Function at 0x4f89e0
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push 0x4044d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x130
push ebx
push esi
push edi
mov dword [ebp - 8], esp
mov dword [ebp - 4], 0x403800
xor ebx, ebx
cmp word [0x54ffa6], bx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xcc], ebx
je 0x4f8a8f
mov eax, dword [ebp + 8]
cmp word [eax], 0x4a
je 0x4f8fc0
wait
push 0x4fac5f
jmp 0x4fac4e
mov ecx, dword [ebp + 8]
mov si, word [ecx]
cmp si, 0x41
jne 0x4f8ae4
mov edx, dword [ebp + 0xc]
movsx eax, word [edx]
sub eax, ebx
je 0x4f8abc
dec eax
jne case.0x4faa58.3
call fcn.0050e130
wait
push 0x4fac5f
jmp 0x4fac4e
lea eax, [ebp - 0xbc]
mov word [0x54fc1a], bx
push eax
mov dword [ebp - 0xbc], 1
call fcn.00488b90
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x42
jne 0x4f8c5a
mov word [0x55046a], bx
call fcn.004faf40
cmp word [0x54fac8], bx
jne case.0x4faa58.3
mov eax, dword [0x54f010]
mov dword [ebp - 0x90], 0x42da18
cmp eax, ebx
mov dword [ebp - 0x98], 8
jne 0x4f8b39
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov edx, dword [ebp - 0x98]
sub esp, 0x10
mov ecx, esp
push 2
push eax
mov dword [ecx], edx
mov edx, dword [ebp - 0x94]
mov dword [ecx + 4], edx
mov edx, dword [ebp - 0x90]
mov dword [ecx + 8], edx
mov edx, dword [ebp - 0x8c]
mov dword [ecx + 0xc], edx
mov ecx, dword [eax]
call dword [ecx + 0x640]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42da5c
mov ecx, 0x54f8ec
call esi
mov edx, dword [0x54f87c]
lea ecx, [ebp - 0x28]
call esi
mov eax, dword [0x55044c]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
push eax
call edi
mov edx, dword [0x55044c]
test eax, eax
jne 0x4f8bc1
mov edx, 0x41f650
mov ecx, 0x54f87c
call esi
mov ecx, dword [0x54f87c]
push ecx
push 0x42da94
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
lea edx, [ebp - 0x68]
push ebx
push edx
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x68], 8
call dword [sym.imp.MSVBVM60.DLL_rtcDir]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea eax, [ebp - 0x44]
push eax
call fcn.0046e0e0
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov edx, dword [ebp - 0x28]
mov ecx, 0x54f87c
call esi
mov ecx, dword [0x54f8b8]
push ecx
call edi
test eax, eax
je case.0x4faa58.3
mov edx, dword [ebp + 0xc]
mov word [0x550460], 1
cmp word [edx], bx
je 0x4f8c4a
mov word [0x550460], 0xffff
call fcn.0052f0d0
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x43
jne 0x4f8d76
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
cmp eax, 4
ja case.0x4faa58.3
jmp dword [eax*4 + 0x4fac74]
mov word [0x54f064], 8
jmp 0x4fa803
call fcn.00534830
wait
push 0x4fac5f
jmp 0x4fac4e
lea ecx, [ebp - 0xc0]
lea edx, [ebp - 0xbc]
push ecx
push edx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
call fcn.005066d0
wait
push 0x4fac5f
jmp 0x4fac4e
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f8ce0
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x58]
push eax
push edx
call esi
mov edi, eax
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f8d16
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x320]
lea edx, [ebp - 0x54]
push eax
push edx
call esi
mov esi, eax
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
cmp eax, ebx
fnclex
jge 0x4f8d50
push 0xe0
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xbc]
mov edx, dword [edi]
mov eax, 1
sub eax, esi
push eax
push edi
call dword [edx + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fabf0
jmp 0x4fabde
cmp si, 0x44
jne 0x4f8e29
mov ecx, dword [ebp + 0xc]
mov edi, 1
mov ax, word [ecx]
cmp ax, di
jg 0x4f8dae
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], edi
push eax
push ecx
call fcn.004fb200
wait
push 0x4fac5f
jmp 0x4fac4e
cmp ax, 2
jne 0x4f8e0f
cmp dword [0x54f010], ebx
jne 0x4f8dcc
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], edi
push edx
mov ecx, dword [esi]
push esi
call dword [ecx + 0x7a0]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7a0
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
cmp ax, 4
jne case.0x4faa58.3
call fcn.0053a890
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x45
jne 0x4f8e6b
mov eax, dword [ebp + 0xc]
mov si, word [eax]
cmp si, 1
jne 0x4f8e51
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 2
push ecx
call fcn.0052e5d0
cmp si, 2
jne case.0x4faa58.3
call fcn.00537870
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x46
jne 0x4f8e7e
fld dword [0x54fc34]
fadd st(0), st(0)
jmp 0x4f9ba2
cmp si, 0x47
je 0x4faa49
cmp si, 0x67
je 0x4faa49
cmp si, 0x48
jne 0x4f8f6c
mov edx, dword [ebp + 0xc]
movsx eax, word [edx]
cmp eax, 3
ja case.0x4faa58.3
jmp dword [eax*4 + 0x4fac88]
cmp word [0x550260], bx
jne 0x4faa38
cmp dword [0x54f010], ebx
jne 0x4f8ed7
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
mov dword [ebp - 0xbc], 0x30
lea ecx, [ebp - 0xbc]
mov eax, dword [esi]
push ecx
push esi
call dword [eax + 0x7b0]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7b0
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push edx
call fcn.0052e5d0
wait
push 0x4fac5f
jmp 0x4fac4e
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
push eax
call fcn.0052e5d0
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.0052ec90
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x49
jne 0x4f8fb6
mov ecx, dword [ebp + 0xc]
movsx eax, word [ecx]
cmp eax, ebx
je 0x4f8fa6
cmp eax, 4
jne case.0x4faa58.3
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push edx
call fcn.00533ce0
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.00534560
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x4a
jne 0x4f9307
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f8fde
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x428]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
push esi
mov eax, dword [esi]
call dword [eax + 0x26c]
cmp eax, ebx
fnclex
jge 0x4f9015
push 0x26c
push 0x420284
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov cx, word [0x54fcc0]
mov eax, 0x4004
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x98], eax
lea edx, [ebp - 0xa8]
lea eax, [ebp - 0x98]
push edx
push eax
mov word [0x54fcc2], cx
mov dword [ebp - 0xa0], 0x54fa80
mov dword [ebp - 0x90], 0x54fa7c
call fcn.0048d950
cmp word [0x550260], bx
jne 0x4f9088
cmp word [0x54ffa6], bx
jne 0x4f9088
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
push ecx
call fcn.004fd4f0
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
push edx
call fcn.0048a9b0
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
sub eax, ebx
je 0x4f92d0
dec eax
je 0x4f92c5
dec eax
jne 0x4f92f0
cmp word [0x54fa8c], bx
jne 0x4f92f0
fld dword [0x403600]
fdiv dword [0x54f9d0]
mov ecx, dword [0x54f98c]
lea edx, [ebp - 0xbc]
push edx
mov dword [ebp - 0x2c], ecx
push 0x54fa80
lea eax, [ebp - 0xcc]
push 0x54fa7c
lea ecx, [ebp - 0x2c]
push eax
push ecx
mov dword [ebp - 0x30], 0x4b18967f
or edi, 0xffffffff
mov dword [ebp - 0xbc], ebx
fstp dword [ebp - 0xcc]
call fcn.0046ae40
cmp dword [0x54fd24], ebx
jle 0x4f9126
mov edx, dword [0x54fd3c]
mov edi, dword [0x54f98c]
mov dword [ebp - 0x30], edx
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f9144
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3a8]
lea edx, [ebp - 0x68]
mov dword [ebp - 0x60], eax
push edx
mov dword [ebp - 0x68], 9
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x68]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp si, bx
je 0x4f9213
mov esi, 0x30
mov ebx, 1
xor eax, eax
cmp ax, si
mov dword [ebp - 0x2c], eax
jg 0x4f9213
mov edx, dword [0x54f530]
movsx ecx, ax
cmp word [edx + ecx*2], 0
je 0x4f920c
cmp ax, word [0x54f98c]
je 0x4f920c
fld dword [0x403600]
fdiv dword [0x54f9d0]
lea eax, [ebp - 0xbc]
lea ecx, [ebp - 0xcc]
push eax
push 0x54fa80
push 0x54fa7c
lea edx, [ebp - 0x2c]
push ecx
push edx
mov dword [ebp - 0xbc], 0
fstp dword [ebp - 0xcc]
call fcn.0046ae40
mov eax, dword [0x54fd24]
test eax, eax
jle 0x4f9209
fld dword [0x54fd3c]
fcomp dword [ebp - 0x30]
fnstsw ax
test ah, 1
je 0x4f9209
mov eax, dword [ebp - 0x2c]
mov edi, eax
add eax, ebx
jmp 0x4f9182
mov eax, dword [ebp - 0x2c]
add eax, ebx
jmp 0x4f9182
cmp di, 0xffff
je 0x4f92f0
mov eax, dword [0x54f010]
mov dword [ebp - 0x2c], edi
test eax, eax
jne 0x4f923e
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3a8]
lea edx, [ebp - 0x68]
mov dword [ebp - 0x60], eax
push edx
mov dword [ebp - 0x68], 9
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x68]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
test si, si
je 0x4f92a9
fld dword [0x403600]
fdiv dword [0x54f9d0]
lea eax, [ebp - 0xbc]
lea ecx, [ebp - 0xcc]
push eax
push 0x54fa80
push 0x54fa7c
lea edx, [ebp - 0x2c]
push ecx
push edx
mov dword [ebp - 0xbc], 0
fstp dword [ebp - 0xcc]
call fcn.0046ae40
call fcn.0046b770
mov ax, word [0x54fcc2]
push 0x4fac5f
mov word [0x54fcc0], ax
wait
jmp 0x4fac4e
mov word [0x54fcc0], 2
jmp 0x4f92d9
mov word [0x54fcc0], 1
cmp word [0x54f062], bx
mov word [0x54f064], 0xfffb
je 0x4f92f0
call fcn.0046ed20
mov ax, word [0x54fcc2]
push 0x4fac5f
mov word [0x54fcc0], ax
wait
jmp 0x4fac4e
cmp si, 0x4c
jne 0x4f9393
mov ecx, dword [ebp + 0xc]
movsx eax, word [ecx]
sub eax, ebx
je 0x4f9345
dec eax
je 0x4f9335
dec eax
jne case.0x4faa58.3
call fcn.00535bc0
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.00534cd0
wait
push 0x4fac5f
jmp 0x4fac4e
cmp dword [0x5508e0], ebx
jne 0x4f935d
push 0x5508e0
push 0x40ff4c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x5508e0]
push esi
mov edx, dword [esi]
call dword [edx + 0x718]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x718
push 0x41f9a8
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x4d
jne 0x4f954e
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
sub eax, ebx
je 0x4f94bf
sub eax, 2
je 0x4f9471
sub eax, 2
jne case.0x4faa58.3
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f93db
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3a8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x58]
push eax
push edx
call esi
mov edi, eax
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f9411
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3a8]
lea edx, [ebp - 0x54]
push eax
push edx
call esi
mov esi, eax
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
cmp eax, ebx
fnclex
jge 0x4f944b
push 0xe0
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xbc]
mov edx, dword [edi]
mov eax, 1
sub eax, esi
push eax
push edi
call dword [edx + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fabf0
jmp 0x4fabde
cmp dword [0x54f010], ebx
jne 0x4f9489
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov eax, dword [esi]
call dword [eax + 0x728]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x728
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
mov ax, word [0x54fd5c]
cmp ax, bx
je 0x4f950a
cmp ax, 3
jne 0x4f94d9
mov word [0x54fd64], 4
cmp word [0x550460], bx
je 0x4f94fa
mov ecx, dword [0x54faa8]
mov edx, dword [0x54faac]
mov dword [0x54fd70], ecx
mov dword [0x54fd74], edx
call fcn.004fbe30
wait
push 0x4fac5f
jmp 0x4fac4e
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
push eax
call fcn.004ff300
lea ecx, [ebp - 0xcc]
lea edx, [ebp - 0xbc]
push ecx
push edx
mov dword [ebp - 0xcc], 0xfc
mov dword [ebp - 0xbc], 0x63
call fcn.0046fa40
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x4e
jne 0x4f996b
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
sub eax, ebx
je 0x4f95b9
sub eax, 2
jne 0x4faa38
cmp dword [0x54f010], ebx
jne 0x4f9583
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x734]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x734
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
mov ax, word [0x550260]
cmp ax, bx
je 0x4f961c
cmp ax, 0xffff
jne 0x4faa38
cmp dword [0x54f010], ebx
jne 0x4f95e6
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov edx, dword [esi]
call dword [edx + 0x74c]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x74c
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
cmp dword [0x54f5f4], ebx
jne 0x4f964f
mov edx, 0x41a220
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea eax, [ebp - 0x44]
push eax
call fcn.004b8b00
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
wait
push 0x4fac5f
jmp 0x4fac4e
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x68]
push ecx
push edx
mov dword [ebp - 0x90], 0x54f5f4
mov dword [ebp - 0x98], 0x4003
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov eax, dword [0x54f010]
test eax, eax
jne 0x4f969e
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x318]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
lea ecx, [ebp - 0x48]
push ecx
push edi
mov eax, dword [edi]
call dword [eax + 0xa0]
test eax, eax
fnclex
jge 0x4f96d9
push 0xa0
push 0x41f690
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov edx, dword [ebp - 0x48]
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x48], 0
call esi
mov eax, 8
lea edx, [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x68]
push edx
lea ecx, [ebp - 0x78]
push eax
push ecx
mov dword [ebp - 0xa0], 0x42daa4
mov dword [ebp - 0xb0], 0x420bf4
call ebx
push eax
lea edx, [ebp - 0xb8]
lea eax, [ebp - 0x88]
push edx
push eax
call ebx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x44]
call esi
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x44]
push ecx
push 0x54f1a8
push edx
call fcn.004b7e80
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x44]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea edx, [ebp - 0x88]
lea eax, [ebp - 0x78]
push edx
lea ecx, [ebp - 0x68]
push eax
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov edx, dword [ebp - 0x3c]
add esp, 0x10
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
test eax, eax
je case.0x4faa58.3
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
test eax, eax
mov dword [0x54f5f8], eax
jl 0x4f965b
cmp eax, dword [0x54f5f4]
jg 0x4f965b
mov eax, dword [0x54f010]
xor ebx, ebx
cmp eax, ebx
jne 0x4f97e7
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x318]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x68]
push eax
push ecx
mov dword [ebp - 0x90], 0x54f5f8
mov dword [ebp - 0x98], 0x4003
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
mov edi, dword [esi]
lea edx, [ebp - 0x68]
lea eax, [ebp - 0x44]
push edx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
push esi
call dword [edi + 0xa4]
cmp eax, ebx
fnclex
jge 0x4f9852
push 0xa4
push 0x41f690
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ecx, dword [0x54f5f8]
mov word [0x54ffde], bx
mov dword [0x54f5ec], ecx
call fcn.004693f0
push 7
call fcn.0041cc74
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov edi, 0x30
mov esi, 1
mov dword [ebp - 0x2c], ebx
cmp word [ebp - 0x2c], di
jg 0x4f98d6
lea edx, [ebp - 0xcc]
lea eax, [ebp - 0xbc]
push edx
push 0x54f5f8
lea ecx, [ebp - 0x2c]
push eax
push ecx
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0xbc], esi
call fcn.0046dc40
add dword [ebp - 0x2c], esi
jmp 0x4f989f
call fcn.00473e90
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], esi
push edx
call fcn.00469080
mov eax, dword [0x54f010]
mov word [0x54ffe0], 0
test eax, eax
jne 0x4f9914
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x398]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
push 0
push esi
mov eax, dword [esi]
call dword [eax + 0x94]
test eax, eax
fnclex
jge 0x4f994d
push 0x94
push 0x41f680
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
call fcn.0048c580
call fcn.00471ce0
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x4f
je case.0x4faa58.3
cmp si, 0x50
jne 0x4f9aec
mov edx, dword [ebp + 0xc]
movsx eax, word [edx]
sub eax, ebx
je 0x4f9a79
sub eax, 2
je 0x4f99a8
sub eax, 2
jne case.0x4faa58.3
xor word [0x54fcc0], 1
jmp 0x4fa57b
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x98]
lea ecx, [ebp - 0x68]
push eax
push ecx
mov dword [ebp - 0x90], 0x54faec
mov dword [ebp - 0x98], 0x4002
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
lea edx, [ebp - 0x68]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x4c]
call edi
mov edx, 0x41f650
lea ecx, [ebp - 0x48]
call esi
mov edx, 0x42dad8
lea ecx, [ebp - 0x44]
call esi
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
lea edx, [ebp - 0x44]
push ecx
push edx
call fcn.004b7e80
mov edx, eax
lea ecx, [ebp - 0x3c]
call edi
lea eax, [ebp - 0x4c]
lea ecx, [ebp - 0x48]
push eax
lea edx, [ebp - 0x44]
push ecx
push edx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x68]
call ebx
mov eax, dword [ebp - 0x3c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
test eax, eax
mov dword [ebp - 0x14], eax
jl 0x4f99ba
cmp eax, 0xfff
jg 0x4f99ba
mov word [0x54faec], ax
mov dword [0x54fac0], 0x4b18967f
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.004face0
test ax, ax
jne case.0x4faa58.3
cmp word [0x54fde8], bx
je 0x4f9ab5
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], ebx
push ecx
call fcn.005049a0
mov word [0x54fde8], bx
mov dword [0x54fac0], 0x4b18967f
jmp 0x4f9ac3
cmp word [0x54fd5c], bx
je 0x4f9ac3
call fcn.00478b00
mov edx, dword [0x54faec]
mov dword [ebp - 0x18], 0x40
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x20], 1
mov dword [0x54fd50], 0
mov bx, dx
jmp 0x4f9e06
cmp si, 0x52
jne 0x4f9b76
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
sub eax, ebx
je 0x4f9b2a
dec eax
je 0x4f9b1a
dec eax
jne case.0x4faa58.3
call fcn.00496310
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.00497320
wait
push 0x4fac5f
jmp 0x4fac4e
cmp dword [0x54f010], ebx
jne 0x4f9b42
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 2
push edx
mov ecx, dword [esi]
push esi
call dword [ecx + 0x7a0]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7a0
jmp 0x4f8f06
cmp si, 0x53
jne 0x4f9d74
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
cmp eax, 4
ja case.0x4faa58.3
jmp dword [eax*4 + 0x4fac98]
fld dword [0x54fc34]
fdiv dword [0x401514]
mov eax, dword [0x54f010]
fstp dword [0x54fc34]
cmp eax, ebx
jne 0x4f9bc6
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x314]
lea edx, [ebp - 0x68]
mov dword [ebp - 0x60], eax
push edx
mov dword [ebp - 0x68], 9
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
lea ecx, [ebp - 0x68]
mov si, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
cmp si, bx
je 0x4f9bf9
call fcn.00466290
call fcn.005085a0
mov ax, word [0x54fd64]
cmp ax, 1
je 0x4f9c14
cmp ax, 2
jne case.0x4faa58.3
cmp dword [0x54f010], ebx
jne 0x4f9c2c
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov eax, dword [esi]
call dword [eax + 0x7e8]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7e8
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
cmp dword [0x54f010], ebx
jne 0x4f9c7a
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov ecx, dword [esi]
call dword [ecx + 0x71c]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x71c
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.0054a7d0
wait
push 0x4fac5f
jmp 0x4fac4e
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f9cde
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov edx, dword [eax]
push eax
call dword [edx + 0x348]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x58]
push eax
call esi
mov edi, eax
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4f9d14
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x348]
lea edx, [ebp - 0x54]
push eax
push edx
call esi
mov esi, eax
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
cmp eax, ebx
fnclex
jge 0x4f9d4e
push 0xe0
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xbc]
mov edx, dword [edi]
mov eax, 1
sub eax, esi
push eax
push edi
call dword [edx + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fabf0
jmp 0x4fabde
cmp si, 0x54
jne 0x4fa5c8
mov eax, dword [ebp + 0xc]
movsx eax, word [eax]
cmp eax, 4
ja case.0x4faa58.3
jmp dword [eax*4 + 0x4facac]
cmp word [0x54fd5c], bx
je 0x4f9da2
call fcn.00478b00
movsx eax, word [0x54fde8]
sub eax, ebx
je 0x4fa3d1
dec eax
je 0x4f9dc4
dec eax
jne case.0x4faa58.3
mov dword [ebp - 0x20], 3
jmp 0x4f9dd2
mov eax, 2
mov word [0x54fde8], ax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xbc]
xor esi, esi
push ecx
mov dword [ebp - 0xbc], esi
call fcn.005049a0
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], esi
push edx
call fcn.00469a60
mov bx, word [0x54faee]
mov dword [ebp - 0x18], esi
mov word [ebp - 0x40], bx
fld dword [0x54faa8]
fcomp dword [0x54fac0]
mov ax, word [0x54f98c]
mov ecx, dword [0x54f98c]
mov word [0x54fd66], ax
mov dword [ebp - 0x2c], ecx
fnstsw ax
test ah, 0x40
je 0x4f9f08
fld dword [0x54faac]
fcomp dword [0x54fac4]
fnstsw ax
test ah, 0x40
je 0x4f9f08
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push 0x41ab8c
push 0x42db08
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x3c]
call edi
push 0x10
call fcn.0041c980
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x3c]
mov edx, dword [0x54f924]
push ecx
push edx
call esi
mov edx, eax
lea ecx, [ebp - 0x44]
call edi
push eax
push 0x42db40
call esi
mov edx, eax
lea ecx, [ebp - 0x48]
call edi
push eax
push 0x41ab8c
call esi
mov edx, eax
lea ecx, [ebp - 0x4c]
call edi
push eax
push 0x42db54
call esi
mov edx, eax
lea ecx, [ebp - 0x50]
call edi
lea eax, [ebp - 0x50]
push eax
call fcn.004b8b00
lea ecx, [ebp - 0x50]
lea edx, [ebp - 0x4c]
push ecx
lea eax, [ebp - 0x48]
push edx
lea ecx, [ebp - 0x44]
push eax
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x14
lea edx, [ebp - 0xbc]
mov esi, 1
push edx
mov dword [ebp - 0xbc], esi
call fcn.005049a0
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], esi
push eax
call fcn.00469a60
jmp 0x4fa347
mov edx, dword [0x54f660]
movsx ecx, cx
movsx eax, bx
shl ecx, 0xc
add ecx, eax
cmp word [edx + ecx*2], 0xffff
jne 0x4f9f84
mov edx, dword [0x54f6a8]
mov dword [edx + ecx*4], 0
mov edx, dword [0x54f6cc]
movsx ecx, word [ebp - 0x2c]
shl ecx, 0xc
add ecx, eax
mov dword [edx + ecx*4], 0
mov edx, dword [0x54f6f0]
movsx ecx, word [ebp - 0x2c]
shl ecx, 0xc
add ecx, eax
mov dword [edx + ecx*4], 0
mov edx, dword [0x54f684]
movsx ecx, word [ebp - 0x2c]
shl ecx, 0xc
add ecx, eax
mov word [edx + ecx*2], 0
mov edx, dword [0x54f714]
movsx ecx, word [ebp - 0x2c]
shl ecx, 0xc
add ecx, eax
mov dword [edx + ecx*4], 0
mov eax, dword [0x54f010]
test eax, eax
jne 0x4f9fa2
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x348]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
push 0
push esi
mov eax, dword [esi]
call dword [eax + 0xe4]
test eax, eax
fnclex
jge 0x4f9fdb
push 0xe4
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x2c]
push ecx
call fcn.00500800
movsx eax, word [ebp - 0x2c]
mov edx, dword [0x54f3fc]
mov edi, dword [0x54f3e0]
shl eax, 2
mov ecx, dword [edx + eax]
mov esi, dword [edi + eax]
add ecx, esi
mov dword [ebp - 0x14], 1
lea esi, [ecx + ecx*2]
movsx ecx, word [ebp - 0x20]
shl esi, 2
dec ecx
je 0x4fa04b
dec ecx
je 0x4fa032
dec ecx
jne 0x4fa04e
movsx ecx, word [0x54f98c]
mov ecx, dword [edx + ecx*4]
inc ecx
mov dword [edx + eax], ecx
jmp 0x4fa04e
movsx ecx, word [0x54f98c]
mov ecx, dword [edx + ecx*4]
add ecx, 2
mov dword [edx + eax], ecx
mov dword [ebp - 0x14], 2
jmp 0x4fa04e
inc dword [edi + eax]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x20]
push edx
push eax
mov word [0x54fd68], bx
call fcn.004fb140
lea ecx, [ebp - 0x2c]
push ecx
call fcn.0049f850
mov edx, dword [0x54f3fc]
mov edi, eax
movsx eax, word [ebp - 0x2c]
shl eax, 2
mov ecx, dword [edx + eax]
mov edx, dword [0x54f3e0]
mov ebx, dword [edx + eax]
lea eax, [ebp - 0xcc]
add ecx, ebx
push eax
mov dword [ebp - 0xcc], ecx
lea ecx, [ebp - 0x2c]
push ecx
call fcn.0046e5d0
lea edx, [ebp - 0x2c]
push edx
call fcn.0049f850
mov edx, dword [0x54fd4c]
mov ecx, eax
sub ecx, edi
add eax, esi
add edx, ecx
cmp word [ebp - 0x20], 2
mov dword [0x54fd4c], edx
mov dword [ebp - 0x24], eax
jne 0x4fa104
fld dword [0x54fac4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
call esi
fld dword [0x54fac0]
push eax
call esi
mov edx, dword [ebp - 0x40]
push eax
push 0
push edx
lea eax, [ebp - 0x24]
push 0x10
push eax
call fcn.0041d260
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov eax, dword [ebp - 0x24]
mov dword [0x54fd4c], eax
add eax, 0xc
mov dword [ebp - 0x24], eax
jmp 0x4fa10a
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFpI4]
mov ecx, dword [0x54faa8]
mov edx, dword [0x54faac]
fld dword [0x54faac]
or edi, 0xffffffff
mov dword [0x54fac0], ecx
mov dword [0x54fd24], edi
mov dword [0x54fac4], edx
call esi
fld dword [0x54faa8]
push eax
call esi
mov ecx, dword [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x40]
push 0
push eax
lea edx, [ebp - 0x24]
push ecx
push edx
call fcn.0041d260
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
lea eax, [ebp - 0xbc]
lea ecx, [ebp - 0x2c]
push eax
push ecx
mov dword [ebp - 0xbc], edi
call fcn.0049f430
movsx edx, word [ebp - 0x2c]
fld dword [0x54faa8]
mov eax, dword [0x54f2e4]
fild dword [eax + edx*4]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4fa19c
fld dword [0x54faa8]
call esi
movsx ecx, word [ebp - 0x2c]
mov edx, dword [0x54f2e4]
mov dword [edx + ecx*4], eax
movsx eax, word [ebp - 0x2c]
fld dword [0x54faa8]
mov ecx, dword [0x54f31c]
fild dword [ecx + eax*4]
fcompp
fnstsw ax
test ah, 1
je 0x4fa1cd
fld dword [0x54faa8]
call esi
movsx edx, word [ebp - 0x2c]
mov ecx, dword [0x54f31c]
mov dword [ecx + edx*4], eax
movsx edx, word [ebp - 0x2c]
fld dword [0x54faac]
mov eax, dword [0x54f300]
fild dword [eax + edx*4]
fcompp
fnstsw ax
test ah, 0x41
jne 0x4fa1fd
fld dword [0x54faac]
call esi
movsx ecx, word [ebp - 0x2c]
mov edx, dword [0x54f300]
mov dword [edx + ecx*4], eax
movsx eax, word [ebp - 0x2c]
fld dword [0x54faac]
mov ecx, dword [0x54f338]
fild dword [ecx + eax*4]
fcompp
fnstsw ax
test ah, 1
je 0x4fa22e
fld dword [0x54faac]
call esi
movsx edx, word [ebp - 0x2c]
mov ecx, dword [0x54f338]
mov dword [ecx + edx*4], eax
mov edx, dword [0x54faa8]
mov eax, dword [0x54faac]
mov dword [0x54fc90], edx
mov dword [0x54fc94], eax
call fcn.004684f0
movsx ecx, word [ebp - 0x2c]
mov edx, dword [0x54f434]
lea eax, [edx + ecx*4]
lea ecx, [ebp - 0x2c]
push eax
push ecx
call fcn.0046fa40
cmp word [0x54fde8], 0
je 0x4fa347
mov eax, dword [0x54f010]
test eax, eax
jne 0x4fa28c
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov edx, dword [eax]
push eax
call dword [edx + 0x418]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x54]
push eax
call edi
mov esi, eax
push 0x41a3a4
push 0x42db8c
mov ebx, dword [esi]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push esi
call dword [ebx + 0x54]
test eax, eax
fnclex
jge 0x4fa2db
push 0x54
push 0x41f4f0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x44]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x54]
call ebx
mov eax, dword [0x54f010]
test eax, eax
jne 0x4fa30d
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x418]
lea edx, [ebp - 0x54]
push eax
push edx
call edi
mov esi, eax
push 0xffffffffffffffff
push esi
mov eax, dword [esi]
call dword [eax + 0x9c]
test eax, eax
fnclex
jge 0x4fa342
push 0x9c
push 0x41f4f0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x54]
call ebx
mov eax, dword [0x54f010]
xor edi, edi
cmp eax, edi
jne 0x4fa362
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
mov eax, 1
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xbc], eax
lea edx, [ebp - 0xc8]
lea eax, [ebp - 0xc4]
push edx
push eax
lea edx, [ebp - 0xc0]
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xc0], edi
mov ecx, dword [esi]
push edx
push eax
push esi
call dword [ecx + 0x7dc]
cmp eax, edi
fnclex
jge case.0x4faa58.3
push 0x7dc
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
wait
push 0x4fac5f
jmp 0x4fac4e
call fcn.004face0
test ax, ax
jne case.0x4faa58.3
mov ecx, dword [0x54faa8]
mov edx, dword [0x54faac]
lea eax, [ebp - 0xbc]
mov dword [0x54fac0], ecx
push eax
mov dword [0x54fac4], edx
mov dword [ebp - 0xbc], ebx
call fcn.00469a60
call fcn.004faf40
cmp word [0x54fac8], bx
je 0x4fa438
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push ecx
call fcn.00469a60
wait
push 0x4fac5f
jmp 0x4fac4e
movsx edx, word [0x54f98c]
movsx eax, word [0x54faee]
mov ecx, dword [0x54f6a8]
mov word [0x54fde8], 1
shl edx, 0xc
add edx, eax
fld dword [ecx + edx*4]
lea edx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 2
fstp dword [0x54fae8]
push edx
call fcn.00467360
call fcn.00491ae0
wait
push 0x4fac5f
jmp 0x4fac4e
mov eax, dword [0x54ffa8]
not eax
test ax, ax
je case.0x4faa58.3
call fcn.004feeb0
wait
push 0x4fac5f
jmp 0x4fac4e
lea ecx, [ebp - 0x98]
lea edx, [ebp - 0x68]
push ecx
push edx
mov dword [ebp - 0x90], 0x54faee
mov dword [ebp - 0x98], 0x4002
call dword [sym.imp.MSVBVM60.DLL_rtcVarStrFromVar]
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x4c]
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x41f650
lea ecx, [ebp - 0x48]
call edi
mov edx, 0x42dba0
lea ecx, [ebp - 0x44]
call edi
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
call fcn.004b7e80
mov edx, eax
lea ecx, [ebp - 0x3c]
call esi
lea ecx, [ebp - 0x4c]
lea edx, [ebp - 0x48]
push ecx
lea eax, [ebp - 0x44]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov ecx, dword [ebp - 0x3c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
fcomp qword [0x4021d8]
fnstsw ax
test ah, 0x40
jne case.0x4faa58.3
mov edx, dword [ebp - 0x3c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov word [0x54faee], ax
push 0x4fac5f
wait
jmp 0x4fac4e
xor word [0x54fcc0], 2
cmp word [0x54fcc0], bx
jne 0x4fa58d
mov word [0x54fcc0], 3
cmp dword [0x54f010], ebx
jne 0x4fa5a5
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov eax, dword [esi]
call dword [eax + 0x7d8]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7d8
jmp 0x4f8f06
cmp si, 0x55
jne 0x4fa5de
call fcn.00500df0
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x56
jne 0x4fa6ef
mov ecx, dword [ebp + 0xc]
movsx eax, word [ecx]
sub eax, 2
je 0x4fa6b4
sub eax, 2
jne case.0x4faa58.3
mov eax, dword [0x5508e0]
cmp eax, ebx
jne 0x4fa61e
push 0x5508e0
push 0x40ff4c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x5508e0]
mov edx, dword [eax]
push eax
call dword [edx + 0x338]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x58]
push eax
call esi
mov edi, eax
mov eax, dword [0x5508e0]
cmp eax, ebx
jne 0x4fa654
push 0x5508e0
push 0x40ff4c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x5508e0]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x338]
lea edx, [ebp - 0x54]
push eax
push edx
call esi
mov esi, eax
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
cmp eax, ebx
fnclex
jge 0x4fa68e
push 0xe0
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xbc]
mov edx, dword [edi]
mov eax, 1
sub eax, esi
push eax
push edi
call dword [edx + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fabf0
jmp 0x4fabde
cmp dword [0x54f010], ebx
jne 0x4fa6cc
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov eax, dword [esi]
call dword [eax + 0x7c4]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7c4
jmp 0x4f8f06
cmp si, 0x57
jne 0x4fa792
call fcn.004c23b0
test ax, ax
jne case.0x4faa58.3
mov ecx, dword [ebp + 0xc]
mov di, word [ecx]
cmp di, bx
jne 0x4fa762
cmp dword [0x54f010], ebx
jne 0x4fa72a
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 0xd
push eax
mov edx, dword [esi]
push esi
call dword [edx + 0x7a0]
cmp eax, ebx
fnclex
jge 0x4fa762
push 0x7a0
push 0x41b498
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp di, 2
jne case.0x4faa58.3
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push ecx
call fcn.0049e9b0
call fcn.004960b0
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x58
jne 0x4fa7e0
mov edx, dword [ebp + 0xc]
cmp word [edx], 2
jne case.0x4faa58.3
cmp dword [0x54f010], ebx
jne 0x4fa7bd
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
push esi
mov eax, dword [esi]
call dword [eax + 0x7bc]
cmp eax, ebx
fnclex
jge case.0x4faa58.3
push 0x7bc
jmp 0x4f8f06
cmp si, 0x59
jne 0x4fa856
mov ecx, dword [ebp + 0xc]
movsx eax, word [ecx]
sub eax, ebx
je 0x4fa838
dec eax
je 0x4fa820
dec eax
jne case.0x4faa58.3
mov word [0x54f064], 9
cmp word [0x54f062], bx
je case.0x4faa58.3
call fcn.0046ed20
wait
push 0x4fac5f
jmp 0x4fac4e
push 0x10
call fcn.0041c980
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
wait
push 0x4fac5f
jmp 0x4fac4e
mov dx, word [0x54f98c]
mov word [0x54f98e], dx
call fcn.004f4000
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x5a
jne 0x4fa8f5
mov eax, dword [ebp + 0xc]
cmp word [eax], 2
jne 0x4fa8c1
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4fa887
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x34c]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
push 1
push esi
mov eax, dword [esi]
call dword [eax + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fa9e0
push 0xe4
push 0x41f6d0
jmp 0x4fa9d8
cmp word [0x54fd5c], 1
jne 0x4fa8e0
push 0x54faec
call fcn.0050df30
wait
push 0x4fac5f
jmp 0x4fac4e
push 0x54faee
call fcn.0050df30
wait
push 0x4fac5f
jmp 0x4fac4e
cmp si, 0x30
jl 0x4faa38
cmp si, 0x39
jg 0x4faa38
cmp word [0x54ffa8], bx
je 0x4fa9f4
mov ecx, dword [0x54ff94]
push ecx
push 0x420178
call dword [sym.imp.MSVBVM60.DLL___vbaStrCmp]
test eax, eax
je 0x4faa09
mov edx, dword [ebp + 0xc]
cmp word [edx], 1
je 0x4faa09
cmp word [0x54ffca], bx
je 0x4fa95c
lea eax, [ebp - 0xbc]
mov dword [ebp - 0xbc], 1
push eax
call fcn.004fd4f0
movsx ecx, si
lea edx, [ebp - 0x68]
push ecx
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromAnsi]
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
mov ecx, 0x54ffb8
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4fa9a8
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x434]
lea edx, [ebp - 0x54]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [0x54ffb8]
mov esi, eax
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x54]
cmp eax, ebx
fnclex
jge 0x4fa9e0
push 0x54
push 0x41f4f0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x54]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
wait
push 0x4fac5f
jmp 0x4fac4e
cmp word [0x550260], bx
jne 0x4faa38
mov edx, dword [ebp + 0xc]
cmp word [edx], bx
jne case.0x4faa58.3
mov eax, dword [0x54f010]
add esi, 0xffffffd0
cmp eax, ebx
mov dword [ebp - 0x2c], esi
jne 0x4faa28
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x54f010]
lea ecx, [ebp - 0x2c]
mov eax, dword [esi]
jmp 0x4f8eef
call dword [sym.imp.MSVBVM60.DLL_rtcBeep]
wait
push 0x4fac5f
jmp 0x4fac4e
mov edx, dword [ebp + 0xc]
movsx eax, word [edx]
cmp eax, 4
ja case.0x4faa58.3
jmp dword [eax*4 + 0x4facc0]
call fcn.004fdb90
wait
push 0x4fac5f
jmp 0x4fac4e
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4faa8d
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x324]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x58]
push eax
push edx
call esi
mov edi, eax
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4faac3
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x324]
lea edx, [ebp - 0x54]
push eax
push edx
call esi
mov esi, eax
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
cmp eax, ebx
fnclex
jge 0x4faafd
push 0xe0
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xbc]
mov edx, dword [edi]
mov eax, 1
sub eax, esi
push eax
push edi
call dword [edx + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fabf0
jmp 0x4fabde
call fcn.0053bd80
wait
push 0x4fac5f
jmp 0x4fac4e
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4fab51
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x33c]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x58]
push eax
push edx
call esi
mov edi, eax
mov eax, dword [0x54f010]
cmp eax, ebx
jne 0x4fab87
push 0x54f010
push 0x413b2c
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x54f010]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x33c]
lea edx, [ebp - 0x54]
push eax
push edx
call esi
mov esi, eax
lea ecx, [ebp - 0xbc]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0xe0]
cmp eax, ebx
fnclex
jge 0x4fabc1
push 0xe0
push 0x41f6d0
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov esi, dword [ebp - 0xbc]
mov edx, dword [edi]
mov eax, 1
sub eax, esi
push eax
push edi
call dword [edx + 0xe4]
cmp eax, ebx
fnclex
jge 0x4fabf0
push 0xe4
push 0x41f6d0
push edi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
lea ecx, [ebp - 0x58]
lea edx, [ebp - 0x54]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
wait
push 0x4fac5f
jmp 0x4fac4e
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x28]
call esi
lea ecx, [ebp - 0x3c]
call esi
ret