Function at 0x11056410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x110027b6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1b8
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x110016a0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryConstruct2]
push 0x11
lea eax, [ebp - 0x2c]
xor edi, edi
push 0x110052b8
push eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x94], edi
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xb4], edi
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xd4], edi
mov dword [ebp - 0xe4], edi
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0x104], edi
mov dword [ebp - 0x114], edi
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x140], edi
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x180], edi
mov dword [ebp - 0x190], edi
mov dword [ebp - 0x194], edi
mov byte [ebp - 0x198], 0
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x1a0], edi
mov dword [ebp - 0x1a4], edi
mov dword [ebp - 0x1a8], edi
mov dword [ebp - 0x1ac], edi
mov dword [ebp - 0x1b0], edi
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x1bc], edi
mov dword [ebp - 0x1c0], edi
mov dword [ebp - 0x1c4], edi
call esi
push 0x11
lea ecx, [ebp - 0x68]
push 0x110052b8
push ecx
call esi
mov esi, dword [ebp + 0x80]
push esi
call fcn.1106b610
test ax, ax
je 0x110565e9
push edi
push 1
push 1
lea edx, [ebp - 0x48]
push 0x11
push edx
push 1
push 0x80
call dword [sym.imp.MSVBVM60.DLL___vbaRedim]
mov eax, dword [ebp - 0x48]
add esp, 0x1c
cmp eax, edi
je 0x11056585
cmp word [eax], 1
jne 0x11056585
mov esi, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
neg esi
cmp esi, ecx
jb 0x1105658d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x1105658d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
xor ecx, ecx
call ebx
mov ecx, dword [ebp - 0x48]
mov edx, dword [ecx + 0xc]
mov byte [edx + esi], al
mov eax, dword [ebp - 0x48]
cmp eax, edi
je 0x110565c6
cmp word [eax], 1
jne 0x110565c6
mov edx, dword [eax + 0x14]
mov ecx, dword [eax + 0x10]
mov esi, 1
sub esi, edx
cmp esi, ecx
jb 0x110565ce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
jmp 0x110565ce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov esi, eax
xor ecx, ecx
call ebx
mov ecx, dword [ebp - 0x48]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov edx, dword [ecx + 0xc]
mov byte [edx + esi], al
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
jmp 0x1105661a
mov edx, esi
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
push eax
lea eax, [ebp - 0x138]
push eax
call esi
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0x48]
push ecx
push edx
call ebx
mov ecx, dword [ebp + 0x84]
fld qword [ecx]
fcomp qword [0x11001698]
fnstsw ax
test ah, 0x40
je 0x110567f1
lea eax, [ebp - 0x94]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0xa4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetYear]
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xc4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetMonthOfYear]
lea eax, [ebp - 0xd4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0xd4]
lea edx, [ebp - 0xe4]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetDayOfMonth]
lea eax, [ebp - 0xf4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0xf4]
lea edx, [ebp - 0x104]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetHourOfDay]
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcGetPresentDate]
lea ecx, [ebp - 0x114]
lea edx, [ebp - 0x124]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcGetMinuteOfHour]
lea eax, [ebp - 0x124]
mov dword [ebp - 0x1ac], 0xffffffff
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x1a8], eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea edx, [ebp - 0xe4]
mov dword [ebp - 0x1a4], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov dword [ebp - 0x1a0], eax
lea eax, [ebp - 0xc4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x19c], eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov dword [ebp - 0x198], eax
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1b0], edx
lea ecx, [ebp - 0x1a8]
push eax
lea edx, [ebp - 0x1a4]
push ecx
lea eax, [ebp - 0x1a0]
push edx
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x198]
push ecx
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x1b0]
push eax
mov dword [ebp - 0x194], edi
push ecx
lea edx, [ebp - 0x134]
push edx
call fcn.1105d370
lea eax, [ebp - 0x134]
lea ecx, [ebp - 0x124]
push eax
lea edx, [ebp - 0x104]
push ecx
lea eax, [ebp - 0xe4]
push edx
lea ecx, [ebp - 0xc4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x114]
push edx
lea ecx, [ebp - 0xf4]
push eax
lea edx, [ebp - 0xd4]
push ecx
lea eax, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 0xb
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
jmp 0x110569ae
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x94]
push edx
push eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x150], 0x4007
call dword [sym.imp.MSVBVM60.DLL_rtcGetYear]
mov ecx, dword [ebp + 0x84]
lea edx, [ebp - 0x160]
lea eax, [ebp - 0xa4]
push edx
push eax
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x160], 0x4007
call dword [sym.imp.MSVBVM60.DLL_rtcGetMonthOfYear]
mov ecx, dword [ebp + 0x84]
lea edx, [ebp - 0x170]
lea eax, [ebp - 0xb4]
push edx
push eax
mov dword [ebp - 0x168], ecx
mov dword [ebp - 0x170], 0x4007
call dword [sym.imp.MSVBVM60.DLL_rtcGetDayOfMonth]
mov ecx, dword [ebp + 0x84]
lea edx, [ebp - 0x180]
lea eax, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x180], 0x4007
call dword [sym.imp.MSVBVM60.DLL_rtcGetHourOfDay]
mov ecx, dword [ebp + 0x84]
lea edx, [ebp - 0x190]
lea eax, [ebp - 0xd4]
push edx
push eax
mov dword [ebp - 0x188], ecx
mov dword [ebp - 0x190], 0x4007
call dword [sym.imp.MSVBVM60.DLL_rtcGetMinuteOfHour]
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x1ac], 0xffffffff
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea edx, [ebp - 0xc4]
mov dword [ebp - 0x1a8], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov dword [ebp - 0x1a4], eax
lea eax, [ebp - 0xb4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x1a0], eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea edx, [ebp - 0x94]
mov dword [ebp - 0x19c], eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov dword [ebp - 0x198], eax
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x1b0], eax
lea edx, [ebp - 0x1a8]
push ecx
lea eax, [ebp - 0x1a4]
push edx
lea ecx, [ebp - 0x1a0]
push eax
lea edx, [ebp - 0x19c]
push ecx
lea eax, [ebp - 0x198]
push edx
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x1b0]
push ecx
lea eax, [ebp - 0xe4]
push edx
mov dword [ebp - 0x194], edi
push eax
call fcn.1105d370
lea ecx, [ebp - 0xe4]
lea edx, [ebp - 0xd4]
push ecx
lea eax, [ebp - 0xc4]
push edx
lea ecx, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov ecx, dword [ebp + 0x74]
lea eax, [ebp - 0x94]
mov edx, dword [ecx]
push edx
push eax
call fcn.11055a60
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
call esi
lea eax, [ebp - 0x138]
lea ecx, [ebp - 0x34]
push eax
push ecx
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp + 0x78]
lea ecx, [ebp - 0x94]
mov eax, dword [edx]
push eax
push ecx
call fcn.11055a60
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
call esi
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0x84]
push ecx
push edx
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp + 0x7c]
lea edx, [ebp - 0x94]
mov ecx, dword [eax]
push ecx
push edx
call fcn.11055a60
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
call esi
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x50]
push edx
push eax
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ecx, dword [ebp + 0x68]
push ecx
call fcn.1106b610
test ax, ax
je 0x11056aac
mov ecx, 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
mov byte [ebp - 0x198], al
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
push eax
mov dword [ebp - 0x194], 0x40
call fcn.1106bf10
mov dword [ebp - 0x1b0], eax
lea ecx, [ebp - 0x1b0]
jmp 0x11056acb
mov edx, dword [ebp + 0x68]
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
lea eax, [ebp - 0x138]
push eax
call esi
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0x38]
push ecx
push edx
call ebx
mov eax, dword [ebp + 0x64]
mov eax, dword [eax]
cmp eax, edi
jne 0x11056ae6
mov ecx, dword [0x11094b10]
mov dword [ebp - 0x7c], ecx
jmp 0x11056ae9
mov dword [ebp - 0x7c], eax
mov edx, dword [ebp + 8]
lea eax, [ebp - 0x150]
lea ecx, [ebp - 0x94]
push eax
push ecx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x14
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xa4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push edi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaErase]
call edi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0xc]
add esp, 0x10
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x94]
push edx
push eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x14
call esi
lea eax, [ebp - 0x198]
push eax
lea ecx, [ebp - 0x194]
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xa4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp + 0x10]
add esp, 0x10
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x94]
push ecx
push edx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x14
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
lea edx, [ebp - 0xa4]
push ecx
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
push eax
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x14]
add esp, 0x10
lea eax, [ebp - 0x150]
lea ecx, [ebp - 0x94]
push eax
push ecx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x12
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xa4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x18]
add esp, 0x10
mov cx, word [ecx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x94]
lea eax, [ebp - 0xa4]
push edx
push eax
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xc4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x1c]
add esp, 0x14
mov cx, word [ecx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x94]
lea eax, [ebp - 0xa4]
push edx
push eax
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xc4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x20]
add esp, 0x14
mov dx, word [ecx]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0xa4]
push eax
push ecx
mov dword [ebp - 0x94], 8
call fcn.1106c090
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x138]
push edx
push eax
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xc4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x24]
add esp, 0x14
mov cx, word [edx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0xa4]
push eax
push ecx
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xc4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x28]
add esp, 0x14
mov cx, word [edx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0xa4]
push eax
push ecx
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
push edx
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0xc4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x2c]
add esp, 0x14
mov cx, word [edx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0xa4]
push eax
push ecx
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xc4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x30]
add esp, 0x14
lea eax, [ebp - 0x150]
lea ecx, [ebp - 0x94]
push eax
push ecx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x150], 0x4002
call fcn.1106c090
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 3
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xa4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov ecx, dword [ebp + 0x34]
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x94]
push edx
push eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x150], 0x4003
call fcn.1106c090
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0xc
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xa4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x7c]
push ecx
push edx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 0x4003
call fcn.1106c090
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0xc
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
lea edx, [ebp - 0xa4]
push ecx
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x38]
add esp, 0x10
lea eax, [ebp - 0x150]
lea ecx, [ebp - 0x94]
push eax
push ecx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x1c
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xa4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x3c]
add esp, 0x10
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x94]
push edx
push eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x150], 0x4003
call fcn.1106c090
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0xc
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xa4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp + 0x40]
add esp, 0x10
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x94]
push ecx
push edx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x35
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
lea edx, [ebp - 0xa4]
push ecx
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x44]
add esp, 0x10
mov ax, word [edx]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x94], 8
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.1106c090
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xc4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp + 0x48]
add esp, 0x14
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x94]
push ecx
push edx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 0x4002
call fcn.1106c090
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 5
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
push ecx
lea edx, [ebp - 0xa4]
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
lea ecx, [ebp - 0x38]
push edx
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x40
call fcn.1106b830
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
call esi
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xa4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x94]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp + 0x6c]
add esp, 0xc
lea ecx, [ebp - 0x150]
lea edx, [ebp - 0x94]
push ecx
push edx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x150], 0x4002
call fcn.1106c090
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 4
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
lea edx, [ebp - 0xa4]
push ecx
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x70]
add esp, 0x10
lea eax, [ebp - 0x150]
lea ecx, [ebp - 0x94]
push eax
push ecx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x150], 0x4002
call fcn.1106c090
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
push eax
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xa4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0x4c]
lea eax, [ebp - 0x94]
push ecx
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
call esi
lea eax, [ebp - 0x138]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x84]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
call esi
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0x138]
push eax
push ecx
call esi
lea edx, [ebp - 0x138]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 2
call fcn.1106b830
lea edx, [ebp - 0x94]
lea eax, [ebp - 0x138]
push edx
push eax
call esi
lea ecx, [ebp - 0x138]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xa4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x94]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x198]
mov dword [ebp - 0x1b0], edx
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x1b0]
push ecx
lea eax, [ebp - 0x94]
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 2
push eax
call fcn.1106b830
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
call esi
lea eax, [ebp - 0x138]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xa4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x94]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x4c]
add esp, 0xc
mov cx, word [ecx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x94]
lea eax, [ebp - 0xa4]
push edx
push eax
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xc4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x50]
add esp, 0x14
mov cx, word [ecx]
call dword [sym.imp.MSVBVM60.DLL___vbaI2Abs]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x94]
lea eax, [ebp - 0xa4]
push edx
push eax
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea ecx, [ebp - 0xa4]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xc4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x58]
add esp, 0x14
mov dx, word [ecx]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea eax, [ebp - 0x94]
lea ecx, [ebp - 0xa4]
push eax
push ecx
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x138]
push edx
push eax
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea ecx, [ebp - 0x198]
lea edx, [ebp - 0x194]
push ecx
lea eax, [ebp - 0x138]
push edx
lea ecx, [ebp - 0xb4]
push eax
push ecx
call fcn.1106b830
lea edx, [ebp - 0x138]
push edx
push 0
call edi
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
lea edx, [ebp - 0x13c]
lea eax, [ebp - 0x4c]
push edx
lea ecx, [ebp - 0xc4]
push eax
push ecx
call fcn.1106bc10
lea edx, [ebp - 0x13c]
push edx
push 0
call edi
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0x140]
push eax
push ecx
call esi
lea edx, [ebp - 0x140]
lea eax, [ebp - 0x4c]
push edx
push eax
call ebx
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0xb4]
push ecx
lea eax, [ebp - 0xa4]
push edx
lea ecx, [ebp - 0x94]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp + 0x5c]
add esp, 0x14
mov ax, word [edx]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0xa4]
push ecx
push edx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea eax, [ebp - 0xa4]
lea ecx, [ebp - 0x138]
push eax
push ecx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
call esi
lea edx, [ebp - 0x198]
lea eax, [ebp - 0x194]
push edx
lea ecx, [ebp - 0x138]
push eax
lea edx, [ebp - 0xb4]
push ecx
push edx
call fcn.1106b830
lea eax, [ebp - 0x138]
push eax
push 0
call edi
lea ecx, [ebp - 0xb4]
lea edx, [ebp - 0x13c]
push ecx
push edx
call esi
lea eax, [ebp - 0x13c]
lea ecx, [ebp - 0x4c]
push eax
lea edx, [ebp - 0xc4]
push ecx
push edx
call fcn.1106bc10
lea eax, [ebp - 0x13c]
push eax
push 0
call edi
lea ecx, [ebp - 0xc4]
lea edx, [ebp - 0x140]
push ecx
push edx
call esi
lea eax, [ebp - 0x140]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0xb4]
push edx
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [ebp + 0x60]
add esp, 0x14
mov cx, word [eax]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
mov dword [ebp - 0x8c], eax
lea edx, [ebp - 0x94]
lea eax, [ebp - 0xa4]
push edx
push eax
mov dword [ebp - 0x94], 8
call fcn.1106c090
lea ecx, [ebp - 0xa4]
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 1
push ecx
lea edx, [ebp - 0x138]
push edx
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xc4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xc4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xc4]
lea ecx, [ebp - 0xb4]
push eax
lea edx, [ebp - 0xa4]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov ecx, dword [ebp + 0x54]
add esp, 0x14
lea edx, [ebp - 0x150]
lea eax, [ebp - 0x94]
push edx
push eax
mov dword [ebp - 0x148], ecx
mov dword [ebp - 0x150], 0x4008
call fcn.1106c090
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
mov byte [ebp - 0x198], 0x20
mov dword [ebp - 0x194], 0x64
call esi
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
push eax
lea edx, [ebp - 0x138]
push ecx
lea eax, [ebp - 0xa4]
push edx
push eax
call fcn.1106b830
lea ecx, [ebp - 0x138]
push ecx
push 0
call edi
lea edx, [ebp - 0xa4]
lea eax, [ebp - 0x13c]
push edx
push eax
call esi
lea ecx, [ebp - 0x13c]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0xb4]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x13c]
push ecx
push 0
call edi
lea edx, [ebp - 0xb4]
lea eax, [ebp - 0x140]
push edx
push eax
call esi
lea ecx, [ebp - 0x140]
lea edx, [ebp - 0x4c]
push ecx
push edx
call ebx
lea eax, [ebp - 0xb4]
lea ecx, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x94]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x194]
mov byte [ebp - 0x198], 0x20
push eax
push ecx
mov dword [ebp - 0x194], 0xa
call fcn.1106bf10
mov dword [ebp - 0x1b0], eax
lea edx, [ebp - 0x1b0]
lea eax, [ebp - 0x1c4]
push edx
push eax
call ebx
lea ecx, [ebp - 0x1c4]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0x94]
push edx
push eax
call fcn.1106bc10
lea ecx, [ebp - 0x94]
lea edx, [ebp - 0x138]
push ecx
push edx
call esi
lea eax, [ebp - 0x138]
lea ecx, [ebp - 0x4c]
push eax
push ecx
call ebx
lea ecx, [ebp - 0x94]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0x1c4]
push edx
push 0
call edi
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x80]
push eax
push ecx
call ebx
wait
push 0x11058716
jmp 0x11058693
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea edx, [ebp - 0x1bc]
push edx
push 0
call esi
lea eax, [ebp - 0x1c0]
push eax
push 0
call esi
lea ecx, [ebp - 0x1c4]
push ecx
push 0
call esi
lea eax, [ebp - 0x1b0]
lea edx, [ebp - 0x2c]
push eax
push 0
mov dword [ebp - 0x1b0], edx
call esi
lea ecx, [ebp - 0x34]
push ecx
push 0
call esi
lea edx, [ebp - 0x38]
push edx
push 0
call esi
lea eax, [ebp - 0x48]
push eax
push 0
call esi
lea ecx, [ebp - 0x4c]
push ecx
push 0
call esi
lea edx, [ebp - 0x50]
push edx
push 0
call esi
lea ecx, [ebp - 0x1b4]
lea eax, [ebp - 0x68]
push ecx
push 0
mov dword [ebp - 0x1b4], eax
call esi
lea edx, [ebp - 0x84]
push edx
push 0
call esi
ret