Function at 0x536e40
Capabilities:
Reference sql statements

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x402556
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1c4
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x401850
xor ebx, ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1b4], ebx
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov edx, 0x4124f0
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov eax, dword [ebp - 0x28]
push eax
push 0x4117e8
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call esi
mov edx, eax
lea ecx, [ebp - 0x28]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
mov ecx, dword [ebp - 0x28]
push ecx
push 0x412534
call esi
mov edx, eax
lea ecx, [ebp - 0x28]
call edi
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x158], 3
mov dword [ebp - 0x154], 1
mov dword [ebp - 0x150], ebx
mov eax, dword [0x5870fc]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
lea ecx, [ebp - 0x14c]
push ecx
lea ecx, [ebp - 0x158]
push ecx
lea ecx, [ebp - 0x154]
push ecx
lea ecx, [ebp - 0x150]
push ecx
lea ecx, [ebp - 0x28]
push ecx
push eax
call dword [edx + 0xdc]
fnclex
cmp eax, ebx
jge 0x536fca
push 0xdc
push 0x40c4f0
mov edx, dword [0x5870fc]
push edx
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call esi
jmp 0x536fd0
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x40be58
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea ecx, [ebp - 0x30]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x150]
push ecx
push eax
call dword [edx + 0xdc]
fnclex
cmp eax, ebx
jge 0x53701d
push 0xdc
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call esi
cmp dword [ebp - 0x150], 1
jne 0x53c07f
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x14c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, ebx
jge 0x53704e
push 0x50
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call esi
cmp word [ebp - 0x14c], bx
jne 0x53c07f
mov edx, 0x412560
mov ecx, 0x587098
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
push 0x412590
mov edx, dword [0x587098]
push edx
push 0x4118a0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x34]
call edi
push eax
call fcn.0054b820
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x14c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
cmp eax, ebx
jge 0x5370bc
push 0x50
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call esi
cmp word [ebp - 0x14c], bx
jne 0x53c07f
mov dword [ebp - 0x100], 0x4125a4
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
cmp eax, ebx
jge 0x5370fe
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call esi
mov eax, dword [ebp - 0x3c]
mov esi, eax
mov ecx, 0x4125f8
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x537158
push 0x28
push 0x40c900
push esi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call ebx
jmp 0x53715e
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x53717e
push 0x34
push 0x40c910
push esi
push eax
call ebx
mov dword [ebp - 0x110], 0x4101a4
mov edi, 8
mov dword [ebp - 0x118], edi
lea edx, [ebp - 0x108]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x68]
push ecx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call esi
push eax
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x78]
push eax
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [0x5870fc]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x9c]
fnclex
test eax, eax
jge 0x53721d
push 0x9c
push 0x40c4f0
mov ecx, dword [0x5870fc]
push ecx
push eax
call ebx
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x537236
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x168], eax
mov ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x50], ecx
mov edx, 9
mov dword [ebp - 0x58], edx
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], edi
mov edi, dword [eax]
push 0xffffffffffffffff
push 3
push 1
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x54]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x4c]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov dword [edx + 8], esi
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [edi + 0xa0]
fnclex
test eax, eax
jge 0x5372c9
push 0xa0
push 0x40c6fc
mov edx, dword [ebp - 0x168]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x5372cf
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x58]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x5372f1
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x14c]
push edx
push eax
call dword [ecx + 0x50]
fnclex
test eax, eax
jge 0x537311
push 0x50
push 0x40c6fc
push esi
push eax
call edi
cmp word [ebp - 0x14c], 0
je 0x5373c1
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x537338
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x80020004
mov dword [ebp - 0x100], ecx
mov edx, 0xa
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x78]
fnclex
test eax, eax
jge 0x5373c1
push 0x78
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x5373d7
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x537415
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4125f8
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x537471
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x537491
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0x41262c
mov dword [ebp - 0x118], 8
mov esi, dword [ebp - 0x178]
mov ebx, dword [esi]
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x118]
mov dword [ecx], edx
mov eax, dword [ebp - 0x114]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x110]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x10c]
mov dword [ecx + 0xc], eax
push esi
call dword [ebx + 0x100]
fnclex
test eax, eax
jge 0x537520
push 0x100
push 0x40c6fc
push esi
push eax
call edi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x537578
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x41263c
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5375d4
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5375f4
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov ebx, 0x40b6f0
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x118], 0x8008
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov si, ax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
test si, si
mov eax, dword [ebp - 0x20]
je 0x537722
test eax, eax
jne 0x537686
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x4103d0
mov dword [ebp - 0x100], ecx
mov edx, 8
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x41265c
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x53789d
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
jmp 0x53789d
test eax, eax
jne 0x537735
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53776f
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x41263c
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5377cb
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5377eb
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0x41265c
mov dword [ebp - 0x118], 8
mov esi, dword [ebp - 0x178]
mov ebx, dword [esi]
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x118]
mov dword [ecx], edx
mov eax, dword [ebp - 0x114]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x110]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x10c]
mov dword [ecx + 0xc], eax
push esi
call dword [ebx + 0x100]
fnclex
test eax, eax
jge 0x53787a
push 0x100
push 0x40c6fc
push esi
push eax
call edi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x5378b3
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x5378f1
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412670
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53794d
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53796d
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0x412688
mov dword [ebp - 0x118], 8
mov esi, dword [ebp - 0x178]
mov ebx, dword [esi]
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x118]
mov dword [ecx], edx
mov eax, dword [ebp - 0x114]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x110]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x10c]
mov dword [ecx + 0xc], eax
push esi
call dword [ebx + 0x100]
fnclex
test eax, eax
jge 0x5379fc
push 0x100
push 0x40c6fc
push esi
push eax
call edi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x537a54
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412694
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x537ab0
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x537ad0
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0xd
mov dword [ebp - 0x118], 0x8002
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
test si, si
je 0x537e12
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x537b62
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412694
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x537bbe
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x537bde
push 0x34
push 0x40c910
push esi
push eax
call edi
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x44]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x537bff
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x17c], eax
mov ecx, 0x412694
mov dword [ebp - 0x120], ecx
mov edx, 8
mov dword [ebp - 0x128], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x48]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x124]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x11c]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x537c5b
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x17c]
push edx
push eax
call edi
mov eax, dword [ebp - 0x48]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x537c7e
push 0x34
push 0x40c910
push esi
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x537c94
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
push 6
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x68]
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call ebx
push eax
lea ecx, [ebp - 0x78]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov dword [ebp - 0x110], 0x40d868
mov eax, 8
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x130], 0x40b6f0
mov dword [ebp - 0x138], eax
push 7
lea edx, [ebp - 0x138]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xa8]
push ecx
call ebx
push eax
lea edx, [ebp - 0xb8]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcRightCharVar]
mov dword [ebp - 0x140], 0x40e304
mov dword [ebp - 0x148], 8
mov edx, dword [esi]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x118]
push ecx
lea eax, [ebp - 0x88]
push eax
mov dword [ebp - 0x1e0], edx
call ebx
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xc8]
push edx
call ebx
sub esp, 0x10
mov ecx, esp
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
sub esp, 0x10
mov ecx, esp
mov edx, dword [ebp - 0x148]
mov dword [ecx], edx
mov eax, dword [ebp - 0x144]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x140]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x13c]
mov dword [ecx + 0xc], eax
push esi
mov ecx, dword [ebp - 0x1e0]
call dword [ecx + 0x100]
fnclex
test eax, eax
jge 0x537dc0
push 0x100
push 0x40c6fc
push esi
push eax
call edi
lea edx, [ebp - 0x48]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0xc8]
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x88]
push edx
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 8
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x38
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x537e2b
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x40b6f0
mov dword [ebp - 0x100], ecx
mov edx, 8
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x537ebe
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x537eeb
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x537f08
push 0x54
push 0x40c6fc
push esi
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x16c], eax
mov ecx, 0x40e4b8
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x537f64
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x16c]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x537f84
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x410544
mov dword [ebp - 0x118], 0x8008
mov dword [ebp - 0x130], 0x40b6f0
mov dword [ebp - 0x138], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x537fe5
lea ecx, [ebp - 0x20]
push ecx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x44]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x538002
push 0x54
push 0x40c6fc
push esi
push eax
call edi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x184], eax
mov ecx, 0x4126b0
mov dword [ebp - 0x120], ecx
mov edx, 8
mov dword [ebp - 0x128], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x48]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x124]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0x11c]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53805e
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x184]
push edx
push eax
call edi
mov eax, dword [ebp - 0x48]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x98]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x538081
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x138]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0xa8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0xb8]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x140], 0x4103c8
mov dword [ebp - 0x148], 0x8008
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
lea eax, [ebp - 0x88]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
call esi
push eax
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0x148]
push edx
lea eax, [ebp - 0xc8]
push eax
call esi
push eax
lea ecx, [ebp - 0xd8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
lea edx, [ebp - 0xe8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarNot]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov esi, eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x44]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0xb8]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 6
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
test si, si
je 0x539515
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538197
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5381f3
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x538213
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x4126d4
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x538422
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x5382d9
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x40b6f0
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x538369
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x538382
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 3
mov dword [ebp - 0x100], ecx
mov edx, 2
mov dword [ebp - 0x108], edx
mov esi, 0x4126b0
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], 8
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov dword [edx + 8], esi
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [edi + 0x100]
fnclex
test eax, eax
jge 0x53841c
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x538422
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538457
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5384b3
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5384d3
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x4126e0
mov dword [ebp - 0x118], 8
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x5386e4
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x538598
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x4126ec
mov dword [ebp - 0x100], ecx
mov edx, 8
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x53862b
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x538644
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0xa
mov dword [ebp - 0x100], ecx
mov edx, 2
mov dword [ebp - 0x108], edx
mov esi, 0x4126b0
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], 8
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov dword [edx + 8], esi
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [edi + 0x100]
fnclex
test eax, eax
jge 0x5386de
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x5386e4
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538719
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x538775
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x538795
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x4126f8
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x5388eb
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53885b
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x412704
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x5388eb
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538920
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53897c
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53899c
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x412710
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x538af2
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x538a62
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x41271c
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x538af2
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538b27
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x538b83
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x538ba3
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x412728
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x538cf9
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x538c69
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x412734
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x538cf9
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538d2e
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x538d8a
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x538daa
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x412740
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x538f00
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x538e70
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x4121d4
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x538f00
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x538f35
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x538f91
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x538fb1
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x4121e0
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x539107
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x539077
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x4121d4
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x539107
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53913c
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x539198
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5391b8
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x4121ec
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x53930e
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53927e
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x41200c
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x53930e
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x539343
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4126bc
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53939f
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5393bf
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x412018
mov ebx, 8
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x128], 0x8002
push 1
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
push 0
lea eax, [ebp - 0x88]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaInStrVar]
push eax
lea ecx, [ebp - 0x128]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
test si, si
je 0x539515
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x539485
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x411a8c
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e4b8
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x539515
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53954a
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411c58
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5395a6
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5395c6
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR8]
fcomp qword [0x4016e0]
fnstsw ax
test ah, 0x40
jne 0x539607
mov esi, 1
jmp 0x539609
xor esi, esi
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
neg esi
test si, si
je 0x539e9f
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x539675
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411c58
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5396d1
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x5396f1
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
fstp qword [ebp - 0x160]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x539734
lea ecx, [ebp - 0x20]
push ecx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x120], 0x41020c
mov dword [ebp - 0x128], 8
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x78], 5
push 1
push 1
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, 0x40e4b8
mov dword [ebp - 0x130], eax
mov ecx, 8
mov dword [ebp - 0x138], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x98]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x94]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x90]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x8c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x134]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x12c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x539811
push 0x100
push 0x40c6fc
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x539817
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 5
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53988a
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x41274c
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x5398e6
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x539906
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call ebx
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x40b6f0
mov dword [ebp - 0x118], 0x8008
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov si, ax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
test si, si
je 0x539e9f
mov edx, 0x41276c
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x5399c3
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0xf0], 0x41274c
mov ecx, 8
mov dword [ebp - 0xf8], ecx
mov edx, dword [eax]
lea esi, [ebp - 0x40]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [esi + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [esi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x539a24
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x539a44
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call ebx
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x1a4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
mov dword [ebp - 0xf0], 0x412790
mov dword [ebp - 0xf8], 0x8008
lea edx, [ebp - 0x1a4]
push edx
lea eax, [ebp - 0xf8]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
call esi
test ax, ax
jne 0x539c4f
mov dword [ebp - 0x100], 0x41279c
mov dword [ebp - 0x108], 0x8008
lea ecx, [ebp - 0x1a4]
push ecx
lea edx, [ebp - 0x108]
push edx
call esi
test ax, ax
jne 0x539c4f
mov dword [ebp - 0x110], 0x4127a8
mov dword [ebp - 0x118], 0x8008
lea eax, [ebp - 0x1a4]
push eax
lea ecx, [ebp - 0x118]
push ecx
call esi
test ax, ax
jne 0x539c4f
mov edx, dword [ebp - 0x28]
push edx
push 0x4127dc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x539b59
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0xf0], 0x41274c
mov ecx, 8
mov dword [ebp - 0xf8], ecx
mov edx, dword [eax]
lea esi, [ebp - 0x40]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [esi + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [esi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x539bba
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x539bda
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x100], 0x4101a4
mov dword [ebp - 0x108], 8
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x78]
push edx
call ebx
push eax
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x88]
push ecx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x68]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x20
jmp 0x539c69
mov edx, dword [ebp - 0x28]
push edx
push 0x4127b4
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x539c9e
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0xf0], 0x411c58
mov ecx, 8
mov dword [ebp - 0xf8], ecx
mov edx, dword [eax]
lea esi, [ebp - 0x40]
push esi
sub esp, 0x10
mov esi, esp
mov dword [esi], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [esi + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [esi + 0xc], ecx
push eax
call dword [edx + 0x28]
fnclex
test eax, eax
jge 0x539cff
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x539d1f
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call ebx
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
fstp qword [ebp - 0x160]
mov ecx, dword [ebp - 0x28]
push ecx
push 0x4127fc
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0xa0], eax
mov esi, 8
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0x120], 0x41020c
mov dword [ebp - 0x128], esi
lea edx, [ebp - 0x128]
lea ecx, [ebp - 0x88]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov edx, dword [ebp - 0x160]
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x78], 5
push 1
push 1
lea ecx, [ebp - 0x88]
push ecx
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov dword [ebp - 0x130], 0x4101a4
mov dword [ebp - 0x138], esi
lea ecx, [ebp - 0xa8]
push ecx
lea edx, [ebp - 0x98]
push edx
lea eax, [ebp - 0xb8]
push eax
call ebx
push eax
lea ecx, [ebp - 0x138]
push ecx
lea edx, [ebp - 0xc8]
push edx
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x34]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xb8]
push eax
lea ecx, [ebp - 0x98]
push ecx
lea edx, [ebp - 0xa8]
push edx
lea eax, [ebp - 0x88]
push eax
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push esi
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x30
mov dword [ebp - 0x14c], 0xffffffff
mov eax, dword [0x5870fc]
mov ecx, dword [eax]
lea edx, [ebp - 0x150]
push edx
lea edx, [ebp - 0x14c]
push edx
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0xd8]
fnclex
test eax, eax
jge 0x539e9f
push 0xd8
push 0x40c4f0
mov ecx, dword [0x5870fc]
push ecx
push eax
call edi
mov dword [ebp - 0x100], 0x411a98
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x539ed4
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4125f8
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x539f30
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x539f50
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0x412824
mov dword [ebp - 0x118], 8
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call esi
push eax
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x78]
push ecx
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x158], 3
mov esi, 1
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], 0
mov eax, dword [0x5870fc]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
lea edx, [ebp - 0x14c]
push edx
lea edx, [ebp - 0x158]
push edx
lea edx, [ebp - 0x154]
push edx
lea edx, [ebp - 0x150]
push edx
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x53a037
push 0xdc
push 0x40c4f0
mov ecx, dword [0x5870fc]
push ecx
push eax
call edi
push 0x40be58
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x150]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x53a084
push 0xdc
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
cmp dword [ebp - 0x150], esi
jne 0x53a32a
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x14c]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x53a0b4
push 0x50
push 0x40c6fc
mov edx, dword [ebp - 0x2c]
push edx
push eax
call edi
cmp word [ebp - 0x14c], 0
jne 0x53a32a
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53a0e3
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411b44
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53a13f
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 9
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 0x8008
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov si, ax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
test si, si
je 0x53a32a
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53a1cf
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411b44
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53a22b
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53a241
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x412858
mov dword [ebp - 0x108], 8
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 9
push 1
push 1
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, 0x412874
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53a304
push 0x100
push 0x40c6fc
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x53a30a
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53a357
lea ecx, [ebp - 0x20]
push ecx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53a374
push 0x54
push 0x40c6fc
push esi
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x16c], eax
mov ecx, 0x412874
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53a3d0
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x16c]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53a3f0
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x34]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimBstr]
mov edx, eax
lea ecx, [ebp - 0x38]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x40b6f0
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
mov esi, eax
neg esi
sbb esi, esi
inc esi
neg esi
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x34]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x24
test si, si
je 0x53a51f
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53a48c
lea ecx, [ebp - 0x20]
push ecx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x412884
mov dword [ebp - 0x100], ecx
mov edx, 8
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x412874
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x53a51f
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x411a98
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53a554
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4125f8
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53a5b0
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53a5d0
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0x4128a0
mov dword [ebp - 0x118], 8
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call esi
push eax
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x78]
push ecx
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x158], 3
mov esi, 1
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], 0
mov eax, dword [0x5870fc]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
lea edx, [ebp - 0x14c]
push edx
lea edx, [ebp - 0x158]
push edx
lea edx, [ebp - 0x154]
push edx
lea edx, [ebp - 0x150]
push edx
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x53a6b7
push 0xdc
push 0x40c4f0
mov ecx, dword [0x5870fc]
push ecx
push eax
call edi
push 0x40be58
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x150]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x53a704
push 0xdc
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
cmp dword [ebp - 0x150], esi
jne 0x53a9aa
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x14c]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x53a734
push 0x50
push 0x40c6fc
mov edx, dword [ebp - 0x2c]
push edx
push eax
call edi
cmp word [ebp - 0x14c], 0
jne 0x53a9aa
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53a763
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411b44
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53a7bf
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 9
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x68]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 0x8008
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov si, ax
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
test si, si
je 0x53a9aa
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53a84f
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411b44
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53a8ab
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53a8c1
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x412858
mov dword [ebp - 0x108], 8
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 9
push 1
push 1
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, 0x4128d4
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53a984
push 0x100
push 0x40c6fc
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x53a98a
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53a9d7
lea ecx, [ebp - 0x20]
push ecx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53a9f4
push 0x54
push 0x40c6fc
push esi
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x16c], eax
mov ecx, 0x4128d4
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53aa50
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x16c]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53aa70
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov dword [ebp - 0x110], 0x40b6f0
mov dword [ebp - 0x118], 0x8008
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x118]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
mov si, ax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
test si, si
mov eax, dword [ebp - 0x20]
je 0x53aba2
test eax, eax
jne 0x53ab01
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 1
mov dword [ebp - 0x100], ecx
mov edx, 2
mov dword [ebp - 0x108], edx
mov esi, 0x40e510
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], 8
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov dword [edx + 8], esi
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [edi + 0x100]
fnclex
test eax, eax
jge 0x53ac4e
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x53ac54
test eax, eax
jne 0x53abb8
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
xor ecx, ecx
mov dword [ebp - 0x100], ecx
mov edx, 2
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x40e510
mov dword [ebp - 0xf8], 8
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x53ac54
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
jmp 0x53ac54
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53ac6a
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53aca8
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4128e4
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53ad04
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53ad24
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov eax, 0x4118c8
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [ebp - 0x178]
mov edx, dword [edx]
sub esp, 0x10
mov esi, esp
mov ebx, dword [ebp - 0x78]
mov dword [esi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [esi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [esi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [esi + 0xc], ebx
sub esp, 0x10
mov esi, esp
mov dword [esi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [esi + 0xc], eax
mov esi, dword [ebp - 0x178]
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53adbb
push 0x100
push 0x40c6fc
push esi
push eax
call edi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 0x100], 0x411a98
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53ae17
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x4125f8
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53ae73
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53ae93
push 0x34
push 0x40c910
push esi
push eax
call edi
mov dword [ebp - 0x110], 0x412904
mov ebx, 8
mov dword [ebp - 0x118], ebx
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call esi
push eax
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x78]
push ecx
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
xor eax, eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x158], 3
mov esi, 1
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], eax
mov eax, dword [0x5870fc]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
lea edx, [ebp - 0x14c]
push edx
lea edx, [ebp - 0x158]
push edx
lea edx, [ebp - 0x154]
push edx
lea edx, [ebp - 0x150]
push edx
lea edx, [ebp - 0x28]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x53af75
push 0xdc
push 0x40c4f0
mov ecx, dword [0x5870fc]
push ecx
push eax
call edi
push 0x40be58
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaCastObj]
push eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax]
lea edx, [ebp - 0x150]
push edx
push eax
call dword [ecx + 0xdc]
fnclex
test eax, eax
jge 0x53afc2
push 0xdc
push 0x40c6fc
mov ecx, dword [ebp - 0x2c]
push ecx
push eax
call edi
cmp dword [ebp - 0x150], esi
jne 0x53b18c
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x14c]
push ecx
push eax
call dword [edx + 0x50]
fnclex
test eax, eax
jge 0x53aff2
push 0x50
push 0x40c6fc
mov edx, dword [ebp - 0x2c]
push edx
push eax
call edi
cmp word [ebp - 0x14c], 0
jne 0x53b18c
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53b016
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x178], ecx
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], ebx
mov eax, dword [ebp - 0x2c]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53b050
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x2c]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x411b44
mov dword [ebp - 0xf0], ecx
mov edx, ebx
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53b0a9
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53b0c9
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
mov eax, reloc.MSVBVM60.DLL_rtcMsgBox
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [ebp - 0x178]
mov edx, dword [edx]
sub esp, 0x10
mov esi, esp
mov ebx, dword [ebp - 0x78]
mov dword [esi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [esi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [esi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [esi + 0xc], ebx
sub esp, 0x10
mov esi, esp
mov dword [esi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [esi + 4], ecx
mov dword [esi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [esi + 0xc], eax
mov esi, dword [ebp - 0x178]
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53b160
push 0x100
push 0x40c6fc
push esi
push eax
call edi
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov ebx, 8
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], ebx
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53b1bd
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412944
mov dword [ebp - 0xf0], ecx
mov edx, ebx
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53b216
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53b236
push 0x34
push 0x40c910
push esi
push eax
call edi
mov ebx, 8
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x118], 0x8002
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVar]
push eax
lea ecx, [ebp - 0x118]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
mov si, ax
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x3c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
test si, si
je 0x53b426
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53b2c9
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412944
mov dword [ebp - 0xf0], ecx
mov edx, ebx
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53b322
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53b338
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x412858
mov dword [ebp - 0x108], 8
lea edx, [ebp - 0x108]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x58], 9
push 1
push 1
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarFromFormatVar]
mov eax, 0x412960
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53b3fb
push 0x100
push 0x40c6fc
push esi
push eax
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call edi
jmp 0x53b401
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x3c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x68]
push edx
lea eax, [ebp - 0x58]
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x10
jmp 0x53b4cf
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53b43f
lea ecx, [ebp - 0x20]
push ecx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x40b6f0
mov dword [ebp - 0x100], ecx
mov edx, ebx
mov dword [ebp - 0x108], edx
mov dword [ebp - 0xf0], 0x412960
mov dword [ebp - 0xf8], ebx
mov esi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov ecx, dword [ebp - 0xf0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [esi + 0x100]
fnclex
test eax, eax
jge 0x53b4cf
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call edi
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53b504
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412970
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53b560
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53b580
push 0x34
push 0x40c910
push esi
push eax
call edi
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcTrimVar]
push 3
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x88]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x1b4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x3c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x58]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov dword [ebp - 0xf0], 0x412988
mov ebx, 0x8008
mov dword [ebp - 0xf8], ebx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0xf8]
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
call esi
test ax, ax
jne 0x53b83f
mov dword [ebp - 0x100], 0x412994
mov dword [ebp - 0x108], ebx
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x108]
push edx
call esi
test ax, ax
jne 0x53b83f
mov dword [ebp - 0x110], 0x4129a0
mov dword [ebp - 0x118], ebx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x118]
push ecx
call esi
test ax, ax
jne 0x53b83f
mov dword [ebp - 0x120], 0x4129ac
mov dword [ebp - 0x128], ebx
lea edx, [ebp - 0x1b4]
push edx
lea eax, [ebp - 0x128]
push eax
call esi
test ax, ax
jne 0x53b83f
mov dword [ebp - 0x130], 0x4129b8
mov dword [ebp - 0x138], ebx
lea ecx, [ebp - 0x1b4]
push ecx
lea edx, [ebp - 0x138]
push edx
call esi
test ax, ax
jne 0x53b83f
mov dword [ebp - 0x140], 0x4129c4
mov dword [ebp - 0x148], ebx
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x148]
push ecx
call esi
test ax, ax
jne 0x53b83f
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
lea ecx, [ebp - 0x3c]
push ecx
push eax
call dword [edx + 0x54]
fnclex
test eax, eax
jge 0x53b70e
push 0x54
push 0x40c6fc
mov edx, dword [ebp - 0x30]
push edx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412970
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53b76a
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53b78a
push 0x34
push 0x40c910
push esi
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53b7a0
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
push 0x1e
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x78]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov eax, reloc.MSVBVM60.DLL_rtcMsgBox
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53b99a
jmp 0x53b988
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53b860
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call edi
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x168], eax
mov ecx, 0x412970
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov esi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [esi + 0x28]
fnclex
test eax, eax
jge 0x53b8bc
push 0x28
push 0x40c900
mov edx, dword [ebp - 0x168]
push edx
push eax
call edi
mov eax, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [eax]
lea edx, [ebp - 0x58]
push edx
push eax
call dword [ecx + 0x34]
fnclex
test eax, eax
jge 0x53b8dc
push 0x34
push 0x40c910
push esi
push eax
call edi
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53b8f2
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
push 0x1e
lea ecx, [ebp - 0x108]
push ecx
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea ecx, [ebp - 0x78]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov eax, 0x4129d0
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53b99a
push 0x100
push 0x40c6fc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53b9e6
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x3c]
mov esi, eax
mov ecx, 0x4129e0
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x53ba3c
push 0x28
push 0x40c900
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x53ba60
push 0x34
push 0x40c910
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53ba76
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
push 0x32
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov eax, 0x4129fc
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53bb1e
push 0x100
push 0x40c6fc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53bb6a
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x3c]
mov esi, eax
mov ecx, 0x412a0c
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x53bbc0
push 0x28
push 0x40c900
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x53bbe4
push 0x34
push 0x40c910
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53bbfa
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
push 0x1e
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov eax, 0x412a28
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53bca2
push 0x100
push 0x40c6fc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
lea edx, [ebp - 0x3c]
push edx
push eax
call dword [ecx + 0x54]
fnclex
test eax, eax
jge 0x53bcee
push 0x54
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x3c]
mov esi, eax
mov ecx, 0x412a38
mov dword [ebp - 0xf0], ecx
mov edx, 8
mov dword [ebp - 0xf8], edx
mov edi, dword [eax]
lea ebx, [ebp - 0x40]
push ebx
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0xf4]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebx + 0xc], ecx
push eax
call dword [edi + 0x28]
fnclex
test eax, eax
jge 0x53bd44
push 0x28
push 0x40c900
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x40]
mov esi, eax
mov edx, dword [eax]
lea ecx, [ebp - 0x58]
push ecx
push eax
call dword [edx + 0x34]
fnclex
test eax, eax
jge 0x53bd68
push 0x34
push 0x40c910
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53bd7e
lea edx, [ebp - 0x20]
push edx
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x100], 0x40b6f0
mov dword [ebp - 0x108], 8
push 0x14
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x58]
push ecx
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x78]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcLeftCharVar]
mov eax, 0x412a50
mov dword [ebp - 0x110], eax
mov ecx, 8
mov dword [ebp - 0x118], ecx
mov edx, dword [esi]
sub esp, 0x10
mov edi, esp
mov ebx, dword [ebp - 0x78]
mov dword [edi], ebx
mov ebx, dword [ebp - 0x74]
mov dword [edi + 4], ebx
mov ebx, dword [ebp - 0x70]
mov dword [edi + 8], ebx
mov ebx, dword [ebp - 0x6c]
mov dword [edi + 0xc], ebx
sub esp, 0x10
mov edi, esp
mov dword [edi], ecx
mov ecx, dword [ebp - 0x114]
mov dword [edi + 4], ecx
mov dword [edi + 8], eax
mov eax, dword [ebp - 0x10c]
mov dword [edi + 0xc], eax
push esi
call dword [edx + 0x100]
fnclex
test eax, eax
jge 0x53be26
push 0x100
push 0x40c6fc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x3c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x68]
push ecx
lea edx, [ebp - 0x58]
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x1c
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53be66
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
xor ecx, ecx
mov dword [ebp - 0x100], ecx
mov edx, 2
mov dword [ebp - 0x108], edx
mov esi, 0x412a60
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], 8
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov dword [edx + 8], esi
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [edi + 0x100]
fnclex
test eax, eax
jge 0x53bef9
push 0x100
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
test eax, eax
jne 0x53bf12
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x164], eax
mov ecx, 0x80020004
mov dword [ebp - 0x100], ecx
mov edx, 0xa
mov dword [ebp - 0x108], edx
mov esi, ecx
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf8], edx
mov edi, dword [eax]
sub esp, 0x10
mov ebx, esp
mov dword [ebx], edx
mov edx, dword [ebp - 0x104]
mov dword [ebx + 4], edx
mov dword [ebx + 8], ecx
mov ecx, dword [ebp - 0xfc]
mov dword [ebx + 0xc], ecx
sub esp, 0x10
mov edx, esp
mov ecx, dword [ebp - 0xf8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
mov dword [edx + 4], ecx
mov dword [edx + 8], esi
mov ecx, dword [ebp - 0xec]
mov dword [edx + 0xc], ecx
push eax
call dword [edi + 0xac]
fnclex
xor ebx, ebx
cmp eax, ebx
jge 0x53bfa7
push 0xac
push 0x40c6fc
mov edx, dword [ebp - 0x164]
push edx
push eax
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
call esi
jmp 0x53bfad
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov eax, dword [ebp - 0x20]
cmp eax, ebx
jne 0x53bfc6
lea eax, [ebp - 0x20]
push eax
push 0x412618
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [ebp - 0x20]
mov edi, eax
mov ecx, dword [eax]
push eax
call dword [ecx + 0x80]
fnclex
cmp eax, ebx
jge 0x53bfe5
push 0x80
push 0x40c6fc
push edi
push eax
call esi
mov eax, dword [ebp - 0x30]
mov edx, dword [eax]
push eax
call dword [edx + _CIatan]
fnclex
cmp eax, ebx
jge 0x537098
push _CIatan
push 0x40c6fc
mov ecx, dword [ebp - 0x30]
push ecx
push eax
call esi
jmp 0x537098
call dword [fcn.004010b4]
wait
push 0x53c136
jmp 0x53c0fe
lea eax, [ebp - 0x1b4]
push eax
lea ecx, [ebp - 0x1a4]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
lea ecx, [ebp - 0x20]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call esi
lea ecx, [ebp - 0x28]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x30]
call esi
ret