Function at 0x4e5200
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push 0x408076
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x110
push ebx
push esi
push edi
mov dword [ebp - 0xc], esp
mov dword [ebp - 8], 0x4079a8
mov eax, dword [0x4f7970]
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], edi
mov dword [ebp - 0x78], edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x84], edi
mov dword [ebp - 0x88], edi
mov dword [ebp - 0x8c], edi
mov dword [ebp - 0x90], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0xb0], edi
mov dword [ebp - 0xc0], edi
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc8], edi
mov dword [ebp - 0xcc], edi
jne 0x4e52a7
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea ecx, [ebp - 0xc4]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x1b8]
cmp eax, edi
fnclex
jge 0x4e52d5
push 0x1b8
push 0x41f7fc
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
cmp word [ebp - 0xc4], di
je 0x4e7df2
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea edx, [ebp - 0x68]
lea eax, [ebp - 0xc8]
push edx
push eax
mov dword [ebp - 0xc8], 0x80000002
call fcn.00476580
lea ecx, [ebp - 0x68]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
mov eax, dword [0x4f7970]
cmp eax, edi
jne 0x4e5331
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3a8]
lea edx, [ebp - 0x8c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0xc4]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x68]
cmp eax, edi
fnclex
jge 0x4e536c
push 0x68
push 0x41fd10
push esi
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaStrI2]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrBool]
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0xec]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x4243f4
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
push eax
lea ecx, [ebp - 0x78]
lea edx, [ebp - 0x74]
push ecx
lea eax, [ebp - 0x70]
push edx
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e54d9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x368]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e551e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0xf0]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424680
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e5679
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x36c]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e56be
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0xf4]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424410
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e5819
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x37c]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e585e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424444
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e59b9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x378]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e59fe
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424330
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e5b59
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x380]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e5b9e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x100]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x42446c
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e5cf9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3a4]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e5d3e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x104]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x42453c
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e5e99
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x384]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e5ede
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x108]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424488
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e6039
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x388]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e607e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x4244ac
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e61d9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x394]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e621e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x110]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424650
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e6379
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x398]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e63be
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x114]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x4244d8
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e6519
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x390]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e655e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x118]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x424500
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e66b9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3a0]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e66fe
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x11c]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x42455c
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e6859
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3ac]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e689e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x120]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, 0x42439c
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
lea edx, [ebp - 0x74]
push ecx
push edx
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e69f9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x38c]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov ecx, dword [eax]
lea edx, [ebp - 0xc4]
push edx
push eax
mov dword [ebp - 0xd0], eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e6a3e
mov ecx, dword [ebp - 0xd0]
push 0x68
push 0x41fd10
push ecx
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0
push 0xffffffffffffffff
push 1
push 1
call ebx
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
push 0xffffffffffffffff
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
mov edx, dword [ebp - 0xc4]
push eax
push edx
call edi
mov edx, eax
lea ecx, [ebp - 0x68]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edx, eax
lea ecx, [ebp - 0x88]
call esi
mov eax, dword [ebp - 0x88]
push 0
push 0xffffffffffffffff
push 1
push 0
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x88], 0
call ebx
mov edx, eax
lea ecx, [ebp - 0x7c]
call esi
push eax
push 0
call edi
mov edx, eax
lea ecx, [ebp - 0x78]
call esi
mov edx, dword [ebp - 0x124]
push eax
lea ecx, [ebp - 0x74]
call esi
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcReplace]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x4243d4
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 8
call edi
mov edx, 0x42429c
lea ecx, [ebp - 0x80]
call edi
lea ecx, [ebp - 0xa0]
lea edx, [ebp - 0x84]
push ecx
lea eax, [ebp - 0x80]
push edx
lea ecx, [ebp - 0xc8]
push eax
lea edx, [ebp - 0xb0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea eax, [ebp - 0x88]
lea ecx, [ebp - 0x84]
push eax
lea edx, [ebp - 0x80]
push ecx
lea eax, [ebp - 0x7c]
push edx
lea ecx, [ebp - 0x78]
push eax
push ecx
lea edx, [ebp - 0x74]
lea eax, [ebp - 0x70]
push edx
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 9
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x28
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0xc
test eax, eax
jne 0x4e6b97
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3bc]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov edi, eax
lea edx, [ebp - 0xc4]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e6bd6
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
push 0x68
push 0x41fd10
push edi
push eax
call ebx
jmp 0x4e6bdc
mov ebx, dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x8c]
sete al
neg eax
mov di, ax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
test di, di
je 0x4e6d97
mov eax, dword [0x4f834c]
test eax, eax
jne 0x4e6c1c
push 0x4f834c
push 0x423de0
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov edi, dword [0x4f834c]
lea edx, [ebp - 0x8c]
push edx
push edi
mov ecx, dword [edi]
call dword [ecx + 0x14]
test eax, eax
fnclex
jge 0x4e6c40
push 0x14
push 0x423dd0
push edi
push eax
call ebx
mov eax, dword [ebp - 0x8c]
lea edx, [ebp - 0x68]
push edx
push eax
mov ecx, dword [eax]
mov edi, eax
call dword [ecx + 0x50]
test eax, eax
fnclex
jge 0x4e6c63
push 0x50
push 0x423df0
push edi
push eax
call ebx
call fcn.0041e9b4
mov dword [ebp - 0xc8], eax
call dword [sym.imp.MSVBVM60.DLL___vbaSetSystemError]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0xc8]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
push ecx
push 0x41f594
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa0], 3
call edi
mov edx, eax
lea ecx, [ebp - 0x6c]
call esi
lea edx, [ebp - 0xa0]
push eax
push edx
call fcn.004c8640
mov edx, eax
lea ecx, [ebp - 0x70]
call esi
push eax
call edi
mov esi, 8
lea edx, [ebp - 0xb0]
lea ecx, [ebp - 0x64]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xb0], esi
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0x70]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
push edx
push 3
call edi
add esp, 0x10
lea ecx, [ebp - 0x8c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 0xc0], esi
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x4245e0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0xb8], 0x428a1c
call esi
mov edx, 0x424580
lea ecx, [ebp - 0x68]
call esi
lea eax, [ebp - 0x64]
lea ecx, [ebp - 0xc0]
push eax
lea edx, [ebp - 0xa0]
push ecx
push edx
mov dword [ebp - 0xc8], 0x80000002
call dword [sym.imp.MSVBVM60.DLL___vbaVarCat]
push eax
lea eax, [ebp - 0x6c]
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
call fcn.00479d20
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
call edi
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x18
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e6dd8
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3dc]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x90]
push edx
push 0
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x4e6e11
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e6e37
push 0x68
push 0x41fd10
push esi
push eax
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
push ecx
sete al
neg eax
push edx
push 2
mov esi, eax
call edi
add esp, 0xc
test si, si
je 0x4e6e8b
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e6ea9
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3dc]
lea edx, [ebp - 0x8c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x90]
push ecx
push 1
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x4e6ee2
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x68]
test eax, eax
fnclex
jge 0x4e6f08
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call edi
add esp, 0xc
test si, si
je 0x4e6f53
mov eax, 2
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xc0], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e6f71
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3dc]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x90]
push edx
push 2
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x4e6faa
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e6fd0
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
sete al
push ecx
push edx
neg eax
push 2
mov esi, eax
call edi
add esp, 0xc
test si, si
je 0x4e701e
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xb8], 3
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e703c
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3dc]
lea edx, [ebp - 0x8c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0x90]
push ecx
push 3
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x4e7075
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x68]
test eax, eax
fnclex
jge 0x4e709b
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call edi
add esp, 0xc
test si, si
je 0x4e70e9
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xb8], 4
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e7107
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3dc]
push eax
lea eax, [ebp - 0x8c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea edx, [ebp - 0x90]
push edx
push 4
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x4e7140
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e7166
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
sete al
push ecx
push edx
neg eax
push 2
mov esi, eax
call edi
add esp, 0xc
test si, si
je 0x4e71b4
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x54]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea eax, [ebp - 0x54]
lea ecx, [ebp - 0x68]
push eax
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarVal]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x4246a8
fstp qword [ebp - 0x98]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xa0], 5
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x6c]
call esi
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x70]
push edx
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea ecx, [ebp - 0x70]
lea edx, [ebp - 0x6c]
push ecx
lea eax, [ebp - 0x68]
push edx
push eax
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xa0]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
mov eax, dword [0x4f7970]
add esp, 0x1c
test eax, eax
jne 0x4e726a
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d0]
lea edx, [ebp - 0x8c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0xc4]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x68]
test eax, eax
fnclex
jge 0x4e72a1
push 0x68
push 0x41fd10
push esi
push eax
call ebx
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x8c]
sete dl
neg edx
mov si, dx
call edi
test si, si
je 0x4e72e9
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e7307
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3d4]
lea edx, [ebp - 0x8c]
push eax
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov esi, eax
lea ecx, [ebp - 0xc4]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x68]
test eax, eax
fnclex
jge 0x4e733e
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x8c]
sete dl
neg edx
mov si, dx
call edi
test si, si
je 0x4e737d
mov eax, 2
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x24]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xc0], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x4245fc
lea ecx, [ebp - 0x6c]
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea eax, [ebp - 0x24]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xa0]
push eax
push ecx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea edx, [ebp - 0x6c]
lea eax, [ebp - 0x68]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e73fd
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c8]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
lea edx, [ebp - 0x8c]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x90]
push ecx
push 0
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x4e7438
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x68]
test eax, eax
fnclex
jge 0x4e745e
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e74b0
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], 0xfffffff1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e74ce
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3c8]
push eax
lea eax, [ebp - 0x8c]
push eax
call edi
mov esi, eax
lea edx, [ebp - 0x90]
push edx
push 1
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x4e7503
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e7529
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
sete al
push ecx
push edx
neg eax
push 2
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e757b
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], 0xfffffffe
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e7599
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c8]
lea edx, [ebp - 0x8c]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x90]
push ecx
push 2
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x4e75ce
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x68]
test eax, eax
fnclex
jge 0x4e75f4
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e7646
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e7664
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3c8]
push eax
lea eax, [ebp - 0x8c]
push eax
call edi
mov esi, eax
lea edx, [ebp - 0x90]
push edx
push 3
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x4e7699
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e76bf
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
sete al
push ecx
push edx
neg eax
push 2
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e7711
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e772f
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c8]
lea edx, [ebp - 0x8c]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x90]
push ecx
push 4
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x4e7764
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x68]
test eax, eax
fnclex
jge 0x4e778a
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e77dc
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e77fa
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov edx, dword [eax]
push eax
call dword [edx + 0x3c8]
push eax
lea eax, [ebp - 0x8c]
push eax
call edi
mov esi, eax
lea edx, [ebp - 0x90]
push edx
push 5
mov ecx, dword [esi]
push esi
call dword [ecx + 0x40]
test eax, eax
fnclex
jge 0x4e782f
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea edx, [ebp - 0xc4]
push edx
push eax
mov ecx, dword [eax]
mov esi, eax
call dword [ecx + 0x68]
test eax, eax
fnclex
jge 0x4e7855
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor eax, eax
cmp word [ebp - 0xc4], 0xffff
lea ecx, [ebp - 0x90]
lea edx, [ebp - 0x8c]
sete al
push ecx
push edx
neg eax
push 2
mov esi, eax
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e78a4
mov eax, 2
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xc0], eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e78c2
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov eax, dword [0x4f7970]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c8]
lea edx, [ebp - 0x8c]
push eax
push edx
call edi
mov esi, eax
lea ecx, [ebp - 0x90]
push ecx
push 6
mov eax, dword [esi]
push esi
call dword [eax + 0x40]
test eax, eax
fnclex
jge 0x4e78f7
push 0x40
push 0x41fd00
push esi
push eax
call ebx
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xc4]
push ecx
push eax
mov edx, dword [eax]
mov esi, eax
call dword [edx + 0x68]
test eax, eax
fnclex
jge 0x4e791d
push 0x68
push 0x41fd10
push esi
push eax
call ebx
xor edx, edx
cmp word [ebp - 0xc4], 0xffff
lea eax, [ebp - 0x90]
lea ecx, [ebp - 0x8c]
sete dl
push eax
push ecx
neg edx
push 2
mov esi, edx
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
test si, si
je 0x4e796f
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0xb8], 0xf
mov dword [ebp - 0xc0], 2
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov edx, 0x424624
lea ecx, [ebp - 0x6c]
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea edx, [ebp - 0x34]
lea eax, [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xc8]
push ecx
lea eax, [ebp - 0xa0]
push edx
push eax
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e79ea
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea ecx, [ebp - 0xc4]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x98]
test eax, eax
fnclex
jge 0x4e7a14
push 0x98
push 0x41f7fc
push esi
push eax
call ebx
mov dx, word [ebp - 0xc4]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov word [ebp - 0x98], dx
mov edx, 0x424310
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0xa0], 2
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea eax, [ebp - 0xa0]
lea ecx, [ebp - 0x6c]
push eax
lea edx, [ebp - 0x68]
push ecx
lea eax, [ebp - 0xc8]
push edx
lea ecx, [ebp - 0xb0]
push eax
push ecx
mov dword [ebp - 0xc8], 0x80000002
call fcn.00479d20
lea edx, [ebp - 0x6c]
lea eax, [ebp - 0x68]
push edx
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
mov edi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
lea ecx, [ebp - 0xb0]
lea edx, [ebp - 0xa0]
push ecx
push edx
push 2
call edi
mov eax, dword [0x4f7970]
add esp, 0x18
test eax, eax
jne 0x4e7ab6
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea ecx, [ebp - 0xc4]
push ecx
push esi
mov eax, dword [esi]
call dword [eax + 0x98]
test eax, eax
fnclex
jge 0x4e7ae0
push 0x98
push 0x41f7fc
push esi
push eax
call ebx
cmp word [ebp - 0xc4], 0
jne 0x4e7df2
mov eax, dword [0x4f7970]
test eax, eax
jne 0x4e7b07
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea eax, [ebp - 0xc8]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x80]
test eax, eax
fnclex
jge 0x4e7b31
push 0x80
push 0x41f7fc
push esi
push eax
call ebx
mov ecx, dword [ebp - 0xc8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x98], ecx
mov edx, 0x4242e0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0xa0], 4
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xcc], 0x80000002
call fcn.00479d20
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call edi
mov eax, dword [0x4f7970]
add esp, 0x18
test eax, eax
jne 0x4e7bcb
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea eax, [ebp - 0xc8]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x88]
test eax, eax
fnclex
jge 0x4e7bf5
push 0x88
push 0x41f7fc
push esi
push eax
call ebx
mov ecx, dword [ebp - 0xc8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x98], ecx
mov edx, 0x4242cc
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0xa0], 4
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xcc], 0x80000002
call fcn.00479d20
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call edi
mov eax, dword [0x4f7970]
add esp, 0x18
test eax, eax
jne 0x4e7c8f
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea eax, [ebp - 0xc8]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x70]
test eax, eax
fnclex
jge 0x4e7cb3
push 0x70
push 0x41f7fc
push esi
push eax
call ebx
mov ecx, dword [ebp - 0xc8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x98], ecx
mov edx, 0x4242f0
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0xa0], 4
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xcc], 0x80000002
call fcn.00479d20
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call edi
mov eax, dword [0x4f7970]
add esp, 0x18
test eax, eax
jne 0x4e7d4d
push 0x4f7970
push 0x417418
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov esi, dword [0x4f7970]
lea eax, [ebp - 0xc8]
push eax
push esi
mov edx, dword [esi]
call dword [edx + 0x78]
test eax, eax
fnclex
jge 0x4e7d71
push 0x78
push 0x41f7fc
push esi
push eax
call ebx
mov ecx, dword [ebp - 0xc8]
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 0x98], ecx
mov edx, 0x424300
lea ecx, [ebp - 0x6c]
mov dword [ebp - 0xa0], 4
call esi
mov edx, 0x42429c
lea ecx, [ebp - 0x68]
call esi
lea edx, [ebp - 0xa0]
lea eax, [ebp - 0x6c]
push edx
lea ecx, [ebp - 0x68]
push eax
lea edx, [ebp - 0xcc]
push ecx
lea eax, [ebp - 0xb0]
push edx
push eax
mov dword [ebp - 0xcc], 0x80000002
call fcn.00479d20
lea ecx, [ebp - 0x6c]
lea edx, [ebp - 0x68]
push ecx
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
lea eax, [ebp - 0xb0]
lea ecx, [ebp - 0xa0]
push eax
push ecx
push 2
call edi
add esp, 0x18
wait
push 0x4e7e86
jmp 0x4e7e6b
mov esi, dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x24]
call esi
lea ecx, [ebp - 0x34]
call esi
lea ecx, [ebp - 0x54]
call esi
lea ecx, [ebp - 0x64]
call esi
ret