Function at 0x4b96b0
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402526
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x298
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x4024c8
xor edi, edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x9c], edi
mov dword [ebp - 0xac], edi
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xdc], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xfc], edi
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x12c], edi
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x14c], edi
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x16c], edi
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x18c], edi
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x1ac], edi
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1cc], edi
mov dword [ebp - 0x1dc], edi
mov dword [ebp - 0x1ec], edi
mov dword [ebp - 0x1fc], edi
mov dword [ebp - 0x20c], edi
mov dword [ebp - 0x210], edi
mov dword [ebp - 0x214], edi
mov dword [ebp - 0x21c], edi
mov dword [ebp - 0x218], edi
mov dword [ebp - 0x224], edi
mov dword [ebp - 0x220], edi
mov dword [ebp - 0x280], edi
mov dword [ebp - 0x284], edi
mov dword [ebp - 0x288], edi
mov dword [ebp - 0x28c], edi
mov dword [ebp - 0x290], edi
mov eax, dword [0x4c1038]
push eax
push 0x4181dc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x4bebd8
mov edx, 0x40e53c
lea ecx, [ebp - 0x24]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call esi
mov edx, 0x40e53c
lea ecx, [ebp - 0x70]
call esi
mov edx, 0x40e53c
lea ecx, [ebp - 0x5c]
call esi
mov edx, 0x40e53c
lea ecx, [ebp - 0x6c]
call esi
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
cmp dword [ebp - 0x44], edi
jne 0x4b9876
lea ecx, [ebp - 0x44]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edx, dword [ebp - 0x44]
push edx
lea eax, [ebp - 0x280]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push 0x422330
push 0x422414
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call esi
push eax
push 0x4224a4
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [0x4c1024], edi
jne 0x4b98ee
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [0x4c1024]
mov dword [ebp - 0x174], ecx
mov eax, 9
mov dword [ebp - 0x17c], eax
mov edx, dword [ebp - 0x280]
mov ecx, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], eax
mov eax, dword [ebp - 0x178]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x174]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edx + 0xc], eax
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x38]
mov dword [edx], eax
mov eax, dword [ebp - 0x34]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [edx + 0xc], eax
mov edx, dword [ebp - 0x280]
push edx
call dword [ecx + 0xa0]
fnclex
cmp eax, edi
jge 0x4b997c
push 0xa0
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
cmp eax, edi
jge 0x4b99aa
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], di
jne 0x4b9c1e
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4b99e5
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
jne 0x4b9c1e
push 0x4225b0
push 0x422634
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4b9a3a
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov ecx, 0x422698
mov dword [ebp - 0x174], ecx
mov edx, 8
mov dword [ebp - 0x17c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4b9a9d
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4b9ac7
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xbc]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4b9b32
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4c1024]
mov dword [ebp - 0xa4], 0x80020004
mov dword [ebp - 0xac], 0xa
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov ebx, dword [edi]
lea ecx, [ebp - 0x80]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push edi
call dword [ebx + 0x40]
fnclex
test eax, eax
jge 0x4b9b93
push 0x40
push 0x40e3e0
push edi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4b9b99
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
push eax
call dword [edx + 0x90]
fnclex
test eax, eax
jge 0x4b9be0
push 0x90
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4b9c0a
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call edi
cmp word [ebp - 0x210], 0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
je 0x4b99b7
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4b9c4f
push 0x80
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4b9c55
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x4226ac
push 0x422798
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x42281c
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4b9cc8
push 0xdc
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
cmp dword [ebp - 0x214], 1
jne 0x4b9cfa
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
fnclex
test eax, eax
jge 0x4b9cfa
push 0x80
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4b9d13
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov ecx, 9
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x280]
mov edx, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edi + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [edx + 0xa0]
fnclex
test eax, eax
jge 0x4b9d9e
push 0xa0
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4b9da4
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4b9dce
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4bb67f
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4b9e06
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4bb67f
push 0x4154cc
push 0x42286c
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x41510c
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x415308
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4b9e75
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x41343c
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4b9edd
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4b9f07
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x40e528
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4b9fb0
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4b9fda
push 0xdc
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0x214], 1
jne 0x4ba01f
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4b9ffc
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4ba01f
push 0x80
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4ba035
lea edx, [ebp - 0x20]
push edx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [ebp - 0x20]
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4ba051
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov eax, 9
mov dword [ebp - 0x17c], eax
mov ecx, dword [edi]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], eax
mov eax, dword [ebp - 0x178]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x174]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edx + 0xc], eax
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x38]
mov dword [edx], eax
mov eax, dword [ebp - 0x34]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [edx + 0xc], eax
push edi
call dword [ecx + 0xa0]
fnclex
test eax, eax
jge 0x4ba0cc
push 0xa0
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x422920
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x41688c
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4ba13d
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x422938
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4ba1a5
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4ba1cf
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x40ef04
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov edx, dword [ebp - 0x5c]
push edx
push 0x42294c
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4ba29f
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x411a34
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4ba307
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4ba331
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x40ef04
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov edx, dword [ebp - 0x5c]
push edx
push 0x422768
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4ba3ef
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4ba410
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x174], 0x41343c
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4ba478
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x230]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4ba4a2
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x42278c
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4ba4cf
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4ba4f3
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x194], 0x4136f0
mov ecx, 8
mov dword [ebp - 0x19c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x8c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x198]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x194]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x190]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4ba55e
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x248]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xec]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4ba588
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1a4], 0x413878
mov eax, 8
mov dword [ebp - 0x1ac], eax
mov ecx, 0x40ef04
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1cc], eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xfc]
push eax
call edi
push eax
lea ecx, [ebp - 0x1ac]
push ecx
lea edx, [ebp - 0x10c]
push edx
call edi
push eax
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call edi
push eax
lea edx, [ebp - 0x1cc]
push edx
lea eax, [ebp - 0x12c]
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x3c
mov edx, dword [ebp - 0x5c]
push edx
push 0x422978
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
call edi
add esp, 0xc
mov edx, dword [ebp - 0x5c]
push edx
push 0x40f73c
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call edi
add esp, 0xc
mov edx, dword [ebp - 0x5c]
push edx
push 0x414c90
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call edi
add esp, 0xc
mov edx, dword [ebp - 0x5c]
push edx
push 0x4132f4
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call edi
add esp, 0xc
mov dword [ebp - 0x184], 0x422aa4
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4ba7e6
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x422938
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4ba84e
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4ba878
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x194], 0x413854
mov dword [ebp - 0x19c], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4ba8ba
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x1a4], 0x411a34
mov ecx, 8
mov dword [ebp - 0x1ac], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x8c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x1a8]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x1a4]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4ba925
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x240]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xdc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4ba94f
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1b4], 0x413878
mov eax, 8
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], 0x422768
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4ba98d
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x90]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4ba9b1
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x1d4], 0x41343c
mov ecx, 8
mov dword [ebp - 0x1dc], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x94]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x1d8]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x1d4]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x1d0]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4baa1c
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x258]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x94]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4baa46
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1e4], 0x42278c
mov dword [ebp - 0x1ec], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4baa73
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4baa97
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x270], eax
mov ecx, 8
mov edx, dword [eax]
lea edi, [ebp - 0x9c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x1f8]
mov dword [edi + 4], ecx
mov ecx, 0x4136f0
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x1f0]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4baaf1
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x270]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x9c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x14c]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bab1b
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x204], 0x413878
mov dword [ebp - 0x20c], 8
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call edi
push eax
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xec]
push eax
call edi
push eax
lea ecx, [ebp - 0x1bc]
push ecx
lea edx, [ebp - 0xfc]
push edx
call edi
push eax
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call edi
push eax
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x12c]
push eax
call edi
push eax
lea ecx, [ebp - 0x1ec]
push ecx
lea edx, [ebp - 0x13c]
push edx
call edi
push eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call edi
push eax
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x16c]
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 0xd
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x5c
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bac9e
lea ecx, [ebp - 0x20]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x228], eax
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4baccc
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x228]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
jne 0x4bb3cf
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bacf3
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bad14
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x174], 0x416498
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bad7c
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x230]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bada6
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x412b40
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4badd3
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4badf7
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x194], 0x413804
mov ecx, 8
mov dword [ebp - 0x19c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x8c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x198]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x194]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x190]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bae62
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x248]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bae8c
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x18c]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4baf29
lea ecx, [ebp - 0x20]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x90]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4baf4d
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x1a4], 0x422af8
mov ecx, 8
mov dword [ebp - 0x1ac], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x94]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x1a8]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x1a4]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bafb8
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x230]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 9
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcIsNull]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bb004
lea ecx, [ebp - 0x20]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4bb025
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x174], 0x413128
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bb08d
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x240]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bb0b7
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x412b40
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bb0e4
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bb108
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x194], 0x413100
mov ecx, 8
mov dword [ebp - 0x19c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x8c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x198]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x194]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x190]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bb173
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x258]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bb19d
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1c4], 0x412b40
mov dword [ebp - 0x1cc], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bb1ca
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bb1ee
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x1b4], 0x422af8
mov ecx, 8
mov dword [ebp - 0x1bc], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x9c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x1b8]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x1b4]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x1b0]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bb259
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x270]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x9c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xfc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bb283
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1e4], 0x40e53c
mov dword [ebp - 0x1ec], 8
lea edx, [ebp - 0x1ec]
lea ecx, [ebp - 0x11c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x210]
mov word [ebp - 0x1d4], ax
mov dword [ebp - 0x1dc], 0xb
lea ecx, [ebp - 0x1cc]
push ecx
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x10c]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x1dc]
push edx
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcImmediateIf]
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0xbc]
push eax
call edi
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xdc]
push edx
call edi
push eax
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x1dc]
push edx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
push 0xb
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x50
mov edx, dword [ebp - 0x70]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
cmp eax, 2
jle 0x4bb610
mov dword [ebp - 0x210], 0
mov edx, 0x40e53c
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x74]
push ecx
lea edx, [ebp - 0x40]
push edx
call fcn.004b8760
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
push 0x422b24
push 0x422bb8
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bb46a
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x411a34
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x178]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bb4d2
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bb4fc
push 0x34
push 0x40e438
push ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x40e528
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xbc]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bb58f
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4c1024]
mov dword [ebp - 0xa4], 0x80020004
mov dword [ebp - 0xac], 0xa
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov ebx, dword [edi]
lea ecx, [ebp - 0x80]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push edi
call dword [ebx + 0x40]
fnclex
test eax, eax
jge 0x4bb5ec
push 0x40
push 0x40e3e0
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
push eax
call dword [edx + 0x90]
fnclex
test eax, eax
jge 0x4bb63d
push 0x90
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4bb66b
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
je 0x4b9ddc
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4bb6a8
push 0x80
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call edi
push 0x422be4
push 0x422cdc
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x42281c
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4bb71b
push 0xdc
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
cmp dword [ebp - 0x214], 1
jne 0x4bb74d
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
fnclex
test eax, eax
jge 0x4bb74d
push 0x80
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bb766
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov ecx, 9
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x280]
mov edx, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edi + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x280]
push ecx
call dword [edx + 0xa0]
fnclex
test eax, eax
jge 0x4bb7ed
push 0xa0
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4bb81b
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
jne 0x4bd4c0
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4bb857
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
jne 0x4bd4c0
push 0x422d58
push 0x422de0
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x41510c
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x415308
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bb8ca
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x41343c
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bb932
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bb95c
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x40e528
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bba05
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4bba2f
push 0xdc
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0x214], 1
jne 0x4bba74
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bba51
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4bba74
push 0x80
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bba8a
lea edx, [ebp - 0x20]
push edx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [ebp - 0x20]
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bbaa6
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov eax, 9
mov dword [ebp - 0x17c], eax
mov ecx, dword [edi]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], eax
mov eax, dword [ebp - 0x178]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x174]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edx + 0xc], eax
sub esp, 0x10
mov edx, esp
mov eax, dword [ebp - 0x38]
mov dword [edx], eax
mov eax, dword [ebp - 0x34]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [edx + 0xc], eax
push edi
call dword [ecx + 0xa0]
fnclex
test eax, eax
jge 0x4bbb21
push 0xa0
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x41666c
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ecx, dword [ebp - 0x5c]
push ecx
push 0x41688c
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4bbb92
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x422938
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bbbfa
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bbc24
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov edx, dword [ebp - 0x5c]
push edx
push 0x42294c
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bbcc6
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x411a34
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bbd2e
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bbd58
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x40ef04
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov edx, dword [ebp - 0x5c]
push edx
push 0x422768
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bbe16
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bbe37
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x174], 0x41343c
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bbe9f
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x230]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bbec9
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x184], 0x42278c
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bbef6
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bbf1a
push 0x54
push 0x40e35c
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x194], 0x4136f0
mov ecx, 8
mov dword [ebp - 0x19c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x8c]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x198]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x194]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x190]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bbf85
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x248]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xec]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bbfaf
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x1a4], 0x413878
mov eax, 8
mov dword [ebp - 0x1ac], eax
mov ecx, 0x40ef04
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x1cc], eax
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xfc]
push eax
call edi
push eax
lea ecx, [ebp - 0x1ac]
push ecx
lea edx, [ebp - 0x10c]
push edx
call edi
push eax
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x11c]
push ecx
call edi
push eax
lea edx, [ebp - 0x1cc]
push edx
lea eax, [ebp - 0x12c]
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x8c]
push ecx
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x3c
mov edx, dword [ebp - 0x5c]
push edx
push 0x422eb8
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov edx, dword [ebp - 0x5c]
push edx
push 0x422f78
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bc164
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x412084
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bc1cc
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc1f6
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor eax, eax
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x220], eax
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Var]
fstp qword [ebp - 0x21c]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x21c]
push eax
call 0x4bed50
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x1c
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x5c]
push eax
push 0x4230a4
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bc2e8
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x412084
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bc350
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc37a
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0x3ff00000
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Var]
fstp qword [ebp - 0x21c]
mov ecx, dword [ebp - 0x5c]
push ecx
lea edx, [ebp - 0x224]
push edx
lea eax, [ebp - 0x21c]
push eax
call 0x4bed50
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x1c
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x5c]
push eax
push 0x4132dc
call ebx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bc463
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x4120d0
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bc4cb
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc4f5
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, 0x40ef04
mov dword [ebp - 0x184], eax
mov ecx, 8
mov dword [ebp - 0x18c], ecx
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x19c], ecx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
push eax
lea edx, [ebp - 0x19c]
push edx
lea eax, [ebp - 0xec]
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
mov edx, dword [ebp - 0x5c]
push edx
push 0x40f73c
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
call edi
add esp, 0xc
mov edx, dword [ebp - 0x5c]
push edx
push 0x414c90
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call edi
add esp, 0xc
mov edx, dword [ebp - 0x5c]
push edx
push 0x4132f4
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
push eax
push 0x40ef04
call ebx
mov edx, eax
lea ecx, [ebp - 0x5c]
call esi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call edi
add esp, 0xc
mov dword [ebp - 0x184], 0x4231b0
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4bc6a7
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov ecx, 0x422938
mov dword [ebp - 0x174], ecx
mov edx, 8
mov dword [ebp - 0x17c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4bc70e
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4bc714
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc73a
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x194], 0x413854
mov dword [ebp - 0x19c], 8
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bc778
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x1a4], 0x411a34
mov ecx, 8
mov dword [ebp - 0x1ac], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x8c]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x1a8]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x1a4]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bc7df
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x240]
push edx
push eax
call edi
mov eax, dword [ebp - 0x8c]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xdc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc805
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x1b4], 0x413878
mov eax, 8
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1c4], 0x422768
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bc843
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x90]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bc863
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x1d4], 0x41343c
mov ecx, 8
mov dword [ebp - 0x1dc], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x94]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x1d8]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x1d4]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x1d0]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bc8ca
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x258]
push edx
push eax
call edi
mov eax, dword [ebp - 0x94]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x11c]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc8f0
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x1e4], 0x42278c
mov dword [ebp - 0x1ec], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bc91d
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bc93d
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x270], eax
mov ecx, 0x4136f0
mov edx, 8
mov edi, dword [eax]
lea ebx, [ebp - 0x9c]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x1f8]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x1f0]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4bc99b
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x270]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4bc9a1
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x9c]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x14c]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bc9c7
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x204], 0x413878
mov dword [ebp - 0x20c], 8
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call ebx
push eax
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call ebx
push eax
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xec]
push eax
call ebx
push eax
lea ecx, [ebp - 0x1bc]
push ecx
lea edx, [ebp - 0xfc]
push edx
call ebx
push eax
lea eax, [ebp - 0x1cc]
push eax
lea ecx, [ebp - 0x10c]
push ecx
call ebx
push eax
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x12c]
push eax
call ebx
push eax
lea ecx, [ebp - 0x1ec]
push ecx
lea edx, [ebp - 0x13c]
push edx
call ebx
push eax
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call ebx
push eax
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x16c]
push eax
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x9c]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x16c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
lea edx, [ebp - 0x14c]
push edx
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0x11c]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
lea edx, [ebp - 0xec]
push edx
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 0xd
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x5c
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bcb4a
lea ecx, [ebp - 0x20]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4bcb6a
push 0x50
push 0x40e35c
push ebx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4bd229
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bcb91
lea edx, [ebp - 0x20]
push edx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bcbae
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x174], 0x416498
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x178]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bcc12
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x230]
push edx
push eax
call edi
mov eax, dword [ebp - 0x84]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bcc38
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x184], 0x412b40
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bcc65
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bcc85
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x194], 0x413804
mov ecx, 8
mov dword [ebp - 0x19c], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x8c]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x198]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x194]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x190]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bccec
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x248]
push edx
push eax
call edi
mov eax, dword [ebp - 0x8c]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bcd12
push 0x34
push 0x40e438
push ebx
push eax
call edi
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x18c]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call ebx
push eax
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x28
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bcdaf
lea ecx, [ebp - 0x20]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x90]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4bcdcf
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x1a4], 0x422af8
mov ecx, 8
mov dword [ebp - 0x1ac], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x94]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x1a8]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x1a4]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x1a0]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bce36
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x230]
push edx
push eax
call edi
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x94], 0
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 9
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcIsNull]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bce82
lea ecx, [ebp - 0x20]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4bce9f
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x240], eax
mov dword [ebp - 0x174], 0x413128
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x178]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bcf03
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x240]
push edx
push eax
call edi
mov eax, dword [ebp - 0x84]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bcf29
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x184], 0x412b40
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bcf56
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x88]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bcf76
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x194], 0x413100
mov ecx, 8
mov dword [ebp - 0x19c], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x8c]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x198]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x194]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x190]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bcfdd
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x258]
push edx
push eax
call edi
mov eax, dword [ebp - 0x8c]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bd003
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x1c4], 0x412b40
mov dword [ebp - 0x1cc], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x4bd030
lea eax, [ebp - 0x20]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bd050
push 0x54
push 0x40e35c
push ebx
push eax
call edi
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x1b4], 0x422af8
mov ecx, 8
mov dword [ebp - 0x1bc], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x9c]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x1b8]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x1b4]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x1b0]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bd0b7
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x270]
push edx
push eax
call edi
mov eax, dword [ebp - 0x9c]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xfc]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bd0dd
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x1e4], 0x40e53c
mov dword [ebp - 0x1ec], 8
lea edx, [ebp - 0x1ec]
lea ecx, [ebp - 0x11c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov ax, word [ebp - 0x210]
mov word [ebp - 0x1d4], ax
mov dword [ebp - 0x1dc], 0xb
lea ecx, [ebp - 0x1cc]
push ecx
lea edx, [ebp - 0xfc]
push edx
lea eax, [ebp - 0x10c]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call ebx
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x1dc]
push edx
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcImmediateIf]
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0xbc]
push eax
call ebx
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xdc]
push edx
call ebx
push eax
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x24]
call esi
lea edx, [ebp - 0x9c]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 7
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x12c]
push ecx
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x1dc]
push edx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0xec]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
push 0xb
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x50
mov dword [ebp - 0x210], 0
mov edx, 0x40e53c
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x70]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x40]
push ecx
call fcn.004b8760
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
push 0x4231f4
push 0x422bb8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], 8
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4bd2b1
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call edi
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x411a34
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x178]
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bd315
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call edi
mov eax, dword [ebp - 0x84]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bd33b
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov dword [ebp - 0x184], 0x40e528
mov dword [ebp - 0x18c], 8
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xcc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xdc]
push ecx
call edi
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xbc]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bd3d4
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4c1024]
mov dword [ebp - 0xa4], 0x80020004
mov dword [ebp - 0xac], 0xa
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov ebx, dword [edi]
lea ecx, [ebp - 0x80]
push ecx
push 0xffffffffffffffff
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push edi
call dword [ebx + 0x40]
fnclex
test eax, eax
jge 0x4bd435
push 0x40
push 0x40e3e0
push edi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4bd43b
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
push eax
call dword [edx + 0x90]
fnclex
test eax, eax
jge 0x4bd482
push 0x90
push 0x40e35c
mov ecx, dword [ebp - 0x280]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x280]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4bd4ac
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call edi
cmp word [ebp - 0x210], 0
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
je 0x4bb829
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4bd4ed
push 0x80
push 0x40e35c
mov edx, dword [ebp - 0x280]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
lea eax, [ebp - 0x280]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
call edi
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4bd514
lea ecx, [ebp - 0x44]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edx, dword [ebp - 0x44]
push edx
lea eax, [ebp - 0x284]
push eax
call edi
mov edx, 0x40e53c
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x423280
push 0x42335c
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x4233e4
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bd58b
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov ecx, 9
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x284]
mov edx, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edi + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x284]
push ecx
call dword [edx + 0xa0]
fnclex
test eax, eax
jge 0x4bd616
push 0xa0
push 0x40e35c
mov edx, dword [ebp - 0x284]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4bd61c
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4bd646
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x284]
push ecx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4bd9b6
mov eax, dword [ebp - 0x284]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4bd682
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x284]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
jne 0x4bd84c
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bd6ce
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x284]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x423454
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bd736
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bd760
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x194], 0x412bcc
mov dword [ebp - 0x19c], 8
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
fnclex
test eax, eax
jge 0x4bd810
push 0x90
push 0x40e35c
mov edx, dword [ebp - 0x284]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x284]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4bd83e
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x284]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
je 0x4bd654
mov edx, dword [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x4bed3c
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 3
lea eax, [ebp - 0x54]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea ecx, [ebp - 0xac]
push ecx
push 1
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
push 0x423460
mov ecx, dword [ebp - 0x54]
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x413878
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bd927
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4c1024]
mov dword [ebp - 0x228], edi
mov dword [ebp - 0xa4], 0x80020004
mov dword [ebp - 0xac], 0xa
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov edi, dword [edi]
lea edx, [ebp - 0x80]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
mov eax, edi
mov edi, dword [ebp - 0x228]
push edi
call dword [eax + 0x40]
fnclex
test eax, eax
jge 0x4bd992
push 0x40
push 0x40e3e0
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
lea ecx, [ebp - 0x284]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4bd9db
lea edx, [ebp - 0x44]
push edx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x44]
push eax
lea ecx, [ebp - 0x288]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov edx, 0x40e53c
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x423568
push 0x422fe0
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x423654
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
lea ecx, [ebp - 0x214]
push ecx
push eax
call dword [edx + 0xdc]
fnclex
test eax, eax
jge 0x4bda6d
push 0xdc
push 0x40e35c
mov edx, dword [ebp - 0x288]
push edx
push eax
call edi
cmp dword [ebp - 0x214], 1
jne 0x4bda9f
mov eax, dword [ebp - 0x288]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4bda9f
push 0x80
push 0x40e35c
mov edx, dword [ebp - 0x288]
push edx
push eax
call edi
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bdab8
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov ecx, 9
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x288]
mov edx, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [edi + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x288]
push ecx
call dword [edx + 0xa0]
fnclex
test eax, eax
jge 0x4bdb43
push 0xa0
push 0x40e35c
mov edx, dword [ebp - 0x288]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4bdb49
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x288]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4bdb73
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x288]
push ecx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4bded5
mov eax, dword [ebp - 0x288]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4bdbaf
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x288]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
jne 0x4bdd79
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x288]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4bdbfb
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x288]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x174], 0x423454
mov ecx, 8
mov dword [ebp - 0x17c], ecx
mov edx, dword [eax]
lea edi, [ebp - 0x84]
push edi
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x178]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x174]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [edi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x4bdc63
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4bdc8d
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x194], 0x412bcc
mov dword [ebp - 0x19c], 8
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0xac]
push ecx
lea edx, [ebp - 0xbc]
push edx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea eax, [ebp - 0x19c]
push eax
lea ecx, [ebp - 0xcc]
push ecx
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x80]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x288]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
fnclex
test eax, eax
jge 0x4bdd3d
push 0x90
push 0x40e35c
mov edx, dword [ebp - 0x288]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x288]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4bdd6b
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x288]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0x210], 0
je 0x4bdb81
mov edx, dword [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
jo 0x4bed3c
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 3
lea eax, [ebp - 0x54]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], 0x4008
lea ecx, [ebp - 0xac]
push ecx
push 1
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0xbc]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x54]
call esi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
push 0x423460
mov ecx, dword [ebp - 0x54]
push ecx
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
call esi
push eax
push 0x413878
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bde54
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4c1024]
mov dword [ebp - 0xa4], 0x80020004
mov dword [ebp - 0xac], 0xa
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov edi, dword [esi]
lea edx, [ebp - 0x80]
push edx
push 0xffffffffffffffff
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0x40]
fnclex
test eax, eax
jge 0x4bdeb1
push 0x40
push 0x40e3e0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
lea eax, [ebp - 0x288]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
call esi
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4bdefc
lea ecx, [ebp - 0x44]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edx, dword [ebp - 0x44]
push edx
lea eax, [ebp - 0x28c]
push eax
call esi
mov edx, 0x40e53c
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x4236c8
push 0x42375c
call ebx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xac], 8
lea edx, [ebp - 0xac]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4bdf72
push 0xdc
push 0x40e35c
mov ecx, dword [ebp - 0x28c]
push ecx
push eax
call edi
cmp dword [ebp - 0x214], 1
jne 0x4bdfa4
mov eax, dword [ebp - 0x28c]
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
fnclex
test eax, eax
jge 0x4bdfa4
push 0x80
push 0x40e35c
mov ecx, dword [ebp - 0x28c]
push ecx
push eax
call edi
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bdfbd
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov ecx, 9
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x28c]
mov esi, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x178]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [ebx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
push edx
call dword [esi + 0xa0]
fnclex
test eax, eax
jge 0x4be03a
push 0xa0
push 0x40e35c
mov ecx, dword [ebp - 0x28c]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x28c]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4be064
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x28c]
push edx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4be111
mov eax, 0x80020004
mov dword [ebp - 0xd4], eax
mov ecx, 0xa
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x174], 0x4237b0
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xac]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0xbc]
push edx
push 0
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0xcc]
push edx
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0xac]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov eax, dword [ebp - 0x28c]
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
fnclex
test eax, eax
jge 0x4be13a
push 0x80
push 0x40e35c
mov ecx, dword [ebp - 0x28c]
push ecx
push eax
call edi
push 0
lea edx, [ebp - 0x28c]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
call esi
mov eax, dword [ebp - 0x44]
test eax, eax
jne 0x4be161
lea eax, [ebp - 0x44]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x44]
push ecx
lea edx, [ebp - 0x290]
push edx
call esi
mov edx, 0x40e53c
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x174], 0x423838
mov dword [ebp - 0x17c], 8
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4be1cf
push 0xdc
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call edi
cmp dword [ebp - 0x214], 1
jne 0x4be201
mov eax, dword [ebp - 0x290]
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
fnclex
test eax, eax
jge 0x4be201
push 0x80
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call edi
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4be21a
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x174], eax
mov ecx, 9
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x290]
mov esi, dword [edx]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov ebx, esp
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x178]
mov dword [ebx + 4], ecx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x170]
mov dword [ebx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
push edx
call dword [esi + 0xa0]
fnclex
test eax, eax
jge 0x4be297
push 0xa0
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x290]
mov edx, dword [eax]
lea ecx, [ebp - 0x210]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x4be2c1
push 0x50
push 0x40e35c
mov edx, dword [ebp - 0x290]
push edx
push eax
call edi
cmp word [ebp - 0x210], 0
jne 0x4beac1
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4be2e8
lea eax, [ebp - 0x28]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x214]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x4be30e
push 0xdc
push 0x40e35c
push esi
push eax
call edi
cmp dword [ebp - 0x214], 1
jne 0x4be34f
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4be330
lea eax, [ebp - 0x28]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
test eax, eax
jge 0x4be34f
push 0x80
push 0x40e35c
push esi
push eax
call edi
mov eax, dword [ebp - 0x290]
mov edx, dword [eax]
lea ecx, [ebp - 0x80]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4be376
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x290]
push edx
push eax
call edi
mov eax, dword [ebp - 0x80]
mov esi, eax
mov ecx, 0x411a34
mov dword [ebp - 0x174], ecx
mov edx, 8
mov dword [ebp - 0x17c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4be3cf
push 0x28
push 0x40e428
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0xac]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x4be3f9
push 0x34
push 0x40e438
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4be40f
lea edx, [ebp - 0x28]
push edx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x28]
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4be42b
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4c1024]
mov dword [ebp - 0x1a4], eax
mov ecx, 9
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x184], 0x4238ac
mov edx, 8
mov dword [ebp - 0x18c], edx
mov dword [ebp - 0x194], 0x40e528
mov dword [ebp - 0x19c], edx
mov ebx, dword [esi]
push 0xffffffffffffffff
push 1
push 2
sub esp, 0x10
mov edx, esp
mov dword [edx], ecx
mov ecx, dword [ebp - 0x1a8]
mov dword [edx + 4], ecx
mov dword [edx + 8], eax
mov eax, dword [ebp - 0x1a0]
mov dword [edx + 0xc], eax
lea ecx, [ebp - 0x18c]
push ecx
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xbc]
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea ecx, [ebp - 0x19c]
push ecx
lea edx, [ebp - 0xcc]
push edx
call edi
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
push esi
call dword [ebx + 0xa0]
fnclex
test eax, eax
jge 0x4be4f2
push 0xa0
push 0x40e35c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x28]
test eax, eax
jne 0x4be53e
lea eax, [ebp - 0x28]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x28]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4be55f
push 0x54
push 0x40e35c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov esi, eax
xor ecx, ecx
mov dword [ebp - 0x174], ecx
mov edx, 2
mov dword [ebp - 0x17c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4be5b9
push 0x28
push 0x40e428
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4be5bf
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0xbc]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x4be5e5
push 0x34
push 0x40e438
push esi
push eax
call edi
mov eax, dword [ebp - 0x290]
mov edx, dword [eax]
lea ecx, [ebp - 0x88]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x4be60f
push 0x54
push 0x40e35c
mov edx, dword [ebp - 0x290]
push edx
push eax
call edi
mov eax, dword [ebp - 0x88]
mov esi, eax
mov ecx, 0x423940
mov dword [ebp - 0x184], ecx
mov edx, 8
mov dword [ebp - 0x18c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x8c]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x188]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x180]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4be66f
push 0x28
push 0x40e428
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4be675
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x8c]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0xac]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x4be69b
push 0x34
push 0x40e438
push esi
push eax
call edi
lea edx, [ebp - 0xbc]
push edx
lea eax, [ebp - 0xac]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov esi, eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x8c]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0xac]
push edx
lea eax, [ebp - 0xbc]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x4bea60
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4be70d
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4c1024]
mov dword [ebp - 0xd4], 0x80020004
mov dword [ebp - 0xdc], 0xa
lea ecx, [ebp - 0xdc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov dword [ebp - 0x184], 0x423a18
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4be76e
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov ecx, 0x423b20
mov dword [ebp - 0x174], ecx
mov edx, 8
mov dword [ebp - 0x17c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4be7d1
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov edi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4be7fb
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x194], 0x413878
mov dword [ebp - 0x19c], 8
mov ebx, dword [esi]
lea eax, [ebp - 0x88]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0xdc]
push ecx
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call edi
push eax
lea edx, [ebp - 0x19c]
push edx
lea eax, [ebp - 0xcc]
push eax
call edi
push eax
lea ecx, [ebp - 0x74]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [ebx + 0x40]
fnclex
test eax, eax
jge 0x4be874
push 0x40
push 0x40e3e0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 0x80]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4be8d7
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4c1024]
mov dword [ebp - 0xc4], 0x80020004
mov dword [ebp - 0xcc], 0xa
lea ecx, [ebp - 0xcc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarg]
mov dword [ebp - 0x184], 0x423b3c
mov dword [ebp - 0x18c], 8
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
lea edx, [ebp - 0x80]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4be93c
push 0x54
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x22c], eax
mov ecx, 0x412084
mov dword [ebp - 0x174], ecx
mov edx, 8
mov dword [ebp - 0x17c], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x84]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4be9a3
push 0x28
push 0x40e428
mov edx, dword [ebp - 0x22c]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x4be9a9
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x84]
mov ebx, eax
mov ecx, dword [eax]
lea edx, [ebp - 0xac]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x4be9cf
push 0x34
push 0x40e438
push ebx
push eax
call edi
mov ebx, dword [esi]
lea eax, [ebp - 0x88]
push eax
push 0xffffffffffffffff
lea ecx, [ebp - 0xcc]
push ecx
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0xac]
push eax
lea ecx, [ebp - 0xbc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [ebx + 0x40]
fnclex
test eax, eax
jge 0x4bea1d
push 0x40
push 0x40e3e0
push esi
push eax
call edi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x84]
push ecx
lea edx, [ebp - 0x80]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xcc]
push eax
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0xac]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x90]
fnclex
test eax, eax
jge 0x4bea89
push 0x90
push 0x40e35c
mov edx, dword [ebp - 0x290]
push edx
push eax
call edi
mov eax, dword [ebp - 0x290]
mov ecx, dword [eax]
lea edx, [ebp - 0x210]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x4beab3
push 0x50
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call edi
cmp word [ebp - 0x210], 0
je 0x4be297
mov eax, dword [ebp - 0x290]
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
fnclex
test eax, eax
jge 0x4beaea
push 0x80
push 0x40e35c
mov ecx, dword [ebp - 0x290]
push ecx
push eax
call edi
push 0
lea edx, [ebp - 0x290]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x4bed2b
jmp 0x4beca1
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x4bed2b
jmp 0x4beca1
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x28c]
push eax
lea ecx, [ebp - 0x288]
push ecx
lea edx, [ebp - 0x284]
push edx
lea eax, [ebp - 0x280]
push eax
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x18
lea ecx, [ebp - 0x20]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x24]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call edi
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x3c]
call edi
lea ecx, [ebp - 0x40]
call edi
lea ecx, [ebp - 0x44]
call esi
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x54]
call edi
lea ecx, [ebp - 0x58]
call esi
lea ecx, [ebp - 0x5c]
call edi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x64]
call esi
lea ecx, [ebp - 0x6c]
call edi
lea ecx, [ebp - 0x70]
call edi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x402526
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe0
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4024f8
mov eax, dword [ebp + 0xc]
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
fld qword [eax]
fcomp qword [0x4024f0]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
fnstsw ax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
test ah, 0x40
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xec], ebx
je 0x4bee4f
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x423960
push 0x423bb4
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
call edi
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x64], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x48]
lea ecx, [ebp - 0x44]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
jmp 0x4beec5
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x423c08
push 0x423c8c
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
push eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 4]
mov eax, dword [eax]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x4126c4
call edi
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x64], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
cmp dword [ebp - 0x3c], ebx
jne 0x4beed9
lea ecx, [ebp - 0x3c]
push ecx
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edx, dword [ebp - 0x3c]
lea eax, [ebp - 0xec]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
cmp dword [0x4c1024], ebx
jne 0x4bef02
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
push 0xffffffffffffffff
push 1
push 2
mov eax, dword [0x4c1024]
sub esp, 0x10
mov ecx, 9
mov ebx, esp
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x9c], eax
sub esp, 0x10
mov dword [ebx], ecx
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xec]
mov dword [ebx + 4], ecx
mov ecx, esp
mov edi, dword [edx]
push edx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
call dword [edi + 0xa0]
test eax, eax
fnclex
jge 0x4bef87
mov ecx, dword [ebp - 0xec]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xa0
push 0x40e35c
push ecx
push eax
call ebx
jmp 0x4bef8d
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa4]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xa4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0xec]
lea ecx, [ebp - 0xc8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x50]
test eax, eax
fnclex
jge 0x4befda
mov edx, dword [ebp - 0xec]
push 0x50
push 0x40e35c
push edx
push eax
call ebx
cmp word [ebp - 0xc8], 0
jne 0x4bf436
mov eax, dword [ebp - 0x28]
mov edi, 8
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0x50]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xac], 0x41344c
mov dword [ebp - 0xb4], edi
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4bf033
mov ecx, dword [ebp - 0xec]
push 0x54
push 0x40e35c
push ecx
push eax
call ebx
lea ebx, [ebp - 0x54]
mov eax, dword [ebp - 0x50]
push ebx
mov edx, edi
sub esp, 0x10
mov edi, dword [eax]
mov ebx, esp
mov ecx, 0x412554
push eax
mov dword [ebp - 0xd8], eax
mov dword [ebx], edx
mov edx, dword [ebp - 0xc0]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xb8]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
test eax, eax
fnclex
jge 0x4bf088
mov edx, dword [ebp - 0xd8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x28
push 0x40e428
push edx
push eax
call ebx
jmp 0x4bf08e
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x84]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x34]
test eax, eax
fnclex
jge 0x4bf0b1
push 0x34
push 0x40e438
push edi
push eax
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x24]
push eax
lea edx, [ebp - 0x64]
push ecx
push edx
call edi
push eax
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x74]
push eax
push ecx
call edi
push eax
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x94]
push edx
push eax
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x54]
lea edx, [ebp - 0x50]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x74]
push ecx
lea eax, [ebp - 0x64]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0xc]
add esp, 0x20
fld qword [ecx]
fcomp qword [0x4024f0]
fnstsw ax
test ah, 0x40
je 0x4bf371
mov eax, dword [ebp - 0xec]
lea ecx, [ebp - 0x50]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x54]
test eax, eax
fnclex
jge 0x4bf163
mov edx, dword [ebp - 0xec]
push 0x54
push 0x40e35c
push edx
push eax
call ebx
lea ebx, [ebp - 0x54]
mov eax, dword [ebp - 0x50]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0xa4], edx
mov ebx, esp
mov ecx, 0x412590
mov dword [ebp - 0x9c], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0xa0]
push eax
mov dword [ebp - 0xd8], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x98]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
test eax, eax
fnclex
jge 0x4bf1c7
mov edx, dword [ebp - 0xd8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x28
push 0x40e428
push edx
push eax
call ebx
jmp 0x4bf1cd
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x64]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x34]
test eax, eax
fnclex
jge 0x4bf1ed
push 0x34
push 0x40e438
push edi
push eax
call ebx
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0xb4]
push eax
push ecx
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb4], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov edi, eax
lea edx, [ebp - 0x54]
lea eax, [ebp - 0x50]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
test di, di
je 0x4bf371
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0x50]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4bf260
mov ecx, dword [ebp - 0xec]
push 0x54
push 0x40e35c
push ecx
push eax
call ebx
lea ebx, [ebp - 0x54]
mov eax, dword [ebp - 0x50]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0xa4], edx
mov ebx, esp
mov ecx, 0x412084
mov dword [ebp - 0x9c], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0xa0]
push eax
mov dword [ebp - 0xd8], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x98]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
test eax, eax
fnclex
jge 0x4bf2c4
mov edx, dword [ebp - 0xd8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x28
push 0x40e428
push edx
push eax
call ebx
jmp 0x4bf2ca
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x54]
lea edx, [ebp - 0x64]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x34]
test eax, eax
fnclex
jge 0x4bf2ea
push 0x34
push 0x40e438
push edi
push eax
call ebx
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Var]
mov ecx, dword [ebp - 0x28]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
fstp qword [ebp - 0xd0]
push ecx
push 0x41b20c
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea edx, [ebp - 0xd0]
push eax
push edx
call 0x4bf5a0
mov edx, eax
lea ecx, [ebp - 0x48]
call esi
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
push eax
push 0x413878
call edi
mov edx, eax
lea ecx, [ebp - 0x28]
call esi
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
lea edx, [ebp - 0x44]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x50]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x1c
lea ecx, [ebp - 0x64]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4bf377
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, dword [ebp - 0x28]
push edx
push 0x412bcc
call edi
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
push eax
push 0x40ef04
call edi
mov edx, eax
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x64]
push ecx
push edx
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xa4], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x24]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0xec]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x90]
test eax, eax
fnclex
jge 0x4bf3fe
mov edx, dword [ebp - 0xec]
push 0x90
push 0x40e35c
push edx
push eax
call ebx
mov eax, dword [ebp - 0xec]
lea edx, [ebp - 0xc8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x4bf428
mov ecx, dword [ebp - 0xec]
push 0x50
push 0x40e35c
push ecx
push eax
call ebx
cmp word [ebp - 0xc8], 0
je 0x4befb0
mov eax, dword [ebp - 0xec]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x4bf45f
mov ecx, dword [ebp - 0xec]
push 0x80
push 0x40e35c
push ecx
push eax
call ebx
mov edx, dword [ebp - 0x28]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
push edx
call edi
cmp eax, 1
jle 0x4bf4d7
mov eax, dword [ebp - 0x28]
push eax
call edi
sub eax, 3
lea ecx, [ebp - 0x28]
jo 0x4bf592
lea edx, [ebp - 0x64]
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x9c], ecx
push edx
lea eax, [ebp - 0xa4]
push 1
lea ecx, [ebp - 0x74]
push eax
push ecx
mov dword [ebp - 0x64], 3
mov dword [ebp - 0xa4], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea edx, [ebp - 0x74]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call esi
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0x64]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov edx, dword [ebp - 0x28]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0xec]
push 0
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
wait
push 0x4bf57c
jmp 0x4bf54f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xec]
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x24]
call edi
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x38]
call edi
lea ecx, [ebp - 0x3c]
call esi
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
push ebp
mov ebp, esp
sub esp, 0xc
push 0x402526
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe4
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x402508
mov eax, dword [ebp + 8]
push 0x412adc
xor esi, esi
mov ecx, dword [eax + 4]
mov edx, dword [eax]
push ecx
push edx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x70], esi
mov dword [ebp - 0x80], esi
mov dword [ebp - 0x90], esi
mov dword [ebp - 0xa0], esi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0xdc], esi
mov dword [ebp - 0xec], esi
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x48]
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp dword [ebp - 0x28], esi
jne 0x4bf678
lea eax, [ebp - 0x28]
push eax
push 0x40e250
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x28]
lea edx, [ebp - 0xcc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
cmp dword [0x4c1024], esi
jne 0x4bf6a1
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
push 0xffffffffffffffff
push 1
push 2
mov eax, dword [0x4c1024]
sub esp, 0x10
mov ecx, 9
mov edi, esp
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x88], eax
sub esp, 0x10
mov dword [edi], ecx
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0xcc]
mov dword [edi + 4], ecx
mov ecx, esp
mov edx, dword [edx]
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x84]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0xcc]
push ecx
call dword [edx + 0xa0]
cmp eax, esi
fnclex
jge 0x4bf728
mov edx, dword [ebp - 0xcc]
push 0xa0
push 0x40e35c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0x4c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x54]
cmp eax, esi
fnclex
jge 0x4bf753
mov ecx, dword [ebp - 0xcc]
push 0x54
push 0x40e35c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edi, [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
push edi
mov ecx, 8
sub esp, 0x10
mov dword [ebp - 0x90], ecx
mov edi, esp
mov dword [ebp - 0x88], 0x4125b8
mov edx, dword [eax]
push eax
mov dword [edi], ecx
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0xbc], eax
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x88]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x84]
mov dword [edi + 0xc], ecx
call dword [edx + 0x28]
cmp eax, esi
fnclex
jge 0x4bf7b8
mov edx, dword [ebp - 0xbc]
push 0x28
push 0x40e428
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x50]
lea edx, [ebp - 0x60]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x34]
cmp eax, esi
fnclex
jge 0x4bf7dc
push 0x34
push 0x40e438
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x98], 0x412b40
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
lea eax, [ebp - 0x70]
push 0xffffffffffffffff
lea ecx, [ebp - 0x60]
push eax
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x48]
call ebx
lea edx, [ebp - 0x80]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcSplit]
lea eax, [ebp - 0x80]
push eax
push 0x2008
call dword [sym.imp.MSVBVM60.DLL___vbaAryVar]
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x44]
push ecx
push edx
mov dword [ebp - 0xb4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryCopy]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea edx, [ebp - 0x80]
lea eax, [ebp - 0x70]
push edx
lea ecx, [ebp - 0x60]
push eax
push ecx
push 3
call edi
mov eax, dword [ebp - 0xcc]
add esp, 0x1c
mov edx, dword [eax]
push eax
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x4bf8a9
mov ecx, dword [ebp - 0xcc]
push 0x80
push 0x40e35c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x88], 1
push edx
push 1
mov dword [ebp - 0x90], 2
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0xa0]
push eax
lea edx, [ebp - 0xb0]
push ecx
lea eax, [ebp - 0xec]
push edx
lea ecx, [ebp - 0xdc]
push eax
lea edx, [ebp - 0x24]
push ecx
push edx
mov dword [ebp - 0xa0], 3
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xb0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
test eax, eax
je 0x4bfbd9
mov eax, dword [ebp - 0x44]
test eax, eax
je 0x4bf959
cmp word [eax], 1
jne 0x4bf959
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov esi, eax
mov eax, dword [ebp - 0x44]
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
sub esi, edx
cmp esi, ecx
jb 0x4bf950
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
lea eax, [esi*4]
jmp 0x4bf95f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov ecx, dword [ebp - 0x44]
push 0x412b48
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x60], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [ebp - 0xcc]
lea edx, [ebp - 0xb4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xdc]
test eax, eax
fnclex
jge 0x4bf9c2
mov ecx, dword [ebp - 0xcc]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xdc
push 0x40e35c
push ecx
push eax
call esi
jmp 0x4bf9c8
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0xb4], 1
jne 0x4bf9fa
mov eax, dword [ebp - 0xcc]
push eax
mov edx, dword [eax]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x4bf9fa
mov ecx, dword [ebp - 0xcc]
push 0x80
push 0x40e35c
push ecx
push eax
call esi
mov eax, dword [0x4c1024]
test eax, eax
jne 0x4bfa13
push 0x4c1024
push 0x41160c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
push 0xffffffffffffffff
push 1
push 2
mov eax, dword [0x4c1024]
sub esp, 0x10
mov ecx, 9
mov ebx, esp
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x88], eax
sub esp, 0x10
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x8c]
mov edx, dword [ebp - 0xcc]
mov dword [ebx + 4], ecx
mov ecx, esp
mov edi, dword [edx]
push edx
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x84]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x34]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0x30]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
call dword [edi + 0xa0]
test eax, eax
fnclex
jge 0x4bfa90
mov ecx, dword [ebp - 0xcc]
push 0xa0
push 0x40e35c
push ecx
push eax
call esi
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x98], edx
lea edx, [ebp - 0x4c]
mov dword [ebp - 0xa0], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0x54]
test eax, eax
fnclex
jge 0x4bfaca
mov ecx, dword [ebp - 0xcc]
push 0x54
push 0x40e35c
push ecx
push eax
call esi
lea ebx, [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x90], edx
mov ebx, esp
mov ecx, 0x412bb8
mov dword [ebp - 0x88], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x8c]
push eax
mov esi, eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
test eax, eax
fnclex
jge 0x4bfb20
push 0x28
push 0x40e428
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x60]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x34]
test eax, eax
fnclex
jge 0x4bfb44
push 0x34
push 0x40e438
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x60]
push edx
lea ecx, [ebp - 0x70]
push eax
push ecx
mov dword [ebp - 0xa8], 0x412bcc
mov dword [ebp - 0xb0], 8
call esi
push eax
lea edx, [ebp - 0xb0]
lea eax, [ebp - 0x80]
push edx
push eax
call esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
push eax
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x40]
call ebx
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x70]
push eax
lea edx, [ebp - 0x60]
push ecx
push edx
push 3
call edi
add esp, 0x1c
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0x24]
push eax
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
jmp 0x4bf91a
mov eax, dword [ebp - 0xcc]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x80]
test eax, eax
fnclex
jge 0x4bfc06
mov edx, dword [ebp - 0xcc]
push 0x80
push 0x40e35c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0xcc]
push 0
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov ecx, dword [ebp - 0x40]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov edx, dword [ebp - 0x40]
cmp eax, 1
jle 0x4bfc8f
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
sub eax, 1
lea ecx, [ebp - 0x60]
jo 0x4bfd48
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x88], eax
push ecx
lea edx, [ebp - 0x90]
push 1
lea eax, [ebp - 0x70]
push edx
push eax
mov dword [ebp - 0x60], 3
mov dword [ebp - 0x90], 0x4008
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharVar]
lea ecx, [ebp - 0x70]
push ecx
call esi
mov edx, eax
lea ecx, [ebp - 0x3c]
call ebx
lea edx, [ebp - 0x70]
lea eax, [ebp - 0x60]
push edx
push eax
push 2
call edi
add esp, 0xc
wait
push 0x4bfd32
jmp 0x4bfce0
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
wait
push 0x4bfd32
jmp 0x4bfce0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xcc]
call esi
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xdc]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0xc
lea ecx, [ebp - 0x24]
call edi
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x38]
call edi
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x44]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
sahf
sahf
sahf
sahf
jl 0x4bfd53
or eax, dword [eax]