Function at 0x4a7020
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
push 0x405386
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x6c8
call sub.MSVBVM60.DLL___vbaChkstk
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x14], 0x404898
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 1
mov dword [ebp - 4], 2
push 0xffffffffffffffff
call dword [sym.imp.MSVBVM60.DLL___vbaOnError]
mov dword [ebp - 4], 3
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 0x8002
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x280]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx ecx, ax
test ecx, ecx
je 0x4a8a34
mov dword [ebp - 4], 4
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x270], 0xb
cmp dword [0x4b73f4], 0
jne 0x4a70f7
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x53c], 0x4b73f4
jmp 0x4a7101
mov dword [ebp - 0x53c], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 0x80010007
mov edx, dword [ebp - 0x53c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x53c]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 5
mov dword [ebp - 0x268], 0x41f80000
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a71af
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x540], 0x4b73f4
jmp 0x4a71b9
mov dword [ebp - 0x540], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp - 0x540]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x540]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x344]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 6
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a7264
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x544], 0x4b73f4
jmp 0x4a726e
mov dword [ebp - 0x544], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 2
mov ecx, dword [ebp - 0x544]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x544]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 7
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a7319
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x548], 0x4b73f4
jmp 0x4a7323
mov dword [ebp - 0x548], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 5
mov edx, dword [ebp - 0x548]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x548]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 8
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x20c], 2
lea eax, [ebp - 0x20c]
push eax
call fcn.004ad6f0
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 9
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x1e
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x2d0]
push ecx
lea edx, [ebp - 0x2c0]
push edx
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x4f8], eax
jmp 0x4a7feb
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x268], 0x92
mov dword [ebp - 0x270], 2
mov ecx, 0xeb
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1f0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x21c], 8
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f0]
push ecx
lea edx, [ebp - 0x1ec]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xb
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x260]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea edx, [ebp - 0x260]
push edx
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0xc
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x270], 0x2011
cmp dword [0x4b7010], 0
jne 0x4a756b
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x54c], 0x4b7010
jmp 0x4a7575
mov dword [ebp - 0x54c], 0x4b7010
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 0x19
mov edx, dword [ebp - 0x54c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x54c]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x374]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xd
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fstp dword [ebp - 0x190]
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x11
cmp dword [0x4b7010], 0
jne 0x4a7676
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x550], 0x4b7010
jmp 0x4a7680
mov dword [ebp - 0x550], 0x4b7010
push 0
push 0xc
mov eax, dword [ebp - 0x550]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x550]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
neg ax
sbb eax, eax
neg eax
neg eax
mov word [ebp - 0x2a4], ax
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0x2a4]
test edx, edx
je 0x4a7f77
mov dword [ebp - 4], 0x12
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x268]
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a7740
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x554], 0x4b73f4
jmp 0x4a774a
mov dword [ebp - 0x554], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 5
mov ecx, dword [ebp - 0x554]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x554]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x13
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fstp dword [ebp - 0x190]
mov dword [ebp - 4], 0x14
cmp dword [0x4b7010], 0
jne 0x4a77f4
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x558], 0x4b7010
jmp 0x4a77fe
mov dword [ebp - 0x558], 0x4b7010
push 0
push 0x1a
mov edx, dword [ebp - 0x558]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x374]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0x260]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0x1e8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0x16
mov edx, 0x417b9c
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
push eax
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x2f0]
push edx
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x18c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x4fc], eax
jmp 0x4a7a60
mov dword [ebp - 4], 0x18
mov edx, dword [ebp - 0x140]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x270], 8
cmp dword [ebp - 0x1e8], 0
je 0x4a79c1
mov eax, dword [ebp - 0x1e8]
cmp word [eax], 1
jne 0x4a79c1
lea ecx, [ebp - 0x18c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov edx, dword [ebp - 0x1e8]
sub eax, dword [edx + 0x14]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x2a4]
cmp ecx, dword [eax + 0x10]
jae 0x4a79a7
mov dword [ebp - 0x55c], 0
jmp 0x4a79b3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x55c], eax
mov edx, dword [ebp - 0x2a4]
mov dword [ebp - 0x560], edx
jmp 0x4a79cd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ebp - 0x560]
xor eax, eax
mov al, byte [ecx + edx]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromChar]
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x20c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x2f0]
push ecx
lea edx, [ebp - 0x2e0]
push edx
lea eax, [ebp - 0x18c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x4fc], eax
cmp dword [ebp - 0x4fc], 0
jne 0x4a793c
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov ecx, dword [ebp - 0x140]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLenBstr]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x280], 3
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x310]
push edx
lea eax, [ebp - 0x300]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x500], eax
jmp 0x4a7d25
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x1f
jae 0x4a7b34
mov dword [ebp - 0x564], 0
jmp 0x4a7b40
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x564], eax
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x405
jae 0x4a7b68
mov dword [ebp - 0x568], 0
jmp 0x4a7b74
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x568], eax
lea ecx, [ebp - 0x20c]
push ecx
lea edx, [ebp - 0x90]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
mov eax, dword [ebp - 0x140]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov ecx, dword [ebp - 0x2a4]
imul ecx, ecx, 0x1f
mov edx, dword [ebp - 0x2a8]
add edx, ecx
mov ecx, dword [0x4b71f8]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x268], 0x404
mov dword [ebp - 0x270], 0x8002
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx ecx, ax
test ecx, ecx
je 0x4a7cfd
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x268], 0x1e
mov dword [ebp - 0x270], 0x8002
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx ecx, ax
test ecx, ecx
je 0x4a7c8b
jmp 0x4a7d32
mov dword [ebp - 4], 0x21
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fstp dword [ebp - 0x190]
mov dword [ebp - 4], 0x23
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fsub dword [ebp - 0x190]
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fabs
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fstp dword [ebp - 0x56c]
fld dword [ebp - 0x56c]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fstp dword [ebp - 0x570]
fld dword [0x404d50]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [ebp - 0x570]
fnstsw ax
test ah, 1
je 0x4a7c9e
jmp 0x4a7fc6
mov dword [ebp - 4], 0x26
lea edx, [ebp - 0x310]
push edx
lea eax, [ebp - 0x300]
push eax
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0
jne 0x4a7af4
mov dword [ebp - 4], 0x27
lea edx, [ebp - 0x80]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x1f
jae 0x4a7d5e
mov dword [ebp - 0x574], 0
jmp 0x4a7d6a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0x405
jae 0x4a7d8c
mov dword [ebp - 0x578], 0
jmp 0x4a7d98
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x578], eax
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x1f
jae 0x4a7dbd
mov dword [ebp - 0x57c], 0
jmp 0x4a7dc9
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x2ac], 1
cmp dword [ebp - 0x2ac], 0x405
jae 0x4a7deb
mov dword [ebp - 0x580], 0
jmp 0x4a7df7
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x580], eax
mov ecx, dword [ebp - 0x2a4]
imul ecx, ecx, 0x1f
mov edx, dword [ebp - 0x2a8]
add edx, ecx
mov eax, dword [0x4b71f8]
xor ecx, ecx
cmp word [eax + edx*2], 0xeb
setne cl
mov edx, dword [ebp - 0x2ac]
imul edx, edx, 0x1f
mov eax, dword [ebp - 0x2b0]
add eax, edx
mov edx, dword [0x4b71f8]
xor ebx, ebx
cmp word [edx + eax*2], 0xec
setne bl
or ecx, ebx
test ecx, ecx
jne 0x4a7e72
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4a7ff8
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x1f
jae 0x4a7eb2
mov dword [ebp - 0x584], 0
jmp 0x4a7ebe
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0x405
jae 0x4a7ee0
mov dword [ebp - 0x588], 0
jmp 0x4a7eec
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x588], eax
mov ecx, dword [ebp - 0x2a4]
imul ecx, ecx, 0x1f
mov edx, dword [ebp - 0x2a8]
add edx, ecx
mov eax, dword [0x4b71f8]
xor ecx, ecx
cmp word [eax + edx*2], 0xf9
setne cl
neg ecx
mov word [ebp - 0x278], cx
mov dword [ebp - 0x280], 0xb
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpGe]
push eax
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
mov word [ebp - 0x2ac], ax
lea ecx, [ebp - 0x280]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx ecx, word [ebp - 0x2ac]
test ecx, ecx
je 0x4a7f77
jmp 0x4a7ff8
mov dword [ebp - 4], 0x2f
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fsub dword [ebp - 0x190]
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fabs
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fstp dword [ebp - 0x58c]
fld dword [ebp - 0x58c]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [0x404d4c]
fnstsw ax
test ah, 0x41
jne 0x4a7fc1
jmp 0x4a7ff8
jmp 0x4a764a
mov dword [ebp - 4], 0x33
lea edx, [ebp - 0x2d0]
push edx
lea eax, [ebp - 0x2c0]
push eax
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x4f8], eax
cmp dword [ebp - 0x4f8], 0
jne 0x4a743c
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
call fcn.004ad6f0
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx edx, ax
test edx, edx
je 0x4a8123
mov dword [ebp - 4], 0x36
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41adec
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x4ad3d1
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0x8002
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx ecx, ax
test ecx, ecx
je 0x4a8213
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41ae08
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x21c]
push ecx
push 0
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x20c]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x4ad3d1
mov dword [ebp - 4], 0x3d
cmp dword [0x4b73f4], 0
jne 0x4a823f
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x590], 0x4b73f4
jmp 0x4a8249
mov dword [ebp - 0x590], 0x4b73f4
push 0
push 1
mov ecx, dword [ebp - 0x590]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x590]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x268]
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a82c1
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x594], 0x4b73f4
jmp 0x4a82cb
mov dword [ebp - 0x594], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 5
mov eax, dword [ebp - 0x594]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x594]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x344]
push eax
lea eax, [ebp - 0x1fc]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1fc]
push ecx
lea edx, [ebp - 0x1f8]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x3e
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41ae28
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0xb
cmp dword [0x4b73f4], 0
jne 0x4a8443
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x598], 0x4b73f4
jmp 0x4a844d
mov dword [ebp - 0x598], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 0x80010007
mov edx, dword [ebp - 0x598]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x598]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x41
lea eax, [ebp - 0x80]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov word [0x4b720c], ax
mov dword [ebp - 4], 0x42
mov word [0x4b720e], 0
mov dword [ebp - 4], 0x43
cmp dword [0x4b73f4], 0
jne 0x4a850e
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x59c], 0x4b73f4
jmp 0x4a8518
mov dword [ebp - 0x59c], 0x4b73f4
mov ecx, dword [ebp - 0x59c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x59c]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x328]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x2a4], eax
push 0
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
push ecx
call dword [eax + 0x9c]
fnclex
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jge 0x4a8593
push 0x9c
push 0x417950
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x5a0], eax
jmp 0x4a859d
mov dword [ebp - 0x5a0], 0
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x44
cmp dword [0x4b73f4], 0
jne 0x4a85d5
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5a4], 0x4b73f4
jmp 0x4a85df
mov dword [ebp - 0x5a4], 0x4b73f4
mov ecx, dword [ebp - 0x5a4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5a4]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x318]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x2a4], eax
push 0
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
push ecx
call dword [eax + 0x9c]
fnclex
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jge 0x4a865a
push 0x9c
push 0x417950
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x5a8], eax
jmp 0x4a8664
mov dword [ebp - 0x5a8], 0
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x45
cmp dword [0x4b73f4], 0
jne 0x4a869c
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5ac], 0x4b73f4
jmp 0x4a86a6
mov dword [ebp - 0x5ac], 0x4b73f4
mov ecx, dword [ebp - 0x5ac]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5ac]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x314]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x2a4], eax
push 0
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
push ecx
call dword [eax + 0x94]
fnclex
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jge 0x4a8721
push 0x94
push 0x418a74
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x5b0], eax
jmp 0x4a872b
mov dword [ebp - 0x5b0], 0
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x46
cmp dword [0x4b73f4], 0
jne 0x4a8763
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5b4], 0x4b73f4
jmp 0x4a876d
mov dword [ebp - 0x5b4], 0x4b73f4
mov ecx, dword [ebp - 0x5b4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5b4]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x310]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x2a4], eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
push ecx
call dword [eax + 0x94]
fnclex
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jge 0x4a87e8
push 0x94
push 0x418f28
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x5b8], eax
jmp 0x4a87f2
mov dword [ebp - 0x5b8], 0
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x47
cmp dword [0x4b73f4], 0
jne 0x4a882a
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5bc], 0x4b73f4
jmp 0x4a8834
mov dword [ebp - 0x5bc], 0x4b73f4
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5bc]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x2fc]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x2a4], eax
push 0xffffffffffffffff
mov edx, dword [ebp - 0x2a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x2a4]
push ecx
call dword [eax + 0x9c]
fnclex
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jge 0x4a88af
push 0x9c
push 0x417950
mov edx, dword [ebp - 0x2a4]
push edx
mov eax, dword [ebp - 0x2a8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x5c0], eax
jmp 0x4a88b9
mov dword [ebp - 0x5c0], 0
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x48
cmp dword [0x4b73f4], 0
jne 0x4a88f1
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5c4], 0x4b73f4
jmp 0x4a88fb
mov dword [ebp - 0x5c4], 0x4b73f4
mov ecx, dword [ebp - 0x5c4]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5c4]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x2fc]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
mov dword [ebp - 0x2a4], eax
mov dword [ebp - 0x268], 0x4b720c
mov dword [ebp - 0x270], 0x4002
push 0x41ae40
lea edx, [ebp - 0x270]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcStrFromVar]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x1f0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
push 0x41ae54
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov edx, eax
lea ecx, [ebp - 0x1f4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x2a4]
push edx
call dword [ecx + 0x54]
fnclex
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jge 0x4a89d2
push 0x54
push 0x417950
mov eax, dword [ebp - 0x2a4]
push eax
mov ecx, dword [ebp - 0x2a8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaHresultCheckObj]
mov dword [ebp - 0x5c8], eax
jmp 0x4a89dc
mov dword [ebp - 0x5c8], 0
lea edx, [ebp - 0x1f4]
push edx
lea eax, [ebp - 0x1f0]
push eax
lea ecx, [ebp - 0x1ec]
push ecx
push 3
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0x10
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x49
mov dword [ebp - 0x268], 0x4b720e
mov dword [ebp - 0x270], 0x4002
lea edx, [ebp - 0x270]
push edx
call fcn.004a6000
jmp 0x4ad3d1
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x20c], 2
lea eax, [ebp - 0x20c]
push eax
call fcn.004ad6f0
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x4d
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x330]
push ecx
lea edx, [ebp - 0x320]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x504], eax
jmp 0x4a9266
mov dword [ebp - 4], 0x4e
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x4f
mov ecx, 0xeb
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, 0x90
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1f0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x20c], 8
lea edx, [ebp - 0x20c]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f0]
push ecx
lea edx, [ebp - 0x1ec]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x50
lea eax, [ebp - 0x128]
push eax
lea ecx, [ebp - 0x260]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea edx, [ebp - 0x260]
push edx
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0x51
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x270], 0x2011
cmp dword [0x4b7010], 0
jne 0x4a8c0a
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5cc], 0x4b7010
jmp 0x4a8c14
mov dword [ebp - 0x5cc], 0x4b7010
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 0x19
mov edx, dword [ebp - 0x5cc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x5cc]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x374]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x52
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fstp dword [ebp - 0x190]
mov dword [ebp - 4], 0x54
cmp dword [0x4b7010], 0
jne 0x4a8cbe
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5d0], 0x4b7010
jmp 0x4a8cc8
mov dword [ebp - 0x5d0], 0x4b7010
push 0
push 0xc
mov eax, dword [ebp - 0x5d0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x5d0]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
xor edx, edx
cmp ax, 2
setge dl
neg edx
mov word [ebp - 0x2a4], dx
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx eax, word [ebp - 0x2a4]
test eax, eax
je 0x4a8d6f
mov dword [ebp - 4], 0x55
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4a8dbb
mov dword [ebp - 4], 0x58
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fsub dword [ebp - 0x190]
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fabs
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fstp dword [ebp - 0x5d4]
fld dword [ebp - 0x5d4]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [0x404d4c]
fnstsw ax
test ah, 0x41
jne 0x4a8c92
mov dword [ebp - 4], 0x59
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 0x8002
lea ecx, [ebp - 0x1e4]
push ecx
lea edx, [ebp - 0x270]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx eax, ax
test eax, eax
je 0x4a9241
mov dword [ebp - 4], 0x5a
cmp dword [0x4b7010], 0
jne 0x4a8e21
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x5d8], 0x4b7010
jmp 0x4a8e2b
mov dword [ebp - 0x5d8], 0x4b7010
push 0
push 0x1a
mov ecx, dword [ebp - 0x5d8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x5d8]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x374]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x5b
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x260]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea edx, [ebp - 0x260]
push edx
lea eax, [ebp - 0x1e8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0x5c
mov edx, 0x417b9c
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x5d
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x21c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x350]
push ecx
lea edx, [ebp - 0x340]
push edx
lea eax, [ebp - 0x18c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x508], eax
jmp 0x4a908d
mov dword [ebp - 4], 0x5e
mov ecx, dword [ebp - 0x140]
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x270], 8
cmp dword [ebp - 0x1e8], 0
je 0x4a8fee
mov edx, dword [ebp - 0x1e8]
cmp word [edx], 1
jne 0x4a8fee
lea eax, [ebp - 0x18c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x1e8]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x2a4]
cmp eax, dword [edx + 0x10]
jae 0x4a8fd4
mov dword [ebp - 0x5dc], 0
jmp 0x4a8fe0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5dc], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x5e0], ecx
jmp 0x4a8ffa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5e0], eax
mov edx, dword [ebp - 0x1e8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x5e0]
xor edx, edx
mov dl, byte [eax + ecx]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromChar]
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x5f
lea eax, [ebp - 0x350]
push eax
lea ecx, [ebp - 0x340]
push ecx
lea edx, [ebp - 0x18c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0
jne 0x4a8f69
mov dword [ebp - 4], 0x60
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea eax, [ebp - 0x20c]
push eax
push 1
mov ecx, dword [ebp - 0x140]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov word [ebp - 0x278], ax
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x61
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
push 2
mov eax, dword [ebp - 0x140]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov word [ebp - 0x278], ax
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x62
mov dword [ebp - 0x268], 0xeb
mov dword [ebp - 0x270], 0x8002
mov dword [ebp - 0x278], 0x98
mov dword [ebp - 0x280], 0x8002
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
movsx edx, ax
test edx, edx
je 0x4a9241
mov dword [ebp - 4], 0x63
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4a9273
mov dword [ebp - 4], 0x67
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x320]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
jne 0x4a8ae2
mov dword [ebp - 4], 0x68
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
movsx edx, ax
test edx, edx
je 0x4a9399
mov dword [ebp - 4], 0x69
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41ae60
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x6a
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
call fcn.004ad6f0
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4ad3d1
mov dword [ebp - 4], 0x6d
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x6e
mov dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a93ec
mov dword [ebp - 0x5e4], 0
jmp 0x4a93f8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71dc]
mov word [ecx + eax*2], 0x64
mov dword [ebp - 4], 0x6f
mov dword [ebp - 0x2a4], 1
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a9433
mov dword [ebp - 0x5e8], 0
jmp 0x4a943f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5e8], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov cx, word [0x4b7228]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x70
mov dword [ebp - 0x2a4], 2
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a947e
mov dword [ebp - 0x5ec], 0
jmp 0x4a948a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5ec], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov cx, word [0x4b722a]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x71
mov dword [ebp - 0x2a4], 3
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a94c9
mov dword [ebp - 0x5f0], 0
jmp 0x4a94d5
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5f0], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov cx, word [0x4b722c]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x72
mov dword [ebp - 0x2a4], 4
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a9514
mov dword [ebp - 0x5f4], 0
jmp 0x4a9520
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5f4], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov cx, word [0x4b722e]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x73
mov dword [ebp - 0x2a4], 5
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a955f
mov dword [ebp - 0x5f8], 0
jmp 0x4a956b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5f8], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov word [eax + edx*2], 0
mov dword [ebp - 4], 0x74
mov dword [ebp - 0x2a4], 6
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a95a5
mov dword [ebp - 0x5fc], 0
jmp 0x4a95b1
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x5fc], eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov ax, word [0x4b7246]
mov word [edx + ecx*2], ax
mov dword [ebp - 4], 0x75
call dword [sym.imp.MSVBVM60.DLL_rtcGetDateBstr]
mov edx, eax
lea ecx, [ebp - 0x168]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x76
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimeBstr]
mov edx, eax
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
mov dword [ebp - 4], 0x77
mov dword [ebp - 0x204], 2
mov dword [ebp - 0x20c], 2
mov dword [ebp - 0x2a4], 7
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a963a
mov dword [ebp - 0x600], 0
jmp 0x4a9646
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x600], eax
lea ecx, [ebp - 0x20c]
push ecx
push 3
mov edx, dword [ebp - 0x168]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov word [edx + ecx*2], ax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x78
mov dword [ebp - 0x204], 2
mov dword [ebp - 0x20c], 2
mov dword [ebp - 0x2a4], 8
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a96dc
mov dword [ebp - 0x604], 0
jmp 0x4a96e8
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x604], eax
lea eax, [ebp - 0x20c]
push eax
push 6
mov ecx, dword [ebp - 0x168]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71dc]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x79
mov dword [ebp - 0x204], 2
mov dword [ebp - 0x20c], 2
mov dword [ebp - 0x2a4], 9
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a977e
mov dword [ebp - 0x608], 0
jmp 0x4a978a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x608], eax
lea edx, [ebp - 0x20c]
push edx
push 9
mov eax, dword [ebp - 0x168]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov word [edx + ecx*2], ax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x7a
mov dword [ebp - 0x204], 2
mov dword [ebp - 0x20c], 2
mov dword [ebp - 0x2a4], 0xa
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a9820
mov dword [ebp - 0x60c], 0
jmp 0x4a982c
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x60c], eax
lea eax, [ebp - 0x20c]
push eax
push 1
mov ecx, dword [ebp - 0x1d4]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71dc]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x7b
mov dword [ebp - 0x204], 2
mov dword [ebp - 0x20c], 2
mov dword [ebp - 0x2a4], 0xb
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a98c2
mov dword [ebp - 0x610], 0
jmp 0x4a98ce
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x610], eax
lea edx, [ebp - 0x20c]
push edx
push 4
mov eax, dword [ebp - 0x1d4]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcR8ValFromBstr]
call dword [sym.imp.MSVBVM60.DLL___vbaFpI2]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov word [edx + ecx*2], ax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x7c
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x3f
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0xc
mov dword [ebp - 0x290], 2
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x370]
push eax
lea ecx, [ebp - 0x360]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x50c], eax
jmp 0x4a9a11
mov dword [ebp - 4], 0x7d
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4a99ce
mov dword [ebp - 0x614], 0
jmp 0x4a99da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x614], eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov word [edx + ecx*2], 0
mov dword [ebp - 4], 0x7e
lea eax, [ebp - 0x370]
push eax
lea ecx, [ebp - 0x360]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x50c], 0
jne 0x4a999f
mov dword [ebp - 4], 0x7f
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0x8002
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x280]
call dword [sym.imp.MSVBVM60.DLL___vbaVarVargNofree]
push eax
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
movsx ecx, ax
test ecx, ecx
je 0x4ab96a
mov dword [ebp - 4], 0x80
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x270], 0xb
cmp dword [0x4b73f4], 0
jne 0x4a9a9d
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x618], 0x4b73f4
jmp 0x4a9aa7
mov dword [ebp - 0x618], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 0x80010007
mov edx, dword [ebp - 0x618]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x618]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x81
mov dword [ebp - 0x268], 0x44480000
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a9b55
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x61c], 0x4b73f4
jmp 0x4a9b5f
mov dword [ebp - 0x61c], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 1
mov eax, dword [ebp - 0x61c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x61c]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x344]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x82
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a9c0a
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x620], 0x4b73f4
jmp 0x4a9c14
mov dword [ebp - 0x620], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 2
mov ecx, dword [ebp - 0x620]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x620]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x83
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a9cbf
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x624], 0x4b73f4
jmp 0x4a9cc9
mov dword [ebp - 0x624], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 5
mov edx, dword [ebp - 0x624]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x624]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x84
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x31f
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x380]
push ecx
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x510], eax
jmp 0x4ab821
mov dword [ebp - 4], 0x85
mov dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 4
jae 0x4a9dd8
mov dword [ebp - 0x628], 0
jmp 0x4a9de4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x628], eax
lea eax, [ebp - 0x1d0]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x321
jae 0x4a9e0f
mov dword [ebp - 0x62c], 0
jmp 0x4a9e1b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x62c], eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [ebp - 0x2a8]
lea eax, [edx + ecx*4]
mov ecx, dword [0x4b711c]
cmp dword [ecx + eax*4], 0
je 0x4ab7f9
mov dword [ebp - 4], 0x86
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x268]
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4a9e83
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x630], 0x4b73f4
jmp 0x4a9e8d
mov dword [ebp - 0x630], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 5
mov eax, dword [ebp - 0x630]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x630]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x344]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x87
lea edx, [ebp - 0x1d0]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0x88
mov dword [ebp - 0x268], 0x1f4
mov dword [ebp - 0x270], 0x8002
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x270]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGt]
movsx eax, ax
test eax, eax
je 0x4aa0b3
mov dword [ebp - 4], 0x89
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41ae84
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x21c]
push eax
push 0
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x8a
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0xb
cmp dword [0x4b7010], 0
jne 0x4aa039
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x634], 0x4b7010
jmp 0x4aa043
mov dword [ebp - 0x634], 0x4b7010
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 0x14
mov eax, dword [ebp - 0x634]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x634]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
jmp 0x4ad3d1
mov dword [ebp - 4], 0x8d
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x8e
mov dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 4
jae 0x4aa117
mov dword [ebp - 0x638], 0
jmp 0x4aa123
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x638], eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x321
jae 0x4aa14b
mov dword [ebp - 0x63c], 0
jmp 0x4aa157
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x63c], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a8]
lea ecx, [eax + edx*4]
mov edx, dword [0x4b711c]
mov eax, dword [edx + ecx*4]
mov dword [0x4b7210], eax
mov dword [ebp - 4], 0x8f
mov dword [ebp - 0x2a8], 1
cmp dword [ebp - 0x2a8], 4
jae 0x4aa19a
mov dword [ebp - 0x640], 0
jmp 0x4aa1a6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x640], eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x321
jae 0x4aa1ce
mov dword [ebp - 0x644], 0
jmp 0x4aa1da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x644], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a8]
lea ecx, [eax + edx*4]
mov edx, dword [0x4b711c]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 3
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x90
mov dword [ebp - 0x2a8], 2
cmp dword [ebp - 0x2a8], 4
jae 0x4aa23a
mov dword [ebp - 0x648], 0
jmp 0x4aa246
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x648], eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x321
jae 0x4aa26e
mov dword [ebp - 0x64c], 0
jmp 0x4aa27a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x64c], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a8]
lea ecx, [eax + edx*4]
mov edx, dword [0x4b711c]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 3
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1c0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x91
mov dword [ebp - 0x2a8], 3
cmp dword [ebp - 0x2a8], 4
jae 0x4aa2da
mov dword [ebp - 0x650], 0
jmp 0x4aa2e6
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x650], eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x321
jae 0x4aa30e
mov dword [ebp - 0x654], 0
jmp 0x4aa31a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x654], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [ebp - 0x2a8]
lea ecx, [eax + edx*4]
mov edx, dword [0x4b711c]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 3
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x13c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x92
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0xc0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0x93
mov eax, dword [0x4b7210]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 3
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1b0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x94
mov eax, dword [0x4b7210]
cdq
mov ecx, 0x2710
idiv ecx
mov dword [0x4b7210], edx
mov dword [ebp - 4], 0x95
mov eax, dword [0x4b7210]
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 3
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1a0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x96
mov eax, dword [0x4b7210]
cdq
mov ecx, 0x64
idiv ecx
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x270], 3
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x17c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x97
mov dword [ebp - 0x268], 0x40
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4aa47e
mov dword [ebp - 0x658], 0
jmp 0x4aa48a
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x658], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov cx, word [0x4b723c]
mov word [eax + edx*2], cx
mov dword [ebp - 4], 0x98
mov dword [ebp - 0x268], 0x40
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4aa521
mov dword [ebp - 0x65c], 0
jmp 0x4aa52d
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x65c], eax
lea ecx, [ebp - 0x1b0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71dc]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x99
mov dword [ebp - 0x268], 0x40
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4aa5d7
mov dword [ebp - 0x660], 0
jmp 0x4aa5e3
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x660], eax
lea ecx, [ebp - 0x1a0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71dc]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x9a
mov dword [ebp - 0x268], 0x40
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 3
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4aa68d
mov dword [ebp - 0x664], 0
jmp 0x4aa699
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x664], eax
lea ecx, [ebp - 0x17c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71dc]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x9b
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x95
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x3b0]
push edx
lea eax, [ebp - 0x3a0]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x514], eax
jmp 0x4aa7d9
mov dword [ebp - 4], 0x9c
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x97
jae 0x4aa76c
mov dword [ebp - 0x668], 0
jmp 0x4aa778
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x2a4]
mov ecx, dword [0x4b7164]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x270], 0x8003
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x164]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx edx, ax
test edx, edx
je 0x4aa7b4
jmp 0x4aa7e6
mov dword [ebp - 4], 0x9f
lea eax, [ebp - 0x3b0]
push eax
lea ecx, [ebp - 0x3a0]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
jne 0x4aa73d
mov dword [ebp - 4], 0xa0
mov dword [ebp - 0x268], 0x320
mov dword [ebp - 0x270], 2
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xa1
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x95
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x280]
push ecx
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x3d0]
push eax
lea ecx, [ebp - 0x3c0]
push ecx
lea edx, [ebp - 0x50]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x518], eax
jmp 0x4aa93e
mov dword [ebp - 4], 0xa2
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x97
jae 0x4aa8d1
mov dword [ebp - 0x66c], 0
jmp 0x4aa8dd
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x66c], eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b7180]
mov eax, dword [edx + ecx*4]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 0x8003
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x1c0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx eax, ax
test eax, eax
je 0x4aa919
jmp 0x4aa94b
mov dword [ebp - 4], 0xa5
lea ecx, [ebp - 0x3d0]
push ecx
lea edx, [ebp - 0x3c0]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x518], 0
jne 0x4aa8a2
mov dword [ebp - 4], 0xa6
mov dword [ebp - 0x268], 0x320
mov dword [ebp - 0x270], 2
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xa7
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x31
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x290]
push eax
lea ecx, [ebp - 0x3f0]
push ecx
lea edx, [ebp - 0x3e0]
push edx
lea eax, [ebp - 0x50]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x51c], eax
jmp 0x4aaa9f
mov dword [ebp - 4], 0xa8
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x33
jae 0x4aaa33
mov dword [ebp - 0x670], 0
jmp 0x4aaa3f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x670], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b719c]
mov ecx, dword [eax + edx*4]
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x270], 0x8003
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x13c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx ecx, ax
test ecx, ecx
je 0x4aaa7a
jmp 0x4aaaac
mov dword [ebp - 4], 0xab
lea edx, [ebp - 0x3f0]
push edx
lea eax, [ebp - 0x3e0]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x51c], eax
cmp dword [ebp - 0x51c], 0
jne 0x4aaa07
mov dword [ebp - 4], 0xac
mov dword [ebp - 0x268], 0x3b6
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xad
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 4
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x18c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x520], eax
jmp 0x4ab7ec
mov dword [ebp - 4], 0xae
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x430]
push edx
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x524], eax
jmp 0x4ab58c
mov dword [ebp - 4], 0xaf
mov dword [ebp - 0x268], 3
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xb0
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x440]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0xb1
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x280], 0x8002
mov dword [ebp - 0x268], 5
mov dword [ebp - 0x270], 0x8002
lea ecx, [ebp - 0x440]
push ecx
lea edx, [ebp - 0x280]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGe]
movsx esi, ax
neg esi
sbb esi, esi
inc esi
lea eax, [ebp - 0x440]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLe]
movsx edx, ax
neg edx
sbb edx, edx
inc edx
or esi, edx
test esi, esi
jne 0x4aad18
mov dword [ebp - 4], 0xb2
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0xb3
mov dword [ebp - 0x268], 4
mov dword [ebp - 0x270], 2
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4aafdb
mov dword [ebp - 4], 0xb4
mov dword [ebp - 0x278], 6
mov dword [ebp - 0x280], 0x8002
mov dword [ebp - 0x268], 7
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x440]
push eax
lea ecx, [ebp - 0x280]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGe]
movsx esi, ax
neg esi
sbb esi, esi
inc esi
lea edx, [ebp - 0x440]
push edx
lea eax, [ebp - 0x270]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLe]
movsx ecx, ax
neg ecx
sbb ecx, ecx
inc ecx
or esi, ecx
test esi, esi
jne 0x4aade1
mov dword [ebp - 4], 0xb5
lea edx, [ebp - 0xf8]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0xb6
mov dword [ebp - 0x268], 5
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x60]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4aafdb
mov dword [ebp - 4], 0xb7
mov dword [ebp - 0x278], 8
mov dword [ebp - 0x280], 0x8002
mov dword [ebp - 0x268], 0xa
mov dword [ebp - 0x270], 0x8002
lea edx, [ebp - 0x440]
push edx
lea eax, [ebp - 0x280]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGe]
movsx esi, ax
neg esi
sbb esi, esi
inc esi
lea ecx, [ebp - 0x440]
push ecx
lea edx, [ebp - 0x270]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLe]
movsx eax, ax
neg eax
sbb eax, eax
inc eax
or esi, eax
test esi, esi
jne 0x4aaeaa
mov dword [ebp - 4], 0xb8
lea edx, [ebp - 0x118]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0xb9
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 2
lea ecx, [ebp - 0x60]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4aafdb
mov dword [ebp - 4], 0xba
mov dword [ebp - 0x278], 0xb
mov dword [ebp - 0x280], 0x8002
mov dword [ebp - 0x268], 0xc
mov dword [ebp - 0x270], 0x8002
lea ecx, [ebp - 0x440]
push ecx
lea edx, [ebp - 0x280]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstGe]
movsx esi, ax
neg esi
sbb esi, esi
inc esi
lea eax, [ebp - 0x440]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstLe]
movsx edx, ax
neg edx
sbb edx, edx
inc edx
or esi, edx
test esi, esi
jne 0x4aaf70
mov dword [ebp - 4], 0xbb
lea edx, [ebp - 0xb0]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarCopy]
mov dword [ebp - 4], 0xbc
mov dword [ebp - 0x268], 0xa
mov dword [ebp - 0x270], 2
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4aafdb
mov dword [ebp - 4], 0xbe
mov dword [ebp - 0x268], 0x3e8
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xbf
mov dword [ebp - 0x268], 0xd
mov dword [ebp - 0x270], 2
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
mov edx, eax
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xc1
mov eax, dword [0x4b7238]
push eax
push 1
push 0xffffffffffffffff
push 0x20
call dword [sym.imp.MSVBVM60.DLL___vbaFileOpen]
mov dword [ebp - 4], 0xc2
mov dword [ebp - 0x268], 0x30
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 4
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x290], 2
push 1
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea ecx, [ebp - 0x12c]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaGet4]
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x22c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0xc3
mov dword [ebp - 0x268], 0x30
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 4
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 3
mov dword [ebp - 0x290], 2
push 1
lea ecx, [ebp - 0x50]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0x90]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
push eax
lea ecx, [ebp - 0x154]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaGet4]
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x22c]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0xc4
push 1
call dword [sym.imp.MSVBVM60.DLL___vbaFileClose]
mov dword [ebp - 4], 0xc5
movsx ecx, word [ebp - 0x12c]
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 4], 0xc6
cmp dword [ebp - 0x16c], 0
jge 0x4ab1de
mov dword [ebp - 4], 0xc7
mov edx, dword [ebp - 0x16c]
add edx, 0x10000
jo 0x4ad6db
mov dword [ebp - 0x16c], edx
mov dword [ebp - 4], 0xc9
mov dword [ebp - 0x268], 4
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x280], 2
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x65
jae 0x4ab25c
mov dword [ebp - 0x674], 0
jmp 0x4ab268
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x674], eax
mov ecx, dword [ebp - 0x16c]
and ecx, 0x800000ff
jns 0x4ab27e
dec ecx
or ecx, 0xffffff00
inc ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71c0]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xca
mov eax, dword [ebp - 0x16c]
cdq
and edx, 0xff
add eax, edx
sar eax, 8
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0xcb
mov dword [ebp - 0x268], 4
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 3
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x65
jae 0x4ab33d
mov dword [ebp - 0x678], 0
jmp 0x4ab349
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x678], eax
mov ecx, dword [ebp - 0x16c]
and ecx, 0x800000ff
jns 0x4ab35f
dec ecx
or ecx, 0xffffff00
inc ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71c0]
mov word [edx + ecx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xcc
movsx eax, word [ebp - 0x154]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0xcd
cmp dword [ebp - 0x16c], 0
jge 0x4ab3c4
mov dword [ebp - 4], 0xce
mov ecx, dword [ebp - 0x16c]
add ecx, 0x10000
jo 0x4ad6db
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 4], 0xd0
mov dword [ebp - 0x268], 4
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 4
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x65
jae 0x4ab442
mov dword [ebp - 0x67c], 0
jmp 0x4ab44e
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x67c], eax
mov ecx, dword [ebp - 0x16c]
and ecx, 0x800000ff
jns 0x4ab464
dec ecx
or ecx, 0xffffff00
inc ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71c0]
mov word [edx + ecx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xd1
mov eax, dword [ebp - 0x16c]
cdq
and edx, 0xff
add eax, edx
sar eax, 8
mov dword [ebp - 0x16c], eax
mov dword [ebp - 4], 0xd2
mov dword [ebp - 0x268], 4
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 5
mov dword [ebp - 0x280], 2
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x65
jae 0x4ab523
mov dword [ebp - 0x680], 0
jmp 0x4ab52f
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x680], eax
mov ecx, dword [ebp - 0x16c]
and ecx, 0x800000ff
jns 0x4ab545
dec ecx
or ecx, 0xffffff00
inc ecx
call dword [sym.imp.MSVBVM60.DLL___vbaI2I4]
mov edx, dword [ebp - 0x2a4]
mov ecx, dword [0x4b71c0]
mov word [ecx + edx*2], ax
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xd3
lea edx, [ebp - 0x430]
push edx
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0
jne 0x4aabe6
mov dword [ebp - 4], 0xd4
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0xb
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x460]
push edx
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x528], eax
jmp 0x4ab7b7
mov dword [ebp - 4], 0xd5
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x65
jae 0x4ab669
mov dword [ebp - 0x684], 0
jmp 0x4ab675
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x278], 0x40
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 4
mov dword [ebp - 0x290], 2
mov dword [ebp - 0x298], 0xc
mov dword [ebp - 0x2a0], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
lea ecx, [ebp - 0x18c]
push ecx
lea edx, [ebp - 0x2a0]
push edx
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea ecx, [ebp - 0x24c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
lea edx, [ebp - 0x80]
push edx
lea eax, [ebp - 0x25c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4ab73f
mov dword [ebp - 0x688], 0
jmp 0x4ab74b
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x688], eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov eax, dword [ebp - 0x2a8]
mov esi, dword [0x4b71c0]
mov ax, word [esi + eax*2]
mov word [edx + ecx*2], ax
lea ecx, [ebp - 0x25c]
push ecx
lea edx, [ebp - 0x24c]
push edx
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0xd6
lea edx, [ebp - 0x460]
push edx
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x80]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x528], eax
cmp dword [ebp - 0x528], 0
jne 0x4ab614
mov dword [ebp - 4], 0xd7
lea edx, [ebp - 0x410]
push edx
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x18c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x520], eax
cmp dword [ebp - 0x520], 0
jne 0x4aab6b
mov dword [ebp - 4], 0xd9
lea edx, [ebp - 0x390]
push edx
lea eax, [ebp - 0x380]
push eax
lea ecx, [ebp - 0x1d0]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x510], eax
cmp dword [ebp - 0x510], 0
jne 0x4a9db2
mov dword [ebp - 4], 0xda
cmp dword [0x4b73f4], 0
jne 0x4ab85a
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x68c], 0x4b73f4
jmp 0x4ab864
mov dword [ebp - 0x68c], 0x4b73f4
push 0
push 1
mov edx, dword [ebp - 0x68c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x68c]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x268]
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4ab8dc
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x690], 0x4b73f4
jmp 0x4ab8e6
mov dword [ebp - 0x690], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 5
mov ecx, dword [ebp - 0x690]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x690]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1fc]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea edx, [ebp - 0x1fc]
push edx
lea eax, [ebp - 0x1f8]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xdc
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4ab9aa
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x694], 0x4b73f4
jmp 0x4ab9b4
mov dword [ebp - 0x694], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 5
mov ecx, dword [ebp - 0x694]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x694]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xdd
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x30]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x278]
mov dword [ebp - 0x280], 4
cmp dword [0x4b73f4], 0
jne 0x4aba8e
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x698], 0x4b73f4
jmp 0x4aba98
mov dword [ebp - 0x698], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x280]
mov dword [edx], eax
mov ecx, dword [ebp - 0x27c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x278]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x274]
mov dword [edx + 0xc], ecx
push 1
mov edx, dword [ebp - 0x698]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x698]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xde
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x280], 2
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x30]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x470]
push ecx
lea edx, [ebp - 0x18c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x52c], eax
jmp 0x4ac887
mov dword [ebp - 4], 0xdf
lea eax, [ebp - 0x18c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x268]
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4abbbf
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x69c], 0x4b73f4
jmp 0x4abbc9
mov dword [ebp - 0x69c], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 5
mov ecx, dword [ebp - 0x69c]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x69c]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xe0
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xe1
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x3f
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x290]
push ecx
lea edx, [ebp - 0x4a0]
push edx
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x530], eax
jmp 0x4abf79
mov dword [ebp - 4], 0xe2
mov dword [ebp - 0x268], 0x40
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x18c]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea edx, [ebp - 0x50]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4abd49
mov dword [ebp - 0x6a0], 0
jmp 0x4abd55
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x6a0], eax
mov ecx, dword [ebp - 0x2a4]
mov edx, dword [0x4b71dc]
mov cx, word [edx + ecx*2]
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x22c], 8
lea edx, [ebp - 0x22c]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xe3
lea eax, [ebp - 0xa0]
push eax
lea ecx, [ebp - 0x260]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea edx, [ebp - 0x260]
push edx
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0xe4
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x268], ecx
mov dword [ebp - 0x270], 0x2011
cmp dword [0x4b7010], 0
jne 0x4abe11
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6a4], 0x4b7010
jmp 0x4abe1b
mov dword [ebp - 0x6a4], 0x4b7010
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 0x19
mov edx, dword [ebp - 0x6a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6a4]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x374]
push eax
lea edx, [ebp - 0x1f8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xe5
mov dword [ebp - 0x268], 0x40
mov dword [ebp - 0x270], 2
lea eax, [ebp - 0x18c]
push eax
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMul]
push eax
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x7ff9
jae 0x4abef3
mov dword [ebp - 0x6a8], 0
jmp 0x4abeff
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x6a8], eax
mov edx, dword [ebp - 0x2a4]
mov eax, dword [0x4b71dc]
mov cx, word [eax + edx*2]
mov word [ebp - 0x278], cx
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
mov edx, eax
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x21c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xe6
lea edx, [ebp - 0x4a0]
push edx
lea eax, [ebp - 0x490]
push eax
lea ecx, [ebp - 0x50]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x530], eax
cmp dword [ebp - 0x530], 0
jne 0x4abcdc
mov dword [ebp - 4], 0xe7
mov dword [ebp - 0x268], 0x100
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x278], 0x100
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarIdiv]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
lea edx, [ebp - 0x150]
push edx
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarMod]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaUI1Var]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1f0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x22c], 8
lea edx, [ebp - 0x22c]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x1f0]
push edx
lea eax, [ebp - 0x1ec]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0xe8
lea ecx, [ebp - 0xa0]
push ecx
lea edx, [ebp - 0x260]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0xe9
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x270], 0x2011
cmp dword [0x4b7010], 0
jne 0x4ac0d7
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6ac], 0x4b7010
jmp 0x4ac0e1
mov dword [ebp - 0x6ac], 0x4b7010
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 0x19
mov eax, dword [ebp - 0x6ac]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6ac]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xea
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fstp dword [ebp - 0x190]
mov dword [ebp - 4], 0xeb
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xed
cmp dword [0x4b7010], 0
jne 0x4ac1b8
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6b0], 0x4b7010
jmp 0x4ac1c2
mov dword [ebp - 0x6b0], 0x4b7010
push 0
push 0xc
mov ecx, dword [ebp - 0x6b0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6b0]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x374]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
xor ecx, ecx
cmp ax, 2
setge cl
neg ecx
mov word [ebp - 0x2a4], cx
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0x2a4]
test edx, edx
je 0x4ac269
mov dword [ebp - 4], 0xee
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4ac2b5
mov dword [ebp - 4], 0xf1
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fsub dword [ebp - 0x190]
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fabs
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fstp dword [ebp - 0x6b4]
fld dword [ebp - 0x6b4]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [0x404d4c]
fnstsw ax
test ah, 0x41
jne 0x4ac18c
mov dword [ebp - 4], 0xf2
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx edx, ax
test edx, edx
je 0x4ac739
mov dword [ebp - 4], 0xf3
cmp dword [0x4b7010], 0
jne 0x4ac31b
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6b8], 0x4b7010
jmp 0x4ac325
mov dword [ebp - 0x6b8], 0x4b7010
push 0
push 0x1a
mov eax, dword [ebp - 0x6b8]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6b8]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0xf4
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea ecx, [ebp - 0x260]
push ecx
lea edx, [ebp - 0x1e8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0xf5
mov edx, 0x417b9c
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0xf6
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x4c0]
push eax
lea ecx, [ebp - 0x4b0]
push ecx
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x534], eax
jmp 0x4ac587
mov dword [ebp - 4], 0xf7
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 8
cmp dword [ebp - 0x1e8], 0
je 0x4ac4e8
mov ecx, dword [ebp - 0x1e8]
cmp word [ecx], 1
jne 0x4ac4e8
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x1e8]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x2a4]
cmp eax, dword [edx + 0x10]
jae 0x4ac4ce
mov dword [ebp - 0x6bc], 0
jmp 0x4ac4da
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x6bc], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x6c0], ecx
jmp 0x4ac4f4
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x6c0], eax
mov edx, dword [ebp - 0x1e8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x6c0]
xor edx, edx
mov dl, byte [eax + ecx]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromChar]
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0xf8
lea eax, [ebp - 0x4c0]
push eax
lea ecx, [ebp - 0x4b0]
push ecx
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0
jne 0x4ac463
mov dword [ebp - 4], 0xf9
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea eax, [ebp - 0x20c]
push eax
push 1
mov ecx, dword [ebp - 0x140]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov word [ebp - 0x278], ax
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xfa
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
push 2
mov eax, dword [ebp - 0x140]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov word [ebp - 0x278], ax
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0xfb
mov dword [ebp - 0x268], 0xeb
mov dword [ebp - 0x270], 0x8002
mov dword [ebp - 0x278], 0x99
mov dword [ebp - 0x280], 0x8002
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
movsx edx, ax
test edx, edx
je 0x4ac739
mov dword [ebp - 4], 0xfc
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0xff
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
movsx edx, ax
test edx, edx
je 0x4ac85f
mov dword [ebp - 4], 0x100
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41aeb4
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x101
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
call fcn.004ad6f0
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
jmp 0x4ad3d1
mov dword [ebp - 4], 0x104
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x470]
push ecx
lea edx, [ebp - 0x18c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 0
jne 0x4abb76
mov dword [ebp - 4], 0x105
cmp dword [0x4b73f4], 0
jne 0x4ac8c0
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6c4], 0x4b73f4
jmp 0x4ac8ca
mov dword [ebp - 0x6c4], 0x4b73f4
push 0
push 1
mov eax, dword [ebp - 0x6c4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6c4]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x344]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaR4Var]
fstp dword [ebp - 0x268]
mov dword [ebp - 0x270], 4
cmp dword [0x4b73f4], 0
jne 0x4ac942
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6c8], 0x4b73f4
jmp 0x4ac94c
mov dword [ebp - 0x6c8], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov edx, esp
mov eax, dword [ebp - 0x270]
mov dword [edx], eax
mov ecx, dword [ebp - 0x26c]
mov dword [edx + 4], ecx
mov eax, dword [ebp - 0x268]
mov dword [edx + 8], eax
mov ecx, dword [ebp - 0x264]
mov dword [edx + 0xc], ecx
push 5
mov edx, dword [ebp - 0x6c8]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x6c8]
mov edx, dword [ecx]
mov ecx, dword [edx]
push eax
call dword [ecx + 0x344]
push eax
lea edx, [ebp - 0x1fc]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea eax, [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObjList]
add esp, 0xc
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x106
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x107
mov ecx, 0xeb
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
mov ecx, 0x91
call dword [sym.imp.MSVBVM60.DLL___vbaUI1I2]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcBstrFromByte]
mov edx, eax
lea ecx, [ebp - 0x1f0]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrCat]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x20c], 8
lea edx, [ebp - 0x20c]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea edx, [ebp - 0x1f0]
push edx
lea eax, [ebp - 0x1ec]
push eax
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStrList]
add esp, 0xc
mov dword [ebp - 4], 0x108
lea ecx, [ebp - 0xd0]
push ecx
lea edx, [ebp - 0x260]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea eax, [ebp - 0x260]
push eax
lea ecx, [ebp - 0xe4]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0x109
mov edx, dword [ebp - 0xe4]
mov dword [ebp - 0x268], edx
mov dword [ebp - 0x270], 0x2011
cmp dword [0x4b7010], 0
jne 0x4acaf8
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6cc], 0x4b7010
jmp 0x4acb02
mov dword [ebp - 0x6cc], 0x4b7010
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov eax, esp
mov ecx, dword [ebp - 0x270]
mov dword [eax], ecx
mov edx, dword [ebp - 0x26c]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x268]
mov dword [eax + 8], ecx
mov edx, dword [ebp - 0x264]
mov dword [eax + 0xc], edx
push 0x19
mov eax, dword [ebp - 0x6cc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6cc]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x10a
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fstp dword [ebp - 0xe8]
mov dword [ebp - 4], 0x10c
cmp dword [0x4b7010], 0
jne 0x4acbac
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6d0], 0x4b7010
jmp 0x4acbb6
mov dword [ebp - 0x6d0], 0x4b7010
push 0
push 0xc
mov ecx, dword [ebp - 0x6d0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6d0]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x374]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaI2Var]
xor ecx, ecx
cmp ax, 2
setge cl
neg ecx
mov word [ebp - 0x2a4], cx
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
movsx edx, word [ebp - 0x2a4]
test edx, edx
je 0x4acc5d
mov dword [ebp - 4], 0x10d
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
jmp 0x4accbb
mov dword [ebp - 4], 0x110
call dword [sym.imp.MSVBVM60.DLL_rtcGetTimer]
fsub dword [ebp - 0xe8]
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fabs
fnstsw ax
test al, 0xd
jne 0x4ad6d6
fstp dword [ebp - 0x6d4]
fld dword [ebp - 0x6d4]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fstp dword [ebp - 0x6d8]
fld dword [0x404d50]
call dword [sym.imp.MSVBVM60.DLL___vbaFpR4]
fcomp dword [ebp - 0x6d8]
fnstsw ax
test ah, 1
je 0x4acb80
mov dword [ebp - 4], 0x111
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstEq]
movsx edx, ax
test edx, edx
je 0x4ad13f
mov dword [ebp - 4], 0x112
cmp dword [0x4b7010], 0
jne 0x4acd21
push 0x4b7010
push 0x40d090
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6dc], 0x4b7010
jmp 0x4acd2b
mov dword [ebp - 0x6dc], 0x4b7010
push 0
push 0x1a
mov eax, dword [ebp - 0x6dc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x6dc]
mov eax, dword [edx]
mov edx, dword [eax]
push ecx
call dword [edx + 0x374]
push eax
lea eax, [ebp - 0x1f8]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
lea ecx, [ebp - 0x20c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdCallLd]
add esp, 0x10
mov edx, eax
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x113
lea edx, [ebp - 0xe0]
push edx
lea eax, [ebp - 0x260]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVar2Vec]
lea ecx, [ebp - 0x260]
push ecx
lea edx, [ebp - 0x1e8]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaAryMove]
mov dword [ebp - 4], 0x114
mov edx, 0x417b9c
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrCopy]
mov dword [ebp - 4], 0x115
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x280], 2
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x270], 2
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x290], 2
lea eax, [ebp - 0x280]
push eax
lea ecx, [ebp - 0xe0]
push ecx
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaLenVarB]
push eax
lea eax, [ebp - 0x270]
push eax
lea ecx, [ebp - 0x21c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarSub]
push eax
lea edx, [ebp - 0x290]
push edx
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x4d0]
push ecx
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForInit]
mov dword [ebp - 0x538], eax
jmp 0x4acf8d
mov dword [ebp - 4], 0x116
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x270], 8
cmp dword [ebp - 0x1e8], 0
je 0x4aceee
mov ecx, dword [ebp - 0x1e8]
cmp word [ecx], 1
jne 0x4aceee
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaI4Var]
mov ecx, dword [ebp - 0x1e8]
sub eax, dword [ecx + 0x14]
mov dword [ebp - 0x2a4], eax
mov edx, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x2a4]
cmp eax, dword [edx + 0x10]
jae 0x4aced4
mov dword [ebp - 0x6e0], 0
jmp 0x4acee0
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0x6e4], ecx
jmp 0x4acefa
call dword [sym.imp.MSVBVM60.DLL___vbaGenerateBoundsError]
mov dword [ebp - 0x6e4], eax
mov edx, dword [ebp - 0x1e8]
mov eax, dword [edx + 0xc]
mov ecx, dword [ebp - 0x6e4]
xor edx, edx
mov dl, byte [eax + ecx]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcVarBstrFromChar]
lea ecx, [ebp - 0x270]
push ecx
lea edx, [ebp - 0x20c]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarAdd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaStrVarMove]
mov edx, eax
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
lea ecx, [ebp - 0x21c]
push ecx
lea edx, [ebp - 0x20c]
push edx
push 2
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0xc
mov dword [ebp - 4], 0x117
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x4d0]
push ecx
lea edx, [ebp - 0x1d0]
push edx
call dword [sym.imp.MSVBVM60.DLL___vbaVarForNext]
mov dword [ebp - 0x538], eax
cmp dword [ebp - 0x538], 0
jne 0x4ace69
mov dword [ebp - 4], 0x118
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea eax, [ebp - 0x20c]
push eax
push 1
mov ecx, dword [ebp - 0x140]
push ecx
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov word [ebp - 0x278], ax
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x119
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
push 2
mov eax, dword [ebp - 0x140]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMidCharBstr]
mov edx, eax
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaStrMove]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcCharValueBstr]
mov word [ebp - 0x278], ax
mov dword [ebp - 0x280], 2
lea edx, [ebp - 0x280]
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
lea ecx, [ebp - 0x1ec]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
mov dword [ebp - 4], 0x11a
mov dword [ebp - 0x268], 0xeb
mov dword [ebp - 0x270], 0x8002
mov dword [ebp - 0x278], 0x9a
mov dword [ebp - 0x280], 0x8002
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x270]
push edx
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x280]
push edx
lea eax, [ebp - 0x21c]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaVarCmpEq]
push eax
lea ecx, [ebp - 0x22c]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarAnd]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaBoolVarNull]
movsx edx, ax
test edx, edx
je 0x4ad13f
mov dword [ebp - 4], 0x11b
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 2
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaVarMove]
mov dword [ebp - 4], 0x11e
mov dword [ebp - 0x268], 2
mov dword [ebp - 0x270], 0x8002
lea eax, [ebp - 0x1e4]
push eax
lea ecx, [ebp - 0x270]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaVarTstNe]
movsx edx, ax
test edx, edx
je 0x4ad232
mov dword [ebp - 4], 0x11f
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41aed0
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
push 0
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea ecx, [ebp - 0x23c]
push ecx
lea edx, [ebp - 0x22c]
push edx
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x20c]
push ecx
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
jmp 0x4ad39e
mov dword [ebp - 4], 0x121
mov dword [ebp - 0x234], 0x80020004
mov dword [ebp - 0x23c], 0xa
mov dword [ebp - 0x224], 0x80020004
mov dword [ebp - 0x22c], 0xa
mov dword [ebp - 0x214], 0x80020004
mov dword [ebp - 0x21c], 0xa
mov dword [ebp - 0x268], 0x41aeec
mov dword [ebp - 0x270], 8
lea edx, [ebp - 0x270]
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaVarDup]
lea edx, [ebp - 0x23c]
push edx
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x21c]
push ecx
push 0
lea edx, [ebp - 0x20c]
push edx
call dword [sym.imp.MSVBVM60.DLL_rtcMsgBox]
lea eax, [ebp - 0x23c]
push eax
lea ecx, [ebp - 0x22c]
push ecx
lea edx, [ebp - 0x21c]
push edx
lea eax, [ebp - 0x20c]
push eax
push 4
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x14
mov dword [ebp - 4], 0x122
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x270], 0xb
cmp dword [0x4b73f4], 0
jne 0x4ad326
push 0x4b73f4
push 0x40b708
call dword [sym.imp.MSVBVM60.DLL___vbaNew2]
mov dword [ebp - 0x6e8], 0x4b73f4
jmp 0x4ad330
mov dword [ebp - 0x6e8], 0x4b73f4
mov eax, 0x10
call sub.MSVBVM60.DLL___vbaChkstk
mov ecx, esp
mov edx, dword [ebp - 0x270]
mov dword [ecx], edx
mov eax, dword [ebp - 0x26c]
mov dword [ecx + 4], eax
mov edx, dword [ebp - 0x268]
mov dword [ecx + 8], edx
mov eax, dword [ebp - 0x264]
mov dword [ecx + 0xc], eax
push 0x80010007
mov ecx, dword [ebp - 0x6e8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x6e8]
mov ecx, dword [eax]
mov eax, dword [ecx]
push edx
call dword [eax + 0x344]
push eax
lea ecx, [ebp - 0x1f8]
push ecx
call dword [sym.imp.MSVBVM60.DLL___vbaObjSet]
push eax
call dword [sym.imp.MSVBVM60.DLL___vbaLateIdSt]
lea ecx, [ebp - 0x1f8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeObj]
mov dword [ebp - 4], 0x124
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x20c], 2
lea edx, [ebp - 0x20c]
push edx
call fcn.004ad6f0
lea ecx, [ebp - 0x20c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
wait
push 0x4ad6c3
jmp 0x4ad457
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x4d0]
push ecx
lea edx, [ebp - 0x4c0]
push edx
lea eax, [ebp - 0x4b0]
push eax
lea ecx, [ebp - 0x4a0]
push ecx
lea edx, [ebp - 0x490]
push edx
lea eax, [ebp - 0x480]
push eax
lea ecx, [ebp - 0x470]
push ecx
lea edx, [ebp - 0x460]
push edx
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0x440]
push ecx
lea edx, [ebp - 0x430]
push edx
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x410]
push ecx
lea edx, [ebp - 0x400]
push edx
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3e0]
push ecx
lea edx, [ebp - 0x3d0]
push edx
lea eax, [ebp - 0x3c0]
push eax
lea ecx, [ebp - 0x3b0]
push ecx
lea edx, [ebp - 0x3a0]
push edx
lea eax, [ebp - 0x390]
push eax
lea ecx, [ebp - 0x380]
push ecx
lea edx, [ebp - 0x370]
push edx
lea eax, [ebp - 0x360]
push eax
lea ecx, [ebp - 0x350]
push ecx
lea edx, [ebp - 0x340]
push edx
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x320]
push ecx
lea edx, [ebp - 0x310]
push edx
lea eax, [ebp - 0x300]
push eax
lea ecx, [ebp - 0x2f0]
push ecx
lea edx, [ebp - 0x2e0]
push edx
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x2c0]
push ecx
push 0x23
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVarList]
add esp, 0x90
lea ecx, [ebp - 0x30]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x40]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x50]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x60]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x70]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x80]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x90]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xa0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xb0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xc0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xd0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0xe0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea edx, [ebp - 0xe4]
push edx
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
lea ecx, [ebp - 0xf8]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x108]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x118]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x13c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x140]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x150]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x164]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x168]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x17c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x18c]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x1a0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x1b0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x1c0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x1d0]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea ecx, [ebp - 0x1d4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeStr]
lea ecx, [ebp - 0x1e4]
call dword [sym.imp.MSVBVM60.DLL___vbaFreeVar]
lea eax, [ebp - 0x1e8]
push eax
push 0
call dword [sym.imp.MSVBVM60.DLL___vbaAryDestruct]
ret
jmp 0x40538c
call dword [sym.imp.MSVBVM60.DLL___vbaErrorOverflow]
int3