Function at 0x4a67b0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x403c56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x164
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x403ac8
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x13c], ebx
mov dword [ebp - 0x140], ebx
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov eax, dword [ebp - 0x60]
push eax
push 0x416e6c
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
call esi
test eax, eax
jne 0x4a6952
mov eax, 0x80020004
mov dword [ebp - 0xe4], eax
mov ecx, 0xa
mov dword [ebp - 0xec], ecx
mov edx, eax
mov dword [ebp - 0xd4], edx
mov esi, ecx
mov dword [ebp - 0xdc], esi
mov edi, dword [0x4ae0b4]
mov edi, dword [edi]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xe8]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xd0]
mov dword [ecx + 0xc], edx
mov eax, dword [0x4ae0b4]
push eax
call dword [edi + 0x2b0]
fnclex
test eax, eax
jge 0x4a918b
push 0x2b0
push 0x415a20
mov ecx, dword [0x4ae0b4]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x4a9264
jmp 0x4a91f8
mov dword [ebp - 0xd4], 0x41a3cc
mov dword [ebp - 0xdc], 8
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 0xffffffffffffffff
lea edx, [ebp - 0x9c]
push edx
mov eax, dword [ebp - 0x60]
push eax
lea ecx, [ebp - 0xac]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea edx, [ebp - 0xac]
push edx
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x5c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov ecx, dword [ebp - 0x5c]
push ecx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x24], ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dx, word [ebp - 0x148]
cmp word [ebp - 0x24], dx
jg 0x4a8606
mov eax, dword [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x78]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a6a49
cmp word [ecx], 1
jne 0x4a6a49
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a6a3a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
jmp 0x4a6a52
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x4159c0
mov edx, dword [ecx + 0xc]
add edx, eax
push edx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov edx, dword [ebp - 0x7c]
mov dword [ebp - 0x7c], ebx
lea ecx, [ebp - 0x138]
call edi
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41ad74
call esi
test eax, eax
jne 0x4a6d06
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a6ac2
cmp word [ecx], 1
jne 0x4a6ac2
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a6ab9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a6acb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov edx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
push 1
push 0xffffffffffffffff
push 1
push 0x416e6c
push 0x41eaf4
lea ecx, [ebp - 0x7c]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x68]
call edi
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x7c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
cmp dword [ebp - 0x74], ebx
jne 0x4a6b2f
lea eax, [ebp - 0x74]
push eax
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x74]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
call fcn.00467b80
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
cmp dword [ebp - 0x74], ebx
jne 0x4a6b66
lea eax, [ebp - 0x74]
push eax
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x74]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x13c]
push eax
push 0x416cb8
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
cmp eax, ebx
je 0x4a6bfa
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
push eax
call dword [ecx + 0x44]
fnclex
cmp eax, ebx
jge 0x4a6ba9
push 0x44
push 0x416cb8
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 1
mov edx, dword [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x68]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaInStr]
xor ecx, ecx
test eax, eax
setg cl
neg ecx
mov si, cx
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp si, bx
jne 0x4a6bed
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x13c]
push eax
push 0x416cb8
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
jmp 0x4a6b80
lea ecx, [ebp - 0x13c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaExitEachColl]
push ebx
mov edx, dword [ebp - 0x2c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjIs]
test ax, ax
je 0x4a6de8
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov eax, 0x80020004
mov dword [ebp - 0xc4], eax
mov ecx, 0xa
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], ecx
push 0x41f7ac
mov ecx, dword [ebp - 0x68]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
push eax
push 0x41f7dc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
mov dword [ebp - 0x94], 0x80020004
mov dword [ebp - 0x9c], 0xa
mov edx, dword [esi]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 1
push esi
call dword [edx + 0x44]
fnclex
cmp eax, ebx
jge 0x4a6cc5
push 0x44
push 0x4181c4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41f804
call esi
test eax, eax
jne 0x4a6e05
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a6d35
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 3
push eax
call dword [edx + 0x28]
fnclex
cmp eax, ebx
jge 0x4a6d54
push 0x28
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0x28], ebx
jne 0x4a6d68
lea eax, [ebp - 0x28]
push eax
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a6d96
cmp word [ecx], 1
jne 0x4a6d96
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x4a6d8d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [edi*4]
jmp 0x4a6d9f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edi, dword [esi]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [edi + 0xcc]
fnclex
cmp eax, ebx
jge 0x4a6dd9
push 0xcc
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, 1
add ax, word [ebp - 0x24]
jo 0x4a9277
mov dword [ebp - 0x24], eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
jmp 0x4a69f9
mov eax, dword [ebp - 0x138]
push eax
push 0x41f80c
call esi
test eax, eax
jne 0x4a6eef
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a6e34
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 3
push eax
call dword [edx + 0x28]
fnclex
cmp eax, ebx
jge 0x4a6e53
push 0x28
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0x28], ebx
jne 0x4a6e67
lea eax, [ebp - 0x28]
push eax
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a6e95
cmp word [ecx], 1
jne 0x4a6e95
movsx edi, word [ebp - 0x24]
sub edi, dword [ecx + 0x14]
cmp edi, dword [ecx + 0x10]
jb 0x4a6e8c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [edi*4]
jmp 0x4a6e9e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edi, dword [esi]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [edi + 0xcc]
fnclex
cmp eax, ebx
jge 0x4a6ed8
push 0xcc
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x58], eax
jmp 0x4a6de2
mov eax, dword [ebp - 0x138]
push eax
push 0x41f818
call esi
test eax, eax
jne 0x4a6f29
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a6f21
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 1
jmp 0x4a6f61
mov eax, dword [ebp - 0x138]
push eax
push 0x41f820
call esi
test eax, eax
jne 0x4a6f83
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a6f5b
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 4
push eax
call dword [edx + 0x28]
fnclex
cmp eax, ebx
jge 0x4a6de8
push 0x28
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41f82c
call esi
test eax, eax
jne 0x4a6fbd
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a6fb5
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 1
jmp 0x4a6ff5
mov eax, dword [ebp - 0x138]
push eax
push 0x41f838
call esi
test eax, eax
jne 0x4a701c
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a6fef
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 4
push eax
call dword [edx + 0x28]
fnclex
cmp eax, ebx
jge 0x4a700e
push 0x28
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x58], eax
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41f848
call esi
test eax, eax
jne 0x4a70a7
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7047
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x30]
fnclex
cmp eax, ebx
jge 0x4a7066
push 0x30
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a707f
lea eax, [ebp - 0x28]
push eax
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x38]
fnclex
cmp eax, ebx
jge 0x4a6de8
push 0x38
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x4a6de8
mov edx, dword [ebp - 0x138]
push edx
push 0x41f850
call esi
test eax, eax
jne 0x4a7132
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a70d2
lea eax, [ebp - 0x28]
push eax
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x64]
fnclex
cmp eax, ebx
jge 0x4a70f1
push 0x64
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a710a
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x6c]
fnclex
cmp eax, ebx
jge 0x4a6de8
push 0x6c
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x4a6de8
mov edx, dword [ebp - 0x138]
push edx
push 0x41f85c
call esi
test eax, eax
jne 0x4a7150
mov dword [ebp - 0x54], 0xffffffff
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41f868
call esi
test eax, eax
jne 0x4a716e
mov dword [ebp - 0x50], 0xffffffff
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f874
call esi
test eax, eax
jne 0x4a718c
mov dword [ebp - 0x48], 0xffffffff
jmp 0x4a6de8
mov edx, dword [ebp - 0x138]
push edx
push 0x41f880
call esi
test eax, eax
jne 0x4a71aa
mov dword [ebp - 0x34], 0xffffffff
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41f88c
call esi
test eax, eax
jne 0x4a7425
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a71d9
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x30]
fnclex
cmp eax, ebx
jge 0x4a71f8
push 0x30
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a7211
lea eax, [ebp - 0x28]
push eax
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea ecx, [ebp - 0x88]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push esi
call dword [edi + 0x44]
fnclex
cmp eax, ebx
jge 0x4a7246
push 0x44
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x5c]
push edx
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a7291
cmp word [ecx], 1
jne 0x4a7291
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a7288
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
jmp 0x4a729a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x41ab90
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a72e5
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x3c]
fnclex
cmp eax, ebx
jge 0x4a7309
push 0x3c
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov edx, 0xa
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x9c], 8
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [edx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a738c
push 0x20
push 0x416064
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a73fd
cmp word [ecx], 1
jne 0x4a73fd
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a73f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a7406
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x4a7258
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f894
call esi
test eax, eax
jne 0x4a76a0
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7454
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x64]
fnclex
cmp eax, ebx
jge 0x4a7473
push 0x64
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a748c
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push esi
call dword [edi + 0x78]
fnclex
cmp eax, ebx
jge 0x4a74c1
push 0x78
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a750c
cmp word [ecx], 1
jne 0x4a750c
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a7503
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
jmp 0x4a7515
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x41ab90
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7560
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x70]
fnclex
cmp eax, ebx
jge 0x4a7584
push 0x70
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov edx, 0xa
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x9c], 8
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [edx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a7607
push 0x20
push 0x416064
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a7678
cmp word [ecx], 1
jne 0x4a7678
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a766f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a7681
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x4a74d3
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f8a0
call esi
test eax, eax
jne 0x4a791b
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a76cf
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x30]
fnclex
cmp eax, ebx
jge 0x4a76ee
push 0x30
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a7707
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push esi
call dword [edi + 0x50]
fnclex
cmp eax, ebx
jge 0x4a773c
push 0x50
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a7787
cmp word [ecx], 1
jne 0x4a7787
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a777e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
jmp 0x4a7790
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x41ab90
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a77db
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x48]
fnclex
cmp eax, ebx
jge 0x4a77ff
push 0x48
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov edx, 0xa
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x9c], 8
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [edx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a7882
push 0x20
push 0x416064
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a78f3
cmp word [ecx], 1
jne 0x4a78f3
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a78ea
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a78fc
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x4a774e
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f8a8
call esi
test eax, eax
jne 0x4a7b9c
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a794a
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x64]
fnclex
cmp eax, ebx
jge 0x4a7969
push 0x64
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a7982
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push esi
call dword [edi + 0x84]
fnclex
cmp eax, ebx
jge 0x4a79bd
push 0x84
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a7a08
cmp word [ecx], 1
jne 0x4a7a08
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a79ff
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
jmp 0x4a7a11
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x41ab90
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7a5c
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x7c]
fnclex
cmp eax, ebx
jge 0x4a7a80
push 0x7c
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov edx, 0xa
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xac], edx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x9c], 8
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [edx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a7b03
push 0x20
push 0x416064
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a7b74
cmp word [ecx], 1
jne 0x4a7b74
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a7b6b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a7b7d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x4a79cf
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41e800
call esi
test eax, eax
jne 0x4a7e17
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7bcb
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x30]
fnclex
cmp eax, ebx
jge 0x4a7bea
push 0x30
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a7c03
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push esi
call dword [edi + 0x5c]
fnclex
cmp eax, ebx
jge 0x4a7c38
push 0x5c
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a7c83
cmp word [ecx], 1
jne 0x4a7c83
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a7c7a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
jmp 0x4a7c8c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x41ab90
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7cd7
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x54]
fnclex
cmp eax, ebx
jge 0x4a7cfb
push 0x54
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov edx, 0x80020004
mov dword [ebp - 0xc4], edx
mov ecx, 0xa
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xac], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x9c], 8
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [edx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a7d7e
push 0x20
push 0x416064
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a7def
cmp word [ecx], 1
jne 0x4a7def
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a7de6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a7df8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x4a7c4a
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f8b4
call esi
test eax, eax
jne 0x4a809e
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7e46
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x64]
fnclex
cmp eax, ebx
jge 0x4a7e65
push 0x64
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a7e7e
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x416a68
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
push esi
call dword [edi + 0x90]
fnclex
cmp eax, ebx
jge 0x4a7eb9
push 0x90
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0x78]
cmp ecx, ebx
je 0x4a7f04
cmp word [ecx], 1
jne 0x4a7f04
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a7efb
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
lea eax, [esi*4]
jmp 0x4a7f0d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x78]
push 0x41ab90
mov ecx, dword [ecx + 0xc]
add ecx, eax
push ecx
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
lea edx, [ebp - 0x78]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x7c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a7f58
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x88]
fnclex
cmp eax, ebx
jge 0x4a7f82
push 0x88
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov edx, 0x80020004
mov dword [ebp - 0xc4], edx
mov ecx, 0xa
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xb4], edx
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xac], ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x9c], 8
mov edx, dword [eax]
lea ecx, [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0xbc]
push ecx
lea ecx, [ebp - 0xac]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push eax
call dword [edx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a8005
push 0x20
push 0x416064
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a8076
cmp word [ecx], 1
jne 0x4a8076
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a806d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a807f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
jne 0x4a7ecb
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f8c0
call esi
test eax, eax
jne 0x4a827f
mov eax, dword [ebp - 0x28]
cmp eax, ebx
jne 0x4a80cd
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x98]
fnclex
cmp eax, ebx
jge 0x4a80f2
push 0x98
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a811d
cmp word [ecx], 1
jne 0x4a811d
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a8114
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a8126
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x68]
call edi
mov ecx, dword [ebp - 0x68]
push ecx
push 0x416e6c
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
test eax, eax
mov eax, dword [ebp - 0x28]
jne 0x4a8193
cmp eax, ebx
jne 0x4a8166
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0xa0]
fnclex
cmp eax, ebx
jge 0x4a6de8
push 0xa0
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x4a6de8
cmp eax, ebx
jne 0x4a81a9
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0xa0]
fnclex
cmp eax, ebx
jge 0x4a81ce
push 0xa0
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a81e7
lea edx, [ebp - 0x28]
push edx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push 0x417f88
lea eax, [ebp - 0x68]
push eax
call fcn.0045d1e0
mov edx, eax
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [edi + 0xa8]
fnclex
cmp eax, ebx
jge 0x4a8222
push 0xa8
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a8244
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
push eax
push esi
call dword [edi + 0xb0]
fnclex
cmp eax, ebx
jge 0x4a6de2
push 0xb0
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
jmp 0x4a6de2
mov eax, dword [ebp - 0x138]
push eax
push 0x41ad6c
call esi
test eax, eax
jne 0x4a829d
mov dword [ebp - 0x64], 0xffffffff
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41f8cc
call esi
test eax, eax
je 0x4a850b
mov edx, dword [ebp - 0x138]
push edx
push 0x41f728
call esi
test eax, eax
je 0x4a850b
mov eax, dword [ebp - 0x138]
push eax
push 0x41f970
call esi
test eax, eax
jne 0x4a83d3
cmp word [ebp - 0x40], bx
je 0x4a83c7
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea ecx, [ebp - 0x88]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov eax, 0xa
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xe4], 0x41f97c
mov dword [ebp - 0xec], 8
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dword [ebp - 0x94], 0x80020004
mov dword [ebp - 0x9c], 0xa
mov edx, dword [esi]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 1
push esi
call dword [edx + 0x44]
fnclex
cmp eax, ebx
jge 0x4a8394
push 0x44
push 0x4181c4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 0x30], 0xffffffff
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41fa10
call esi
test eax, eax
je 0x4a85ff
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41fa1c
call esi
test eax, eax
jne 0x4a8448
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a8426
cmp word [ecx], 1
jne 0x4a8426
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a841d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a842f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x70]
call edi
jmp 0x4a6de8
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41fa24
call esi
test eax, eax
je 0x4a8801
mov edx, dword [ebp - 0x138]
push edx
push 0x41fa2c
call esi
test eax, eax
jne 0x4a84c4
mov dword [ebp - 0x3c], 0xffffffff
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a84a2
cmp word [ecx], 1
jne 0x4a84a2
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a8499
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a84ab
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x4c]
call edi
jmp 0x4a6de8
mov eax, dword [ebp - 0x138]
push eax
push 0x41fa34
call esi
test eax, eax
je 0x4a8943
mov ecx, dword [ebp - 0x138]
push ecx
push 0x41fa44
call esi
test eax, eax
je 0x4a8943
mov edx, dword [ebp - 0x138]
push edx
push 0x41fa50
call esi
test eax, eax
je 0x4a8943
jmp 0x4a6de8
cmp word [ebp - 0x30], bx
je 0x4a85f3
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov eax, 0xa
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xe4], 0x41f8dc
mov dword [ebp - 0xec], 8
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov dword [ebp - 0x94], 0x80020004
mov dword [ebp - 0x9c], 0xa
mov ecx, dword [esi]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x9c]
push eax
push 1
push esi
call dword [ecx + 0x44]
fnclex
cmp eax, ebx
jge 0x4a85c0
push 0x44
push 0x4181c4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 0x40], 0xffffffff
jmp 0x4a6de8
mov dword [ebp - 0x20], 0xffffffff
cmp word [ebp - 0x20], bx
je 0x4a86b9
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
fnclex
cmp eax, ebx
jge 0x4a8631
push 0x2c
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x110]
push edx
push eax
call dword [ecx + 0x90]
fnclex
cmp eax, ebx
jge 0x4a865f
push 0x90
push 0x416cb8
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x110], bx
je 0x4a8690
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
push ebx
push eax
call dword [edx + 0x94]
fnclex
cmp eax, ebx
jge 0x4a8690
push 0x94
push 0x416cb8
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [edx + 0x94]
fnclex
cmp eax, ebx
jge 0x4a86b9
push 0x94
push 0x416cb8
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x30], bx
jne 0x4a86c5
cmp word [ebp - 0x40], bx
je 0x4a8724
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [edx + 0x90]
fnclex
cmp eax, ebx
jge 0x4a86f3
push 0x90
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x110], bx
je 0x4a8724
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x94]
fnclex
cmp eax, ebx
jge 0x4a8724
push 0x94
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x4c]
push eax
push 0x416e6c
call esi
test eax, eax
je 0x4a8d00
push 1
push 0xffffffffffffffff
push 1
push 0x416e6c
push 0x41eaf4
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x4c]
call edi
mov edx, dword [ebp - 0x70]
push edx
push 0x416e6c
call esi
test eax, eax
jne 0x4a89e6
cmp dword [0x4b002c], ebx
jne 0x4a8783
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov eax, dword [esi]
lea ecx, [ebp - 0x88]
push ecx
push esi
call dword [eax + 0x14]
fnclex
cmp eax, ebx
jge 0x4a87ab
push 0x14
push 0x4160ac
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x7c]
push ecx
push eax
call dword [edx + 0x50]
fnclex
cmp eax, ebx
jge 0x4a87d2
push 0x50
push 0x4160cc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x416714
mov edx, dword [ebp - 0x7c]
push edx
call fcn.00464a60
mov edx, eax
lea ecx, [ebp - 0x70]
call edi
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
jmp 0x4a8a07
mov ecx, dword [ebp - 0x5c]
cmp ecx, ebx
je 0x4a882c
cmp word [ecx], 1
jne 0x4a882c
movsx esi, word [ebp - 0x24]
sub esi, dword [ecx + 0x14]
cmp esi, dword [ecx + 0x10]
jb 0x4a8823
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
lea eax, [esi*4]
jmp 0x4a8835
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x68]
call edi
lea eax, [ebp - 0x68]
mov dword [ebp - 0xd4], eax
mov ecx, 0x4008
mov dword [ebp - 0xdc], ecx
or edx, 0xffffffff
mov dword [ebp - 0xe4], edx
mov esi, 0xb
mov dword [ebp - 0xec], esi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0xd0]
mov dword [edi + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov eax, dword [ebp - 0xe8]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xe0]
mov dword [ecx + 0xc], edx
push 2
push 0x6003000e
mov eax, dword [0x4ae0b4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c0]
push eax
lea edx, [ebp - 0x88]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCall]
add esp, 0x2c
lea ecx, [ebp - 0x88]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
mov eax, 2
mov dword [ebp - 0xd4], eax
mov ecx, eax
mov dword [ebp - 0xdc], ecx
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0xd8]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0xd0]
mov dword [edx + 0xc], eax
push 4
mov eax, dword [0x4ae0b4]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3bc]
push eax
lea edx, [ebp - 0x88]
push edx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x88]
call esi
jmp 0x4a68ad
cmp dword [0x4ae0fc], ebx
jne 0x4a895b
push 0x4ae0fc
push 0x4061a0
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4ae0fc]
mov eax, 0x80020004
mov dword [ebp - 0xe4], eax
mov ecx, 0xa
mov dword [ebp - 0xec], ecx
mov edx, eax
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0xdc], ecx
mov edi, dword [esi]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xe8]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0xdc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xd8]
mov dword [ecx + 4], eax
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0xd0]
mov dword [ecx + 0xc], edx
push esi
call dword [edi + 0x2b0]
fnclex
test eax, eax
jge 0x4a918b
push 0x2b0
push 0x417464
push esi
jmp 0x4a693a
push 1
push 0xffffffffffffffff
push 1
push 0x416e6c
push 0x41eaf4
mov eax, dword [ebp - 0x70]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x70]
call edi
mov ecx, dword [ebp - 0x70]
push ecx
call fcn.004a2d30
push eax
lea edx, [ebp - 0x38]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov eax, dword [ebp - 0x38]
push eax
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x140]
push edx
push 0x41dac0
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
cmp eax, ebx
je 0x4a8bf4
mov eax, dword [ebp - 0x44]
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
push eax
call dword [ecx + 0x1c]
fnclex
cmp eax, ebx
jge 0x4a8a62
push 0x1c
push 0x41dac0
mov ecx, dword [ebp - 0x44]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x7c]
push edx
mov eax, dword [ebp - 0x4c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrTextCmp]
mov esi, eax
neg esi
sbb esi, esi
inc esi
neg esi
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp si, bx
jne 0x4a8a9f
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x140]
push edx
push 0x41dac0
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
jmp 0x4a8a35
cmp word [ebp - 0x3c], bx
je 0x4a8b7f
push 0x4065dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
cmp dword [0x4b002c], ebx
jne 0x4a8ad7
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov ecx, dword [esi]
lea edx, [ebp - 0x88]
push edx
push esi
call dword [ecx + 0x14]
fnclex
cmp eax, ebx
jge 0x4a8aff
push 0x14
push 0x4160ac
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, ebx
jge 0x4a8b26
push 0x50
push 0x4160cc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x6c]
mov esi, dword [eax]
push 0x416700
mov ecx, dword [ebp - 0x7c]
push ecx
call fcn.00464a60
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
push eax
mov edx, dword [ebp - 0x6c]
push edx
call dword [esi + 0x28]
fnclex
cmp eax, ebx
jge 0x4a8b60
push 0x28
push 0x4161c8
mov ecx, dword [ebp - 0x6c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov ecx, dword [ebp - 0x44]
mov esi, dword [ecx]
push ebx
mov edx, dword [ebp - 0x6c]
push edx
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov eax, dword [ebp - 0x44]
push eax
call dword [esi + 0xb4]
fnclex
cmp eax, ebx
jge 0x4a8bce
push 0xb4
push 0x41dac0
mov ecx, dword [ebp - 0x44]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x140]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaExitEachColl]
push ebx
mov edx, dword [ebp - 0x44]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjIs]
test ax, ax
je 0x4a8e5e
call dword [sym.imp.MSVBVM60.DLL_rtcErrObj]
push eax
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov eax, 0xa
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], eax
push 0x419374
mov ecx, dword [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
push eax
push 0x41fa58
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
mov dword [ebp - 0x94], 0x80020004
mov dword [ebp - 0x9c], 0xa
mov edx, dword [esi]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x9c]
push ecx
push 1
push esi
call dword [edx + 0x44]
fnclex
cmp eax, ebx
jge 0x4a8cbf
push 0x44
push 0x4181c4
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x7c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x4a8e5e
cmp word [ebp - 0x3c], bx
je 0x4a8de0
push 0x4065dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x6c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
cmp dword [0x4b002c], ebx
jne 0x4a8d38
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov ecx, dword [esi]
lea edx, [ebp - 0x88]
push edx
push esi
call dword [ecx + 0x14]
fnclex
cmp eax, ebx
jge 0x4a8d60
push 0x14
push 0x4160ac
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, ebx
jge 0x4a8d87
push 0x50
push 0x4160cc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x6c]
mov esi, dword [eax]
push 0x416700
mov ecx, dword [ebp - 0x7c]
push ecx
call fcn.00464a60
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
push eax
mov edx, dword [ebp - 0x6c]
push edx
call dword [esi + 0x28]
fnclex
cmp eax, ebx
jge 0x4a8dc1
push 0x28
push 0x4161c8
mov ecx, dword [ebp - 0x6c]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x7c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov esi, dword [ebp - 0x28]
cmp esi, ebx
jne 0x4a8df9
lea ecx, [ebp - 0x28]
push ecx
push 0x407e9c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov edi, dword [esi]
push ebx
mov edx, dword [ebp - 0x6c]
push edx
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov ecx, dword [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
push esi
call dword [edi + 0xb4]
fnclex
cmp eax, ebx
jge 0x4a8e3f
push 0xb4
push 0x41dac0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x88]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
cmp word [ebp - 0x40], bx
je 0x4a8ef8
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [edx + 0x90]
fnclex
cmp eax, ebx
jge 0x4a8e9a
push 0x90
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call esi
jmp 0x4a8ea0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x110], bx
jne 0x4a8efe
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push 0xffffffffffffffff
push eax
call dword [ecx + 0x94]
fnclex
cmp eax, ebx
jge 0x4a8ece
push 0x94
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call esi
cmp word [ebp - 0x58], bx
je 0x4a8efe
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push 0x416e6c
push eax
call dword [ecx + 0x20]
fnclex
cmp eax, ebx
jge 0x4a8efe
push 0x20
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call esi
jmp 0x4a8efe
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x54], bx
je 0x4a8f22
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x3c]
fnclex
cmp eax, ebx
jge 0x4a8f22
push 0x3c
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call esi
cmp word [ebp - 0x48], bx
je 0x4a8f47
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x3c]
fnclex
cmp eax, ebx
jge 0x4a8f47
push 0x3c
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call esi
cmp word [ebp - 0x50], bx
je 0x4a8f6b
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x38]
fnclex
cmp eax, ebx
jge 0x4a8f6b
push 0x38
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call esi
cmp word [ebp - 0x34], bx
je 0x4a8f90
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x38]
fnclex
cmp eax, ebx
jge 0x4a8f90
push 0x38
push 0x416cb8
mov edx, dword [ebp - 0x2c]
push edx
push eax
call esi
cmp word [ebp - 0x64], bx
jne 0x4a918b
cmp dword [0x4b002c], ebx
jne 0x4a8fb2
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov eax, dword [esi]
lea ecx, [ebp - 0x88]
push ecx
push esi
call dword [eax + 0x14]
fnclex
cmp eax, ebx
jge 0x4a8fda
push 0x14
push 0x4160ac
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x7c]
push ecx
push eax
call dword [edx + 0x60]
fnclex
cmp eax, ebx
jge 0x4a9001
push 0x60
push 0x4160cc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [0x4b002c], ebx
jne 0x4a9019
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov edx, dword [esi]
lea eax, [ebp - 0x8c]
push eax
push esi
call dword [edx + 0x14]
fnclex
cmp eax, ebx
jge 0x4a9041
push 0x14
push 0x4160ac
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x110]
push edx
push eax
call dword [ecx + pe_nt_image_headers32]
fnclex
cmp eax, ebx
jge 0x4a9071
push pe_nt_image_headers32
push 0x4160cc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, 0x80020004
mov dword [ebp - 0xc4], ecx
mov eax, 0xa
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x7c]
push eax
push 0x4160e0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call esi
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
push eax
mov ecx, dword [ebp - 0x110]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x84]
call edi
push eax
call esi
mov dword [ebp - 0xa4], eax
mov eax, 8
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xd4], 0x41faa4
mov dword [ebp - 0xdc], eax
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
push 0x40
lea edx, [ebp - 0x9c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x7c]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x88]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x9c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x4a9264
jmp 0x4a91f8
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x4a9264
jmp 0x4a91f8
lea ecx, [ebp - 0x138]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call edi
lea ecx, [ebp - 0x140]
push ecx
lea edx, [ebp - 0x13c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x28]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x38]
call esi
lea ecx, [ebp - 0x44]
call esi
lea ecx, [ebp - 0x4c]
call edi
lea eax, [ebp - 0x5c]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x60]
call edi
lea ecx, [ebp - 0x68]
call edi
lea ecx, [ebp - 0x6c]
call esi
lea ecx, [ebp - 0x70]
call edi
lea ecx, [ebp - 0x74]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0x14
push 0x403c56
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x98
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x403af0
mov eax, dword [ebp + 8]
mov ecx, eax
and ecx, 1
mov dword [ebp - 0xc], ecx
and eax, 0xfffffffe
mov dword [ebp + 8], eax
xor ebx, ebx
mov dword [ebp - 8], ebx
mov edx, dword [eax]
push eax
call dword [edx + 4]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x7c], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
cmp dword [0x4b002c], ebx
jne 0x4a930c
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov eax, dword [esi]
lea ecx, [ebp - 0x34]
push ecx
push esi
call dword [eax + 0x14]
fnclex
cmp eax, ebx
jge 0x4a9335
push 0x14
push 0x4160ac
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4a933b
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x28]
push ecx
push eax
call dword [edx + 0x60]
fnclex
cmp eax, ebx
jge 0x4a935b
push 0x60
push 0x4160cc
push esi
push eax
call edi
cmp dword [0x4b002c], ebx
jne 0x4a9373
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4b002c]
mov edx, dword [esi]
lea eax, [ebp - 0x38]
push eax
push esi
call dword [edx + 0x14]
fnclex
cmp eax, ebx
jge 0x4a9394
push 0x14
push 0x4160ac
push esi
push eax
call edi
mov eax, dword [ebp - 0x38]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x7c]
push edx
push eax
call dword [ecx + pe_nt_image_headers32]
fnclex
cmp eax, ebx
jge 0x4a93ba
push pe_nt_image_headers32
push 0x4160cc
push esi
push eax
call edi
mov eax, dword [ebp - 0x28]
push eax
push 0x4160e0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x2c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call esi
push eax
mov ecx, dword [ebp - 0x7c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x34]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x1c
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4a943c
push 0x50
push 0x417464
mov ecx, dword [ebp + 8]
push ecx
push eax
call edi
mov edx, dword [ebp + 8]
mov edi, dword [edx]
mov eax, dword [ebp - 0x28]
push eax
push 0x41fb14
call ebx
mov edx, eax
lea ecx, [ebp - 0x2c]
call esi
push eax
mov ecx, dword [ebp - 0x24]
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
push eax
mov edx, edi
mov edi, dword [ebp + 8]
push edi
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4a9480
push 0x54
push 0x417464
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x28]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov eax, dword [0x4b002c]
test eax, eax
jne 0x4a94b0
push 0x4b002c
push 0x4160bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4b002c]
mov dword [ebp - 0x80], eax
mov ecx, dword [eax]
lea edx, [ebp - 0x34]
push edx
push eax
call dword [ecx + 0x14]
fnclex
test eax, eax
jge 0x4a94da
push 0x14
push 0x4160ac
mov ecx, dword [ebp - 0x80]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x88], eax
mov edx, dword [eax]
lea ecx, [ebp - 0x28]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4a9508
push 0x50
push 0x4160cc
mov edx, dword [ebp - 0x88]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x41fb20
mov eax, dword [ebp - 0x28]
push eax
call fcn.00464a60
mov edx, eax
lea ecx, [ebp - 0x30]
call esi
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x30], 0
push 0xffffffffffffffff
push 0
push 0
lea ecx, [ebp - 0x20]
push ecx
lea ecx, [ebp - 0x2c]
call esi
push eax
call fcn.00465420
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edx, dword [edi]
push edi
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
mov ecx, dword [ebp - 0x24]
push ecx
push 0x4167ec
call ebx
mov edx, eax
lea ecx, [ebp - 0x28]
call esi
push eax
push 0x4167ec
call ebx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 8
lea edx, [ebp - 0x20]
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x78], 0x6011
push 0
push 0x40
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x48]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcStrConvVar2]
mov esi, dword [edi]
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x2c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push edi
call dword [esi + 0xa4]
fnclex
test eax, eax
jge 0x4a95f4
push 0xa4
push 0x417f74
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x28]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
jmp 0x4a962e
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
push 0x4a968d
jmp 0x4a9677
lea ecx, [ebp - 0x20]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret