Function at 0x4a4c10
Capabilities:
Check for software breakpoints
Check http status code
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x4040f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x154
push ebx
push esi
push edi
mov dword [ebp - 0x14], esp
mov dword [ebp - 0x10], 0x403bb8
xor eax, eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x24], al
mov byte [ebp - 0x28], al
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x34], al
mov byte [ebp - 0x38], al
mov byte [ebp - 0x3c], al
mov byte [ebp - 0x40], al
mov dword [ebp - 0x44], eax
mov byte [ebp - 0x4c], al
mov byte [ebp - 0x54], al
mov byte [ebp - 0x58], al
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x68], al
mov byte [ebp - 0x6c], al
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x104], eax
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
mov edi, dword [esi]
mov eax, dword [edi + 0xc]
sub eax, dword [edi + 0x14]
mov bl, byte [eax + ecx]
mov byte [ebp - 0x5c], bl
push edi
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaUbound]
mov ecx, dword [ebp + 0xc]
cmp ecx, eax
jge 0x4a4d37
mov edx, dword [edi + 0xc]
sub edx, dword [edi + 0x14]
mov cl, byte [edx + ecx + 1]
mov byte [ebp - 0x3c], cl
and ecx, 0xffffff3f
and ecx, 0xff
mov dword [ebp - 0x150], ecx
fild dword [ebp - 0x150]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaFPInt]
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov byte [ebp - 0x54], al
mov ecx, dword [ebp + 0xc]
test bl, bl
je 0x4a5443
cmp bl, 8
je 0x4ab989
cmp bl, 0x10
je 0x4ab989
cmp bl, 0x18
je 0x4ab989
cmp bl, 0x20
je 0x4ab989
cmp bl, 0x28
je 0x4ab989
cmp bl, 0x30
je 0x4ab989
cmp bl, 0x38
je 0x4ab989
cmp bl, 1
je 0x4ab88b
cmp bl, 9
je 0x4ab88b
cmp bl, 0x11
je 0x4ab88b
cmp bl, 0x19
je 0x4ab88b
cmp bl, 0x21
je 0x4ab88b
cmp bl, 0x29
je 0x4ab88b
cmp bl, 0x31
je 0x4ab88b
cmp bl, 0x39
je 0x4ab88b
cmp bl, 2
je 0x4ab7c7
cmp bl, 0xa
je 0x4ab7c7
cmp bl, 0x12
je 0x4ab7c7
cmp bl, 0x1a
je 0x4ab7c7
cmp bl, 0x22
je 0x4ab7c7
cmp bl, 0x2a
je 0x4ab7c7
cmp bl, 0x32
je 0x4ab7c7
cmp bl, 0x3a
je 0x4ab7c7
cmp bl, 3
je 0x4ab671
cmp bl, 0xb
je 0x4ab671
cmp bl, 0x13
je 0x4ab671
cmp bl, 0x1b
je 0x4ab671
cmp bl, 0x23
je 0x4ab671
cmp bl, 0x2b
je 0x4ab671
cmp bl, 0x33
je 0x4ab671
cmp bl, 0x3b
je 0x4ab671
cmp bl, 4
je 0x4ab5ee
cmp bl, 0xc
je 0x4ab5ee
cmp bl, 0x14
je 0x4ab5ee
cmp bl, 0x1c
je 0x4ab5ee
cmp bl, 0x24
je 0x4ab5ee
cmp bl, 0x2c
je 0x4ab5ee
cmp bl, 0x34
je 0x4ab5ee
cmp bl, 0x3c
je 0x4ab5ee
cmp bl, 5
je 0x4ab4a4
cmp bl, 0xd
je 0x4ab4a4
cmp bl, 0x15
je 0x4ab4a4
cmp bl, 0x1d
je 0x4ab4a4
cmp bl, 0x25
je 0x4ab4a4
cmp bl, 0x2d
je 0x4ab4a4
cmp bl, 0x35
je 0x4ab4a4
cmp bl, 0x3d
je 0x4ab4a4
cmp bl, 6
je 0x4a548b
cmp bl, 7
je 0x4a54a2
cmp bl, 0xe
je 0x4a54b9
cmp bl, 0x16
je 0x4a54d0
cmp bl, 0x17
je 0x4a54e7
cmp bl, 0x1e
je 0x4a54fe
cmp bl, 0x1f
je 0x4a5515
cmp bl, 0x26
jne 0x4a4f3b
inc ecx
mov dword [ebp + 0xc], ecx
mov al, byte [ebp - 0x68]
inc al
mov byte [ebp - 0x68], al
jmp 0x4a4cdc
cmp bl, 0x2e
jne 0x4a4f51
inc ecx
mov dword [ebp + 0xc], ecx
mov dl, byte [ebp - 0x68]
inc dl
mov byte [ebp - 0x68], dl
jmp 0x4a4cdc
cmp bl, 0x36
jne 0x4a4f67
inc ecx
mov dword [ebp + 0xc], ecx
mov al, byte [ebp - 0x68]
inc al
mov byte [ebp - 0x68], al
jmp 0x4a4cdc
cmp bl, 0x3e
jne 0x4a4f7d
inc ecx
mov dword [ebp + 0xc], ecx
mov dl, byte [ebp - 0x68]
inc dl
mov byte [ebp - 0x68], dl
jmp 0x4a4cdc
cmp bl, 0x64
jne 0x4a4f93
inc ecx
mov dword [ebp + 0xc], ecx
mov al, byte [ebp - 0x68]
inc al
mov byte [ebp - 0x68], al
jmp 0x4a4cdc
cmp bl, 0x65
jne 0x4a4fa9
inc ecx
mov dword [ebp + 0xc], ecx
mov dl, byte [ebp - 0x68]
inc dl
mov byte [ebp - 0x68], dl
jmp 0x4a4cdc
cmp bl, 0x66
jne 0x4a4fc3
mov byte [ebp - 0x40], 1
inc ecx
mov dword [ebp + 0xc], ecx
mov al, byte [ebp - 0x68]
inc al
mov byte [ebp - 0x68], al
jmp 0x4a4cdc
cmp bl, 0x27
je 0x4a552c
cmp bl, 0x2f
je 0x4a5543
cmp bl, 0x37
je 0x4a555a
cmp bl, 0x3f
je 0x4a5571
cmp bl, 0x40
jb 0x4a4ff5
cmp bl, 0x47
jbe 0x4a5588
cmp bl, 0x48
jb 0x4a5003
cmp bl, 0x4f
jbe 0x4a55b2
cmp bl, 0x50
jb 0x4a5011
cmp bl, 0x57
jbe 0x4a55df
cmp bl, 0x58
jb 0x4a501f
cmp bl, 0x5f
jbe 0x4a5616
cmp bl, 0x60
je 0x4a5651
cmp bl, 0x61
je 0x4a5681
cmp bl, 0x62
je 0x4a56b1
cmp bl, 0x63
je 0x4a577a
cmp bl, 0x67
jne 0x4a505d
inc ecx
mov dword [ebp + 0xc], ecx
mov dl, byte [ebp - 0x68]
inc dl
mov byte [ebp - 0x68], dl
mov byte [ebp - 0x4c], 1
jmp 0x4a4cdc
cmp bl, 0x68
je 0x4a5797
cmp bl, 0x69
je 0x4a5800
cmp bl, 0x6a
je 0x4a594e
cmp bl, 0x6b
je 0x4a5a71
cmp bl, 0x6c
je 0x4a5c88
cmp bl, 0x6d
je 0x4a5c9f
cmp bl, 0x6e
je 0x4a5cc1
cmp bl, 0x6f
je 0x4a5cd8
cmp bl, 0x70
jb 0x4a50b3
cmp bl, 0x7f
jbe 0x4a5cfa
cmp bl, 0xf
je 0x4a5d74
cmp bl, 0x88
je 0x4a884b
cmp bl, 0x89
je 0x4a8855
cmp bl, 0x8a
je 0x4a885f
cmp bl, 0x8b
je 0x4a8869
cmp bl, 0x80
je 0x4a8873
cmp bl, 0x81
je 0x4a88d8
cmp bl, 0x83
je 0x4a8996
cmp bl, 0x84
je 0x4a8b3b
cmp bl, 0x85
je 0x4a8b45
cmp bl, 0x86
je 0x4a8b4f
cmp bl, 0x87
je 0x4a8b59
cmp bl, 0x8c
je 0x4a8b63
cmp bl, 0x8e
je 0x4a8bc2
cmp bl, 0x8d
je 0x4a8c34
cmp bl, 0x8f
je 0x4a8cfa
cmp bl, 0x90
je 0x4a8da4
cmp bl, 0x91
jb 0x4a515a
cmp bl, 0x97
jbe 0x4a8dbb
cmp bl, 0x98
je 0x4a8e0b
cmp bl, 0x99
je 0x4a8e2d
cmp bl, 0x9a
je 0x4a8e4f
cmp bl, 0x9b
je 0x4a8fc9
cmp bl, 0x9c
je 0x4a8fe0
cmp bl, 0x9d
je 0x4a9002
cmp bl, 0x9e
je 0x4a9024
cmp bl, 0x9f
je 0x4a903b
cmp bl, 0xa0
je 0x4a9052
cmp bl, 0xa1
je 0x4a90c5
cmp bl, 0xa2
je 0x4a9171
cmp bl, 0xa3
je 0x4a91e4
cmp bl, 0xa4
je 0x4a92d0
cmp bl, 0xa5
je 0x4a92e7
cmp bl, 0xa6
je 0x4a9309
cmp bl, 0xa7
je 0x4a9320
cmp bl, 0xa8
je 0x4a9342
cmp bl, 0xa9
je 0x4a937d
cmp bl, 0xaa
je 0x4a9433
cmp bl, 0xab
je 0x4a944a
cmp bl, 0xac
je 0x4a946c
cmp bl, 0xad
je 0x4a9483
cmp bl, 0xae
je 0x4a94a5
cmp bl, 0xaf
je 0x4a94bc
cmp bl, 0xb0
jb 0x4a5240
cmp bl, 0xb7
jbe 0x4a94de
cmp bl, 0xb8
jb 0x4a524e
mov al, byte [ebp - 0x40]
test al, al
jne 0x4a5464
mov ecx, dword [ebp + 0x10]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004b1fa0
cmp al, 1
je 0x4abab8
fld qword [0x403be0]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov ecx, eax
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
jmp 0x4ab9ba
mov byte [ebp - 0x24], 1
mov edx, 0x41667c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x416690
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x4166a4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x4166b8
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x4166cc
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x4166e0
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x4166f4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x416708
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x416714
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x416720
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
mov edx, 0x41672c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
cmp byte [ebp - 0x40], 1
push 0x416738
je 0x4a5629
and ebx, 7
mov eax, dword [0x4b9244]
sub ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ebx*4]
push eax
jmp 0x4a563b
mov byte [ebp - 0x24], 1
cmp byte [ebp - 0x40], 1
push 0x416748
jne 0x4a55d5
and ebx, 7
mov eax, dword [0x4b9248]
sub ebx, dword [eax + 0x14]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + ebx*4]
push edx
jmp 0x4a563b
and ebx, 7
mov eax, dword [0x4b9244]
jmp 0x4a5631
mov byte [ebp - 0x24], 1
cmp byte [ebp - 0x40], 1
push 0x413e98
jne 0x4a5602
and ebx, 7
mov eax, dword [0x4b9248]
sub ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ebx*4]
push eax
jmp 0x4a563b
and ebx, 7
mov eax, dword [0x4b9244]
sub ebx, dword [eax + 0x14]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + ebx*4]
push edx
jmp 0x4a563b
mov byte [ebp - 0x24], 1
cmp byte [ebp - 0x40], 1
push 0x416758
jne 0x4a559b
and ebx, 7
mov eax, dword [0x4b9248]
sub ebx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ebx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
cmp byte [ebp - 0x40], 1
jne 0x4a566e
mov edx, 0x416768
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov edx, 0x416778
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov byte [ebp - 0x24], 1
cmp byte [ebp - 0x40], 1
jne 0x4a569e
mov edx, 0x41678c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
mov edx, 0x41679c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba51
cmp byte [ebp - 0x3c], 0xc0
jae 0x4aa7bc
mov edx, 0x4167ac
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
jne 0x4a5720
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9248]
jmp 0x4ab789
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9244]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fd50
jmp 0x4ab79c
mov edx, 0x4167bc
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
jmp 0x4ab8d5
cmp byte [ebp - 0x40], 1
jne 0x4a57d1
mov byte [ebp - 0x24], 3
inc ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004b13a0
mov dword [ebp - 0xf4], eax
push 0x413e98
lea edx, [ebp - 0xf4]
push edx
call fcn.004b10f0
jmp 0x4a59cb
mov byte [ebp - 0x24], 5
inc ecx
mov dword [ebp - 0xfc], ecx
lea eax, [ebp - 0xfc]
push eax
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x413e98
lea ecx, [ebp - 0x100]
push ecx
jmp 0x4a59c6
mov edx, 0x4167cc
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
jne 0x4a58ba
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004ac990
mov byte [ebp - 0x34], al
mov eax, dword [0x4b9248]
push eax
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, 0x40fc9c
lea ecx, [ebp - 0x74]
call ebx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x54]
and ecx, 0xff
mov eax, dword [ebp - 0x70]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1a20
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
jmp 0x4aba48
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004ac990
mov byte [ebp - 0x34], al
mov eax, dword [0x4b9244]
push eax
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, 0x40fd10
lea ecx, [ebp - 0x74]
call ebx
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x54]
and ecx, 0xff
mov eax, dword [ebp - 0x70]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1a20
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
jmp 0x4aba48
mov byte [ebp - 0x24], 2
mov al, byte [ebp - 0x3c]
cmp al, 0x7f
jbe 0x4a59eb
cmp byte [ebp - 0x40], 1
jne 0x4a59a5
xor dx, dx
mov dl, al
or edx, 0xffffff00
mov dword [ebp - 0xf4], edx
push 0x413e98
lea eax, [ebp - 0xf4]
push eax
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
jmp 0x4aba48
mov ecx, dword [ebp - 0x3c]
and ecx, 0xff
or ecx, 0xffffff00
mov dword [ebp - 0xfc], ecx
push 0x413e98
lea edx, [ebp - 0xfc]
push edx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
jmp 0x4aba48
mov dword [ebp - 0xd8], 0x413e98
mov dword [ebp - 0xe0], 8
lea eax, [ebp - 0x3c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xd0], 0x4011
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0xa0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
jmp 0x4aba51
mov edx, 0x4167cc
lea ecx, [ebp - 0x2c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
cmp byte [ebp - 0x40], 1
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x6c]
push ecx
jne 0x4a5b8e
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004abbf0
mov byte [ebp - 0x34], al
push 0x412b84
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Str]
mov byte [ebp - 0x50], al
lea ecx, [ebp - 0x74]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call ebx
mov al, byte [ebp - 0x50]
cmp al, 0x7f
jbe 0x4a5b29
xor cx, cx
mov cl, al
or ecx, 0xffffff00
mov dword [ebp - 0xf4], ecx
lea edx, [ebp - 0xf4]
push edx
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x4b9248]
push eax
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, 0x40fc9c
lea ecx, [ebp - 0x74]
call edi
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x54]
and ecx, 0xff
mov eax, dword [ebp - 0x70]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1a20
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x74]
call ebx
jmp 0x4aba51
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004abbf0
mov byte [ebp - 0x34], al
push 0x412b84
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Str]
mov byte [ebp - 0x50], al
lea ecx, [ebp - 0x74]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call ebx
cmp byte [ebp - 0x50], 0x7f
jbe 0x4a5c23
mov ecx, dword [ebp - 0x50]
and ecx, 0xff
or ecx, 0xffffff00
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov eax, dword [0x4b9244]
push eax
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov edx, 0x40fd10
lea ecx, [ebp - 0x74]
call edi
lea edx, [ebp - 0x34]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
mov ecx, dword [ebp - 0x54]
and ecx, 0xff
mov eax, dword [ebp - 0x70]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ecx*4]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1a20
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
lea ecx, [ebp - 0x74]
call ebx
jmp 0x4aba51
mov edx, 0x4167dc
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x416810
je 0x4a5caf
mov edx, 0x416840
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, 0x416874
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x4168a8
je 0x4a5ce8
mov edx, 0x4168dc
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, dword [ebp + 0x18]
lea eax, [ecx + edx]
mov dword [ebp - 0x100], eax
inc ecx
mov dword [ebp - 0xfc], ecx
mov ecx, dword [0x4b929c]
push ecx
lea edx, [ebp - 0x70]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0xfc]
push ecx
and ebx, 0xf
mov eax, dword [ebp - 0x70]
sub ebx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
lea eax, [edx + ebx*4]
push eax
lea ecx, [ebp - 0x3c]
push ecx
call fcn.004b1dc0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
lea edx, [ebp - 0x70]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
mov edx, dword [ebp - 0x74]
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x44]
call edi
mov byte [ebp - 0x24], 2
jmp 0x4aba51
mov eax, dword [edi + 0xc]
sub eax, dword [edi + 0x14]
mov cl, byte [eax + ecx + 2]
mov byte [ebp - 0x48], cl
and ecx, 0xffffff3f
and ecx, 0xff
mov dword [ebp - 0x154], ecx
fild dword [ebp - 0x154]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaFPInt]
call dword [sym.imp.MSVBVM60.DLL___vbaFpUI1]
mov bl, al
mov byte [ebp - 0x54], bl
mov al, byte [ebp - 0x3c]
test al, al
jne 0x4a5e35
cmp bl, 7
je 0x4aa7bc
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92a8]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov edx, 0x40fc80
jmp 0x4a63d9
cmp al, 1
jne 0x4a5f97
cmp byte [ebp - 0x48], 0xc0
jb 0x4a5ee7
cmp bl, 4
je 0x4a5e55
cmp bl, 5
jbe 0x4aa7bc
cmp bl, 7
jne 0x4a5e79
mov edx, 0x416910
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 2
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92ac]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4a63d2
cmp bl, 5
je 0x4aa7bc
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92ac]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
cmp bl, 3
ja 0x4a5f6f
mov edx, 0x40fd70
lea ecx, [ebp - 0x74]
call edi
jmp 0x4a63de
cmp bl, 4
je 0x4a5f88
cmp bl, 6
je 0x4a5f88
mov edx, 0x40fc68
lea ecx, [ebp - 0x74]
call edi
jmp 0x4a63de
mov edx, 0x40fc80
lea ecx, [ebp - 0x74]
call edi
jmp 0x4a63de
cmp al, 2
jne 0x4a5fa5
mov edx, 0x416924
jmp 0x4a7834
cmp al, 3
jne 0x4a5fb3
mov edx, 0x416930
jmp 0x4a7834
cmp al, 5
jne 0x4a5fd6
mov edx, 0x41693c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 6
jne 0x4a5ff9
mov edx, 0x416950
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 7
jne 0x4a601c
mov edx, 0x416960
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 8
jne 0x4a603f
mov edx, 0x416974
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 9
jne 0x4a6062
mov edx, 0x416984
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0xb
jne 0x4a6085
mov edx, 0x416998
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0xd
jne 0x4a60b4
cmp byte [ebp - 0x48], 0xc0
jae 0x4aa7bc
test bl, bl
jne 0x4a60a1
mov edx, 0x4169a4
jmp 0x4a6364
cmp bl, 1
jne 0x4aa7bc
mov edx, 0x4169d0
jmp 0x4a6364
cmp al, 0xe
jne 0x4a60d7
mov edx, 0x4169e8
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x6c
jne 0x4a60ef
cmp byte [ebp - 0x40], 1
jne 0x4aa7bc
mov edx, 0x4169f8
jmp 0x4a6201
cmp al, 0x6d
jne 0x4a6107
cmp byte [ebp - 0x40], 1
jne 0x4aa7bc
mov edx, 0x416a14
jmp 0x4a6201
cmp al, 0x12
jne 0x4a6134
cmp byte [ebp - 0x48], 0xc0
jb 0x4a611b
mov edx, 0x416a30
jmp 0x4a6280
cmp byte [ebp - 0x40], 1
mov edx, 0x416a44
je 0x4a6280
mov edx, 0x416a58
jmp 0x4a6280
cmp al, 0x13
jne 0x4a61d0
cmp byte [ebp - 0x48], 0xc0
jae 0x4aa7bc
cmp byte [ebp - 0x40], 1
mov edx, 0x416a44
je 0x4a6156
mov edx, 0x416a58
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov edx, dword [ebp + 0xc]
inc edx
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b92b0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fd30
jmp 0x4a83b6
cmp al, 0x14
jne 0x4a61ed
cmp byte [ebp - 0x40], 1
mov edx, 0x416a6c
je 0x4a689f
mov edx, 0x416a84
jmp 0x4a689f
cmp al, 0x15
jne 0x4a6268
cmp byte [ebp - 0x40], 1
mov edx, 0x416a9c
je 0x4a6201
mov edx, 0x416ab4
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov edx, dword [ebp + 0xc]
inc edx
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b92b0]
jmp 0x4a876c
cmp al, 0x16
jne 0x4a62fa
cmp byte [ebp - 0x40], 1
mov edx, 0x416acc
je 0x4a6280
mov edx, 0x416ae0
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92b0]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fd50
jmp 0x4a880f
cmp al, 0x17
jne 0x4a6321
cmp byte [ebp - 0x48], 0xc0
jae 0x4aa7bc
cmp byte [ebp - 0x40], 1
mov edx, 0x416acc
je 0x4a6156
mov edx, 0x416ae0
jmp 0x4a6156
cmp al, 0x18
jne 0x4a6400
cmp byte [ebp - 0x48], 0xc0
jae 0x4aa7bc
test bl, bl
jne 0x4a633e
mov edx, 0x416af4
jmp 0x4a6364
cmp bl, 1
jne 0x4a634a
mov edx, 0x416b10
jmp 0x4a6364
cmp bl, 2
jne 0x4a6356
mov edx, 0x416b2c
jmp 0x4a6364
cmp bl, 3
jne 0x4aa7bc
mov edx, 0x416b48
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b9244]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fc68
lea ecx, [ebp - 0x74]
call ebx
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1900
jmp 0x4a8835
cmp al, 0x28
jne 0x4a641d
cmp byte [ebp - 0x40], 1
mov edx, 0x416b64
je 0x4a689f
mov edx, 0x4169bc
jmp 0x4a689f
cmp al, 0x29
jne 0x4a643a
cmp byte [ebp - 0x40], 1
mov edx, 0x416b64
je 0x4a8341
mov edx, 0x4169bc
jmp 0x4a8341
cmp al, 0x2a
jne 0x4a6475
cmp byte [ebp - 0x40], 1
mov edx, 0x416b84
je 0x4a644e
mov edx, 0x416b9c
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b92b4
jmp 0x4a6516
cmp al, 0x2b
jne 0x4a649c
cmp byte [ebp - 0x48], 0xc0
jae 0x4aa7bc
cmp byte [ebp - 0x40], 1
mov edx, 0x416bb4
je 0x4a8341
mov edx, 0x416bc8
jmp 0x4a8341
cmp al, 0x2c
jne 0x4a64ba
cmp byte [ebp - 0x40], 1
jne 0x4a64b0
mov edx, 0x416bdc
jmp 0x4a8700
mov edx, 0x416bf4
jmp 0x4a8700
cmp al, 0x2e
jne 0x4a64d2
cmp byte [ebp - 0x40], 1
jne 0x4a64cb
mov edx, 0x416c0c
jmp 0x4a64ea
mov edx, 0x416c20
jmp 0x4a64ea
cmp al, 0x2f
jne 0x4a655b
cmp byte [ebp - 0x40], 1
mov edx, 0x416c34
je 0x4a64ea
mov edx, 0x416c48
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
jne 0x4a694d
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92b0]
jmp 0x4a87fc
cmp al, 0x30
jne 0x4a657e
mov edx, 0x416c5c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x31
jne 0x4a65a1
mov edx, 0x416c6c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x32
jne 0x4a65c4
mov edx, 0x416c7c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x33
jne 0x4a65e7
mov edx, 0x416c8c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x34
jne 0x4a660a
mov edx, 0x416c9c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x35
jne 0x4a662d
mov edx, 0x416cb4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
cmp al, 0x40
jne 0x4a663b
mov edx, 0x416cc8
jmp 0x4a7834
cmp al, 0x41
jne 0x4a6649
mov edx, 0x416cd8
jmp 0x4a7834
cmp al, 0x42
jne 0x4a6657
mov edx, 0x416cec
jmp 0x4a7834
cmp al, 0x43
jne 0x4a6665
mov edx, 0x416cfc
jmp 0x4a7834
cmp al, 0x44
jne 0x4a6673
mov edx, 0x416d10
jmp 0x4a7834
cmp al, 0x45
jne 0x4a6681
mov edx, 0x416d2c
jmp 0x4a7834
cmp al, 0x46
jne 0x4a668f
mov edx, 0x416d40
jmp 0x4a7834
cmp al, 0x47
jne 0x4a669d
mov edx, 0x416d54
jmp 0x4a7834
cmp al, 0x48
jne 0x4a66ab
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92b0]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fe64
jmp 0x4a880f
mov edx, dword [ebp + 0xc]
inc edx
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b92b0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fd10
jmp 0x4a877f
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
jne 0x4a78b4
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov edx, dword [ebp + 0xc]
inc edx
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b92b0]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fe40
lea ecx, [ebp - 0x74]
call ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1630
jmp 0x4a8835
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
jne 0x4a87a5
mov edx, dword [ebp + 0xc]
inc edx
mov dword [ebp - 0xfc], edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b92b4]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fe64
lea ecx, [ebp - 0x74]
call ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
jmp 0x4a8830
mov ecx, dword [ebp + 0xc]
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b92b0
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b92b4]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fe20
lea ecx, [ebp - 0x74]
call ebx
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x74]
push ecx
call fcn.004b1790
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov al, byte [ebp - 0x24]
inc al
mov byte [ebp - 0x24], al
jmp 0x4aba51
mov edx, 0x413fec
jmp 0x4ab9ba
mov edx, 0x413fec
jmp 0x4ab8bc
mov edx, 0x413fec
jmp 0x4ab7f8
mov edx, 0x413fec
jmp 0x4ab6a2
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b924c
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004abbf0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x28]
and ecx, 0xff
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
jmp 0x4aba1b
cmp byte [ebp - 0x40], 1
jne 0x4a893a
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0xc]
push ecx
push esi
call fcn.004ac990
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x6c]
and edx, 0xff
mov eax, dword [0x4b9250]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
jmp 0x4ab368
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004ac990
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
jmp 0x4ab3e3
cmp byte [ebp - 0x40], 1
jne 0x4a8a6a
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x6c]
push eax
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea ecx, [ebp - 0x38]
push ecx
lea edx, [ebp - 0x24]
push edx
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x64]
push ecx
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp + 0xc]
push ecx
push esi
call fcn.004abbf0
mov byte [ebp - 0x34], al
mov edx, dword [ebp - 0x28]
and edx, 0xff
mov eax, dword [0x4b9250]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
push 0x412b84
mov ecx, dword [ebp - 0x20]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Str]
mov bl, al
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp bl, 0x7f
jbe 0x4a8a5b
xor dx, dx
mov dl, bl
or edx, 0xffffff00
mov dword [ebp - 0xf4], edx
lea eax, [ebp - 0xf4]
push eax
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, 0x40fc80
lea ecx, [ebp - 0x74]
call edi
jmp 0x4ab37d
lea edx, [ebp - 0x4c]
push edx
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004abbf0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x28]
and ecx, 0xff
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x2c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call edi
push 0x412b84
mov eax, dword [ebp - 0x20]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Str]
mov bl, al
mov byte [ebp - 0x50], bl
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
cmp bl, 0x7f
jbe 0x4a8b2c
mov ecx, dword [ebp - 0x50]
and ecx, 0xff
or ecx, 0xffffff00
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x20]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, 0x40fcf0
lea ecx, [ebp - 0x74]
call edi
jmp 0x4aba27
mov edx, 0x417770
jmp 0x4ab9ba
mov edx, 0x417770
jmp 0x4ab8bc
mov edx, 0x417780
jmp 0x4ab7f8
mov edx, 0x417780
jmp 0x4ab6a2
mov edx, 0x413fec
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9240]
jmp 0x4ab917
mov edx, 0x413fec
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9240]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fc9c
jmp 0x4ab79c
cmp byte [ebp - 0x3c], 0xc0
jae 0x4aa7bc
mov edx, 0x414100
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
jne 0x4a8cb6
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9248]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fc74
jmp 0x4ab79c
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9244]
jmp 0x4a8c9e
mov edx, 0x414064
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
cmp byte [ebp - 0x40], 1
jne 0x4a8d78
mov edx, 0x40fc80
lea ecx, [ebp - 0x74]
call ebx
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1900
jmp 0x4aba48
mov edx, 0x40fcf0
lea ecx, [ebp - 0x74]
call ebx
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1900
jmp 0x4aba48
mov edx, 0x417790
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
jne 0x4a8dda
push 0x41779c
and ebx, 7
mov eax, dword [0x4b9248]
sub ebx, dword [eax + 0x14]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + ebx*4]
push edx
jmp 0x4a8df1
push 0x4177b4
and ebx, 7
mov eax, dword [0x4b9244]
sub ebx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + ebx*4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x4177cc
je 0x4a8e1b
mov edx, 0x4177d8
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x4177e8
je 0x4a8e3d
mov edx, 0x4177f4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
jne 0x4a8f11
add ecx, 3
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004b13a0
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp + 0xc]
inc eax
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 0x100]
push ecx
push esi
call fcn.004b13a0
mov dword [ebp - 0xf8], eax
push 0x413e68
lea edx, [ebp - 0xf4]
push edx
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x417800
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
push eax
lea eax, [ebp - 0xf8]
push eax
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov byte [ebp - 0x24], 5
jmp 0x4aba51
add ecx, 5
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004b13a0
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp + 0xc]
inc eax
mov dword [ebp - 0x100], eax
lea ecx, [ebp - 0x100]
push ecx
push esi
call fcn.004b1440
mov dword [ebp - 0x104], eax
push 0x413e68
lea edx, [ebp - 0xf4]
push edx
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x417800
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call edi
push eax
lea eax, [ebp - 0x104]
push eax
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x80]
call edi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x80]
push ecx
lea edx, [ebp - 0x7c]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
mov byte [ebp - 0x24], 7
jmp 0x4aba51
mov edx, 0x417808
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x417818
je 0x4a8ff0
mov edx, 0x417828
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x41783c
je 0x4a9012
mov edx, 0x41784c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, 0x41785c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, 0x41786c
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x41788c
lea eax, [ebp - 0x100]
push eax
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x414000
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov byte [ebp - 0x24], 5
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
jne 0x4a911e
inc ecx
mov dword [ebp - 0xfc], ecx
lea eax, [ebp - 0xfc]
push eax
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x4178b4
lea ecx, [ebp - 0x100]
push ecx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x414000
jmp 0x4a9238
inc ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x4178dc
lea edx, [ebp - 0x100]
push edx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x414000
jmp 0x4a92ab
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x417908
lea eax, [ebp - 0x100]
push eax
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x41792c
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x78]
push ecx
lea edx, [ebp - 0x74]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov byte [ebp - 0x24], 5
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
jne 0x4a925d
inc ecx
mov dword [ebp - 0xfc], ecx
lea eax, [ebp - 0xfc]
push eax
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x41793c
lea ecx, [ebp - 0x100]
push ecx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x417960
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov byte [ebp - 0x24], 5
jmp 0x4aba51
inc ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x417970
lea edx, [ebp - 0x100]
push edx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
push 0x417994
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov byte [ebp - 0x24], 5
jmp 0x4aba51
mov edx, 0x4179a4
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x4179f0
je 0x4a92f7
mov edx, 0x417a58
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, 0x417aa8
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x417af4
je 0x4a9330
mov edx, 0x417b40
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
push 0x417b90
lea edx, [ebp - 0x3c]
push edx
call fcn.004b1040
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov byte [ebp - 0x24], 2
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
jne 0x4a93db
inc ecx
mov dword [ebp - 0xfc], ecx
lea eax, [ebp - 0xfc]
push eax
push esi
call fcn.004b13a0
mov dword [ebp - 0xf4], eax
push 0x417ba8
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov byte [ebp - 0x24], 3
jmp 0x4aba51
inc ecx
mov dword [ebp - 0xfc], ecx
lea edx, [ebp - 0xfc]
push edx
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
push 0x417bc0
lea eax, [ebp - 0x100]
push eax
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov byte [ebp - 0x24], 5
jmp 0x4aba51
mov edx, 0x417bd8
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x417c04
je 0x4a945a
mov edx, 0x417c34
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, 0x417c64
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x417c90
je 0x4a9493
mov edx, 0x417cbc
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
mov edx, 0x417cec
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
cmp byte [ebp - 0x40], 1
mov edx, 0x417d18
je 0x4a94cc
mov edx, 0x417d44
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov byte [ebp - 0x24], 1
jmp 0x4aba51
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
cmp word [ebp + 0x14], 0
jne 0x4aa8eb
mov edx, dword [ebp + 8]
mov eax, dword [edx]
push eax
lea ecx, [ebp - 0x70]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryLock]
mov esi, dword [ebp - 0x68]
and esi, 0xff
mov eax, dword [ebp - 0x70]
mov edx, dword [eax + 0xc]
sub edx, dword [eax + 0x14]
sub edx, esi
add edx, dword [ebp + 0xc]
push edx
call fcn.004b0f10
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
lea eax, [ebp - 0x70]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryUnlock]
push 0x418098
mov ecx, dword [ebp - 0x74]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov edx, dword [ebp + 0x10]
mov byte [edx], 1
mov eax, dword [ebp + 0xc]
sub eax, esi
add eax, dword [ebp + 0x18]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], 3
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0xa0]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
mov dword [ebp - 0xd8], 0x413ea8
mov eax, 8
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xf0], eax
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xb0]
push ecx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call esi
push eax
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xc0]
push eax
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0xc0]
push ecx
lea edx, [ebp - 0xb0]
push edx
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x90]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
call dword [sym.imp.MSVBVM60.DLL___vbaExitProc]
wait
push 0x4abbce
jmp 0x4abbae
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov edx, 0x40fc80
lea ecx, [ebp - 0x74]
call ebx
lea ecx, [ebp - 0x34]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x74]
push ecx
jmp 0x4aba43
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
mov edx, 0x40fcf0
jmp 0x4aba22
cmp byte [ebp - 0x40], 1
jne 0x4ab54e
mov byte [ebp - 0x24], 3
inc ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004b13a0
mov dword [ebp - 0xf4], eax
mov edx, dword [ebp - 0x5c]
and edx, 0xff
mov dword [ebp - 0x158], edx
fild dword [ebp - 0x158]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov ecx, eax
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
push 0x4163c8
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
lea ecx, [ebp - 0xf4]
push ecx
call fcn.004b10f0
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
jmp 0x4aba51
mov byte [ebp - 0x24], 5
inc ecx
mov dword [ebp - 0xfc], ecx
lea ecx, [ebp - 0xfc]
push ecx
push esi
call fcn.004b1440
mov dword [ebp - 0x100], eax
mov edx, dword [ebp - 0x5c]
and edx, 0xff
mov dword [ebp - 0x15c], edx
fild dword [ebp - 0x15c]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov ecx, eax
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov eax, dword [edx + ecx*4]
push eax
push 0x41666c
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
lea ecx, [ebp - 0x100]
push ecx
call fcn.004b12f0
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea edx, [ebp - 0x78]
push edx
lea eax, [ebp - 0x74]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
jmp 0x4aba51
mov byte [ebp - 0x24], 2
mov ecx, dword [ebp - 0x5c]
and ecx, 0xff
mov dword [ebp - 0x160], ecx
fild dword [ebp - 0x160]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov edx, eax
mov eax, dword [0x4b9250]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov ecx, dword [eax + edx*4]
push ecx
push 0x416538
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
call ebx
mov edx, eax
lea ecx, [ebp - 0x74]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
call edi
push eax
lea edx, [ebp - 0x3c]
push edx
call fcn.004b1040
mov edx, eax
lea ecx, [ebp - 0x78]
call edi
push eax
call ebx
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x74]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
jmp 0x4aba51
mov edx, dword [ebp - 0x5c]
and edx, 0xff
mov dword [ebp - 0x164], edx
fild dword [ebp - 0x164]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov ecx, eax
mov eax, dword [0x4b9250]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
jne 0x4ab73f
lea eax, [ebp - 0x4c]
push eax
lea ecx, [ebp - 0x6c]
push ecx
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea edx, [ebp - 0x38]
push edx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9248]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fc9c
lea ecx, [ebp - 0x74]
call ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1790
jmp 0x4aba48
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9244]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fd10
lea ecx, [ebp - 0x74]
call ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1790
jmp 0x4aba48
mov ecx, dword [ebp - 0x5c]
and ecx, 0xff
mov dword [ebp - 0x168], ecx
fild dword [ebp - 0x168]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov edx, eax
mov eax, dword [0x4b9250]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0x4b924c
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b924c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fcd4
lea ecx, [ebp - 0x74]
call ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1790
jmp 0x4aba48
mov ecx, dword [ebp - 0x5c]
and ecx, 0xff
mov dword [ebp - 0x16c], ecx
fild dword [ebp - 0x16c]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov edx, eax
mov eax, dword [0x4b9250]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
cmp byte [ebp - 0x40], 1
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
jne 0x4ab92f
push 0x4b9248
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9248]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fc80
jmp 0x4aba22
push 0x4b9244
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b9244]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fcf0
jmp 0x4aba22
mov ecx, dword [ebp - 0x5c]
and ecx, 0xff
mov dword [ebp - 0x170], ecx
fild dword [ebp - 0x170]
fdiv qword [0x403be8]
call dword [sym.imp.MSVBVM60.DLL___vbaR8IntI4]
mov edx, eax
mov eax, dword [0x4b9250]
sub edx, dword [eax + 0x14]
mov eax, dword [eax + 0xc]
mov edx, dword [eax + edx*4]
lea ecx, [ebp - 0x2c]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
call ebx
lea ecx, [ebp - 0x4c]
push ecx
lea edx, [ebp - 0x6c]
push edx
push 0x4b924c
push 0x4b9244
push 0x4b9244
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x24]
push ecx
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp + 0xc]
push eax
push esi
call fcn.004ad9f0
mov byte [ebp - 0x34], al
mov ecx, dword [ebp - 0x6c]
and ecx, 0xff
mov eax, dword [0x4b924c]
sub ecx, dword [eax + 0x14]
mov edx, dword [eax + 0xc]
mov edx, dword [edx + ecx*4]
lea ecx, [ebp - 0x20]
call ebx
mov edx, 0x40fcb8
lea ecx, [ebp - 0x74]
call ebx
lea eax, [ebp - 0x34]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x2c]
push ecx
lea edx, [ebp - 0x44]
push edx
lea eax, [ebp - 0x74]
push eax
call fcn.004b1630
lea ecx, [ebp - 0x74]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov al, byte [ebp - 0x68]
add al, byte [ebp - 0x38]
add al, byte [ebp - 0x24]
mov edi, dword [ebp + 0x10]
mov byte [edi], al
mov al, byte [ebp - 0x58]
cmp al, 1
jne 0x4aba71
push 0x418064
mov ecx, dword [ebp - 0x44]
push ecx
jmp 0x4aba8d
cmp al, 2
jne 0x4aba80
push 0x418074
mov edx, dword [ebp - 0x44]
push edx
jmp 0x4aba8d
cmp al, 3
jne 0x4aba9e
push 0x418088
mov eax, dword [ebp - 0x44]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
cmp word [ebp + 0x14], 0
jne 0x4aa8eb
lea ecx, [ebp - 0x44]
push ecx
push edi
lea edx, [ebp + 0xc]
push edx
push esi
call fcn.004b14e0
mov eax, dword [ebp - 0x68]
and eax, 0xff
mov ecx, dword [ebp + 0xc]
sub ecx, eax
add ecx, dword [ebp + 0x18]
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x90], 3
lea edx, [ebp - 0x90]
push edx
lea eax, [ebp - 0xa0]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcHexVarFromVar]
mov dword [ebp - 0xd8], 0x413ea8
mov eax, 8
mov dword [ebp - 0xe0], eax
mov ecx, dword [ebp - 0x44]
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xf0], eax
lea edx, [ebp - 0xa0]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xb0]
push ecx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
call esi
push eax
lea edx, [ebp - 0xf0]
push edx
lea eax, [ebp - 0xc0]
push eax
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
jmp 0x4aa8c4
lea ecx, [ebp - 0x20]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
call esi
lea ecx, [ebp - 0x2c]
call esi
lea ecx, [ebp - 0x30]
call esi
lea ecx, [ebp - 0x60]
call esi
lea ecx, [ebp - 0x64]
call esi
ret