Function at 0x4ed670
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x403d06
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1b0
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x403840
xor eax, eax
cmp word [0x520ef2], ax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a4], eax
jne 0x4f0a17
mov eax, dword [0x520ffc]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x40904c
push eax
call esi
mov edx, eax
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x408754
call esi
lea edx, [ebp - 0xec]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xec], 8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ebx, [ebp - 0xd8]
mov ecx, 0xa
push ebx
mov dword [ebp - 0x19c], ecx
sub esp, 0x10
mov esi, ecx
mov ebx, esp
mov eax, 0x80020004
sub esp, 0x10
mov dword [ebp - 0x194], eax
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x198]
mov edx, eax
mov dword [ebp - 0x17c], 3
mov dword [ebx + 4], ecx
mov ecx, esp
mov dword [ebp - 0x184], edx
sub esp, 0x10
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x174], 4
mov edi, dword [0x51f224]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x188]
mov dword [ecx], esi
mov dword [ebp - 0x18c], esi
mov edi, dword [edi]
mov dword [ecx + 4], eax
mov eax, esp
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x180]
mov dword [ecx + 0xc], edx
mov ecx, dword [ebp - 0x17c]
mov edx, dword [ebp - 0x178]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x174]
mov dword [eax + 4], edx
mov edx, dword [ebp - 0x170]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0xd4]
mov dword [eax + 0xc], edx
lea eax, [ebp - 0x70]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
mov edx, dword [0x51f224]
push eax
push edx
call dword [edi + 0xbc]
test eax, eax
fnclex
jge 0x4ed882
mov ecx, dword [0x51f224]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0xbc
push 0x407ec8
push ecx
push eax
call esi
jmp 0x4ed888
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xd8], 0
push eax
push 0x51f24c
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0xd4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0x1a0]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0x20]
test eax, eax
fnclex
jge 0x4ed8d9
mov edx, dword [0x51f24c]
push 0x20
push 0x407ed8
push edx
push eax
call esi
mov eax, dword [0x51f24c]
lea edx, [ebp - 0x1a4]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x34]
test eax, eax
fnclex
jge 0x4ed902
mov ecx, dword [0x51f24c]
push 0x34
push 0x407ed8
push ecx
push eax
call esi
xor edx, edx
cmp word [ebp - 0x1a4], dx
sete dl
xor eax, eax
cmp word [ebp - 0x1a0], ax
sete al
or edx, eax
je 0x4f09ce
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ed965
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bb60
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ed9c7
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ed9ed
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fde8
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4eda69
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bb78
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4edacb
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4edaf1
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe00], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4edb58
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bb8c
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4edbba
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4edbe0
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe02], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4edc47
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bba0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4edca9
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4edccf
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520b88], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520b84], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4edd3b
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbb8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4edd9d
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eddc3
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520bf0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520bec], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ede43
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbd0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4edea5
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4edecb
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fe0c
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4edf47
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbe8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4edfa9
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4edfcf
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe24], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee036
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bbfc
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee098
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee0be
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe26], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee125
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc10
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee187
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee1ad
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520b90], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520b8c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee219
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc28
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee27b
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee2a1
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520bf8], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520bf4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee321
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc40
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee383
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee3a9
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fe30
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4ee425
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc58
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee487
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee4ad
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe48], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee514
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc6c
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee576
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee59c
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe4a], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee603
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bab0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee665
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee68b
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520b98], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520b94], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee6f7
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc80
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee759
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee77f
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520c00], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520bfc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee7ff
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bc98
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee861
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee887
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fe54
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4ee903
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bcb0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ee965
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ee98b
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe6c], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ee9f2
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bcc4
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4eea54
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eea7a
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe6e], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4eeae1
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bcd8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4eeb43
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eeb69
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520ba0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520b9c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4eebd5
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bcf0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4eec37
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eec5d
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520c08], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520c04], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4eecdd
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd08
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4eed3f
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eed65
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fe78
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4eede1
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd20
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4eee43
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eee69
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe90], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4eeed0
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd34
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4eef32
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4eef58
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fe92], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4eefbf
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd48
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef021
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef047
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520ba8], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520ba4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef0b3
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd60
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef115
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef13b
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520c10], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520c0c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef1bb
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd78
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef21d
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef243
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fe9c
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4ef2bf
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bd90
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef321
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef347
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51feb4], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef3ae
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bda4
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef410
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef436
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51feb6], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef49d
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bdb8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef4ff
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef525
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520bb0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520bac], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef591
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bdd0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef5f3
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef619
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520c18], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520c14], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef699
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bde8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef6fb
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef721
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fec0
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4ef79d
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be00
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef7ff
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef825
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fed8], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef88c
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be14
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef8ee
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4ef914
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51feda], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4ef97b
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be28
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4ef9dd
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4efa03
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520bb8], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520bb4], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4efa6f
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be40
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4efad1
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4efaf7
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520c20], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520c1c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4efb77
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be58
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4efbd9
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4efbff
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51fee4
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4efc7b
mov edx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push edx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be70
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4efcdd
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4efd03
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fefc], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4efd6a
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be84
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4efdcc
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4efdf2
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov word [0x51fefe], ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4efe59
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40be98
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4efebb
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4efee1
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520bc0], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520bbc], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4eff4d
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40beb0
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4effaf
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4effd5
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0xec]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCyVar]
mov dword [0x520c28], edx
lea ecx, [ebp - 0xdc]
lea edx, [ebp - 0xd8]
push ecx
push edx
push 2
mov dword [0x520c24], eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea edx, [ebp - 0xd8]
mov dword [ebp - 0x184], 0x4069cc
mov dword [ebp - 0x18c], 8
mov ecx, dword [eax]
push edx
push eax
call dword [ecx + 0xb4]
test eax, eax
fnclex
jge 0x4f0055
mov ecx, dword [0x51f24c]
push 0xb4
push 0x407ed8
push ecx
push eax
call esi
lea ebx, [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
push ebx
mov edx, 8
sub esp, 0x10
mov dword [ebp - 0x17c], edx
mov ebx, esp
mov ecx, 0x40bec8
mov dword [ebp - 0x174], ecx
mov edi, dword [eax]
mov dword [ebx], edx
mov edx, dword [ebp - 0x178]
push eax
mov dword [ebp - 0x1ac], eax
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x170]
mov dword [ebx + 0xc], ecx
call dword [edi + 0x30]
test eax, eax
fnclex
jge 0x4f00b7
mov edx, dword [ebp - 0x1ac]
push 0x30
push 0x407f04
push edx
push eax
call esi
mov eax, dword [ebp - 0xdc]
lea edx, [ebp - 0xec]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x44]
test eax, eax
fnclex
jge 0x4f00dd
push 0x44
push 0x40815c
push edi
push eax
call esi
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xec]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
mov edx, eax
mov ecx, 0x51ff08
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0xdc]
lea ecx, [ebp - 0xd8]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0xec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x51f24c]
lea ecx, [ebp - 0xd8]
push ecx
push eax
mov edx, dword [eax]
call dword [edx + 0xb4]
test eax, eax
fnclex
jge 0x4f0159
mov eax, dword [0x51f24c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc4]
test eax, eax
fnclex
jge 0x4f09fc
mov edx, dword [0x51f24c]
push 0xc4
push 0x407ed8
push edx
push eax
call esi
push 0x407ed8
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
push 0x51f24c
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
jmp 0x4f0a1d
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x51fdfc]
mov ecx, dword [0x51fdf8]
mov edx, dword [0x51ff54]
push eax
mov eax, dword [0x51ff50]
push ecx
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCySub]
mov dword [ebp - 0x170], edx
mov edi, 6
lea edx, [ebp - 0x17c]
mov ecx, 0x520a00
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], edi
call ebx
or eax, 0xffffffff
cmp word [0x51fe24], ax
je 0x4f0a76
cmp word [0x51fe26], ax
jne 0x4f0aba
mov ecx, dword [0x51fe1c]
mov edx, dword [0x51fe20]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
jmp 0x4f0ac0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
or eax, 0xffffffff
cmp word [0x51fe48], ax
je 0x4f0ad5
cmp word [0x51fe4a], ax
jne 0x4f0b10
mov edx, dword [0x51fe40]
mov eax, dword [0x51fe44]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d44
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51fe6c], ax
je 0x4f0b25
cmp word [0x51fe6e], ax
jne 0x4f0b60
mov eax, dword [0x51fe64]
mov ecx, dword [0x51fe68]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x520d44
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51fe90], ax
je 0x4f0b75
cmp word [0x51fe92], ax
jne 0x4f0bb1
mov ecx, dword [0x51fe88]
mov edx, dword [0x51fe8c]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51feb4], ax
je 0x4f0bc6
cmp word [0x51feb6], ax
jne 0x4f0c01
mov edx, dword [0x51feac]
mov eax, dword [0x51feb0]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d44
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51fed8], ax
je 0x4f0c16
cmp word [0x51feda], ax
jne 0x4f0c51
mov eax, dword [0x51fed0]
mov ecx, dword [0x51fed4]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x520d44
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51fefc], ax
je 0x4f0c66
cmp word [0x51fefe], ax
jne 0x4f0ca2
mov ecx, dword [0x51fef4]
mov edx, dword [0x51fef8]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51ff20], ax
je 0x4f0cb7
cmp word [0x51ff22], ax
jne 0x4f0cf2
mov edx, dword [0x51ff18]
mov eax, dword [0x51ff1c]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d44
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x51ff44], ax
je 0x4f0d07
cmp word [0x51ff46], ax
jne 0x4f0d42
mov eax, dword [0x51ff3c]
mov ecx, dword [0x51ff40]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x520d44
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
or eax, 0xffffffff
cmp word [0x5210f4], ax
je 0x4f0d57
cmp word [0x5210f6], ax
jne 0x4f0d93
mov ecx, dword [0x5210e0]
mov edx, dword [0x5210e4]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d44
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d44
call ebx
cmp word [0x51fe24], 0
jne 0x4f0de2
cmp word [0x51fe26], 0
jne 0x4f0de2
mov edx, dword [0x51fe1c]
mov eax, dword [0x51fe20]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51fe48], 0
jne 0x4f0e31
cmp word [0x51fe4a], 0
jne 0x4f0e31
mov eax, dword [0x51fe40]
mov ecx, dword [0x51fe44]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x520d54
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51fe6c], 0
jne 0x4f0e81
cmp word [0x51fe6e], 0
jne 0x4f0e81
mov ecx, dword [0x51fe64]
mov edx, dword [0x51fe68]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d54
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51fe90], 0
jne 0x4f0ed0
cmp word [0x51fe92], 0
jne 0x4f0ed0
mov edx, dword [0x51fe88]
mov eax, dword [0x51fe8c]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51feb4], 0
jne 0x4f0f1f
cmp word [0x51feb6], 0
jne 0x4f0f1f
mov eax, dword [0x51feac]
mov ecx, dword [0x51feb0]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x520d54
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51fed8], 0
jne 0x4f0f6f
cmp word [0x51feda], 0
jne 0x4f0f6f
mov ecx, dword [0x51fed0]
mov edx, dword [0x51fed4]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d54
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51fefc], 0
jne 0x4f0fbe
cmp word [0x51fefe], 0
jne 0x4f0fbe
mov edx, dword [0x51fef4]
mov eax, dword [0x51fef8]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51ff20], 0
jne 0x4f100d
cmp word [0x51ff22], 0
jne 0x4f100d
mov eax, dword [0x51ff18]
mov ecx, dword [0x51ff1c]
mov dword [ebp - 0x174], eax
lea edx, [ebp - 0x17c]
push 0x520d54
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51ff44], 0
jne 0x4f105d
cmp word [0x51ff46], 0
jne 0x4f105d
mov ecx, dword [0x51ff3c]
mov edx, dword [0x51ff40]
mov dword [ebp - 0x174], ecx
lea eax, [ebp - 0x17c]
push 0x520d54
lea ecx, [ebp - 0xec]
push eax
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x5210f6], 0
jne 0x4f10a2
mov edx, dword [0x5210e0]
mov eax, dword [0x5210e4]
mov dword [ebp - 0x174], edx
lea ecx, [ebp - 0x17c]
push 0x520d54
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x17c], edi
call esi
mov edx, eax
mov ecx, 0x520d54
call ebx
cmp word [0x51fe24], 0xffff
jne 0x4f111f
mov eax, dword [0x51f8a0]
mov ecx, dword [0x51f89c]
mov edx, dword [0x51fe20]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaCyMul]
push eax
mov eax, dword [0x51fe1c]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f10e7
fdiv qword [0x401940]
jmp 0x4f10f8
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
jmp 0x4f1125
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaCyMul]
cmp word [0x51fe24], 0
jne 0x4f114e
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fe48], 0xffff
jne 0x4f11c7
mov ecx, dword [0x51f8a0]
mov edx, dword [0x51f89c]
mov eax, dword [0x51fe44]
push ecx
mov ecx, dword [0x51fe40]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f118e
fdiv qword [0x401940]
jmp 0x4f119f
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe48], 0
jne 0x4f11f3
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fe6c], 0xffff
jne 0x4f126c
mov edx, dword [0x51f8a0]
mov eax, dword [0x51f89c]
mov ecx, dword [0x51fe68]
push edx
mov edx, dword [0x51fe64]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1233
fdiv qword [0x401940]
jmp 0x4f1244
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe6c], 0
jne 0x4f1298
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fe90], 0xffff
jne 0x4f130d
mov eax, dword [0x51f8a0]
mov ecx, dword [0x51f89c]
mov edx, dword [0x51fe8c]
push eax
mov eax, dword [0x51fe88]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f12d7
fdiv qword [0x401940]
jmp 0x4f12e8
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe90], 0
jne 0x4f1336
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51feb4], 0xffff
jne 0x4f13ac
mov ecx, dword [0x51f8a0]
mov edx, dword [0x51f89c]
mov eax, dword [0x51feb0]
push ecx
mov ecx, dword [0x51feac]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1376
fdiv qword [0x401940]
jmp 0x4f1387
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51feb4], 0
jne 0x4f13d5
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fed8], 0xffff
jne 0x4f144b
mov edx, dword [0x51f8a0]
mov eax, dword [0x51f89c]
mov ecx, dword [0x51fed4]
push edx
mov edx, dword [0x51fed0]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1415
fdiv qword [0x401940]
jmp 0x4f1426
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fed8], 0
jne 0x4f1474
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x50]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fefc], 0xffff
jne 0x4f14e9
mov eax, dword [0x51f8a0]
mov ecx, dword [0x51f89c]
mov edx, dword [0x51fef8]
push eax
mov eax, dword [0x51fef4]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f14b3
fdiv qword [0x401940]
jmp 0x4f14c4
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fefc], 0
jne 0x4f1512
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51ff20], 0xffff
jne 0x4f1588
mov ecx, dword [0x51f8a0]
mov edx, dword [0x51f89c]
mov eax, dword [0x51ff1c]
push ecx
mov ecx, dword [0x51ff18]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1552
fdiv qword [0x401940]
jmp 0x4f1563
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51ff20], 0
jne 0x4f15b1
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x20]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51ff44], 0xffff
jne 0x4f162a
mov edx, dword [0x51f8a0]
mov eax, dword [0x51f89c]
mov ecx, dword [0x51ff40]
push edx
mov edx, dword [0x51ff3c]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f15f1
fdiv qword [0x401940]
jmp 0x4f1602
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51ff44], 0
jne 0x4f1656
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
or eax, 0xffffffff
cmp word [0x520ef2], ax
jne 0x4f1709
cmp word [0x5210f4], ax
jne 0x4f16dd
mov eax, dword [0x51f8a0]
mov ecx, dword [0x51f89c]
mov edx, dword [0x5210e4]
push eax
mov eax, dword [0x5210e0]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f16a4
fdiv qword [0x401940]
jmp 0x4f16b5
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x5210f4], 0
jne 0x4f1709
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
lea ecx, [ebp - 0x30]
lea edx, [ebp - 0xc0]
push ecx
lea eax, [ebp - 0xec]
push edx
push eax
call esi
lea ecx, [ebp - 0xb0]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x80]
lea ecx, [ebp - 0x10c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x60]
lea eax, [ebp - 0x11c]
push edx
push eax
call esi
lea ecx, [ebp - 0x50]
push eax
lea edx, [ebp - 0x12c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x13c]
push eax
push ecx
call esi
push eax
lea edx, [ebp - 0x20]
lea eax, [ebp - 0x14c]
push edx
push eax
call esi
lea ecx, [ebp - 0xd0]
push eax
lea edx, [ebp - 0x15c]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0x16c]
push eax
push ecx
call esi
mov edx, eax
mov ecx, 0x520d24
call ebx
lea edx, [ebp - 0x15c]
lea eax, [ebp - 0x14c]
push edx
lea ecx, [ebp - 0x13c]
push eax
lea edx, [ebp - 0x12c]
push ecx
lea eax, [ebp - 0x11c]
push edx
lea ecx, [ebp - 0x10c]
push eax
lea edx, [ebp - 0xfc]
push ecx
lea eax, [ebp - 0xec]
push edx
push eax
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 0x64
mov ecx, 2
add esp, 0x24
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x19c], ecx
lea ecx, [ebp - 0x17c]
push 0x520d24
lea edx, [ebp - 0xec]
push ecx
push edx
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0x3fe00000
mov dword [ebp - 0x18c], 5
mov dword [ebp - 0x194], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xfc]
push eax
push ecx
call esi
lea edx, [ebp - 0x10c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
push eax
lea eax, [ebp - 0x19c]
lea ecx, [ebp - 0x11c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
mov edx, eax
mov ecx, 0x520d24
call ebx
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [0x51fe02], 0xffff
jne 0x4f18fc
mov edx, dword [0x51f8b0]
mov eax, dword [0x51f8ac]
mov ecx, dword [0x51fdfc]
push edx
mov edx, dword [0x51fdf8]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f18c4
fdiv qword [0x401940]
jmp 0x4f18d5
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520d64
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe02], 0
jne 0x4f1927
lea edx, [ebp - 0x17c]
mov ecx, 0x520d64
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
lea eax, [ebp - 0x17c]
push 0x520d64
push eax
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 0x8002
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
test ax, ax
je 0x4f19f8
mov ecx, 0x64
push 0x520d64
mov dword [ebp - 0x174], ecx
mov dword [ebp - 0x194], ecx
lea ecx, [ebp - 0x17c]
lea edx, [ebp - 0xec]
mov eax, 2
push ecx
push edx
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0x3fe00000
mov dword [ebp - 0x18c], 5
mov dword [ebp - 0x19c], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x18c]
lea ecx, [ebp - 0xfc]
push eax
push ecx
call esi
lea edx, [ebp - 0x10c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
push eax
lea eax, [ebp - 0x19c]
lea ecx, [ebp - 0x11c]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
mov edx, eax
mov ecx, 0x520d64
call ebx
lea ecx, [ebp - 0xfc]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp word [0x51fe26], 0xffff
jne 0x4f1a70
mov edx, dword [0x51f8b0]
mov eax, dword [0x51f8ac]
mov ecx, dword [0x51fe20]
push edx
mov edx, dword [0x51fe1c]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1a38
fdiv qword [0x401940]
jmp 0x4f1a49
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520d74
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe26], 0
jne 0x4f1a9b
lea edx, [ebp - 0x17c]
mov ecx, 0x520d74
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fe4a], 0xffff
jne 0x4f1b12
mov eax, dword [0x51f8b0]
mov ecx, dword [0x51f8ac]
mov edx, dword [0x51fe44]
push eax
mov eax, dword [0x51fe40]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1ada
fdiv qword [0x401940]
jmp 0x4f1aeb
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520d84
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe4a], 0
jne 0x4f1b3d
lea edx, [ebp - 0x17c]
mov ecx, 0x520d84
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fe6e], 0xffff
jne 0x4f1bb5
mov ecx, dword [0x51f8b0]
mov edx, dword [0x51f8ac]
mov eax, dword [0x51fe68]
push ecx
mov ecx, dword [0x51fe64]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1b7d
fdiv qword [0x401940]
jmp 0x4f1b8e
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520d94
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe6e], 0
jne 0x4f1be0
lea edx, [ebp - 0x17c]
mov ecx, 0x520d94
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fe92], 0xffff
jne 0x4f1c58
mov edx, dword [0x51f8b0]
mov eax, dword [0x51f8ac]
mov ecx, dword [0x51fe8c]
push edx
mov edx, dword [0x51fe88]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1c20
fdiv qword [0x401940]
jmp 0x4f1c31
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520da4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fe92], 0
jne 0x4f1c83
lea edx, [ebp - 0x17c]
mov ecx, 0x520da4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51feb6], 0xffff
jne 0x4f1cfa
mov eax, dword [0x51f8b0]
mov ecx, dword [0x51f8ac]
mov edx, dword [0x51feb0]
push eax
mov eax, dword [0x51feac]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1cc2
fdiv qword [0x401940]
jmp 0x4f1cd3
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520db4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51feb6], 0
jne 0x4f1d25
lea edx, [ebp - 0x17c]
mov ecx, 0x520db4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51feda], 0xffff
jne 0x4f1d9d
mov ecx, dword [0x51f8b0]
mov edx, dword [0x51f8ac]
mov eax, dword [0x51fed4]
push ecx
mov ecx, dword [0x51fed0]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1d65
fdiv qword [0x401940]
jmp 0x4f1d76
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520dc4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51feda], 0
jne 0x4f1dc8
lea edx, [ebp - 0x17c]
mov ecx, 0x520dc4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51fefe], 0xffff
jne 0x4f1e40
mov edx, dword [0x51f8b0]
mov eax, dword [0x51f8ac]
mov ecx, dword [0x51fef8]
push edx
mov edx, dword [0x51fef4]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1e08
fdiv qword [0x401940]
jmp 0x4f1e19
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520dd4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51fefe], 0
jne 0x4f1e6b
lea edx, [ebp - 0x17c]
mov ecx, 0x520dd4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51ff22], 0xffff
jne 0x4f1ee2
mov eax, dword [0x51f8b0]
mov ecx, dword [0x51f8ac]
mov edx, dword [0x51ff1c]
push eax
mov eax, dword [0x51ff18]
push ecx
push edx
push eax
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1eaa
fdiv qword [0x401940]
jmp 0x4f1ebb
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520de4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51ff22], 0
jne 0x4f1f0d
lea edx, [ebp - 0x17c]
mov ecx, 0x520de4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
cmp word [0x51ff46], 0xffff
jne 0x4f1f85
mov ecx, dword [0x51f8b0]
mov edx, dword [0x51f8ac]
mov eax, dword [0x51ff40]
push ecx
mov ecx, dword [0x51ff3c]
push edx
push eax
push ecx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1f4d
fdiv qword [0x401940]
jmp 0x4f1f5e
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
lea edx, [ebp - 0x17c]
mov ecx, 0x520df4
mov dword [ebp - 0x17c], 5
fstp qword [ebp - 0x174]
fnstsw ax
test al, 0xd
jne 0x4f2392
call ebx
cmp word [0x51ff46], 0
jne 0x4f1fb0
lea edx, [ebp - 0x17c]
mov ecx, 0x520df4
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
or eax, 0xffffffff
cmp word [0x520ef2], ax
jne 0x4f2048
cmp word [0x5210f6], ax
jne 0x4f202b
mov edx, dword [0x51f8b0]
mov eax, dword [0x51f8ac]
mov ecx, dword [0x5210e4]
push edx
mov edx, dword [0x5210e0]
push eax
push ecx
push edx
call edi
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR8Cy]
cmp dword [section..data], 0
jne 0x4f1fff
fdiv qword [0x401940]
jmp 0x4f2010
push dword [0x401944]
push dword [0x401940]
call sub.MSVBVM60.DLL__adj_fdiv_m64
fnstsw ax
test al, 0xd
jne 0x4f2392
call dword [sym.imp.MSVBVM60.DLL___vbaFpCy]
mov dword [0x5210fc], eax
mov dword [0x521100], edx
cmp word [0x5210f6], 0
jne 0x4f2048
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaCyI2]
mov dword [0x5210fc], eax
mov dword [0x521100], edx
mov eax, dword [0x5210fc]
mov ecx, dword [0x521100]
push 0x520d74
lea edx, [ebp - 0xec]
push 0x520d84
push edx
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], 6
call esi
push eax
lea eax, [ebp - 0xfc]
push 0x520d94
push eax
call esi
push eax
lea ecx, [ebp - 0x10c]
push 0x520da4
push ecx
call esi
push eax
lea edx, [ebp - 0x11c]
push 0x520db4
push edx
call esi
push eax
lea eax, [ebp - 0x12c]
push 0x520dc4
push eax
call esi
push eax
lea ecx, [ebp - 0x13c]
push 0x520dd4
push ecx
call esi
push eax
lea edx, [ebp - 0x14c]
push 0x520de4
push edx
call esi
push eax
lea eax, [ebp - 0x15c]
push 0x520df4
push eax
call esi
lea ecx, [ebp - 0x17c]
push eax
lea edx, [ebp - 0x16c]
push ecx
push edx
call esi
mov edx, eax
mov ecx, 0x520d34
call ebx
lea eax, [ebp - 0x15c]
lea ecx, [ebp - 0x14c]
push eax
lea edx, [ebp - 0x13c]
push ecx
lea eax, [ebp - 0x12c]
push edx
lea ecx, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x10c]
push ecx
lea eax, [ebp - 0xfc]
push edx
lea ecx, [ebp - 0xec]
push eax
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, 0x64
mov ecx, 2
add esp, 0x24
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x17c], ecx
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0x3fe00000
mov dword [ebp - 0x18c], 5
mov dword [ebp - 0x194], eax
lea edx, [ebp - 0x17c]
push 0x520d34
lea eax, [ebp - 0xec]
push edx
push eax
mov dword [ebp - 0x19c], ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
lea ecx, [ebp - 0x18c]
push eax
lea edx, [ebp - 0xfc]
push ecx
push edx
call esi
push eax
lea eax, [ebp - 0x10c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarInt]
lea ecx, [ebp - 0x19c]
push eax
lea edx, [ebp - 0x11c]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarDiv]
mov edx, eax
mov ecx, 0x520d34
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xfc]
call edi
mov eax, dword [0x51f298]
mov ecx, dword [0x51f29c]
lea edx, [ebp - 0x17c]
mov dword [ebp - 0x174], eax
push edx
push 0x520d64
lea eax, [ebp - 0xec]
push 0x520d34
push eax
mov dword [ebp - 0x170], ecx
mov dword [ebp - 0x17c], 0x8006
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGe]
lea ecx, [ebp - 0xec]
mov esi, eax
call edi
test si, si
je 0x4f2298
mov ecx, dword [0x51f298]
mov edx, dword [0x51f29c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
lea eax, [ebp - 0x17c]
mov dword [ebp - 0x174], ecx
push eax
lea ecx, [ebp - 0xec]
push 0x520d64
push ecx
mov dword [ebp - 0x170], edx
mov dword [ebp - 0x17c], 6
call esi
push eax
lea edx, [ebp - 0xfc]
push 0x520d34
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x90]
call ebx
wait
push 0x4f2381
jmp 0x4f232f
lea edx, [ebp - 0x17c]
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x17c], 2
call ebx
wait
push 0x4f2381
jmp 0x4f232f
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x20]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x40]
call esi
lea ecx, [ebp - 0x50]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x70]
call esi
lea ecx, [ebp - 0x80]
call esi
lea ecx, [ebp - 0x90]
call esi
lea ecx, [ebp - 0xa0]
call esi
lea ecx, [ebp - 0xb0]
call esi
lea ecx, [ebp - 0xc0]
call esi
lea ecx, [ebp - 0xd0]
call esi
ret
jmp 0x403d0c