Function at 0x435f70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4022c6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x128
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x401af0
mov esi, dword [ebp + 8]
mov eax, dword [esi]
xor edi, edi
cmp eax, 0x45302c
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xcc], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0xf8], edi
je 0x436016
call dword [sym.imp.MSVBVM60.DLL___vbaFailedFriend]
mov eax, dword [esi + 0x4c]
push eax
lea ecx, [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
mov edx, dword [ebp + 0x10]
cmp word [edx], di
je 0x436787
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x54]
fnclex
cmp eax, edi
jge 0x43605e
mov ecx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
sub esp, 0x10
mov ebx, esp
push 0xffffffffffffffff
mov edx, 0xa
mov dword [ebx], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
push 0
mov ecx, 0x80020004
mov dword [ebx + 4], edx
push 8
mov dword [ebp - 0x8c], ecx
mov edi, dword [eax]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x88]
push 0x4071e4
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x34]
fnclex
test eax, eax
jge 0x4360bb
push 0x34
push 0x40a0cc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x44]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push eax
call dword [edx + 0x218]
fnclex
test eax, eax
jge 0x4360f2
mov edx, dword [esi + 0x44]
push 0x218
push 0x407ce8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
push eax
lea eax, [ebp - 0xe8]
push eax
mov dword [ebp - 0x40], 0
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0xec]
push edx
push 0x4075c0
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
test eax, eax
je 0x436528
mov eax, dword [esi + 0x44]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x218]
fnclex
test eax, eax
jge 0x43615a
mov ecx, dword [esi + 0x44]
push 0x218
push 0x407ce8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0x40a1e0
push eax
lea edx, [ebp - 0x54]
push edx
call edi
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push 1
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x40]
push 0
push ecx
lea edx, [ebp - 0x64]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUnkVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjIs]
lea ecx, [ebp - 0x40]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x54]
push ecx
push 2
call ebx
add esp, 0xc
test si, si
je 0x436201
mov edx, dword [ebp - 0x30]
push 0
push 0x40a1e0
push edx
lea eax, [ebp - 0x54]
push eax
call edi
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x436288
mov ecx, dword [ebp - 0x30]
push 0
push 0x40a1e0
push ecx
lea edx, [ebp - 0x54]
push edx
mov dword [ebp - 0x8c], 0x40a1f0
mov dword [ebp - 0x94], 8
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
add esp, 0x10
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x64]
push ecx
call esi
mov edx, dword [ebp - 0x30]
push eax
push 0
push 0x40a1f4
push edx
lea eax, [ebp - 0x74]
push eax
call edi
add esp, 0x10
push eax
lea ecx, [ebp - 0x84]
push ecx
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x54]
push edx
push 4
call ebx
add esp, 0x14
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x4362b3
mov ecx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
push eax
lea edx, [ebp - 0xf0]
push edx
mov dword [ebp - 0x40], 0
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov eax, dword [ebp - 0x30]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaCheckType]
push 0x40781c
push eax
call esi
cmp ax, 0xffff
je 0x4364fb
mov ecx, dword [ebp - 0x30]
push 0x4088f8
push ecx
call esi
cmp ax, 0xffff
je 0x4364fb
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x30]
push eax
push 0
push 0x40a200
push ecx
lea edx, [ebp - 0x54]
push edx
call edi
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUnkVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjIs]
inc ax
neg ax
lea ecx, [ebp - 0x54]
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0xc8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [ebp - 0xc8], 0
jne 0x4364fb
mov eax, dword [ebp - 0x30]
push 0x40789c
push eax
call esi
cmp ax, 0xffff
jne 0x4363a1
mov edx, dword [ebp - 0xf0]
sub esp, 0x10
mov ebx, esp
mov ecx, 0xa
mov dword [ebx], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
mov eax, 0x80020004
mov dword [ebx + 4], ecx
push 0xffffffffffffffff
mov dword [ebp - 0x8c], eax
mov esi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
push 0
mov dword [ebx + 0xc], eax
push 8
jmp 0x436488
mov eax, dword [ebp - 0x30]
push 0x4076c8
push eax
call esi
cmp ax, 0xffff
je 0x436498
mov ecx, dword [ebp - 0x30]
push 0x407520
push ecx
call esi
cmp ax, 0xffff
je 0x436498
mov edx, dword [ebp - 0x30]
push 0x408960
push edx
call esi
cmp ax, 0xffff
je 0x436498
mov eax, dword [ebp - 0x30]
push 0x407a0c
push eax
call esi
cmp ax, 0xffff
jne 0x436433
mov edx, dword [ebp - 0xf0]
sub esp, 0x10
mov ebx, esp
mov ecx, 0xa
mov dword [ebx], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
mov eax, 0x80020004
mov dword [ebx + 4], ecx
push 0xffffffffffffffff
mov dword [ebp - 0x8c], eax
mov esi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
push 0
mov dword [ebx + 0xc], eax
push 3
jmp 0x436488
mov eax, dword [ebp - 0x30]
push 0x407ab4
push eax
call esi
cmp ax, 0xffff
jne 0x4364fb
mov edx, dword [ebp - 0xf0]
sub esp, 0x10
mov ebx, esp
mov ecx, 0xa
mov dword [ebx], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
mov eax, 0x80020004
mov dword [ebx + 4], ecx
push 0xffffffffffffffff
mov dword [ebp - 0x8c], eax
mov esi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
push 0
mov dword [ebx + 0xc], eax
push 2
mov ecx, dword [ebp - 0x18]
push ecx
push edx
call dword [esi + 0x34]
fnclex
test eax, eax
jge 0x4364fb
jmp 0x4364e6
mov edx, dword [ebp - 0xf0]
sub esp, 0x10
mov ebx, esp
mov ecx, 0xa
mov dword [ebx], ecx
push 0xffffffffffffffff
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
push 0
mov dword [ebx + 4], ecx
mov ecx, dword [ebp - 0x18]
mov eax, 0x80020004
push 2
mov dword [ebp - 0x8c], eax
mov esi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
push ecx
push edx
mov dword [ebx + 0xc], eax
call dword [esi + 0x34]
fnclex
test eax, eax
jge 0x4364fb
mov edx, dword [ebp - 0xf0]
push 0x34
push 0x40a0cc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
lea eax, [ebp - 0xf0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0xec]
push edx
push 0x4075c0
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov esi, dword [ebp + 8]
jmp 0x436127
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x43655c
mov ecx, dword [ebp - 0xe4]
push 0xdc
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0xcc], 1
je 0x4365f4
mov edi, dword [ebp - 0xe4]
push 0xffffffffffffffff
push 0xffffffffffffffff
push 0xffffffffffffffff
sub esp, 0x10
mov ebx, esp
mov ecx, 0xa
mov dword [ebx], ecx
mov esi, ecx
mov ecx, dword [ebp - 0xa0]
mov dword [ebx + 4], ecx
mov eax, 0x80020004
mov dword [ebx + 8], eax
mov edx, eax
mov eax, dword [ebp - 0x98]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x90]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x8c], edx
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x94], esi
mov edi, dword [edi]
push eax
mov dword [ecx + 0xc], edx
call dword [edi + 0xa0]
fnclex
test eax, eax
jge 0x4365f4
mov ecx, dword [ebp - 0xe4]
push 0xa0
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edi, dword [ebp - 0xe4]
sub esp, 0x10
mov ebx, esp
mov ecx, 0xa
mov dword [ebx], ecx
mov esi, ecx
mov ecx, dword [ebp - 0xa0]
mov dword [ebx + 4], ecx
mov eax, 0x80020004
mov dword [ebx + 8], eax
mov edx, eax
mov eax, dword [ebp - 0x98]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x90]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], esi
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x8c], edx
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x94], esi
mov edi, dword [edi]
push eax
mov dword [ecx + 0xc], edx
call dword [edi + 0x78]
fnclex
test eax, eax
jge 0x436673
mov ecx, dword [ebp - 0xe4]
push 0x78
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x43669e
mov edx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
lea ebx, [ebp - 0x44]
push ebx
sub esp, 0x10
mov edx, 8
mov ebx, esp
mov dword [ebx], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
mov ecx, 0x4071e4
mov dword [ebx + 4], edx
mov dword [ebp - 0x8c], ecx
mov edi, dword [eax]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x88]
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4366f4
push 0x28
push 0x40a14c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp + 0xc]
mov ecx, dword [edx]
mov eax, dword [ebp - 0x44]
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov edx, 8
mov dword [ebx], edx
mov edx, dword [ebp - 0xa0]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x98]
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x38]
fnclex
test eax, eax
jge 0x43673a
push 0x38
push 0x40a15c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
mov edx, 0x406eac
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xc8], 0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0xc8]
push ecx
lea edx, [ebp - 0x34]
push edx
push eax
call fcn.00435f70
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
jmp 0x43745b
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x4071e4
push 0x40a13c
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x34]
call ebx
mov ecx, dword [ebp + 0xc]
mov edx, dword [ecx]
push eax
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x38]
call ebx
push eax
push 0x40a148
call esi
mov edx, dword [ebp - 0xe4]
sub esp, 0x10
mov ecx, 8
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x50]
mov dword [ebx + 4], ecx
mov dword [ebp - 0x4c], eax
mov esi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x48]
push edx
mov dword [ebx + 0xc], eax
call dword [esi + 0xc0]
fnclex
cmp eax, edi
jge 0x43680c
mov ecx, dword [ebp - 0xe4]
push 0xc0
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x34]
push eax
push 2
call dword [fcn.0040136c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0xc
lea ecx, [ebp - 0x54]
call ebx
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0x68]
fnclex
cmp eax, edi
jge 0x436858
mov ecx, dword [ebp - 0xe4]
push 0x68
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp dword [ebp - 0xcc], edi
jne 0x436a99
mov esi, dword [ebp - 0xe4]
sub esp, 0x10
mov edi, esp
mov ecx, 0xa
mov dword [edi], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0xa0]
mov dword [edi + 4], ecx
mov eax, 0x80020004
mov dword [edi + 8], eax
mov edx, eax
mov eax, dword [ebp - 0x98]
mov dword [edi + 0xc], eax
mov eax, dword [ebp - 0x94]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], eax
mov eax, dword [ebp - 0x90]
mov dword [ecx + 4], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x8c], edx
mov esi, dword [esi]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x88]
push eax
mov dword [ecx + 0xc], edx
call dword [esi + 0x78]
fnclex
test eax, eax
jge 0x4368e7
mov ecx, dword [ebp - 0xe4]
push 0x78
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x436912
mov edx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
lea edi, [ebp - 0x44]
push edi
sub esp, 0x10
mov edx, 8
mov edi, esp
mov dword [edi], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
mov ecx, 0x4071e4
mov dword [edi + 4], edx
mov dword [ebp - 0x8c], ecx
mov esi, dword [eax]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x88]
push eax
mov dword [ebp - 0xd4], eax
mov dword [edi + 0xc], ecx
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x436972
mov edx, dword [ebp - 0xd4]
push 0x28
push 0x40a14c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp + 0xc]
mov ecx, dword [ecx]
mov eax, dword [ebp - 0x44]
mov esi, dword [eax]
sub esp, 0x10
mov edi, esp
mov edx, 8
mov dword [edi], edx
mov edx, dword [ebp - 0xa0]
mov dword [edi + 4], edx
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x98]
push eax
mov dword [ebp - 0xdc], eax
mov dword [edi + 0xc], ecx
call dword [esi + 0x38]
fnclex
test eax, eax
jge 0x4369c6
mov edx, dword [ebp - 0xdc]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x38
push 0x40a15c
push edx
push eax
call edi
jmp 0x4369cc
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov edx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov dword [ebp - 0x8c], edx
add esp, 0xc
lea edx, [ebp - 0x74]
push edx
lea edx, [ebp - 0x64]
push edx
mov eax, 0x80020004
lea edx, [ebp - 0x54]
push edx
mov ecx, 0xa
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x4c], eax
mov eax, dword [esi + 0x48]
lea edx, [ebp - 0x94]
push edx
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x94], 0x4008
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
fnclex
test eax, eax
jge 0x436a41
mov ecx, dword [esi + 0x48]
push 0x20
push 0x40780c
push ecx
push eax
call edi
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x54]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [esi + 0x48]
mov edx, dword [eax]
add esp, 0x10
lea ecx, [ebp - 0xcc]
push ecx
push eax
call dword [edx + 0x24]
fnclex
test eax, eax
jge 0x436a7c
mov edx, dword [esi + 0x48]
push 0x24
push 0x40780c
push edx
push eax
call edi
mov ecx, dword [ebp - 0xcc]
sub ecx, 1
jo 0x437520
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I4]
mov byte [esi + 0x34], al
jmp 0x436bc0
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x48]
mov ecx, dword [eax]
lea edx, [ebp - 0xcc]
push edx
push eax
call dword [ecx + 0x24]
fnclex
cmp eax, edi
jge 0x436ac4
mov ecx, dword [esi + 0x48]
push 0x24
push 0x40780c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xcc]
mov edi, dword [sym.imp.MSVBVM60.DLL_rtcUpperCaseBstr]
sub eax, 1
jo 0x437520
mov dword [ebp - reloc.OLE32.DLL_CoTaskMemFree], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp eax, dword [ebp - reloc.OLE32.DLL_CoTaskMemFree]
jg 0x436bc0
mov esi, dword [ebp + 8]
add eax, 1
lea ecx, [ebp - 0x64]
push ecx
jo 0x437520
mov dword [ebp - 0x4c], eax
mov eax, dword [esi + 0x48]
lea ecx, [ebp - 0x54]
push ecx
mov dword [ebp - 0x54], 3
mov edx, dword [eax]
push eax
call dword [edx + 0x1c]
fnclex
test eax, eax
jge 0x436b2f
mov edx, dword [esi + 0x48]
push 0x1c
push 0x40780c
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
push ecx
call edi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x38]
call esi
push eax
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call edi
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
lea ecx, [ebp - 0x3c]
push ecx
neg esi
lea edx, [ebp - 0x38]
push edx
sbb esi, esi
lea eax, [ebp - 0x34]
push eax
inc esi
push 3
neg esi
call dword [fcn.0040136c]
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x54]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
test si, si
jne 0x436bb1
mov ecx, dword [ebp - 0x14]
mov eax, 1
add eax, ecx
jo 0x437520
mov dword [ebp - 0x14], eax
jmp 0x436ae4
mov ecx, dword [ebp - 0x14]
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I4]
mov ecx, dword [ebp + 8]
mov byte [ecx + 0x34], al
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x44]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push eax
call dword [edx + 0x218]
fnclex
test eax, eax
jge 0x436bee
mov edx, dword [esi + 0x44]
push 0x218
push 0x407ce8
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
push eax
lea eax, [ebp - 0xf4]
push eax
mov dword [ebp - 0x40], 0
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0xf8]
push edx
push 0x4075c0
call dword [sym.imp.MSVBVM60.DLL___vbaForEachCollObj]
test eax, eax
je 0x43730f
mov eax, dword [esi + 0x44]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x218]
fnclex
test eax, eax
jge 0x436c50
mov ecx, dword [esi + 0x44]
push 0x218
push 0x407ce8
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x30]
push eax
push 0
push 0x40a1e0
push eax
lea edx, [ebp - 0x54]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push 1
mov dword [ecx + 0xc], eax
mov ecx, dword [ebp - 0x40]
push 0
push ecx
lea edx, [ebp - 0x64]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUnkVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjIs]
lea ecx, [ebp - 0x40]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x54]
push ecx
push 2
call edi
add esp, 0xc
test si, si
je 0x436cfd
mov edx, dword [ebp - 0x30]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
push 0
push 0x40a1e0
push edx
lea eax, [ebp - 0x54]
push eax
call edi
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x54]
call ebx
jmp 0x436d8e
mov ecx, dword [ebp - 0x30]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
push 0
push 0x40a1e0
push ecx
lea edx, [ebp - 0x54]
push edx
mov dword [ebp - 0x8c], 0x40a1f0
mov dword [ebp - 0x94], 8
call esi
add esp, 0x10
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x64]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, dword [ebp - 0x30]
push eax
push 0
push 0x40a1f4
push edx
lea eax, [ebp - 0x74]
push eax
call esi
add esp, 0x10
push eax
lea ecx, [ebp - 0x84]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x54]
push edx
push 4
call edi
add esp, 0x14
mov edi, esi
mov eax, dword [ebp - 0x30]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaCheckType]
push 0x40781c
push eax
call esi
cmp ax, 0xffff
je 0x4372f1
mov ecx, dword [ebp - 0x30]
push 0x4088f8
push ecx
call esi
cmp ax, 0xffff
je 0x4372f1
mov edx, dword [ebp + 8]
mov eax, dword [edx + 0x58]
mov ecx, dword [ebp - 0x30]
push eax
push 0
push 0x40a200
push ecx
lea edx, [ebp - 0x54]
push edx
call edi
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUnkVar]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjIs]
inc ax
neg ax
lea ecx, [ebp - 0x54]
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0xc8], eax
call ebx
cmp word [ebp - 0xc8], 0
jne 0x4372f1
mov eax, dword [ebp - 0x30]
push 0x40789c
push eax
call esi
cmp ax, 0xffff
jne 0x436ee3
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x436e4a
mov ecx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
lea ebx, [ebp - 0x44]
push ebx
sub esp, 0x10
mov edx, 8
mov ebx, esp
mov dword [ebx], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
mov dword [ebx + 4], edx
mov dword [ebp - 0x8c], ecx
mov edi, dword [eax]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x88]
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x436e9e
push 0x28
push 0x40a14c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x44]
mov edi, dword [esi]
push 0
push 0x40a214
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push esi
mov dword [ecx + 0xc], eax
call dword [edi + 0x38]
fnclex
test eax, eax
jge 0x4372d3
jmp 0x4372c4
mov eax, dword [ebp - 0x30]
push 0x4076c8
push eax
call esi
cmp ax, 0xffff
je 0x437209
mov ecx, dword [ebp - 0x30]
push 0x407520
push ecx
call esi
cmp ax, 0xffff
je 0x437209
mov edx, dword [ebp - 0x30]
push 0x408960
push edx
call esi
cmp ax, 0xffff
je 0x437209
mov eax, dword [ebp - 0x30]
push 0x407a0c
push eax
call esi
cmp ax, 0xffff
jne 0x437130
mov ecx, dword [ebp - 0x30]
xor esi, esi
push esi
push 0x40a22c
push ecx
lea edx, [ebp - 0x54]
push edx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x94], 2
call edi
add esp, 0x10
push eax
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x64]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
lea ecx, [ebp - 0x54]
mov dword [ebp - reloc.OLE32.DLL_CoTaskMemFree], eax
mov dword [ebp - 0x14], esi
call ebx
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - reloc.OLE32.DLL_CoTaskMemFree]
jg 0x43704f
sub esp, 0x10
mov edx, esp
mov ecx, 0x4003
mov dword [edx], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0x30]
lea eax, [ebp - 0x14]
mov dword [edx + 8], eax
push 1
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x88]
push 0x4077b0
mov dword [edx + 0xc], eax
push ecx
lea edx, [ebp - 0x54]
push edx
call edi
add esp, 0x20
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x54]
mov si, ax
call ebx
test si, si
je 0x437037
fild dword [ebp - 0x14]
fstp qword [ebp - 0x130]
mov eax, dword [ebp - reloc.OLE32.DLL_CoTaskMemFree]
mov ecx, dword [ebp - reloc.OLE32.DLL_CoTaskMemFree]
push eax
push ecx
push 0x40000000
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaPowerR8]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x138]
fadd qword [ebp - 0x138]
fnstsw ax
test al, 0xd
jne 0x43751b
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14]
mov eax, 1
add eax, ecx
jo 0x437520
mov dword [ebp - 0x14], eax
jmp 0x436f8d
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x43707a
mov edx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
lea ebx, [ebp - 0x44]
push ebx
sub esp, 0x10
mov edx, 8
mov ebx, esp
mov dword [ebx], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
mov dword [ebx + 4], edx
mov dword [ebp - 0x8c], ecx
mov edi, dword [eax]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x88]
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4370ce
push 0x28
push 0x40a14c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x44]
mov edx, dword [eax]
sub esp, 0x10
mov edi, esp
mov ecx, 3
mov dword [edi], ecx
mov ecx, dword [ebp - 0xa0]
mov dword [edi + 4], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [edi + 8], ecx
mov ecx, dword [ebp - 0x98]
push eax
mov esi, eax
mov dword [edi + 0xc], ecx
call dword [edx + 0x38]
fnclex
test eax, eax
jge 0x437112
push 0x38
push 0x40a15c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x40]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0xc
jmp 0x4372f1
mov ecx, dword [ebp - 0x30]
push 0x407ab4
push ecx
call esi
cmp ax, 0xffff
jne 0x4372f1
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
lea ecx, [ebp - 0x40]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x437170
mov edx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
lea ebx, [ebp - 0x44]
push ebx
sub esp, 0x10
mov edx, 8
mov ebx, esp
mov dword [ebx], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
mov dword [ebx + 4], edx
mov dword [ebp - 0x8c], ecx
mov edi, dword [eax]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x88]
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x4371c4
push 0x28
push 0x40a14c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x44]
mov edi, dword [esi]
push 0
push 0x40779c
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push esi
mov dword [ecx + 0xc], eax
call dword [edi + 0x38]
fnclex
test eax, eax
jge 0x4372d3
jmp 0x4372c4
mov eax, dword [ebp - 0xe4]
mov ecx, dword [eax]
lea edx, [ebp - 0x40]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x437234
mov ecx, dword [ebp - 0xe4]
push 0x54
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
lea ebx, [ebp - 0x44]
push ebx
sub esp, 0x10
mov edx, 8
mov ebx, esp
mov dword [ebx], edx
mov dword [ebp - 0x94], edx
mov edx, dword [ebp - 0x90]
mov dword [ebx + 4], edx
mov dword [ebp - 0x8c], ecx
mov edi, dword [eax]
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x88]
push eax
mov esi, eax
mov dword [ebx + 0xc], ecx
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x437288
push 0x28
push 0x40a14c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x44]
mov edi, dword [esi]
push 0
push 0x40a220
push edx
lea eax, [ebp - 0x54]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateMemCallLd]
mov edx, dword [eax]
mov ecx, esp
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ecx + 8], edx
push esi
mov dword [ecx + 0xc], eax
call dword [edi + 0x38]
fnclex
test eax, eax
jge 0x4372d3
push 0x38
push 0x40a15c
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
add esp, 0xc
lea ecx, [ebp - 0x54]
call ebx
lea eax, [ebp - 0x30]
push eax
lea ecx, [ebp - 0xf8]
push ecx
push 0x4075c0
call dword [sym.imp.MSVBVM60.DLL___vbaNextEachCollObj]
mov esi, dword [ebp + 8]
jmp 0x436c1d
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
lea ecx, [ebp - 0x54]
push ecx
push eax
call dword [edx + 0x38]
fnclex
test eax, eax
jge 0x43733a
mov edx, dword [ebp - 0xe4]
push 0x38
push 0x40a0bc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea edx, [ebp - 0x54]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edx, dword [ebp - 0xe4]
sub esp, 0x10
mov ecx, 3
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebx + 4], ecx
mov dword [ebp - 0x8c], eax
mov edi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
push edx
mov dword [ebx + 0xc], eax
call dword [edi + 0xc0]
fnclex
test eax, eax
jge 0x4373a2
mov ecx, dword [ebp - 0xe4]
push 0xc0
push 0x40a0bc
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [esi + 0x50]
mov edx, dword [ebp - 0xe4]
push 0
sub esp, 0x10
mov ecx, 9
mov ebx, esp
mov dword [ebx], ecx
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x90]
mov dword [ebx + 4], ecx
mov dword [ebp - 0x8c], eax
mov edi, dword [edx]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x88]
push edx
mov dword [ebx + 0xc], eax
call dword [edi + 0x150]
fnclex
test eax, eax
jge 0x437401
mov ecx, dword [ebp - 0xe4]
push 0x150
push 0x40a09c
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xe4]
mov edx, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx], edi
mov edi, dword [ebp - 0x28]
mov dword [ecx + 4], edi
mov edi, dword [ebp - 0x24]
mov dword [ecx + 8], edi
mov edi, dword [ebp - 0x20]
push eax
mov dword [ecx + 0xc], edi
call dword [edx + 0x3c]
fnclex
test eax, eax
jge 0x437444
mov edx, dword [ebp - 0xe4]
push 0x3c
push 0x40a0bc
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [esi]
lea ecx, [ebp - 0xc8]
push ecx
push esi
mov dword [ebp - 0xc8], 0
call dword [eax + 0x3c]
push 0
lea edx, [ebp - 0xe4]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSetAddref]
wait
push 0x437506
jmp 0x4374b5
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0xf4]
push ecx
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xe8]
push ecx
lea edx, [ebp - 0xe4]
push edx
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0x1c
lea ecx, [ebp - 0x18]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x2c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
ret
jmp 0x4022cc
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop