Function at 0x5561f0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x40c136
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x548
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x408dc0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov eax, dword [ebp + 8]
cmp dword [eax], 0x5b8d60
jne 0x55624c
mov dword [ebp - 0x370], 0
jmp 0x556258
call dword [sym.imp.MSVBVM60.DLL___vbaFailedFriend]
mov dword [ebp - 0x370], eax
mov dword [ebp - 4], 2
mov dword [ebp - 4], 3
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 4
mov dword [ebp - 0xc0], 0
mov dword [ebp - 4], 5
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ax, word [0x5ae910]
mov word [edx + 0x4a], ax
mov dword [ebp - 4], 6
mov ecx, dword [0x5aea60]
mov edx, 0x122
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 7
mov edx, dword [0x5aea60]
mov eax, 0x123
sub eax, dword [edx + 0x14]
mov ecx, dword [0x5aea60]
mov edx, dword [ecx + 0xc]
mov edx, dword [edx + eax*4]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 8
mov eax, dword [0x5ae524]
push eax
call fcn.004d0fb0
mov dword [ebp - 4], 9
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
call fcn.004d0fb0
mov dword [ebp - 4], 0xa
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
jne 0x556422
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1d0], 0x4296c8
mov dword [ebp - 0x1d8], 8
lea edx, [ebp - 0x1d8]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x178]
push eax
push 0x12
call dword [sym.imp.MSVBVM60.DLL_rtcStringBstr]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
add ecx, 0x50
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1d0], 0x422fd4
mov dword [ebp - 0x1d8], 8
lea edx, [ebp - 0x1d8]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0x178]
push edx
push 0x42
call dword [sym.imp.MSVBVM60.DLL_rtcStringBstr]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x54
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xe
cmp dword [0x5aeb20], 0
jne 0x55644e
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x374], 0x5aeb20
jmp 0x556458
mov dword [ebp - 0x374], 0x5aeb20
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx]
push edx
lea eax, [ebp - 0x24c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0xf
push 0
push 0
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24c]
push eax
call dword [edx + 0x328]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, 1
sub eax, 1
mov ecx, dword [0x5ae4a8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x10
push 0
push 0
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24c]
push ecx
call dword [eax + 0x324]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, 2
sub ecx, 1
mov eax, dword [0x5ae4a8]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x11
push 0
push 0
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24c]
push eax
call dword [edx + 0x32c]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, 3
sub eax, 1
mov ecx, dword [0x5ae4a8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x12
push 0
push 0
mov edx, dword [ebp - 0x24c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x24c]
push ecx
call dword [eax + 0x330]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, 4
sub ecx, 1
mov eax, dword [0x5ae4a8]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x13
mov ecx, dword [ebp - 0x24c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24c]
push eax
call dword [edx + 0x334]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea edx, [ebp - 0x164]
push edx
push 0
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55674b
push 0x40
push 0x4274f8
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x378], eax
jmp 0x556755
mov dword [ebp - 0x378], 0
push 0
push 0xb
mov edx, dword [ebp - 0x164]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x37c], eax
fild dword [ebp - 0x37c]
fdiv qword [0x401e60]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, 5
sub ecx, 1
mov eax, dword [0x5ae4a8]
lea ecx, [eax + ecx*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x24c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x24c]
push edx
call dword [ecx + 0x334]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x164]
push ecx
push 1
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55686b
push 0x40
push 0x4274f8
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x380], eax
jmp 0x556875
mov dword [ebp - 0x380], 0
push 0
push 0xb
mov ecx, dword [ebp - 0x164]
push ecx
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, 6
sub eax, 1
mov ecx, dword [0x5ae4a8]
lea ecx, [ecx + eax*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x160]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x15
push 0
lea ecx, [ebp - 0x24c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x16
movsx edx, word [0x5ae920]
test edx, edx
je 0x5569c0
mov dword [ebp - 4], 0x17
push 0
push 0
push 1
push 8
mov eax, dword [ebp + 8]
add eax, 0xb4
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x18
mov ecx, dword [ebp + 8]
mov word [ecx + 0xb8], 0
mov dword [ebp - 4], 0x19
mov edx, dword [ebp + 8]
movsx eax, word [edx + 0xba]
test eax, eax
je 0x5569ab
mov dword [ebp - 4], 0x1a
mov ecx, dword [ebp + 8]
mov dx, word [ecx + 0xba]
not dx
mov eax, dword [ebp + 8]
mov word [eax + 0xba], dx
mov dword [ebp - 4], 0x1b
mov ecx, dword [ebp + 8]
mov edx, dword [ebp + 8]
mov ax, word [edx + 0xba]
mov word [ecx + 0xb8], ax
mov dword [ebp - 4], 0x1d
mov ecx, dword [ebp + 8]
mov dx, word [ecx + 0xb8]
mov word [ebp - 0x24], dx
mov dword [ebp - 4], 0x1f
push 0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x70c]
mov dword [ebp - 4], 0x20
push 0x3e8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0xb10]
mov dword [ebp - 4], 0x21
mov eax, 2
sub eax, 1
mov ecx, dword [0x5ae958]
xor edx, edx
cmp word [ecx + eax*2], 0
setne dl
neg edx
mov word [ebp - 0x50], dx
mov dword [ebp - 4], 0x22
movsx eax, word [ebp - 0x50]
test eax, eax
je 0x556b93
mov dword [ebp - 4], 0x23
push 0x42a840
push 0
push 3
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x4c0]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
lea eax, [ebp - 0x164]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0x188]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x24]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556aec
push 0x24
push 0x42a840
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x384], eax
jmp 0x556af6
mov dword [ebp - 0x384], 0
mov edx, dword [ebp - 0x168]
mov dword [ebp - 0x234], edx
push 0xffffffffffffffff
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x234]
push edx
call dword [ecx + 0x90]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x556b50
push 0x90
push 0x42a850
mov eax, dword [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x238]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x388], eax
jmp 0x556b5a
mov dword [ebp - 0x388], 0
lea edx, [ebp - 0x168]
push edx
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x10
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x25
movsx ecx, word [0x5ae910]
test ecx, ecx
je 0x556be8
mov dword [ebp - 4], 0x26
push 1
movsx edx, word [0x5ae92a]
push edx
push 1
push 8
lea eax, [ebp - 0x70]
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x70]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x738]
mov dword [ebp - 4], 0x29
call fcn.005aa740
mov dword [ebp - 4], 0x2a
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x330]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov ax, word [0x5aecc8]
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556c6b
push 0x74
push 0x42724c
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x38c], eax
jmp 0x556c75
mov dword [ebp - 0x38c], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x2b
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x358]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov cx, word [0x5aecc8]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556cf9
push 0x74
push 0x42724c
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x390], eax
jmp 0x556d03
mov dword [ebp - 0x390], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x2c
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x350]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
xor edx, edx
cmp dword [0x5ae484], 2
sete dl
neg edx
mov ax, word [0x5aecca]
and ax, dx
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556d97
push 0x74
push 0x42724c
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x394], eax
jmp 0x556da1
mov dword [ebp - 0x394], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x2d
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x360]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov cx, word [0x5aecca]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556e25
push 0x74
push 0x42724c
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x398], eax
jmp 0x556e2f
mov dword [ebp - 0x398], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x2e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x354]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
xor edx, edx
cmp dword [0x5ae484], 2
sete dl
neg edx
mov ax, word [0x5aeccc]
and ax, dx
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556ec3
push 0x74
push 0x42724c
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x39c], eax
jmp 0x556ecd
mov dword [ebp - 0x39c], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x2f
mov eax, dword [ebp + 8]
push eax
call fcn.0053a8a0
mov dword [ebp - 4], 0x30
call fcn.004a7de0
mov ecx, dword [ebp + 8]
mov dword [ecx + 0x190], eax
mov dword [ebp - 4], 0x31
movsx edx, word [0x5ae90e]
cmp edx, 1
jne 0x556f27
mov dword [ebp - 4], 0x32
mov dword [ebp - 0xa4], 0x2328
jmp 0x55707e
mov dword [ebp - 4], 0x34
cmp dword [0x5aeb20], 0
jne 0x556f53
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3a0], 0x5aeb20
jmp 0x556f5d
mov dword [ebp - 0x3a0], 0x5aeb20
mov eax, dword [ebp - 0x3a0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3a0]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x304]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x164]
push ecx
push 1
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x556fd9
push 0x40
push 0x4274f8
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3a4], eax
jmp 0x556fe3
mov dword [ebp - 0x3a4], 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x234], ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x234]
push edx
call dword [ecx + 0x50]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x55703c
push 0x50
push 0x427530
mov eax, dword [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x238]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3a8], eax
jmp 0x557046
mov dword [ebp - 0x3a8], 0
mov edx, dword [ebp - 0x100]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Str]
mov dword [ebp - 0xa4], eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0x37
mov edx, 1
sub edx, 1
mov eax, dword [0x5ae958]
movsx ecx, word [eax + edx*2]
test ecx, ecx
je 0x55726a
mov dword [ebp - 4], 0x38
movsx edx, word [0x5ae90c]
test edx, edx
jne 0x55726a
mov dword [ebp - 4], 0x39
cmp dword [0x5aeb84], 0
jne 0x5570ee
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3ac], 0x5aeb84
jmp 0x5570f8
mov dword [ebp - 0x3ac], 0x5aeb84
mov eax, dword [ebp - 0x3ac]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
cmp dword [0x5aeb20], 0
jne 0x55712b
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3b0], 0x5aeb20
jmp 0x557135
mov dword [ebp - 0x3b0], 0x5aeb20
mov edx, dword [ebp - 0x3b0]
mov eax, dword [edx]
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1e8], 9
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1e4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1e0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1dc]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x2b0]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55720b
push 0x2b0
push 0x427638
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3b4], eax
jmp 0x557215
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 4], 0x3a
push 0x40d024
call dword [sym.imp.MSVBVM60.DLL___vbaNew]
push eax
lea eax, [ebp - 0x5c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 4], 0x3b
push 0xb
push 0xd
movsx ecx, word [0x5ae90e]
sub ecx, 1
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
push ecx
call fcn.005a4170
mov dword [ebp - 0x210], eax
lea edx, [ebp - 0x210]
push edx
mov eax, dword [ebp - 0x5c]
push eax
call fcn.0049e1a0
mov dword [ebp - 4], 0x3e
mov ecx, 4
sub ecx, 1
mov edx, dword [0x5ae958]
movsx eax, word [edx + ecx*2]
test eax, eax
je 0x558044
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x170], 0x80020004
mov dword [ebp - 0x178], 0xa
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcFreeFile]
mov word [ebp - 0xe0], ax
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x40
cmp dword [0x5b0c30], 0
jne 0x5572f2
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3b8], 0x5b0c30
jmp 0x5572fc
mov dword [ebp - 0x3b8], 0x5b0c30
mov edx, dword [ebp - 0x3b8]
mov eax, dword [edx]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x160]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x14]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x557357
push 0x14
push 0x4255cc
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3bc], eax
jmp 0x557361
mov dword [ebp - 0x3bc], 0
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x234], ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x234]
push edx
call dword [ecx + 0x50]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x5573ba
push 0x50
push 0x4274d4
mov eax, dword [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x238]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3c0], eax
jmp 0x5573c4
mov dword [ebp - 0x3c0], 0
cmp dword [0x5b0c30], 0
jne 0x5573e9
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3c4], 0x5b0c30
jmp 0x5573f3
mov dword [ebp - 0x3c4], 0x5b0c30
mov edx, dword [ebp - 0x3c4]
mov eax, dword [edx]
mov dword [ebp - 0x23c], eax
lea ecx, [ebp - 0x104]
push ecx
push 0x71
mov edx, dword [ebp - 0x23c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x23c]
push ecx
call dword [eax + 0x48]
fnclex
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jge 0x557450
push 0x48
push 0x4255cc
mov edx, dword [ebp - 0x23c]
push edx
mov eax, dword [ebp - 0x240]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3c8], eax
jmp 0x55745a
mov dword [ebp - 0x3c8], 0
lea ecx, [ebp - 0x20c]
push ecx
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x104]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [0x5ae528]
push ecx
call fcn.004daa50
mov dx, word [ebp - 0x20c]
not dx
mov word [ebp - 0x244], dx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
movsx eax, word [ebp - 0x244]
test eax, eax
je 0x5576cb
mov dword [ebp - 4], 0x41
cmp dword [0x5b0c30], 0
jne 0x557508
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3cc], 0x5b0c30
jmp 0x557512
mov dword [ebp - 0x3cc], 0x5b0c30
mov ecx, dword [ebp - 0x3cc]
mov edx, dword [ecx]
mov dword [ebp - 0x22c], edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x14]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55756d
push 0x14
push 0x4255cc
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3d0], eax
jmp 0x557577
mov dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x234], eax
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x234]
push ecx
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x5575d0
push 0x50
push 0x4274d4
mov edx, dword [ebp - 0x234]
push edx
mov eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3d4], eax
jmp 0x5575da
mov dword [ebp - 0x3d4], 0
cmp dword [0x5b0c30], 0
jne 0x5575ff
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3d8], 0x5b0c30
jmp 0x557609
mov dword [ebp - 0x3d8], 0x5b0c30
mov ecx, dword [ebp - 0x3d8]
mov edx, dword [ecx]
mov dword [ebp - 0x23c], edx
lea eax, [ebp - 0x104]
push eax
push 0x71
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x23c]
push eax
call dword [edx + 0x48]
fnclex
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jge 0x557666
push 0x48
push 0x4255cc
mov ecx, dword [ebp - 0x23c]
push ecx
mov edx, dword [ebp - 0x240]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3dc], eax
jmp 0x557670
mov dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [0x5ae528]
push edx
call fcn.004da8f0
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x43
mov dword [ebp - 0x170], 0x80020004
mov dword [ebp - 0x178], 0xa
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcFreeFile]
mov word [ebp - 0x4c], ax
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x44
cmp dword [0x5b0c30], 0
jne 0x55772f
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3e0], 0x5b0c30
jmp 0x557739
mov dword [ebp - 0x3e0], 0x5b0c30
mov ecx, dword [ebp - 0x3e0]
mov edx, dword [ecx]
mov dword [ebp - 0x22c], edx
lea eax, [ebp - 0x160]
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x14]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x557794
push 0x14
push 0x4255cc
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3e4], eax
jmp 0x55779e
mov dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x234], eax
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x234]
push ecx
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x5577f7
push 0x50
push 0x4274d4
mov edx, dword [ebp - 0x234]
push edx
mov eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3e8], eax
jmp 0x557801
mov dword [ebp - 0x3e8], 0
cmp dword [0x5b0c30], 0
jne 0x557826
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3ec], 0x5b0c30
jmp 0x557830
mov dword [ebp - 0x3ec], 0x5b0c30
mov ecx, dword [ebp - 0x3ec]
mov edx, dword [ecx]
mov dword [ebp - 0x23c], edx
lea eax, [ebp - 0x104]
push eax
push 0x71
mov ecx, dword [ebp - 0x23c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x23c]
push eax
call dword [edx + 0x48]
fnclex
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jge 0x55788d
push 0x48
push 0x4255cc
mov ecx, dword [ebp - 0x23c]
push ecx
mov edx, dword [ebp - 0x240]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3f0], eax
jmp 0x557897
mov dword [ebp - 0x3f0], 0
cmp dword [0x5b0c30], 0
jne 0x5578bc
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3f4], 0x5b0c30
jmp 0x5578c6
mov dword [ebp - 0x3f4], 0x5b0c30
mov eax, dword [ebp - 0x3f4]
mov ecx, dword [eax]
mov dword [ebp - 0x244], ecx
lea edx, [ebp - 0x108]
push edx
push 0x71
mov eax, dword [ebp - 0x244]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x244]
push edx
call dword [ecx + 0x48]
fnclex
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jge 0x557923
push 0x48
push 0x4255cc
mov eax, dword [ebp - 0x244]
push eax
mov ecx, dword [ebp - 0x248]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x3f8], eax
jmp 0x55792d
mov dword [ebp - 0x3f8], 0
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
mov dword [ebp - 0x1d0], 0x42e0bc
mov dword [ebp - 0x1d8], 8
lea edx, [ebp - 0x1d8]
lea ecx, [ebp - 0x188]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
push 1
push 1
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromFormatVar]
mov edx, eax
lea ecx, [ebp - 0x124]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x334], edx
mov dword [ebp - 0x124], 0
lea eax, [ebp - 0x120]
push eax
mov ecx, dword [ebp - 0x108]
push ecx
push 0x422fc0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x334]
lea ecx, [ebp - 0x10c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x42e0ec
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x104]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [0x5ae528]
push ecx
call fcn.004da500
mov edx, dword [ebp - 0x120]
push edx
mov ax, word [ebp - 0x4c]
push eax
push 0xffffffffffffffff
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x100]
push ecx
push 0xa
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x2c
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x45
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
lea eax, [ebp - 0x250]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x46
mov ecx, dword [ebp - 0x250]
push ecx
call fcn.004d0fb0
mov dword [ebp - 4], 0x47
mov edx, dword [0x5aea60]
push edx
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0xf4]
mov edx, 0x11d
sub edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc]
lea edx, [ecx + edx*4]
push edx
mov eax, dword [ebp - 0x250]
push eax
call fcn.004d0730
lea ecx, [ebp - 0xf4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x48
cmp dword [0x5aeb20], 0
jne 0x557b6a
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x3fc], 0x5aeb20
jmp 0x557b74
mov dword [ebp - 0x3fc], 0x5aeb20
push 0
push 0
mov edx, dword [ebp - 0x3fc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3fc]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x328]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x1d0], ax
mov dword [ebp - 0x1d8], 0xb
mov dword [ebp - 0x1e0], 0x422ebc
mov dword [ebp - 0x1e8], 8
lea ecx, [ebp - 0x1d8]
push ecx
lea edx, [ebp - 0x1e8]
push edx
lea eax, [ebp - 0x188]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x250]
push edx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
lea edx, [ebp - 0x178]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x49
mov eax, dword [0x5aea60]
mov ecx, 0x11e
sub ecx, dword [eax + 0x14]
mov edx, dword [0x5aea60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
push 0x42e0fc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x250]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4a
cmp dword [0x5aeb20], 0
jne 0x557ce4
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x400], 0x5aeb20
jmp 0x557cee
mov dword [ebp - 0x400], 0x5aeb20
push 0
push 0
mov ecx, dword [ebp - 0x400]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x400]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x324]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x1d0], ax
mov dword [ebp - 0x1d8], 0xb
mov dword [ebp - 0x1e0], 0x422ebc
mov dword [ebp - 0x1e8], 8
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x1e8]
push ecx
lea edx, [ebp - 0x188]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x250]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x1d8]
push eax
lea ecx, [ebp - 0x178]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x4b
mov edx, dword [0x5aea60]
mov eax, 0x11f
sub eax, dword [edx + 0x14]
mov ecx, dword [0x5aea60]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax*4]
push eax
push 0x423044
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x250]
push edx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x4c
cmp dword [0x5aeb20], 0
jne 0x557e5f
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x404], 0x5aeb20
jmp 0x557e69
mov dword [ebp - 0x404], 0x5aeb20
mov eax, dword [ebp - 0x404]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x404]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x334]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x164]
push ecx
push 0
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x557ee5
push 0x40
push 0x4274f8
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x408], eax
jmp 0x557eef
mov dword [ebp - 0x408], 0
push 0
push 0
mov ecx, dword [ebp - 0x164]
push ecx
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x40c], eax
fild dword [ebp - 0x40c]
fdiv qword [0x401e60]
sub esp, 8
fstp qword [esp]
call dword [sym.imp.MSVBVM60.DLL___vbaStrR8]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x250]
push ecx
call fcn.004d0730
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x164]
push ecx
lea edx, [ebp - 0x160]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x4d
push 0x422ebc
mov eax, dword [0x5ae3f0]
push eax
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x104]
push ecx
mov edx, dword [ebp - 0x250]
push edx
call fcn.004d0730
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x100]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x4e
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0x250]
push eax
call fcn.004d0ff0
mov dword [ebp - 4], 0x4f
push 0
lea ecx, [ebp - 0x250]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x51
push 1
push 0x28
push 1
movsx edx, word [0x5ae92a]
push edx
push 2
push 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x24
mov dword [ebp - 4], 0x52
push 1
push 0x28
push 1
movsx edx, word [0x5ae92a]
push edx
push 2
push 8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x5c
push ecx
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x24
mov dword [ebp - 4], 0x53
push 1
push 0x28
push 1
movsx edx, word [0x5ae92a]
push edx
push 2
push 8
mov eax, dword [ebp + 8]
add eax, 0xc8
push eax
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
mov dword [ebp - 4], 0x54
movsx ecx, word [0x5ae920]
test ecx, ecx
je 0x558138
mov dword [ebp - 4], 0x55
movsx edx, word [ebp - 0x24]
test edx, edx
jne 0x558136
mov dword [ebp - 4], 0x56
push 1
push 0x28
push 1
movsx eax, word [0x5ae92a]
push eax
push 2
push 8
mov ecx, dword [ebp + 8]
add ecx, 0xb4
push ecx
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x24
jmp 0x55816e
mov dword [ebp - 4], 0x59
mov word [ebp - 0x24], 0
mov dword [ebp - 4], 0x5a
push 0
push 0
push 1
push 8
mov edx, dword [ebp + 8]
add edx, 0xb4
push edx
push 4
push 0x180
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
add esp, 0x1c
mov dword [ebp - 4], 0x5c
cmp dword [0x5aeb20], 0
jne 0x55819a
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x410], 0x5aeb20
jmp 0x5581a4
mov dword [ebp - 0x410], 0x5aeb20
mov eax, dword [ebp - 0x410]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x254]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x5d
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x254]
push edx
call dword [ecx + 0x304]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x164]
push ecx
push 0
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x558239
push 0x40
push 0x4274f8
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x414], eax
jmp 0x558243
mov dword [ebp - 0x414], 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x234], ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x234]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x234]
push edx
call dword [ecx + 0x50]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x55829c
push 0x50
push 0x427530
mov eax, dword [ebp - 0x234]
push eax
mov ecx, dword [ebp - 0x238]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x418], eax
jmp 0x5582a6
mov dword [ebp - 0x418], 0
mov edx, dword [ebp - 0x100]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR4Str]
fstp dword [0x5ae4d8]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x164]
push eax
lea ecx, [ebp - 0x160]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov dword [ebp - 4], 0x5e
push 0
push 0
mov edx, dword [ebp - 0x254]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x254]
push ecx
call dword [eax + 0x328]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [0x5ae4d2], ax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x5f
push 0
push 0
mov ecx, dword [ebp - 0x254]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x254]
push eax
call dword [edx + 0x324]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [0x5ae4d4], ax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x60
push 0
lea eax, [ebp - 0x254]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x61
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x4f0]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea edx, [ebp - 0x164]
push edx
push 1
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x558445
push 0x40
push 0x4274f8
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x41c], eax
jmp 0x55844f
mov dword [ebp - 0x41c], 0
push 0
push 5
mov edx, dword [ebp - 0x164]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [eax + eax - 4]
mov dword [ebp - 0xb0], ecx
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x160]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x62
mov word [ebp - 0x29c], 0
mov dword [ebp - 4], 0x63
mov cx, word [ebp - 0x29c]
cmp cx, word [0x5ae920]
je 0x5584d8
mov dx, word [ebp - 0x29c]
cmp dx, word [ebp - 0x24]
jne 0x5588d8
mov dword [ebp - 4], 0x64
movsx eax, word [0x5ae92a]
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0xc4], 1
jmp 0x558514
mov ecx, dword [ebp - 0xc4]
add ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0xc4], ecx
mov edx, dword [ebp - 0xc4]
cmp edx, dword [ebp - 0x2c4]
jg 0x5588c9
mov dword [ebp - 4], 0x65
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x4f0]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x164]
push ecx
mov dx, word [ebp - 0xc4]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x5585a5
push 0x40
push 0x4274f8
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x420], eax
jmp 0x5585af
mov dword [ebp - 0x420], 0
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x338], edx
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x338]
push eax
lea ecx, [ebp - 0x258]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x66
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d8], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x1d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [edx + 0xc], ecx
push 0x19
mov edx, dword [ebp - 0x258]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x67
mov dword [ebp - 0x2cc], 0x28
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0xe4], 1
jmp 0x558677
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x2c8]
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
cmp ecx, dword [ebp - 0x2cc]
jg 0x55884e
mov dword [ebp - 4], 0x68
lea edx, [ebp - 0xe4]
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1d8], 0x4003
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
push 0xa
mov eax, dword [ebp - 0x258]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x69
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x1d8], 3
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
push 0xb
mov ecx, dword [ebp - 0x258]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x6a
mov edx, dword [0x5ae4e0]
sub edx, 1
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1d8], 3
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
push 0xd
mov eax, dword [ebp - 0x258]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x6b
push 0
push 0x2d
mov ecx, dword [ebp - 0x258]
push ecx
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x58]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
mov ecx, dword [ecx + 0x58]
mov esi, dword [ebp - 0xe4]
sub esi, dword [ecx + 0x1c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
mov ecx, dword [ecx + 0x58]
mov edi, dword [ebp + 8]
mov edi, dword [edi + 0x3d4]
mov edi, dword [edi + 0x58]
mov ebx, dword [ebp - 0xc4]
sub ebx, dword [edi + 0x14]
mov ecx, dword [ecx + 0x18]
imul ecx, ebx
add esi, ecx
mov eax, dword [eax + 0xc]
lea ecx, [eax + esi*4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x6c
jmp 0x558665
mov dword [ebp - 4], 0x6d
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x1d8], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
push 0x19
mov ecx, dword [ebp - 0x258]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x6e
push 0
lea edx, [ebp - 0x258]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x6f
jmp 0x558502
mov dword [ebp - 4], 0x70
mov word [ebp - 0x24], 0xffff
jmp 0x558904
mov dword [ebp - 4], 0x72
mov eax, dword [ebp + 8]
add eax, 0xb4
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x58
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x7c8]
mov dword [ebp - 4], 0x74
movsx eax, word [ebp - 0x50]
test eax, eax
je 0x5589f9
mov dword [ebp - 4], 0x75
movsx ecx, word [0x5ae92a]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0xc4], 1
jmp 0x558953
mov edx, dword [ebp - 0xc4]
add edx, dword [ebp - 0x2d0]
mov dword [ebp - 0xc4], edx
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x2d4]
jg 0x5589f9
mov dword [ebp - 4], 0x76
mov dword [ebp - 0x2dc], 0x28
mov dword [ebp - 0x2d8], 1
mov dword [ebp - 0xe4], 1
jmp 0x55899e
mov ecx, dword [ebp - 0xe4]
add ecx, dword [ebp - 0x2d8]
mov dword [ebp - 0xe4], ecx
mov edx, dword [ebp - 0xe4]
cmp edx, dword [ebp - 0x2dc]
jg 0x5589ed
mov dword [ebp - 4], 0x77
mov eax, dword [ebp - 0xc4]
shl eax, 6
mov ecx, dword [ebp - 0xe4]
add ecx, eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [ebp - 0xc4]
imul edx, edx, 0x29
mov esi, dword [ebp - 0xe4]
add esi, edx
mov eax, dword [eax + 0x70]
mov dword [eax + esi*4], ecx
mov dword [ebp - 4], 0x78
jmp 0x55898c
mov dword [ebp - 4], 0x79
jmp 0x558941
mov dword [ebp - 4], 0x7b
push 0x1b
call fcn.0042452c
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x558a1e
jmp 0x5589f9
mov dword [ebp - 4], 0x7d
mov word [ebp - 0x60], 0xffff
mov dword [ebp - 4], 0x7f
movsx ecx, word [ebp - 0x60]
test ecx, ecx
je 0x558f73
mov dword [ebp - 4], 0x80
mov dword [ebp - 0xbc], 0
mov dword [ebp - 4], 0x81
push 0
mov edx, dword [ebp - 0xbc]
push edx
push 1
push 0
mov eax, dword [ebp + 8]
add eax, 0xd8
push eax
push 8
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x82
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 4], 0x83
movsx edx, word [0x5ae92a]
mov dword [ebp - 0x2e4], edx
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x84], 1
jmp 0x558ac5
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x2e4]
jg 0x558db2
mov dword [ebp - 4], 0x84
mov dword [ebp - 0x2ec], 0x28
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0xe4], 1
jmp 0x558b10
mov edx, dword [ebp - 0xe4]
add edx, dword [ebp - 0x2e8]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x2ec]
jg 0x558da6
mov dword [ebp - 4], 0x85
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x58]
mov edx, dword [ebp - 0xe4]
sub edx, dword [ecx + 0x1c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
mov ecx, dword [ecx + 0x58]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3d4]
mov esi, dword [esi + 0x58]
mov edi, dword [ebp - 0x84]
sub edi, dword [esi + 0x14]
mov ecx, dword [ecx + 0x18]
imul ecx, edi
add edx, ecx
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x86
mov ecx, dword [ebp - 0xd0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
cmp eax, dword [ebp - 0xb0]
jle 0x558d9a
mov dword [ebp - 4], 0x87
mov dword [ebp - 0x210], 0
mov edx, 0x428ae4
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x4c
push edx
lea eax, [ebp - 0xd0]
push eax
call fcn.004ff860
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x88
mov word [ebp - 0x2a0], 0xffff
mov dword [ebp - 4], 0x89
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x4c]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
neg eax
sbb eax, eax
neg eax
neg eax
cmp word [ebp - 0x2a0], ax
je 0x558cac
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x4c]
mov edx, 6
sub edx, dword [ecx + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
neg eax
sbb eax, eax
neg eax
neg eax
cmp word [ebp - 0x2a0], ax
jne 0x558d9a
mov dword [ebp - 4], 0x8a
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd8]
push eax
lea ecx, [ebp - 0x294]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, dword [ebp - 0x294]
mov eax, dword [ebp - 0xbc]
sub eax, dword [edx + 0x14]
mov ecx, dword [ebp - 0x294]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax*8]
mov dword [ebp - 0x298], eax
mov dword [ebp - 4], 0x8b
mov ecx, dword [ebp - 0x298]
mov dx, word [ebp - 0x84]
mov word [ecx], dx
mov dword [ebp - 4], 0x8c
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0xe4]
mov dword [eax + 4], ecx
mov dword [ebp - 4], 0x8d
mov dword [ebp - 0x298], 0
lea edx, [ebp - 0x294]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x8e
mov eax, dword [ebp - 0xbc]
add eax, 1
mov dword [ebp - 0xbc], eax
mov dword [ebp - 4], 0x8f
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [ebp - 0x2c]
jle 0x558d9a
mov dword [ebp - 4], 0x90
push 0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd8]
push eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
add eax, 0xc8
push eax
push 1
push 0
mov ecx, dword [ebp + 8]
add ecx, 0xd8
push ecx
push 8
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x94
jmp 0x558afe
mov dword [ebp - 4], 0x95
jmp 0x558ab3
mov dword [ebp - 4], 0x96
push 0
mov edx, dword [ebp - 0xbc]
push edx
push 1
push 0
mov eax, dword [ebp + 8]
add eax, 0xd8
push eax
push 8
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaRedimPreserve]
add esp, 0x1c
mov dword [ebp - 4], 0x97
mov ecx, dword [ebp - 0xbc]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 4], 0x98
mov dx, word [0x5ae96e]
mov word [ebp - 0x2a4], dx
movsx eax, word [ebp - 0x2a4]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 3
je 0x558e21
jmp 0x558ed0
mov dword [ebp - 4], 0x9a
cmp dword [ebp - 0x2c], 0
jne 0x558e52
mov dword [ebp - 4], 0x9b
mov dword [ebp - 0x84], 0
mov dword [ebp - 4], 0x9c
mov dword [ebp - 0xe4], 0
jmp 0x558ece
mov dword [ebp - 4], 0x9e
call fcn.004cf900
fimul dword [ebp - 0x2c]
fadd qword [0x401e70]
call dword [sym.imp.MSVBVM60.DLL___vbaR8FixI4]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 4], 0x9f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd8]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd8]
mov eax, dword [ebp - 0x7c]
sub eax, dword [ecx + 0x14]
mov ecx, dword [edx + 0xc]
movsx edx, word [ecx + eax*8]
sub edx, 1
mov dword [ebp - 0x84], edx
mov dword [ebp - 4], 0xa0
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xd8]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd8]
mov edx, dword [ebp - 0x7c]
sub edx, dword [eax + 0x14]
mov eax, dword [ecx + 0xc]
mov ecx, dword [eax + edx*8 + 4]
sub ecx, 1
mov dword [ebp - 0xe4], ecx
jmp 0x558ef2
mov dword [ebp - 4], 0xa3
mov dword [ebp - 0x84], 0
mov dword [ebp - 4], 0xa4
mov dword [ebp - 0xe4], 0
mov dword [ebp - 4], 0xa6
cmp dword [ebp - 0x84], 0
jge 0x558f13
mov dword [ebp - 4], 0xa7
mov dword [ebp - 0x84], 0
mov dword [ebp - 4], 0xa9
cmp dword [ebp - 0xe4], 0
jge 0x558f34
mov dword [ebp - 4], 0xaa
mov dword [ebp - 0xe4], 0
mov dword [ebp - 4], 0xac
mov word [ebp - 0x60], 0
mov dword [ebp - 4], 0xad
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x558f73
mov dword [ebp - 4], 0xae
call fcn.005aa740
mov dword [ebp - 4], 0xb1
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0xc0]
push eax
push 6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x58
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x710]
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], 0xb2
lea ecx, [ebp - 0x210]
push ecx
lea edx, [ebp - 0xc0]
push edx
push 7
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x710]
mov edx, dword [ebp - 0x210]
mov dword [ebp - 0xf0], edx
mov dword [ebp - 4], 0xb3
mov eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0xf0]
mov dword [ebp - 0x88], eax
mov dword [ebp - 4], 0xb4
mov ecx, 1
sub ecx, 1
mov edx, dword [0x5ae958]
movsx eax, word [edx + ecx*2]
test eax, eax
je 0x5594b8
mov dword [ebp - 4], 0xb5
movsx ecx, word [0x5ae90c]
test ecx, ecx
jne 0x5594b8
mov dword [ebp - 4], 0xb6
cmp dword [0x5aeb84], 0
jne 0x55906d
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x428], 0x5aeb84
jmp 0x559077
mov dword [ebp - 0x428], 0x5aeb84
mov edx, dword [ebp - 0x428]
mov eax, dword [edx]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x58]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x5590d2
push 0x58
push 0x427638
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x42c], eax
jmp 0x5590dc
mov dword [ebp - 0x42c], 0
mov ecx, dword [ebp - 0x210]
push ecx
call fcn.004239f4
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0xb7
cmp dword [0x5aeb84], 0
jne 0x55911a
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x430], 0x5aeb84
jmp 0x559124
mov dword [ebp - 0x430], 0x5aeb84
mov edx, dword [ebp - 0x430]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x430]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x2fc]
push eax
lea edx, [ebp - 0x25c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 4], 0xb8
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x730]
lea edx, [ebp - 0x10c]
push edx
mov eax, dword [ebp - 0xf0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x730]
mov ecx, dword [ebp - 0x104]
push ecx
push 0x428ae4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422fb0
mov edx, dword [ebp - 0x10c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x110]
push ecx
lea edx, [ebp - 0x10c]
push edx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x1c
mov dword [ebp - 4], 0xb9
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x9c]
push eax
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x25c]
push eax
call dword [edx + 0x1ec]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x5592de
push 0x1ec
push 0x426e78
mov ecx, dword [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x434], eax
jmp 0x5592e8
mov dword [ebp - 0x434], 0
mov dword [ebp - 4], 0xba
lea eax, [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x25c]
push eax
call dword [edx + 0x158]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x559342
push 0x158
push 0x426e78
mov ecx, dword [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x438], eax
jmp 0x55934c
mov dword [ebp - 0x438], 0
mov ax, word [ebp - 0x20c]
push eax
mov ecx, dword [ebp - 0x25c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x25c]
push eax
call dword [edx + 0xe4]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x5593a0
push 0xe4
push 0x426e78
mov ecx, dword [ebp - 0x25c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x43c], eax
jmp 0x5593aa
mov dword [ebp - 0x43c], 0
mov dword [ebp - 4], 0xbb
push 0xffffffffffffffff
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x25c]
push edx
call dword [ecx + 0xe4]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x5593ff
push 0xe4
push 0x426e78
mov eax, dword [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x440], eax
jmp 0x559409
mov dword [ebp - 0x440], 0
mov dword [ebp - 4], 0xbc
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x25c]
push edx
call dword [ecx + 0xd8]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x559463
push 0xd8
push 0x426e78
mov eax, dword [ebp - 0x25c]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x444], eax
jmp 0x55946d
mov dword [ebp - 0x444], 0
cmp word [ebp - 0x20c], 0x7530
jle 0x55948e
mov dword [ebp - 4], 0xbd
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0xa6c]
mov dword [ebp - 4], 0xbf
push 0
lea edx, [ebp - 0x25c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], pe_nt_image_headers32
push 0
call fcn.004239f4
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0xc3
mov eax, dword [ebp - 0x90]
push eax
push 0x423044
mov ecx, dword [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x10c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x68]
push edx
mov eax, dword [ebp - 0xf0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, 4
imul ecx, ecx, 5
mov eax, dword [0x5ae4c4]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x1c
mov dword [ebp - 4], 0xc4
cmp dword [0x5aeb20], 0
jne 0x5595d2
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x448], 0x5aeb20
jmp 0x5595dc
mov dword [ebp - 0x448], 0x5aeb20
mov ecx, dword [ebp - 0x448]
mov edx, dword [ecx]
mov dword [ebp - 0x22c], edx
mov eax, 4
imul eax, eax, 5
mov ecx, dword [0x5ae4c4]
mov edx, dword [ecx + eax]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x54]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x559642
push 0x54
push 0x4270a0
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x44c], eax
jmp 0x55964c
mov dword [ebp - 0x44c], 0
mov dword [ebp - 4], 0xc5
cmp dword [0x5aeb20], 0
jne 0x559678
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x450], 0x5aeb20
jmp 0x559682
mov dword [ebp - 0x450], 0x5aeb20
mov edx, dword [ebp - 0x450]
mov eax, dword [edx]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x50]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x5596dd
push 0x50
push 0x4270a0
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x454], eax
jmp 0x5596e7
mov dword [ebp - 0x454], 0
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x33c]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0xc6
mov edx, dword [ebp + 8]
movsx eax, word [edx + 0x44]
test eax, eax
jne 0x55974d
mov dword [ebp - 4], 0xc7
push 0x1b
call fcn.0042452c
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
xor ecx, ecx
cmp dword [ebp - 0x210], 0
setne cl
neg ecx
mov edx, dword [ebp + 8]
mov word [edx + 0x44], cx
mov dword [ebp - 4], 0xc9
movsx eax, word [0x5ae92a]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x94], 1
jmp 0x559789
mov ecx, dword [ebp - 0x94]
add ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x94]
cmp edx, dword [ebp - 0x2f4]
jg 0x55af6e
mov dword [ebp - 4], 0xca
mov eax, dword [ebp - 0x84]
add eax, 1
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], 0xcb
movsx ecx, word [0x5ae92a]
cmp dword [ebp - 0x84], ecx
jle 0x5597d8
mov dword [ebp - 4], 0xcc
mov dword [ebp - 0x84], 1
mov dword [ebp - 4], 0xce
mov dword [ebp - 0x2fc], 0x28
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0xcc], 1
jmp 0x559811
mov edx, dword [ebp - 0xcc]
add edx, dword [ebp - 0x2f8]
mov dword [ebp - 0xcc], edx
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x2fc]
jg 0x55af30
mov dword [ebp - 4], 0xcf
mov ecx, dword [ebp - 0xe4]
add ecx, 1
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 4], 0xd0
cmp dword [ebp - 0xe4], 0x28
jle 0x55985a
mov dword [ebp - 4], 0xd1
mov dword [ebp - 0xe4], 1
mov dword [ebp - 4], 0xd3
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x58]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x58]
mov eax, dword [ebp - 0xe4]
sub eax, dword [edx + 0x1c]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x3d4]
mov edx, dword [edx + 0x58]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3d4]
mov esi, dword [esi + 0x58]
mov edi, dword [ebp - 0x84]
sub edi, dword [esi + 0x14]
mov edx, dword [edx + 0x18]
imul edx, edi
add eax, edx
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xd4
mov edx, dword [ebp - 0xd0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
cmp eax, dword [ebp - 0xb0]
jle 0x55af24
mov dword [ebp - 4], 0xd5
mov dword [ebp - 0x210], 0
mov edx, 0x428ae4
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
add eax, 0x4c
push eax
lea ecx, [ebp - 0xd0]
push ecx
call fcn.004ff860
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0xd6
mov word [ebp - 0x2a8], 0
mov dword [ebp - 4], 0xd7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x4c]
mov edx, 7
sub edx, dword [ecx + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
neg eax
sbb eax, eax
neg eax
neg eax
cmp word [ebp - 0x2a8], ax
je 0x5599b6
mov dx, word [ebp - 0x2a8]
cmp dx, word [0x5ae910]
jne 0x55af24
mov dword [ebp - 4], 0xd8
mov word [ebp - 0x2ac], 0xffff
mov dword [ebp - 4], 0xd9
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x4c]
mov ecx, 5
sub ecx, dword [eax + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
neg eax
sbb eax, eax
neg eax
neg eax
cmp word [ebp - 0x2ac], ax
je 0x559a4d
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x4c]
mov edx, 6
sub edx, dword [ecx + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
neg eax
sbb eax, eax
neg eax
neg eax
cmp word [ebp - 0x2ac], ax
jne 0x55af24
mov dword [ebp - 4], 0xda
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xdb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
mov eax, 3
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0xd8]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xdc
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
mov eax, 1
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xdd
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
mov eax, 2
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xde
mov dword [ebp - 0x304], 2
mov dword [ebp - 0x300], 1
mov dword [ebp - 0xc8], 1
jmp 0x559b64
mov edx, dword [ebp - 0xc8]
add edx, dword [ebp - 0x300]
mov dword [ebp - 0xc8], edx
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x304]
jg 0x55af24
mov dword [ebp - 4], 0xdf
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x58
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x5c
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x7c8]
mov dword [ebp - 4], 0xe0
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0xd4]
push edx
lea eax, [ebp - 0xd8]
push eax
lea ecx, [ebp - 0xec]
push ecx
mov edx, dword [ebp - 0x84]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x7f4]
mov dword [ebp - 4], 0xe1
cmp dword [ebp - 0x74], 0
je 0x55af18
mov dword [ebp - 4], 0xe2
mov word [ebp - 0x2b0], 0
mov dword [ebp - 4], 0xe3
mov edx, dword [ebp - 0x74]
xor eax, eax
cmp edx, dword [ebp - 0x84]
sete al
neg eax
cmp word [ebp - 0x2b0], ax
je 0x559c4f
mov ecx, dword [ebp - 0x30]
xor edx, edx
cmp ecx, dword [ebp - 0xe4]
sete dl
neg edx
cmp word [ebp - 0x2b0], dx
jne 0x55af18
mov dword [ebp - 4], 0xe4
mov eax, 4
sub eax, 1
mov ecx, dword [0x5ae958]
movsx edx, word [ecx + eax*2]
test edx, edx
je 0x55a0b3
mov dword [ebp - 4], 0xe5
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x54]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xe6
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x5c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x5c]
mov eax, dword [ebp - 0x30]
sub eax, dword [edx + 0x1c]
mov edx, dword [ebp + 8]
mov edx, dword [edx + 0x3d4]
mov edx, dword [edx + 0x5c]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3d4]
mov esi, dword [esi + 0x5c]
mov edi, dword [ebp - 0x74]
sub edi, dword [esi + 0x14]
mov edx, dword [edx + 0x18]
imul edx, edi
add eax, edx
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xe7
mov dword [ebp - 0x210], 0
mov edx, 0x428ae4
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x4c
push edx
lea eax, [ebp - 0x58]
push eax
call fcn.004ff860
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0xe8
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x4c]
xor ecx, ecx
sub ecx, dword [eax + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + ecx*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x4c]
xor edx, edx
sub edx, dword [ecx + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
mov edx, dword [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
mov dword [ebp - 4], 0xe9
lea eax, [ebp - 0x28]
push eax
push 0x5f
push 0x3fffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x4c]
mov edx, 1
sub edx, dword [ecx + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstrB]
mov dword [ebp - 4], 0xea
lea edx, [ebp - 0x28]
push edx
push 0x6f
push 0x3fffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x4c]
mov ecx, 2
sub ecx, dword [eax + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + ecx*4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstrB]
mov dword [ebp - 4], 0xeb
lea ecx, [ebp - 0x28]
push ecx
push 0x7f
push 0x3fffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
mov eax, 3
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstrB]
mov dword [ebp - 4], 0xec
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x58]
push ecx
call fcn.004ffae0
mov dword [ebp - 4], 0xed
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x54]
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xee
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x5c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x5c]
mov edx, dword [ebp - 0xe4]
sub edx, dword [ecx + 0x1c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
mov ecx, dword [ecx + 0x5c]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3d4]
mov esi, dword [esi + 0x5c]
mov edi, dword [ebp - 0x84]
sub edi, dword [esi + 0x14]
mov ecx, dword [ecx + 0x18]
imul ecx, edi
add edx, ecx
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xef
mov dword [ebp - 0x210], 0
mov edx, 0x428ae4
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x210]
push ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x4c
push ecx
lea edx, [ebp - 0xa0]
push edx
call fcn.004ff860
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x100]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0xf0
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
xor eax, eax
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x4c]
xor ecx, ecx
sub ecx, dword [eax + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0x28]
push ecx
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
mov dword [ebp - 4], 0xf1
lea edx, [ebp - 0x28]
push edx
push 0x5f
push 0x3fffffff
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x4c]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov eax, dword [ecx + 0x4c]
mov ecx, 1
sub ecx, dword [eax + 0x14]
mov edx, dword [edx + 0xc]
mov eax, dword [edx + ecx*4]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstrB]
mov dword [ebp - 4], 0xf2
lea ecx, [ebp - 0x28]
push ecx
push 0x6f
push 0x3fffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x4c]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov edx, dword [eax + 0x4c]
mov eax, 2
sub eax, dword [edx + 0x14]
mov ecx, dword [ecx + 0xc]
mov edx, dword [ecx + eax*4]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstrB]
mov dword [ebp - 4], 0xf3
lea eax, [ebp - 0x28]
push eax
push 0x7f
push 0x3fffffff
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x4c]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x4c]
mov edx, 3
sub edx, dword [ecx + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstrB]
mov dword [ebp - 4], 0xf4
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0xa0]
push eax
call fcn.004ffae0
mov dword [ebp - 4], 0xf6
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x5c]
push eax
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x5c]
push ecx
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xe4]
sub ecx, dword [eax + 0x1c]
mov edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x84]
sub eax, dword [edx + 0x14]
mov edx, dword [ebp - 0xf8]
mov edx, dword [edx + 0x18]
imul edx, eax
add ecx, edx
mov eax, dword [ebp - 0xf8]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x30]
sub edx, dword [ecx + 0x1c]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0x74]
sub ecx, dword [eax + 0x14]
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax + 0x18]
imul eax, ecx
add edx, eax
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
call fcn.004ffae0
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0xf7
mov ecx, dword [ebp - 0x8c]
add ecx, 1
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 4], 0xf8
mov edx, dword [ebp - 0x8c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0xf9
movsx eax, word [ebp - 0x50]
test eax, eax
je 0x55a57a
mov dword [ebp - 4], 0xfa
mov eax, dword [ebp - 0x8c]
cdq
mov ecx, 0x1b
idiv ecx
test edx, edx
jne 0x55a2c1
mov dword [ebp - 4], 0xfb
mov edx, dword [ebp - 0x3c]
mov eax, 4
shl eax, 2
mov ecx, dword [0x5ae4c4]
add ecx, eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xfc
cmp dword [0x5aeb20], 0
jne 0x55a22a
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x458], 0x5aeb20
jmp 0x55a234
mov dword [ebp - 0x458], 0x5aeb20
mov ecx, dword [ebp - 0x458]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x458]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x2fc]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov edx, dword [ebp - 0x3c]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x54]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55a2ab
push 0x54
push 0x427530
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x45c], eax
jmp 0x55a2b5
mov dword [ebp - 0x45c], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xfe
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [ebp - 0x84]
imul ecx, ecx, 0x29
mov edx, dword [ebp - 0xe4]
add edx, ecx
mov eax, dword [eax + 0x70]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 4], 0xff
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [ebp - 0x74]
imul ecx, ecx, 0x29
mov edx, dword [ebp - 0x30]
add edx, ecx
mov eax, dword [eax + 0x70]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
mov esi, dword [ebp - 0x84]
imul esi, esi, 0x29
mov edi, dword [ebp - 0xe4]
add edi, esi
mov ecx, dword [ecx + 0x70]
mov edx, dword [eax + edx*4]
mov dword [ecx + edi*4], edx
mov dword [ebp - 4], 0x100
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ebp - 0x74]
imul edx, edx, 0x29
mov eax, dword [ebp - 0x30]
add eax, edx
mov ecx, dword [ecx + 0x70]
mov edx, dword [ebp - 0xc4]
mov dword [ecx + eax*4], edx
mov dword [ebp - 4], 0x101
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ebp - 0x84]
imul edx, edx, 0x29
mov eax, dword [ebp - 0xe4]
add eax, edx
mov ecx, dword [ecx + 0x70]
mov eax, dword [ecx + eax*4]
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
and eax, 0x3f
mov dword [ebp - 0x218], eax
push 0x423044
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [ebp - 0x84]
imul ecx, ecx, 0x29
mov edx, dword [ebp - 0xe4]
add edx, ecx
mov eax, dword [eax + 0x70]
mov ecx, dword [eax + edx*4]
and ecx, 0x3f
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x84]
sub edx, 1
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0xe4]
sub eax, 1
mov dword [ebp - 0x210], eax
cmp dword [0x5aeb70], 0
jne 0x55a424
push 0x5aeb70
push 0x40dce4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x460], 0x5aeb70
jmp 0x55a42e
mov dword [ebp - 0x460], 0x5aeb70
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0x460]
mov eax, dword [edx]
push eax
call fcn.00502450
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x102
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ebp - 0x74]
imul edx, edx, 0x29
mov eax, dword [ebp - 0x30]
add eax, edx
mov ecx, dword [ecx + 0x70]
mov eax, dword [ecx + eax*4]
cdq
and edx, 0x3f
add eax, edx
sar eax, 6
and eax, 0x3f
mov dword [ebp - 0x218], eax
push 0x423044
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [ebp - 0x74]
imul ecx, ecx, 0x29
mov edx, dword [ebp - 0x30]
add edx, ecx
mov eax, dword [eax + 0x70]
mov ecx, dword [eax + edx*4]
and ecx, 0x3f
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [ebp - 0x74]
sub edx, 1
mov dword [ebp - 0x214], edx
mov eax, dword [ebp - 0x30]
sub eax, 1
mov dword [ebp - 0x210], eax
cmp dword [0x5aeb70], 0
jne 0x55a52d
push 0x5aeb70
push 0x40dce4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x464], 0x5aeb70
jmp 0x55a537
mov dword [ebp - 0x464], 0x5aeb70
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x214]
push eax
lea ecx, [ebp - 0x210]
push ecx
mov edx, dword [ebp - 0x464]
mov eax, dword [edx]
push eax
call fcn.00502450
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x104
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0xc0]
push ecx
push 6
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
add eax, 0x5c
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x710]
mov ecx, dword [ebp - 0x210]
mov dword [ebp - 0x80], ecx
mov dword [ebp - 4], 0x105
lea edx, [ebp - 0x210]
push edx
lea eax, [ebp - 0xc0]
push eax
push 7
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x5c
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x710]
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0x106
movsx ecx, word [0x5ae90e]
test ecx, ecx
je 0x55a680
mov dword [ebp - 4], 0x107
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0xd0]
cmp eax, dword [ebp - 0x80]
jl 0x55a680
mov dword [ebp - 4], 0x108
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xd4]
cmp edx, dword [ebp - 0x40]
jl 0x55a680
mov dword [ebp - 4], 0x109
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x80]
mov dword [eax + 0xd0], ecx
mov dword [ebp - 4], 0x10a
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x40]
mov dword [edx + 0xd4], eax
mov dword [ebp - 4], 0x10b
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x5c
push edx
mov eax, dword [ebp + 8]
add eax, 0xc8
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x7c8]
mov dword [ebp - 4], 0x10f
mov cx, word [ebp - 0xe8]
mov word [ebp - 0x2b4], cx
movsx edx, word [ebp - 0x2b4]
mov dword [ebp - 0x468], edx
cmp dword [ebp - 0x468], 0
je 0x55a6cf
cmp dword [ebp - 0x468], 1
je 0x55a812
cmp dword [ebp - 0x468], 2
je 0x55aaad
jmp 0x55ad9b
mov dword [ebp - 4], 0x111
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x40]
cmp dword [ebp - 0x88], eax
jle 0x55a80d
mov dword [ebp - 4], 0x112
mov ecx, 4
sub ecx, 1
mov edx, dword [0x5ae958]
movsx eax, word [edx + ecx*2]
test eax, eax
je 0x55a7dd
mov dword [ebp - 4], 0x113
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x114
mov ecx, dword [ebp - 0x58]
push ecx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x260]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x115
mov ecx, dword [ebp - 0xa0]
push ecx
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x260]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x116
lea ecx, [ebp - 0xb4]
push ecx
mov edx, dword [ebp - 0x260]
push edx
call fcn.004d0ff0
mov dword [ebp - 4], 0x117
push 0
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x119
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x5c
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x7c8]
jmp 0x55af18
mov dword [ebp - 4], 0x11c
mov edx, dword [ebp - 0xb8]
cmp edx, dword [ebp - 0x80]
jle 0x55a95d
mov dword [ebp - 4], 0x11d
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], 0x11e
mov ecx, 4
sub ecx, 1
mov edx, dword [0x5ae958]
movsx eax, word [edx + ecx*2]
test eax, eax
je 0x55a92d
mov dword [ebp - 4], 0x11f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x120
mov ecx, dword [ebp - 0x58]
push ecx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x264]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x121
mov ecx, dword [ebp - 0xa0]
push ecx
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x264]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x122
lea ecx, [ebp - 0xb4]
push ecx
mov edx, dword [ebp - 0x264]
push edx
call fcn.004d0ff0
mov dword [ebp - 4], 0x123
push 0
lea eax, [ebp - 0x264]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x125
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x5c
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x7c8]
mov dword [ebp - 4], 0x127
mov edx, dword [ebp - 0xf0]
cmp edx, dword [ebp - 0x40]
jle 0x55aaa8
mov dword [ebp - 4], 0x128
mov eax, 4
sub eax, 1
mov ecx, dword [0x5ae958]
movsx edx, word [ecx + eax*2]
test edx, edx
je 0x55aa68
mov dword [ebp - 4], 0x129
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x58]
push ecx
lea edx, [ebp - 0x268]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x12a
mov eax, dword [ebp - 0x58]
push eax
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x268]
push edx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x12b
mov eax, dword [ebp - 0xa0]
push eax
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x268]
push edx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x12c
lea eax, [ebp - 0xb4]
push eax
mov ecx, dword [ebp - 0x268]
push ecx
call fcn.004d0ff0
mov dword [ebp - 4], 0x12d
push 0
lea edx, [ebp - 0x268]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x12f
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 4], 0x130
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x5c
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x7c8]
jmp 0x55af18
mov dword [ebp - 4], 0x133
cmp dword [ebp - 0xb8], 0
jle 0x55ac22
mov dword [ebp - 4], 0x134
mov edx, dword [ebp - 0xb8]
cmp edx, dword [ebp - 0x80]
jle 0x55ac22
mov dword [ebp - 4], 0x135
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x40]
jl 0x55ac22
mov dword [ebp - 4], 0x136
mov ecx, 4
sub ecx, 1
mov edx, dword [0x5ae958]
movsx eax, word [edx + ecx*2]
test eax, eax
je 0x55abe2
mov dword [ebp - 4], 0x137
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x58]
push edx
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x138
mov ecx, dword [ebp - 0x58]
push ecx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x26c]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x139
mov ecx, dword [ebp - 0xa0]
push ecx
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x26c]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x13a
lea ecx, [ebp - 0xb4]
push ecx
mov edx, dword [ebp - 0x26c]
push edx
call fcn.004d0ff0
mov dword [ebp - 4], 0x13b
push 0
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x13d
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 4], 0x13e
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
add eax, 0x5c
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x58
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x7c8]
mov dword [ebp - 4], 0x142
cmp dword [ebp - 0xf0], 0
jle 0x55ad96
mov dword [ebp - 4], 0x143
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x40]
jle 0x55ad96
mov dword [ebp - 4], 0x144
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [ebp - 0x80]
jl 0x55ad96
mov dword [ebp - 4], 0x145
mov edx, 4
sub edx, 1
mov eax, dword [0x5ae958]
movsx ecx, word [eax + edx*2]
test ecx, ecx
je 0x55ad56
mov dword [ebp - 4], 0x146
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x58]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x147
mov edx, dword [ebp - 0x58]
push edx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x270]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x148
mov edx, dword [ebp - 0xa0]
push edx
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x270]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x149
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0x270]
push eax
call fcn.004d0ff0
mov dword [ebp - 4], 0x14a
push 0
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x14c
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0xf0], edx
mov dword [ebp - 4], 0x14d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x5c
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
add eax, 0x58
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x7c8]
jmp 0x55af18
mov dword [ebp - 4], 0x152
mov dword [ebp - 0x210], 0
mov ecx, dword [0x5aea60]
mov edx, 0x124
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
push edx
mov ax, word [ebp - 0xe8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x210]
push edx
push 0
push 0x3c
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [0x5ae520]
push ecx
call fcn.004b9d70
mov dword [ebp - 0x190], 0x80020004
mov dword [ebp - 0x198], 0xa
mov dword [ebp - 0x180], 0x80020004
mov dword [ebp - 0x188], 0xa
mov edx, dword [0x5aea60]
push edx
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0xf4]
mov edx, 0x116
sub edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc]
lea edx, [ecx + edx*4]
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1d8], 0x4008
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x108], 0
mov ecx, dword [ebp - 0x340]
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x178], 8
lea edx, [ebp - 0x198]
push edx
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
push 0x30
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0x178]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x156
jmp 0x559b52
mov dword [ebp - 4], 0x15a
jmp 0x5597ff
mov dword [ebp - 4], 0x15b
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55af62
mov dword [ebp - 4], 0x15c
call fcn.005aa740
mov dword [ebp - 4], 0x15e
jmp 0x559777
mov dword [ebp - 4], 0x15f
cmp dword [0x5aeb20], 0
jne 0x55af9a
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x46c], 0x5aeb20
jmp 0x55afa4
mov dword [ebp - 0x46c], 0x5aeb20
mov eax, dword [ebp - 0x46c]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
mov edx, dword [ebp - 0x48]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x54]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55affc
push 0x54
push 0x4270a0
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x470], eax
jmp 0x55b006
mov dword [ebp - 0x470], 0
mov dword [ebp - 4], 0x160
mov edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0xf0]
jne 0x55bcc1
mov dword [ebp - 4], 0x161
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xb8]
jne 0x55bcb3
mov dword [ebp - 4], 0x162
mov ecx, dword [ebp - 0x6c]
add ecx, 1
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 4], 0x163
cmp dword [ebp - 0x6c], 3
jne 0x55bcb1
mov dword [ebp - 4], 0x164
movsx edx, word [ebp - 0xe8]
test edx, edx
jne 0x55b22a
mov dword [ebp - 4], 0x165
mov word [ebp - 0xe8], 1
mov dword [ebp - 4], 0x166
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0x167
mov eax, 1
sub eax, 1
mov ecx, dword [0x5ae958]
movsx edx, word [ecx + eax*2]
test edx, edx
je 0x55b225
mov dword [ebp - 4], 0x168
movsx eax, word [0x5ae90c]
test eax, eax
jne 0x55b225
mov dword [ebp - 4], 0x169
mov ecx, dword [0x5ae524]
push ecx
lea edx, [ebp - 0x274]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x16a
mov eax, dword [ebp - 0x274]
push eax
call fcn.004d0fb0
mov dword [ebp - 4], 0x16b
mov ecx, dword [0x5aea60]
push ecx
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xf4]
mov ecx, 0x125
sub ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 0xc]
lea ecx, [eax + ecx*4]
push ecx
mov edx, dword [ebp - 0x274]
push edx
call fcn.004d0730
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x16c
lea ecx, [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x274]
push edx
call fcn.004d0730
mov dword [ebp - 4], 0x16d
cmp dword [0x5aeb84], 0
jne 0x55b181
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x474], 0x5aeb84
jmp 0x55b18b
mov dword [ebp - 0x474], 0x5aeb84
mov eax, dword [ebp - 0x474]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x274]
push eax
call fcn.004d1030
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55b1f9
push 0x54
push 0x427638
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x478], eax
jmp 0x55b203
mov dword [ebp - 0x478], 0
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x16e
push 0
lea ecx, [ebp - 0x274]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
jmp 0x55bcb1
mov dword [ebp - 4], 0x171
movsx edx, word [ebp - 0xe8]
cmp edx, 1
jne 0x55b3ff
mov dword [ebp - 4], 0x172
mov word [ebp - 0xe8], 2
mov dword [ebp - 4], 0x173
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0x174
mov eax, 1
sub eax, 1
mov ecx, dword [0x5ae958]
movsx edx, word [ecx + eax*2]
test edx, edx
je 0x55b3fa
mov dword [ebp - 4], 0x175
movsx eax, word [0x5ae90c]
test eax, eax
jne 0x55b3fa
mov dword [ebp - 4], 0x176
mov ecx, dword [0x5ae524]
push ecx
lea edx, [ebp - 0x278]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x177
mov eax, dword [ebp - 0x278]
push eax
call fcn.004d0fb0
mov dword [ebp - 4], 0x178
mov ecx, dword [0x5aea60]
push ecx
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xf4]
mov ecx, 0x127
sub ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 0xc]
lea ecx, [eax + ecx*4]
push ecx
mov edx, dword [ebp - 0x278]
push edx
call fcn.004d0730
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x179
lea ecx, [ebp - 0x54]
push ecx
mov edx, dword [ebp - 0x278]
push edx
call fcn.004d0730
mov dword [ebp - 4], 0x17a
cmp dword [0x5aeb84], 0
jne 0x55b356
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x47c], 0x5aeb84
jmp 0x55b360
mov dword [ebp - 0x47c], 0x5aeb84
mov eax, dword [ebp - 0x47c]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x278]
push eax
call fcn.004d1030
mov ecx, dword [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x54]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55b3ce
push 0x54
push 0x427638
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x480], eax
jmp 0x55b3d8
mov dword [ebp - 0x480], 0
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x17b
push 0
lea ecx, [ebp - 0x278]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
jmp 0x55bcb1
mov dword [ebp - 4], 0x17e
cmp dword [0x5aeb20], 0
jne 0x55b42b
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x484], 0x5aeb20
jmp 0x55b435
mov dword [ebp - 0x484], 0x5aeb20
push 0
push 0
mov edx, dword [ebp - 0x484]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x32c]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
neg eax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x22c], ax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x22c]
test ecx, ecx
je 0x55bcb1
mov dword [ebp - 4], 0x17f
movsx edx, word [ebp - 0xdc]
test edx, edx
jne 0x55bcb1
mov dword [ebp - 4], 0x180
movsx eax, word [ebp - 0xe8]
cmp eax, 2
jne 0x55bcb1
mov dword [ebp - 4], 0x181
mov word [ebp - 0x60], 0xffff
mov dword [ebp - 4], 0x182
mov ecx, 4
sub ecx, 1
mov edx, dword [0x5ae958]
movsx eax, word [edx + ecx*2]
test eax, eax
je 0x55b66d
mov dword [ebp - 4], 0x183
mov ecx, dword [ebp - 0xb4]
push ecx
mov dx, word [ebp - 0x4c]
push edx
push 0x4296c0
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0xc
mov dword [ebp - 4], 0x184
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x58]
push ecx
lea edx, [ebp - 0x27c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x185
mov eax, dword [ebp - 0x27c]
push eax
call fcn.004d0fb0
mov dword [ebp - 4], 0x186
mov ecx, dword [0x5ae3f0]
push ecx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x187
mov ecx, dword [0x5aea60]
mov edx, 0x129
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
push edx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x188
mov edx, dword [0x5ae3f0]
push edx
push 0x427928
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x189
lea edx, [ebp - 0xb4]
push edx
mov eax, dword [ebp - 0x27c]
push eax
call fcn.004d0ff0
mov dword [ebp - 4], 0x18a
push 0
lea ecx, [ebp - 0x27c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x18c
mov edx, 1
sub edx, 1
mov eax, dword [0x5ae958]
movsx ecx, word [eax + edx*2]
test ecx, ecx
je 0x55bb2b
mov dword [ebp - 4], 0x18d
movsx edx, word [0x5ae90c]
test edx, edx
jne 0x55bb2b
mov dword [ebp - 4], 0x18e
push 0x12
call dword [sym.imp.MSVBVM60.DLL_rtcSpaceBstr]
mov edx, eax
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x18f
mov dword [ebp - 0x1d0], 0x422fd4
mov dword [ebp - 0x1d8], 8
lea edx, [ebp - 0x1d8]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x34]
push eax
push 4
push 0x3fffffff
lea ecx, [ebp - 0x178]
push ecx
push 7
call dword [sym.imp.MSVBVM60.DLL_rtcStringBstr]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x190
lea edx, [ebp - 0x100]
push edx
push 0x42e10c
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x730]
lea eax, [ebp - 0x34]
push eax
push 3
push 0x3fffffff
mov ecx, dword [ebp - 0x100]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x191
lea edx, [ebp - 0x34]
push edx
push 0xb
push 0x3fffffff
push 0x42e118
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaMidStmtBstr]
mov dword [ebp - 4], 0x192
cmp dword [0x5aeb84], 0
jne 0x55b7c6
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x488], 0x5aeb84
jmp 0x55b7d0
mov dword [ebp - 0x488], 0x5aeb84
mov eax, dword [ebp - 0x488]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
lea edx, [ebp - 0x210]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x58]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55b82b
push 0x58
push 0x427638
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x48c], eax
jmp 0x55b835
mov dword [ebp - 0x48c], 0
mov edx, dword [ebp - 0x210]
push edx
call fcn.004239f4
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x193
cmp dword [0x5aeb84], 0
jne 0x55b873
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x490], 0x5aeb84
jmp 0x55b87d
mov dword [ebp - 0x490], 0x5aeb84
mov eax, dword [ebp - 0x490]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x490]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x2fc]
push eax
lea eax, [ebp - 0x280]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 4], 0x194
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x50]
push eax
mov ecx, dword [ebp - 0x280]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x280]
push eax
call dword [edx + 0x1ec]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55b947
push 0x1ec
push 0x426e78
mov ecx, dword [ebp - 0x280]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x494], eax
jmp 0x55b951
mov dword [ebp - 0x494], 0
mov dword [ebp - 4], 0x195
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x34]
push eax
mov ecx, dword [ebp - 0x280]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x280]
push eax
call dword [edx + 0x1ec]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55b9eb
push 0x1ec
push 0x426e78
mov ecx, dword [ebp - 0x280]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x498], eax
jmp 0x55b9f5
mov dword [ebp - 0x498], 0
mov dword [ebp - 4], 0x196
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x50]
push edx
mov eax, dword [ebp - 0x280]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x280]
push edx
call dword [ecx + 0x1ec]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55ba98
push 0x1ec
push 0x426e78
mov eax, dword [ebp - 0x280]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x49c], eax
jmp 0x55baa2
mov dword [ebp - 0x49c], 0
mov dword [ebp - 4], 0x197
push 0xffffffffffffffff
mov edx, dword [ebp - 0x280]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x280]
push ecx
call dword [eax + 0xe4]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55baf7
push 0xe4
push 0x426e78
mov edx, dword [ebp - 0x280]
push edx
mov eax, dword [ebp - 0x22c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4a0], eax
jmp 0x55bb01
mov dword [ebp - 0x4a0], 0
mov dword [ebp - 4], 0x198
push 0
lea ecx, [ebp - 0x280]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x199
push 0
call fcn.004239f4
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov dword [ebp - 4], 0x19c
mov word [ebp - 0xe8], 0
mov dword [ebp - 4], 0x19d
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0x19e
mov word [ebp - 0xdc], 0xffff
mov dword [ebp - 4], 0x19f
mov edx, 1
sub edx, 1
mov eax, dword [0x5ae958]
movsx ecx, word [eax + edx*2]
test ecx, ecx
je 0x55bcb1
mov dword [ebp - 4], 0x1a0
movsx edx, word [0x5ae90c]
test edx, edx
jne 0x55bcb1
mov dword [ebp - 4], 0x1a1
movsx eax, word [ebp - 0xdc]
test eax, eax
je 0x55bbcc
mov dword [ebp - 4], 0x1a2
mov ecx, dword [0x5aea60]
mov edx, 0x12c
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x55bbde
mov dword [ebp - 4], 0x1a4
xor edx, edx
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x1a6
cmp dword [0x5aeb84], 0
jne 0x55bc0a
push 0x5aeb84
push 0x41022c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4a4], 0x5aeb84
jmp 0x55bc14
mov dword [ebp - 0x4a4], 0x5aeb84
mov edx, dword [ebp - 0x4a4]
mov eax, dword [edx]
mov dword [ebp - 0x22c], eax
mov ecx, dword [0x5aea60]
mov edx, 0x12b
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
push edx
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x54]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55bc9b
push 0x54
push 0x427638
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4a8], eax
jmp 0x55bca5
mov dword [ebp - 0x4a8], 0
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
jmp 0x55bcc1
mov dword [ebp - 4], 0x1ae
mov dword [ebp - 0x6c], 0
mov dword [ebp - 4], 0x1b1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 0x1b2
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0xa8], ecx
mov dword [ebp - 4], 0x1b3
mov edx, dword [ebp + 8]
movsx eax, word [edx + 0x44]
test eax, eax
jne 0x55bd25
mov dword [ebp - 4], 0x1b4
push 0x1b
call fcn.0042452c
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
xor ecx, ecx
cmp dword [ebp - 0x210], 0
setne cl
neg ecx
mov edx, dword [ebp + 8]
mov word [edx + 0x44], cx
mov dword [ebp - 4], 0x1b6
call fcn.004a7de0
mov ecx, dword [ebp + 8]
cmp eax, dword [ecx + 0x38]
jl 0x55bd72
mov dword [ebp - 4], 0x1b7
call fcn.005aa740
mov dword [ebp - 4], 0x1b8
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0xb44]
mov dword [ebp - 4], 0x1b9
call fcn.004a7de0
add eax, 0x3e8
mov edx, dword [ebp + 8]
mov dword [edx + 0x38], eax
mov dword [ebp - 4], 0x1bb
mov eax, dword [ebp + 8]
movsx ecx, word [eax + 0x44]
test ecx, ecx
je 0x55bee1
mov dword [ebp - 4], 0x1bc
cmp dword [0x5aeb20], 0
jne 0x55bdb4
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4ac], 0x5aeb20
jmp 0x55bdbe
mov dword [ebp - 0x4ac], 0x5aeb20
push 0
push 0x68030027
mov edx, dword [ebp - 0x4ac]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4ac]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x314]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
movsx ecx, ax
mov dword [ebp - 0xac], ecx
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1bd
mov word [ebp - 0x1d0], 0
mov dword [ebp - 0x1d8], 2
cmp dword [0x5aeb20], 0
jne 0x55be64
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4b0], 0x5aeb20
jmp 0x55be6e
mov dword [ebp - 0x4b0], 0x5aeb20
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x1d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [edx + 0xc], ecx
push 0x68030027
mov edx, dword [ebp - 0x4b0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x4b0]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x314]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
jmp 0x55c0d7
mov dword [ebp - 4], 0x1bf
movsx eax, word [0x5ae90c]
test eax, eax
jne 0x55c0d7
mov dword [ebp - 4], 0x1c0
call fcn.004a7de0
cdq
mov ecx, 0xa
idiv ecx
test edx, edx
jne 0x55c0d7
mov dword [ebp - 4], 0x1c1
lea edx, [ebp - 0x210]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x8d8]
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1d8], 3
cmp dword [0x5aeb20], 0
jne 0x55bf6b
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4b4], 0x5aeb20
jmp 0x55bf75
mov dword [ebp - 0x4b4], 0x5aeb20
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
push 0x6803001a
mov ecx, dword [ebp - 0x4b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4b4]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x314]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1c2
mov dword [ebp - 0x170], 0x80020004
mov dword [ebp - 0x178], 0xa
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRandomNext]
fmul dword [0x4019e8]
fadd dword [0x4019e4]
call dword [sym.imp.MSVBVM60.DLL___vbaR8FixI2]
mov word [ebp - 0x1e0], ax
mov dword [ebp - 0x1e8], 2
cmp dword [0x5aeb20], 0
jne 0x55c053
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4b8], 0x5aeb20
jmp 0x55c05d
mov dword [ebp - 0x4b8], 0x5aeb20
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1e8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1e4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1e0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1dc]
mov dword [eax + 0xc], edx
push 0x68030026
mov eax, dword [ebp - 0x4b8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x4b8]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x314]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1c6
call fcn.004a7de0
mov dword [ebp - 0x98], eax
mov dword [ebp - 4], 0x1c7
mov ecx, dword [ebp + 8]
mov dx, word [ecx + 0x44]
mov word [ebp - 0x2b8], dx
movsx eax, word [ebp - 0x2b8]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x4bc], 0xffffffff
je 0x55c11e
jmp 0x55c6a5
mov dword [ebp - 4], 0x1c9
mov ecx, dword [ebp + 8]
mov word [ecx + 0x44], 0
mov dword [ebp - 4], 0x1ca
lea edx, [ebp - 0x20c]
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x1b8]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55c17f
push 0x1b8
push 0x425f9c
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4c0], eax
jmp 0x55c189
mov dword [ebp - 0x4c0], 0
movsx edx, word [ebp - 0x20c]
test edx, edx
jne 0x55c28c
mov dword [ebp - 4], 0x1cb
push 0
call fcn.005aa2c0
mov dword [ebp - 4], 0x1cc
cmp dword [0x5b0c30], 0
jne 0x55c1d2
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4c4], 0x5b0c30
jmp 0x55c1dc
mov dword [ebp - 0x4c4], 0x5b0c30
mov eax, dword [ebp - 0x4c4]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
cmp dword [0x5aec98], 0
jne 0x55c20f
push 0x5aec98
push 0x40e6cc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4c8], 0x5aec98
jmp 0x55c219
mov dword [ebp - 0x4c8], 0x5aec98
mov edx, dword [ebp - 0x4c8]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x10]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55c276
push 0x10
push 0x4255cc
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4cc], eax
jmp 0x55c280
mov dword [ebp - 0x4cc], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1ce
push 0x64
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0xb10]
mov dword [ebp - 4], 0x1cf
mov dword [ebp - 0x210], 0
mov edx, 0x422ebc
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x422eac
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov ecx, dword [0x5aea60]
push ecx
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x210]
push ecx
push 0x7fffffff
push 1
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0xf4]
mov edx, 0x12d
sub edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc]
lea edx, [ecx + edx*4]
push edx
mov eax, dword [0x5ae51c]
push eax
call fcn.004b93a0
lea ecx, [ebp - 0xf4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x190], 0x80020004
mov dword [ebp - 0x198], 0xa
mov dword [ebp - 0x180], 0x80020004
mov dword [ebp - 0x188], 0xa
mov edx, dword [0x5aea60]
push edx
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0xf8]
mov edx, 0x116
sub edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 0xc]
lea edx, [ecx + edx*4]
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1d8], 0x4008
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x108], 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x178], 8
lea edx, [ebp - 0x198]
push edx
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x1d8]
push ecx
push 0x24
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
mov dword [ebp - 0x214], eax
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x308], ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x198]
push ecx
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov ecx, dword [ebp - 0x308]
mov dword [ebp - 0x4d0], ecx
cmp dword [ebp - 0x4d0], 6
je 0x55c46e
jmp 0x55c598
mov dword [ebp - 4], 0x1d1
movsx edx, word [0x5ae90e]
sub edx, 1
neg edx
sbb edx, edx
inc edx
neg edx
movsx eax, dx
imul eax, eax, 0xfffffffe
mov word [0x5ae90e], ax
mov dword [ebp - 4], 0x1d2
mov dword [ebp - 0x6c], 4
mov dword [ebp - 4], 0x1d3
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0xb18]
mov dword [ebp - 4], 0x1d4
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d8], 0xb
cmp dword [0x5aeb20], 0
jne 0x55c4f6
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4d4], 0x5aeb20
jmp 0x55c500
mov dword [ebp - 0x4d4], 0x5aeb20
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
push 0x68030028
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x314]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1d5
push 0x1b
call fcn.0042452c
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55c593
jmp 0x55c56e
jmp 0x55c6a5
mov dword [ebp - 4], 0x1d8
call fcn.004a7de0
mov edx, dword [ebp + 8]
mov ecx, dword [ebp - 0x98]
sub ecx, dword [edx + 0x190]
sub eax, ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x190], eax
mov dword [ebp - 4], 0x1d9
mov ax, word [ebp - 0xac]
mov word [ebp - 0x1d0], ax
mov dword [ebp - 0x1d8], 2
cmp dword [0x5aeb20], 0
jne 0x55c602
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4d8], 0x5aeb20
jmp 0x55c60c
mov dword [ebp - 0x4d8], 0x5aeb20
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
push 0x68030027
mov ecx, dword [ebp - 0x4d8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x314]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1da
mov word [0x5ae560], 0
mov dword [ebp - 4], 0x1db
push 0x3e8
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0xb10]
mov dword [ebp - 4], 0x1de
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55c6d7
mov dword [ebp - 4], 0x1df
call fcn.005aa740
mov dword [ebp - 4], 0x1e1
mov edx, dword [ebp + 8]
mov eax, dword [ebp - 0x98]
sub eax, dword [edx + 0x190]
cdq
mov ecx, 0x3e8
idiv ecx
xor edx, edx
cmp eax, dword [ebp - 0xa4]
setg dl
neg edx
mov word [ebp - 0x2bc], dx
movsx eax, word [ebp - 0x2bc]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x4dc], 0xffffffff
je 0x55c729
jmp 0x55c84f
mov dword [ebp - 4], 0x1e3
movsx ecx, word [0x5ae90e]
cmp ecx, 1
je 0x55c841
mov dword [ebp - 4], 0x1e4
mov dword [ebp - 0x180], 0x80020004
mov dword [ebp - 0x188], 0xa
mov dword [ebp - 0x170], 0x80020004
mov dword [ebp - 0x178], 0xa
mov edx, dword [0x5aea60]
push edx
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0xf8]
mov edx, 0x116
sub edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [eax + 0xc]
lea edx, [ecx + edx*4]
mov dword [ebp - 0x1e0], edx
mov dword [ebp - 0x1e8], 0x4008
mov eax, dword [0x5aea60]
push eax
lea ecx, [ebp - 0xf4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, dword [ebp - 0xf4]
mov eax, 0x130
sub eax, dword [edx + 0x14]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax*4]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1d8], 0x4008
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0x178]
push edx
lea eax, [ebp - 0x1e8]
push eax
push 0x40
lea ecx, [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0x178]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x1e6
mov dword [ebp - 0x6c], 4
mov dword [ebp - 4], 0x1e8
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x4f0]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea ecx, [ebp - 0x164]
push ecx
push 0
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55c8c8
push 0x40
push 0x4274f8
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4e0], eax
jmp 0x55c8d2
mov dword [ebp - 0x4e0], 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x348], ecx
mov dword [ebp - 0x164], 0
mov edx, dword [ebp - 0x348]
push edx
lea eax, [ebp - 0x284]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1e9
push 0
push 8
mov ecx, dword [ebp - 0x284]
push ecx
lea edx, [ebp - 0x178]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1ea
push 0
push 9
mov eax, dword [ebp - 0x284]
push eax
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x64], eax
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1eb
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d8], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x1d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [edx + 0xc], ecx
push 0x19
mov edx, dword [ebp - 0x284]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x1ec
push 0
lea eax, [ebp - 0x284]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x1ed
cmp dword [ebp - 0x6c], 3
jle 0x55cc83
mov dword [ebp - 4], 0x1ee
mov word [ebp - 0x20c], 0xffff
lea ecx, [ebp - 0x100]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 0x5ae494
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x7c4]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x34c]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x1ef
cmp dword [0x5b0c30], 0
jne 0x55ca7e
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4e4], 0x5b0c30
jmp 0x55ca88
mov dword [ebp - 0x4e4], 0x5b0c30
mov ecx, dword [ebp - 0x4e4]
mov edx, dword [ecx]
mov dword [ebp - 0x22c], edx
cmp dword [0x5aeb20], 0
jne 0x55cabb
push 0x5aeb20
push 0x4150bc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4e8], 0x5aeb20
jmp 0x55cac5
mov dword [ebp - 0x4e8], 0x5aeb20
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
push ecx
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x10]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55cb22
push 0x10
push 0x4255cc
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4ec], eax
jmp 0x55cb2c
mov dword [ebp - 0x4ec], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1f0
movsx edx, word [ebp - 0x50]
test edx, edx
je 0x55cc51
mov dword [ebp - 4], 0x1f1
cmp dword [0x5b0c30], 0
jne 0x55cb77
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4f0], 0x5b0c30
jmp 0x55cb81
mov dword [ebp - 0x4f0], 0x5b0c30
mov eax, dword [ebp - 0x4f0]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
cmp dword [0x5aeb70], 0
jne 0x55cbb4
push 0x5aeb70
push 0x40dce4
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x4f4], 0x5aeb70
jmp 0x55cbbe
mov dword [ebp - 0x4f4], 0x5aeb70
mov edx, dword [ebp - 0x4f4]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x10]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55cc1b
push 0x10
push 0x4255cc
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4f8], eax
jmp 0x55cc25
mov dword [ebp - 0x4f8], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1f2
push 0x4275f0
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
push 0x5aeb70
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 4], 0x1f4
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55cc83
mov dword [ebp - 4], 0x1f5
call fcn.005aa740
mov dword [ebp - 4], 0x1f8
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x4f0]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
lea edx, [ebp - 0x164]
push edx
push 0
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x40]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55ccfc
push 0x40
push 0x4274f8
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x4fc], eax
jmp 0x55cd06
mov dword [ebp - 0x4fc], 0
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x350], edx
mov dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x350]
push eax
lea ecx, [ebp - 0x288]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x1f9
lea edx, [ebp - 0xbc]
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1d8], 0x4003
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
push 8
mov eax, dword [ebp - 0x288]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x1fa
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x1d0], ecx
mov dword [ebp - 0x1d8], 0x4003
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x1d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [edx + 0xc], ecx
push 9
mov edx, dword [ebp - 0x288]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x1fb
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x1d8], 0xb
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x1d8]
mov dword [eax], ecx
mov edx, dword [ebp - 0x1d4]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x1d0]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x1cc]
mov dword [eax + 0xc], edx
push 0x19
mov eax, dword [ebp - 0x288]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
mov dword [ebp - 4], 0x1fc
push 0
lea ecx, [ebp - 0x288]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x1fd
movsx edx, word [0x5ae92a]
mov dword [ebp - 0x310], edx
mov dword [ebp - 0x30c], 1
mov dword [ebp - 0x84], 1
jmp 0x55ce9a
mov eax, dword [ebp - 0x84]
add eax, dword [ebp - 0x30c]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x310]
jg 0x55d092
mov dword [ebp - 4], 0x1fe
mov edx, dword [ebp - 0x84]
push edx
push 0xffffffffffffffff
push 0x28
push 1
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
call fcn.004feff0
mov dword [ebp - 4], 0x1ff
mov dword [ebp - 0xc4], 1
mov dword [ebp - 4], 0x200
mov dword [ebp - 0x318], 0x28
mov dword [ebp - 0x314], 1
mov dword [ebp - 0xe4], 1
jmp 0x55cf1c
mov edx, dword [ebp - 0xe4]
add edx, dword [ebp - 0x314]
mov dword [ebp - 0xe4], edx
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x318]
jg 0x55d086
mov dword [ebp - 4], 0x201
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
mov ecx, dword [edx + 0x58]
mov edx, dword [ebp - 0xe4]
sub edx, dword [ecx + 0x1c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0x3d4]
mov ecx, dword [ecx + 0x58]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0x3d4]
mov esi, dword [esi + 0x58]
mov edi, dword [ebp - 0x84]
sub edi, dword [esi + 0x14]
mov ecx, dword [ecx + 0x18]
imul ecx, edi
add edx, ecx
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
cmp eax, dword [ebp - 0xb0]
jle 0x55d07a
mov dword [ebp - 4], 0x202
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x3d4]
mov ecx, dword [eax + 0x58]
push ecx
lea edx, [ebp - 0xf8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov edx, dword [ecx + 0x58]
push edx
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xc4]
sub edx, dword [ecx + 0x1c]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x84]
sub ecx, dword [eax + 0x14]
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax + 0x18]
imul eax, ecx
add edx, eax
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ecx + 0xc]
lea ecx, [eax + edx*4]
push ecx
mov edx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xe4]
sub eax, dword [edx + 0x1c]
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x84]
sub edx, dword [ecx + 0x14]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx + 0x18]
imul ecx, edx
add eax, ecx
mov edx, dword [ebp - 0xf4]
mov ecx, dword [edx + 0xc]
lea edx, [ecx + eax*4]
push edx
call fcn.004ffae0
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0xf8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x203
mov edx, dword [ebp - 0xc4]
add edx, 1
mov dword [ebp - 0xc4], edx
mov dword [ebp - 4], 0x205
jmp 0x55cf0a
mov dword [ebp - 4], 0x206
jmp 0x55ce88
mov dword [ebp - 4], 0x207
cmp dword [ebp - 0x6c], 3
jle 0x558a2b
mov dword [ebp - 4], 0x208
cmp dword [0x5b0c30], 0
jne 0x55d0cf
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x500], 0x5b0c30
jmp 0x55d0d9
mov dword [ebp - 0x500], 0x5b0c30
mov eax, dword [ebp - 0x500]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
cmp dword [0x5aeb98], 0
jne 0x55d10c
push 0x5aeb98
push 0x410624
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x504], 0x5aeb98
jmp 0x55d116
mov dword [ebp - 0x504], 0x5aeb98
mov edx, dword [ebp - 0x504]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
push eax
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x10]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55d173
push 0x10
push 0x4255cc
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x508], eax
jmp 0x55d17d
mov dword [ebp - 0x508], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x209
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x2ac]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55d216
push 0x2ac
push 0x425f9c
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x50c], eax
jmp 0x55d220
mov dword [ebp - 0x50c], 0
mov dword [ebp - 4], 0x20a
movsx eax, word [0x5ae90e]
test eax, eax
jne 0x55d547
mov dword [ebp - 4], 0x20b
cmp dword [0x5aeb98], 0
jne 0x55d262
push 0x5aeb98
push 0x410624
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x510], 0x5aeb98
jmp 0x55d26c
mov dword [ebp - 0x510], 0x5aeb98
mov ecx, dword [ebp - 0x510]
mov edx, dword [ecx]
push edx
lea eax, [ebp - 0x28c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x20c
mov dword [ebp - 0x1e0], 0x80020004
mov dword [ebp - 0x1e8], 0xa
mov dword [ebp - 0x1d0], 0x80020004
mov dword [ebp - 0x1d8], 0xa
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1e8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1e4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1e0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1dc]
mov dword [ecx + 0xc], eax
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x1d8]
mov dword [ecx], edx
mov eax, dword [ebp - 0x1d4]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x1d0]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x1cc]
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x28c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x28c]
push eax
call dword [edx + 0x2b0]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55d35b
push 0x2b0
push 0x427698
mov ecx, dword [ebp - 0x28c]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x514], eax
jmp 0x55d365
mov dword [ebp - 0x514], 0
mov dword [ebp - 4], 0x20d
mov eax, dword [ebp - 0x28c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x28c]
push edx
call dword [ecx + 0x2a8]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55d3b8
push 0x2a8
push 0x427698
mov eax, dword [ebp - 0x28c]
push eax
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x518], eax
jmp 0x55d3c2
mov dword [ebp - 0x518], 0
mov dword [ebp - 4], 0x20e
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55d3f4
mov dword [ebp - 4], 0x20f
call fcn.005aa740
mov dword [ebp - 4], 0x211
mov dword [ebp - 0x1d0], 0x42700000
mov dword [ebp - 0x1d8], 4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x1d8]
mov dword [edx], eax
mov ecx, dword [ebp - 0x1d4]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x1d0]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x1cc]
mov dword [edx + 0xc], ecx
push 0x80010003
mov edx, dword [ebp - 0x28c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x28c]
push ecx
call dword [eax + 0x30c]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x212
mov dword [ebp - 0x210], 0x66
lea eax, [ebp - 0x210]
push eax
mov ecx, dword [ebp - 0x28c]
push ecx
call fcn.004d9670
mov dword [ebp - 4], 0x213
mov edx, dword [ebp - 0x28c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x28c]
push ecx
call dword [eax + 0x2a0]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55d4f0
push 0x2a0
push 0x427698
mov edx, dword [ebp - 0x28c]
push edx
mov eax, dword [ebp - 0x22c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x51c], eax
jmp 0x55d4fa
mov dword [ebp - 0x51c], 0
mov dword [ebp - 4], 0x214
push 0
lea ecx, [ebp - 0x28c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x215
mov word [ebp - 0x20c], 0
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x3d4]
add edx, 0x58
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0xad4]
mov dword [ebp - 4], 0x217
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x30c]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
push 0xea60
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x64]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55d5bc
push 0x64
push 0x42a648
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x520], eax
jmp 0x55d5c6
mov dword [ebp - 0x520], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x218
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x30c]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
push 0xffffffffffffffff
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x5c]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55d644
push 0x5c
push 0x42a648
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x524], eax
jmp 0x55d64e
mov dword [ebp - 0x524], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x219
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
jmp 0x55d9b0
mov dword [ebp - 4], 0x22f
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
jne 0x55d9da
mov dword [ebp - 4], 0x230
mov edx, 0x427bac
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x232
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
jne 0x55da04
mov dword [ebp - 4], 0x233
mov edx, 0x42e140
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x235
lea edx, [ebp - 0x3c]
push edx
call fcn.004dd740
fstp qword [ebp - 0x228]
mov dword [ebp - 0x1e0], 0x42e150
mov dword [ebp - 0x1e8], 8
lea edx, [ebp - 0x1e8]
lea ecx, [ebp - 0x188]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
fild dword [0x5ae494]
fdivr qword [ebp - 0x228]
fstp qword [ebp - 0x170]
mov dword [ebp - 0x178], 5
mov eax, dword [0x5aea60]
mov ecx, 0x213
sub ecx, dword [eax + 0x14]
mov edx, dword [0x5aea60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
push 1
push 1
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromFormatVar]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [ebp + 8]
add ecx, 0x14c
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea eax, [ebp - 0x188]
push eax
lea ecx, [ebp - 0x178]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x236
call fcn.004cfe20
fstp qword [ebp - 0x228]
mov edx, dword [ebp + 8]
fld qword [ebp - 0x228]
fadd qword [edx + 0x60]
mov eax, dword [ebp + 8]
fstp qword [eax + 0x60]
mov dword [ebp - 4], 0x237
mov ecx, dword [0x5ae524]
push ecx
lea edx, [ebp - 0x290]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x238
mov eax, dword [ebp - 0x290]
push eax
call fcn.004d0fb0
mov dword [ebp - 4], 0x239
mov ecx, dword [0x5aea60]
push ecx
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov eax, dword [ebp - 0xf4]
mov ecx, 0x131
sub ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 0xc]
lea ecx, [eax + ecx*4]
push ecx
mov edx, dword [ebp - 0x290]
push edx
call fcn.004d0730
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 4], 0x23a
mov ecx, dword [ebp - 0x38]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcRightTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422fc0
push 0x422eac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x290]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 4], 0x23b
lea ecx, [ebp - 0x3c]
push ecx
mov edx, dword [ebp - 0x290]
push edx
call fcn.004d0730
mov dword [ebp - 4], 0x23c
mov eax, dword [0x5aea60]
mov ecx, 0x132
sub ecx, dword [eax + 0x14]
mov edx, dword [0x5aea60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
push 0x422eac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0x290]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x23d
push 0x423044
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0x14c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422fc0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.004d0730
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x23e
push 0x422eac
mov ecx, dword [0x5aea60]
mov edx, 0x133
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x23f
mov edx, dword [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov eax, dword [0x5aea60]
mov ecx, 0x134
sub ecx, dword [eax + 0x14]
mov edx, dword [0x5aea60]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + ecx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x104]
push edx
mov eax, dword [ebp - 0x290]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x240
mov eax, dword [ebp - 0xf0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422fd4
push 0x423044
push 0x422eac
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x10c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x10c]
push ecx
mov edx, dword [ebp - 0x290]
push edx
call fcn.004d0730
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov dword [ebp - 4], 0x241
mov ecx, dword [ebp + 8]
fld qword [ecx + 0x60]
fcomp qword [0x401cd0]
fnstsw ax
test ah, 0x40
jne 0x55df9a
mov dword [ebp - 4], 0x242
mov edx, dword [0x5aea60]
mov eax, 0x241
sub eax, dword [edx + 0x14]
mov ecx, dword [0x5aea60]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax*4]
push eax
push 0x423044
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp - 0x290]
push edx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x243
mov eax, dword [ebp + 8]
add eax, 0x60
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1d8], 0x4005
push 0xfffffffffffffffe
push 0xfffffffffffffffe
push 0xfffffffffffffffe
push 0
lea ecx, [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcFormatNumber]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x423044
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422fd4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x108]
push edx
mov eax, dword [ebp - 0x290]
push eax
call fcn.004d0730
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 4], 0x245
mov ecx, 4
imul ecx, ecx, 3
mov edx, dword [0x5ae4c4]
mov eax, dword [edx + ecx]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
je 0x55e039
mov dword [ebp - 4], 0x246
push 0x422eac
mov ecx, dword [0x5aea60]
mov edx, 0x2d
sub edx, dword [ecx + 0x14]
mov eax, dword [0x5aea60]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + edx*4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.004d0730
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov dword [ebp - 4], 0x247
mov edx, 4
imul edx, edx, 3
mov eax, dword [0x5ae4c4]
add eax, edx
push eax
mov ecx, dword [ebp - 0x290]
push ecx
call fcn.004d0730
mov dword [ebp - 4], 0x249
mov edx, dword [ebp + 8]
add edx, 0x14c
push edx
mov eax, dword [ebp - 0x290]
push eax
call fcn.004d0ff0
mov dword [ebp - 4], 0x24a
push 0
lea ecx, [ebp - 0x290]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov dword [ebp - 4], 0x24b
mov dword [ebp - 0x1e0], 0x4296fc
mov dword [ebp - 0x1e8], 8
lea edx, [ebp - 0x1e8]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0xb8]
mov dword [ebp - 0x1d0], edx
mov dword [ebp - 0x1d8], 0x4003
mov dword [ebp - 0x200], 0x4296fc
mov dword [ebp - 0x208], 8
lea edx, [ebp - 0x208]
lea ecx, [ebp - 0x198]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 3
push 0x423044
push 1
push 1
lea ecx, [ebp - 0x178]
push ecx
lea edx, [ebp - 0x1d8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromFormatVar]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422fc0
push 1
push 1
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x188]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromFormatVar]
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x10c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
mov ecx, dword [ebp + 8]
add ecx, 0x150
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x110]
push edx
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x18
lea ecx, [ebp - 0x198]
push ecx
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 4], 0x24c
mov dword [ebp - 0x210], 0
xor edx, edx
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x422eac
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x210]
push edx
push 0x7fffffff
push 1
lea eax, [ebp - 0x104]
push eax
lea ecx, [ebp - 0x100]
push ecx
mov edx, dword [ebp + 8]
add edx, 0x14c
push edx
mov eax, dword [0x5ae51c]
push eax
call fcn.004b93a0
mov ecx, dword [ebp - 0x108]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00505a20
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0x100]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
mov dword [ebp - 4], 0x24d
cmp dword [0x5b0c30], 0
jne 0x55e2a4
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x538], 0x5b0c30
jmp 0x55e2ae
mov dword [ebp - 0x538], 0x5b0c30
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x14]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55e309
push 0x14
push 0x4255cc
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x53c], eax
jmp 0x55e313
mov dword [ebp - 0x53c], 0
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x234], edx
lea eax, [ebp - 0x100]
push eax
mov ecx, dword [ebp - 0x234]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x234]
push eax
call dword [edx + 0x60]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x55e36c
push 0x60
push 0x4274d4
mov ecx, dword [ebp - 0x234]
push ecx
mov edx, dword [ebp - 0x238]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x540], eax
jmp 0x55e376
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x210], 0
xor edx, edx
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x422fc0
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x210]
push ecx
push 2
push 1
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x104]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0x14c
push ecx
mov edx, dword [0x5ae51c]
push edx
call fcn.004b93a0
mov dword [ebp - 0x214], 0
mov edx, 0x422eac
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x422eac
push 0x423044
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x10c], 0
mov edx, dword [ebp - 0x354]
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x11c]
push ecx
lea edx, [ebp - 0x214]
push edx
push 0x7fffffff
push 1
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x114]
push ecx
lea edx, [ebp - 0x110]
push edx
mov eax, dword [0x5ae51c]
push eax
call fcn.004b93a0
push 0x42e164
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x188], 8
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
mov dword [ebp - 0x1d0], 0x422ebc
mov dword [ebp - 0x1d8], 8
mov dword [ebp - 0x218], 0
mov edx, 0x422ebc
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x422eac
lea ecx, [ebp - 0x124]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x358], edx
mov dword [ebp - 0x11c], 0
mov edx, dword [ebp - 0x358]
lea ecx, [ebp - 0x120]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x12c]
push eax
lea ecx, [ebp - 0x218]
push ecx
push 0x7fffffff
push 1
lea edx, [ebp - 0x128]
push edx
lea eax, [ebp - 0x124]
push eax
lea ecx, [ebp - 0x120]
push ecx
mov edx, dword [0x5ae51c]
push edx
call fcn.004b93a0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x12c], 0
mov ecx, dword [ebp - 0x35c]
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x1b8], 8
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
lea ecx, [ebp - 0x198]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea edx, [ebp - 0x1d8]
push edx
lea eax, [ebp - 0x1a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x1b8]
push ecx
lea edx, [ebp - 0x1c8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x134]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0x220], 4
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x100], 0
mov edx, dword [ebp - 0x360]
lea ecx, [ebp - 0x130]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0x21c], 0
lea ecx, [ebp - 0x134]
push ecx
lea edx, [ebp - 0x220]
push edx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call fcn.004a7f70
lea edx, [ebp - 0x134]
push edx
lea eax, [ebp - 0x130]
push eax
lea ecx, [ebp - 0x128]
push ecx
lea edx, [ebp - 0x124]
push edx
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
push 0xa
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x2c
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0x1c8]
push eax
lea ecx, [ebp - 0x1b8]
push ecx
lea edx, [ebp - 0x1a8]
push edx
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x178]
push ecx
lea edx, [ebp - 0x188]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 4], 0x24e
push 0x42a840
push 0
push 3
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x4c0]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55e76c
push 0x24
push 0x42a840
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x544], eax
jmp 0x55e776
mov dword [ebp - 0x544], 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x234], ecx
push 0
mov edx, dword [ebp - 0x234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x234]
push ecx
call dword [eax + 0x80]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x55e7d0
push 0x80
push 0x42a850
mov edx, dword [ebp - 0x234]
push edx
mov eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x548], eax
jmp 0x55e7da
mov dword [ebp - 0x548], 0
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x160]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x10
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0x178]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x24f
push 0x42a840
push 0
push 3
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x4c0]
push eax
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x178]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObjVar]
push eax
lea edx, [ebp - 0x164]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov dword [ebp - 0x180], 2
mov dword [ebp - 0x188], 2
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [ebp - 0x22c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [eax + 0x24]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55e8d4
push 0x24
push 0x42a840
mov edx, dword [ebp - 0x22c]
push edx
mov eax, dword [ebp - 0x230]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x54c], eax
jmp 0x55e8de
mov dword [ebp - 0x54c], 0
mov ecx, dword [ebp - 0x168]
mov dword [ebp - 0x234], ecx
push 0
mov edx, dword [ebp - 0x234]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x234]
push ecx
call dword [eax + 0x90]
fnclex
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jge 0x55e938
push 0x90
push 0x42a850
mov edx, dword [ebp - 0x234]
push edx
mov eax, dword [ebp - 0x238]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x550], eax
jmp 0x55e942
mov dword [ebp - 0x550], 0
lea ecx, [ebp - 0x168]
push ecx
lea edx, [ebp - 0x164]
push edx
lea eax, [ebp - 0x160]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x10
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0x178]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x250
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55e9ad
mov dword [ebp - 4], 0x251
call fcn.005aa740
mov dword [ebp - 4], 0x253
movsx eax, word [0x5ae90e]
test eax, eax
je 0x55ea76
mov dword [ebp - 4], 0x254
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 0xc8]
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0xc8]
mov eax, 1
sub eax, dword [ecx + 0x1c]
mov ecx, dword [ebp + 8]
mov ecx, dword [ecx + 0xc8]
mov esi, dword [ebp + 8]
mov esi, dword [esi + 0xc8]
mov edi, 1
sub edi, dword [esi + 0x14]
mov ecx, dword [ecx + 0x18]
imul ecx, edi
add eax, ecx
mov edx, dword [edx + 0xc]
mov eax, dword [edx + eax*4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
je 0x55ea76
mov dword [ebp - 4], 0x255
movsx ecx, word [0x5ae910]
test ecx, ecx
je 0x55ea5d
mov dword [ebp - 4], 0x256
mov word [ebp - 0x20c], 0xffff
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x70]
push eax
mov ecx, dword [ebp + 8]
add ecx, 0xc8
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0xad4]
mov dword [ebp - 4], 0x258
lea edx, [ebp - 0x20c]
push edx
push 2
mov eax, dword [ebp + 8]
push eax
call fcn.005715e0
mov dword [ebp - 4], 0x25b
movsx ecx, word [0x5ae920]
test ecx, ecx
je 0x55ead9
mov dword [ebp - 4], 0x25c
movsx edx, word [ebp - 0x24]
test edx, edx
je 0x55eac4
mov dword [ebp - 4], 0x25d
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
add ecx, 0x58
push ecx
mov edx, dword [ebp + 8]
add edx, 0xb4
push edx
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0x7c8]
mov dword [ebp - 4], 0x25f
mov eax, dword [ebp + 8]
mov cx, word [ebp - 0x24]
mov word [eax + 0xb8], cx
mov dword [ebp - 4], 0x261
mov edx, 4
sub edx, 1
mov eax, dword [0x5ae958]
movsx ecx, word [eax + edx*2]
test ecx, ecx
je 0x55f157
mov dword [ebp - 4], 0x262
movsx edx, word [ebp - 0xe0]
test edx, edx
je 0x55f157
mov dword [ebp - 4], 0x263
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
test eax, eax
je 0x55ec8d
mov dword [ebp - 4], 0x264
lea ecx, [ebp - 0x3c]
push ecx
call fcn.004dd740
fstp qword [ebp - 0x228]
mov dword [ebp - 0x1e0], 0x42e150
mov dword [ebp - 0x1e8], 8
lea edx, [ebp - 0x1e8]
lea ecx, [ebp - 0x188]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
fild dword [0x5ae494]
fdivr qword [ebp - 0x228]
fstp qword [ebp - 0x170]
mov dword [ebp - 0x178], 5
push 1
push 1
lea edx, [ebp - 0x188]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromFormatVar]
mov edx, eax
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0x210], 0x28
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x108], 0
mov edx, dword [ebp - 0x364]
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [0x5aea60]
push edx
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x210]
push ecx
lea edx, [ebp - 0x100]
push edx
mov eax, dword [ebp - 0xf4]
mov ecx, 0x213
sub ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0xf4]
mov eax, dword [edx + 0xc]
lea ecx, [eax + ecx*4]
push ecx
call fcn.005ac0e0
mov edx, eax
lea ecx, [ebp - 0x104]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xf4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov eax, dword [ebp - 0x104]
push eax
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x100]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x188]
push ecx
lea edx, [ebp - 0x178]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x55ecce
mov dword [ebp - 4], 0x266
push 0
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL_PutMem4]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55ecc4
mov ecx, dword [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheck]
mov dword [ebp - 0x554], eax
jmp 0x55ecce
mov dword [ebp - 0x554], 0
mov dword [ebp - 4], 0x268
mov word [ebp - 0x20c], 0
lea edx, [ebp - 0x104]
push edx
lea eax, [ebp - 0x20c]
push eax
push 0x5ae494
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x7c4]
mov dword [ebp - 0x210], 0x28
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x368], ecx
mov dword [ebp - 0x104], 0
mov edx, dword [ebp - 0x368]
lea ecx, [ebp - 0x10c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [0x5aea60]
mov eax, 0x131
sub eax, dword [edx + 0x14]
mov ecx, dword [0x5aea60]
mov edx, dword [ecx + 0xc]
mov edx, dword [edx + eax*4]
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x210]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x108]
push edx
call fcn.005ac0e0
mov edx, eax
lea ecx, [ebp - 0x15c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0x214], 0x28
mov eax, dword [0x5aea60]
push eax
lea ecx, [ebp - 0xf4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea edx, [ebp - 0x214]
push edx
lea eax, [ebp - 0x3c]
push eax
mov ecx, dword [ebp - 0xf4]
mov edx, 0x136
sub edx, dword [ecx + 0x14]
mov eax, dword [ebp - 0xf4]
mov ecx, dword [eax + 0xc]
lea edx, [ecx + edx*4]
push edx
call fcn.005ac0e0
mov edx, eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x218], 0x28
mov ecx, dword [ebp - 0xb8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x12c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, dword [0x5aea60]
push edx
lea eax, [ebp - 0xf8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea ecx, [ebp - 0x218]
push ecx
lea edx, [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0xf8]
mov ecx, 0x137
sub ecx, dword [eax + 0x14]
mov edx, dword [ebp - 0xf8]
mov eax, dword [edx + 0xc]
lea ecx, [eax + ecx*4]
push ecx
call fcn.005ac0e0
mov edx, eax
lea ecx, [ebp - 0x130]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0xf8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov dword [ebp - 0x21c], 0x28
mov eax, dword [ebp - 0xf0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI4]
mov edx, eax
lea ecx, [ebp - 0x13c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ecx, dword [0x5aea60]
push ecx
lea edx, [ebp - 0xfc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x13c]
push ecx
mov edx, dword [ebp - 0xfc]
mov eax, 0x138
sub eax, dword [edx + 0x14]
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ecx + 0xc]
lea eax, [edx + eax*4]
push eax
call fcn.005ac0e0
mov edx, eax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0xfc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov edx, dword [ebp - 0x15c]
mov dword [ebp - 0x36c], edx
mov dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0xb4]
push eax
push 0x422ebc
mov ecx, dword [0x5ae3f4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x100]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x114]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x36c]
lea ecx, [ebp - 0x110]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x124]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x11c]
push edx
push 0x422ebc
mov eax, dword [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x120]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x134]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, dword [ebp - 0x130]
push ecx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x138]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x144]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov edx, dword [ebp - 0x140]
push edx
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x148]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x14c]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov eax, dword [0x5ae3f4]
push eax
push 0x422ebc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x154]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x158]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov cx, word [ebp - 0x4c]
push ecx
push 0x4296c0
call dword [sym.imp.MSVBVM60.DLL___vbaPrintFile]
add esp, 0xc
lea edx, [ebp - 0x15c]
push edx
lea eax, [ebp - 0x158]
push eax
lea ecx, [ebp - 0x154]
push ecx
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0x14c]
push eax
lea ecx, [ebp - 0x148]
push ecx
lea edx, [ebp - 0x144]
push edx
lea eax, [ebp - 0x140]
push eax
lea ecx, [ebp - 0x13c]
push ecx
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x134]
push eax
lea ecx, [ebp - 0x130]
push ecx
lea edx, [ebp - 0x12c]
push edx
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x124]
push ecx
lea edx, [ebp - 0x120]
push edx
lea eax, [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x118]
push ecx
lea edx, [ebp - 0x114]
push edx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x100]
push eax
push 0x17
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x60
mov dword [ebp - 4], 0x269
mov cx, word [ebp - 0x4c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
mov dword [ebp - 4], 0x26c
push 0xffffffffffffffff
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x70c]
mov dword [ebp - 4], 0x26d
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [ebp + 8]
push ecx
call dword [eax + 0x3b8]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55f1e1
push 0x74
push 0x42724c
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x558], eax
jmp 0x55f1eb
mov dword [ebp - 0x558], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x26e
mov edx, dword [0x5aea60]
mov eax, 0x139
sub eax, dword [edx + 0x14]
mov ecx, dword [0x5aea60]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + eax*4]
push eax
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x8e0]
mov dword [ebp - 4], 0x26f
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x3b8]
push eax
lea ecx, [ebp - 0x160]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x22c], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x14c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstrB]
neg eax
sbb eax, eax
neg eax
neg eax
push eax
mov ecx, dword [ebp - 0x22c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x22c]
push eax
call dword [edx + 0x74]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55f2b1
push 0x74
push 0x42724c
mov ecx, dword [ebp - 0x22c]
push ecx
mov edx, dword [ebp - 0x230]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x55c], eax
jmp 0x55f2bb
mov dword [ebp - 0x55c], 0
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x270
push 0xed
call fcn.004246bc
mov dword [ebp - 0x210], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
cmp dword [ebp - 0x210], 0
je 0x55f2f9
mov dword [ebp - 4], 0x271
call fcn.005aa740
mov dword [ebp - 4], 0x273
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
mov edx, dword [ebp + 8]
push edx
call dword [ecx + 0xb18]
mov dword [ebp - 4], 0x274
cmp dword [0x5b0c30], 0
jne 0x55f33b
push 0x5b0c30
push 0x4255dc
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x560], 0x5b0c30
jmp 0x55f345
mov dword [ebp - 0x560], 0x5b0c30
mov eax, dword [ebp - 0x560]
mov ecx, dword [eax]
mov dword [ebp - 0x22c], ecx
lea edx, [ebp - 0x160]
push edx
mov eax, dword [ebp - 0x22c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x22c]
push edx
call dword [ecx + 0x28]
fnclex
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jge 0x55f3a0
push 0x28
push 0x4255cc
mov eax, dword [ebp - 0x22c]
push eax
mov ecx, dword [ebp - 0x230]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x564], eax
jmp 0x55f3aa
mov dword [ebp - 0x564], 0
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x1d8], 0x8003
push 0
push 0x428334
mov edx, dword [ebp - 0x160]
push edx
lea eax, [ebp - 0x178]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
add esp, 0x10
push eax
lea ecx, [ebp - 0x1d8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov word [ebp - 0x234], ax
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0x234]
test edx, edx
je 0x55f468
mov dword [ebp - 4], 0x275
push 0x4277a8
call fcn.005a4680
movsx eax, ax
test eax, eax
jne 0x55f468
mov dword [ebp - 4], 0x276
push 0x425270
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea edx, [ebp - 0x160]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea eax, [ebp - 0x160]
push eax
call fcn.005ac250
lea ecx, [ebp - 0x160]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x279
push 0
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x758]
mov dword [ebp - 4], 0x27a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx]
mov eax, dword [ebp + 8]
push eax
call dword [edx + 0x2a0]
fnclex
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jge 0x55f4ca
push 0x2a0
push 0x425f9c
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 0x22c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x568], eax
jmp 0x55f4d4
mov dword [ebp - 0x568], 0
mov dword [ebp - 4], 0x27b
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 0x3d4]
mov dx, word [ecx + 0x4a]
mov word [0x5ae910], dx
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x55f78d
jmp 0x55f630
lea eax, [ebp - 0x294]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x28c]
push edx
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x284]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x27c]
push eax
lea ecx, [ebp - 0x278]
push ecx
lea edx, [ebp - 0x274]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x26c]
push ecx
lea edx, [ebp - 0x268]
push edx
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x260]
push ecx
lea edx, [ebp - 0x25c]
push edx
lea eax, [ebp - 0x258]
push eax
lea ecx, [ebp - 0x254]
push ecx
lea edx, [ebp - 0x250]
push edx
lea eax, [ebp - 0x24c]
push eax
push 0x12
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x4c
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x48]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x5c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x70]
push ecx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0x78]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x9c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xb4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xd8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
ret