp - 0x284], 0x8003
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x415dd7
lea edx, [ebp - 0x284]
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x27c], 0
mov dword [ebp - 0x284], 2
call esi
lea edx, [ebp - 0xa0]
mov dword [ebp - 0x27c], 1
push edx
mov dword [ebp - 0x284], 2
call dword [sym.imp.MSVBVM60.DLL___vbaRefVarAry]
mov eax, dword [eax]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
sub eax, 1
lea ecx, [ebp - 0x284]
jo 0x417490
mov dword [ebp - 0x28c], eax
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x158]
push edx
lea ecx, [ebp - 0x35c]
push eax
lea edx, [ebp - 0x34c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
mov dword [ebp - 0x294], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarIndexLoad]
test eax, eax
je 0x415c53
sub esp, 0x10
mov ecx, 0x400c
mov edx, esp
mov dword [ebp - 0x284], ecx
lea eax, [ebp - 0x40]
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x27c], eax
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xa0]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call esi
add esp, 0x1c
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x204]
mov dword [ebp - 0x28c], 0x401ff4
mov dword [ebp - 0x294], 8
call ebx
push 0
lea eax, [ebp - 0x204]
push 0xffffffffffffffff
lea ecx, [ebp - 0x1f4]
push eax
lea edx, [ebp - 0x1d8]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
lea eax, [ebp - 0x214]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0x214]
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1d8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x204]
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, 2
mov eax, 3
push ecx
mov dword [ebp - 0x284], ecx
mov edx, esp
mov dword [ebp - 0x27c], eax
push 1
mov dword [ebp - 0x29c], 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebp - 0x2a4], 0x8002
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xf8]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call esi
add esp, 0x1c
push eax
lea eax, [ebp - 0x2a4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0x1f4]
mov di, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
test di, di
je 0x415c30
lea edx, [ebp - 0x1b8]
mov ecx, 2
push edx
mov dword [ebp - 0x284], ecx
sub esp, 0x10
mov eax, 3
mov edx, esp
mov dword [ebp - 0x27c], eax
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [edx + 4], ecx
lea ecx, [ebp - 0xf8]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0x1f4]
push edx
call esi
add esp, 0x1c
push eax
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x1b8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x35c]
lea edx, [ebp - 0x34c]
push ecx
lea eax, [ebp - 0x40]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x415a6f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
mov ecx, 0x8002
xor eax, eax
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x294], ecx
lea ecx, [ebp - 0x1b8]
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x28c], eax
lea edx, [ebp - 0x284]
push ecx
lea eax, [ebp - 0x1f4]
push edx
push eax
call esi
lea ecx, [ebp - 0x158]
push eax
lea edx, [ebp - 0x294]
push ecx
lea eax, [ebp - 0x204]
push edx
push eax
call esi
lea ecx, [ebp - 0x214]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x415dd7
mov esi, 8
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x29c], 0x40266c
mov dword [ebp - 0x2a4], esi
mov dword [ebp - 0x28c], 0x402674
mov dword [ebp - 0x294], esi
call ebx
lea edx, [ebp - 0x1b8]
lea eax, [ebp - 0x158]
push edx
lea ecx, [ebp - 0x1f4]
push eax
push ecx
mov dword [ebp - 0x27c], 0x64
mov dword [ebp - 0x284], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
push eax
lea edx, [ebp - 0x284]
lea eax, [ebp - 0x204]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, eax
lea ecx, [ebp - 0x214]
call ebx
push 1
lea ecx, [ebp - 0x224]
push 1
lea edx, [ebp - 0x214]
push ecx
lea eax, [ebp - 0x234]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
lea ecx, [ebp - 0x2a4]
lea edx, [ebp - 0x234]
push ecx
lea eax, [ebp - 0x244]
mov dword [ebp - 0x2b4], esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push edx
push eax
mov dword [ebp - 0x2ac], 0x402684
call esi
lea ecx, [ebp - 0x2b4]
push eax
lea edx, [ebp - 0x254]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x60]
call ebx
lea eax, [ebp - 0x244]
lea ecx, [ebp - 0x234]
push eax
lea edx, [ebp - 0x224]
push ecx
lea eax, [ebp - 0x214]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov eax, dword [0x442030]
lea edx, [ebp - 0x1e0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x415e00
mov ecx, dword [0x442030]
push 0x54
push 0x4020a8
push ecx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402690
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x415e62
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov eax, dword [ebp - 0x1e4]
xor esi, esi
lea edx, [ebp - 0x1f4]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x1e4], esi
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1f4], 9
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1e0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, 8
mov ecx, 0x8002
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x2b4], ecx
lea eax, [ebp - 0x70]
push 1
lea ecx, [ebp - 0x284]
push eax
push ecx
lea edx, [ebp - 0x1f4]
mov dword [ebp - 0x28c], esi
mov dword [ebp - 0x2ac], esi
push esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push edx
mov dword [ebp - 0x27c], 0x40266c
mov dword [ebp - 0x29c], 0x4026a4
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGt]
push eax
lea eax, [ebp - 0x294]
lea ecx, [ebp - 0x204]
push eax
push ecx
call ebx
push eax
lea edx, [ebp - 0x70]
push 1
lea eax, [ebp - 0x2a4]
push edx
push eax
lea ecx, [ebp - 0x214]
push 0
push ecx
call esi
push eax
lea edx, [ebp - 0x2b4]
lea eax, [ebp - 0x224]
push edx
push eax
call ebx
lea ecx, [ebp - 0x234]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov bx, ax
lea edx, [ebp - 0x214]
lea eax, [ebp - 0x1f4]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
test bx, bx
je 0x4160d8
mov eax, 0x40266c
lea ecx, [ebp - 0x70]
push 1
lea edx, [ebp - 0x294]
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x27c], eax
push ecx
push edx
lea eax, [ebp - 0x204]
mov ebx, 8
push 0
push eax
mov dword [ebp - 0x28c], 0x4026a4
mov dword [ebp - 0x294], ebx
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x2ac], 1
mov dword [ebp - 0x2b4], 2
mov dword [ebp - 0x284], ebx
call esi
push eax
lea ecx, [ebp - 0x70]
push 1
lea edx, [ebp - 0x2a4]
push ecx
push edx
lea eax, [ebp - 0x214]
push 0
push eax
call esi
lea ecx, [ebp - 0x224]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0x2b4]
lea eax, [ebp - 0x234]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
lea ecx, [ebp - 0x70]
push 1
lea edx, [ebp - 0x284]
push ecx
push edx
lea eax, [ebp - 0x1f4]
push 0
push eax
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x244]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push 0
push 0xffffffffffffffff
push 1
lea eax, [ebp - 0x244]
push 0x401dd8
lea ecx, [ebp - 0x1dc]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x70]
lea eax, [ebp - 0x1d8]
push edx
push eax
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
lea edx, [ebp - 0x254]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x254], ebx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1dc]
lea edx, [ebp - 0x1d8]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0x244]
lea ecx, [ebp - 0x234]
push eax
lea edx, [ebp - 0x1f4]
push ecx
lea eax, [ebp - 0x214]
push edx
lea ecx, [ebp - 0x204]
push eax
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
jmp 0x4160dd
mov ebx, 8
mov eax, dword [0x442030]
lea ecx, [ebp - 0x1e0]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x416106
mov edx, dword [0x442030]
push 0x54
push 0x4020a8
push edx
push eax
call edi
mov edx, ebx
lea ebx, [ebp - 0x1e4]
push ebx
mov eax, dword [ebp - 0x1e0]
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402690
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416165
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov esi, dword [ebp - 0x1e4]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x60]
push eax
mov ebx, dword [esi]
lea edx, [ebp - 0x1f4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
push esi
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
call dword [ebx + 0x38]
test eax, eax
fnclex
jge 0x4161b2
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea ecx, [ebp - 0x1e4]
lea edx, [ebp - 0x1e0]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
sub esp, 0x10
mov ecx, 0xa
mov ebx, esp
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x284], ecx
mov eax, 0x80020004
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], eax
mov edx, eax
mov dword [ebx + 4], ecx
sub esp, 0x10
mov esi, dword [0x442030]
mov ecx, esp
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x27c], edx
mov esi, dword [esi]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x284]
mov dword [ecx], eax
mov eax, dword [ebp - 0x280]
mov dword [ecx + 4], eax
mov eax, dword [0x442030]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x278]
mov dword [ecx + 0xc], edx
call dword [esi + 0xac]
test eax, eax
fnclex
jge 0x416267
mov ecx, dword [0x442030]
push 0xac
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442030]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x41628f
mov ecx, dword [0x442030]
push 0x80
push 0x4020a8
push ecx
push eax
call edi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
jmp 0x41629d
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0x284]
push edx
push eax
mov dword [ebp - 0x284], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
test ax, ax
je 0x4172aa
mov eax, 8
lea ecx, [ebp - 0x284]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x294], eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x1f4]
push edx
push eax
mov dword [ebp - 0x27c], 0x4026bc
mov dword [ebp - 0x28c], 0x4023e4
call ebx
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x204]
push ecx
push edx
call ebx
mov edx, eax
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push 0xffffffffffffffff
push 3
push 2
mov eax, dword [0x442010]
sub esp, 0x10
mov ecx, 9
mov ebx, esp
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x27c], eax
sub esp, 0x10
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x280]
mov edx, dword [0x442018]
mov dword [ebx + 4], ecx
mov ecx, esp
mov esi, dword [edx]
push edx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x198]
mov dword [ecx], eax
mov eax, dword [ebp - 0x194]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x190]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x18c]
mov dword [ecx + 0xc], eax
call dword [esi + 0xa0]
test eax, eax
fnclex
jge 0x4163b1
mov ecx, dword [0x442018]
push 0xa0
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442018]
lea ecx, [ebp - 0x2c8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x4163da
mov edx, dword [0x442018]
push 0x50
push 0x4020a8
push edx
push eax
call edi
cmp word [ebp - 0x2c8], 0
jne 0x41657b
mov eax, dword [0x442018]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x416410
mov edx, dword [0x442018]
push 0x98
push 0x4020a8
push edx
push eax
call edi
mov eax, dword [0x442018]
lea edx, [ebp - 0x1e0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x416439
mov ecx, dword [0x442018]
push 0x54
push 0x4020a8
push ecx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402718
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x41649b
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [ebp - 0xc0]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [ebp - 0xbc]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0xb8]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0xb4]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x4164e2
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov ecx, 0xa
mov eax, 0x80020004
push ecx
mov dword [ebp - 0x294], ecx
mov ebx, esp
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x28c], eax
mov edx, eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x290]
sub esp, 0x10
mov esi, dword [0x442018]
mov dword [ebx + 4], ecx
mov ecx, esp
mov dword [ebp - 0x27c], edx
mov esi, dword [esi]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x284]
mov dword [ecx], eax
mov eax, dword [ebp - 0x280]
mov dword [ecx + 4], eax
mov eax, dword [0x442018]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x278]
mov dword [ecx + 0xc], edx
call dword [esi + 0xac]
test eax, eax
fnclex
jge 0x416f39
jmp 0x416f25
sub esp, 0x10
mov ecx, 0xa
mov ebx, esp
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x284], ecx
mov eax, 0x80020004
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], eax
mov edx, eax
mov dword [ebx + 4], ecx
sub esp, 0x10
mov esi, dword [0x442018]
mov ecx, esp
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x27c], edx
mov esi, dword [esi]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x284]
mov dword [ecx], eax
mov eax, dword [ebp - 0x280]
mov dword [ecx + 4], eax
mov eax, dword [0x442018]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x278]
mov dword [ecx + 0xc], edx
call dword [esi + 0x78]
test eax, eax
fnclex
jge 0x416605
mov ecx, dword [0x442018]
push 0x78
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442018]
lea ecx, [ebp - 0x1e0]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x41662e
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402748
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416690
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [ebp - 0x80]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [ebp - 0x7c]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x78]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x4166cb
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x41670d
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402770
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x41676f
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov ebx, esp
mov edx, 8
mov dword [ebp - 0x294], edx
mov ecx, 0x4028e8
mov dword [ebx], edx
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], ecx
mov esi, dword [eax]
mov dword [ebx + 4], edx
push eax
mov dword [ebp - 0x2d8], eax
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x288]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x38]
test eax, eax
fnclex
jge 0x4167ca
mov edx, dword [ebp - 0x2d8]
push 0x38
push 0x4026a8
push edx
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x41680c
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402788
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x41686e
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [0x442100]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [0x442104]
mov dword [edx + 4], ebx
mov ebx, dword [0x442108]
mov dword [edx + 8], ebx
mov ebx, dword [0x44210c]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x4168b5
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x4168f7
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x4027a0
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416959
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [0x442150]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [0x442154]
mov dword [edx + 4], ebx
mov ebx, dword [0x442158]
mov dword [edx + 8], ebx
mov ebx, dword [0x44215c]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x4169a0
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea edx, [ebp - 0x1f4]
mov dword [ebp - 0x27c], 4
mov dword [ebp - 0x284], 0x8002
push 0x442110
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea eax, [ebp - 0x284]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x416a17
push 2
lea ecx, [ebp - 0x1f4]
push 0x442110
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0x1f4]
mov ecx, 0x442110
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x442018]
lea ecx, [ebp - 0x1e0]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x416a40
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x4027b8
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416aa2
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [0x442110]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [0x442114]
mov dword [edx + 4], ebx
mov ebx, dword [0x442118]
mov dword [edx + 8], ebx
mov ebx, dword [0x44211c]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x416ae9
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x416b2b
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402138
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416b8d
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [0x442160]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [0x442164]
mov dword [edx + 4], ebx
mov ebx, dword [0x442168]
mov dword [edx + 8], ebx
mov ebx, dword [0x44216c]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x416bd4
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x416c16
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402148
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416c78
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [0x442170]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [0x442174]
mov dword [edx + 4], ebx
mov ebx, dword [0x442178]
mov dword [edx + 8], ebx
mov ebx, dword [0x44217c]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x416cbf
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x416d01
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x4027d0
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416d63
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [ebp - 0xc0]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [ebp - 0xbc]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0xb8]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0xb4]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x416daa
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov eax, dword [0x442018]
add esp, 0xc
lea ecx, [ebp - 0x1e0]
mov edx, dword [eax]
push ecx
push eax
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x416dec
mov edx, dword [0x442018]
push 0x54
push 0x4020a8
push edx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x402730
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x416e4e
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
mov ebx, dword [ebp - 0x178]
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov edx, esp
push eax
mov esi, eax
mov ecx, dword [eax]
mov dword [edx], ebx
mov ebx, dword [ebp - 0x174]
mov dword [edx + 4], ebx
mov ebx, dword [ebp - 0x170]
mov dword [edx + 8], ebx
mov ebx, dword [ebp - 0x16c]
mov dword [edx + 0xc], ebx
call dword [ecx + 0x38]
test eax, eax
fnclex
jge 0x416e95
push 0x38
push 0x4026a8
push esi
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov ecx, 0xa
mov eax, 0x80020004
push ecx
mov dword [ebp - 0x294], ecx
mov ebx, esp
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x28c], eax
mov edx, eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x290]
sub esp, 0x10
mov esi, dword [0x442018]
mov dword [ebx + 4], ecx
mov ecx, esp
mov dword [ebp - 0x27c], edx
mov esi, dword [esi]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x284]
mov dword [ecx], eax
mov eax, dword [ebp - 0x280]
mov dword [ecx + 4], eax
mov eax, dword [0x442018]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x278]
mov dword [ecx + 0xc], edx
call dword [esi + 0xac]
test eax, eax
fnclex
jge 0x416f39
mov ecx, dword [0x442018]
push 0xac
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442018]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x416f61
mov ecx, dword [0x442018]
push 0x80
push 0x4020a8
push ecx
push eax
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov eax, 8
lea edx, [ebp - 0x284]
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x2a4], eax
push edx
lea eax, [ebp - 0x1f4]
push 0x442130
push eax
mov dword [ebp - 0x27c], 0x40242c
mov dword [ebp - 0x28c], 0x40248c
mov dword [ebp - 0x29c], 0x4023e4
call esi
lea ecx, [ebp - 0x294]
push eax
lea edx, [ebp - 0x204]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x214]
push 0x442090
push eax
call esi
lea ecx, [ebp - 0x2a4]
push eax
lea edx, [ebp - 0x224]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x214]
lea ecx, [ebp - 0x204]
push eax
lea edx, [ebp - 0x1f4]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov eax, dword [0x442010]
mov ecx, 9
mov dword [ebp - 0x27c], eax
push 0xffffffffffffffff
push 3
push 2
mov dword [ebp - 0x284], ecx
sub esp, 0x10
mov edx, dword [0x442030]
mov ebx, esp
sub esp, 0x10
mov esi, dword [edx]
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x280]
mov dword [ebx + 4], ecx
mov ecx, esp
push edx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x278]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xac]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xa8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 0xc], eax
call dword [esi + 0xa0]
test eax, eax
fnclex
jge 0x417099
mov ecx, dword [0x442030]
push 0xa0
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442030]
lea ecx, [ebp - 0x2c8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x4170c2
mov edx, dword [0x442030]
push 0x50
push 0x4020a8
push edx
push eax
call edi
cmp word [ebp - 0x2c8], 0
jne 0x417282
mov eax, dword [0x442030]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x98]
test eax, eax
fnclex
jge 0x4170f8
mov edx, dword [0x442030]
push 0x98
push 0x4020a8
push edx
push eax
call edi
mov eax, dword [0x442030]
lea edx, [ebp - 0x1e0]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x417121
mov ecx, dword [0x442030]
push 0x54
push 0x4020a8
push ecx
push eax
call edi
lea ebx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e0]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x284], edx
mov ebx, esp
mov ecx, 0x4027d0
mov dword [ebp - 0x27c], ecx
mov esi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x280]
push eax
mov dword [ebp - 0x2d0], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x278]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x28]
test eax, eax
fnclex
jge 0x417183
mov edx, dword [ebp - 0x2d0]
push 0x28
push 0x4020e8
push edx
push eax
call edi
sub esp, 0x10
mov eax, dword [ebp - 0x1e4]
mov ebx, esp
mov edx, 8
mov dword [ebp - 0x294], edx
mov ecx, 0x4027e8
mov dword [ebx], edx
mov edx, dword [ebp - 0x290]
mov dword [ebp - 0x28c], ecx
mov esi, dword [eax]
mov dword [ebx + 4], edx
push eax
mov dword [ebp - 0x2d8], eax
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x288]
mov dword [ebx + 0xc], ecx
call dword [esi + 0x38]
test eax, eax
fnclex
jge 0x4171de
mov edx, dword [ebp - 0x2d8]
push 0x38
push 0x4026a8
push edx
push eax
call edi
lea eax, [ebp - 0x1e4]
lea ecx, [ebp - 0x1e0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov ecx, 0xa
mov eax, 0x80020004
push ecx
mov dword [ebp - 0x294], ecx
mov ebx, esp
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x28c], eax
mov edx, eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x290]
sub esp, 0x10
mov esi, dword [0x442030]
mov dword [ebx + 4], ecx
mov ecx, esp
mov dword [ebp - 0x27c], edx
mov esi, dword [esi]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x288]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x284]
mov dword [ecx], eax
mov eax, dword [ebp - 0x280]
mov dword [ecx + 4], eax
mov eax, dword [0x442030]
push eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x278]
mov dword [ecx + 0xc], edx
call dword [esi + 0xac]
test eax, eax
fnclex
jge 0x417282
mov ecx, dword [0x442030]
push 0xac
push 0x4020a8
push ecx
push eax
call edi
mov eax, dword [0x442030]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x4172aa
mov ecx, dword [0x442030]
push 0x80
push 0x4020a8
push ecx
push eax
call edi
wait
push 0x417478
jmp 0x417344
lea edx, [ebp - 0x35c]
lea eax, [ebp - 0x34c]
push edx
lea ecx, [ebp - 0x33c]
push eax
lea edx, [ebp - 0x32c]
push ecx
lea eax, [ebp - 0x31c]
push edx
lea ecx, [ebp - 0x30c]
push eax
lea edx, [ebp - 0x2fc]
push ecx
lea eax, [ebp - 0x2ec]
push edx
push eax
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0x24
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xa0]
call esi
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0xc0]
call esi
lea ecx, [ebp - 0xd0]
call esi
lea ecx, [ebp - 0xe0]
call esi
lea ecx, [ebp - 0xe4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xe8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xf8]
call esi
lea ecx, [ebp - 0x108]
call esi
lea ecx, [ebp - 0x118]
call esi
lea ecx, [ebp - 0x128]
call esi
lea ecx, [ebp - 0x138]
call esi
lea ecx, [ebp - 0x148]
call esi
lea ecx, [ebp - 0x158]
call esi
lea ecx, [ebp - 0x168]
call esi
lea ecx, [ebp - 0x178]
call esi
lea ecx, [ebp - 0x188]
call esi
lea ecx, [ebp - 0x198]
call esi
lea ecx, [ebp - 0x1a8]
call esi
lea ecx, [ebp - 0x1b8]
call esi
lea ecx, [ebp - 0x1c8]
call esi
lea ecx, [ebp - 0x1cc]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
jmp 0x40131c
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop